xecuting program 2:
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x40, 0x0)
ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000000c0))
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xb, 0x3, &(0x7f0000008000)=ANY=[@ANYBLOB="850000a7b020940007000000000000009502100000000000"], &(0x7f00000003c0)='syzka\x00\x00\x00\x05\x00\xf3', 0x7fff, 0x1000, &(0x7f0000014000)=""/4096}, 0x48)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x0, 0x1e, 0x0, &(0x7f0000000340)="e460cdfba82170742307070088ca2d702738fd8c51deef479f8ce57d456e", 0x0}, 0x28)

20:20:28 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x400, 0x0, 0x3})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x400})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'syzkaller1\x00', 0x400})

20:20:28 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000000000005, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080))
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0xfff})
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xffe5)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000100)={0x0, 0x0, 0x1ff, 0x1f, 0xc, 0x9, 0x2f9a, 0xfff, 0x40, 0x4, 0xda87, 0x7f})
ioctl$TCSETSF(r1, 0x5412, &(0x7f00000000c0)={0x0, 0x0, 0x6})

20:20:28 executing program 0:
openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000040000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
getdents(r1, &(0x7f0000000200)=""/141, 0x113)
symlinkat(&(0x7f0000000000)='./file0\x00', r1, &(0x7f00000000c0)='./file0/../file0\x00')
sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xfffffffffffffedd)
r2 = socket$inet6(0xa, 0x0, 0x2)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, &(0x7f0000000380), &(0x7f00000003c0)=0x4)
setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000002c0)={0x100, {{0x2, 0x4e23, @empty}}}, 0x88)

20:20:28 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000100)={0xfffffffffffffff8, {{0xa, 0x4e22, 0x2, @loopback, 0x400}}, {{0xa, 0x4e23, 0x7f, @empty, 0x6}}}, 0x108)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040))
ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000080)=0xfff)

20:20:29 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

20:20:29 executing program 3:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = accept4(r1, 0x0, &(0x7f0000000040), 0x80800)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00')
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x2100, 0x0)
r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x62480, 0x0)
r6 = fcntl$dupfd(r1, 0x406, r0)
recvmmsg(r1, &(0x7f0000005a80)=[{{&(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, <r7=>0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000240)=""/148, 0x94}, {&(0x7f0000000300)=""/117, 0x75}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/46, 0x2e}, {&(0x7f00000003c0)=""/211, 0xd3}], 0x5, &(0x7f0000001580)=""/204, 0xcc}, 0x6}, {{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/197, 0xc5}, {&(0x7f0000003780)=""/86, 0x56}, {&(0x7f0000003800)=""/229, 0xe5}], 0x5, &(0x7f0000003980)=""/85, 0x55}, 0x9}, {{&(0x7f0000003a00)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000003d40)=[{&(0x7f0000003a80)=""/110, 0x6e}, {&(0x7f0000003b00)=""/126, 0x7e}, {&(0x7f0000003b80)=""/249, 0xf9}, {&(0x7f0000003c80)=""/164, 0xa4}], 0x4, &(0x7f0000003d80)=""/234, 0xea}, 0xda7}, {{&(0x7f0000003e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000004040)=[{&(0x7f0000003f00)=""/235, 0xeb}, {&(0x7f0000004000)=""/46, 0x2e}], 0x2, &(0x7f0000004080)=""/93, 0x5d}, 0x2}, {{&(0x7f0000004100)=@l2, 0x80, &(0x7f00000042c0)=[{&(0x7f0000004180)=""/211, 0xd3}, {&(0x7f0000004280)=""/30, 0x1e}], 0x2, &(0x7f0000004300)=""/72, 0x48}, 0x3ff}, {{&(0x7f0000004380)=@alg, 0x80, &(0x7f00000054c0)=[{&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/4096, 0x1000}], 0x2, &(0x7f0000005500)=""/195, 0xc3}, 0x1ff}, {{&(0x7f0000005600)=@ethernet, 0x80, &(0x7f0000005680), 0x0, &(0x7f00000056c0)=""/26, 0x1a}, 0x100000001}, {{&(0x7f0000005700)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000005980)=[{&(0x7f0000005780)=""/226, 0xe2}, {&(0x7f0000005880)=""/240, 0xf0}], 0x2, &(0x7f00000059c0)=""/175, 0xaf}, 0x7}], 0x8, 0x100, &(0x7f0000005c80)={0x77359400})
r8 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000005cc0)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
socketpair(0xb, 0x4, 0x165, &(0x7f0000005d00)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005d40)={<r10=>0xffffffffffffffff})
r11 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000005d80)='/selinux/mls\x00', 0x0, 0x0)
r12 = dup(r1)
r13 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000005f40)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000006080)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000006040)={&(0x7f0000005f80)={0xa0, r3, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3}, @NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r0}]}, @NBD_ATTR_SOCKETS={0x4c, 0x7, [{0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}, {0x8, 0x1, r11}, {0x8, 0x1, r0}, {0x8, 0x1, r12}, {0x8, 0x1, r13}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0xa0}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000)
ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070")
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000004c0)={{0x3}})

20:20:29 executing program 1:
mprotect(&(0x7f00004ab000/0x1000)=nil, 0x1000, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0xd6, 0x20, &(0x7f0000000140)="3458584618cdf7b98d454b54aa63b598f506b9648b8b27efb8dda07fdd4be41ee15f4bd98a52679f83a155ccced50650282cd10feb04f145a77e82335c04e32312196ba5cad7d49b8db57c5a231ee643992b62f4d376fb8c02e9b41d6f1ea56a0b99d97f23d530ff6d286ffb76b1cbd1d44bfd1af92f5a11213f7bc64e20c7d4d856b1e66d335ffedae48800090ea44181b1f602456b3b72a68f09a2c0528e5224190885638e4be24a75d75dd50cb84741ed231cb20669f3b79875ed5bfea4a809a0431f01150bbac639e0611ec28068bde42719b363", &(0x7f0000000080)=""/32, 0x7f}, 0x28)
ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000100))
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x40000, 0x0)
fcntl$notify(r1, 0x402, 0x80000032)

20:20:29 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\xf8r0\x01\x00', 0xa000})
prctl$PR_SET_TIMERSLACK(0x1d, 0x200)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x400})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'syzkaller1\x00', 0x400})

20:20:29 executing program 2:
r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff)
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000000c0)=@get={0x1, &(0x7f00000002c0)=""/4096, 0xffffffff00000000})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4)
ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)={0x2, 0x8, 0x5})
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = dup2(r1, r1)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = gettid()
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10)
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x3c)
fcntl$setstatus(r1, 0x4, 0x42803)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10000032, 0xffffffffffffffff, 0x0)

20:20:29 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000040))
r1 = socket$inet(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000980)={0x2, 0x1}, 0x10)
syz_emit_ethernet(0x423, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0)
recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)=[{0x0}, {&(0x7f0000000c00)=""/4096, 0x1000}], 0x2}, 0x0)

[  237.536719] binder: release 6325:6338 transaction 195 out, still active
20:20:29 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_aout(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x5d8, 0x0)
close(r1)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x400})
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x2)
ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000000100))
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'syzkaller1\x00', 0x400})
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x100, 0x0)
ioctl$VT_GETMODE(r4, 0x5601, &(0x7f0000000080))
r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00')
sendmsg$FOU_CMD_GET(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x54, r5, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_TYPE={0x8, 0x4, 0x4e755f7533e969fe}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0xdf}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)

20:20:29 executing program 1:
creat(&(0x7f0000000000)='./bus\x00', 0x0)
r0 = open(&(0x7f0000000400)='./bus\x00', 0x400, 0x4000000)
syz_genetlink_get_family_id$tipc2(0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)

[  237.584989] binder: 6378:6384 ioctl c018620b 0 returned -14
20:20:29 executing program 1:
socket$inet6(0xa, 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
clone(0x1004100, &(0x7f0000000840)="8ed93231cc2c6b265dda41030e1a47c3359431d8403e6435ed459bc964af02f50ad390c022c2179e4e89d1b1cd64ee1d63545c2f6649be5ef44e75817cf5ba231d64729ce1d3e1d520f2318a47038a4f9d44f15a6b283144808661cd3dc5e2f16fcd597eea370c3f399f1669bf29935948a699ac32d80c531d44a769e1af1779555c3f8a830138d4", &(0x7f0000000480), &(0x7f0000000540), &(0x7f00000009c0)="51a7d1e5cfda6de6e9cc5752855ed661ff450ef8d88e30c722a0313de691ca3e7deaf7cee7ac8aad5442a01049da6f60a0fcea7c777f371d25d7730d715b5d809984c229dba60cbde133fca5a757ca1faa7956d0c39a24b3776a271fea126a367348d5ee023489aa2059723167fbc712f976105a5c1a23a70eba125a331651ec88172a29f002a14c7752de2ba788ad81268a6160b6d0f7751dbc5f3868a4a37927c695a7db9441ead3795e82f98b12523c68add5")
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)})
r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80)='TIPCv2\x00')
pause()
sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000780)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff68000100080003000000000044000400200001000a0067240000000fff020007000000000000000000000001bc0700003000020000000000000000aa02000000100001007500400000000000000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x3, 0x3ff})
fallocate(r0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

[  237.643711] binder: 6378:6398 BC_ACQUIRE_DONE node 199 has no pending acquire request
20:20:29 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r1 = dup(r0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x400})
ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000040)=0x8001)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'syzkaller1\x00', 0x400})

20:20:29 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0xa0002, 0x0)
fdatasync(r0)
r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x584c07d9, &(0x7f0000000980), 0x100000000000008a, 0x0, 0xfffffffffffffe03}, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00')
getdents(r2, &(0x7f0000000440)=""/46, 0x2e)
r3 = socket$inet6(0xa, 0x13, 0x30000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f0000c04000/0x2000)=nil, 0x2000, &(0x7f0000000480)=""/4096)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f000064b000/0x3000)=nil)
munlockall()
r4 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000000380), &(0x7f00000015c0)=0x40)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r5 = socket(0xa, 0x1, 0x0)
write$P9_RFLUSH(r2, 0x0, 0xffffffffffffffce)
accept4$packet(r5, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001600)=0x14, 0x80000)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001680)={'lo\x00\x00\x00\x00\x00\x00\x00\xf7\x00\x00\x00\x00\xed\x1f', <r7=>r6})
ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000000280)={0x7, 0x2})
ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000080)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, @mcast2, 0xf5d, 0x4, 0x0, 0x0, 0x0, 0x20000, r7})
fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000300))
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000002c0)={@remote, 0x7e, r7})
ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000180)={@mcast2, @mcast1, @loopback, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffb8fa, 0x83420004, r7})
getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f00000014c0)=""/205, &(0x7f0000000100)=0xfffffffffffffc87)
syz_mount_image$vfat(&(0x7f0000000340)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0xfffffffffffffffc, 0x1, &(0x7f0000001e40)=[{&(0x7f0000001d40)="24eec73d9aed3525509f34f91858b4b108fb20da5198dcacf4f2992a4f8e30c24911d81f05a0a7ea44d481f0d9ef80f923b02acfdb808a534e0020b8146975f0cb1e3c05c2307998eb0824a0870589fc25b705d801b28aef469542b26201b32ac35f1c8211fc0ef35b284cc2d2c253786392adbbd816b0c14affea4b54acaf66a9810189cd263dff17c179dff6650131c01efb4587e4162dc35caa5342f9977eca3bbe6065430c7251093e276f876e31f1e4fabbd28ecb8bb4c9c6dee0d8619109bc3e076957214bbbcbb761d592ec1979866037", 0xd4, 0x3}], 0x2, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0xfab, 0x0, 0x3, 0x2, 0xffffffffffffff9c, 0x7}, 0x2c)
ioctl(r8, 0x3, &(0x7f0000001980))
r9 = syz_open_dev$evdev(&(0x7f0000001900)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSMASK(r9, 0x40104593, &(0x7f0000001480)={0x1e, 0x0, 0x0})

20:20:29 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x24000, 0x0)
ioctl$TCXONC(r1, 0x540a, 0x58b)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x4)
ioctl$TIOCLINUX6(r2, 0x541c, &(0x7f0000000100)={0x6, 0x800})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x400})
r3 = fcntl$dupfd(r0, 0x406, r0)
ioctl$TIOCMBIC(r3, 0x5417, &(0x7f0000000040)=0x48800)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x20})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'syzkaller1\x00', 0x400})
fsync(r0)

20:20:30 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

20:20:30 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x6, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
getsockname(r0, &(0x7f0000000140)=@caif=@util, &(0x7f00000001c0)=0x80)
getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0x325)
r1 = dup3(r0, r0, 0x80000)
getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x20, &(0x7f0000000640)={@broadcast, @empty, <r2=>0x0}, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000300)={0x2, 'yam0\x00', 0x2}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0x4, &(0x7f0000000400)=@raw=[@generic={0x7, 0x3ff, 0x7, 0x800, 0x3}, @generic={0x0, 0x0, 0x100, 0x29, 0x5}, @map={0x18, 0x8, 0x1, 0x0, r1}], &(0x7f0000000440)='syzkaller\x00', 0x400, 0x0, 0x0, 0x41000, 0x1, [], r2, 0x3}, 0x48)
ioctl$sock_ifreq(r0, 0x893c, &(0x7f0000000200)={'tunl0\x00', @ifru_hwaddr=@local})
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, &(0x7f0000000340))

20:20:30 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x400})
pread64(r0, &(0x7f00000000c0)=""/190, 0xbe, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'syz]aller1\x00?\x00', 0x400})

20:20:30 executing program 3:
perf_event_open(&(0x7f0000000740)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000380)='./file0\x00', 0x0)
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000040)={0x2, 0x8})
mount(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)

20:20:30 executing program 2:
r0 = timerfd_create(0x5, 0x0)
timerfd_gettime(r0, &(0x7f0000000040))

[  238.383917] binder: release 6378:6384 transaction 198 out, still active
[  238.394663] binder: unexpected work type, 4, not freed
[  238.405663] binder: undelivered TRANSACTION_COMPLETE
[  238.416525] binder: 6442:6448 ioctl c018620b 0 returned -14
20:20:30 executing program 0:
syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0)
r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
sched_setaffinity(0x0, 0x5, &(0x7f0000000280)=0x9)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(r1, &(0x7f0000001380)=[{&(0x7f0000000300)=""/148, 0x94}], 0x1, 0x0)
faccessat(r0, 0x0, 0xfffffffffffffffc, 0x1000)
r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='limits\x00')
preadv(r2, &(0x7f0000000480), 0x1000000000000237, 0x0)
r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getitimer(0x1, &(0x7f0000000100))
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000002c0))
r4 = open(0x0, 0x0, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000006500)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0)
fcntl$getown(r3, 0x9)
ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)=<r5=>0x0)
r6 = syz_open_procfs(r5, 0x0)
execveat(r6, &(0x7f0000006740)='./file0\x00', &(0x7f0000006880)=[&(0x7f0000006780)='limits\x00', 0x0, 0x0], &(0x7f0000006980)=[&(0x7f00000068c0)='/selinux/avc/cache_threshold\x00', &(0x7f0000006900)='\x00'], 0x0)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r4, &(0x7f0000000180))
syz_genetlink_get_family_id$net_dm(&(0x7f0000000140)='NET_DM\x00')

20:20:30 executing program 3:
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x1000004032, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x375)
connect$inet6(r0, &(0x7f0000000000), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000100)=[@window={0x3, 0x4, 0xfc0}, @timestamp, @window={0x3, 0x5, 0x8a}, @window={0x3, 0x7fffffff, 0x80000000}, @timestamp, @mss={0x2, 0x7}, @mss={0x2, 0x80}], 0x7)
r2 = socket$unix(0x1, 0x1, 0x0)
socket$unix(0x1, 0x2000000000000001, 0x0)
perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x859, 0x2, 0x5, 0x4, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
listen(r1, 0x6)
r3 = fcntl$dupfd(r2, 0x406, r1)
perf_event_open(&(0x7f00000003c0)={0x3, 0xffdd, 0x85a, 0x7, 0x0, 0x0, 0x0, 0x0, 0x200, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
iopl(0x3)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
rename(0x0, 0x0)
bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e23, @rand_addr=0xef}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f00000001c0)={0x2, 0x4000000004e23}, 0x10)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000140)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x243)
getsockopt$SO_COOKIE(r4, 0x1, 0x39, &(0x7f0000000180), 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00')
getsockname$unix(r3, &(0x7f0000000440)=@abs, &(0x7f0000000040)=0x6e)
sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="32002cbd70000f3acbf131cbd35d24de50c925fedbdf250a0000002000060004000200080aa26c6d0005000600000008000100c50c000008bc0100ff0304001c0005f9659b3900657468"], 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
shutdown(r4, 0x40000000000001)
ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000080))

20:20:30 executing program 2:
r0 = socket$inet(0x2, 0x80004, 0x100000003)
clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = dup(r0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r2, 0x7, 0x2}, 0x14)
ptrace$poke(0x5, r1, &(0x7f0000000140), 0x2)
getpeername$inet(r2, &(0x7f0000000040)={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x10)
wait4(0x0, 0x0, 0x40000008, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x80010, r2, 0x0)
prlimit64(r1, 0x7, 0x0, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x2a)
ptrace$cont(0x18, r1, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31})
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x21, r1, 0x0, 0xfffffffffffffffd)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, <r3=>0x0}, &(0x7f00000001c0)=0xc)
getgroups(0x1, &(0x7f0000000200)=[<r4=>0xffffffffffffffff])
getgroups(0x8, &(0x7f0000000240)=[0xee00, 0xffffffffffffffff, 0xee00, 0xee00, <r5=>0x0, 0xee00, 0xee01, 0x0])
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, <r6=>0x0}, &(0x7f00000002c0)=0xc)
r7 = getgid()
r8 = getegid()
r9 = getgid()
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000340)=0xc)
getgroups(0x8, &(0x7f0000000380)=[r3, r4, r5, r6, r7, r8, r9, r10])

[  238.474053] binder: 6442:6457 BC_ACQUIRE_DONE node 202 has no pending acquire request
20:20:30 executing program 1:
clone(0x3102001ff2, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x9, 0x121002)
ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000040))
select(0x0, 0x0, 0x0, 0x0, 0x0)

20:20:30 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

20:20:30 executing program 2:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x4003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setrlimit(0x7, &(0x7f0000000000))
r0 = socket$key(0xf, 0x3, 0x2)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x3}})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0x50, &(0x7f00000000c0)}, 0x10)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)
r1 = accept4(r0, &(0x7f00000001c0)=@tipc=@id, &(0x7f0000000240)=0x80, 0x80800)
ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f00000002c0)=""/10)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000280)={0x7ca, 0x7}, 0x4)
r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000140)='/dev/keychord\x00', 0x240200, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000180))

20:20:30 executing program 0:
clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0)
r1 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000000))
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x2f)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="f93ed7a35cf45491ea000000000000000455b6900746c1bf0f80d2c74d5f0e3c00000022d300000065552f4de6b8cc74f02789a1d683"], 0x39)
ptrace$cont(0x18, r0, 0x0, 0x7)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0))
ptrace$cont(0x7, r0, 0x0, 0x0)

20:20:30 executing program 1:
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="af4ab80c849ef0251ce08eddef76305d130fac87eb14e311bbe5a71f1e1714f9d01688c8a25ee7b98f8b560871c15e1f375585d5760e6501fe2b3dd46b0212318fe537ac4509ef272851fc750974e99f8c56ced45ce9565c073726347bb58f235160c604c034d06bafae7e33c14fc9c15f508339c4381b3871828884236e60d73586e979b2c9a69aa976051ffe1b3b083ee7130e82ca2195fa84c5d13b7a18183e6ba0ecc611"], 0x1)
fallocate(r2, 0x0, 0x40000, 0xfff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x0, 0x0, 0x10fffe)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x8})
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
mknod$loop(0x0, 0x0, 0xffffffffffffffff)
connect$unix(0xffffffffffffffff, &(0x7f0000000480)=@file={0x0, './file1\x00'}, 0x6e)

20:20:30 executing program 3:
clone(0x2302001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000240)=<r0=>0x0)
getpriority(0x0, r0)
r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0)
ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000100))
r2 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x800, 0x0)
ioctl$FICLONE(r3, 0x40049409, r1)
openat(r3, &(0x7f0000000000)='./file0\x00', 0x402, 0x31)
r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x80, 0x0)
ioctl$sock_SIOCSPGRP(r1, 0x8902, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@loopback}, 0x0, @in=@loopback}}, &(0x7f00000003c0)=0xe8)
quotactl(0x5, &(0x7f0000000280)='./file0\x00', r5, &(0x7f0000000400)="d3e009b54e9032a20dd1612b7e687f6c44b8a57d075663432be1f9ddaf0747a3b78c21c05e442c22633dd490f86cc366bc6ae081cb444b74b7c919fbfae02d751f4a58c2f9208d0b85e13c25e3125d4ae88dcb432eb939f00fde8b176011c14078b03e4830aaceea106132b210dc06c3e82089a0ac130ffbcc4c5ba4b81d8cc9034253e8a5e6de7a5f91776064126b7be36a8da7dc32f6612136c1e055d5ec21c4800ae1f3778eb8693c569544969098f48b0607")
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x26)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r2, 0xffff, 0x3ff)
ptrace$cont(0x1f, r2, 0x0, 0x0)
ptrace$setregs(0xffffffffffffffff, r2, 0x4, &(0x7f0000000140)="44bff645d2de7534e4064c3124a48554c2a97a37eb8b071eccec633898e9c48fffe6b1fe52080a3c1d1b2880b1312257a720aa74dea9935d375d90f6bb13ad170280d4e3f82fe729fe9bc67cb14de956ebe178242711c0031b117b89b06301924a1ec59baf1331ee1eb75dde8f3ff5bcebc58b7bc4e5bcab2cab9c99215b4a7b594be12b772fe32f9aae457310e4077c73d3590bdbf6700256d259308c77c747e4eff6a7e62e2ee073f2b5b90284e184cf56182dd28360c83a4124040486f750c1f5b0ebf2b27bf976")
ptrace$setopts(0x4206, r2, 0x7, 0x100010)

[  238.585497] binder: 6482:6492 ioctl c018620b 0 returned -14
[  238.638631] binder: 6482:6508 BC_ACQUIRE_DONE node 205 has no pending acquire request
20:20:31 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x501000, 0x0)
ioctl$TIOCSTI(r1, 0x5412, 0x9886fdc)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x400})
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x280, 0x0)
ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f00000000c0)={0x9, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'syzkaller1\x00', 0x400})

20:20:31 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x100, 0x0)
mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)='posix_acl_accesswlan0keyring/nodev#*md5sumcgroup\x00')
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000140)=""/246)
mkdirat(r2, &(0x7f0000000380)='./file0\x00', 0x2c)
read(0xffffffffffffffff, 0x0, 0x0)
ioctl$TCXONC(r2, 0x540a, 0x0)
r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
ioctl$EVIOCGID(r2, 0x80084502, &(0x7f00000003c0)=""/35)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r4, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f3188b070")
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ftruncate(r5, 0x2008200)
sync()
fallocate(r5, 0x8, 0x0, 0x10000)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3)
clone(0x13102001fef, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
recvfrom$inet(r3, &(0x7f0000000700)=""/4096, 0x1000, 0x12000, &(0x7f0000001700)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, 0x0)
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000440)={{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000280)=0xe8)
getgroups(0x4, &(0x7f00000002c0)=[<r8=>0xee00, 0xee01, 0xee00, 0xffffffffffffffff])
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000000340)=0xe8)
write$P9_RSTATu(r2, &(0x7f0000000640)={0xb3, 0x7d, 0x2, {{0x0, 0x8d, 0x5, 0x4, {0x0, 0x2}, 0x0, 0x272, 0x36, 0x2, 0x15, '.]#}vmnet0\xfatrusted\'\':', 0x8, 'cgroup2\x00', 0x35, 'ppp0cgroupvmnet0/!self+cpusetwlan0vboxnet0GPL[#vmnet0', 0x8, 'cgroup2\x00'}, 0x11, 'nodevself\'em1:)(.', r7, r8, r9}}, 0xb3)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0xfffffffffffffffb, 0x20000, 0x4b58})
mkdirat(r6, 0x0, 0x1)
write(r6, &(0x7f0000000340), 0x10000014c)
ioctl$RTC_AIE_OFF(r2, 0x7002)

20:20:31 executing program 0:
r0 = socket$inet6(0xa, 0x80002, 0x0)
recvfrom(r0, &(0x7f0000000080)=""/4096, 0x1000, 0x40000000, &(0x7f0000001080)=@in={0x2, 0x4e20, @multicast1}, 0x80)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@empty}, 0x14)

20:20:31 executing program 1:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)
r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'vcan0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="05dea4b5f665b6359bffff74e2a550877ff28fc67c4011499f40d3a1d865e7504124b7bd8b88f8232b5cfd3777454367e3eb363790f5eca29c59015d4f934d1c52813b6d4729b828e1df0970fbaf4923b0d8a30798ea8f0f3d52997ad68647ae9f235f952b15b271e0489a753148feb9a63048f5aa68dfe3fe8bf94958b21fd7ef6315a2b85607e8e30fa627c9b5000000000000000000000000"]})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000240)='wchan\x00')
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
fcntl$addseals(r2, 0x409, 0x8)
pwrite64(r3, &(0x7f000003bfff)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r3, 0x0)
lseek(r2, 0x0, 0x1)
sendfile(r3, r3, &(0x7f0000000440), 0x20)
sendfile(r3, r3, &(0x7f0000000100), 0x7f8)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00')
mount(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x464186d9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000)
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000140), &(0x7f0000000180)=0x10)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0)
mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0)
mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0)

20:20:31 executing program 5:
r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0)
ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000340)=""/4096)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x400})
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'syzkaller1\x00', 0x400})

20:20:31 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x400})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'syzkaller1\x00', 0x400})
r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
setsockopt(r1, 0x80, 0x4a, &(0x7f0000000240)="764b2aa50b238da60d41560a336afa16ed21940ff4ec2ff79959e69fc904fea03f87a0a07aaeee1542a9e44d645b5409a218f9dd0890e41d3554d1534f9e1e945bda9a96b0a3724ea064c4e7360ba4059ed1fdf272fa6905139b8ac7ba02c22bbdd25283924def1fbee45f6c2eccc455c6b9413338f9220f0b2a41cb25be3def608f8e155223dd5b06d708a31051", 0x8e)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="930be67727a9cb7234ababb6ec40b54aaeb5f61d80fbafd56591c47dd4780d25a67f28b8a0ec2391973d232f65d2a4c4ad7c0721b7903b8e8d4f33709b2228cefa2163d08c5b0d7e7c4a764dbeb531a8fb0b074e05d9242299883cd1f184409576dec9a13dfdc29fd3147b0da0611ed4787c54c81b13e62279e8f9ae05e5b7b2eca986fefca73cc3c4be71fef0db1eed3ebbc86b6562c392590cab11ab6acdaafcc71eb8042a812a9ff9c9e5658cae6b8686a1a56c87bd1358c23d513a395968d235c959edddfc2d8ac16395c18ba1aaf1071a", 0xd3}], 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)

20:20:31 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

[  239.396016] binder: release 6482:6492 transaction 204 out, still active
[  239.411995] binder: unexpected work type, 4, not freed
[  239.426714] binder: undelivered TRANSACTION_COMPLETE
[  239.428123] binder: 6539:6540 ioctl c018620b 0 returned -14
20:20:31 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x400})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'syzkaller1\x00', 0x400})

20:20:31 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'ge\x1b\xcf\x00\x00\x00\xc9K\n\xe0\x00\x00t\x95\xec', 0x3ff})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'syzkaller1\x00', 0x400})

20:20:31 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'nr0\x01\x00', 0x1132})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x400})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'syzkaller1\x00', 0x400})

20:20:31 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x200})
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x200, 0x0)
connect$netlink(r1, &(0x7f0000000180)=@unspec, 0xc)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'syzkaller1\x00', 0x400})

[  240.224523] binder: release 6539:6541 transaction 207 out, still active
20:20:33 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0xff, 0x9, 0x0, 0x100000000, 0x4}, 0x14)
clone(0x10802102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, &(0x7f0000000040))

20:20:33 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000017c0)={0xffffffffffffff7d, 0x0, &(0x7f0000000000)=[@release], 0x0, 0x0, 0x0})
r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
fsetxattr$security_smack_transmute(r0, &(0x7f0000000380)='security.SMACK64TRANSMUTE\x00', &(0x7f00000003c0)='TRUE', 0x4, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00')
syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x2)
bind(r0, &(0x7f0000000300)=@x25={0x9, @null='               \x00'}, 0x80)
setsockopt$inet_mreq(r1, 0x0, 0x27, &(0x7f0000000280)={@dev={0xac, 0x14, 0x14, 0xe}, @broadcast}, 0x8)
sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10004000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r2, 0x229, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x101}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
getsockopt$inet_int(r1, 0x0, 0x3, &(0x7f0000000100), &(0x7f0000000240)=0x4)

20:20:33 executing program 1:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)
r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'vcan0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="05dea4b5f665b6359bffff74e2a550877ff28fc67c4011499f40d3a1d865e7504124b7bd8b88f8232b5cfd3777454367e3eb363790f5eca29c59015d4f934d1c52813b6d4729b828e1df0970fbaf4923b0d8a30798ea8f0f3d52997ad68647ae9f235f952b15b271e0489a753148feb9a63048f5aa68dfe3fe8bf94958b21fd7ef6315a2b85607e8e30fa627c9b5000000000000000000000000"]})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000240)='wchan\x00')
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
fcntl$addseals(r2, 0x409, 0x8)
pwrite64(r3, &(0x7f000003bfff)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r3, 0x0)
lseek(r2, 0x0, 0x1)
sendfile(r3, r3, &(0x7f0000000440), 0x20)
sendfile(r3, r3, &(0x7f0000000100), 0x7f8)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00')
mount(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x464186d9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000)
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000140), &(0x7f0000000180)=0x10)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0)
mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0)
mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0)

20:20:33 executing program 0:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000040))
pipe2$9p(&(0x7f0000000080), 0x84800)
lseek(r0, 0x0, 0x3)
exit_group(0x7)

20:20:33 executing program 2:
perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)=<r2=>0x0)
capget(&(0x7f0000000080)={0x399f1736, r2}, &(0x7f00000000c0)={0x80000001, 0x678a, 0x3, 0x5, 0x1, 0x1ff})
fcntl$dupfd(r0, 0x406, r0)
ioctl$TIOCCBRK(r1, 0x5428)
write(r1, &(0x7f0000000100), 0xfffffdbc)
r3 = getpgid(0xffffffffffffffff)
ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000000)={0x80000000, 0x8001, 0xfffffffffffffffc})
ioctl$FICLONE(r1, 0x40049409, r1)
ptrace$cont(0x7, r3, 0x1000, 0x10001)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001dc0)={{{@in6=@loopback, @in6}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000001ec0)=0xe8)
read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000000140))

20:20:33 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

20:20:33 executing program 0:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x0, 0x0)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000680)=""/190, 0xbe}], 0x1}}], 0x1, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00')
preadv(r2, &(0x7f00000017c0), 0x1d0, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYRES16=0x0], &(0x7f0000000780)=""/125, 0xffffffffffffffc7, 0xfffffffffffffe19}, 0x26a)
prctl$PR_GET_TSC(0x19, &(0x7f00000005c0))
pipe2(&(0x7f0000000180)={<r4=>0xffffffffffffffff}, 0x800)
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x2f)
timerfd_gettime(r1, &(0x7f0000000580))
setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f00000001c0)={0x16, {{0xa, 0x4e21, 0x835, @dev={0xfe, 0x80, [], 0x1b}, 0x2}}}, 0x88)
mount(&(0x7f0000000600)=@loop={'/dev/loop'}, 0x0, &(0x7f0000000680)='hfs\x00', 0x1000400, &(0x7f00000006c0)='\xa8\x00')
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={r3, 0x0, 0x0}, 0x10)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x1)
capset(0x0, 0x0)
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff)
openat$ppp(0xffffffffffffff9c, 0x0, 0x420000, 0x0)

[  241.636050] binder: 6571:6577 ioctl c018620b 0 returned -14
20:20:33 executing program 5:
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x40, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(r0, &(0x7f0000000200)=""/39, 0xde, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
dup2(r3, r3)

20:20:33 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

[  241.709254] binder: 6571:6586 BC_ACQUIRE_DONE node 211 has no pending acquire request
20:20:33 executing program 0:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x0, 0x0)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000680)=""/190, 0xbe}], 0x1}}], 0x1, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00')
preadv(r2, &(0x7f00000017c0), 0x1d0, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYRES16=0x0], &(0x7f0000000780)=""/125, 0xffffffffffffffc7, 0xfffffffffffffe19}, 0x26a)
prctl$PR_GET_TSC(0x19, &(0x7f00000005c0))
pipe2(&(0x7f0000000180)={<r4=>0xffffffffffffffff}, 0x800)
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x2f)
timerfd_gettime(r1, &(0x7f0000000580))
setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f00000001c0)={0x16, {{0xa, 0x4e21, 0x835, @dev={0xfe, 0x80, [], 0x1b}, 0x2}}}, 0x88)
mount(&(0x7f0000000600)=@loop={'/dev/loop'}, 0x0, &(0x7f0000000680)='hfs\x00', 0x1000400, &(0x7f00000006c0)='\xa8\x00')
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={r3, 0x0, 0x0}, 0x10)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x1)
capset(0x0, 0x0)
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff)
openat$ppp(0xffffffffffffff9c, 0x0, 0x420000, 0x0)

[  241.796385] binder: 6599:6600 ioctl c018620b 0 returned -14
20:20:33 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

20:20:33 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x5, 0x10000, 0x0, 0x78c8}]}, 0x10)
r1 = socket$inet6(0xa, 0x3, 0x84)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)

[  241.887836] binder: 6599:6604 BC_ACQUIRE_DONE node 214 has no pending acquire request
[  241.972528] binder: 6608:6611 ioctl c018620b 0 returned -14
20:20:33 executing program 3:
r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000001840)='/selinux/context\x00', 0x2, 0x0)
write(r0, &(0x7f0000001880)="5e0426f84a0413fe74dcc8e27c82424d26c5b9f88ccb213ede049b3084003ae28aad8e557b11f6c88422b41b4167fad8d39f8ecfa657b47bec76086bd7626617875430398f61d16aa05100f176c028511190942330bd820c4e13873a43fc090d92f52f3f022bbee692e6a1abfe482beb3e9876509527681e13cf5b348b067c730d646b4f70fffdb138f7574077b9c93f0f903c9594e7cfc90a741cc66a4e1e47c7fd739019211db10f57249c462e8e846cab309d19a7eaa98b5c1c02", 0xbc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x4000400000007, 0x1, 0xffbfffffffffffff}, 0x14}}, 0x0)

20:20:33 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000700)="2ba063fb30"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

[  242.047046] binder: 6608:6612 BC_ACQUIRE_DONE node 217 has no pending acquire request
[  242.126400] binder: 6617:6619 ioctl c018620b 0 returned -14
20:20:34 executing program 1:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)
r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'vcan0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="05dea4b5f665b6359bffff74e2a550877ff28fc67c4011499f40d3a1d865e7504124b7bd8b88f8232b5cfd3777454367e3eb363790f5eca29c59015d4f934d1c52813b6d4729b828e1df0970fbaf4923b0d8a30798ea8f0f3d52997ad68647ae9f235f952b15b271e0489a753148feb9a63048f5aa68dfe3fe8bf94958b21fd7ef6315a2b85607e8e30fa627c9b5000000000000000000000000"]})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000240)='wchan\x00')
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
fcntl$addseals(r2, 0x409, 0x8)
pwrite64(r3, &(0x7f000003bfff)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r3, 0x0)
lseek(r2, 0x0, 0x1)
sendfile(r3, r3, &(0x7f0000000440), 0x20)
sendfile(r3, r3, &(0x7f0000000100), 0x7f8)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00')
mount(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x464186d9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000)
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000140), &(0x7f0000000180)=0x10)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0)
mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0)
mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0)

20:20:34 executing program 5:
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x40, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(r0, &(0x7f0000000200)=""/39, 0xde, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
dup2(r3, r3)

20:20:34 executing program 2:
syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[], [{@func={'func', 0x3d, 'CREDS_CHECK'}}]})

20:20:34 executing program 3:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
mkdir(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r1 = open(&(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
getpeername$unix(r1, &(0x7f0000000140), &(0x7f0000000000)=0x6e)
renameat(r0, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000480)='./file1\x00')

20:20:34 executing program 0:
ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0)
write$9p(r1, &(0x7f0000000100)="8df485b93de8c4aa3c7ff47dfabc8879bb7276c26a192710e11d3fdf5745e49645f913207dac59143d8b4f039f0629e52b8f2304363cbd5f329f46349c2f085f79a662b57421e918fca076f4e09988738b", 0x51)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0xe2e4, 0x20000fff})
ioctl(r2, 0x6, &(0x7f0000000000)="aedb8435672958fbea33ee364c8d412efe7664c8d8bd94ca5e14a893728f3d390e437c0ebc9b4b447d58405e12b631fe17fe1949053fc06c47ecc8c96762cfa7d24d808c11ce2b9bf6b1ccc249555f010217ad60e512f62c47759167e60176830b6b2cd5d910824e030b7ed06b57d68a6aae0efb1a3b481d6bc8a9217c")
ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0xa23a)

20:20:34 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(0x0, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
chmod(&(0x7f0000000100)='./bus\x00', 0x1ba)
r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r1)
getpeername$unix(r1, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0xc0)
write$P9_RAUTH(r2, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14)
sendfile(r0, r2, &(0x7f0000000140)=0xfffffffffffffffc, 0x7bfffffe)
fstat(0xffffffffffffffff, 0x0)

20:20:34 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x800000018, &(0x7f0000001300)=0x7ff, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
fchmod(r0, 0x12c)

20:20:34 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0)
r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000480)=""/199)
r1 = syz_open_procfs(0x0, &(0x7f0000000580)='net/mcfilter\x00')
preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0)
preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000200)=""/236, 0xec}], 0x1, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x16401}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="f86eda74deb512d1c2bf38865184ce8a58c990feaa71ec75ca041b065d6872696d394cc93cd519d6b8934f0f2b2563100408d3676a69fb04ccd41e0b6e8c07f34a7632", @ANYRES16=r2, @ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x20000005}, 0x10)

20:20:34 executing program 3:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x8000009)
r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000740))
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgrp(0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={<r3=>0xffffffffffffffff})
r4 = openat$cgroup_ro(r1, &(0x7f0000000340)='cpuset.effective_mems\x00', 0x0, 0x0)
capget(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x3ff})
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0)
fcntl$setflags(r2, 0x2, 0x0)
r6 = dup(r5)
fsync(r2)
syncfs(r3)
ioctl$ASHMEM_SET_PROT_MASK(r6, 0x40087705, &(0x7f0000000540)={0x8})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000000c0)='syzkaller1\x00', 0xfffffffffffffdb5)
io_setup(0x20, &(0x7f0000000300)=<r7=>0x0)
io_cancel(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x8, 0x423, r6, &(0x7f00000005c0)="f2f42245d196f91a48f2b821d3442e277a43f0ca0ad8ed1b65a81f934bc9a4fdca52f744ec264514eba836b2ca9b2e580d83a0ab4e20c5f62b71ca27af042df6ea32", 0x42, 0xf, 0x0, 0x0, r6}, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000280)='tls\x00', 0x4)
ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000400)={'veth1_to_team\x00', 0x200})
setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x3, @loopback}, 0x1c)
sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$sock_int(r5, 0x1, 0x2f, &(0x7f0000000240)=0x80000200, 0x2e5)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r8 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0)
ftruncate(r8, 0x2007fff)
sendfile(r6, r8, 0x0, 0x8000fffffffe)

20:20:34 executing program 0:
r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000)
getsockname$packet(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x14)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000300)={@empty, @initdev}, 0xc)
r1 = dup3(r0, r0, 0x80400)
ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000180))
setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000000)={0x11, @multicast1, 0x4e23, 0x1, 'sh\x00', 0x1, 0x729, 0x43}, 0x2c)

20:20:34 executing program 2:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
lstat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresgid(0x0, r1, 0x0)
add_key$keyring(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00')
sendmsg$FOU_CMD_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r2, 0x426, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e20}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x2b}, @FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e20}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
setresuid(0x0, 0x0, 0x0)
setregid(0x0, 0x0)

20:20:34 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

[  242.917700] binder: release 6617:6622 transaction 219 out, still active
[  242.943723] binder: 6665:6666 ioctl c018620b 0 returned -14
20:20:34 executing program 1:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)
r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'vcan0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="05dea4b5f665b6359bffff74e2a550877ff28fc67c4011499f40d3a1d865e7504124b7bd8b88f8232b5cfd3777454367e3eb363790f5eca29c59015d4f934d1c52813b6d4729b828e1df0970fbaf4923b0d8a30798ea8f0f3d52997ad68647ae9f235f952b15b271e0489a753148feb9a63048f5aa68dfe3fe8bf94958b21fd7ef6315a2b85607e8e30fa627c9b5000000000000000000000000"]})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000240)='wchan\x00')
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
fcntl$addseals(r2, 0x409, 0x8)
pwrite64(r3, &(0x7f000003bfff)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r3, 0x0)
lseek(r2, 0x0, 0x1)
sendfile(r3, r3, &(0x7f0000000440), 0x20)
sendfile(r3, r3, &(0x7f0000000100), 0x7f8)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00')
mount(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x464186d9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000)
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000140), &(0x7f0000000180)=0x10)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0)
mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0)
mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0)

20:20:34 executing program 5:
socket$inet6(0xa, 0x80000, 0x1)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x2400, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xc}]}, 0x1c}}, 0x0)

20:20:34 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
set_robust_list(&(0x7f0000000580)={0x0, 0x9a}, 0x244)
read(r0, &(0x7f0000000200)=""/217, 0xd9)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0)
close(r1)
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20004400}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="150d030000c10000000000000000b3d582e8997e45e2ab1136211a4c02cf256bf6c925879b8c422c012fe3a3d5efec7df8a047d3c720fcd8abf635eb894ff4f6643fe85a9b6068537796532a31aca31ab28a74edf349787c3f6626dcc53d14b3cd912332c4ab4a624ebf6b1c2ba86943df4c85a0bacbff64b6f601cd726d1b7e5ae9eaf6eec7e0779019c5342973ecf84472f75e0c1db20db362490bcb4fd192eb30b9e3f9e55942"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x20004000)
r3 = socket$netlink(0x10, 0x3, 0xa)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000380)=<r4=>0x0)
get_robust_list(r4, &(0x7f0000000740)=&(0x7f0000000700)={&(0x7f0000000500)={&(0x7f00000001c0)}, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)}}, &(0x7f0000000780)=0x18)
getpgrp(0xffffffffffffffff)
sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x81808}, 0xc, &(0x7f00000003c0)={&(0x7f0000000600)={0x20, 0x17, 0x823, 0x70bd25, 0x25dfdbff, {0x12}, [@generic="690fd64fe6f84abed43b42"]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)
r5 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x100)
ioctl$LOOP_GET_STATUS(r5, 0x4c03, &(0x7f0000000640))
ftruncate(r5, 0x200004)
ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000140))
sendfile(r1, r5, 0x0, 0x8000fffffffe)

20:20:34 executing program 2:
syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x185000)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x5, 0x4)
r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x40002)
ioctl$int_out(r1, 0x5460, &(0x7f0000000000))
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x8000, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6a0a992083a523c8, 0x20810, r1, 0x0)

20:20:34 executing program 2:
r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x1004}, 0x0, 0xffffffffffffffff, r0, 0x8)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000340)="120000001200e7ef007b00005380a79a9e58", 0x2a0, 0xfffffffffffffffc, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000020c0), 0x0, 0x0, &(0x7f0000000080)={0x0, 0x989680})
r2 = syz_genetlink_get_family_id$tipc2(0x0)
sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000800}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x210, r2, 0xfb4e65bc5633c0a1, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_BEARER={0xb4, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf99b}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7ff, @remote, 0x185}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2000000000000000}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'bond_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000}]}, @TIPC_NLA_LINK={0x94, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}, @TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x48, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x4040004}, 0x20000010)
r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f0000000100))
syz_open_dev$loop(0x0, 0x0, 0x101040)

20:20:35 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x4000, 0x0)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x6, &(0x7f0000000600)=[{&(0x7f0000000200)="01407d1afe60e0671d0216cb17a9b57b30e2621a83c607a4c8f3260f669ea7c5864a5b5e976c9e186c595cec75cc9e25c3307d249b580a13007dbabcdad63eca2e8c674ea9ab2b979e1bd77e6e7c2ab6583313a879d6324a7c6d9950188f663465bae98b2d87dc6e16fa4fd7955dfded8e9d8deb2f66dec8170b5b3746b42c4183f1c9e4", 0x84, 0x401}, {&(0x7f0000000340)="8e0325c3e8f674c3964a8d7082b61a049b7df067ec841267d0c70db735039dc1f919b3512e0a31317558d6280d761661bcac941e38a51d5fe56fc8f51cd7dea236dc08418494c7465ed7a9f1eccbe344ed61808c29be398ae8111a755dc97e6a628f4949ddce224f95663e2c211ebdcb6d25f5056eb153f17db1f4caaef7f331aa23bf6086ebe8909463d13aeee7d78c6082431e215623e9c1561c2d6131d32b703445f2007c0bc384736984eccf4077e4e7585439aebf771f51ded08781bbd463198b41fea33b892a", 0xc9, 0x46d}, {&(0x7f0000000140)="1f52f3e5fe7e693517ff532ddaeaa3b081183326925fc16224823322321a60f6ff14837bc8fc03d2fb8292bf6c7168a32857b782cc3fdb9b246013368f0974ddb5df88732ea1647249aa58754f36a7b3870a19a43dcfcbf48599da0ef14aa5cd4a642ba6d857", 0x66, 0x6}, {&(0x7f0000000440)="38dcba546531a1e1d9016f1b47217e5a90d5d0f2b1507928dd1866f5df46ebb9d7e325e64de2b5b2ecb9549b78d17e48f6e078cd597f89b53ada676989821b4c0a9bcef67ba7dfea63501d2dd4d61a30267cb8fdd1a829f69b2e4720609227a5277e7b4c477f89774c684a54ef057890b36d5660db2e2e7652f90031584eca8746df4a4c5516e07a6c561be8cc65247c00e81bcbbf18a29c6991caf2ba1b2a41581b6448826c77ab052232283d0fbacb81af29fbdd77cb9230782dbc806fa8eed04023277c381ed3d30f0450", 0xcc, 0x100000000}, {&(0x7f0000000540)="a6612ef8d679b7fbde82b3babfcc10c987024960ebe0dfe2fb7004b66b0c6d7196472c193de1efd571706cee38346bd74f5a0cb62001f1ccdff0e0f8795fab1d4af14ece4b2509c998eb0d5eb699b9e825140f726a88e9acf94b8637c74b126b5f49857afa708a9e16927862aa31a7d88bb1ff0d100274e0a0e3d7f89eba079c9907c55a2b463904b279500c2fbe3d91", 0x90, 0x5}, {&(0x7f0000000080)="eb43d61407a70ba50b8109718867dea81e6e6fdb20fcb7342ffd7dc4dd90262250151937ac3ce5b9fea9085e2b6020cae0c096", 0x33, 0x100000001}], 0x80000, &(0x7f00000006c0)={[{@dots='dots'}, {@dots='dots'}, {@fat=@dmask={'dmask', 0x3d, 0xfffffffffffffff8}}, {@nodots='nodots'}, {@nodots='nodots'}], [{@obj_role={'obj_role'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@measure='measure'}]})
lchown(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0)

20:20:35 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
io_setup(0x1ff, &(0x7f0000000080))
socket$netlink(0x10, 0x3, 0x8)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x2000, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000140)=0x4)
io_setup(0x9, &(0x7f0000000100)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040)="d77128b86334eb16a6764e7fe09bec25", 0x10}])
ioctl$KDGETLED(r1, 0x4b31, &(0x7f00000001c0))

20:20:35 executing program 2:
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000000)=0x7)
write$P9_RREAD(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x134)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000040)={'veth0_to_team\x00', 0x9})
fallocate(r2, 0x0, 0x40000, 0xfff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000300)='./file0\x00', 0x112)
fallocate(r1, 0x0, 0x0, 0x10fffe)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x8})
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f00000002c0))

20:20:35 executing program 3:
openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x2002, 0x0)

20:20:35 executing program 2:
r0 = socket$inet(0x2, 0x0, 0x0)
r1 = open(0x0, 0x141042, 0x0)
r2 = syz_open_dev$loop(0x0, 0x0, 0x0)
r3 = getpgid(0x0)
fstat(r2, &(0x7f0000000180))
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000003c0)=r3, 0x12)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1)
ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fstat(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
r5 = getgid()
chown(&(0x7f00000000c0)='./file0\x00', r4, r5)
ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000200)={0x2, 0x0, 0x64c6, 0x8, 0x1, 0x100000000})
r6 = fcntl$getown(0xffffffffffffffff, 0x9)
r7 = socket$netlink(0x10, 0x3, 0x4000000000000004)
writev(r7, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1)
ptrace$setopts(0x4200, r6, 0x101, 0xc)
mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000004, 0x20030, r1, 0x3d)
chdir(&(0x7f0000000000)='./file0\x00')
fallocate(r0, 0x1, 0x6, 0x80000000)

20:20:35 executing program 5:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x3, @mcast2, 0x5}, 0xfffffffffffffd64)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x20000, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000040)=@generic={0x4a49db1dbb0a8135, 0xff, 0x4})
fallocate(r1, 0x1, 0x0, 0x10000101)
write$tun(r1, &(0x7f0000000080)={@val={0x0, 0x9d5b3eb8467ed314}, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xa, @empty, @broadcast, @broadcast, @broadcast}}, 0x20)
write$uinput_user_dev(r1, &(0x7f00000002c0)={'syz1\x00', {0x6, 0x400, 0x5e, 0x8}, 0x4e, [0x9, 0x1, 0x7, 0x3, 0x1, 0xa6, 0xff, 0x6, 0x80000000, 0x5, 0x3, 0x200, 0x8, 0xaaa, 0x0, 0x10001, 0x2e480000, 0xed6, 0x1, 0x6, 0x100000001, 0x9, 0x9, 0xffffffffffff0000, 0x8000, 0xfffffffffffffffd, 0x10001, 0x13, 0x0, 0xffff, 0x6, 0xffffffff, 0x0, 0x0, 0xffffffffffffffe0, 0x1, 0x5, 0x1f, 0xfffffffffffffc00, 0xffff, 0x6, 0x4, 0x200, 0x5, 0x4, 0x9, 0x9, 0x1, 0x181, 0x6, 0xf78, 0x7ff, 0x80, 0x9, 0x2, 0x9, 0x45, 0x1, 0xffff, 0x4, 0x7, 0x2, 0x400, 0x1], [0x3, 0x800, 0x7, 0x9, 0x8, 0x2, 0x80000000, 0xffffffffffffffff, 0x6, 0x6, 0xb19b, 0x0, 0x99d, 0x7, 0x499d, 0x0, 0x3, 0xfff, 0xffffffff, 0x1, 0x5, 0x4, 0x40, 0x7f, 0xfffffffffffffff7, 0x8, 0xfffffffffffffffa, 0x96, 0x61, 0x2, 0x97e, 0x0, 0xa, 0x20, 0x10001, 0x8, 0xffff, 0xe34, 0x0, 0x6, 0x5, 0x0, 0x3, 0xe2, 0x20, 0x5, 0x7, 0xfff, 0x40, 0x1, 0xfffffffffffffffc, 0x0, 0x7f, 0x74, 0x0, 0xbfea39e, 0x9, 0xbcc6, 0x1, 0x0, 0x4, 0x7d8, 0xd1c0, 0x9], [0xffffffffffffffae, 0x5, 0x800, 0x7fff, 0x7, 0xffffffff, 0x7, 0x7, 0x100, 0x7, 0xa9, 0x80000000, 0xffffffffffffff00, 0x2, 0x2, 0x1, 0x3, 0x0, 0xa841, 0xffff, 0x2, 0x6, 0x299b189a, 0x4, 0x6b2, 0x1, 0x100000000, 0x8000, 0x800, 0x9, 0x6, 0x100000000, 0x0, 0x6, 0x1000, 0x1f, 0x3, 0x8, 0x3, 0x8000, 0x3, 0x3, 0x1, 0x0, 0x401, 0xfffffffffffff80b, 0x2, 0x3, 0x2, 0x1, 0x1, 0x3, 0x9, 0x5, 0x8001, 0x40, 0x3, 0x100000001, 0x7, 0x9, 0x100000000, 0xfffffffffffffffd, 0x7, 0x69d], [0x80000000, 0x3d, 0xfffffffffffffff8, 0x5, 0x2, 0x1, 0xffffffff7fffffff, 0x20, 0x1, 0x7, 0x7, 0x1, 0x800, 0x7, 0x9, 0x3, 0x316, 0x7, 0x7, 0xfc46, 0x9, 0xfffffffffffffffd, 0x8000, 0x4, 0x1, 0x52c0, 0x10000, 0xffffffffffffff7f, 0x81, 0x9, 0x2, 0x7, 0x5, 0xba0, 0x100000001, 0x9, 0x5, 0x80, 0xfffffffffffffbff, 0x7, 0x8, 0x8000, 0xffffffff, 0x0, 0x7fff, 0x80000000, 0xe4, 0x0, 0x42, 0x9, 0x1, 0x6, 0x20, 0x4, 0x20, 0x3, 0xb47, 0xfffffffffffffffb, 0x577, 0x0, 0x10001, 0x9, 0xcae, 0x100]}, 0x45c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)

20:20:35 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

[  243.742960] binder: release 6665:6667 transaction 222 out, still active
[  243.780686] binder: 6728:6729 ioctl c018620b 0 returned -14
20:20:35 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a8)
socket$inet(0x2, 0x4, 0x29)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
splice(r0, 0x0, r2, 0x0, 0x10005, 0x0)

20:20:35 executing program 3:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000001c0)={0x3, 0x70, 0x3, 0x8, 0xfffffffffffffff7, 0x2, 0x0, 0x3, 0x0, 0x1, 0x6, 0x0, 0x7a0d, 0x2, 0x97, 0x0, 0x1000, 0x100000000, 0x7, 0x2, 0x5, 0x5, 0x9, 0xaa5, 0x3, 0x80000000000, 0x5, 0x5, 0x0, 0x9, 0x80000001, 0xfffffffffffffffd, 0x101, 0x6, 0x200, 0x9, 0xb475, 0x8, 0x0, 0x5, 0x5, @perf_config_ext={0x800, 0x1}, 0x140, 0x4, 0xe0c, 0x0, 0x8, 0xffffffffffffffff, 0x9})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x0, 0x0)
ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000100))
getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x54)

20:20:35 executing program 2:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000140)=""/246)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f00000002c0)=0x200)
socket$packet(0x11, 0x2, 0x300)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
perf_event_open$cgroup(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffff9, 0xc0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x8, 0x0, 0x100000000000, 0x5, 0x1000, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, @perf_config_ext, 0x1000, 0x0, 0x0, 0x4}, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, 0x0, 0x0, 0x8000, 0x0)
creat(0x0, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2819f40c0c0000000000002000000000020009004000000000412d1fbc00000003000600000000190200ee00e0000054d81458186fe8b90002000100000000000000020200044a7b030005080000000002000000e0003f010000000000fca0d9"], 0x60}}, 0x0)
exit(0x0)
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f00000000c0)={0x0, 0xfb, 0x15, 0x1, 0x10001, "9ec543894b6a114ec34481d93a03351e"}, 0x15, 0x3)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
symlink(0x0, 0x0)
ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, 0x0)
rmdir(&(0x7f0000000480)='./file0\x00')
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))

20:20:35 executing program 5:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x1})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00000e0000/0x2000)=nil, 0x2000, &(0x7f0000000380)=""/177)

20:20:35 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0)
read(r0, &(0x7f00003fefff)=""/1, 0x1)
r1 = gettid()
fcntl$getflags(r0, 0xb)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1)
ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x6)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040))
fcntl$setsig(r2, 0xa, 0x12)
poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xffffffffffbffff8)
dup2(r2, r3)
fcntl$setown(r3, 0x8, r1)
tkill(r1, 0x16)

20:20:35 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

[  243.832665] binder: 6728:6731 BC_ACQUIRE_DONE node 226 has no pending acquire request
20:20:35 executing program 5:
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000280), 0x10)
r1 = openat$keychord(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil)
fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000000)='trusted.overlay.origin\x00', 0x0, 0x0, 0x2)
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/load\x00', 0x2, 0x0)
syz_open_dev$evdev(&(0x7f0000000480)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$getown(r0, 0x9)
getpid()
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000002c0)={0xa, &(0x7f00000001c0)=[{0x7, 0x4, 0x6, 0x40}, {0x7f, 0x9, 0x100, 0x8001}, {0x7, 0x1f, 0x200, 0x71c}, {0x8, 0x1ff, 0x3, 0x100000000}, {0x831, 0xffffffffffffffc1, 0x6, 0x2}, {0x2, 0x2, 0x8, 0xf5}, {0x1, 0x4, 0xffffffffffffb604, 0x7}, {0xfffffffffffffffa, 0x8, 0x3b3abb51, 0x4}, {0x20, 0x4ba3, 0x0, 0x8001}, {0x2dea262f, 0x0, 0x0, 0x7}]}, 0x10)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=<r2=>0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r2, r1, 0x0, 0x0, 0x0}, 0x30)
ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_to_bond\x00', r3})
io_setup(0x7e, &(0x7f0000000240)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000180)=[0x0])
setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)
link(0x0, 0x0)
unshare(0x20600)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000380)={0xfffffffffffffffc, 0x51, 0x4, 0x4, 0x6, 0x10001, 0x7f, 0xae08, 0x7, 0x1})
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0)
io_submit(0x0, 0x0, 0x0)

[  243.892266] binder: 6735:6744 ioctl c018620b 0 returned -14
20:20:35 executing program 3:
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x121000, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000b67000), &(0x7f0000000000)=0x4)

20:20:35 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

20:20:35 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00')
preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[  243.947169] binder: 6735:6758 BC_ACQUIRE_DONE node 229 has no pending acquire request
20:20:35 executing program 3:
ioctl$ION_IOC_ALLOC(0xffffffffffffff9c, 0xc0184900, &(0x7f00000000c0)={0x1, 0x20, 0x1, <r0=>0xffffffffffffffff})
fcntl$getownex(r0, 0x10, &(0x7f0000000700))
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup2(r1, r0)
unshare(0x2010000)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x30100, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="84006642", @ANYRES16=r4, @ANYBLOB="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"], 0x384}, 0x1, 0x0, 0x0, 0x20000880}, 0x4)
setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x11, &(0x7f0000000080), 0x4)
bind$inet6(r2, &(0x7f0000000640)={0xa, 0x4e24, 0x6, @remote, 0xffffffff}, 0x1c)
ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000000)={'rose0\x00', 0x4})

20:20:35 executing program 0:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000080)={{0x3, 0x3, 0x60, 0x1, 0x3ff}, 0x6, 0x8000, 0x10000000000})
r1 = open(&(0x7f00000003c0)='./file0\x00', 0x141042, 0x10)
write$binfmt_elf32(r1, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0xfff, 0x7, 0x2, 0xac, 0x7, 0x2, 0x3, 0x1, 0x32a, 0x38, 0x183, 0xffffffff80000001, 0x6, 0x20, 0x1, 0x6, 0x2, 0xec08}, [{0x1, 0x377c, 0x80, 0xa00000, 0x9, 0x4, 0xf01c, 0x8216}, {0x3, 0x90, 0x2, 0x8, 0x9, 0x6, 0x2, 0x5aaa}], "ceb995b808730fa951d38db27542", [[], []]}, 0x286)
fcntl$getown(r0, 0x9)
write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x2e7)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x100, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r1, r1, &(0x7f0000000040)=0x4, 0xa198)

[  244.010250] binder: 6767:6772 ioctl c018620b 0 returned -14
[  244.071488] binder: 6767:6787 BC_ACQUIRE_DONE node 232 has no pending acquire request
20:20:36 executing program 1:
r0 = socket$packet(0x11, 0x6, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100), 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x400000, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000200)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xfffffffffffffd65)

20:20:36 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000240)=0xfff, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x20000806, &(0x7f0000001180)={0x2, 0x4e23, @local}, 0x10)
prctl$PR_SET_TSC(0x1a, 0x3)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10)
sendto$inet(r0, &(0x7f00000003c0), 0xed5f0dd4, 0x0, 0x0, 0x184)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000100), 0x4)

20:20:36 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket(0xa, 0x1, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000001c0))
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000180)=[0x437, 0x8])
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f00000000c0)=0x40000001, 0x4)
timer_create(0x7, &(0x7f0000000040)={0x0, 0x3f, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000080)=<r3=>0x0)
timer_gettime(r3, &(0x7f0000000100))

20:20:36 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x8)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
sendmsg$nl_xfrm(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=@updsa={0x2ac, 0x1a, 0x8, 0x70bd2c, 0x25dfdbfe, {{@in=@remote, @in6=@mcast1, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0x20, 0xa0, 0x7f, 0x0, r2}, {@in=@multicast1, 0x4d6, 0x3c}, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, {0x6, 0x7, 0x4, 0x7eef, 0x2, 0x3, 0xfffffffffffffffe, 0x1}, {0x1, 0x4, 0x8}, {0xfffffffffffffffd, 0x100000000}, 0x70bd27, 0x0, 0xa, 0x1, 0x0, 0x14}, [@algo_auth={0x90, 0x1, {{'rmd320-generic\x00'}, 0x240, "6ce006106a8a4b66f3a9874f102b6cd8a23c63b51355fdc560e23eea374b9235c6849a661d10c349128a85cf151d2a1bbebb8588c5f11c0208aa034abd284ec9815869b94c727dc3"}}, @srcaddr={0x14, 0xd, @in6=@loopback}, @algo_auth={0x104, 0x1, {{'sha384\x00'}, 0x5d0, "14efebd5294569dbbaf14efbe055c7e0765d2171203e27a73abfcf248a7c7384c6781837d4a7d49560b2002f5169e2236f5fe06796029c5683c66adfcc77e23fe57109f9ca6d11ab24f20936b1d84ad389e10405cdf7b6e433732988eac72b2b3a5f4698d0584e88e3714499df4c182ef3eaf61e99af7aaf2a258babc1811455cddb70be2aa4e0f454608072cc27135cb155cebb419db45a08b3929b1cdc8e9714bde0bb9740eba7ed284aa7e4815f4529bd732c956e247f586e"}}, @srcaddr={0x14, 0xd, @in6=@mcast2}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x8804}, 0x4)
getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000300))

20:20:36 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000002c0)={@multicast2, @loopback}, 0xc)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000001980)={0x1, {{0x2, 0x0, @multicast2}}, 0x0, 0x2, [{{0x2, 0x0, @loopback}}, {{0x2, 0x0, @multicast1}}]}, 0x190)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400000, 0x0)
write$P9_RCLUNK(r1, &(0x7f0000000040)={0x7, 0x79, 0x2}, 0x7)
setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000080)={0x1, {{0x2, 0x0, @multicast2}}}, 0x108)
prctl$PR_GET_DUMPABLE(0x3)

20:20:36 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

20:20:36 executing program 3:
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x20002, 0x0)
ioctl(r0, 0x4, &(0x7f0000000300)="c1c374be498f62dfbf1a6af2aa3a9c55e36e548a8c324b33d1fe660ec67eb55cf32405ad50a507d38cf6e0fef4bfba324dcec2bf6990cbfcc61986d16ec045e8a76fd9bbb05309e6be5ee7a497ae5b72acc1c532ffd686efe0a7d5923f13f3")
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = timerfd_create(0x7, 0x0)
r4 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000480)={0x22, 0x37, 0x2, {0x1, 0x2, 0x7, r4, 0x4, 'sip\x00'}}, 0x22)
readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/14, 0x34c}], 0x278)
r5 = dup2(r1, r1)
ioctl$VT_GETMODE(r5, 0x5601, &(0x7f0000000040))
timerfd_settime(r3, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x80000003, 0x8031, 0xffffffffffffffff, 0x0)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380)={<r7=>0x0}, &(0x7f00000003c0)=0xc)
ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000400)=r7)
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000440))
sendmsg$IPVS_CMD_SET_CONFIG(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x410}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x5c, r6, 0x211, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9b2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000000100000}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8804}, 0x15)
clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f00006f8000/0x2000)=nil)
io_setup(0x800000000000004, 0x0)

[  244.793634] binder: release 6767:6772 transaction 231 out, still active
20:20:36 executing program 5:
socketpair$unix(0x1, 0x200000000001, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000000040)=0xfffffffffffffffe)
getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000280)=0x68)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x148)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x28, &(0x7f00000000c0)}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00')
sendfile(r0, r3, 0x0, 0x7fffffff)

20:20:36 executing program 0:
r0 = socket$inet(0x10, 0x20000000000002, 0x0)
sendmsg(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="240000001e0007021dfffd946f610500020000001f00000000000800080009000400ff7e", 0x24}], 0x1}, 0x0)
r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x3f, 0x1, 0x0, 0x9, 0xd55}, 0xc)
setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0)

20:20:36 executing program 1:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd\x00')
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0x3, &(0x7f00000002c0)=<r1=>0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000900)='attr/prev\x00')
pipe2$9p(&(0x7f0000000180), 0x80000)
write(r2, 0x0, 0x312)
ioctl$BLKROGET(0xffffffffffffffff, 0x125e, 0x0)
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100))
exit(0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000240))
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x3d, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x4f611f56, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x7, 0x1, 0x4, 0x0, 0x4, 0xffff}, 0x0)
fcntl$getownex(r4, 0x10, &(0x7f0000000040))
ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f00000000c0)={0x36, 0x11, 0x1, 0x1e, 0xa, 0x1, 0x0, 0x77, 0xffffffffffffffff})
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8000, 0x8)
r5 = creat(&(0x7f0000000380)='./file0\x00', 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000bc0)=ANY=[], 0x0)
write$P9_RREAD(r5, 0x0, 0x0)
read$eventfd(r5, &(0x7f0000000340), 0x8)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x0)
io_submit(r1, 0x1, &(0x7f00000007c0)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0xd93, r0, &(0x7f0000000680)="ddba9f545cdc4582a5006e250653ed915964677e991aabd8204bdf73df7120190212c6903bd6ac9dde3c3da3648483f74d61d3196e00670e87b42371fd214ea648306b9ca377e362144781c8b5924057b5d7a1dbe9ee62e40d9cdb8e3666fb4b6bdb73b86c7abf3ceb8ee12f2047abd670e98888c8eb864f32b4b63362d1beddc2ef2bf88dfd7da0c8739dc430949a8e90b8b1289626d95880a1f2c7b04889d93d10ad77b4b8e8dbea43ca324dc76ae5ef3024da0f8f", 0xb6, 0x6, 0x0, 0x1, r3}])
fallocate(0xffffffffffffffff, 0x3, 0x5e89, 0xfff9)
write$P9_RREADLINK(r5, 0x0, 0x0)
unshare(0x40000000)

[  244.846274] binder: 6810:6813 ioctl c018620b 0 returned -14
20:20:36 executing program 0:
mknod$loop(&(0x7f0000000400)='./file1\x00', 0x0, 0x0)
unshare(0x40000000)
r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
syz_genetlink_get_family_id$ipvs(0x0)
sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="080528bd7000fddbdf25b19d86b5080005000500000004006b56226480bf11ca0000300003000c00040000000000080007004e24000014000600fe880800000000000000000000000101080001000200ffc523000008"], 0x1}, 0x1, 0x0, 0x0, 0x24000040}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
unlink(&(0x7f00000000c0)='./file0\x00')
fstat(0xffffffffffffffff, 0x0)
chown(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
getsockname$packet(r0, &(0x7f0000000480), &(0x7f0000000500)=0x14)
sendto$packet(r0, &(0x7f0000000440)="8a8ff102810b062b1422d2", 0xb, 0x4000000, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f00000004c0)={0x0, @broadcast, 0x4e23, 0x0, 'lblcr\x00'}, 0x2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = inotify_init1(0x80800)
fcntl$setown(r1, 0x8, 0xffffffffffffffff)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, <r2=>0x0})
ptrace$setopts(0x4206, r2, 0x2e702202, 0x8000)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x80000000, 0xa74, 0x0, 0x635, 0x9324, 0x0, 0x80}, 0xffffffffffffff9b)
ptrace(0x4207, r2)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000580)={0x2, 0x0, @local}, 0x10)
getpgid(r2)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00')
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, &(0x7f0000000080))
socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
ioctl$sock_ifreq(r3, 0x8947, &(0x7f0000000180)={'sit0\x00', @ifru_hwaddr=@local})

20:20:36 executing program 5:
pipe2(&(0x7f0000000680)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
pipe(&(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8800, 0x0, 0x0)
write(r2, &(0x7f0000000340), 0x10000014c)
socket$packet(0x11, 0x3, 0x300)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000002c0)={0x0, <r3=>0x0})
sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @local}, 0x1, 0x2, 0x3, 0x2}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000340)="932264f751b83fe51fdbf1728b8a1716dbd0c741989921517c13ae2cd9b7b84454fd353b1fbc7baab79efa3018fcd233b1f2af015615fc8babf4237d9b3057533ca52b88ce8a881db325c1539e3bf33adce7b428fc62e4924b4945dc852d8199563f1c08019f9e9d1d446c3d9bf8dcb6be079e40a7ba67722e75bfbe9a328f684b0c634058a8fc5b67bef635008c429279a6f9", 0x93}, {&(0x7f0000000040)="bc7bd573a83766", 0x7}], 0x2, &(0x7f00000006c0)=[{0xc0, 0x6, 0x0, "6bb327c16d61654fbb3e5047566d543ce401e4f930388e7961c502a72eb05008388876ba62c5832c389260e47ed378f614152da7813a51f8039e4328b2b4025fde48d34fce3b27b469f33c98227cb205ea36b9744a2f66a665cd24e761a029f7bfdb5d62ddf8013caed4064eddeebb2f17014778ee093f840a5b1037a2f51964e0487e7992d9261e3fad04e423aac1108599db154dadf9bd434b9a6114a6382485e3c46089d2c6fc1a204902000394"}, {0x10, 0x1ff, 0x9}, {0x78, 0x3a, 0x1ff, "4eabe828c40e21e9610f9704795756f63acf11decfc2956eec0d9c88ccb9de30d8bb837249f08d6c28a31586d9d41838776168df49069c66c87c057ef3131096ebc5e34b6a80f6ea60384458de059cc4afa112bfd20afe247847bb764d75e922af13e0"}, {0xb0, 0x12d, 0x4, "f292032ab375553e9328fab29d3b1d8c012cfb28a3978f0b77a214c664bca22c3cad71d8285fbd13b2f87eb655dd877cf1287582f57cf78fd842ea036ac6732669b9fcc3856ef34c04ffa87c1b8617cfbd4b212b93e4ac0bf72fd897363e0345600f0551bf6882480d9169a095d3be647735eca3721dc52c8331de341d65e86112720141e52370c60a98911f1329f1c0c83aca142bf77999e024"}, {0xd8, 0x110, 0x8ec6, "bf3f3ae6334249f62959ac0c365bbdd3f23f319f4361d82ef842acbb60d837970b442ba81bddf26d8dfc159a5bf4b3288fe222934a165cbd101b11358a620190d7bd92e23dee035f7c45447e1614403592c9985607b00782b0b541cbab6e485fc7e940a657a02e21ee6c9d99c0a688e8fd76f94998d90b65294437c7f413520343323810752bb377e17c8404de2d6444bff8ac28b745cf3f4d7e995725d3fdb4800692a5af8796ff05864d37cf3c7c830879ab80e3ce1389b513e6fdd62df2c3f5df47fe13bf"}, {0xd0, 0x10f, 0x401, "0182dc99073b388c895f968dcc69dca189e60fd6365a13bd67604ff0fd143a720e82869a5f97334cd100dcc02d8fd7c21759b6277102789fac3ff0c98c66255f9b5488932d008d41c3bac1b26f7f43b7b7a0bb720a5ef24e4245acbff5adcfa4114c28f53cd67a0fbeefee14c2df67722674c2773d897b6a7469bc1eb2270fb1c01ea17a41685bb673801390f5e403cb01b6a6f38f7cc160e18dfc4f1db839ed3411e3bcdd79023a26e4fe029ff08f85643e764f16cd1f75c0"}, {0x1010, 0x104, 0xc25, "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"}], 0x13b0}, 0x4000005)
pselect6(0x1e9, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f0000000080), 0x8})
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

20:20:36 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

[  244.932485] binder: 6810:6832 BC_ACQUIRE_DONE u0000000000000000 no match
[  244.968580] binder: 6838:6840 ioctl c018620b 0 returned -14
[  245.029280] binder: 6838:6850 BC_ACQUIRE_DONE u0000000000000000 no match
20:20:37 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x2002, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0)
fsetxattr$security_selinux(r0, &(0x7f0000001840)='security.selinux\x00', &(0x7f0000001880)='system_u:object_r:getty_exec_t:s0\x00', 0x22, 0x0)

20:20:37 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

20:20:37 executing program 3:
r0 = dup(0xffffffffffffffff)
ioctl$RTC_AIE_OFF(r0, 0x7002)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x3, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x2}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48)

20:20:37 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/softnet_stat\x00')
socketpair$unix(0x1, 0x400000002, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000000)={0x7fffffff, 0x1, 0x1})
write$UHID_INPUT2(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xf8)
close(r0)
write$P9_ROPEN(r0, &(0x7f0000000040)={0x18, 0x71, 0x1, {{0x40, 0x3, 0x4}}}, 0x18)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x9, 0x3, 0x2c0, 0x148, 0x148, 0x148, 0x0, 0x148, 0x228, 0x228, 0x228, 0x228, 0x228, 0x3, &(0x7f0000000080), {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2a}, 0xffffffff, 0xffffffff, 'netdevsim0\x00', 'bcsh0\x00', {0xff}, {0xff}, 0x7f, 0x0, 0x3}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00', 0x0, {0x16, 0x9e, 0x4, 0x1}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xc}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0x6, 0x10, [0x23, 0x6, 0x4, 0x17, 0x28, 0x28, 0x2c, 0x12, 0x0, 0x1, 0x16, 0x19, 0x32, 0x28, 0x1a, 0x1b], 0x1, 0x6, 0x3f}}}, {{@uncond, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x2}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x320)

20:20:37 executing program 3:
r0 = creat(&(0x7f0000000140)='./file0/file0\x00', 0x3)
fallocate(r0, 0x0, 0x0, 0x4003ff)
write$cgroup_type(r0, &(0x7f0000000240)='threaded\x00', 0xf96d)
r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$assume_authority(0x10, r1)
fallocate(r0, 0x3, 0x8001, 0x8001)
getpeername$netlink(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xc)
fallocate(r0, 0x3, 0x5e89, 0xfff9)

20:20:37 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00000001c0)=0xffffffffffff0001, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x5ca, 0x4)
r1 = dup(r0)
getsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}}], 0x4000000000001fe, 0x203f, 0x0)
r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0)
ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x6, 0x5}, {0x8, 0x7921}, {0xd2f9, 0x1000}, {0x3, 0x7}]})
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000100)=0x1c, 0x4)
clock_gettime(0x0, &(0x7f0000000180)={<r3=>0x0, <r4=>0x0})
clock_nanosleep(0x5, 0x0, &(0x7f0000000200)={r3, r4+10000000}, &(0x7f0000000240))

20:20:37 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000003c0)={@remote}, 0x14)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000000c0)={@dev}, 0x14)
setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000002c0)={@remote}, 0x14)

[  245.676469] binder: 6863:6868 ioctl c018620b 0 returned -14
[  245.691431] audit: type=1400 audit(1553631637.578:48): avc:  denied  { relabelto } for  pid=6864 comm="syz-executor.2" name="NETLINK" dev="sockfs" ino=17484 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:getty_exec_t:s0 tclass=netlink_generic_socket permissive=1
20:20:37 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008380)=[{{&(0x7f0000000000)=@in={0x2, 0x4e22, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="27dc6110"], 0x10}}], 0x1, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
sendmmsg(r0, &(0x7f0000007e00), 0x40000000000034b, 0x0)

[  245.745345] binder: 6863:6879 BC_ACQUIRE_DONE u0000000000000000 no match
20:20:37 executing program 0:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x8000)
r0 = socket(0x1000000000000010, 0x2, 0xc)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000300))

20:20:37 executing program 3:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000000)='./bus\x00')
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x10082, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f00000001c0)={0x6, 0x1, 0x0, 0xff, 0x16, 0x0, 0x0, 0x3f, 0xfffffffffffffffd, 0x7, 0x0, 0xd74})
syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x2001)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00')
readlinkat(r1, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)=""/81, 0x51)
readlinkat(r0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=""/4096, 0x1000)

20:20:37 executing program 5:
openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
pwrite64(r0, &(0x7f0000000180), 0x0, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0)
lseek(r1, 0x0, 0x4)
sendfile(r1, r1, &(0x7f0000000440), 0x20)
sendfile(r1, r1, &(0x7f0000000100), 0x7f8)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00')
mount(0x0, 0x0, 0x0, 0x0, 0x0)
pivot_root(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='./file0/file0/file0\x00')
mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x2)
r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @dev, 0x5}, 0x1c)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00')
write$UHID_CREATE2(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000400)=<r5=>0x0)
fcntl$setown(r2, 0x8, r5)
sendfile(r3, r4, 0x0, 0x8000)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000780)='TIPC\x00')
mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0)
mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x1910824, 0x0)
umount2(&(0x7f0000000800)='./file0\x00', 0x0)

20:20:37 executing program 2:
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x4, {{0xa, 0x0, 0x0, @ipv4={[], [], @empty}}}, {{0xa, 0x0, 0x4, @empty}}}, 0x108)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x4, 0x0)
io_setup(0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0))
dup2(0xffffffffffffffff, r0)
r2 = dup3(0xffffffffffffffff, r1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = gettid()
getpgrp(r4)
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\x00', 0xfffffffffffffffd)
ioctl$FICLONE(r0, 0x40049409, r3)
perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffff9c, 0x0)
ptrace$setopts(0x4206, r4, 0x0, 0x0)
dup2(r0, r2)
tkill(r4, 0x11)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/user\x00', 0x2, 0x0)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000380)='/dev/urandom\x00', 0x8b00, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000000140)=""/72, 0x0)

20:20:37 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x1c, &(0x7f0000000100)="05c9cd8a865deeb4c1b184d7c00a1626832aa070", 0x14)
fsetxattr(r1, &(0x7f0000000000)=@known='security.apparmor\x00', &(0x7f00000000c0)='\x00', 0x1, 0x3)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")

20:20:37 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

20:20:37 executing program 0:
r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/member\x00', 0x2, 0x0)
pwrite64(r0, &(0x7f0000000e00)="267b926a3d42bfe42ba4188e1bb493d9115835c09baaac40e797664382f6dbfbdbd4d113277046672e169ef80b00b3717ccfd5303e3ec05682a2eb63c07682af6e5c15870ef8ad1d9abf57d0b8bdbbdf89", 0x51, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000240)=<r1=>0x0)
r2 = syz_open_procfs(r1, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
r3 = fcntl$dupfd(r0, 0x406, r0)
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000640))
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={0x0, 0x0, 0x10}, 0x10)
mmap(&(0x7f000060b000/0x1000)=nil, 0x1000, 0x0, 0x33, 0xffffffffffffffff, 0x0)
sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="00042cbd7000fedbdf250b00000008000400030000002000030014000600fe88000000000000000000000000010108"], 0x1}, 0x1, 0x0, 0x0, 0x20000000}, 0x8800)
unshare(0x70010000)
getpid()
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000f00)=ANY=[@ANYBLOB], 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = inotify_init()
write$P9_RREAD(r0, 0x0, 0xfdbd)
inotify_add_watch(r4, 0x0, 0x20000200)
r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r6 = dup2(r5, r4)
openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
write$P9_RCREATE(r6, &(0x7f0000000000)={0x18, 0x73, 0x2, {{0x80, 0x0, 0x4}, 0x1}}, 0x18)

20:20:37 executing program 3:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200001, 0x0)
setsockopt$inet_int(r0, 0x0, 0x9, &(0x7f0000000040)=0xffffffff, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = getpid()
setpriority(0x1, r2, 0x0)

20:20:37 executing program 3:
clock_adjtime(0x5, &(0x7f0000000000)={0x6, 0x4, 0x0, 0x8000, 0xfffffffffffffffb, 0x3, 0x3b13, 0x7, 0xa69, 0x6, 0x2, 0x2, 0x2, 0xfff, 0x32fd, 0xffffffffffff8001, 0x4, 0x4, 0x6, 0x6, 0x4, 0x6, 0x2, 0x6c0a, 0x7ff, 0x2})
mprotect(&(0x7f000014c000/0x2000)=nil, 0x2000, 0x1000000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0)
ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000140))

[  245.977292] binder: 6902:6906 ioctl c018620b 0 returned -14
20:20:37 executing program 0:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0xff}, 0x0, @in=@empty}}, 0xe8)
lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)='wlan0\x9c\x00', 0x7, 0x2)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffd8)

20:20:37 executing program 3:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
write$P9_RCLUNK(r0, &(0x7f0000000180)={0x7, 0x79, 0x2}, 0x7)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x9)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

[  246.043938] binder: 6902:6922 ioctl c0306201 0 returned -14
[  246.064975] binder: 6902:6922 BC_ACQUIRE_DONE u0000000000000000 no match
20:20:38 executing program 0:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = gettid()
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, 0x0)
syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000080)=0xeddc, 0x4)
listen(r0, 0x3f)
pipe2(&(0x7f00000000c0), 0x80800)
ptrace$setopts(0x41ff, r1, 0xa, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

20:20:38 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x6)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x1, 0xff}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x6}}, 0xe8)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffd8)

20:20:38 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0xdf)
r1 = geteuid()
r2 = request_key(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='(\'(vboxnet1:security\x00', 0xfffffffffffffffb)
keyctl$get_persistent(0x16, r1, r2)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x2, @remote, 0x7}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @remote}, 0x1c)

[  246.325726] EXT4-fs (sda1): re-mounted. Opts: (null)
20:20:38 executing program 5:
openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
pwrite64(r0, &(0x7f0000000180), 0x0, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0)
lseek(r1, 0x0, 0x4)
sendfile(r1, r1, &(0x7f0000000440), 0x20)
sendfile(r1, r1, &(0x7f0000000100), 0x7f8)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00')
mount(0x0, 0x0, 0x0, 0x0, 0x0)
pivot_root(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='./file0/file0/file0\x00')
mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x2)
r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @dev, 0x5}, 0x1c)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00')
write$UHID_CREATE2(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000400)=<r5=>0x0)
fcntl$setown(r2, 0x8, r5)
sendfile(r3, r4, 0x0, 0x8000)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000780)='TIPC\x00')
mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0)
mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x1910824, 0x0)
umount2(&(0x7f0000000800)='./file0\x00', 0x0)

[  246.455773] EXT4-fs (sda1): re-mounted. Opts: (null)
[  246.685291] EXT4-fs (sda1): re-mounted. Opts: (null)
20:20:40 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
getpeername$inet6(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000040)={0x1, 0x70, 0x4, 0x400, 0x3, 0xe77, 0x0, 0x96, 0x59042, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100))
ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000002c0))
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
r5 = getpgrp(0x0)
setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff)
fchown(r4, 0x0, 0x0)
geteuid()
openat$selinux_validatetrans(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000200)=r5)
sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
splice(r3, 0x0, r2, 0x0, 0x1000000000000003, 0x0)
inotify_init1(0x0)
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
sendto$packet(r3, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0)

20:20:40 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r1, 0x29, 0x20000000000048, &(0x7f00000000c0)="cc050040", 0x4)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000002c0)={0x11d, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x2, [{{0x2, 0x4e23, @empty}}, {{0x2, 0x4e21, @local}}]}, 0x190)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
getsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, &(0x7f0000000000))

20:20:40 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4)
sendmmsg(r0, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)='Y', 0x1}], 0x1}}], 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)="a0", 0x1}], 0x1}, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
r1 = dup(r0)
write$binfmt_elf64(r0, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0xc9, 0x7a15, 0x1, 0x762a, 0x3, 0x6, 0x0, 0x4b, 0x40, 0x336, 0x7fff, 0x6, 0x38, 0x1, 0x80000001, 0x0, 0x1f}, [{0x6, 0x80000001, 0xffff, 0x2, 0x975, 0x1, 0x0, 0x2}], "56e8c8f6f145c5eed159240ef59fc755e4597f645a7a9497ac6171bbcf54bff40a3d6c006346b8462a9c8a6d08bd65a8b6b083092d70122dda48a3a39d02f8e39d2c18a8fa33dea7e9422f7d60ccd45137a50b6e7f7eab37565e", [[], [], [], [], [], [], [], [], []]}, 0x9d2)
ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f00000003c0)=""/200)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000002c0)={0x8, 0x6, 0x5, 0x6, 0x4, [{0x9, 0xeb89, 0x1, 0x0, 0x0, 0x2}, {0x6, 0x4, 0x3, 0x0, 0x0, 0x8}, {0x1, 0x2, 0xc79, 0x0, 0x0, 0x1}, {0x2, 0x4ab, 0x8b, 0x0, 0x0, 0x1}]})
r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0)
close(r0)

20:20:40 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
pwrite64(r0, &(0x7f0000000180), 0x0, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0)
lseek(r1, 0x0, 0x4)
sendfile(r1, r1, &(0x7f0000000440), 0x20)
sendfile(r1, r1, &(0x7f0000000100), 0x7f8)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00')
mount(0x0, 0x0, 0x0, 0x0, 0x0)
pivot_root(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='./file0/file0/file0\x00')
mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x2)
r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @dev, 0x5}, 0x1c)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00')
write$UHID_CREATE2(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000400)=<r5=>0x0)
fcntl$setown(r2, 0x8, r5)
sendfile(r3, r4, 0x0, 0x8000)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000780)='TIPC\x00')
mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0)
mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x1910824, 0x0)
umount2(&(0x7f0000000800)='./file0\x00', 0x0)

20:20:40 executing program 5:
r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x565180, 0x0)
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040), &(0x7f0000000080)=0x4)
mkdir(&(0x7f0000000140)='./control\x00', 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = memfd_create(&(0x7f0000000080)='\x00', 0x0)
clone(0x12102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='rdma.max\x00', 0x2, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0)
r5 = fcntl$getown(r1, 0x9)
ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000100))
fcntl$setown(r3, 0x8, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r3, 0x50, &(0x7f0000000180)}, 0x10)
r6 = getuid()
lstat(&(0x7f0000000440)='./control\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000540)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000000640)=0xe8)
r9 = getgid()
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000680)={{{@in=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000780)=0xe8)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000007c0)={0x0, 0x0, <r11=>0x0}, &(0x7f0000000800)=0xc)
r12 = getuid()
getgroups(0x1, &(0x7f0000000840)=[<r13=>0xffffffffffffffff])
sendmsg$unix(r0, &(0x7f0000000980)={&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000400)=[{&(0x7f00000002c0)="39adffc6a28573fc18be64bde3c75b7f27dd9d5e491d9b9b", 0x18}, {&(0x7f0000000300)="0a1190c3c391122ea5", 0x9}, {&(0x7f0000000340)="7b12a5e3cbfd1f509f1c18860b5cc5a94bcc76f3ee38af84febabde632a9920de4728984c61b589f2b54401fc05d600191a9764f5fe3738c8be5032a425bb9a635d4a94d2e52bd958ff40a8fea47f06fa18f905dd90d098521e4822be6896b665eeb49851f22ee3e6b7b1d9a3f9cd1e07621614fd4ef53990ba4497b6e072c3dacdd6e9299f0fd2965a0c0f9a8fafa809ba7f780e833de16f2fe297dafaee52a2ba9ed79bda79e7b797987364d8b4bd7", 0xb0}], 0x3, &(0x7f0000000880)=[@cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x38, 0x1, 0x1, [r2, r3, r4, r4, r4, r2, r3, r4, r4]}, @cred={0x20, 0x1, 0x2, r5, r8, r9}, @rights={0x20, 0x1, 0x1, [r3, r0, r0, r3]}, @cred={0x20, 0x1, 0x2, r5, r10, r11}, @cred={0x20, 0x1, 0x2, r5, r12, r13}], 0xd8, 0x40}, 0x80)
execveat(r3, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000)
unshare(0x40000000)

20:20:40 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

20:20:40 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
exit_group(0x7)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c)
listen(r0, 0x0)
fdatasync(r0)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000940)="580000001500add427323b470c458c5602067fffffff81004e220000ac1414aa0b4824ca945f64009400050028925aa80000000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1)

[  248.994661] binder: 6958:6963 ioctl c018620b 0 returned -14
20:20:40 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
r3 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00')
sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2800001}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x154, r4, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x80, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, [], 0x29}, 0x8001}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffffffffff01}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x40, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x23}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100}]}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2b}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x53}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffffffff0000}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x8080}, 0x44801)
pread64(r2, &(0x7f0000000340)=""/39, 0x27, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
dup2(r1, r2)
writev(r0, &(0x7f000037d000)=[{0x0}], 0x1)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)

20:20:41 executing program 5:
init_module(&(0x7f0000000100)='C\x95SFs\x9c\xd1\xa6\xbb\x03&B\x06\x1d\xack\xb6\xbdoq\xc4\x1d\x849,{\x01\xe0Rp\x00\xa7\xabp\xd0\xba\x98\xc9.\x932\xee\x95\x80\xcc\xb1', 0xfff1f, &(0x7f0000000000)='}o\b\xd3\\\x1fWb\x9fP\xc3\x93\xee\xa11\xca\xc6\xc1\xd4\x87\v\xcd[\x0e\xb0\x8b\xaewz\x99q\xe1N\xc4^\xa1=\x12~6G!\xa0\x90fn`S\xb2EV\xc4Z-4\x97V\xb8\x86k\n14>\xeaY\xb0\x7f]\x16\x0e\x96;\xac\x1a\x84\xcdr\x84\x15\x18\x9f~A\xb6\xbb\v;\xd0\x84}\xc8B\x12\x9a\xb7\xab#\x1e\x81/\x953R\rMQ\x81\xd0\x1b\x85:\x1c[\x00o5\xfd\xbeZ\xe6\xa7jR\x93r\n`u\xe8\xe5\x10\xe4\x90\xeaV\xad>N[\xedS~\xa4\x95~bH\xec\xf5\xadI\x88\x15\xe1\xd7\xfe\x829\x8b\xd2\xfd\xcd\xe5g}\x8c\x95\xab\xed\xa2\x03\x1d?(\x98S5\xee\xe5\x8d\xc1v\xf3\xe2\xefnC\x1d?W\xaf\x01\x17\xc6\xae\xdd\x8d(-\x8c\xe8#\xebXe\xe9\xa0\xa1(\xc1\t\x9e|\xc3\x13iL\xc5\x14\x000\xc64H\x00)F\x1clR\x9fj/')
mknod(&(0x7f0000000140)='./file0\x00', 0x88c1, 0x0)

[  249.056366] binder: 6958:6975 ioctl c0306201 0 returned -14
[  249.078306] binder: 6958:6975 BC_ACQUIRE_DONE u0000000000000000 no match
20:20:41 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
close(r0)
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x5)
socket$netlink(0x10, 0x3, 0x0)
r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0)
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000040)={{0x2, 0x4e24, @multicast1}, {0x0, @local}, 0x0, {0x2, 0x4e24, @remote}, 'veth1_to_hsr\x00'})
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r2 = creat(0x0, 0x0)
ftruncate(r2, 0x208200)
pipe(0x0)
write(r2, &(0x7f0000000100), 0x1bb)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000340)={0x3e3, 0x6, 0x0, 0x0, 0x2, [{0x5, 0x9, 0x8, 0x0, 0x0, 0x2000}, {}]})

[  249.175200] audit: type=1400 audit(1553631641.058:49): avc:  denied  { module_load } for  pid=6986 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=system permissive=1
20:20:41 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001200050f00000000000000000700f9a2", @ANYRES32=0x0, @ANYBLOB="000000000000000008001c00", @ANYRES32], 0x28}}, 0x0)

20:20:41 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
close(r0)
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x5)
socket$netlink(0x10, 0x3, 0x0)
r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0)
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000040)={{0x2, 0x4e24, @multicast1}, {0x0, @local}, 0x0, {0x2, 0x4e24, @remote}, 'veth1_to_hsr\x00'})
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r2 = creat(0x0, 0x0)
ftruncate(r2, 0x208200)
pipe(0x0)
write(r2, &(0x7f0000000100), 0x1bb)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000340)={0x3e3, 0x6, 0x0, 0x0, 0x2, [{0x5, 0x9, 0x8, 0x0, 0x0, 0x2000}, {}]})

20:20:41 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
io_setup(0x8, &(0x7f0000000000)=<r1=>0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x4)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000080)={0x4})
r3 = eventfd2(0x0, 0x0)
io_submit(r1, 0x1, &(0x7f0000000580)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r3}])

20:20:41 executing program 1:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='proc\x00', 0xfffffffffffffffe, 0x0)
r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
finit_module(r0, &(0x7f0000000040)='proc\x00', 0x1)
r1 = inotify_init()
r2 = dup(r1)
inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x20000008)
getdents64(r0, &(0x7f0000000700)=""/4096, 0x1000)
ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000080)=0x3)

20:20:41 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x5, 0x209e20, 0x8000000001, 0x1}, 0x2c)
bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0, 0x7e}, 0x2c)

20:20:41 executing program 5:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00')
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
syz_open_pts(0xffffffffffffffff, 0x240000)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, <r2=>0x0})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
r3 = openat$keychord(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000000)='trusted.overlay.origin\x00', 0x0, 0x0, 0x2)
openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_open_dev$evdev(&(0x7f0000000480)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r2, r4, 0x0, 0x6, &(0x7f0000000200)='em1\xb7\xb5\x00', <r5=>0x0}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0xffffffffffffffff, r3, 0x0, 0x0, 0x0, r5}, 0xad)
io_setup(0x7e, &(0x7f00000001c0))
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0)
accept$packet(r3, &(0x7f0000000300)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000380)={@empty, 0x60, r7})
ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00')

[  249.323304] device lo left promiscuous mode
20:20:41 executing program 3:
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000580), 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(&(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}<B\xfc.\x9cia\x14\xa6\xf8\x88\xf0\xda\x85\'v\x83\xcf\xc1\xc4\xd2\xbfq\xc2U\xa3\x13Md\xcc?\xed\x8e\x97y\x8d\xeb\x861\xcb\xf7h,\x9f\xa2\xed\x03\x14e\xaa\x19\x1d\xf9\"\xf7d)|\xba\"\xa8I\x9d\x17\x7fI\xfb\xa9@\xf5[\xbc\x8br?\xd3t\xf1\xfe\xd7\x8c\x8a\xee\xc6\x81\x1d\x9bXyHs\x87\xd5e\x94\xa1L%\x88\'M\xe8O\xa2v\x100+?\xb5Ar\xa8\xc9\x10\xa0~|v\xeaFZ\xa6\x84\x02', 0x0, &(0x7f0000000240)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}<B\xfc.\x9cia\x14\xa6\xf8\x88\xf0\xda\x85\'v\x83\xcf\xc1\xc4\xd2\xbfq\xc2U\xa3\x13Md\xcc?\xed\x8e\x97y\x8d\xeb\x861\xcb\xf7h,\x9f\xa2\xed\x03\x14e\xaa\x19\x1d\xf9\"\xf7d)|\xba\"\xa8I\x9d\x17\x7fI\xfb\xa9@\xf5[\xbc\x8br?\xd3t\xf1\xfe\xd7\x8c\x8a\xee\xc6\x81\x1d\x9bXyHs\x87\xd5e\x94\xa1L%\x88\'M\xe8O\xa2v\x100+?\xb5Ar\xa8\xc9\x10\xa0~|v\xeaFZ\xa6\x84\x02')
rt_sigtimedwait(&(0x7f0000000000), &(0x7f0000000480), &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8)
pivot_root(&(0x7f00000005c0)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00')
read(0xffffffffffffffff, 0x0, 0x0)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f00000001c0)=0x8)

20:20:41 executing program 2:
futex(0x0, 0x8c, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = memfd_create(&(0x7f00000028c0)='/deV/\x00\xe1\xb1c$I\xd0](\x10\xbbZ\x19\xd0\x14\x96}%\xed\x85\xb1YT\x9c\xf8@f\xa0\xd0G\x10-,\xc3+\xb8i\xc0\xaf\xbf\xfc\x99\x95\x835\xab\xeaH\b\"\x82\x82\x7f:k\xfe\xeb\x97\xd1\xbb&I\xe8\xf9\xe0\xab^\xbb\xbeY\xbf\x9f\xe3\xa5\xae\xfc\x93\xe2\xcfC\x8f\x89\xcbqB\x90a\xd3o8\xb1\xfa\xae\xe6\xb2\xaf\xfb\x1a\x10\xd5\x82\xb1$Q\x8c\x13\x9b\xc7z\xecM\x00\x01z\x8f\xdb\xb4\x82\x05S[\x85\xd9c\x16\x8dg?\x91y\xd3\xffN\xe9\x8bg\xe7\xfe<\xca#`(\xf5\xa7\x05\xc7\x12W\x94\xbc;\'\x1a\xa2\b)\x1a\xec\xec_i\xb8F\xb0\x06\x00bG\xb1\xbb\xdfx\xf8\x98\xda@\xe5M\xd0\xe4\xf0\x01V\x11/\xfa\x83\xe6^\xf0XfT\x90\xb1&D\xd1\x16a\x99\a#\xa5#\xbb\x99Fp\x92\x03\xcf\x8f\x85i\x81\xb1\x9e\x9a\a\x95\x17\xd84YT\f)\x1aSD\x19\x9d\x0e\x99!\x87\xe2?\xf2j\xfcS\xcb%C\x9b\xf8\x93\xd17\xf1\x97G\xa0g\xb5\xde\x1a\xc7\x83\xc1\x17\xcc\xd8\xf4\x15\xe5\x0e\xa7\x91N\xa3\x93\xe5&H\x7f\x1d\xd9\xa8)', 0x0)
ftruncate(r1, 0xfffffd)
sendfile(r0, r1, &(0x7f00000037c0)=0xf10001, 0xfffffdef)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x8)
sync_file_range(r0, 0x800, 0x0, 0x7)
ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000380))
write$P9_RSTAT(r3, &(0x7f0000000200)={0xffffffffffffff64, 0x7d, 0x1, {0x0, 0x162, 0x0, 0x9, {0x0, 0x1, 0x2}, 0x1427ffff, 0x1, 0x0, 0x5, 0x120, '/deV/\x00\xe1\xb1c$I\xd0](\x10\xbbZ\x19\xd0\x14\x96}%\xed\x85\xb1YT\x9c\xf8@f\xa0\xd0G\x10-,\xc3+\xb8i\xc0\xaf\xbf\xfc\x99\x95\x835\xab\xeaH\b\"\x82\x82\x7f:k\xfe\xeb\x97\xd1\xbb&I\xe8\xf9\xe0\xab^\xbb\xbeY\xbf\x9f\xe3\xa5\xae\xfc\x93\xe2\xcfC\x8f\x89\xcbqB\x90a\xd3o8\xb1\xfa\xae\xe6\xb2\xaf\xfb\x1a\x10\xd5\x82\xb1$Q\x8c\x13\x9b\xc7z\xecM\x00\x01z\x8f\xdb\xb4\x82\x05S[\x85\xd9c\x16\x8dg?\x91y\xd3\xffN\xe9\x8bg\xe7\xfe<\xca#`(\xf5\xa7\x05\xc7\x12W\x94\xbc;\'\x1a\xa2\b)\x1a\xec\xec_i\xb8F\xb0\x06\x00bG\xb1\xbb\xdfx\xf8\x98\xda@\xe5M\xd0\xe4\xf0\x01V\x11/\xfa\x83\xe6^\xf0XfT\x90\xb1&D\xd1\x16a\x99\a#\xa5#\xbb\x99Fp\x92\x03\xcf\x8f\x85i\x81\xb1\x9e\x9a\a\x95\x17\xd84YT\f)\x1aSD\x19\x9d\x0e\x99!\x87\xe2?\xf2j\xfcS\xcb%C\x9b\xf8\x93\xd17\xf1\x97G\xa0g\xb5\xde\x1a\xc7\x83\xc1\x17\xcc\xd8\xf4\x15\xe5\x0e\xa7\x91N\xa3\x93\xe5&H\x7f\x1d\xd9\xa8)', 0x0, '', 0xe, '[user\xc4security', 0x1, ':'}}, 0x169)
setsockopt(r2, 0x112, 0xd, &(0x7f00000003c0)="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", 0xfffffecd)
ioctl$KDENABIO(0xffffffffffffffff, 0x4b36)
fchdir(r1)
socket$inet(0x2, 0x6, 0x3)
write(r2, &(0x7f0000000180)="220000002186979f580700f49e8ca9cb5f2513c2888700b1feca6817b3eb10d141aa", 0x22)
setsockopt$sock_void(r3, 0x1, 0x1b, 0x0, 0x0)
ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f00000001c0))

20:20:41 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

20:20:41 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000540)=0x1950, 0x4)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c)
r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0)
ioctl$TIOCLINUX6(r3, 0x541c, 0x0)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0)
ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
getpgrp(0xffffffffffffffff)
r5 = fcntl$getown(r1, 0x9)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)=0xfffffffc, 0xbe)
getpgrp(0x0)
fcntl$getown(r4, 0x9)
getpgrp(r5)
rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
read(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)
sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000000)="cc", 0x1, 0x0, 0x0, 0x0)
recvfrom(r2, &(0x7f00000003c0)=""/121, 0x79, 0x40000012002, &(0x7f00000002c0)=@rc, 0x80)

20:20:41 executing program 0:
syz_open_dev$evdev(0x0, 0x0, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000140))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000a80)={{{@in=@multicast2, @in=@multicast1}}, {{@in6=@mcast2}, 0x0, @in=@empty}}, &(0x7f0000000b80)=0xe8)
r0 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
unlink(&(0x7f0000000240)='./file0/file0\x00')
chown(&(0x7f00000001c0)='./file0\x00', r1, 0x0)
shutdown(r0, 0x0)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f00000004c0)={0x3, &(0x7f0000000480)=[{0x74}, {0x0, 0xe3c}, {0x6, 0x10000}]})
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f00000000c0)=0x62d)
setxattr$system_posix_acl(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='system.posix_acl_access\x00', &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x0, r1}], {0x4, 0x1}, [{0x8, 0x7, r2}, {0x8, 0x4, r2}, {0x8, 0x0, r2}, {0x8, 0x2, r2}, {0x8, 0x4, r2}, {0x8, 0x2, r2}, {0x8, 0x1, r2}, {0x8, 0x2, r2}], {0x10, 0x1}, {0x20, 0x4}}, 0x6c, 0x2)
lsetxattr$system_posix_acl(&(0x7f0000000640)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x2, 0x0)
getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000980), &(0x7f0000000a00)=0x68)
chdir(&(0x7f0000000340)='./file0\x00')
symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00')
clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
lstat(&(0x7f0000000500)='./file0/file0\x00', 0x0)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)
chdir(&(0x7f00000002c0)='./file0/file0\x00')
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00')

20:20:41 executing program 3:
socket$key(0xf, 0x3, 0x2)
clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x404, 0x70bd27, 0x25dfdbfd, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x8}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x40000)
wait4(0x0, 0x0, 0x40000008, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
tkill(r0, 0xf)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x21, r0, 0x0, 0x0)

20:20:41 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0xb)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0xff, 0x8001}, 0x20)
r1 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x2}, 0x20)
getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040), &(0x7f0000000080)=0x4)

20:20:41 executing program 3:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setxattr$security_smack_transmute(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000100)='TRUE', 0x4, 0x2)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb)
ioctl$BLKTRACESTOP(r1, 0x1275, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xfff}]}, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg(r3, &(0x7f0000000440)={&(0x7f0000000240)=@hci, 0x80, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/176, 0xb0}], 0x1, &(0x7f00000003c0)=""/100, 0x64}, 0x2)
bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000200)={0x2, 0xfffffffffffffffd, @multicast1}, 0x10)
fadvise64(r0, 0x0, 0x10001, 0x4)
splice(r0, 0x0, r2, 0x0, 0x10005, 0x0)

[  249.821597] binder: 7026:7033 ioctl c018620b 0 returned -14
20:20:41 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='attr/fscreate\x00')
splice(r0, &(0x7f0000000000), r0, &(0x7f0000000040)=0x3a, 0xff, 0x2)
r1 = getpid()
r2 = syz_open_procfs(r1, &(0x7f0000000080)='net/sco\x00')
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
sched_rr_get_interval(r1, &(0x7f00000000c0))
lseek(r0, 0x2, 0x1)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000100)={0x1000000d})

20:20:41 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00')
r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
syz_open_pts(0xffffffffffffffff, 0x240000)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, <r2=>0x0})
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
openat$keychord(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r3, 0x0, 0xc, &(0x7f0000000140)='/dev/uinput\x00', 0xffffffffffffffff}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r2, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000200)='em1\xb7\xb5\x00'}, 0x30)
io_setup(0x7e, &(0x7f00000001c0))
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000280), 0x0)
ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0)
ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000000))

[  249.898130] binder: 7026:7047 ioctl c0306201 0 returned -14
[  249.916491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34337 sclass=netlink_route_socket pig=7051 comm=syz-executor.2
[  249.938825] binder: 7026:7047 BC_ACQUIRE_DONE u0000000000000000 no match
20:20:41 executing program 5:
open(&(0x7f0000000000)='./file0\x00', 0x2, 0x6)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r0, 0x0, 0x3, 0x4003ff)
r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4006, 0x0)
sendfile(r1, r1, 0x0, 0x8800000)

20:20:41 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@empty}, 0x0, @in6}}, &(0x7f0000000280)=0xe8)
sendmmsg(0xffffffffffffffff, &(0x7f0000003440)=[{{&(0x7f00000002c0)=@ll={0x11, 0x0, r1, 0x1, 0xf331, 0x6, @random="ef67075adcf2"}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="81ed1586b9be155ed35bf66fc6c62b1141925f144cdcbc5ddbaa2fa3ad739d2d5bf46712504cbba09ecfccbceab38348cc638913d19116f60aad3a8780ab5546f3b0045556fa953b9bf2ccd0497ba83f0313d375ba034fbd828916f063e3edb85cd17231e7e62c4cbd737190bc88811484ee17d49ea8044a7d", 0x79}], 0x1, &(0x7f0000000400)=[{0x20, 0x115, 0x7, "24e975206217cb82ad"}, {0xd0, 0x11e, 0x0, "c8ee0a139d6e76e9ae7355a0cc0222dc08700e3d9b15771405a916caaa650f62a30e2235c657b814a444fa6a5e01b6faa34b6fe6497819aeacbe51bf6db680dc7ea5019fd5bb8600068d5597db8ea64ad9b16f956782416f8aa6690b638ca27b838b9d3fe249e7dae7d9fc7dd2887392273615a3e5b1a9eadedacf794494b3c5da1e6720435ee162d5cd84f0efe26fd8e049679a96f7bb04d1247fa8d8b1dadf7dd7ac82d2c994d544e3d50e2aae994afefe46d22d0e69fd4a7bfd"}, {0x28, 0x1, 0x80000001, "616a65a70538511c52c06fc24a4b1837e21027f7b67cc491"}, {0x40, 0x19f, 0x6, "d1847cf7a4a2a97434343a8b258e5c49cd203aea22b40998277c78a95b9395d1a0c97dddb8f89a9aefa2"}], 0x158}, 0x1000}, {{&(0x7f0000000580)=@nl=@kern={0x10, 0x0, 0x0, 0x1000400}, 0x80, &(0x7f0000001740)=[{&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="e0f634aa347fdb8da208505a3d2ffc1d7c6f41fe0acf92acefaaa5825bed2cfbba6f4426f9d4be74aff540e620571157cfbc3c0bc2c1991c5e86039280a0ca44f54eb4", 0x43}, {&(0x7f0000001680)="87dea5b31a3bafec68683dc1b96555264ad794bdeb6183bb8fac46a20d4185f98808e0e2ffaa82f227525cf38b73e913b7e3374188756c7c4291d4b9a516cd3fa642e16ba2b6cb0e5d1603d2f397cc54b6c10c281091e96e6c53f2ca83f50314eb9b74455ee8fe0fed7ace73db2d6872c969262fda92ac85388f7b6d9e0a7c27ca39866d628eaa6139b5eb7b8c", 0x8d}], 0x3, &(0x7f0000001780)=[{0xa8, 0x10a, 0x7ff, "5953d763fdd22c362d6b1bb3704e7cbfe3226642f5b2cbdba297e415e189f1ce42f6ffa9ef3d362ceb05175ce43c370aa563a593948cf56d6318863cc9a17f08ec6206eb47e9a840a8f7e7318c5652251d5fbd0b41b37189b52cee82c630a2c02f0ea54c543240b44ee1c139cde99ce47196e4d79448603e04f4c964c13774c38ea4d9009d212c6bbc2ba57a68d23d18ccdc346d8a2d95fa"}, {0xe0, 0x117, 0x4, "019c2f34bc3da5961239e48625001a897274bde8318fa837770d7049673c4eb20d8899e395cfa7a77b02a413dbd86811abfcca4bd1f7af68ca48a0464d950b7903bd95ae048ba1ce8ff0da485200e09b9a8eb203372c3c9c1a6132a99dcfb2f0b4fb34f5561adea94b7e0dc1b1fb5fa332e85642ecfa1c8d91fdb71d3aea911b1624f8b34604117460513248a559158344e484dddeaa4e3b2b02cbcfd47fc728c6732b3959beb41a87db0f61105e4895c1ce2f6f810ecb4a189c13e84f229b5bba0e2657a89a41c3e16903c55d69"}, {0xa8, 0x11b, 0x0, "181ccb64b221eb698e5e31f861dfb4e3048caea8934a10d6103f8692a6648cad5df2d5082bfedc8a3b2e7bd99c5b031f29936f5710ea602333c63cdd70db08879809888da1671727d824e07b119fb5cf2aafbc639989a2468545198b3653c2a5b25460d2f11a8cdfc9f554e9d6ba263c2bb936a8c25c3bfe1e247108e46063aa7f5e203f86dd7bfa55ba023b9ab21e332540"}, {0x60, 0x6, 0x80, "fd3e4990b7b4104a3ea72eb42aeb0909086070934ba35c5a843d53d245f38a4a03dbbfd1532280dfbdcb52e66b890c87f1167e58cbcd4cd4cdcfd39ea22c922a9d1f346338745b1ac2f8fc"}], 0x290}, 0x3ff}, {{&(0x7f0000001a40)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x2, 0x2, 0x1, 0x2, {0xa, 0x4e22, 0x9, @mcast2, 0xb81}}}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000001ac0)="9d8791b629b142093f1b332dcfe0c389519fae04f5000ac70dbf791e7de01cd602a51b1ba188a1b38662437303b05a84c6f45e712abf815d746c8e81e6c1ebff8614d53a4b80571d39a7aee8c13005a95f8c6fba5bc9081a1d45e9d08079a9b2fb9a632be46239b2a823679a628f1b31f14ba5ba142ee6044ea251246920c6bb4709f2ffabda53d452a8a6bd28561c60171aeb585de7c2193add2411d233bd1a6e70ce8913a82626e923bf1b277dbe01cf01c529b981d5dea9abe1e5", 0xbc}, {&(0x7f0000001b80)="8e03183ae996a7c310177ef5ba20e0ad2e711e4af8c24d", 0x17}, {&(0x7f0000001bc0)="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", 0x1000}, {&(0x7f0000002bc0)="5b7e6fbb27e91990f071a215039d660cbbac4200854d3c55ecf7e11755c23b8718bcfac666256937f4572e946f723236b1ebd3a510", 0x35}, {&(0x7f0000002c00)="f260f385633fab9515bb7e8edb5f8fa967f313861087b60e2c1aae5e62c2048f260fa43548fee7265bfff8f46b125b65e43ed60cb610a2e005293473278a53d1215257a8a55c6a512edb6e04f4895b542705bd7a5f047f6346212e113bc923bd6a42410ba1cd9c99cb6988dfc8c25277a08a50cb827095dc3023eb2e2f72f97f1e33cb07b608ecac1dfeba90", 0x8c}, {&(0x7f0000002cc0)="3ec62e8bd80490010ab69877c75ec395edf2ae0845623152ea26422f7e14e806647ba98f8f94c3a6586045f8edbe9ca9a0427c7c3f6737b67103ed02531a4297d8340eb258b80e87409568870c641a00ad1bc5895607dd8d2980a7b1b0978943dd2c06d1499c4d3cca139dfbb3d79ae3c1df1c5de1c16cb1976b0687350a35da592d66f6d96523d32055", 0x8a}, {&(0x7f0000002d80)="42b2b80d8d082b4f13b17146af0e13ba08a7395504c770e5900b3ab641e3ffe43138c393040e8f1f009f3a5b575d0febbaf466355ff1c7744bb79e03a79edabc039e939c45e906a22e832b1800d8efce83fc0ae73dee737f52a600ef6772a1d6ff1c9702ccd50d4b3423ad58ace0fb61fccbfc54be197f46e78593924bd2718f3dbf6f3b487bdaf920aa25fc6b3f36b65e07fbd3255109f7f1f5c18d23227d76bcc6111baa", 0xa5}, {&(0x7f0000002e40)="34694472750dd96908b7041db9f285fbbdb66bb656c799f2ed5e8064e3550c2b80cd0378f3b2670c63ee695840d8e5e7b5a0b1c71ef2e2f5a5071a5596d6a5b0f22d1dab73fff665481f01713cd7eadef6d64789265e7d67ad1059cc1f2daf70417f592f9ec4bf528e5b43a97f2f1e2eed7abe2cf2f10e980745fc254ce5dec5a7cb9252723baa66099b70b8eb32a3ff9233d5eb462b021fe7dd81589552772ab4f74db3bf252cb51c9247fa90586f162ae4925733af365191888c30f6e224bc7d3acd5bee6066", 0xc7}], 0x8, &(0x7f0000002fc0)=[{0x98, 0x29, 0x10000, "e15323eb4f9d1da615c124a251d7c16ebad765199914964106f539fd9f0e6c1e9a51718082c56516675daac48e8e8df7ac0245380e3eb2a6fa466737c9467495603b09dc0237225184fa3b04aa6288b511581899779c46936e2d10bc82d7ba116a7ac6d0f8db5b07491e4819078bd70a4e71f6ddac6b96ff2565397398857df16ced"}, {0xc0, 0x10f, 0x7, "484a7628b297aa45e88ddad286687ec9bfee9826d1236c8e085f6f0886250b7aa33ed4a4a2a5214b22292c1d2f7b13e496a5f06eee8200ed5d4fd44814656b43cb41f2cd600c55c136afbe8c2cdd4e8817a2b7e9ca6f68d49fd503bba883c89b2a426646693ff8cadd91f866c7b4c8b8f00e3fee459845aded858bd0c1e36296315a1091cc0e175285fc0f6d8a0ddc40557f604977da04ac36598047a824bd28b80f450d68d56e8a69025489e6"}, {0x20, 0x18e, 0x7, "88b3457a8ae422f25491"}, {0xe0, 0x3a, 0x4, "e2c1973cae5b26a095d808b3e5c26d674ebbe27e43fa4820d8cdcbcc01ad1041103ddb95aefa87c42dbdefc71611e4ec99a2b70afb8acbd5f56d050f793772b4d40881649f12101b9ff52aa9cbe2e6fe07368242b3a1ff333411d6e6493754f03bc5bd42c230b69947ac3ca0b8ffd1ce21a8309009a5e7d337a2025e9927bf260a3bb2ccf19f70350e1dae8d56dc6efc6e5ca7b7b666763c59caab7e1e0421ea95fe86c81d3474df7184f5f02976d62c6e805b0a6349ea544f33b565d8b82ecf53163882788612b1b3eb"}, {0x28, 0x0, 0x80000001, "a48dfe936c4ca7c6b2ef5ed2085080ecbe7c5ef9"}, {0x78, 0x119, 0x5e9, "a56b5ce44c51ac6a77a1518d97a4d4a8b4ad8871f6fd0bfdf56c349959ab68328cba2fec9ff4ebb8a764eec94f9dde4bb9a05b9230e2690abb069ecb688c5afdcdfc3bfba16d10574c2463e92ca05cc6d4b2f8a42860fe31aeb97e6a0a19b06a28b41692713d"}, {0x48, 0x111, 0x1, "ed93569c094250944c10a1ad76f318d2a0de650b42ba2eae8176929cd52861474c523e113bb884fc43195207df53053c6728"}, {0x20, 0x13e, 0x4b9, "ed278b47f610a1c59cc1"}, {0x28, 0x113, 0x7, "01fbd2376c553c90053a20cc933b97e1797545e61f07"}, {0xe0, 0x104, 0x200, "aafe6ffc67680c21aa825a73266e3392e63227bb57c43a8cb3c7ab2c0e1cdb2c605a9bffea184a6ad7226e4eda3783e8a836a0b6ccff0e6e066a950ad1ac8918b9f4e00d916665451f3b94dc658da6d894aa4721282bc595846c4fba0ccb1bc16824ddff30cd4c05292156d1d60885db81321efea98b4f996330c8147050bb18654051ff00bdc97834aba15fb39d0752379c3ff493cef9efdffed466dae4d7ff8fd4d5cf6a66bb2ee384cbffaefac529384c4c8809db38db7ebe071319bd1c230e5335f1fd09fdd01e4e26"}], 0x468}, 0x20}], 0x3, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
sendmmsg(r0, &(0x7f0000007e00), 0x40000000000034b, 0x0)

20:20:41 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14)
lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14, 0x80000)
sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=@allocspi={0x133c, 0x16, 0x100, 0x70bd27, 0x25dfdbfb, {{{@in6=@mcast1, @in6=@loopback, 0x4e24, 0xff, 0x4e23, 0x4, 0xa, 0xa0, 0xa0, 0xff, r1, r2}, {@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d3, 0xff}, @in6=@ipv4={[], [], @empty}, {0x6, 0x718f, 0x8, 0x1, 0x40, 0x1, 0x1000, 0x6341ebc9}, {0x4561, 0x4, 0x80000001, 0x2}, {0x7ff, 0x7ff, 0xfffffffffffffffb}, 0x70bd29, 0x3502, 0xa, 0x3, 0x0, 0x10}, 0x8, 0x2}, [@offload={0xc, 0x1c, {r4, 0x2}}, @replay_thresh={0x8, 0xb, 0x7}, @sec_ctx={0x40, 0x8, {0x3c, 0x8, 0x1, 0x4, 0x34, "bc6191cb1d11f584316379f0b35dcc87189913648e463100572f15e32400b406bf5c0a79e86ef2f1365800f268c1ea94845e152c"}}, @tfcpad={0x8, 0x16, 0x5}, @migrate={0x190, 0x11, [{@in=@rand_addr=0x6de1, @in=@local, 0x2b, 0x0, 0x0, 0x3506, 0x2, 0xa}, {@in6=@dev={0xfe, 0x80, [], 0x13}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3b, 0x3, 0x0, 0x3506, 0xa, 0x2}, {@in6=@rand_addr="5ba9acb1fc8f2a2d0edaca2055730a50", @in=@empty, 0x33, 0x0, 0x0, 0x3504, 0xa}, {@in=@broadcast, @in=@local, 0x0, 0x3, 0x0, 0x3502, 0x2, 0xa}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x3b, 0x2, 0x0, 0x3500, 0xa, 0x2}, {@in=@broadcast, @in=@empty, 0x32, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in=@multicast2, @in6=@dev={0xfe, 0x80, [], 0x11}, 0x33, 0x7e86fbfcf609219c, 0x0, 0x3505, 0xa, 0xa}, {@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x3504, 0xa, 0xa}, {@in=@rand_addr=0x2, @in=@rand_addr=0x7f, 0x6f, 0x6, 0x0, 0x3506, 0x2, 0x2}]}, @proto={0x8, 0x19, 0x7e}, @tfcpad={0x8, 0x16, 0x6}, @algo_comp={0x1048, 0x3, {{'lzs\x00'}, 0x8000, "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"}}]}, 0x133c}}, 0x0)
recvmmsg(r3, &(0x7f00000032c0)=[{{&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000000100)=[{&(0x7f00000017c0)=""/207, 0xcf}, {&(0x7f00000018c0)=""/219, 0xdb}, {&(0x7f0000000080)=""/73, 0x49}, {&(0x7f0000000180)=""/115, 0x73}], 0x4}, 0x8000}, {{&(0x7f00000019c0)=@generic, 0x80, &(0x7f0000001d00)=[{&(0x7f0000000200)=""/30, 0x1e}, {&(0x7f00000003c0)=""/30, 0x1e}, {&(0x7f0000001a40)=""/150, 0x96}, {&(0x7f0000001b00)=""/160, 0xa0}, {&(0x7f0000001bc0)}, {&(0x7f0000001c00)=""/199, 0xc7}], 0x6}, 0x8}, {{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000001d80)=""/137, 0x89}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000002e80)=""/230, 0xe6}, {&(0x7f0000002f80)=""/131, 0x83}, {&(0x7f0000003040)=""/252, 0xfc}, {&(0x7f0000003140)=""/122, 0x7a}], 0x7, &(0x7f0000003240)=""/86, 0x56}, 0xfffffffffffffffa}], 0x3, 0x10000, &(0x7f0000003380)={0x77359400})

20:20:42 executing program 3:
socketpair$unix(0x1, 0x400000005, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
setsockopt$sock_int(r0, 0x1, 0x33, &(0x7f0000000040), 0x4)

[  250.340632] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34337 sclass=netlink_route_socket pig=7032 comm=syz-executor.2
20:20:42 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

20:20:42 executing program 1:
openat$uhid(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uhid\x00', 0x0, 0x0)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x800, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8)
r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x0, 0x0)
getresuid(&(0x7f0000000200)=<r2=>0x0, &(0x7f0000000240), &(0x7f0000000280))
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@ipv4={[], [], @local}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@mcast2}}}, &(0x7f00000003c0)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xe8)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440)={0x0, <r5=>0x0}, &(0x7f00000005c0)=0xc)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000600)={0x0, <r6=>0x0}, &(0x7f0000000640)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000680)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000780)=0xe8)
r8 = getuid()
stat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
getgroups(0x7, &(0x7f0000000880)=[<r10=>0xffffffffffffffff, 0x0, 0x0, 0xee01, 0xee01, 0xee01, 0x0])
r11 = getegid()
r12 = getegid()
r13 = getegid()
r14 = getgid()
getgroups(0x6, &(0x7f00000008c0)=[0xee00, 0x0, 0x0, <r15=>0xffffffffffffffff, 0xee01, 0xee00])
fstat(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0})
r17 = getgid()
fsetxattr$system_posix_acl(r1, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000980)={{}, {0x1, 0x4}, [{0x2, 0x3, r2}, {0x2, 0x5, r3}, {0x2, 0x2, r4}, {0x2, 0x7, r5}, {0x2, 0x0, r6}, {0x2, 0x6, r7}, {0x2, 0x7, r8}, {0x2, 0x1, r9}], {0x4, 0x1}, [{0x8, 0x5, r10}, {0x8, 0x5, r11}, {0x8, 0x0, r12}, {0x8, 0x3, r13}, {0x8, 0x2, r14}, {0x8, 0x0, r15}, {0x8, 0x2, r16}, {0x8, 0x7, r17}], {0x10, 0x8b29af6a84ed0de1}, {0x20, 0x5}}, 0xa4, 0x1)
pipe(&(0x7f0000000480)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
write(r19, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000040))
tee(r18, r18, 0x0, 0x4)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0)
vmsplice(r18, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

20:20:42 executing program 2:
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x8000009)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0xd56}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x50d, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_proto_private(r0, 0x89e7, &(0x7f00000006c0)="b53706c5830bd76d31646d695bb5603f102e8f0b81171fcc88cca761719db23c5227e8c42b13aaac765d450fe6901cb699839c12ae3016a9b6fc5a88d65ef9d731248456a7253211eaf219acb033452c558213640636c0709d1aece7c5dd144ac399a64fdf8d38f3929f31e8")
getpgrp(0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x200000000c10)
perf_event_open(&(0x7f0000000040)={0x200000002, 0x70, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r1, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000800)={r0, &(0x7f0000000740)="ae9e51c5c25a311a7ddecff001ef2597297787cbcc3ad09dbb53fce6cbca8dd79cbae11997b404ffbe9ca72cee5081765fddda20a8e25117b888dd40ae89cd9598b4601a64bfbc7c09e53f7cc4cdfb56b0877cde60693676b875fdd88097c15ab71f3351fc5d79c79aa459d324b36354782f4023a6ef338b26caf34ee19287305225590419cff6308e6d68b4d62c88e6c6c305bc52603184c94243c1e264e69b1ad2249121faa70e2572e19cf86d3dfa5f001241024e464d1e", &(0x7f0000000180)=""/104}, 0x18)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000840)='tls\x00', 0x4)
recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/150, 0x96}], 0x2, &(0x7f0000000540)=""/177, 0xb1}, 0x10000)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000440)=0x1, 0x4)
setxattr$security_smack_entry(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)='security.SMACK64\x00', &(0x7f0000000a40)='\x00', 0x1, 0x1)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000880)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f0000000980)=0xe8)
setuid(r4)
ptrace(0x10, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/policy\x00', 0x0, 0x0)
ioctl$PIO_SCRNMAP(r5, 0x4b41, &(0x7f0000000600)="34c6778786de440a41c97dc621a2676aff84e3d16941ad19978a9898d4e9d420390a6dc717e498c176568beea825a51fe332711710c774a73c32bfa97cba7ba245")

20:20:42 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000040)=r0)
tkill(r0, 0x32)
ptrace$cont(0x18, r0, 0x0, 0x4)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x9c})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

20:20:42 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, <r1=>0x0})
sched_setattr(r1, &(0x7f0000000180)={0x0, 0x1, 0x0, 0xaa, 0x4, 0x7fff, 0x9, 0x80000000}, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xa)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x10)
getsockopt$inet6_int(r2, 0x29, 0x10, 0x0, &(0x7f0000000040))

[  250.650558] binder: 7077:7078 ioctl c018620b 0 returned -14
20:20:42 executing program 0:
r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8b2b, 0x0)

[  250.710608] binder: 7077:7083 BC_ACQUIRE_DONE u0000000000000000 no match
20:20:42 executing program 0:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x3c)
ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f00000000c0)={0x0, 0x1, 0x5, 0x4, 0x9, 0xb1})
socket$inet(0x2, 0x5000000000000001, 0x0)
socket(0x0, 0x2, 0x3ff)
waitid(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0)
syz_genetlink_get_family_id$net_dm(&(0x7f0000000180)='NET_DM\x00')
sendmsg$NET_DM_CMD_STOP(r1, 0x0, 0x400c004)
fstat(0xffffffffffffffff, 0x0)
r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
getsockname(r2, &(0x7f00000001c0)=@nl, &(0x7f0000000140)=0x80)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000000100)='./file0\x00', 0x20141042, 0x1000000000000)
sendfile(r3, r1, 0x0, 0x2008000fffffffe)

20:20:42 executing program 2:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = inotify_init()
read(r0, 0x0, 0x0)
gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
ppoll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x4202}, {0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x8000}, {}], 0x6, &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={0x3}, 0x2)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540)='/dev/zero\x00', 0x24000, 0x0)
r2 = syz_open_pts(r1, 0x8102)
ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000200)=0x8)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rmdir(&(0x7f00000000c0)='./bus\x00')
r3 = socket$inet6(0xa, 0x800, 0xffffffff)
r4 = fcntl$getown(r2, 0x9)
ptrace$pokeuser(0x6, r4, 0x0, 0x7)
ioctl(r3, 0x6, &(0x7f0000000dc0)="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")
r5 = creat(&(0x7f0000000440)='./bus\x00', 0x4)
rmdir(&(0x7f0000000300)='./bus\x00')
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'veth1\x00', <r6=>0x0})
ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000900)={@mcast2, @remote, @mcast2, 0x2, 0xfffffffffffffffe, 0x7fffffff, 0x100000000000400, 0x84, 0x617, r6})
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="5ec446749811e11c2cd6bf42f902bef00006836e0cef099c58101120e5f6e94fd2b479248448af797cc87eb1acc8320aca3e72a7c11728f68583cfc2cddc1fbbe99f2dd0a59458a5fd5db39d7402"], 0x4e)
ioctl$PIO_UNISCRNMAP(r5, 0x4b6a, &(0x7f0000000a00)="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")
r7 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_int(r7, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x12d)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x100800, 0x0, 0xff, 0x1, 0x1, 0x2, 0x10000}, 0x20)
ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000180)=<r8=>0x0)
fcntl$setownex(r7, 0xf, &(0x7f0000000580)={0x0, r8})
ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f00000001c0)={'hwsi:0\x00', @remote})
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000480)=0xc)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0xff, 0x3}, 0x20)

20:20:42 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
mkdir(0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0)
getsockopt$inet6_buf(r1, 0x29, 0x0, &(0x7f0000000080)=""/52, &(0x7f00000000c0)=0x34)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
rename(0x0, 0x0)
munmap(&(0x7f0000551000/0x2000)=nil, 0x2000)
r2 = syz_genetlink_get_family_id$net_dm(&(0x7f00000001c0)='NET_DM\x00')
sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0xf00, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x90)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0)
ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f00000002c0)=""/246)
r4 = memfd_create(&(0x7f0000000140)='\x05\xf9', 0x0)
pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
sendfile(r3, r4, 0x0, 0x102002700)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)

20:20:42 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040), 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
close(r1)
r2 = socket$inet6(0xa, 0x803, 0xff)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
io_setup(0x7, &(0x7f0000000240)=<r3=>0x0)
ioctl$sock_ifreq(r1, 0x8939, &(0x7f00000000c0)={'team_slave_0\x00', @ifru_hwaddr=@broadcast})
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000180)={{0x2, 0x1, 0x1000, 0x0, 0x7}, 0x10, 0x6, 0x6})
io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r1, 0x0, 0x12f}])

20:20:42 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x0, 0x0)
chroot(&(0x7f0000000280)='./file0\x00')
ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000200)={0x3, 0x2})
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='.dg]B\xdb\x00\x00\x005\xb0\x14:\x85\x0f\xd2\x0e', 0x1ff)
getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f00000002c0)=""/136, &(0x7f0000000380)=0x88)
pread64(r0, &(0x7f0000000040)=""/166, 0xa6, 0x0)
setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000240), 0x10)
r2 = creat(&(0x7f0000000100)='./file0\x00', 0x4)
ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000140)=[0x2, 0x993])

20:20:42 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff)
r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00')
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x4, 0xca, 0xb12})
ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f0000000140)=""/157)
fadvise64(r1, 0x0, 0x0, 0x1)
truncate(&(0x7f0000000240)='./file0\x00', 0x90002)
sendfile(r1, r1, 0x0, 0x8800000)

[  250.931913] syz-executor.5 (7063) used greatest stack depth: 23416 bytes left
20:20:43 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

20:20:43 executing program 1:
r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000080)={'batadv0\x00', {0x2, 0x4e20, @remote}})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$packet(0x11, 0x100000000000a, 0x300)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0xe}})

20:20:43 executing program 3:
clone(0x3fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x2f)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="052fc73cb0d715b1ef669493f0d92947ff3e2328c903e58f341d298d38872f6df7200d34b2af67726d0042efb7ef3dae691979578e49ebda3834012041e98ec2ab01bc98ceee20f1a883f6d9ad4d6d093aa8c98ed5545b08ed268806f993a5d1ea1a63668c4e1c5ae744292bea7aaf8b18a97d340954bc4faf5b6abc9bd283d171ed84001c1647caa7f6dc3f9ae367e6b727a10912"], 0x39)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0))
ptrace$cont(0x7, r0, 0x0, 0x0)

20:20:43 executing program 5:
r0 = socket$inet(0x2, 0x3fffffffffff7ffe, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000400)=0x8, 0x4)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x802122001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setxattr$security_smack_entry(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000900)='security.SMACK64IPOUT\x00', &(0x7f0000000200)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xe9u\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00', 0x46, 0x1)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='wchan\x00')
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
fcntl$addseals(r4, 0x409, 0x8)
pwrite64(r5, &(0x7f000003bfff)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r5, 0x0)
lseek(r4, 0x0, 0x1)
sendfile(r5, r5, &(0x7f0000000440), 0x20)
unlinkat(r1, &(0x7f00000002c0)='./bus\x00', 0x200)
sendfile(r0, r2, &(0x7f0000000140), 0x1000000001fd)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000280)='./file0\x00')
mount(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x53, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
sendfile(r6, 0xffffffffffffffff, 0x0, 0x8000)
getsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000480), &(0x7f00000003c0)=0x10)

20:20:43 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x15)
socketpair$unix(0x1, 0x4000005, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)="480000001400199009004b0101048c01010000ebbd2e2ab98d6a0100632379eb000000000000551f5f0028213ee20607000000000000003f666674a8ffff00c7e5ed5e00000000c8", 0x48}], 0x1)

[  251.458131] binder: 7137:7138 ioctl c018620b 0 returned -14
20:20:43 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='pagemap\x00')
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x200, 0x0)
fdatasync(r0)
r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x584c07d9, &(0x7f0000000980), 0x100000000000008a, 0x0, 0xfffffffffffffe03}, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00')
getdents(r3, &(0x7f0000000440)=""/46, 0x2e)
r4 = socket$inet6(0xa, 0x3, 0x2)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f0000dcd000/0x1000)=nil, 0x1000, &(0x7f0000001f00)=""/4096)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000e49000/0x1000)=nil, 0x1000, 0x2000, 0xffffffffffffffff, &(0x7f0000aa8000/0x2000)=nil)
munlockall()
r5 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r6 = socket(0xa, 0x1, 0x0)
write$P9_RFLUSH(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000001a80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@initdev}, 0x0, @in=@remote}}, &(0x7f0000001b80)=0xe8)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', <r8=>r7})
ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000240)={0x7, 0x5})
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000080)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, @mcast2, 0xf5d, 0x4, 0x0, 0x2, 0x0, 0x20000, r8})
fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000300))
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000002c0)={@remote, 0x7e, r8})
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000480)={@mcast2, @mcast1, @loopback, 0x0, 0x10001, 0x0, 0x0, 0xffffffffffffb8fa, 0x83420004, r8})
getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000014c0)=""/205, &(0x7f0000000100)=0xfffffffffffffc87)
syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000008c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"])
ioctl(0xffffffffffffffff, 0x2, &(0x7f0000000000)="45b11b")
r9 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSMASK(r9, 0x40104593, &(0x7f0000001480)={0x1e, 0x0, 0x0})

20:20:43 executing program 0:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0)
lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:ping_exec_t:s0\x00', 0x21, 0x0)
r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c)
r1 = add_key(&(0x7f0000000180)='user\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r2 = add_key(&(0x7f0000000240)='big_key\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0xffffffffffffff5b, r1)
keyctl$get_keyring_id(0x0, r2, 0x8e19)
pipe2$9p(&(0x7f00000002c0), 0x800)
pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='./file0\x00')
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

[  251.500850] audit: type=1400 audit(1553631643.378:50): avc:  denied  { create } for  pid=7141 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1
[  251.511114] binder: 7137:7149 BC_ACQUIRE_DONE u0000000000000000 no match
20:20:43 executing program 2:
r0 = open(&(0x7f00000003c0)='./file0\x00', 0x141042, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x1)
ioctl(r1, 0x2, &(0x7f0000000280)="a2e91d629d96abecf70cd52f6b388b240afec91d23dd29f8a9bfd5382443bd6daae518e2e7e8e5559c802f3b96f5e6bbb51a13ebfacd7931d5e0ac99a5c491a9e5dfc5be90260008fcd0d4c6efdc27c845e2c38595d2264229d1738016934876a213fab7c920a1f8f2cad233e364aa965d0633dbe1fa13dd385c27f0fbfd003e3030676158c9d5be05d1fa78c73896e48671ef9d7dd19fe0fc888e63959abae29fe1bd1c01d5ee027737883a453a0f551274cea1626fee07b8f4a097d5e60deb06be409555bf4cb4d2ffac91725f280fb6758be8961246")
write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[], 0x2e7)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=<r2=>0x0)
ptrace$setregs(0xffffffffffffffff, r2, 0x9, &(0x7f0000000400)="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")
getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000080)=0x8)
sendfile(r0, r0, &(0x7f0000000040), 0xa198)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000000c0)=0x8)

20:20:43 executing program 3:
clone(0x2000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x3000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070")
tkill(r0, 0x38)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xaa})
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x480, 0x140, 0x258, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@arp={@multicast2, @local, 0xff000000, 0xffffff00, @mac=@dev={[], 0xf}, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@remote, {[0xff, 0x0, 0xff]}, 0x9, 0x80000000, 0x3, 0x74, 0x8, 0x0, 'caif0\x00', 'veth1_to_team\x00', {0xff}, {}, 0x0, 0x14}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @dev={0xac, 0x14, 0x14, 0x20}, @loopback, 0xf, 0xffffffff}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xff000000, 0xffffffff, @mac, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, @empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}, 0xff, 0xfff, 0x9, 0x6, 0x1, 0x2, 'irlan0\x00', 'team_slave_1\x00', {}, {0xff}, 0x0, 0x40}, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@arp={@rand_addr=0x8, @dev={0xac, 0x14, 0x14, 0x23}, 0xffffff00, 0xffffffff, @empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}, @empty, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}, 0x5, 0x7, 0xfffffffffffffffa, 0x9, 0x8, 0xa68d, 'vcan0\x00', 'vlan0\x00', {}, {0xff}, 0x0, 0x220}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x5f, @remote, 0x1, 0x1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

20:20:43 executing program 0:
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x502ffe, 0x0)
ioctl$PPPIOCDISCONN(r0, 0x7439)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00')
fsetxattr(r0, &(0x7f00000000c0)=@known='user.syz\x00', &(0x7f0000000100)='oom_adj\x00', 0x8, 0x3)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='1', 0x1}], 0x1)
ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000040)={r1, 0x0, 0x1, 0x1a64, 0x5c59})

20:20:43 executing program 1:
r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @initdev}, &(0x7f0000000140)=0x10)
stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4e24, 0x1, 0x4e22, 0x103, 0x2, 0x20, 0xa0, 0x3b, 0x0, r1}, {0x9, 0x3, 0xff, 0xaa, 0x4, 0x400, 0x1, 0xff}, {0x9, 0xa1b8, 0x7, 0x7}, 0x101, 0x6e6bb1, 0x0, 0x1, 0x0, 0x3}, {{@in=@remote, 0x4d3, 0x3f}, 0x0, @in=@loopback, 0x3504, 0x4, 0x0, 0x9, 0x7b58, 0xbcfd}}, 0xe8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000500)={0x0, @aes128, 0x2, "c53917c6d7877f89"})
connect$inet6(r2, &(0x7f0000000080), 0x1c)
r3 = dup2(r2, r2)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = gettid()
setsockopt$inet6_buf(r3, 0x29, 0x20000000000048, &(0x7f00000000c0)="cc050040", 0x4)
accept$packet(r3, &(0x7f0000000040)={0x11, 0x0, <r5=>0x0}, &(0x7f00000007c0)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000800)={'team0\x00', r5})
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x802123001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r8 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/load\x00', 0x2, 0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x20000, 0x0)
ioctl$VT_GETSTATE(r9, 0x5603, &(0x7f0000000d40)={0x7, 0x10, 0x8000000000008})
write$selinux_load(r8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x64)
setxattr$security_smack_entry(&(0x7f0000000380)='./bus\x00', &(0x7f00000001c0)='security.SMACK64\x00', &(0x7f0000000200)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xe9u\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00', 0x46, 0x1)
fcntl$dupfd(r7, 0x0, r8)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000013c0)=ANY=[@ANYBLOB="7d1fc4a43bfbae6fc9fea32dd18742b9ee469c4c1e56e9c8b22eff63bfd53bd9b54f7d6621812070aa3ed7714bdc16c13520e705c9290dc569dfcb330262532ebf8c64053c2997951777942cc164627a30e3be741a9160f0591b060089ad05000000af02000000000000cf89fb51cd42dfabe96fa1de99ded786ec6abd654a5f0859fa0d3abd51c7b4625d55ab53c3d7009080af9ec6c82fedfc4ade431ffccb604dfe71b276f19ccb7daa9a1dc00710d8f8aa40396074ab85226babf54fac81da95ce294d519ee921e861084dd97816c06639b249b293f84768eeb8bafdf701fa6273e9f1a424581c513907000000"], 0xf5)
fcntl$setstatus(r6, 0x4, 0x2000)
ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427)

20:20:43 executing program 0:
socketpair$unix(0x1, 0x0, 0x0, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@ipv4={[], [], @broadcast}, @in6}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000400)=0xe8)
r2 = dup3(r1, r0, 0x80000)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'ip6tnl0\x00', 0x1000})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
r4 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(r3, &(0x7f0000000340)=""/39, 0x27, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
dup2(r0, r3)

[  251.789699] FAT-fs (loop5): bogus number of reserved sectors
[  251.797174] FAT-fs (loop5): Can't find a valid FAT filesystem
[  251.945423] FAT-fs (loop5): bogus number of reserved sectors
[  251.951833] FAT-fs (loop5): Can't find a valid FAT filesystem
20:20:44 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/checkreqprot\x00', 0x400000, 0x0)
ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480))
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10a00, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x20420}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x37, 0x4)
ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400))
ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x800000000, 0xffffffffffffffff})
sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd)
ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0))
ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/status\x00', 0x0, 0x0)
ioctl$KDDELIO(r2, 0x4b35, 0x8)
rename(&(0x7f0000002300)='./file0\x00', &(0x7f0000000040)='./file0\x00')
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x3c7}}, 0x0)
socket$key(0xf, 0x3, 0x2)
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000048c0)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in6=@remote}}}, &(0x7f00000049c0)=0xe8)
unshare(0x60000000)
recvmmsg(0xffffffffffffffff, &(0x7f0000000e00)=[{{&(0x7f0000000240)=@nfc, 0x80, &(0x7f0000000b40)=[{&(0x7f00000003c0)=""/45, 0x2d}, {&(0x7f0000000780)=""/157, 0x9d}, {&(0x7f0000000840)=""/141, 0x8d}, {&(0x7f0000000900)=""/181, 0xb5}, {&(0x7f00000009c0)=""/98, 0x62}, {&(0x7f0000000a40)=""/73, 0x49}, {&(0x7f0000000ac0)=""/69, 0x45}], 0x7, &(0x7f00000010c0)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000000bc0)=@nfc, 0x80, &(0x7f0000000440)=[{&(0x7f0000000c40)=""/140, 0x8c}, {&(0x7f0000000d00)=""/87, 0x57}], 0x2, &(0x7f0000000d80)=""/120, 0x78}, 0x37}], 0x2, 0x0, &(0x7f0000001080))
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]})
sendmmsg(r0, &(0x7f0000007740)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000005c0)="e6009802b95827a0d242b77a65f6eae95efd768b7a8cf10c75bf0651005d487cdfaaafa64e800103865219011fa63f5eb5b66d5cc750deb26450f4955b072afa466c470100000001000000fd806f790081aab5da6deeadb9cb24ce20b507440af006b499466b800443b4444ba7a1902bea5e7630ae9b2acfc8c8cce23f492fc9ccaa9c23e18b52fa9287acae083ec956efe01d4a7d6c4bd4236f387f93b92e7ed6565ad77399871948234fb17127", 0xae}], 0x1}, 0x1}], 0x1, 0x0)
sched_setaffinity(0x0, 0x1fb, &(0x7f0000000500)=0x100006)
creat(&(0x7f0000000e80)='./file0\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000300)='threaded\x00', 0x9)
ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000380))

20:20:44 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

20:20:44 executing program 0:
clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff)
recvfrom(r1, &(0x7f0000000180)=""/184, 0xfffffffffffffd84, 0x10100, 0x0, 0xfffffffffffffd51)

20:20:44 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0xffffff80}}}, 0xb8}}, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x1, 0x0)
ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000040))
getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000080)={'icmp6\x00'}, &(0x7f00000000c0)=0x1e)

20:20:44 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='pagemap\x00')
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x200, 0x0)
fdatasync(r0)
r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x584c07d9, &(0x7f0000000980), 0x100000000000008a, 0x0, 0xfffffffffffffe03}, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00')
getdents(r3, &(0x7f0000000440)=""/46, 0x2e)
r4 = socket$inet6(0xa, 0x3, 0x2)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f0000dcd000/0x1000)=nil, 0x1000, &(0x7f0000001f00)=""/4096)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000e49000/0x1000)=nil, 0x1000, 0x2000, 0xffffffffffffffff, &(0x7f0000aa8000/0x2000)=nil)
munlockall()
r5 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r6 = socket(0xa, 0x1, 0x0)
write$P9_RFLUSH(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000001a80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@initdev}, 0x0, @in=@remote}}, &(0x7f0000001b80)=0xe8)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', <r8=>r7})
ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000240)={0x7, 0x5})
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000080)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, @mcast2, 0xf5d, 0x4, 0x0, 0x2, 0x0, 0x20000, r8})
fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000300))
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000002c0)={@remote, 0x7e, r8})
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000480)={@mcast2, @mcast1, @loopback, 0x0, 0x10001, 0x0, 0x0, 0xffffffffffffb8fa, 0x83420004, r8})
getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000014c0)=""/205, &(0x7f0000000100)=0xfffffffffffffc87)
syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000008c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"])
ioctl(0xffffffffffffffff, 0x2, &(0x7f0000000000)="45b11b")
r9 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSMASK(r9, 0x40104593, &(0x7f0000001480)={0x1e, 0x0, 0x0})

20:20:44 executing program 1:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="85000008180000006ca7ba5bc100000095def129f854997f"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0xcf, &(0x7f0000000480)=""/207}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="720605caccd6b3123601a5e23f43", 0x0}, 0x28)
r1 = dup(r0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={r1, r0, 0x6, 0x1}, 0x10)

20:20:44 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
socketpair$unix(0x1, 0x100000003, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r0, &(0x7f00000002c0)=""/210, 0xd2, 0x0, 0x0, 0x0)
r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
setns(r2, 0x24000000)
write$binfmt_elf64(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="7f454c460100f30700000000000000000300000002000000f80100000000000040000000000000008800000000000000f1d70000000038000200c8000180070057e574640600000000040000000000000800000000000000008000000000007f249d1fd9b484e300ff070000000000001cbd5b020000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x187)
dup2(r1, r0)

20:20:44 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = fcntl$dupfd(r0, 0x0, r1)
setsockopt$inet_mreq(r2, 0x0, 0x27, &(0x7f0000000340)={@multicast1, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x8)
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x4400, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xd5, 0x1000, &(0x7f0000000200)="ed12a3e513181e0967d829195a3b8250641dbc91647ba1950dccd73fc339e773ff04344715480e1e6732a98fa13a4a2b8a9f67207267dc3c17b2f304aa47b0e049f3cc6af95bcba80a82cb4003b2edf6d1264344cf8e416220e192925c88e131064eeb3d5d14d8ce34c7809dd3ee4b59b3f64b170b8003b4764072b49cc8e490e5f9fb290ae61ca4a8a6f6a6a9e954023fca4ac592b9dfeb212764037d8c6fa665554810f4063978c73db8c7ec483041d52810b600b5111a20b1c319763ea011d20e45986bbf9aff09a35c42b421972be4aa346b34", &(0x7f0000000800)=""/4096, 0x3}, 0x28)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="400100001a002100000000000000000000000000000000000000000000000001ac1414bb00000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x140}}, 0x0)

[  252.335738] binder: 7210:7216 ioctl c018620b 0 returned -14
[  252.358666] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'.
[  252.371555] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=22713 sclass=netlink_route_socket pig=7221 comm=syz-executor.2
20:20:44 executing program 1:
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
r2 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(r1, &(0x7f0000000340)=""/39, 0x27, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba658a70840000000000000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0)
dup2(r0, r1)
ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0)
openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00')
connect(0xffffffffffffffff, &(0x7f0000000180)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x80)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000200), 0x8)
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00022bbd5300fbdbdf2503000000"], 0x1}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
socket$inet(0x2, 0x4000000000000001, 0x0)

[  252.396512] binder: 7210:7223 BC_ACQUIRE_DONE u0000000000000000 no match
[  252.477142] device Y­4��`Ò˜ left promiscuous mode
20:20:44 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x400001000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/170, 0xaa}, {&(0x7f00000002c0)=""/78, 0x4e}], 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.swap.current\x00', 0x0, 0x0)
ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000140))
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='rdma.current\x00', 0x0, 0x0)
ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x7, 0x401}, {0x2, 0x4}, {0x100, 0x9}, {0x4b9, 0x7f}, {0x2, 0x1000}]})
syz_mount_image$f2fs(&(0x7f0000000180)='f2fs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f00000003c0)=[{&(0x7f00000006c0)="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", 0x180, 0x80}], 0x0, 0x0)

[  252.595514] FAT-fs (loop5): bogus number of reserved sectors
[  252.610730] FAT-fs (loop5): Can't find a valid FAT filesystem
20:20:44 executing program 1:
r0 = accept4(0xffffffffffffff9c, &(0x7f0000000000)=@caif=@rfm, &(0x7f0000000080)=0x80, 0x800)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}}, &(0x7f0000000280)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x54, 0x12, 0x10, 0x70bd2c, 0x7, {0x7, 0x0, 0x0, r1, 0x12000}, [@IFLA_LINKMODE={0x8, 0x11, 0x8}, @IFLA_IFALIASn={0x4}, @IFLA_TXQLEN={0x8, 0xd, 0x80000001}, @IFLA_LINK={0x8, 0x5, 0x4}, @IFLA_PHYS_SWITCH_ID={0x18, 0x24, "83cafb1f3eedb6167d517b6b2bd1ce4244acf955"}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4008090)
r2 = inotify_init()
fallocate(r2, 0x200000012, 0x0, 0xf1a)

[  252.640821] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=22713 sclass=netlink_route_socket pig=7211 comm=syz-executor.2
20:20:44 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x4, 0x4)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000040), 0xab95a)
clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = gettid()
setsockopt$inet_mreqsrc(r4, 0x0, 0x26, &(0x7f0000000040)={@multicast2, @initdev, @multicast2}, 0xc)
ptrace$setopts(0x4206, r5, 0x0, 0x0)
tkill(r5, 0x3c)
fcntl$setstatus(r4, 0x4, 0x42801)

20:20:44 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000140)={0x2, 0x40000001, @multicast1}, 0x10)
syz_emit_ethernet(0x423, &(0x7f0000000cc0)={@link_local, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x200000000000011, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x1, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}, "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"}}}}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x200000000000011, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x1, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}}}}}}, 0x0)

20:20:45 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

20:20:45 executing program 1:
inotify_init1(0x0)
fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff)
pipe(&(0x7f0000000000))
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100050d, 0x0, 0x0, 0x94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_int(r0, &(0x7f0000000140), 0xffffff35)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)
fchmod(0xffffffffffffffff, 0x0)

20:20:45 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='pagemap\x00')
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x200, 0x0)
fdatasync(r0)
r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x584c07d9, &(0x7f0000000980), 0x100000000000008a, 0x0, 0xfffffffffffffe03}, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00')
getdents(r3, &(0x7f0000000440)=""/46, 0x2e)
r4 = socket$inet6(0xa, 0x3, 0x2)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f0000dcd000/0x1000)=nil, 0x1000, &(0x7f0000001f00)=""/4096)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000e49000/0x1000)=nil, 0x1000, 0x2000, 0xffffffffffffffff, &(0x7f0000aa8000/0x2000)=nil)
munlockall()
r5 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r6 = socket(0xa, 0x1, 0x0)
write$P9_RFLUSH(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000001a80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@initdev}, 0x0, @in=@remote}}, &(0x7f0000001b80)=0xe8)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', <r8=>r7})
ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000240)={0x7, 0x5})
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000080)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, @mcast2, 0xf5d, 0x4, 0x0, 0x2, 0x0, 0x20000, r8})
fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000300))
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000002c0)={@remote, 0x7e, r8})
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000480)={@mcast2, @mcast1, @loopback, 0x0, 0x10001, 0x0, 0x0, 0xffffffffffffb8fa, 0x83420004, r8})
getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000014c0)=""/205, &(0x7f0000000100)=0xfffffffffffffc87)
syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000008c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="003fd532da63e04d10aec0f40429a871f6c109bf9d9f0f7caff3ea3934c58a9f7068656acbb75516bfda79c4a681d0486035900e81d80120782f1c92ff2b79ba005fc22e01800000490eff56416fb6f94e7dfe08f800000092e40c472cad5a99eb20754b5b523f5e6423538de6ab9b86f8e8256db8bc0d603e21d5e10809f1ebd69ebb5479ba8878c669de0cf6af414c0fcd97afb2b9a1dc2153c14e2903a048613f90df2ed659bad8328ebf5e9d551dedbe62a569b454874398b67fb4ff2a4041e3e416cc607f16f8a1aa2613f7d3e2508982055c27d8cc3320647d54c1552ea2821d1f0965a8e771077007bde0eb604949e0c6880ab869f43b4e4c0acfc43309070b0e2ebbf1edd88e2e7026aa5515e33cc3a9fd06000000000000003311ed9ae30cb18717b1726c2fc0087e86c39bde378ab529baca2e2e3a0f648c5f80c86bbd8c6ec81aab0303dc56fb19a93d5987a2ac91e065cd30cfd3b2e450d409bf1e5e8100f79f28481a11970c48dd7c6e3f31d782823df47a4cda961c226fddd55f3c71aa6e1c417d76dd9b8be9eb97159fd6bf35c7ea3cae5483c759e83b58d0b40000000000db461f90742001ef0568d98cbb21cf26ac091a00cdc8bbd38781976c7a2c2fc30ef891f2a516987a34911662ccc814633d2f0aa6a88255d16be82c443c36f52c151d090a633fe57691097ff6b28ad827020346f5dea250742f70a844669581f9722e5ad9be994de72c2b8a4aab09814b8012590b78742900000000000000000000000055d06f61e3cfc772706a69abb56a53d46998cb73e84aa139c8f981cde5d9c53e907c0ddbc5beda12c41595b78e451482a51e6593bddef42d922ed8d5ba766f1d450f355a8b4fef84716ba34278a82522615303ebe9df5905a524f7767d7aae3a96e02cbc0a07740bd1be92763467677b3389106516762c097f0827201dc09dbed180c31f3db2abd8ec09c6dea70cd5e93548ff5214f3915b0c9669d5583153736c241b08d1b2e4b2f1473912e98d63aabe6dccf096631254a6083c822a5fa04326194c098624b42d815e667b533337af2597dca19e926088a5497398067ba290591d5a270100000000000000000000000000008be71252ef2c4295d1c3aedc4e0c360999bbd1bc696682e643b8b91b555e8393e85d7bc7adcc63a66b3379f63fd6187da509f840ed68dd48a38d8b052b630250763f34b7a7e70484f6aa6a923f646942248f4abef5e16ae7539326388fbd8a0adea7b7f58a5803c30f23fe033be9c45cf386baaecd1c702a0083357e2fd3fe4d784c3474c09dd8721d39a1a4a1ddff407cbd3cf0ff1e25854b99c914536b45fb1d114380cc24e85c0edadd77104747f32a01b4e0e720c43d8ea355ac37d374457c0b9ff5f9cefd54c3623ee506d6b1c91b871738214d70b42d10adcbb2e6e57dee598037f6590ce445cacc3759ff2866d998759befab3e9e135da6b09e"])
ioctl(0xffffffffffffffff, 0x2, &(0x7f0000000000)="45b11b")
r9 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSMASK(r9, 0x40104593, &(0x7f0000001480)={0x1e, 0x0, 0x0})

20:20:45 executing program 2:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
finit_module(r1, &(0x7f0000000000)='\x00', 0x1)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x100)
r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00')
sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r3, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e21}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x29}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x3a}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)
prctl$PR_SET_UNALIGN(0x6, 0x2)
ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000280)={'syz_tun\x00', 0x7f})
dup3(r0, 0xffffffffffffffff, 0x0)

20:20:45 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setfsgid(0x0)
getrandom(&(0x7f0000000040)=""/44, 0x52a1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502)
ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0)
openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x20, 0x70bd2c, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)

20:20:45 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080)=0x40, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24}, 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040)=[@timestamp, @sack_perm, @sack_perm, @timestamp], 0xadf7f)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4000)
ioctl$TCSETA(r2, 0x5406, &(0x7f0000000100)={0x2, 0x101, 0x7fffffff, 0x3, 0x14, 0x7, 0x1, 0x2, 0x7ff, 0xfff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x9)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@initdev, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x20)
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x38)
fcntl$setstatus(r0, 0x4, 0x42803)

[  253.161071] binder: 7260:7265 ioctl c018620b 0 returned -14
20:20:45 executing program 2:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
shutdown(r0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040))
r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001640)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
dup(0xffffffffffffffff)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001600)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082)
preadv(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/226, 0xe2}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x4, 0x0)
prctl$PR_GET_NAME(0x10, &(0x7f0000001500)=""/197)
r3 = memfd_create(&(0x7f0000000080)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\x06_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0)
pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f00000000c0)='S', 0x1}], 0x1, 0x4081003)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
fallocate(r2, 0x11, 0x0, 0x100000001)
syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200080}, 0xc, &(0x7f0000001680)={&(0x7f00000018c0)=ANY=[@ANYBLOB="000228bd7000ffdbdf250e0000002800050008000100657468001c00020008000300ffff00000800020003000000080002005f000000c00004003400070008000200840600000800040070ffffff0800010012000000080001001400000008000200ffffffff080003000080ffff1400010062726f6164636173742d6c696e6b00002c000700080001000e0000000800010000000000080001000c000000080001001000000008000200020000000c00010073797a31000000000c00070008000200000000002400070008000200000000000800010002000000080002000100000008000200000000000c00010073797a3000000000"], 0x1}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
socket$inet6(0xa, 0x2, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00')
ioctl$sock_SIOCDELDLCI(r0, 0x8981, 0x0)
ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000140)=""/247)
ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f00000000c0)={0x57, 0x3f, 0x0, {0x280000000000000}, {0x0, 0x6}, @period={0x0, 0x7, 0x6, 0x4, 0x24, {0x6, 0x9, 0x0, 0x8000}, 0x0, 0x0}})
ioctl$RTC_VL_READ(r4, 0x80047013, &(0x7f0000000000))

[  253.232901] binder: 7260:7276 BC_ACQUIRE_DONE u0000000000000000 no match
20:20:45 executing program 0:
mkdir(&(0x7f0000000500)='./file0\x00', 0x0)
r0 = inotify_init1(0x0)
r1 = inotify_init()
inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x4000000080000005)
inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0xa400295c)
r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
rmdir(&(0x7f00000002c0)='./file0\x00')

20:20:45 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ioctl$TCSBRKP(r1, 0x5425, 0x3)
sendto(r0, &(0x7f0000000140)="120000001200e7ef007b0000f4afd7030a7c", 0x12, 0x0, 0x0, 0x0)

20:20:45 executing program 2:
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0)
syz_genetlink_get_family_id$net_dm(&(0x7f0000000180)='NET_DM\x00')
sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, 0x0, 0x400c004)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9)
getpeername(r0, &(0x7f0000000300)=@hci={0x1f, <r1=>0x0}, &(0x7f0000000380)=0x80)
getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000000)=0xe8)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000140)={r2, 0x1, 0x6}, 0x10)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f00000002c0)='./file0\x00', 0x20141042, 0x149)
setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000580)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x12}}, r1}, 0x14)
sendfile(r3, r0, 0x0, 0x2008000fffffffe)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f00000004c0)={'filter\x00', 0x0, 0x4, 0xf1, [], 0x4, &(0x7f00000000c0)=[{}, {}, {}, {}], &(0x7f00000003c0)=""/241}, &(0x7f0000000540)=0x78)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket(0x10, 0x802, 0x0)
write(r3, &(0x7f0000000640)="24000000210025f0a8698ea19d0dbc0100000000003190c80620e7fbf974fe7c1d0db1001ad9d26b0ee7598013c5b9848d207c45a5bdf1", 0x319)

20:20:45 executing program 0:
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
listen(r1, 0x400000)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
shutdown(r2, 0x2)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x48845, 0x0, 0xffffffffffffffb0)
dup2(r0, r3)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8208000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x270, r4, 0x528, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x70, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x4, @local, 0xfff}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x100000000, @remote, 0xff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK={0x88, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x4c, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8c0d}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x2, @loopback, 0x1}}, {0x14, 0x2, @in={0x2, 0x4, @loopback}}}}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x80, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x81, @ipv4={[], [], @rand_addr=0x5}, 0x8}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x80000000, @dev={0xfe, 0x80, [], 0x2b}, 0x1000}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_LINK={0x5c, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xef}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x94}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

20:20:45 executing program 2:
r0 = eventfd2(0x0, 0x0)
preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/249}], 0x188, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00')
preadv(r0, &(0x7f0000000480), 0x0, 0x66)
setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000000)=0x19fe, 0x4)

[  253.781912] FAT-fs (loop5): bogus number of reserved sectors
[  253.788347] FAT-fs (loop5): Can't find a valid FAT filesystem
20:20:45 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

20:20:45 executing program 1:
inotify_init1(0x0)
fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff)
pipe(&(0x7f0000000000))
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100050d, 0x0, 0x0, 0x94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_int(r0, &(0x7f0000000140), 0xffffff35)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)
fchmod(0xffffffffffffffff, 0x0)

20:20:45 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='pagemap\x00')
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x200, 0x0)
fdatasync(r0)
r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x584c07d9, &(0x7f0000000980), 0x100000000000008a, 0x0, 0xfffffffffffffe03}, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00')
getdents(r3, &(0x7f0000000440)=""/46, 0x2e)
r4 = socket$inet6(0xa, 0x3, 0x2)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f0000dcd000/0x1000)=nil, 0x1000, &(0x7f0000001f00)=""/4096)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000e49000/0x1000)=nil, 0x1000, 0x2000, 0xffffffffffffffff, &(0x7f0000aa8000/0x2000)=nil)
munlockall()
r5 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r6 = socket(0xa, 0x1, 0x0)
write$P9_RFLUSH(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000001a80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@initdev}, 0x0, @in=@remote}}, &(0x7f0000001b80)=0xe8)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', <r8=>r7})
ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000240)={0x7, 0x5})
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000080)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, @mcast2, 0xf5d, 0x4, 0x0, 0x2, 0x0, 0x20000, r8})
fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000300))
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000002c0)={@remote, 0x7e, r8})
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000480)={@mcast2, @mcast1, @loopback, 0x0, 0x10001, 0x0, 0x0, 0xffffffffffffb8fa, 0x83420004, r8})
getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000014c0)=""/205, &(0x7f0000000100)=0xfffffffffffffc87)
syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000008c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="003fd532da63e04d10aec0f40429a871f6c109bf9d9f0f7caff3ea3934c58a9f7068656acbb75516bfda79c4a681d0486035900e81d80120782f1c92ff2b79ba005fc22e01800000490eff56416fb6f94e7dfe08f800000092e40c472cad5a99eb20754b5b523f5e6423538de6ab9b86f8e8256db8bc0d603e21d5e10809f1ebd69ebb5479ba8878c669de0cf6af414c0fcd97afb2b9a1dc2153c14e2903a048613f90df2ed659bad8328ebf5e9d551dedbe62a569b454874398b67fb4ff2a4041e3e416cc607f16f8a1aa2613f7d3e2508982055c27d8cc3320647d54c1552ea2821d1f0965a8e771077007bde0eb604949e0c6880ab869f43b4e4c0acfc43309070b0e2ebbf1edd88e2e7026aa5515e33cc3a9fd06000000000000003311ed9ae30cb18717b1726c2fc0087e86c39bde378ab529baca2e2e3a0f648c5f80c86bbd8c6ec81aab0303dc56fb19a93d5987a2ac91e065cd30cfd3b2e450d409bf1e5e8100f79f28481a11970c48dd7c6e3f31d782823df47a4cda961c226fddd55f3c71aa6e1c417d76dd9b8be9eb97159fd6bf35c7ea3cae5483c759e83b58d0b40000000000db461f90742001ef0568d98cbb21cf26ac091a00cdc8bbd38781976c7a2c2fc30ef891f2a516987a34911662ccc814633d2f0aa6a88255d16be82c443c36f52c151d090a633fe57691097ff6b28ad827020346f5dea250742f70a844669581f9722e5ad9be994de72c2b8a4aab09814b8012590b78742900000000000000000000000055d06f61e3cfc772706a69abb56a53d46998cb73e84aa139c8f981cde5d9c53e907c0ddbc5beda12c41595b78e451482a51e6593bddef42d922ed8d5ba766f1d450f355a8b4fef84716ba34278a82522615303ebe9df5905a524f7767d7aae3a96e02cbc0a07740bd1be92763467677b3389106516762c097f0827201dc09dbed180c31f3db2abd8ec09c6dea70cd5e93548ff5214f3915b0c9669d5583153736c241b08d1b2e4b2f1473912e98d63aabe6dccf096631254a6083c822a5fa04326194c098624b42d815e667b533337af2597dca19e926088a5497398067ba290591d5a270100000000000000000000000000008be71252ef2c4295d1c3aedc4e0c360999bbd1bc696682e643b8b91b555e8393e85d7bc7adcc63a66b3379f63fd6187da509f840ed68dd48a38d8b052b630250763f34b7a7e70484f6aa6a923f646942248f4abef5e16ae7539326388fbd8a0adea7b7f58a5803c30f23fe033be9c45cf386baaecd1c702a0083357e2fd3fe4d784c3474c09dd8721d39a1a4a1ddff407cbd3cf0ff1e25854b99c914536b45fb1d114380cc24e85c0edadd77104747f32a01b4e0e720c43d8ea355ac37d374457c0b9ff5f9cefd54c3623ee506d6b1c91b871738214d70b42d10adcbb2e6e57dee598037f6590ce445cacc3759ff2866d998759befab3e9e135da6b09e"])
ioctl(0xffffffffffffffff, 0x2, &(0x7f0000000000)="45b11b")
r9 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSMASK(r9, 0x40104593, &(0x7f0000001480)={0x1e, 0x0, 0x0})

20:20:45 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
setresuid(0x0, 0x0, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
prctl$PR_CAPBSET_READ(0x17, 0x14)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x9)
r1 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)="3b849e7507a6be19c8a2b33ae402f916735a63ba89be03c33f30c7e923046a6579fa05af069a83e8248819731ad15659c35408a26b22f0dba57816e5bd19354eb4dab8ab8c38aeda3d50e7ca5e538ddf24fcc60d1ec1135fe856b97e47d0bee00ae6bfe7b4e6692c96cb488f1c6fd5d073c15836216e6d088ae4d5f1c6eddb83772f6c87219f9fd5141464fb9ca59460b7c8ef2ba179ac6f9282e5c493d58fa895736b22694cfb0ee4a491997e51da60b28f7785838b7ca0e6e92871393f5244e1eca6e56238d38d56e48173d835d4685a5e89eaee4f372e104cdba9383a", 0xde, 0xffffffffffffffff)
add_key(&(0x7f0000000180)='elcrypted\x00', 0x0, 0x0, 0x0, r1)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240)=0xa3, 0x4)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/raw\x00')

20:20:45 executing program 2:
preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$selinux_validatetrans(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6b736d5f6465766963655f743a7330207379737465815f753a6f626a6563745f723a6c75bada6f67726f74617465527661725f6c69625f743a733020303030303030303030303030303030323235363920756ea6e76f37eddd5c1b908ab77230853ee5a67ad1184021b2e173b1e9d20aa7a17abe2a57062e3f7044a14c6e8a02809066293a1be677e84ee39861a069e24588161ad83e7b283d7a63f1d20f622e44a3c1edf7db6845f8135043c046900d5fd8535c65fbc0b291beeef058bf8d1ed4"], 0x65)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r1 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f0000000540))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/status\x00', 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
mkdir(&(0x7f0000000200)='./control\x00', 0x4)
syz_genetlink_get_family_id$tipc(0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000002c0)={{0x33, @dev={0xac, 0x14, 0x14, 0x22}, 0x4e23, 0x0, 'fo\x00', 0x8, 0x7, 0x20}, {@remote, 0x4e23, 0x5, 0x8, 0x1, 0x3}}, 0x44)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a0f, 0x1700)
getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
mkdir(&(0x7f0000000040)='./control\x00', 0x0)
chmod(0x0, 0x9c32f69e6caa24eb)
lstat(&(0x7f0000000100)='./control\x00', 0x0)
capset(&(0x7f0000000580), 0x0)
chown(&(0x7f0000000080)='./control\x00', 0x0, 0x0)
execveat(r3, &(0x7f0000000000)='./control\x00', &(0x7f0000000400)=[0x0], &(0x7f0000000700)=[0x0, &(0x7f00000004c0)='TIPC\x00', &(0x7f0000000500)='TIPC\x00'], 0x1000)
openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00')

[  254.007434] binder: 7322:7323 ioctl c018620b 0 returned -14
[  254.070128] binder: 7322:7333 BC_ACQUIRE_DONE u0000000000000000 no match
[  254.548847] FAT-fs (loop5): bogus number of reserved sectors
[  254.570766] FAT-fs (loop5): Can't find a valid FAT filesystem
20:20:48 executing program 5:
perf_event_open(&(0x7f000001d000)={0x8000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00')
listen(r0, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0)
socket(0x10, 0x2, 0x0)
ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0)
chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="020000000100000000000295e8a40a0000000000320002002000000000000000963bafb019d0a6eec3fab8a434151ad52d001be444f0fa4b9e573e89d6674f4e38f2dec84a00989e27e9f18857b0eaa58c71746a6f171bdf3ded166a061a6527e162f660b851bf8a7cac6f98b30fa4488b7fd1d63146dc39ccf9fece1caef4d5840fe96b7f0577ef3f529f234073ef3ea60b8ac059c92cf5ecfeaa629e8120a2e80c764dcc8aa37a58e9b80ac860cc0cfc5704d37199852482cbc048f3b721097ff413fece45c00b1adce00f8392116086"], 0x24, 0x0)
chdir(&(0x7f0000000540)='./file0\x00')
accept4$unix(r0, &(0x7f00000000c0), &(0x7f0000000140)=0x6e, 0x80800)
symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00')
clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0)
ioctl$EVIOCGREP(0xffffffffffffffff, 0x40047451, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30)
mount(&(0x7f00000002c0)=@md0='/dev/md0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='ufs\x00', 0x800000, 0x0)
bpf$MAP_CREATE(0x2, &(0x7f0000000240)={0x4, 0x5, 0x77fffe, 0x0, 0x0, 0x0}, 0x2c)

20:20:48 executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x11, 0x101, 0x2, 0x0, 0x0}, 0x2c)
bpf$MAP_CREATE(0x2, &(0x7f0000000100)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={r0, &(0x7f00000001c0)="c1f85b6e60572a585c3d6adf214d51b416ed318548f49b079bbc599e132a874b02d42b810d4604565133ff0100007726955a8fcde00100eb0a03000000a53c3c323c272785cfcf1f"}, 0x1f0)

20:20:48 executing program 0:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r1 = fcntl$dupfd(r0, 0x406, r0)
stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
ioctl$TUNSETOWNER(r1, 0x400454cc, r2)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x0, 0x3}, 0x10)
r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0)
ioctl$RTC_PLL_GET(r3, 0x80207011, &(0x7f0000000080))

20:20:48 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000200)=[{&(0x7f0000000000)="580000001400add427323b470c458c569afc8e7c41a757ee85ffffff81004e220000ac1414aa0b4824ca945f6a262ad4050028925aa80000000000000080000efffeee0c09000000fff5dd000000100001", 0x51}], 0x1)
fcntl$setpipe(r0, 0x407, 0xad5)

20:20:48 executing program 2:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x1)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$KDENABIO(r0, 0x4b36)
ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000000)={'veth1_to_team\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}})

20:20:48 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

20:20:48 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
getcwd(&(0x7f00000002c0)=""/231, 0xe7)
r2 = dup2(r0, r0)
ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000100)=""/246)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000000))
sendmmsg(r1, &(0x7f0000007e00), 0x26e, 0x0)

20:20:48 executing program 1:
r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x1, 0x0)
write$selinux_access(r0, &(0x7f00000000c0)={'system_u:object_r:public_content_t:s0', 0x20, 'unconfined', 0x20, 0x4}, 0x46)
r1 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/access\x00', 0x2, 0x0)
write$selinux_access(r1, &(0x7f0000000140)={'system_u:object_r:dhcpc_exec_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023'}, 0x65)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)

[  256.232926] binder: 7362:7365 ioctl c018620b 0 returned -14
20:20:48 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x140)
write$selinux_user(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="73797374656ddf753a6f626a6563745f7263b39d6d491e1ab676e2a2ccafb93a648168e60cbef302ac635f74"], 0x27)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0, <r2=>0x0}, &(0x7f00000001c0)=0xc)
r3 = getgid()
chown(&(0x7f0000000080)='./file0\x00', r2, r3)
umount2(&(0x7f0000000200)='./file0\x00', 0x4)
ioctl$RTC_AIE_OFF(r0, 0x7002)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000707000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008001c0012000c000100697036746e6c00000c0002000800a70000000000"], 0x3c}, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0)

20:20:48 executing program 3:
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='loginuid\x00')
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0)
r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90)
fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1})
ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000400)={'syzkaller1\x00', 0x8c5})
syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00')
mkdir(0x0, 0x0)
pipe2(0x0, 0x3)
ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f00000006c0)=""/42)
setxattr$trusted_overlay_nlink(&(0x7f0000000980)='./file0/../file0\x00', &(0x7f00000009c0)='trusted.overlay.nlink\x00', &(0x7f0000000a00)={'U-', 0xfffffffffffffff7}, 0x28, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(r1, &(0x7f0000000500)=[{{&(0x7f00000002c0)=@ipx, 0x80, &(0x7f0000000180)=[{&(0x7f0000000340)=""/154, 0x9a}], 0x1, &(0x7f0000000800)=""/205, 0xcd}, 0x8}], 0x1, 0x20, &(0x7f0000000900))
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)={0x10000, {{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x0, 0x40, @mcast2}}}, 0x108)
getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="6e6174000000000000bd82bbe6000000000000000000000000000000000000007d0000017d5759ec4fd691164f10ea6ce05be5f0df474fec439efc436b65d8ca4447cdfa779027659510eb86680363871304243a575efa5608319e18027d79fbe7b3e410b80952a19fbcc1f991dbbd5245db7a2e890298445083dd680f823a3dc4667b36550495d8b2834615a13c518f776c000000000000000000000000000080"], 0x0)
ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000940))
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount$bpf(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740)='bpf\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000200)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00')
mknod$loop(0x0, 0x0, 0xffffffffffffffff)
read$eventfd(r0, &(0x7f0000000080), 0x8)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x4, &(0x7f00000000c0))
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
open(&(0x7f0000000a40)='./file0/bus\x00', 0x40c2, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x489)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'})

20:20:48 executing program 5:
r0 = open(&(0x7f00000003c0)='./file0\x00', 0x2001, 0x20000080)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = epoll_create1(0x0)
ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000240)={0x3, 0x51, "000444e11b5c56ae19c94399c9977d32cabf4820df5d6ab29fbd52b0b993c95f4bf67adfafaac6081a5d1fd08c075d328742b27064156e83d4321cdbe9a671cec6f6c10484a6f9ed5cd6ad8f6ef65a8d98"})
fcntl$lock(0xffffffffffffffff, 0x7, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, 0x0)
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0xfffffffffffffff7, 0x2, 0x5, 0x9, 0x0, 0x20})
fcntl$lock(r2, 0x4000806, 0x0)
fcntl$lock(r3, 0x2000000007, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x10301, 0x4)
socket(0xf, 0x0, 0x9)
write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[], 0x2e7)
r5 = openat$selinux_user(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/user\x00', 0x2, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0)={0x0, 0x459f, 0x8001, 0x2, 0x1, 0x100000000})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100)='y\x00', 0x2, 0x2)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={<r6=>0x0, r0, 0x0, 0x32, &(0x7f00000001c0)='-}^)vboxnet0GPLvmnet1$[vmnet0em1posix_acl_access}\x00'}, 0x30)
perf_event_open(&(0x7f0000000140)={0x3, 0x70, 0x7, 0x1, 0xa8c, 0x5, 0x0, 0x3, 0x41020, 0x8, 0xaa, 0x4, 0x1, 0x7, 0x0, 0x3, 0xfffffffffffffff9, 0x4, 0xfffffffffffffff8, 0x7, 0x2, 0x6, 0x80, 0x2, 0x7ff, 0x7fffffff, 0xb8, 0x7, 0x100, 0x6, 0x20, 0x100000001, 0x80000000, 0x7, 0x4, 0x1, 0x8, 0x0, 0x0, 0xfffffffffffeffff, 0x4, @perf_config_ext={0xfdfb, 0x3}, 0x8002, 0xef5, 0x1, 0x5, 0x10000, 0x8, 0xc04}, r6, 0xa, r4, 0x3)
sendfile(r0, r0, &(0x7f0000000040), 0xa198)

20:20:48 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x0, 0x0, &(0x7f00000000c0))

[  256.293896] binder: 7362:7382 BC_ACQUIRE_DONE u0000000000000000 no match
20:20:48 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, &(0x7f0000000200))
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ppp\x00', 0x400000, 0x0)
getdents(r1, &(0x7f0000002840)=""/188, 0xbc)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000014c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
splice(r2, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000002640), 0xb33, 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x40, 0x0)
write$9p(r3, &(0x7f0000001540)="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", 0xf71)
clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/policy\x00', 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x14d}}, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x40)
fsetxattr$security_smack_entry(r1, &(0x7f0000000080)='security.SMACK64EXEC\x00', &(0x7f00000001c0)='+cgroup\x00', 0x8, 0x3)
rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8)
r5 = getpid()
rt_tgsigqueueinfo(r5, r5, 0x16, &(0x7f0000000100)={0x18, 0x0, 0x249})
ptrace(0x4219, r5)
ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f0000000240)={0x4, 0x1, 0x0, 0x6, 0xfffffffffffffffb, 0x8})
ptrace(0x10, r5)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000002680)={@remote}, &(0x7f00000026c0)=0x8)
ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000600)=ANY=[@ANYBLOB="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"])
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r4, 0x50, &(0x7f0000001440)}, 0x10)
ptrace$pokeuser(0x6, r5, 0x388, 0xffffffffffffffff)
ioctl$UI_SET_FFBIT(r4, 0x4004556b, 0x2a)
fallocate(r0, 0x50, 0x0, 0x3f)
ioctl$RTC_WIE_OFF(r4, 0x7010)
ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000000c0)={0xffffffff, 0x7f, 0x0, 0x8})
add_key$user(&(0x7f0000002700)='user\x00', &(0x7f0000002740)={'syz', 0x1}, &(0x7f0000002780)="78dce5fee7f45364ac84258c4b4ff643754853da93c47ace9e48bf1b3ed99c73e69c1df0b5706c2a05e39aaee05cc0ab8aab9112f2e06b5eb0c8225accb6f501c224c8", 0x43, 0xffffffffffffffff)
sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x102)

20:20:48 executing program 5:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x4800)
ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f00000000c0)={0xfffffffffffffc00, 0xf12, 0x4, 0x81, 0x7ff00, 0xfffffffffffffffc})

20:20:48 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x7f)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

20:20:48 executing program 0:
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0xa4, r4, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000000000000000}]}, @TIPC_NLA_LINK={0x54, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd0ba}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000040}, 0x884)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f00000003c0)=0x2)
write$apparmor_current(r5, &(0x7f0000000400)=@profile={'changeprofile ', '/selinux/commit_pending_bools\x00'}, 0x2c)
ftruncate(r5, 0x2007fff)
sendfile(r0, r5, 0x0, 0x800000000024)
creat(0x0, 0x0)

20:20:48 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x3)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10)
setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x2b)
fcntl$setstatus(r1, 0x4, 0x42803)

[  256.655888] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7412 comm=syz-executor.0
[  256.688951] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7412 comm=syz-executor.0
[  256.716791] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7412 comm=syz-executor.0
[  256.745920] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7412 comm=syz-executor.0
[  256.761112] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7412 comm=syz-executor.0
[  256.774608] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7412 comm=syz-executor.0
[  256.788111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7412 comm=syz-executor.0
[  256.800988] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7412 comm=syz-executor.0
[  256.813924] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7412 comm=syz-executor.0
[  256.826900] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7412 comm=syz-executor.0
20:20:48 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

20:20:48 executing program 5:
openat$uhid(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uhid\x00', 0x2, 0x0)
epoll_pwait(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCMSET(r0, 0x5418, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000300)='/dev/keychord\x00', 0x20000, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x290, r2, 0x500, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc46}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x40, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc80}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x567}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffffffffff7}]}, @TIPC_NLA_MEDIA={0xec, 0x5, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8e55}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x24}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1b5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffffcc43}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x92}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc5d}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x642b}]}, @TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x4c, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x81}, 0x0)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0xfffffeec)
pipe(&(0x7f0000000480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x10000014c)
eventfd(0x6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={0x0, <r5=>0x0})
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000780)=""/210)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0)
rt_sigaction(0x3e, &(0x7f00000001c0)={&(0x7f0000000080)="c42229bda60e000000c4c35d5c65e010c4c1dcc6ec000f01fcc461b016eaf30f7055009ef081160a000000c40129d00b450f38ca8103000000d3bb30000000", {0x3}, 0x8000000, &(0x7f0000000240)="809a0c000000a3363e400fc77a00c443f15f8a0000000000f047ff841d06000000f3662e0845d745dbe4f0816b0400008020c4a279187c42fef343af2e66c27400"}, 0x0, 0x8, &(0x7f00000002c0))
r6 = getpgid(0xffffffffffffffff)
fcntl$lock(r0, 0x24, &(0x7f0000000440)={0x3, 0x2, 0x80000000, 0x8, r6})
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0)

20:20:48 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
ftruncate(r0, 0x2208200)
r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x80007ffffe, 0x4002011, r1, 0x0)
ioctl$TIOCSBRK(r0, 0x5427)
read(r1, &(0x7f0000000180)=""/19, 0xfffffe47)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
openat$null(0xffffffffffffff9c, 0x0, 0x10100, 0x0)
r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
fallocate(r2, 0x0, 0x0, 0x1)

20:20:48 executing program 3:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x60)
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f00000000c0))
personality(0xffffffffffffffff)
fremovexattr(r0, &(0x7f0000000100)=@random={'os2.', '/dev/snd/timer\x00'})
r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x580)
remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0xf4, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000040)={0x2, 0x6, 0x34c2, 0x6, 0xba, 0xa0c})

20:20:48 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x11, 0x101, 0x2, 0x8}, 0x2c)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={r0, 0x0}, 0x10)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000100)=0x5)
syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000440)={'syz1\x00', {0x6, 0x1, 0x8000, 0x8}, 0x4a, [0x7ff, 0x315, 0x6924, 0x800, 0x5, 0x5, 0x5, 0x1, 0x52, 0x941, 0xfffffffffffffffd, 0x1ff, 0x200, 0x7, 0x4, 0xffffffffffffffe0, 0x0, 0x6, 0x1, 0x5, 0x6ba, 0x4, 0x4, 0x6, 0xf4, 0x81, 0x40, 0x1ff, 0x0, 0x0, 0x8, 0x4, 0x3, 0x0, 0x8, 0xffffffffffff8000, 0x6b, 0x6, 0x488, 0xff, 0x5, 0x100000000, 0x2, 0x2, 0x10001, 0x3ff, 0x0, 0x8, 0x2, 0x6, 0x1f3, 0x7af, 0x10000, 0x9, 0x1, 0x8, 0x6, 0x9b, 0x8, 0x597, 0x10001, 0xffffffffffffff00, 0x100000001, 0x3], [0x1, 0x4, 0xfffffffffffffffc, 0x2, 0x239, 0x4, 0x3ff, 0x2, 0x6, 0x9, 0x9, 0x7, 0x0, 0x9, 0x0, 0x4, 0x8a2b, 0x7, 0x88, 0x0, 0x3d29, 0x21ba, 0x0, 0x3, 0xfffffffffffffffe, 0xfcc, 0x2, 0x3, 0x5, 0x200, 0x3, 0x6a, 0x1, 0xffffffffffff0000, 0x5, 0x6, 0x1, 0x0, 0x10000, 0x800, 0x9, 0x8, 0x1d3, 0x9, 0x200, 0x80, 0x6, 0x7, 0x3f, 0x800, 0x6, 0x2, 0x539, 0x33, 0x8, 0x200, 0x7c2, 0x0, 0x200, 0x0, 0xb4, 0x6, 0x3, 0x3], [0x6, 0x101, 0x39aa1092, 0x2, 0x33, 0x40, 0x4, 0x3, 0x101, 0x0, 0x3, 0x423db010, 0x9, 0x200, 0x3, 0xff, 0x6, 0x1, 0xfffffffffffffffc, 0x3f, 0xffffffffffffffff, 0xffffffff, 0xffffffff, 0x100, 0x4, 0x3, 0x8000, 0x3, 0x7f, 0x2, 0x6, 0x8, 0x7fff, 0x3, 0x3a, 0x8, 0x70, 0x1, 0x5, 0x800, 0x5, 0x8, 0x6, 0x100000000, 0x3, 0x7ff, 0xff, 0x8, 0x80000000, 0x10001, 0x4, 0x1, 0x8, 0x4a3, 0x100000001, 0x8001, 0x6, 0x5, 0x2, 0x513, 0x9, 0x3f, 0x100000001, 0x9], [0x5, 0x8000000000, 0xfffffffffffffffe, 0x400, 0xffffffff7fffffff, 0x1, 0x400, 0x7fffffff, 0x100, 0x8, 0x4, 0x2, 0x6, 0xca, 0xe3, 0x2, 0x80000001, 0x8, 0x3, 0x81, 0x9, 0x1, 0x2, 0x7, 0x1, 0x80, 0x40, 0x9, 0x4, 0x0, 0x9, 0x2e9, 0x0, 0xffff, 0x1, 0x5, 0x9, 0x101, 0x101, 0x38000000000, 0x3f, 0x1, 0x81, 0x1, 0xfff, 0x100, 0x6, 0x5, 0x20000000000000, 0x0, 0x0, 0x1, 0xb11d, 0x200000000000, 0x3f, 0x1f, 0x4, 0x20, 0x400, 0x2, 0x80, 0x7, 0x0, 0x5]}, 0x45c)

20:20:48 executing program 1:
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x5)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = dup2(r1, r1)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000040), 0x0)
clone(0x4000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000100))
socket$inet6_tcp(0xa, 0x1, 0x0)
accept4$packet(r2, 0x0, 0x0, 0x0)
write$P9_RVERSION(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000000000000000ca43a5a028fdf2623750e5e6978f429c188617576bb950cbcb27a9b078ed7b14910aedbe436842872361eb80d854445e735967330d2e09962eaf797636ec498727c921ad829008ba300dad6e504f508a32ba382e9143de5e343ccad4625149851f02d80788514470f80a4ccd236064e665a3fe636cb26b0c8d2de34b8e2f9c151ed0e8dd6abf64e1fb680bf354f948cf773dc640a1ba1f2991dbc416fd71ea92717e09add1fd3f1009b21f059238f19fbe0f768059da429d4bc38976683a96cdf7a3674a00573d6695f8b43b1c4552ea0b38d55541cbebde56a6e2e7c6c339f785590d3b945444a320ce0a9a9a710322333e8f0cd54de4a941a9e3f033054f4ceb296e22eb1b4e9d0dfb4035e7dfc86c0620257c249655a544da87b17360e44280dc25e36eb72d71677fe0d9cf787daab64218cd1052eecfb8af86a532dadf2205351b850e1c7e567dd509872ea7cb8a733a276eff645d4168f8d48f1c64ae937b1ade3b8dfec36d8eab4d4d2713df3b6412dc0a5f14c5e00000000000000000000000000000000eaad30f040de889c0453ec61dfb37630c6e3740102d3e46cca219c8eb0688d3e09ed080f16ad181a86922492832c36929077cdef13d85924d4e94dfcdfb4da61f6edaa720d6916229433ff2cca5ae1b77644c96ea66f83a59d292bc8950e4c2f9a5d03ee0e02a5908c2642cdd031d72b4c71c5addbbbd29942cdd794a358988c2"], 0x15)

20:20:48 executing program 3:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_CAPBSET_DROP(0x18, 0x0)
ioctl$int_in(r0, 0x5473, &(0x7f0000000040)=0x10001)
r1 = socket$inet6(0xa, 0x0, 0x20080000001)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c)
sendmmsg(r1, &(0x7f00000002c0), 0x400000000000174, 0x0)
ustat(0x80, &(0x7f0000000000))
fstat(r0, 0x0)

[  257.071495] binder: 7433:7437 ioctl c018620b 0 returned -14
20:20:49 executing program 3:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x8000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
mlockall(0x7)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x11)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000000000000105000600200000000a00000000000000000500e50000070000001f000000000000250000000000000200010000000000002000020000627c05000500000000000a00000000010000ff1700000000000000000000000001170000000000000000"], 0x80}}, 0x0)
r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x101003, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="027dc353a3b7c4b01115d059cd7c4b9b69fc5643bd8ec7055f5ac5d7bf3c1b8dd58d752741d12bf39f2a87d5f573e8bf5f3c47548d944c5de131141075fedfc8ff6fac2cc173ffec789cd8bdb27747bebf15fd590a5af09cd1383327dc34409b08aac466655a88d63a3d6d71bb6aa106e8e5"]}}, 0x0)
rt_sigreturn()
openat$cgroup_ro(r2, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x400000000000238, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x9)
setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000000), 0x4)
socket$inet(0x2, 0x80007, 0x0)
sendmmsg(r3, &(0x7f0000000080), 0x0, 0x0)
tgkill(r1, r1, 0x15)
prctl$PR_SVE_SET_VL(0x32, 0x2ab58)
getpid()

[  257.151667] binder: 7433:7446 got transaction with invalid offset (0, min 0 max 0) or object.
[  257.166254] binder: 7433:7446 transaction failed 29201/-22, size 0-8 line 3348
20:20:49 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x1b, &(0x7f0000000180)="1107eb98c041dfe9ffc85deffea8f40000000000", 0x14)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)
socket$netlink(0x10, 0x3, 0x0)
stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

20:20:49 executing program 5:
futex(&(0x7f000000cffc)=0x1, 0x8f, 0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x2000, 0x0)
getgid()
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f00000002c0), 0x0)

20:20:49 executing program 5:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x0, 0x0)
r1 = openat(r0, &(0x7f0000000240)='./file0/file1\x00', 0x404000, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='tmpfs\x00', 0x0, 0x0)
ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000280)={0xfffffffffffffffe, 0x8, 0x1ff})
mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0)
setxattr$security_smack_entry(&(0x7f0000000000)='./file0/file1\x00', &(0x7f0000000040)='security.SMACK64IPOUT\x00', 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0)
open$dir(&(0x7f00000002c0)='./file1\x00', 0x101000, 0x100)
rename(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file1\x00')

20:20:49 executing program 3:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
timer_create(0x6, &(0x7f0000000040)={0x0, 0x31, 0x1, @tid=r0}, &(0x7f0000000080)=<r1=>0x0)
timer_delete(r1)
futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000000c0)="ca6c88cb2205471a995de7a439b0f07d8db58acd2ed08c41a19038897a90c75006280d7d5bf6e9ca32df800cc192e15d9509a0d2124baaf5f784f90e7dd8008f", 0x40}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x20000000000c)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0xc7c}, 0x8, 0x80800)
fcntl$getown(r2, 0x9)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x39)
getpgrp(r0)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0x10, r0, 0x0, &(0x7f00000000c0))
ptrace$cont(0x1f, r0, 0x0, 0x0)

20:20:49 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

20:20:49 executing program 5:
r0 = inotify_init1(0x0)
fcntl$setown(r0, 0x8, 0xffffffffffffffff)
fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, <r1=>0x0})
ptrace$setopts(0x4206, r1, 0x0, 0x0)
r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x8240, 0x0)
write$P9_RRENAMEAT(r2, &(0x7f0000000040)={0x7, 0x4b, 0x2}, 0x7)
ptrace$getregset(0x4, r1, 0x400002, 0x0)

[  257.918677] binder: 7485:7486 ioctl c018620b 0 returned -14
20:20:49 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000000)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd673a30b343381fe}, [], {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xb, @local, @local, @dev={[], 0xe}, @dev={0xfe, 0x80, [], 0x1d}}}}}, &(0x7f0000000080)={0x0, 0x3, [0xd4, 0x4f, 0x800, 0xbf7]})
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
shutdown(r0, 0x1)
setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000180), 0x4)

20:20:49 executing program 0:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(0x0, &(0x7f0000000380)='./file0\x00')
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={<r1=>0x0, r0, 0x0, 0x6, &(0x7f0000000040)='ramfs\x00'}, 0x30)
r2 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000280))
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000002c0)=0x3, 0x4)
ptrace$peek(0x3, r1, &(0x7f0000000140))
mount(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000500)='ubifs\x00', 0x17, 0x0)
r3 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90)
fcntl$lock(r3, 0x7, &(0x7f0000027000)={0x1})
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
write$P9_RAUTH(r4, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14)
sendfile(r4, r4, &(0x7f0000000240), 0x7fff)
fstat(0xffffffffffffffff, 0x0)
readlink(&(0x7f0000000200)='./file0/bus\x00', &(0x7f00000003c0)=""/219, 0xdb)
socket$inet(0x2, 0x80006, 0xfffffffffb4f7c73)

20:20:49 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x400)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f00000000c0)=0x1)
r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cm9y\x88\xcc+\bn\x8f\xe0\a\xf5\xfa\xcd\x1aFI\xc9\x89\xff\x14\x9f?,\x9f;\xce\xfa\xac\xad\x10\x1c\xa6T\xd4\xdeY\xf4\xc8\xffn\xfbj\xfd.4\xbc\n\x9e3\x17\xec:*\xa1\x8f\xd7\xc6\xe6\x7f\x01\xb6lB\x80\xf5\xfe.A\xde[\x13\xb35\xaf\x9f\x9b\x93\x96\xeb\x82\xbb\xe5\xe9\xb1>@\x19{\xc5t\xb8R?\\\xec\xaa\xceL\x05\f\x00\x9cR\xea\xec\xa6\xbf\f\\\x80&\x1dI}\x1e\x82x\x14\xfe\x80[\x00\xf3>\xd8\xda$\xed\xd3#\x04\x02e\xd3-\xca6\t\a2\xa6&\xef$\xe8\x1cd\x01/\td_uW\xd6\xf9\x8b\xdc\xbc\x98\xa3\xba\xa4r\x95\xe7P\x00\xef\xbdb\xf1f7\x7f\xd6\x17)Oe\xac\xa6``_\x8f\xea\x9a/\xffi\x8a\xcd\xa2\f\xe4k+;\x80\a\x95.\xd9\xb0\x12\xd7', 0x1, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000240))

20:20:49 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'sit0\x00'})
r1 = socket$packet(0x11, 0x3, 0x300)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x102012, r1, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x4, 0x800, 0x2})
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00000000c0)={{0x2, 0x4e22, @empty}, {0x0, @random="3ce180453376"}, 0x0, {0x2, 0x4e21, @broadcast}, 'rose0\x00'})
r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0)
syz_open_pts(r2, 0x200)

20:20:49 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c12a41d88b070")
r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r1, &(0x7f00000001c0)={0x7}, 0xff9d)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x7)
write$P9_RRENAME(r1, &(0x7f0000000140)={0x7}, 0x7)
ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000f9ffffffffffa207000000000000000007000000000000006dcd0af07900cba79f57c798414f06eb8bec2d3595e136"])

20:20:49 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff03c}, {0x80000006}]}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f00000000c0))
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)

[  257.987501] binder: 7485:7493 got transaction with invalid offset (0, min 0 max 0) or object.
[  258.017103] binder: 7485:7493 transaction failed 29201/-22, size 0-8 line 3348
20:20:49 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000e80)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00')
fsetxattr$security_ima(r0, &(0x7f0000000000)='security.ima\x00', 0x0, 0x0, 0x1)

20:20:49 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
lseek(r1, 0x20400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000216000/0x4000)=nil, 0x4000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x2000008f)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)

[  258.034410] binder: 7485:7508 BC_ACQUIRE_DONE u0000000000000000 no match
20:20:50 executing program 2:
r0 = epoll_create1(0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x20000000})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001280)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r3, 0x119, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}}, 0x4000)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000e8c000)={0x200020000000})

20:20:50 executing program 2:
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x5)
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0)
r1 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
chown(&(0x7f00000002c0)='./file0\x00', r2, 0x0)
alarm(0x5)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x7)
lsetxattr$system_posix_acl(&(0x7f0000000640)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000480)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0)
chdir(&(0x7f0000000340)='./file0\x00')
symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00')
clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
lstat(&(0x7f0000000500)='./file0/file0\x00', 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
mount(0x0, 0x0, 0x0, 0x8000, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000680)={0x80000000, {{0xa, 0x4e21, 0x7, @rand_addr="117a59b52f80b899bc77673a33c6aef6"}}, {{0xa, 0x4e20, 0x4, @remote, 0x3}}}, 0x108)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00'})
sendmsg$key(r4, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[]}}, 0x0)

20:20:50 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

20:20:50 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x1000006, 0x0, 0x1000000003)
mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000000)=""/177)

20:20:50 executing program 2:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x40000000, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00')
r1 = gettid()
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000140)={0x0, 0x1, {0x2c, 0x21, 0x16, 0x6, 0xa, 0x81, 0x2, 0xd8}})
tkill(r1, 0x1b)
r3 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x400000)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x8)
ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e24, @empty}, {0x2, 0x7, @remote}, 0x21, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)='gre0\x00', 0x9, 0x3, 0x5})
ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1)

[  258.719154] binder: undelivered TRANSACTION_ERROR: 29201
[  258.765178] binder: 7542:7545 ioctl c018620b 0 returned -14
20:20:50 executing program 0:
getcwd(0x0, 0xc6)
recvmmsg(0xffffffffffffff9c, &(0x7f0000002380)=[{{&(0x7f0000000000)=@ax25={{0x3, @rose}, [@default, @bcast, @remote, @default, @rose, @rose, @rose]}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)=""/240, 0xf0}], 0x1, &(0x7f00000001c0)=""/214, 0xd6}, 0x2}, {{&(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000340)=""/81, 0x51}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/79, 0x4f}, {&(0x7f0000001440)=""/218, 0xda}, {&(0x7f0000001540)=""/26, 0x1a}, {&(0x7f0000001580)=""/125, 0x7d}, {&(0x7f0000001600)=""/128, 0x80}, {&(0x7f0000001680)=""/55, 0x37}], 0x8, &(0x7f0000001740)=""/218, 0xda}, 0x4}, {{&(0x7f0000001840)=@generic, 0x80, &(0x7f0000001b40)=[{&(0x7f00000018c0)=""/107, 0x6b}, {&(0x7f0000001940)=""/225, 0xe1}, {&(0x7f0000001a40)=""/227, 0xe3}], 0x3, &(0x7f0000001b80)=""/58, 0x3a}}, {{&(0x7f0000001bc0)=@generic, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001c40)=""/207, 0xcf}], 0x1, &(0x7f0000001d80)=""/144, 0x90}, 0x4}, {{&(0x7f0000001e40)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f00000022c0)=[{&(0x7f0000001ec0)=""/189, 0xbd}, {&(0x7f0000001f80)=""/174, 0xae}, {&(0x7f0000002040)=""/145, 0x91}, {&(0x7f0000002100)=""/10, 0xa}, {&(0x7f0000002140)=""/236, 0xec}, {&(0x7f0000002240)=""/106, 0x6a}], 0x6, &(0x7f0000002340)=""/9, 0x9}, 0x1000}], 0x5, 0x40000020, &(0x7f00000024c0)={0x0, 0x1c9c380})
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000002740)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000002580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
gettid()
pipe2(&(0x7f0000002500)={<r3=>0xffffffffffffffff}, 0x4803)
ioctl$RTC_UIE_ON(r3, 0x7003)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="22ae1b179ca83213139df0a560aec0fefdca1065f628ab5361a9aec44b8c8a172ddfc83315cb861e79375ee3f02bfec935174b9b621a845c985b11f239b0afb0d7f9108013d5110d667ba02ca03899350d5f527b25fad799ab3700c3f54dc8ac0b8a662f2fa4e6f32884f41c83e1d2abffd31f4be07f8f2b95db133c8e754e8b00776ce4cebacdc30800549098b0ab52d805e5577021ebcd8dbd0d024adb773a8cf2efd12971274a53b449dced2550c89ea29ef9cc775e395e349045b9349423309e6ee7ff6202f677fa01847b2a3834838e028ce3d53283665d4f19435690894a29a18bfc4415c478a2e2a798238c231a", 0xf1}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0x0)
fcntl$setpipe(r2, 0x407, 0x45)
r5 = gettid()
mlockall(0x5)
munlockall()
r6 = request_key(&(0x7f0000002700)='encrypted\x00', &(0x7f0000002680)={'syz', 0x0}, &(0x7f00000026c0)='/s\x00\x00\x00', 0xfffffffffffffffe)
add_key$keyring(&(0x7f00000025c0)='keyring\x00', 0xfffffffffffffffd, 0x0, 0x0, r6)
r7 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
add_key(&(0x7f0000000540)='trusted\x00', &(0x7f0000000580)={'syz', 0x1}, &(0x7f00000005c0)="06780c5e74569d0886fa4e5c809cbd", 0xf, 0xffffffffffffffff)
ioctl$sock_ifreq(r4, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags=0x2})
socketpair(0x1, 0x80007, 0xad, &(0x7f0000000140)={<r8=>0xffffffffffffffff})
setsockopt$netlink_NETLINK_RX_RING(r8, 0x10e, 0x6, &(0x7f00000003c0)={0x100000001, 0xffffffff, 0xdd4, 0x4}, 0x10)
r9 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000680)='/selinux/policy\x00', 0x0, 0x0)
ioctl$TIOCSWINSZ(r9, 0x5414, &(0x7f00000006c0)={0x1f, 0x8, 0x80, 0x7})
lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r10=>0x0})
ioctl$sock_ifreq(r1, 0x8937, &(0x7f0000000640)={'lapb0\x00', @ifru_data=&(0x7f0000000600)="68cb0dd590171b71d733b470168c81f32bcc76fc753e469def296f3ff61e57f5"})
fsetxattr$security_capability(r0, &(0x7f0000002600)='security.capability\x00', &(0x7f0000000280)=@v3={0x3000000, [{0xfffffffffffffffa}, {0x93, 0xfffffffffffffffb}], r10}, 0x14c, 0x0)
r11 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, r7)
perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0x3f, 0x20, 0x40, 0x7, 0x0, 0x1, 0x91160b6edceee2d8, 0x0, 0x4, 0x9, 0x3, 0x36e5eecc, 0x5c6, 0x1, 0x9, 0x200, 0x40, 0x5, 0xfff, 0x2, 0xb, 0xfff, 0x4, 0x20, 0x7, 0xf5, 0xfff, 0x1ff, 0x200000000000000, 0x8, 0xff, 0x4, 0x81, 0x2, 0x7, 0x33a, 0x0, 0x80, 0x5, @perf_config_ext={0xfffffffffffffff7, 0x78}, 0x400, 0x1477, 0x5, 0xf, 0x1000, 0x3, 0x80000001}, r5, 0x9, r3, 0x8)
keyctl$unlink(0x9, r11, 0xfffffffffffffffd)

20:20:50 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000080)=0x5, 0x4)
write$binfmt_elf32(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="98"], 0x1)
r2 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(r3, r3, r3)
recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/148, 0x94}, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x40000000000037f, 0x0)
personality(0xc)

20:20:50 executing program 1:
socketpair$unix(0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x100000000000000b, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000e2000000000000000029ca2c5068c6c6810000000095"], 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x0, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x5}], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x0, 0xe, 0x0, &(0x7f0000000300)="a7ad5699603372a3dbadf3e39e7a", 0x0, 0xa09c}, 0x28)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4e)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
pivot_root(0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x2, 0x0)

20:20:50 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)={@multicast1, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10)
ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000000)=0x5)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x2b)
gettid()
fcntl$setstatus(r1, 0x4, 0x2000)

[  258.843316] binder: 7542:7554 got transaction with invalid offset (0, min 0 max 0) or object.
[  258.869364] binder: 7542:7554 transaction failed 29201/-22, size 0-8 line 3348
[  258.889177] binder: 7542:7565 BC_ACQUIRE_DONE u0000000000000000 no match
20:20:51 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff03c}, {0x80000006}]}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f00000000c0))
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)

20:20:51 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200), &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

20:20:51 executing program 2:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c)
r2 = socket$inet(0x2, 0x3, 0xff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000000))
connect$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10)
splice(r0, 0x0, r2, 0x0, 0x110002, 0x0)
write$P9_RLOPEN(r1, &(0x7f00000000c0)={0x18}, 0x18)

[  259.158045] binder: 7573:7576 ioctl c018620b 0 returned -14
[  259.231577] binder: 7573:7583 got transaction with invalid offset (0, min 0 max 0) or object.
[  259.264143] binder: 7573:7583 transaction failed 29201/-22, size 0-8 line 3348
20:20:51 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200), &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

[  259.276290] binder: 7573:7589 BC_ACQUIRE_DONE u0000000000000000 no match
[  259.347608] binder: 7592:7593 ioctl c018620b 0 returned -14
[  259.424419] binder: 7592:7594 got transaction with invalid offset (0, min 0 max 0) or object.
[  259.470419] binder: 7592:7595 BC_ACQUIRE_DONE u0000000000000000 no match
20:20:51 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200), &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

20:20:51 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff03c}, {0x80000006}]}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f00000000c0))
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)

[  259.540196] binder: 7592:7594 transaction failed 29201/-22, size 0-8 line 3348
[  259.590840] binder: 7599:7601 ioctl c018620b 0 returned -14
[  259.650323] binder: 7599:7603 got transaction with invalid offset (0, min 0 max 0) or object.
[  259.659055] binder: 7599:7603 transaction failed 29201/-22, size 0-8 line 3348
20:20:51 executing program 1:
socketpair$unix(0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x100000000000000b, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000e2000000000000000029ca2c5068c6c6810000000095"], 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x0, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x5}], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x0, 0xe, 0x0, &(0x7f0000000300)="a7ad5699603372a3dbadf3e39e7a", 0x0, 0xa09c}, 0x28)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4e)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
pivot_root(0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x2, 0x0)

20:20:51 executing program 0:
clone(0xfffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x40000004001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0x9f})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendto(r1, &(0x7f0000000180), 0x0, 0x800, &(0x7f00000001c0)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000046c1c64c030ffa8b8528fb"], 0x0, 0x18}, 0x20)
ptrace$cont(0x1f, r0, 0x0, 0x0)
r3 = dup2(r2, r2)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./file0\x00', r3}, 0x10)

20:20:51 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x1c, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x1c}}, 0x0)

20:20:51 executing program 0:
r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000001080))
setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000010c0), 0x4)
r1 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3e)
fcntl$setsig(r2, 0xa, 0x12)
r4 = syz_open_procfs(r1, &(0x7f0000001040)='net/route\x00')
setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000001100)=0x10000, 0x4)
bind$netlink(r4, &(0x7f0000001140)={0x10, 0x0, 0x25dfdbff, 0x10000000}, 0xc)
ioctl$TIOCSTI(r4, 0x5412, 0x0)
read(r2, &(0x7f0000000040)=""/4096, 0x1000)
poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8)
r5 = dup2(r3, r3)
ioctl$ASHMEM_SET_PROT_MASK(r4, 0x40087705, &(0x7f0000001180)={0x1, 0x80})
fcntl$setown(r5, 0x8, r1)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000000)=0x3, 0x4)
tkill(r1, 0x16)

20:20:51 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0)
unshare(0x40600)
pwritev(r0, 0x0, 0x0, 0x0)

20:20:51 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000140)='/dev/keychord\x00', 0x7ffff, 0x0)
ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000100)=0x7)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
flock(r0, 0x1)
lseek(r0, 0x0, 0x1)
r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3)
lseek(r2, 0x0, 0x4)
close(r0)

20:20:51 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_emit_ethernet(0xe9, &(0x7f00000002c0)={@random="04206c4610b0", @dev, [{[], {0x8100, 0x80000001, 0x5, 0x3}}], {@llc_tr={0x11, {@snap={0x78b3e8531902018b, 0xaa, '\a', "77e79b", 0x88f7, "f769932dd02b94b2a4479d9a53252995ddcd4049e17da754bb14e31676942caf94a399c054c030aeedb77403a00486c040bdd665095619c7c210dedba787e5f5ccabcd0ba227e813d835bfda48005f5d100395d453212efd2d5dd0b7375b0476e6450c27b644b559025e5448ed91d9d82e48785ffa289067e3ddddff2c3682bafd745ac54bf693dc8c15f735b3cb78258232b433663f257a9282aec96bff95a6584467cf730b81786ae5ec8196f80ab44d890eedddb5b9143ef90a2274d3880bc7946120957c7074098af866e28788"}}}}}, &(0x7f0000000100)={0x1, 0x0, [0xaf5, 0x0, 0xfb6, 0x2]})

20:20:52 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VT_ACTIVATE(r2, 0x5606, 0x269)
ioctl$sock_proto_private(r0, 0x89e9, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x0)

[  260.049341] PF_BRIDGE: RTM_NEWNEIGH with invalid address
20:20:52 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0)
r2 = epoll_create1(0x0)
r3 = epoll_create1(0x0)
sendto$inet(r0, &(0x7f0000000080)="05304844f8480fb718b15ff5c71c20fd272ec7bdc4945ddd4bfcc3f05bf218008a035b533fe8dc403158e0924637628e8fadcccd3cb29e169bd2a260ecbaabf7488a7f3ebfbdf17824a6bdeaf9d505c209cbd95a01a7703fb525ff", 0x5b, 0x40080, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000200))
listen(r0, 0x0)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='user\\\x00', r3}, 0x10)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000003000000000000000700000000000000", @ANYRES32=r0, @ANYBLOB="00000000060000000000000000000000000000000000000000000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="00000000090000000000000001000000000000000000000000000000cdcf60bf82381a986a017b48ac79cb0fed6bae660dd7ea03a90d62ae11903a65316c01b50ba8ac13effb3c14207876186dae081575b30e8e18b50bad9cf6c3222fce71c004d06c4083346a19afa1936ed81ca1a69e40b7d2b71154d88695fd0b273991d884e0afbb7ad83618ccab10c2a9b1dea9023f0cc2ac28268d05b02f321843834856116ed7803c7f4aaa3c3194c85f1dc45e9ccad5e84516df38c46b4d84e76fa86990004191bf77fb2799fec367ec1b8d550f4ab15addaa530fd274513dc08842aa3ea3cadc06e8c41df0849f5e24b2ab09b9", @ANYRES32=r3, @ANYBLOB="00000000050000000000000000000000000000000000000000000000", @ANYRES32=r4, @ANYBLOB="00000000010400000000000000000000000000000000000000000000", @ANYRES32=r3, @ANYBLOB="00000000010001000000000000000000000000000000000000000000", @ANYRES32=r0, @ANYBLOB="00000000020000000000000000000000000000000000000000000000"])
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000939ff4))

20:20:52 executing program 2:
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000100)=0x1f)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@gettaction={0x28, 0x32, 0x501, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, @TCA_ACT_INDEX={0x8}}]}]}, 0x28}}, 0x0)

[  260.168044] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  260.177358] tc_dump_action: action bad kind
20:20:52 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

[  260.402286] binder: 7647:7648 ioctl c018620b 0 returned -14
20:20:52 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0xf)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x201, 0x70bd2c, 0x25dfdbfd, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x2}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x44804)
r2 = socket$packet(0x11, 0x200002000000003, 0x300)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="470000111d00000000000000000000000051d311000c0000"]})

20:20:52 executing program 3:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = dup2(r1, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = gettid()
setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @rand_addr="93dc5c52638b65043af2e53cc6d9de3a"}}, {{0xa, 0x0, 0x0, @initdev}}}, 0x108)
ptrace$setopts(0x4206, r3, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x42801)
syz_genetlink_get_family_id$net_dm(&(0x7f0000000000)='NET_DM\x00')
tkill(r3, 0x13)

20:20:52 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xa58, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffff9c, 0x1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0)
fallocate(r1, 0x0, 0x0, 0x0)
readahead(r0, 0x8, 0x10001)
r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4006, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000180)={0x5, 0x20, 0xdc1, 0xfffffffffffffffd, 0xffff}, 0x14)
ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000140)={0x53, 0xffff, 0x9, {0x9, 0x2000}, {0x2, 0x1eb}, @ramp={0x400, 0x2, {0xfffffffffffffff8, 0x4, 0x5, 0x7}}})
sendfile(r4, r4, 0x0, 0x8800000)

20:20:52 executing program 1:
r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000140))
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x5, 0x105082)
fallocate(r1, 0x6e, 0x7ff, 0x629ca9e2)
fallocate(r1, 0x4, 0x41, 0x3f)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x440100, 0x0)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000040)=""/146)

[  260.454378] binder: 7647:7649 got transaction with invalid offset (0, min 0 max 24) or object.
[  260.464248] binder: 7647:7649 transaction failed 29201/-22, size 24-8 line 3348
[  260.473323] binder: 7647:7649 BC_ACQUIRE_DONE u0000000000000000 no match
20:20:54 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6}]}, 0x10)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x6}]}, 0x10)

20:20:54 executing program 1:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000006c0)=@getae={0x40, 0x1f, 0x1, 0x0, 0x0, {{@in6=@dev}, @in6=@local}}, 0x40}}, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10000, 0x0)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00')
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)="5150a44fc69e0f92c6613ab780ec78e509ba09ff22ccdb4fa080c387865ad0032951e117b9ff93a3372b076864c1e565995768d3e0006aed49354456445633", 0x3f, r1}, 0x68)
sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1180000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x406, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x1}]}, 0x1c}}, 0x4010)

20:20:54 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008913, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x101000, 0x0)
ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000080)=""/191)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000140)="c5", 0x1)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f000021affc)=0x10)

20:20:54 executing program 5:
openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0)
socketpair$unix(0x1, 0xfffffffffffffffc, 0x0, 0x0)
r0 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x1)
sendfile(r0, r0, &(0x7f0000000440), 0x20)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00')
mount(0x0, 0x0, 0x0, 0x0, 0x0)
pivot_root(0x0, &(0x7f00000003c0)='./file0/file0/file0\x00')
r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x2, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
mkdir(&(0x7f0000000340)='./control\x00', 0x0)
ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000140))
creat(&(0x7f0000000040)='./control/file0\x00', 0x0)
r2 = open(&(0x7f0000000380)='./control\x00', 0x0, 0x0)
getdents64(r2, &(0x7f0000000700)=""/80, 0x20d)
unlinkat(r2, &(0x7f0000000400)='./file0\x00', 0x0)
syz_genetlink_get_family_id$tipc2(0x0)

20:20:54 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

20:20:54 executing program 1:
clone(0x3102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x400000008000000)
tkill(r0, 0x22)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000004, 0xa4})
ptrace$setopts(0x4206, r0, 0x3, 0x4)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8)
listen(r2, 0x0)
connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00')
sendfile(r1, r3, 0x0, 0x800000bf)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3)
ptrace$cont(0x20, r0, 0x0, 0x0)

20:20:54 executing program 0:
fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000380)='security.evm\x00', &(0x7f0000000480)=ANY=[], 0x0, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'nr0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1d\x00'}, 0x18)
r0 = socket$inet6(0xa, 0x0, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x3f, 0x0, &(0x7f0000000000))
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, 0x3d)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x100, 0x0, 0x5a3, 0x0, 0x6, 0x7ff, 0x7, 0xfff}, &(0x7f0000000180)={0xfff, 0xd5a, 0xffffffffffffff00, 0x0, 0x3, 0x7, 0x9, 0xffffffffffffffc1}, &(0x7f0000000200)={0xfa03, 0x4, 0xffffffffffff5e14, 0x10001, 0x70acbb45, 0x8000, 0x1, 0xffff}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f0000000300)={&(0x7f0000000280)={0x197d}, 0x8})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="85000000290000009c00000000000000d67200001c000000"], &(0x7f00000002c0)='\x01\ad\x98', 0x1, 0xcf, &(0x7f0000000340)=""/207}, 0x48)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="6a48373dea8c0000000020000000", 0x0, 0xf000}, 0x28)

20:20:55 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = dup2(r0, r0)
ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f00000000c0)=[0x2, 0x3b9b])
socketpair(0x4, 0x8080f, 0x3f, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00')
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000540)={{{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000240)=0xe8)
getsockopt$inet6_mreq(r1, 0x29, 0x1d, &(0x7f0000000280)={@local, <r6=>0x0}, &(0x7f0000000640)=0x14)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000680)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000780)=0xe8)
getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f00000007c0)={@broadcast, @local, <r8=>0x0}, &(0x7f0000000800)=0xc)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000ac0)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in=@remote}}}, &(0x7f0000000bc0)=0xe8)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000cc0)={<r10=>0x0, @dev, @loopback}, &(0x7f0000000d00)=0xc)
getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000f40)={@rand_addr, @remote, <r11=>0x0}, &(0x7f0000000f80)=0xc)
getsockopt$inet6_mreq(r3, 0x29, 0x1f, &(0x7f0000000fc0)={@remote, <r12=>0x0}, &(0x7f0000001000)=0x14)
getsockname$packet(r3, &(0x7f0000001040)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001080)=0x14)
getpeername$packet(r2, &(0x7f00000010c0)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001100)=0x14)
getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000001500)={@multicast2, @broadcast, <r15=>0x0}, &(0x7f0000001540)=0xc)
accept$packet(r2, &(0x7f0000001580)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000015c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001600)={{{@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r17=>0x0}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000001700)=0xe8)
accept$packet(r2, &(0x7f0000001800)={0x11, 0x0, <r18=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001840)=0x14)
accept4$packet(r3, &(0x7f0000001880)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000018c0)=0x14, 0x800)
sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000001e00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40010004}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001900)={0x48c, r4, 0x0, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x7c, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x100}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r7}, {0x104, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r10}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r11}, {0x7c, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r12}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xffffffff}}}]}}, {{0x8, 0x1, r13}, {0x74, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x1ff}}}]}}, {{0x8, 0x1, r14}, {0x88, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r15}}, {0x8}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r16}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r17}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xe5a6}}}]}}, {{0x8, 0x1, r18}, {0x84, 0x2, [{0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x80, 0x100000001, 0x9, 0x1000}, {0x200, 0x80000000, 0x8, 0x7}]}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r19}}}]}}]}, 0x48c}, 0x1, 0x0, 0x0, 0x800}, 0x20000810)
timerfd_create(0xb, 0x80000)
accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000300)={{{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r21=>0x0}}, {{@in6=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000000200)=0xe8)
setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@mcast1, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4e21, 0x0, 0x4e20, 0x5, 0xa, 0x80, 0x0, 0x32, r20, r21}, {0xf01, 0x6, 0xffffffffffffffff, 0xfffffffffffffff9, 0x20, 0x1, 0x3ff, 0x7}, {0x80, 0x3, 0x6d, 0x3}, 0x1000, 0x0, 0x2, 0x1, 0x2, 0x3}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d2, 0x7c}, 0xa, @in6=@mcast2, 0x3505, 0x3, 0x1, 0x7fff, 0x3, 0x7}}, 0xe8)
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r22 = open(&(0x7f0000000080)='./bus\x00', 0x1, 0x0)
fgetxattr(r22, &(0x7f00000002c0)=@known='security.apparmor\x00', 0x0, 0x0)

[  263.064165] binder: 7675:7680 ioctl c018620b 0 returned -14
20:20:55 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x3, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x28}}, &(0x7f0000000080)='syzkaller\x00'}, 0x48)

[  263.130311] binder: 7675:7694 got transaction with invalid offset (0, min 0 max 24) or object.
[  263.151484] binder: 7675:7694 transaction failed 29201/-22, size 24-8 line 3348
[  263.161796] binder: 7675:7694 BC_ACQUIRE_DONE u0000000000000000 no match
20:20:55 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000000))
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x17, &(0x7f00000000c0)="5e4f4083", 0x4)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r0, 0x4, 0x42803)

20:20:55 executing program 2:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
io_setup(0x3f, &(0x7f0000000000)=<r1=>0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])
uname(&(0x7f0000000040)=""/88)
socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_CAPBSET_DROP(0x18, 0xa)
ioctl$VT_ACTIVATE(r0, 0x5606, 0x0)

20:20:55 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x1c, 0x13, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0)
getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68)

20:20:55 executing program 1:
r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
getsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000180)={@initdev, @remote}, &(0x7f00000001c0)=0x8)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, &(0x7f0000000140), 0x1)
syz_genetlink_get_family_id$tipc(0x0)

20:20:55 executing program 5:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2000000000000005, &(0x7f0000000000)=[{0x28, 0x0, 0x4, 0xfffff034}, {0x80000006}]}, 0x10)
r1 = socket$inet6(0xa, 0x3, 0x84)
r2 = socket(0x4, 0x80001, 0x3ff)
connect$inet6(r1, &(0x7f0000000040), 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
r3 = dup3(r0, r2, 0x80000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000100)='{/wlan0#\x00')
fcntl$dupfd(r2, 0x406, r2)
ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{}]})

20:20:55 executing program 3:
r0 = eventfd2(0x8001, 0x800)
r1 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0)
write$binfmt_misc(r0, &(0x7f00000000c0)={'syz1', "fa65606c1c47b3a12738bb496c22183056058a9eb4da3f663017ea70ae3b5b8e5a1c690f6e3324518a2406b9746cd2a39dd73802e9a4a286c1cdb10b2d66f4b9f002734b3145c79e29f2a3ac87c4bfdddb6404eb71aed512d75045e63648513eac85f3f88773a7d2f403a7481709efd18e639a185c51fb7f587fdfab16465f9d0b7ce85ce2d6125757b6e42de75b1ea12ca75948b3400553e6e9bbe2642747d9cf6acb9b1ba62be909a1d4e89a65468186d39169c952b563fea6aa3d316b24276a5c5e4382f4f68fd1ad80a8ffc3c64affaa6eadf9fe43858a86d17a55eeb1f7ac37b1c1f2d5f07a08"}, 0xed)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x115, 0x6, 0x9, 0xc, "ddf6b3c2a0b221a7299c8df5be86ade7ba85ba7e3b11fee35132a94b4981470ea93667cdf6cfd4e126aa9357e2eec093cac689bc3f33073c1f6cbfc7887c8486", "532c4245993bb22c16dc47309008f191c8a4014ba1be6c7113c14ad39b5ec67c", [0x80000000, 0xfffffffffffffff7]})
r2 = open(&(0x7f0000003fc0)='./file0\x00', 0x20000, 0x110)
write$binfmt_elf64(r2, &(0x7f0000004140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "b5f0c9193d20bcc4fe54347ff9b52f55"}, 0x88)
sendfile(r0, r1, 0x0, 0x2008004fffffffe)

20:20:55 executing program 1:
r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
getsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000180)={@initdev, @remote}, &(0x7f00000001c0)=0x8)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, &(0x7f0000000140), 0x1)
syz_genetlink_get_family_id$tipc(0x0)

20:20:55 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

20:20:55 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
connect$inet6(r0, &(0x7f0000000280), 0x1c)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x10, &(0x7f0000000380)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @rand_addr="fa879261b600929c01ed7f03ff15e14a"}}}, 0x108)

20:20:55 executing program 1:
r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
getsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000180)={@initdev, @remote}, &(0x7f00000001c0)=0x8)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, &(0x7f0000000140), 0x1)
syz_genetlink_get_family_id$tipc(0x0)

20:20:55 executing program 3:
exit(0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0)
sched_setaffinity(0x0, 0x51, &(0x7f0000000140)=0x5)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
chdir(&(0x7f0000000580)='./file0\x00')
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00')
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x10, 0xffffffffffffffff, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10000, 0x192)
r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setxattr$security_smack_transmute(&(0x7f0000000380)='./file1\x00', &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000440)='TRUE', 0xfffffffffffffdc2, 0x2)
r2 = socket$unix(0x1, 0x3, 0x0)
r3 = socket$unix(0x1, 0x400040000000001, 0x0)
bind$unix(r3, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e)
listen(r3, 0x0)
connect(r2, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8)
r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/unix\x00')
sendfile(r0, r1, 0x0, 0x800000bf)
clone(0xfffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x40000004001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = gettid()
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000200)="09fb0a3aaaf2cdfa4e1ef57cbbb5fc9b14ab8bc64f6731dc0a31cba8c74383e80b342e85aa150efefd38ea040bc3629774057ca0daf331b60e0b871a1412da9c250b9ec267514b0f0e58d55654413b11fa245f748ee85ea923c9836f21f5d31e7642ff2c01be3afaea4cac92b935d2a60a96120a03849f1b34653100e49191572b8323983eeb125e8ed77ca8a689b5890f984a9f72d011b6d6460073995e76216875a8b9fb8f4b467ad8bb5c7bbf3bdaaf8fdeda76b909c5888f3147bb10b9e2169b0ac45b22aedcd26f9fb9c15f635f0fcf00b9b019bdb739be1774da19", 0xde)
wait4(r5, 0x0, 0x80000009, 0x0)
ptrace$setopts(0x4206, r5, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[]}, 0x1, 0x0, 0x0, 0x1}, 0x0)
ptrace$setregs(0xd, r5, 0x4, &(0x7f0000000140)="2f309f78195228eed9bf3dd0b57cfd8aec500c3130f6a28bcca76ea45066aeef02b839c1f1074bc95a817831c3f6902ee7aa1edce7939ba1dfe67542868fc8c2f879117d710d052a2788e7acf5fdc56e95e0f1e114942932616577fc80c8f6b8984f90534a43a1aa020c113b6f74b83e9e3f0b8754df191259a64dd50adff3261887f8e39ddceeec437fe486b01121")
tkill(r5, 0x0)

[  263.904618] binder: 7749:7752 ioctl c018620b 0 returned -14
20:20:55 executing program 1:
r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
getsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000180)={@initdev, @remote}, &(0x7f00000001c0)=0x8)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, &(0x7f0000000140), 0x1)
syz_genetlink_get_family_id$tipc(0x0)

[  263.988543] binder: 7749:7757 got transaction with invalid offset (0, min 0 max 24) or object.
[  264.019254] binder: 7749:7757 transaction failed 29201/-22, size 24-8 line 3348
[  264.035514] binder: 7749:7762 BC_ACQUIRE_DONE u0000000000000000 no match
20:20:58 executing program 0:
r0 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000), 0x4)

20:20:58 executing program 1:
r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
getsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000180)={@initdev, @remote}, &(0x7f00000001c0)=0x8)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, &(0x7f0000000140), 0x1)

20:20:58 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

20:20:58 executing program 3:
r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
recvfrom$inet6(r0, &(0x7f0000000080), 0x0, 0x100, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @remote, 0x3}, 0x1c)
r1 = memfd_create(&(0x7f0000000000)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[@ANYRES16], 0x2)
lseek(r1, 0x0, 0x4)

20:20:58 executing program 5:
r0 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\x9b\xaaO\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x89%\x88Q\xf7\xd6\x1d\x98\xaf\x88\x927\x9f`=\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0xfffffffffffffffd)
lseek(r0, 0xfffffffffffffffb, 0x4)

20:20:58 executing program 2:
prctl$PR_MCE_KILL(0x21, 0x1, 0x2)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000000c0)=0x8, 0x4)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000100)={'nat\x00', 0x3, [{}, {}, {}]}, 0x58)
ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000080))
sync_file_range(r1, 0x7f, 0xff, 0x6)
ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000040)=0x95)

20:20:58 executing program 2:
clone(0x13102001fef, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80000, 0x0)
lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
sendmsg$nl_netfilter(r2, &(0x7f00000015c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001580)={&(0x7f0000001680)=ANY=[@ANYBLOB="b8130000100204052cbd7001010000c39c256ee16e4dfcdbdf250c00634dae0d0f4be1761afaea646a7ce72ec69b04a7e2056be16ade02828cff447c3702aeeb4a4ff374778fce457cdcc151809bcd684826e272d094745583029fc7b37000673f5cd000df7445581d61ad9ff7fa7247e700ef97db146a7d71cce58e8bbe460e737842b955c87c61217ab367b44ffd0b8ebb8ec14f770ed0102f13d8aaeff7286a04cf4cb1d522cc7656fb59e7ed006b5e0eea1eceecfdc9770035ba782d15cf861f660424c27f21fd0409af6aaf12f2aafda6c7eb5bc875efd2c587d9c0513ba271e9d93fd4ed21496fa2d2fe43f0d0bcfa45b1ae06cbc935c00036a21e2abdd2b0b61bac4481ccfb2812", @ANYRES32=r1, @ANYBLOB="14008200fe8000000000000000000000000000aa4139cc3640d3b5f2e8734af9aab8e0ebdd29cb824aac007e0008248b49cb2382d5b2dbe79a593440a0e5b52c1c3a96de2d7439a372f7b3cf1d1d68256abe870b11bd998cc6f7364c3d551eafced27fa7e1731311955781626a252d9b710096718c38c8525b0fbb36ee90f0319db6d4ee657e6196d5298bd43f8e2d3f2817eb73ff8c3c9b28b0e244ff60e4aec45f9362c48908ae1f412e513c2c36ac9f492809787f3660ceeeea1a0be24fe9755d85f7581ffb964170a0e6ac94195d27fa762d42000000c012580008008a00", @ANYRES32=r3, @ANYBLOB='\b\x00n\x00', @ANYRES32=r0, @ANYBLOB="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"], 0x13b8}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
tkill(r0, 0x34)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x7d4, 0x0, 0x13f})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000001600)={0x0, 0x5, 0x0, 0x8, 0x9, 0x9cae, 0x2, 0x4}, 0x0)

20:20:58 executing program 1:
r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
getsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000180)={@initdev, @remote}, &(0x7f00000001c0)=0x8)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, &(0x7f0000000140), 0x1)

20:20:58 executing program 3:
r0 = socket(0xa, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, '\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00p\x80\x00', 0x1}, 0x18)
ioctl(r0, 0x8936, &(0x7f0000000000))
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000040)=0x200, 0x4)

20:20:58 executing program 5:
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x5)
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0)
r1 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000380)={{{@in=@initdev, @in6}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8)
chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
chdir(&(0x7f0000000340)='./file0\x00')
symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00')
clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
lstat(&(0x7f0000000500)='./file0/file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

20:20:58 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@buf={0x3a, &(0x7f0000000000)="ad10e1c90175aab5c872bdc2869badfce9d0cdf4fccc8d8a53f75f58fc514b06ddadc0cc99bba4e350e9460ca1a690828f7a8d0c701cc8f77d7c"})
ioctl(r0, 0x11000008910, &(0x7f0000000100)="50a527daec42c617c3b6c06ef30d7ae4c582bccabebf060cebb3168d980ec29383a5a822c3a408befd3d9b0846a4dcb7a8b8cf543e6b0200000092464f1826")
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0, <r2=>0x0})
clock_nanosleep(0x6, 0x0, &(0x7f0000000200)={r1, r2+10000000}, &(0x7f0000000240))
r3 = socket$inet6(0xa, 0x1, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
setxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:var_run_t:s0\x00', 0x1f, 0x1)
getsockopt$inet6_buf(r3, 0x29, 0x19, &(0x7f0000c86000), &(0x7f00000000c0)=0xffffffb7)

[  266.531565] binder: 7775:7783 ioctl c018620b 0 returned -14
20:20:58 executing program 1:
r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
getsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000180)={@initdev, @remote}, &(0x7f00000001c0)=0x8)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, &(0x7f0000000140), 0x1)

20:20:58 executing program 3:
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x8000009)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000680))
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={<r3=>0xffffffffffffffff})
socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
capget(&(0x7f00000001c0)={0x20080522, r2}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x3ff, 0x8001})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000bfd000/0x400000)=nil, &(0x7f0000c18000/0x3000)=nil, &(0x7f0000f75000/0x2000)=nil, &(0x7f0000c78000/0x1000)=nil, &(0x7f00000006c0)="b4df3ff8a587cf97b6f1de69fe34b33ccac89fe05a3ccd09de5461cde78a0beee17c10316b9ad23cc8a1a75b688b9b0f711e170413e8b0b6a553f733dc8cf26adf71b577e9cd5e1bc423fe46f2b528715ab7d8268cc47d69f6081ae52be41eaf1223d6bb532c131b2394a73c7670bc4a742f140a614bfc8e952e220c42abe9ce757c66b69540518e080024500c09bd5445291e65a81f72db107adcb11d40ab97ed2a6afaffd5214a618b000f", 0xac, r0}, 0x68)
r5 = socket$inet6(0xa, 0x410000000001, 0x1ffffffffd)
ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, 0x0)
fcntl$setflags(r1, 0x2, 0x0)
r6 = dup(r5)
fsync(r1)
syncfs(r3)
ioctl$ASHMEM_SET_PROT_MASK(r6, 0x40087705, &(0x7f0000000540)={0x8})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000000c0)='syzkaller1\x00', 0xfffffffffffffdb5)
io_setup(0x20, &(0x7f0000000300)=<r7=>0x0)
io_cancel(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x8, 0x423, r6, &(0x7f00000005c0)="f2f42245d196f91a48f2b821d3442e277a43f0ca0ad8ed1b65a81f934bc9a4fdca52f744ec264514eba836b2ca9b2e580d83a0ab4e20c5f62b71ca27af042df6ea32", 0x42, 0xf, 0x0, 0x0, r6}, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000280)='tls\x00', 0x4)
ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000400)={'veth1_to_team\x00', 0x200})
setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000000)=0xff, 0x4)
bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000780)='syz_tun\x00', 0x10)
r8 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0)
ftruncate(r8, 0x2007fff)
sendfile(r6, r8, 0x0, 0x8000fffffffe)

20:20:58 executing program 0:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = dup(r0)
r3 = dup(r1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
timer_create(0x0, 0x0, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000009f80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001}}], 0x1, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0xfffffffffffffffd)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4)
ioctl$PPPIOCSPASS(r3, 0x40107447, 0x0)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
ioctl$TCSBRKP(r4, 0x5425, 0x0)
ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, 0x0)
ftruncate(r4, 0x80003)
sendfile(r1, r4, &(0x7f00000000c0), 0x8000fffffffe)
recvmmsg(r2, &(0x7f0000003440)=[{{&(0x7f0000001840)=@ax25, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001e40)=""/169, 0x42}}], 0x21b, 0x2000, &(0x7f0000003500)={0x0, 0x1c9c380})
socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0)

[  266.595292] binder: 7775:7799 BC_ACQUIRE_DONE u0000000000000000 no match
20:20:59 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

20:20:59 executing program 1:
r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
getsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000180)={@initdev, @remote}, &(0x7f00000001c0)=0x8)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, &(0x7f0000000140), 0x1)

20:20:59 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00')
open$dir(&(0x7f0000000140)='./file0\x00', 0x129002, 0x8)
readv(r0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/45, 0x2d}, {&(0x7f0000000280)=""/217, 0xd9}], 0x1)

20:20:59 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f3188b070")
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f000018effc)=0x1c, 0x4)
bind$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r2, 0x0)
connect$unix(r1, &(0x7f0000939ff4)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
bind(r0, &(0x7f0000000080)=@llc={0x1a, 0x310, 0x9, 0x3, 0x1, 0x1, @local}, 0x80)

20:20:59 executing program 3:
mkdir(0x0, 0x0)
openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RAUTH(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x67, 0x2, {0x98, 0x1}}, 0x14)
mkdir(&(0x7f0000000380)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
prctl$PR_GET_SECCOMP(0x15)
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000240)='./bus\x00', &(0x7f0000000280)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000140)=@v2={0x2000000, [{0x1}, {0x4, 0x3}]}, 0x14, 0x0)
setitimer(0x2, &(0x7f0000000180)={{0x0, 0x7530}, {0x77359400}}, &(0x7f0000000300))
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
r1 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
linkat(r2, &(0x7f0000000100)='./file0\x00', r1, 0x0, 0x0)
timerfd_gettime(r2, &(0x7f0000000000))

[  267.329399] binder: release 7775:7799 transaction 243 out, still active
20:20:59 executing program 2:
r0 = inotify_init()
inotify_rm_watch(r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80002, 0x1)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)={@empty, @loopback, 0x1, 0x2, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, 0x18)
getitimer(0x0, &(0x7f0000000080))

20:20:59 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x0, 0x0)
write$selinux_user(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='system_u:object_2:dri_device_t:s0 user_u\x00'], 0x29)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00')
r2 = socket(0x10, 0x802, 0x0)
syz_genetlink_get_family_id$tipc(0x0)
ioctl$RTC_UIE_OFF(r0, 0x7004)
sendmsg$nl_route_sched(r2, &(0x7f0000007140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002600050f000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="ce6ee7d0acb38b1976905e5cbf899f6e459cbd74115f13b9b64302e844167b29ff"], 0x24}}, 0x0)

20:20:59 executing program 1:
r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
getsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000180)={@initdev, @remote}, &(0x7f00000001c0)=0x8)
socket$inet_udplite(0x2, 0x2, 0x88)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, &(0x7f0000000140), 0x1)

20:20:59 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setfsgid(0x0)
getrandom(&(0x7f0000000040)=""/44, 0x52a1, 0x0)
socket$packet(0x11, 0x0, 0x300)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
setgid(0x0)
close(0xffffffffffffffff)
r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x62100, 0x0)
r1 = getgid()
ioctl$TUNSETGROUP(r0, 0x400454ce, r1)
openat$rtc(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40401}, 0xc, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1800009cbc010026bd7000fedbdf250a000000000000000000000000000000000000", @ANYRES32=0x0], 0x18}}, 0x40)
socket$packet(0x11, 0x2, 0x300)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0)

[  267.381115] binder: 7826:7828 ioctl c018620b 0 returned -14
20:20:59 executing program 1:
r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
getsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000180)={@initdev, @remote}, &(0x7f00000001c0)=0x8)
socket$inet_udplite(0x2, 0x2, 0x88)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, &(0x7f0000000140), 0x1)

[  267.448046] binder: 7826:7840 BC_ACQUIRE_DONE u0000000000000000 no match
20:20:59 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
r4 = dup2(r1, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000440), 0x131f64)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = gettid()
setsockopt$inet6_group_source_req(r1, 0x29, 0x30, &(0x7f0000000400)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x1, @loopback}}}, 0x108)
ptrace$setopts(0x4206, r5, 0x0, 0x0)
tkill(r5, 0x2c)
fcntl$setstatus(r4, 0x4, 0x42803)

20:20:59 executing program 1:
r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
getsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000180)={@initdev, @remote}, &(0x7f00000001c0)=0x8)
socket$inet_udplite(0x2, 0x2, 0x88)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, &(0x7f0000000140), 0x1)

20:21:00 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

20:21:00 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
r1 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0xff}, 0x0, @in=@empty}}, 0xe8)
prctl$PR_GET_THP_DISABLE(0x2a)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0)

20:21:00 executing program 1:
r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
getsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000180)={@initdev, @remote}, &(0x7f00000001c0)=0x8)
ioctl(0xffffffffffffffff, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, &(0x7f0000000140), 0x1)

20:21:00 executing program 2:
r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x800000009)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, <r4=>0x0})
r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0)
ioctl$VT_RELDISP(r5, 0x5605)
fcntl$setownex(r1, 0xf, &(0x7f00000000c0)={0x3, r4})
flock(r2, 0x7)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c)
mkdir(&(0x7f0000000180)='./file0\x00', 0x80)
remap_file_pages(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x20000)
sendmmsg(r3, &(0x7f0000000240), 0x400000000000085, 0x0)

[  268.177709] binder: release 7826:7840 transaction 244 out, still active
[  268.195703] binder: undelivered TRANSACTION_COMPLETE
20:21:00 executing program 3:
r0 = perf_event_open$cgroup(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffff9, 0xc0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount(0x0, 0x0, 0x0, 0x8000, 0x0)
r1 = creat(0x0, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000000000002000000000020009004000000000412d1fbc00000003000600000000190200ee00e0000054d81458186fe8b9000200017981f58db0eb9c230200044a7b030005000000000002000000e0003f010000000000fca0d9"], 0x60}}, 0x0)
exit(0x0)
ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f00000001c0)=0x20)
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0)
mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x8010, r0, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f00000000c0)={0x0, 0xfb, 0x15, 0x1, 0x10001, "9ec543894b6a114ec34481d93a03351e"}, 0x15, 0x3)
symlink(0x0, 0x0)
ioctl$TIOCGWINSZ(r1, 0x5413, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setpriority(0x0, 0x0, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80, 0x0)
write$P9_RMKNOD(r5, 0x0, 0xffffffffffffff51)
fstat(r4, &(0x7f0000000340))
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, 0x0)
syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00')
r6 = getpgid(0xffffffffffffffff)
perf_event_open(0x0, r6, 0xb, r0, 0x8)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x10)
prctl$PR_SET_FPEXC(0xc, 0x0)

20:21:00 executing program 0:
r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa)
keyctl$invalidate(0x15, r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r2)
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x200001, 0x0)
ioctl$LOOP_SET_CAPACITY(r3, 0x4c07)
keyctl$invalidate(0x15, r2)

20:21:00 executing program 1:
r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
getsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000180)={@initdev, @remote}, &(0x7f00000001c0)=0x8)
ioctl(0xffffffffffffffff, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, &(0x7f0000000140), 0x1)

20:21:00 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp6\x00')
preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/137, 0x89}], 0x1, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x100, 0x0)
ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x7fffffff)

[  268.254365] binder: 7865:7871 ioctl c018620b 0 returned -14
20:21:00 executing program 1:
r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
getsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000180)={@initdev, @remote}, &(0x7f00000001c0)=0x8)
ioctl(0xffffffffffffffff, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, &(0x7f0000000140), 0x1)

20:21:00 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmsg(r0, &(0x7f0000013000)={&(0x7f0000013fe4)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000000080)=[{0x58, 0x29, 0x37, "8a08741e56a283e50eebc21d5759538a6404630241999f89df8414331a5cad267d3b7a783d9fff03774997e1f9bc47b14e065b389890b3a121d789cc4d230bcab0"}], 0x58}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x6, 0x1, 0x4, 0x7e, 0x3, 0x6})

[  268.318202] binder: 7865:7877 BC_ACQUIRE_DONE u0000000000000000 no match
20:21:00 executing program 0:
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000500))
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
futex(0x0, 0x0, 0x4, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0xc, 0x0, 0x0, 0x0, 0x0)
r1 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)="a81ec7e7a7f04d7ecf37961267075f48c56bc65f36e828984d94f54f8f52dd1c9ce2b3996c24ff1d286c956983fc51b2723ec8a30c3f1d3914f5e6f9c2676a1e990c30c07b749b6f2fd54d63cd18", 0x4e, 0xfffffffffffffffb)
keyctl$read(0xb, r1, 0x0, 0x0)
r2 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0)
mkdir(0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = gettid()
clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r3, 0xfffffffffffffffd, 0x0)
wait4(r3, 0x0, 0x2080000000000000, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$binfmt_elf64(r2, 0x0, 0x0)
ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f00000000c0))
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0xfffffffffffffffd, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x10000, 0x4, 0xbf, 0xb796, 0x0, 0x1f, 0x5, 0x3, 0x100000000, 0x0, 0x64, 0x0, 0x3296, 0x1, 0x1f, 0xbf, 0x101, 0x4, 0x2, 0x3, 0x5, 0x0, 0x7, 0x9, 0x8, 0xd4f0, 0x1, 0xda3, 0x80000000, 0x5, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0x13}, 0x1000, 0x7, 0x2b5d, 0x0, 0x6, 0x10000, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x2, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
fcntl$getownex(r4, 0x10, 0x0)
r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x82)
prlimit64(0x0, 0x6, 0x0, 0x0)
creat(&(0x7f0000000380)='./file0\x00', 0x120)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000bc0)=ANY=[], 0x0)
write$binfmt_elf64(r5, 0x0, 0x28a)
fallocate(r0, 0x0, 0x7fff, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)

20:21:00 executing program 1:
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, &(0x7f0000000140), 0x1)

20:21:00 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

20:21:00 executing program 0:
r0 = socket$inet(0x2, 0x2, 0x2200000088)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1004e20}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10)
setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000c00)=0x2, 0x4)
sendto$inet(r0, &(0x7f0000000280)="dd", 0x1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000003c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0)

20:21:00 executing program 3:
r0 = socket(0x200000000000011, 0x3, 0xb60)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', <r1=>0x0})
getsockopt$inet_buf(r0, 0x0, 0x25, &(0x7f0000000180)=""/137, &(0x7f0000000080)=0x89)
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f)
r3 = dup2(r2, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0xe5}, @sack_perm, @timestamp, @sack_perm, @mss={0x2, 0x9d}, @window={0x3, 0x5, 0x1}], 0x6)
epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r2)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000500)={'sit0\x00\x00\x00\x00\x00\x00\x00\xd6\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'sit0\x00\x00\xff\xff\xff\xff\xa0\x00Q\xfc\x03\x00', 0x141})

20:21:00 executing program 1:
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, &(0x7f0000000140), 0x1)

20:21:00 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000180)=""/95)
clock_getres(0x1, &(0x7f0000000000))

20:21:00 executing program 5:
r0 = accept4$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x80000)
ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000040)={0x3, 0x91, "e1f0d3347cd1a9013d0c07e40ad9b49b7566a10ed08138ad33139dcd38ad7619f1e58f3bf814cb2161d1c3d1bed6a37fa46b90915b7ae284a9e7018836e776b00405b0d05c4e406e84835f6fca5546c28018a855085a40fc2563f8bd606630c9c439479403820e086d35eb8cef000e8a1b1dd0a10d41e4232eceb80deee69bb1c2bb98da94b83d52dccc98f87f17e32ad7"})
r1 = socket$inet(0x2, 0x1, 0x0)
r2 = creat(&(0x7f0000000100)='./file0\x00', 0x80)
bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e24, 0x8001, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xe}}}, 0x1c)
write$P9_RRENAMEAT(r2, &(0x7f0000000140)={0x7, 0x4b, 0x2}, 0x7)
setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f0000000240)={0x0, {{0x2, 0x0, @multicast2}}}, 0x108)

[  269.017004] binder: release 7865:7877 transaction 245 out, still active
20:21:00 executing program 2:
bind$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140), 0x4)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r1, &(0x7f0000000800)="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", 0x600)
timer_getoverrun(0x0)
sendfile(r1, r2, 0x0, 0x10000)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r3 = socket(0x11, 0x0, 0x9fa)
accept(0xffffffffffffffff, &(0x7f0000000040)=@nl, &(0x7f0000000180)=0x80)
epoll_wait(0xffffffffffffffff, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x15555648, 0x8)
ioprio_set$uid(0x3, 0x0, 0x0)
getsockopt$inet6_tcp_buf(r3, 0x6, 0x1c, &(0x7f0000000e00)=""/4096, &(0x7f00000001c0)=0x1000)
sendto$unix(r1, &(0x7f0000000200)="f0c3b3fe11e5c204212e95cf83185df674cbda2cbfb44902b7e5354aea958435869461a5f7eb3d6916201079c106824f2a4831587275e33543b37ec7af01bf5e2bcb3f76b9c579b2ad10331250a4c536422bf4def858e839416bb909e026e6df35d37620b49d22d1e1ac5576feed", 0x6e, 0x10, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000000c0)={'syz_tun\x00', {0x2, 0x0, @loopback}})
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)

20:21:00 executing program 5:
r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
rt_sigprocmask(0x0, &(0x7f0000000000)={0x70}, 0x0, 0x8)
pipe(&(0x7f0000000540)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
dup2(r2, r2)
writev(r3, &(0x7f000000b000)=[{&(0x7f0000066000)=',', 0x1}], 0x1)
tee(r2, r0, 0x5, 0x0)
dup2(r1, r0)

20:21:00 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
r2 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
pwrite64(r2, &(0x7f000003bfff)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0)
lseek(r2, 0x0, 0x2)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000200)=<r3=>0x0)
ioprio_get$pid(0x2, r3)
sendfile(r2, r2, &(0x7f0000317000), 0x7f8)
chdir(&(0x7f0000000180)='./file0\x00')
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000001c0)='./file0\x00')
chown(&(0x7f0000000040)='./file0/../file0/file0\x00', 0x0, 0x0)
r4 = fcntl$dupfd(r0, 0x406, r2)
ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f00000000c0)={0x0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x26}}, {0x2, 0x4e23, @empty}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x0, 0x0, 0x0, 0x3f, &(0x7f0000000080)='caif0\x00', 0x9, 0x7e, 0x401})

20:21:00 executing program 1:
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, &(0x7f0000000140), 0x1)

[  269.061112] binder: 7909:7917 ioctl c018620b 0 returned -14
20:21:01 executing program 5:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
flock(r0, 0x1)
flock(r1, 0x2)
flock(r1, 0x80000000005)
flock(r0, 0x2)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000180)={'nat\x00', 0x0, 0x3, 0x8c, [], 0x3, &(0x7f0000000000)=[{}, {}, {}], &(0x7f00000000c0)=""/140}, &(0x7f0000000040)=0x78)

20:21:01 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, &(0x7f0000000140), 0x1)

[  269.126535] binder: 7909:7928 BC_ACQUIRE_DONE u0000000000000000 no match
[  269.136224] device sit0 entered promiscuous mode
[  269.179775] device sit0 left promiscuous mode
[  269.189381] device sit0 entered promiscuous mode
20:21:01 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

20:21:01 executing program 3:
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000500))
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
futex(0x0, 0x0, 0x4, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0xc, 0x0, 0x0, 0x0, 0x0)
r1 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)="a81ec7e7a7f04d7ecf37961267075f48c56bc65f36e828984d94f54f8f52dd1c9ce2b3996c24ff1d286c956983fc51b2723ec8a30c3f1d3914f5e6f9c2676a1e990c30c07b749b6f2fd54d63cd18", 0x4e, 0xfffffffffffffffb)
keyctl$read(0xb, r1, 0x0, 0x0)
r2 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0)
write$binfmt_elf64(r2, 0x0, 0x0)
ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f00000000c0))
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0xfffffffffffffffd, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x10000, 0x4, 0xbf, 0xb796, 0x0, 0x1f, 0x5, 0x3, 0x100000000, 0x0, 0x64, 0x0, 0x3296, 0x1, 0x1f, 0xbf, 0x101, 0x4, 0x2, 0x3, 0x5, 0x0, 0x7, 0x9, 0x8, 0xd4f0, 0x1, 0xda3, 0x80000000, 0x5, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0x13}, 0x1000, 0x7, 0x2b5d, 0x0, 0x6, 0x10000, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x2, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
fcntl$getownex(r3, 0x10, 0x0)
r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x82)
prlimit64(0x0, 0x6, 0x0, 0x0)
creat(&(0x7f0000000380)='./file0\x00', 0x120)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000bc0)=ANY=[], 0x0)
write$binfmt_elf64(r4, 0x0, 0x28a)
fallocate(r0, 0x0, 0x7fff, 0x0)
getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f0000000700))
add_key(&(0x7f0000000400)='id_resolver\x00', &(0x7f0000000480)={'syz', 0x0}, &(0x7f00000004c0)="86a712dda709e9c3466498e8e042b5312161ff6260d06d7017d7ae73fc54a970e745eace9d88e7fdaa8a1c10ce45252f443c2dd304ac4b1723e7d84ca02c457a122b2b55668fd660f46dabf800002db0401172ea9b2d85429c21ad0adde2f084f4a972d46afe1ca0fda8027ea94be1488299901739a0b85d200d3f8b6a29b5fd2fd24d1c734c5bcf1137114e46a80732a8149176b73d521de556d10df33d56a8be372d5112230158b54c97620948287015a64bc8377f0ef8a535407caa3b57135a7678201a3f9dadffe2a7fcfde9b9377d9184ccb8e5b7ad906b48da6a1b194656ff5bc2bfa55b4cadcf41b97bcdcf6d", 0xf0, 0xfffffffffffffff9)
add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000a00)={'syz', 0x1}, 0x0, 0x0, r1)
getsockname$packet(r4, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000600)=0x14)
r5 = open(&(0x7f0000000240)='./file0/file0\x00', 0x40c00, 0x1)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f00000006c0)={&(0x7f0000000040), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x34, r6, 0x502, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1c0000}]}]}, 0x34}}, 0x40001)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x1ce)
unshare(0x40000000)

20:21:01 executing program 1:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, &(0x7f0000000140), 0x1)

20:21:01 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x9)
accept4$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14, 0x80800)
sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000200}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@ipv4_getaddr={0x6c, 0x16, 0x1, 0x70bd29, 0x25dfdbff, {0x2, 0xf8, 0x28a, 0xfe, r3}, [@IFA_CACHEINFO={0x14, 0x6, {0x6, 0x7, 0x0, 0x1}}, @IFA_BROADCAST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x26}}, @IFA_CACHEINFO={0x14, 0x6, {0x8, 0x2, 0x0, 0x7}}, @IFA_CACHEINFO={0x14, 0x6, {0x46d50000000000, 0x8, 0x3, 0x2}}, @IFA_BROADCAST={0x8, 0x4, @multicast1}, @IFA_BROADCAST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x26}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)={0x0, r4})
dup2(r1, r4)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")

20:21:01 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0)
ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0)
clone(0x81, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000100))

[  269.856879] binder: release 7909:7928 transaction 246 out, still active
20:21:01 executing program 1:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, &(0x7f0000000140), 0x1)

[  269.908617] binder: 7946:7951 ioctl c018620b 0 returned -14
20:21:01 executing program 2:
r0 = socket$inet6(0xa, 0x80003, 0xf1)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}, 0x5}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @mcast2, 0xfff}, 0x1c)

20:21:01 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0))
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x42000, 0x0)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{0x2, 0x5, 0x401, 0x3ff}, 'syz1\x00', 0x4f})
r2 = dup2(r1, r0)
io_setup(0x9, &(0x7f0000000040)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f00000005c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0}])
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f0000000240)=0xe8)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000280)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in=@empty, @in=@broadcast, 0x4e23, 0x2, 0x4e21, 0x100, 0x0, 0x80, 0x80, 0x0, r4, r5}, {0x6, 0x8000000, 0x8, 0x2, 0xfff, 0x6be91ee1, 0xd8b, 0x9}, {0x1, 0x5, 0x1, 0x9}, 0x8, 0x0, 0x0, 0x1, 0x2, 0x3}, {{@in6=@local, 0x4d3, 0x6f}, 0x2, @in6=@rand_addr="9bbc87b39e58565a0e0ff0c26656b7b0", 0x3502, 0x2, 0x3, 0x7, 0x6, 0x3, 0x8}}, 0xe8)

20:21:01 executing program 1:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, &(0x7f0000000140), 0x1)

20:21:01 executing program 5:
r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040))
ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f00000000c0)={0x6, 0x6})
read$eventfd(r0, 0x0, 0x0)
ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080))

[  269.962815] binder: 7946:7961 BC_ACQUIRE_DONE u0000000000000000 no match
20:21:01 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, &(0x7f0000000140), 0x1)

20:21:01 executing program 5:
r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9)
lsetxattr$security_evm(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.evm\x00', &(0x7f0000000180)=@md5={0x1, "8606c4f173cb4dad9aa62033d7bf5ada"}, 0x11, 0x3)
r1 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, r0)
keyctl$set_timeout(0xf, r1, 0x3)

20:21:02 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

20:21:02 executing program 5:
r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
read$eventfd(r0, &(0x7f0000000080), 0x8)
add_key(0x0, 0x0, &(0x7f0000000780)="9676c554299485b5fbb937fa7afd938be1eebe80bb1f9ac9fde6043313ae0bae4d22787c5596c37811d8743ee0237397f0e794c2499820b7647590f1531b895bf853df0f2474053a6e66a5d964fc717c67067470936268f5671289602221f3b9eebc63a8f4e48cc0a1cd35d6adf1d91e7c8819315e244a9982cda9bc23e7b3dbb6e3bb58bb3443779c566b07e1d39a6cad2f216d32cd9bba5b41f36f68", 0x9d, 0xffffffffffffffff)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3:U\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#')
sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
add_key(&(0x7f00000001c0)='cifs.idmap\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f00000006c0)="402cdcf923c37cad5c82c6750885ebbedaa6efb2396a739458bc8ecf9d0f7e4faff26a544a209a773ec26388cd72eabf1fd06cf1e84c42a2cb60e857091d441fb9018b01418b436b54cec176fad77282e829ac0bdd611783c034be64efc3d07c132b829a781d276935acc71e9a8029df5c4ae3afaa2feaf64c7956618239fcb1fbbeb1279a2b4c3b4b06feeb258734992f04fbfef4671efc5e0daa6f000ea5da4637222e17e934e2749cff03", 0xac, 0xfffffffffffffffc)
setgroups(0x442, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0])
ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000000))
sendfile(r2, r1, 0x0, 0x1)

20:21:02 executing program 2:
r0 = epoll_create1(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0)
clone(0x12102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
fcntl$setlease(r1, 0x400, 0x1)
fcntl$setown(r1, 0x8, 0x0)
execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400000, 0x0)
ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000040)={0x2f, 0x1f, 0xd, 0x1, 0x1, 0x6, 0x5, 0x6, 0xffffffffffffffff})
unshare(0x40000000)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000080))

20:21:02 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, &(0x7f0000000140), 0x1)

20:21:02 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40000, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xb58)
ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000080))
ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040))

20:21:02 executing program 0:
r0 = socket$key(0xf, 0x3, 0x2)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipx\x00')
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0xcc4)
sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)={0x2, 0x400000000000003, 0x1, 0x3, 0x1ffffffffffffdea}, 0x10}}, 0x0)

20:21:02 executing program 3:
syz_open_pts(0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in=@broadcast, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000180)=0xe8)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0)
perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000100), 0xfffffdbc)
read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3)
ioctl$TCSETSF(0xffffffffffffffff, 0x5412, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000140)=0x8)

20:21:02 executing program 5:
memfd_create(0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000001640), 0x4)
r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x0, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, 0x0)
getpgrp(0x0)
creat(&(0x7f00000000c0)='./file0\x00', 0x8)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, 0x0, 0x25e)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000480)=0xc)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000004c0), &(0x7f0000000500)=0xc)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000bc0)={{{@in6=@remote, @in6=@empty}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000b40)=0xe8)
gettid()
stat(0x0, &(0x7f0000000e40))
sendmsg$netlink(r1, &(0x7f0000001040)={&(0x7f00000007c0)=@proc={0x10, 0x0, 0x0, 0x42000080}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x4048081)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00')
sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000740)={&(0x7f0000000380), 0xc, &(0x7f0000000700)={&(0x7f0000000400)={0x50, r2, 0x410, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0xc2}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x67b}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x5}, 0x4040)

[  270.688809] binder: release 7946:7961 transaction 247 out, still active
[  270.728396] binder: 7996:8001 ioctl c018620b 0 returned -14
20:21:02 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, &(0x7f0000000140), 0x1)

20:21:02 executing program 0:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
ptrace$getenv(0x4201, 0x0, 0x0, 0x0)
clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setpriority(0x2, r1, 0x3ff)
select(0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x28)
ptrace$cont(0x18, r1, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x118})
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r1, 0x0, 0x0)

20:21:02 executing program 5:
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe)
fdatasync(r0)
r1 = open(&(0x7f0000000140)='./file0\x00', 0x200c2, 0x4)
inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x4000082)
execve(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)=[&(0x7f0000000180)='},(selfwlan0GPLmd5sum\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='*\x00'], &(0x7f0000000400)=[&(0x7f0000000300)=')wlan1selinuxvmnet0[]\x00', &(0x7f0000000340)='ppp1\x00', &(0x7f0000000380)='[wlan0ppp1%.}\x00', &(0x7f00000003c0)='\x00'])
write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="65f336224bf63b972babfb92b713b5f5b6e8141700f7cb93e001b6d9e6d0f21afb9e9505a4b237614840624533c58426c34a8c51f83b6eecd769a604ccee11a0"], 0x40)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r1, &(0x7f00000001c0), 0xa198)
write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="0e000000000000f75ebab65eaa28f012119800ff0813008f74e99e20318a39"], 0x1f)

[  270.787869] binder: 7996:8009 BC_ACQUIRE_DONE u0000000000000000 no match
20:21:02 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, &(0x7f0000000140), 0x1)

20:21:03 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

20:21:03 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, &(0x7f0000000140), 0x1)

20:21:03 executing program 5:
ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=<r0=>0x0)
syz_open_procfs(r0, &(0x7f00000000c0)='attr/sockcreate\x00')
r1 = socket$inet(0x2, 0x0, 0x0)
open(0x0, 0x141042, 0x0)
syz_open_dev$loop(0x0, 0x0, 0x0)
r2 = getpgid(0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000003c0)=r2, 0x12)
ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = fcntl$getown(0xffffffffffffffff, 0x9)
r4 = socket$netlink(0x10, 0x3, 0x4000000000000004)
writev(r4, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1)
ptrace$setopts(0x4206, r3, 0x0, 0x2)

20:21:03 executing program 2:
r0 = epoll_create1(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0)
clone(0x12102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
fcntl$setlease(r1, 0x400, 0x1)
fcntl$setown(r1, 0x8, 0x0)
execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400000, 0x0)
ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000040)={0x2f, 0x1f, 0xd, 0x1, 0x1, 0x6, 0x5, 0x6, 0xffffffffffffffff})
unshare(0x40000000)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000080))

[  271.521802] binder: release 7996:8009 transaction 248 out, still active
[  271.528587] binder: undelivered TRANSACTION_COMPLETE
20:21:03 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, &(0x7f0000000140), 0x1)

20:21:03 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getuid()
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
r4 = getgid()
fstat(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
getresgid(&(0x7f0000000080), &(0x7f0000000240), &(0x7f00000003c0)=<r6=>0x0)
r7 = getgid()
getgroups(0x7, &(0x7f0000000400)=[r1, r2, r3, r4, r5, r6, r7])
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000280)=0x5, 0x4)
syz_emit_ethernet(0x7e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffff4c08004500007000000000000000000045000000000000000001f500ac23141400084000000000000000000000e000000200000000e000000100000000b10000007f00004100000000ffffffff00000000e000000100000000b314140000000000000000000000000000000000000000"], 0x0)
r8 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x2400, 0x2)

20:21:03 executing program 3:
syz_open_procfs(0x0, &(0x7f00000001c0)='net\x00')
r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, 0x10, r1, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000140)=0x10)
writev(r2, &(0x7f00000023c0), 0x1000000000000252)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)

[  271.579649] binder: 8040:8041 ioctl c018620b 0 returned -14
20:21:03 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200))
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, &(0x7f0000000140), 0x1)

20:21:03 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r1, &(0x7f0000009400)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000340)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0)
ustat(0x6, &(0x7f0000000000))
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800)
shutdown(r1, 0x0)
recvmmsg(r1, &(0x7f0000006800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002b80)=[{0x0}], 0x1}}], 0x2, 0x2, 0x0)

[  271.646832] binder: 8040:8056 BC_ACQUIRE_DONE node 250 has no pending acquire request
[  272.365373] binder: release 8040:8056 transaction 249 out, still active
[  272.372266] binder: unexpected work type, 4, not freed
[  272.377557] binder: undelivered TRANSACTION_COMPLETE
20:21:05 executing program 0:
r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
getsockopt$packet_buf(r0, 0x107, 0x1f, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$KIOCSOUND(r0, 0x4b2f, 0x3)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00')
write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {0x7ff, 0x401, 0x4800000000000000, 0x9}, 0x16, [0x0, 0x0, 0xfffffffffffffffc, 0x1000, 0x4, 0x800, 0x1f, 0x6, 0x3f, 0x5, 0x2, 0x3ff, 0x4, 0xfffffffffffffffe, 0x7, 0x1, 0x692e, 0x4, 0x8, 0x8000, 0x401, 0x5, 0x100000000, 0x1, 0x9, 0x100000000, 0x7, 0x101, 0x4, 0x7c1, 0x34, 0x101, 0x8, 0x5, 0x8, 0x80000001, 0xe64, 0xb56, 0x10000, 0x7fffffff, 0x2, 0x4, 0x9, 0x8, 0x0, 0xad, 0x2, 0x7, 0x2, 0x8, 0x9, 0x8, 0x9e0d, 0x100000001, 0x9, 0x3, 0xffffffff, 0x0, 0x100, 0x100000, 0xc9a, 0x1, 0x1, 0x7], [0x4, 0xfffffffffffffff7, 0x8, 0x8, 0x10000, 0x46, 0x71b, 0x1, 0x2, 0x3, 0x80, 0x8000, 0x612, 0x8, 0x401, 0x100000001, 0xffffffffffff7fff, 0x1, 0x5, 0xae3, 0x7, 0x7ff, 0x77c0, 0x5, 0x7, 0x5, 0x3, 0x4, 0x80000001, 0x5500000000000000, 0xecb, 0x6, 0x40, 0x100000001, 0x262, 0x3, 0x8, 0xffffffff, 0x8000, 0x4, 0x54c8, 0x1, 0x9, 0x80000, 0x4, 0x2, 0xfff, 0x3cad, 0x1f, 0x7, 0x4, 0xe8, 0x0, 0x4, 0x2, 0x10000, 0x40, 0x2, 0x7, 0x1, 0x10cecb8a, 0x8, 0x0, 0x6], [0x7ff, 0x1, 0x100, 0x8001, 0x7, 0xa5, 0x40, 0x80, 0x7, 0x84, 0x7fffffff, 0xf5b9, 0x100000001, 0x0, 0x99c, 0x8000, 0x6, 0x0, 0x3f, 0x6, 0x5, 0x7ff, 0x7fffffff, 0x1, 0x8, 0x8, 0x1f, 0x5, 0x1ff, 0x8, 0x10000, 0x9, 0x7ff, 0x6, 0x4, 0x2, 0x7f, 0x1, 0x5, 0x6, 0x80b, 0x10001, 0x7, 0x7, 0xfb4, 0x0, 0x7, 0x0, 0x101, 0x0, 0x5, 0x3, 0x1, 0x4, 0x6, 0x4, 0x8, 0x8, 0x6c, 0x75, 0x3, 0x4, 0x100000000, 0x6], [0x1f, 0x1, 0x1, 0x4, 0x3, 0x7, 0xe8, 0x0, 0x101, 0x100000001, 0x0, 0x8001, 0x75, 0x80000000, 0x0, 0x0, 0x80000001, 0x8, 0x6, 0x1f, 0x0, 0x0, 0x100000000, 0x10000, 0x7, 0x6, 0x9, 0xffffffff, 0x81, 0xffffffff, 0x200, 0x7, 0xbd, 0x0, 0x3, 0x1, 0x1, 0xffffffffffff0000, 0x3, 0xc70f, 0x3, 0x9, 0xfe4, 0x9, 0x9, 0x5, 0x5, 0xc1fa, 0xb3, 0x3ff, 0x0, 0x1000, 0x2, 0x4, 0x8001, 0x5, 0x2, 0x3a, 0x80000000, 0x5, 0x400, 0x6, 0x100, 0x2]}, 0x45c)
pipe(&(0x7f0000000100))
pread64(r1, 0x0, 0x168, 0x0)
poll(&(0x7f0000000080)=[{r1, 0x4000}, {r1, 0x1002}, {r0, 0x64}, {r0, 0x1400}, {r0}, {r0, 0x40}, {r0, 0x101}], 0x7, 0x2)

20:21:05 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f0000000100)='r\xc7\xf5\xae\xad\xfdrj\xe6\xa0R{\x97\xecJ&\xa4\x00\x00\x00\x00\xf3\xff\x00\x00\xe5z8]\xf8\xaf\x0et\xa0\xbc\xbe\xf79\xe6C\x0f\x99I\xb7Y\xder\xc7\xd3\x89R\x97\xdaM\xe7\xadI\xcct`\x1do\xa6\xe4\\\x17=#$A\x0f\xbbF!\x1a`\xa6Z\xedL\xb6+\x1b\x91\xd5P\xddl\xc9=\x13\xdf\xb9\xec\x1e>\xc6\'\x15\x1e\xb9A|NOR\xdc\x17\xbc\x92P\xc6I#Rx\xc1}4\x05\xec\xdc>`\xf8\x03\xab\xf9o\x1f\xd5\xd3\x8b\x95\x01\x00\x1e)\xc1&\x81o$?\x99wy\x1f\x0fj\t\aK\x00\xff\x1cM', 0x0, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x0)
fchdir(r0)
lseek(0xffffffffffffffff, 0x0, 0x2)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
unshare(0x400)
ftruncate(r1, 0x208200)
r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x80000000)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002012, r2, 0x0)
openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x4)

20:21:05 executing program 5:
clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x84800)
ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000040)=0x7)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@acquire={0x40486311}], 0x0, 0x0, 0x0})
fcntl$setflags(r0, 0x2, 0x1)

20:21:05 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200))
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, &(0x7f0000000140), 0x1)

20:21:05 executing program 2:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000500)={0x8, {{0xa, 0x4e23, 0x0, @remote}}, {{0xa, 0x4e20, 0x0, @mcast2, 0xb5}}}, 0x108)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = fcntl$dupfd(r1, 0x406, r1)
setsockopt$inet_tcp_buf(r2, 0x6, 0x1a, &(0x7f0000000200)="c10d5ce1c13f4bb52fd5d5e86ee98fe61cd52da30c02d27c4c2c1b8d32594f2f531b0919214f41538e8c76a168f5a4a1c0635ae1040a8c7c72485c753b4c6eff84e84b9cbd8d85", 0x47)
ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)=0x61)
r3 = syz_open_pts(r1, 0x0)
r4 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140)={0xc0000006})
ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000180)={0x4, 0x0, 0x5126, 0x2})
r5 = syz_open_pts(r1, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f0000000040))
ioctl$VT_GETMODE(r5, 0x5601, &(0x7f00000001c0))
fcntl$setsig(r4, 0xa, 0xa)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000280)={0xffffffffffff0395, 0x1, 0x6, 0x81, 0x8, [{0x5, 0x3e, 0x3, 0x0, 0x0, 0x8}, {0x7fffffff, 0xab, 0x6, 0x0, 0x0, 0x1}, {0x0, 0xd, 0x533, 0x0, 0x0, 0x1080}, {0x6, 0x100000000, 0x4, 0x0, 0x0, 0x800}, {0x8b, 0x10001, 0x38, 0x0, 0x0, 0x80}, {0x8, 0x8, 0x1ff, 0x0, 0x0, 0x688}, {0x3, 0x101, 0x8, 0x0, 0x0, 0x100}, {0xb59f, 0x3, 0x6}]})
r6 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x20000, 0x0)
ioctl$EVIOCGABS2F(r6, 0x8018456f, &(0x7f0000000100)=""/37)
ioctl$TCXONC(r5, 0x540a, 0x0)
ioctl$sock_proto_private(r2, 0x89ec, &(0x7f0000000480)="dbb643f3b38127e8f9c791f5398e0eb5e9014686b1df9a5c35acada2524077bf3cffbeb7817c6ba3")

20:21:05 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

20:21:05 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x400040, 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x400400, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00')
recvmmsg(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
preadv(r3, &(0x7f00000017c0), 0x1a1, 0x0)
write$P9_ROPEN(r0, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0xd, 0x3, 0x5}, 0xff}}, 0x18)
unlink(&(0x7f0000000240)='./file0\x00')

20:21:05 executing program 5:
r0 = socket(0x10, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4)
bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x1000000004e23, @local}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000002c0)=0xda8, 0x4)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x17, 0x4)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000003c0)={0x2, &(0x7f0000000340)=[{0x9, 0x5, 0x8, 0x4}, {0x366f, 0x7fff, 0x7ff, 0xfff}]}, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$selinux_attr(0xffffffffffffffff, 0x0, 0x99e23cd5)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
recvfrom(r2, &(0x7f0000000640)=""/69, 0x45, 0x10000, &(0x7f00000005c0)=@un=@file={0x0, './file0\x00'}, 0x80)
sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
write$UHID_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000000c0)=""/220, 0xdc, 0x0, 0x1ff, 0x6, 0x8001, 0x8}, 0x120)

20:21:05 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200))
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, &(0x7f0000000140), 0x1)

[  273.838618] binder: 8066:8070 ioctl c018620b 0 returned -14
20:21:05 executing program 0:
getpgrp(0xffffffffffffffff)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100))
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x5, &(0x7f0000000140)='comm\x00'}, 0x30)
r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x2340c51a32aaa29d, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={<r2=>0x0}, &(0x7f0000000280)=0xc)
r3 = syz_open_procfs(r2, &(0x7f0000000200)='\x1cX=t\x8d\xebd\xc3')
fcntl$addseals(r3, 0x409, 0x0)
ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000080))

20:21:05 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, &(0x7f0000000140), 0x1)

20:21:05 executing program 2:
r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
keyctl$get_security(0x11, r0, &(0x7f0000000140)=""/216, 0xd8)
r1 = socket$packet(0x11, 0x3, 0x300)
getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000000000), &(0x7f0000000080)=0x10)

[  273.905978] binder: 8066:8089 BC_ACQUIRE_DONE node 253 has no pending acquire request
20:21:05 executing program 0:
r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x800005, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000000, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket(0x10, 0x803, 0x0)
setpriority(0x0, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$restrict_keyring(0x1d, r3, &(0x7f00000004c0)='pkcs7_test\x00', &(0x7f0000000440)='/dev/loop-control\x00')
unshare(0x20600)
prctl$PR_GET_TIMERSLACK(0x1e)
link(0x0, 0x0)
r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x80000, 0x0)
ioctl$LOOP_SET_FD(r4, 0x4c00, r2)
getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0)
geteuid()
ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0)
r5 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000340))
fstat(r5, 0x0)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x3f, 0x0)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0)
getsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000140), &(0x7f0000000180)=0x4)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000800)=ANY=[@ANYRES32], 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={<r7=>0x0, r4, 0x0, 0x1, &(0x7f0000000300)='\x00', 0xffffffffffffffff}, 0x30)
perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xfffffffffffffffc, 0x0, 0x8, 0x6, 0x0, 0x6, 0x1000, 0xe, 0x1, 0x0, 0xffff, 0x2, 0x0, 0x8001, 0x1, 0x8, 0x2, 0x6, 0xffffffffffffff02, 0x7, 0x1f, 0x7, 0x7, 0x8, 0x20, 0x0, 0x100, 0x8000, 0x4, 0x1800000000000, 0x3, 0xa3fa, 0x5, 0x81, 0xfffffffffffffffb, 0x1f, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x1000, 0x0, 0x0, 0x5, 0x2, 0x7, 0x2}, r7, 0xa, r0, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000080))
setuid(0x0)
write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0)
getrandom(&(0x7f00000002c0)=""/59, 0x14, 0x3)
epoll_create(0x80000000000003)

20:21:06 executing program 3:
r0 = socket$inet6(0xa, 0x7, 0x1)
getsockopt$sock_int(r0, 0x1, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0)
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x390}], 0x1, 0x3)

20:21:06 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, &(0x7f0000000140), 0x1)

20:21:06 executing program 2:
r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
flock(r0, 0x4)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0)
ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002012, r1, 0x0)
faccessat(r1, &(0x7f0000000000)='./bus\x00', 0x146, 0xa00)
r2 = syz_open_procfs(0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$getflags(r2, 0xb)

20:21:06 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1000000000000191, 0x0)
syncfs(r0)
fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, <r1=>0x0})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={<r2=>r1, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0xffffffffffffff3d)
r3 = syz_open_procfs(r2, &(0x7f0000000200)='attr/exec\x00')
preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x0)

20:21:06 executing program 0:
getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={<r0=>0x0, 0xffffffffffffffff, 0x0, 0x19, &(0x7f00000001c0)='vmnet0wlan0(usereth0ppp1\x00'}, 0x30)
ptrace$setopts(0x4200, r0, 0x0, 0x100013)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
r2 = socket$inet(0x2, 0x1, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
r3 = openat$keychord(0xffffffffffffff9c, 0x0, 0x2, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000000)='trusted.overlay.origin\x00', 0x0, 0x0, 0x2)
r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000480)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000003b80)={{{@in=@multicast1, @in=@multicast2}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xfffffffffffffd20)
lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500))
lstat(&(0x7f0000001880)='./file0\x00', &(0x7f00000018c0))
fstat(r5, &(0x7f0000001940))
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000019c0)={{{@in6=@loopback, @in=@local}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000001ac0)=0xe8)
stat(&(0x7f0000001b00)='./file0\x00', &(0x7f0000001b40))
getuid()
lstat(&(0x7f0000001bc0)='./file0\x00', &(0x7f0000001c00))
getuid()
fstat(r2, &(0x7f0000003040))
fstat(r4, &(0x7f00000030c0))
geteuid()
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000003140), &(0x7f0000003180)=0xc)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000034c0)={{{@in6=@empty, @in6=@initdev}}, {{}, 0x0, @in=@loopback}}, 0x0)
getresgid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680))
getuid()
sendmmsg$unix(r3, &(0x7f0000003a80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="afc1373f7f5c65e760408935574a436c329032b3c6cb828b48da3df2eb450a67f8aa91acd05ac86104265389f760e5f37608a33df1609d87b55419cb", 0x3c}], 0x1, 0x0, 0x0, 0x4}, {&(0x7f0000003240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003480), 0x0, 0x0, 0x0, 0x20000014}], 0x2, 0x4000000)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r7)

20:21:06 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

20:21:06 executing program 5:
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000200)='y\x00', 0x2, 0x0)
write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x49, 0x0, {0x0, 0x4, 0x1}}, 0x14)
write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffbe, 0x79, 0x2}, 0x7)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000004c0)='\'\xc4\'\v\xec\xe4\t\xc5r\x12-\x90\xda\x9a\x94\x02\xec\xea\x10\x90\x03\xcb\xf8\x1b6\xa5t\xd6\xd3\x93\xd3\xdf\x85P\x19G7Q\v\xdcHv\x03Qa\xf3\xd4\xfc(\x83\xfb\xf8C\xf6\x8a$\xb1\x90\xeb\'~\xa0\xd8\xc8\xe8\x94#\xcd\xd5Kp\xbf\xc0\x8d7\x1b?A(\xe8^\x9c\xff\x0f\x1ck\xbc\x95\x05\xcd\x17\xf7\x15o\xd4\xdc4\x84uw\xa6w\x0f\xea`1\xec\xb4\x04\xd5\r\x8d\xde\x1f]\x15\xe5\xe8\xd00\xe5\x8d\x9c\x9ec+\x02\x1d\xffa5\x94\xab\xddNe\xfe\x8c\xc4q\xbb#f\xc1\xb9\x81W\xa4$)!\v\x9b\xa7\b\x91\xe5\xeb\x88\x1c\x0f\xb2.Tr\xe4\x99\x9e\x03\xb4\xd2\xf9KW\xce\xd1cC\xd5\xcf\x97\xa9\xeab\xda\xd6:\xa91q\xf7\xc5\xc0C\xd1\'\x89\xee\x84T:\x88x\xe2\x83\xf2r\xf4&t@\x9e\xa4qf\xdf\xf4\xb5\x01\\a\x85\xd3\xe0\xb7\n\xe7\xed\x84Q\xd7s\xcd4B\xcbQ\xa4\x9f[\x99\xdfJ%\xa8\xfc\xe3`\xc1\x0fy\x12\x181\xa5|8\xc8\xe7\x9f@\xeb:\nJA\xc9\xbc\xd4~}\xce\xe8\xfejH\x8fb\xdd\xbcJ\vk\'\xe7Q\xfd\xaaA`\xb5\xa1\xe4\xf8\x9eG\xcfb\xe8@\x04\xe1\xf8\xacU)(S\xed\xffA\xfaqt\xb6$e\n\xc7\x9b\xb0X\xb6\xd4\t\x99^^\xc2>J\x16\xd0\x8c\xecy*\xa0\a\xe9Ar\xa6\xb4n9j\xe5\xba\x8a\n\xce2\xcf_\x1b.t)\x8d09A[-\xf6\xe7\xe8\x1f\x92>\xb8\xd4>-\xacY\x9e\x88\x96\xa7\xfa\xdaoL\xa6\xec\xe8\xd5\xbfaf\xd7\xfc\x03\x91w)\xcd\x1f\xbe\xc9R\xcfz\x03\xec\br\x83\x8bM-\xf8X\xfd\"\xb4RV\x7f\xda\xd3\xd4h\x1c\xdb\xbe\xa4U\xec\xcd\'\xbc\xd22\x85{,\xe6-,6\x9d\x85\xb4fL\b\x98\xe9@\xee\xc2.\xb3\xd6w\x10\x94\xb5%D\xe8\r\xfe\x98G\x82\fx,\xa2J\x12\x03ec\xd5e-\x1f6\xe7\xb6\xd9\xcf0J\xed\xb7\x9b\xfd\xfc\x00EQ\x1f\x00D\xc95\xdeG +\x1bp\xf4\t\x94\x87\xf1ZbO\xa6\xe9\f`u\xda\xb3\x1d\xf9\x94\x80\xc1\x17\xde(_\xa7\xe7\x11\x9a\xac\x8c\xb1\xd71\xc5\xe9\xd3n\xc2\xa4\x98P\x9aF\xc2\x93\xad@\xa9h\x96\x1b]2\x88\xf3\xd8\xc798\x8c\x9f\xd4W4\xf1}\aD\xa0\xd8\xda\xf4\x1bEx(t|\xf4Y\xfaJ\xc2GS\xc9R\xb5\xda\xa8\x9b\xaa\x01\xe2~\xd8f.#\x94\xbf\x85z\xbf\xa0x62L\x1f\x91\xd2\x1e%\x88\x1f\f\xabb\x8ds\x93\x9e\xed\xd2\xdb\x02\x0e\xcf\xf5\xaf\xc8>+\x03e\xb7\xba\xb9}\xca\xfc\xe8\xed\x9b\xa2\x9ey\bMv\x8f\x8a8\xfd;\x9a5J\xee\x9a\xae\x83>$\x8a6\x05P\x8c\x05\xb8\r\xcf\xdd\x15/\xa9\xa1\xd4\x87{\xc9I4\xe3 i\xa4\xc5\xe5l\x03?\xfdM&\xc0a9}h\x8ef\x10!\xf0\x99\x80\xb72\xcc\x06\'+\xf0\xa1\a\xeeSGH\x12\x068S7s\xd3\xdaT\"\xa9jk\xed\xa2IyM\xa3&t\xfeA\xa9\"\xb4\xec\xdex\x00\x80`p\x91\x84\xbfK\xb6\x00\xa7\xa2\x06\xce\xc8X\x7f\xd1@\xf1\xcf\xdf\xae\xdb\r\xf6h\xdf\xc6+\xac\r\x9f\xc2D\xdf\xd6\xde`\xa4\xf4\xbe#\tH\x06;a(`\xdcw\x1dc_\v\x046j\xf9`\r\xc0\a\x8d\x12:l\xc7j3E\xd7\xcaX\x97\xad\x93\xea\x99\xca\xd7m\xb8\x1e1\xb6Nz\"U/\x0eP\b=\x01W\xcd\xf1x\x85\xf4&\xe7\xf9W\x06\xa4\xf8&\xbc\xf4\xd0\xd2\xd1W\xee\x9a\xdd\xdbu\x0e\x9aV\xe2\xc5\x84`Bu\x12\xa8/=\x17\xc4F\x11\xdfm-)\xd9hc\xba\xb7\x91\xd9\x11\x9a,\x19\xf4]\xa7Y@B\x1f]\x97\x9f\xc2')
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000280)={'ip_vti0\x00', @ifru_map={0x0, 0x0, 0x200, 0x4}})
nanosleep(&(0x7f0000000880)={0x0, 0x1c9c380}, 0x0)
r1 = creat(0x0, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x8)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0)
io_setup(0x0, 0x0)
add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, 0x0)
readv(r1, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/95, 0x5f}, {&(0x7f0000000a00)=""/138, 0x8a}, {&(0x7f0000000b80)=""/161, 0xa1}, {&(0x7f0000000c40)=""/217, 0xd9}], 0x4)
creat(0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
shutdown(0xffffffffffffffff, 0x0)
ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000100))
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r2, 0x6609)
syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:21:06 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, &(0x7f0000000140), 0x1)

20:21:06 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1410000003010100a75b1b490000000000000000ce9f671e8d6fb88dc7dc492a22c7a661674a0de8233536597796cb6ea61d5f01999d4bcc63319dfd93c380e95b867cf82ea7593240afe047ea2ac0d3340853e552ce382b53df57432babb7578c4bee16786a7c11747940e0874ac91936dec5842be4b2177b0f21eea6a30bcc66c3e63b6898c63a460d66f24450e566b1bef159b76b567c7c50dfb8ff8f1fcc24e04f14b3ce23fa2d62946be0183cf2a2003a3bb7ee5bd6561a7d4c4b23aef1912c3ddb9a9636ec61b20b50f5a6c3c48041ba57411a3231716f8483bec419ff22dd54ab53cdd3a2db45105ae16eacedaa0500d19a40"], 0x14}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair(0x5, 0x0, 0xff, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40008000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x802, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fff}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080)

20:21:06 executing program 3:
r0 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0)
write(r0, &(0x7f0000000600)="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", 0x200)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = dup2(r1, 0xffffffffffffffff)
syz_genetlink_get_family_id$tipc2(0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sync()
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000740)='/dev/zero\x00', 0x8000, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0)
r5 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5)
ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f00000002c0)={0x27, 0x0, 0x0, 0x2, 0x3, 0xfffffffffffffffe, 0x0, 0x12b})
socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
io_setup(0x81, &(0x7f0000000300))
sendmsg$IPVS_CMD_ZERO(r3, 0x0, 0x0)

[  274.632810] binder: release 8066:8089 transaction 252 out, still active
[  274.640941] binder: unexpected work type, 4, not freed
[  274.648746] binder: undelivered TRANSACTION_COMPLETE
[  274.651813] binder: 8129:8131 ioctl c018620b 0 returned -14
20:21:06 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
getpeername(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000000c0)=0x80)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./bus\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', 0x0, 0x0, 0x1)
setxattr$trusted_overlay_upper(&(0x7f0000000600)='./bus\x00', &(0x7f0000000640)='trusted.overlay.upper\x00', 0x0, 0xffffffffffffff35, 0x0)

[  274.713594] binder: 8129:8139 BC_ACQUIRE_DONE node 256 has no pending acquire request
20:21:06 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc)
preadv(r0, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0xfffffffffffffea0}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00')
preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0)

20:21:06 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x73e9ab8f)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x2, 0x0)
clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)="ee4f05211baacea348d7f40b20ff83574d33cce7cc248edd87635400f2f35d29ba6ee07d790ee1886719b78554296dea08f502db0d541bbc62c096c89b59d1221868ded35e9c763cc703790889ef5092aa6e2eda9ba4f60f70a9ce7e765632410bf91512cb64e1adc174ddff32cf7a3b7349c1d1ec1e77f0c245787659e0f9525033be0b49f994582d4b4a3f3f83e6c4911307b09573988cbc8196573af5847c10583a9db5c92973b28558dd870c1a2a")
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000680)={'ip6gretap0\x00', 0x1000e803})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
sendfile(r0, r3, 0x0, 0x800000000024)
write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={<r4=>0x0}, &(0x7f0000000300)=0xc)
ptrace(0x421f, r4)
r5 = gettid()
getpgid(r5)
fgetxattr(r2, &(0x7f0000000000)=@known='security.apparmor\x00', &(0x7f0000000240)=""/107, 0x6b)

20:21:06 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x813, r0, 0x0)
futimesat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{0x77359400}})
setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000100)={0x67, @local, 0x4e24, 0x1, 'ovf\x00', 0x8, 0xfffffffffffffffb, 0x5b}, 0x2c)
fstatfs(r0, &(0x7f0000000140)=""/198)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000240)='team\x00')
ioctl$TIOCNOTTY(r0, 0x5422)
syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00')
clock_gettime(0x7, &(0x7f00000002c0))
write(r0, &(0x7f0000000300)="c1ef5065af914ec355c9b291fd314330bdf29f8f5293ffef950d44912e627aadee0a52d1c1103672356cabefa96a40dc40d09857cbce990a160bc15527fc4d0aaabce0179eeed4967e7103dcd884e36392c5cbf1c7f2454bcb3b46434d07eba0c6cfc36269d6feb9061496c748a9e43f70df44c03d1ea46644c355004a5a362e9e88d2a1354955297d6dcf9a0b0270847c48272acba1bc4d7f9597ea68be2c265a034cf3a749479240a6", 0xaa)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@initdev}, 0x0, @in=@dev}}, &(0x7f00000004c0)=0xe8)
ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000500))
fcntl$setsig(r0, 0xa, 0xd)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000540)={0x4e1, 0xa, 0x0, <r3=>r0})
r4 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/member\x00', 0x2, 0x0)
ppoll(&(0x7f00000005c0)=[{r4}], 0x1, &(0x7f0000000600), &(0x7f0000000640)={0x4}, 0x8)
tee(r0, r3, 0x9, 0x2)
bind$packet(r0, &(0x7f0000000680)={0x11, 0x1f, r2, 0x1, 0xb0f3}, 0x14)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000006c0), 0x4)
getsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000700)=""/42, &(0x7f0000000740)=0x2a)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0)='TIPC\x00')
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r5, 0x403, 0x70bd2b, 0x25dfdbff, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24048004}, 0x80)
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r5, 0x60b, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20001100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x60, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x842c00000000000}}, {0x8, 0x6, r2}}}]}}]}, 0x60}}, 0x0)
ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000b00))
rt_sigtimedwait(&(0x7f0000000b40)={0x57da4948}, &(0x7f0000000b80), &(0x7f0000000c00)={0x0, 0x1c9c380}, 0x8)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000c40)={0x0, @loopback, @local}, &(0x7f0000000c80)=0xc)
syz_read_part_table(0x7b1, 0x9, &(0x7f0000002140)=[{&(0x7f0000000cc0)="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", 0x1000, 0x4}, {&(0x7f0000001cc0)="6ec49a8f3231512d8726df9e406879f7aa511adbb4082b005789ebdda6429eda65ae14ffe0cf27bd770154fd54b3a55f0e7c9cb9f316025ed01bd1ffef4fc78934a5f8f8dd47c8da09809ecd7ae7d8124f1f285cb031daae37719730776c3508f18be9ce027c957a169486722afe6ca7641c741c57acace7e1978b3029712b417841c175c213332690f2a184b1bfc0fe7b07251dc67961478a463c0c6dbca2c2436e6ebf53d5f8152ebb19784da54d06506b53c395966ffccd463720817cd9091adcbfcd3fa020faf2c113ad7de78d3340ba0f2c70983f3c2a003f03ab47cda0435cdb42391c9f", 0xe7, 0x1}, {&(0x7f0000001dc0), 0x0, 0x7fff}, {&(0x7f0000001e00)="01e7aac6dca73458ceff07903383e355af9e3ef7f9434d7a80285de0ff17a93a6e33cab414adf014b0cd12cf7e5b5756ac949860be611aca3d4b205d6367c872179151527913b0b36bdfa5aa5ec0072775ca44177cd011ba6d3e42f58802f3b51eef8f2206f47103aa2f9963868f80be73f3f6cfbb5dde1695dd064d44c6d84bbb82d3927699b9effbee507f7126756efb464c7dd6decbfa658aa7e60ec8b74f739812a5585bed1a7154d053cc0c17bfb3dea1e50402bbdded714a26b9bbb3f19c771510119dfaf2eb2a90", 0xcb, 0x7fff}, {&(0x7f0000001f00)="fc63e5e163fcf3747b7ae02980eb64a70584eaff423355e139bd90ce1c0935cb3ff484295a54596dd3d6d9029d4ed38dcf0b58a144d0", 0x36, 0x4}, {&(0x7f0000001f40)="6cfdeb99ede35c9d94e591efb0c8b6c11a5efd43732d775c84c01cf534135f21203ad1a71c676578b43dfa76c288a79161a64d469997dd34de067dc3ac5b2db6188533ef655adafa16d58fe235dd", 0x4e, 0x6}, {&(0x7f0000001fc0)="3fd554fd717447b58a1995bd30f89cfe9ec31d86e4a18e86e609a95199386e95c38c2b94bdd575023dd9a0b9d78637d5a7368bb5e16682d0f6903ffb369c44601370f35e68efafe8d137ed4012fa7e6baa0c43ce05012e7b448957e3560e1b0cf347c7", 0x63, 0xfffffffffffffffe}, {&(0x7f0000002040)="0ea2147cb901166607823c98ba98a60551d329623ddb27a3d8be07a8a20ad3cb059d236803fff12560facf428148d70a2876f16d0137f39819a82f65e905951b159c79dbd55bc3f40766e0108d3485246fee79c4a208c01b6ad385b2eaa38aca6f97458a77b3e78689f4585b325e139e25cb829f4860c3", 0x77, 0x80}, {&(0x7f00000020c0)="36869763f624cf8cbe3dddf3d5775d1561de61da23be28d901a70912c58b8d88d2d2fe124edebffdb1dd708cf1f0f84d5f7144a68d124f90305562fde6dd929e42b1579a886001d74cf2213d3d74556af10b509ae78912", 0x57, 0x100000001}])
socket$inet(0x2, 0x3, 0x2)

20:21:06 executing program 0:
open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0)
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
gettid()
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x6)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x0, 0x146})
ptrace$setregs(0x1200000000000d, r0, 0x7fff, &(0x7f0000000140)="c9b28904e0c5640698a8179002fb6ce19809d7b93e75032c857505e16f94c3c3a9440f67b3235fa273d281eba5a3d59c90587b234af82988ef736a316d71e204d5025b89ab8c1e32a5bd6202c7df2ca64ba713cf8020aa65128994691870fd66178f0c91f50c1650dcccabcffe7e536094820bda23f8b0aece493dec781c0ee592e5096aeddeb42277c3588fdfaaaa274c116c2d733fa72d1ce0a7e90df97cfd76417de8e248a6524f4e12f261754378f859692583ae643d70a783ea19ddebacff522a")
ptrace$cont(0x18, r0, 0x0, 0x0)

20:21:06 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, &(0x7f0000000140), 0x1)

[  274.827574] audit: type=1400 audit(1553631666.708:51): avc:  denied  { map } for  pid=8160 comm="syz-executor.5" path="/dev/null" dev="sda1" ino=2637 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=chr_file permissive=1
20:21:06 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='oom_score_adj\x00')
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000000))
lseek(r0, 0x24, 0x1)

20:21:07 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, &(0x7f0000000140), 0x1)

20:21:07 executing program 0:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4)
mlock(&(0x7f00005b8000/0x3000)=nil, 0x3000)
mprotect(&(0x7f00005b9000/0x4000)=nil, 0x4000, 0x0)

20:21:07 executing program 2:
r0 = timerfd_create(0x0, 0x0)
close(r0)
dup2(r0, r0)

20:21:07 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0)
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000000c0)=@get={0x1, &(0x7f0000000000)=""/136, 0x2000000000})
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00')
preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003)

20:21:07 executing program 5:
r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0x1f, 0x8, 0x3, 0x6f1569ba, 0x30, r0, 0x9}, 0x2c)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'netdevsim0\x00', 0x200})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00')
accept4$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14, 0x80000)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000240)={{{@in=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}}}, &(0x7f0000000340)=0xe8)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000380)={<r5=>0x0, @local, @initdev}, &(0x7f00000003c0)=0xc)
getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f00000001c0)=""/6, &(0x7f0000000200)=0x6)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000680)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000006c0)={{{@in=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@initdev}, 0x0, @in=@dev}}, &(0x7f00000007c0)=0xe8)
accept4$packet(r0, &(0x7f0000000a40)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000a80)=0x14, 0x800)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000ac0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f0000000bc0)=0xe8)
accept$packet(r0, &(0x7f0000000c80)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000cc0)=0x14)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000d00)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000e00)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000e40)={'team0\x00', <r12=>0x0})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000002240)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@empty}, 0x0, @in6=@local}}, &(0x7f0000002340)=0xe8)
accept(r1, &(0x7f0000004c80)=@ll={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000004d00)=0x80)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004d80)={&(0x7f00000000c0), 0xc, &(0x7f0000004d40)={&(0x7f0000005000)={0x5e4, r2, 0x300, 0x70bd28, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x220, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x200}}}, {0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x4c, 0x4, [{0x3, 0x1, 0x1, 0xfffffffffffffffa}, {0x7, 0x0, 0x3}, {0x401, 0x9, 0x5, 0x4}, {0x4, 0xb3, 0x0, 0x1}, {0x0, 0x7, 0x0, 0xfffffffffffffff9}, {0x100000000, 0x7, 0x6, 0xeda}, {0x1000, 0x40, 0xfa4, 0x5}, {0x80, 0x9, 0x8001, 0x2}, {0x4, 0x1, 0x7f, 0x40}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r6}, {0x1f0, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r11}, {0x7c, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}]}}, {{0x8, 0x1, r13}, {0x124, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r14}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x8}}}]}}]}, 0x5e4}, 0x1, 0x0, 0x0, 0x80}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000000)=[{0x2d, 0x0, 0x4000000000401}, {}, {0x6}]}, 0x10)

20:21:07 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

20:21:07 executing program 2:
r0 = epoll_create1(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0x108)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='autogroup\x00')
preadv(r2, &(0x7f0000000100), 0x2df, 0x80000000000)
r3 = epoll_create1(0xfffffffffffffffe)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000140))
dup2(r3, r0)

20:21:07 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, &(0x7f0000000140), 0x1)

[  275.452279] binder: release 8129:8139 transaction 255 out, still active
[  275.489516] binder: 8199:8209 ioctl c018620b 0 returned -14
20:21:07 executing program 0:
r0 = open(&(0x7f00000003c0)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[], 0x2e7)
rename(0x0, &(0x7f0000000080)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000b2e000/0x3000)=nil, 0x3000, 0x0)
openat$cgroup_type(r0, &(0x7f00000002c0)='cgroup.type\x00', 0x2, 0x0)
fsetxattr$trusted_overlay_origin(r0, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000280)='y\x00', 0x2, 0x3)
ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000400)=""/253)
lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.capability\x00', &(0x7f0000000200)=@v2={0x2000000, [{0x0, 0x9}, {0xffffffff}]}, 0x14, 0x0)
futimesat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0)
sendfile(r0, r0, &(0x7f0000000040)=0x4, 0xa198)
r1 = accept4$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000140)=0x1c, 0x800)
ioctl$sock_SIOCOUTQ(r1, 0x5411, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000240)={'sit0\x00', @local})
r2 = syz_genetlink_get_family_id$team(&(0x7f0000000380)='team\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001140)={{{@in6, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@loopback}, 0x0, @in6=@ipv4={[], [], @empty}}}, &(0x7f0000001240)=0xe8)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001280)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000001380)=0xe8)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000013c0)={{{@in6=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f00000014c0)=0xe8)
getsockname$packet(r0, &(0x7f0000002b00)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000002b80)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f0000002c80)=0xe8)
r8 = accept4$packet(r0, &(0x7f0000002d00)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002d40)=0x14, 0x80000)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000002d80)={<r10=>0x0, @rand_addr, @multicast2}, &(0x7f0000002dc0)=0xc)
accept$packet(r0, &(0x7f0000002e00)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002e40)=0x14)
accept4$packet(r0, &(0x7f0000002e80)={0x11, 0x0, <r12=>0x0}, &(0x7f0000002ec0)=0x14, 0x800)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000003f40)={<r13=>0x0, @multicast2, @remote}, &(0x7f0000003f80)=0xc)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000003fc0)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0}}, {{@in=@empty}, 0x0, @in=@loopback}}, &(0x7f00000040c0)=0xe8)
getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000004280)={@dev, @empty, <r15=>0x0}, &(0x7f00000042c0)=0xc)
sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000004800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000047c0)={&(0x7f0000004300)={0x4a4, r2, 0xb00, 0x70bd29, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x12c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r5}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0x7, 0x2, 0xfffffffffffffff7, 0x10000}, {0x8, 0x9, 0x5, 0xffffffffffffff00}, {0xfff, 0x2, 0x5, 0xa77}, {0x1, 0x1, 0x80000000, 0x3}, {0x2, 0x20, 0x0, 0x8}, {0x3, 0x9, 0x9000000000000, 0x5}]}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r6}, {0x44, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffffd}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r9}, {0x178, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r10}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xa}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r12}, {0x188, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x3038}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r15}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x4, 0x8, 0x7fffffff, 0xfffffffffffffff7}, {0x700000000000000, 0xfffffffffffffffc, 0x20000000000, 0xfffffffff130a883}, {0xb4ec, 0x1, 0xfffffffffffffffe, 0x5}, {0x6, 0x0, 0x6}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}]}}]}, 0x4a4}, 0x1, 0x0, 0x0, 0x1}, 0x24000000)
ioctl$FS_IOC_FIEMAP(r8, 0xc020660b, &(0x7f0000000500)=ANY=[@ANYBLOB="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"])
openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x202200, 0x0)

20:21:07 executing program 3:
unshare(0x24020400)
mknod(&(0x7f00000056c0)='./file0\x00', 0x1040, 0x0)
execve(&(0x7f0000f8aff8)='./file0\x00', 0x0, 0x0)
gettid()
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x2, 0x0)
write$binfmt_misc(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="73797a30cdda3bb1f73bdd22502e5831135e1aa4fc26ea1b196e3d7756255f91d9cd9121bfa3cad0aad0e1aa192cbecf60ae319e090d754aff4c943282b8ee0d958924026a82ed6ada419bea2eef7a36e3e8f525c11ed60788a51a5eed565c55c32871ee505b19b2b5345dc40fe9eda2d38e8cddd72b22218d474a627601bbf3f0eb7729b05f24c90a87540a3f4226db34297c65c2cebc68437280379421707cd160dd7e0738145b0a17d480c9e71dbfa47e39f7622a52e881b533edad988fc95a4daf037382a15b053f931fb2dc652e65f45fdb78285bb7c32a0ae18c2c8c3ee02e6ce03209d7119e02"], 0xea)
clone(0x40000, &(0x7f0000000000)="ab37e839a83a866adbe7b7434e6ac03d", 0x0, &(0x7f0000000100), &(0x7f0000000140)="4226d5f70df66445dedd76ccbcc9a191d2653a6f96f6bbaef42e23fe01e917a4ca8d1a249817162a66ab30b36167de5bde0b543f8657361eeacf6375318b8027a424712e8fdc9b57b0a63cbc52f039815243c7da92486f843e8da38f98c732c05638a2c0540e955e28b78179e0e70b72fce5c6ff931711079fc70bf7")
socketpair$unix(0x1, 0x6, 0x0, &(0x7f000000d000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x6)
ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000300))
ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f)
r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x103)
ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x93fc5a1266a58905, 0x14, 0x1, "383ea81ce3895177a95f1d2f52d2062b19ff7dad745c7f573e27484200ca3df17f210378b2c4d94d6b73532997424c3d638dcfc44977604c2bc991ceec6e532e", "94c477a9d93b077fee40246544341eab21d21eab6109672496d10c30277eced5dc88fefa0c58f56d6d70198361824b109932e9ced2c791efa3598421dae51192", "f596345540c04fc3101a592ecd0637e14b4a75861802d2cb0d790aee8bd69eb1", [0x9, 0x81]})
r5 = getpid()
r6 = eventfd2(0x0, 0x0)
read$eventfd(r6, &(0x7f0000000040), 0x8)
execve(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r7 = dup3(r1, r6, 0x0)
fcntl$setown(r6, 0x8, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x8)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
socket$netlink(0x10, 0x3, 0x13)

20:21:07 executing program 2:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x8)
getdents64(r0, &(0x7f0000000040)=""/4096, 0x1000)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000001040)={r0, 0x0, 0x4, 0x1, 0x41})
r1 = open(&(0x7f0000001080)='./file0\x00', 0x200000, 0x10)
setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f00000010c0)={{0xff, @empty, 0x4e22, 0x2, 'sh\x00', 0x11, 0x1f, 0x5c}, {@broadcast, 0x4e24, 0x4, 0x2, 0x4, 0x6}}, 0x44)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000001140)={'netdevsim0\x00', @local})
recvfrom(r0, &(0x7f0000001180)=""/213, 0xd5, 0x40000002, &(0x7f0000001280)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x3, 0x4, 0x4, {0xa, 0x4e21, 0x7c5, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8001}}}, 0x80)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000001300)={{0xa, 0x4e20, 0x3, @remote, 0xb541}, {0xa, 0x4e21, 0xfffffffffffffffb, @mcast2, 0x800}, 0x9, [0xffffffffffffff7f, 0x8a7, 0x0, 0x5, 0x3, 0xffffffff, 0xd73, 0xffffffffffffff7f]}, 0x5c)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001380)={<r2=>0x0}, &(0x7f00000013c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000001400)={0x2, r2})
setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000001440)={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x22}}, 0xc)
ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000001480)=""/175)
poll(&(0x7f0000001540)=[{r1, 0x440}, {r1}, {r0, 0x10}, {r0, 0x4088}, {r0, 0x8000}, {r0, 0x4382}], 0x6, 0x6)
ptrace$setregset(0x4205, r2, 0x6, &(0x7f00000015c0)={&(0x7f0000001580)="c431b54092768e40a2a8", 0xa})
fcntl$addseals(r0, 0x409, 0x3)
fcntl$setownex(r1, 0xf, &(0x7f0000001600)={0x2, r2})
getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000001640)={@initdev, <r3=>0x0}, &(0x7f0000001680)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000016c0)={@mcast1, 0xd, r3})
write$P9_RXATTRWALK(r0, &(0x7f0000001700)={0xf, 0x1f, 0x1, 0x9}, 0xf)
ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000001740)=""/57)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000001780)='/dev/net/tun\x00', 0x4000, 0x0)
r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000017c0)='/proc/self/net/pfkey\x00', 0x3eb407fee94ef78f, 0x0)
getdents64(r1, &(0x7f0000001800)=""/51, 0x33)
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x2)
fcntl$setlease(r4, 0x400, 0x2)
renameat2(r0, &(0x7f0000001840)='./file0\x00', r1, &(0x7f0000001880)='./file0\x00', 0x4)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000018c0)=0x2)
ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000001900))
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001940)='/dev/vga_arbiter\x00', 0x40000, 0x0)
fcntl$notify(r0, 0x402, 0x80000000)

20:21:07 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b0")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, &(0x7f0000000140), 0x1)

20:21:08 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008916, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet(0x2, 0x800000000000002, 0x8001)
getsockopt$inet_int(r1, 0x0, 0x2, &(0x7f00006ed000), &(0x7f0000f24000)=0x2)
ioctl$VT_ACTIVATE(r1, 0x5606, 0xf9)

20:21:08 executing program 5:
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @mcast1}}]}, 0x110)

20:21:08 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

20:21:08 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b0")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, &(0x7f0000000140), 0x1)

20:21:08 executing program 0:
r0 = dup(0xffffffffffffffff)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x2, 0x3f, 0x48})
ioctl$RTC_WIE_ON(r0, 0x700f)
ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000080))
umount2(&(0x7f00000000c0)='./file0\x00', 0x4)
chdir(&(0x7f0000000100)='./file0\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x84500, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r2, 0x2, 0x70bd2d, 0x25dfdbff, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz0\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000300)={{{@in6, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0, <r4=>0x0}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000400)=0xe8)
lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
chown(&(0x7f00000002c0)='./file0\x00', r4, r5)
recvmmsg(r1, &(0x7f0000002e00)=[{{&(0x7f0000000500)=@un=@abs, 0x80, &(0x7f0000001740)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f0000000680)=""/106, 0x6a}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/45, 0x2d}], 0x4, &(0x7f0000001780)=""/4096, 0x1000}, 0x800}, {{&(0x7f0000002780)=@sco, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002800)=""/160, 0xa0}, {&(0x7f00000028c0)=""/237, 0xed}, {&(0x7f00000029c0)=""/253, 0xfd}, {&(0x7f0000002ac0)=""/162, 0xa2}, {&(0x7f0000002b80)=""/69, 0x45}, {&(0x7f0000002c00)=""/130, 0x82}, {&(0x7f0000002cc0)=""/71, 0x47}], 0x7, &(0x7f0000002dc0)=""/23, 0x17}, 0x400}], 0x2, 0x1, &(0x7f0000002e80)={0x0, 0x1c9c380})
sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x101000a}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x1c, r2, 0xc00, 0x70bd2c, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000080}, 0x4008801)
mount(&(0x7f0000002fc0)=@sr0='/dev/sr0\x00', &(0x7f0000003000)='./file0\x00', &(0x7f0000003040)='hpfs\x00', 0x80, 0x0)
link(&(0x7f0000003080)='./file0\x00', &(0x7f00000030c0)='./file0\x00')
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000003100), &(0x7f0000003140)=0x4)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000031c0)={&(0x7f0000003180)='./file0\x00', r0}, 0x10)
setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000003200), 0x4)
ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000003240)=""/224)
ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000003340)={0x8, 0xfffffffffffffff8, 0x1})
sendto$packet(r1, &(0x7f0000003380)="81ce01f39e1e0e96e93579c6334e86766ba8e41edabd17b39d5faef28d01d5a88a3ea16ad5b271c0a80efd20591626a92bdb7dd9a1e0433e3f81262c534466f700513b99b809cf2e6b4e206cef719ecb126135b09aed8be4910d6d62c2fc339da99bc16c998aa83ab390416d65504f16ed6c990105310290fb2f2548916eee9e99", 0x81, 0x10, &(0x7f0000003440)={0x11, 0x1f, r3, 0x1, 0x8, 0x6, @broadcast}, 0x14)
perf_event_open$cgroup(&(0x7f0000003480)={0x3, 0x70, 0x200000000000000, 0x7ff, 0x10, 0x20, 0x0, 0xadd, 0x2800, 0x2, 0x2, 0x979, 0x4, 0x800, 0x100000000, 0x200, 0x8c, 0x6, 0x2, 0x0, 0x9, 0xffff, 0xaba, 0x7, 0x7, 0x80000001, 0x0, 0x0, 0xfffffffffffffffc, 0x7, 0x81, 0x10001, 0x3, 0x5, 0x5, 0x5, 0x173, 0x401, 0x0, 0x7fffffff, 0x1, @perf_config_ext={0x2, 0x7}, 0x100, 0xa1cb, 0x80, 0x7, 0xfff, 0x4, 0xff}, r1, 0x4, r0, 0x1)
getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000003500)={'mangle\x00', 0x3f, "2da2da822649a8f2c42f456eda798c7c2a504fedc864303df581016df37fb17444d048fd828c4543b921ca4a1b4f568a776eb64052ff8b8bf38ebe5b8ab10d"}, &(0x7f0000003580)=0x63)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000035c0)={0xffffffffffffffff, {0x6, 0x9, 0x40, 0x16b6, 0x1}})
ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000003600)=""/226)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000037c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)={0x1c, r2, 0xe30, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800)
r6 = open(&(0x7f0000003800)='./file0\x00', 0x10000, 0x8)
ioctl$EVIOCSABS2F(r6, 0x401845ef, &(0x7f0000003840)={0x3ff, 0x1000, 0x1000, 0x100, 0x7, 0x3})

20:21:08 executing program 2:
syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffff78ffffaaaaaaaaaabb08060001080006f10003aaaaaaaaaa0d7f00000101000001000001000000f715400073d586efbaf5ec70d8c12dccb44ee5fc6054a0ea37b5fb990dad344494c75257a07e8b24dafc3f9cdd967ec47fbec56e030d389dc52614a7727be4c923136d925d0c17e5f11787bf36d1b2bd9ff56219323f4648cf2541a66e6ca113fe3fe01be306eed369c3828e5f9e566f4fa9b7ec524afd5b68aa47b9184f0b420efa46a4fb1f2462c071fe0c1eacde612e2cf93f443a5bfab86e0b8fd4f4675f56195aac6cbe789fe8196d1f351fa92353674f"], &(0x7f0000000040)={0x0, 0x4, [0xd6f, 0xc6c, 0xf81, 0x17e]})
get_thread_area(&(0x7f0000000080)={0x5, 0x20001800, 0x0, 0x20, 0x80000000, 0x101, 0x4, 0x3f, 0x8, 0x7})
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x402080, 0x108)
getsockopt$netlink(r0, 0x10e, 0x0, &(0x7f00000000c0)=""/2, &(0x7f0000000280)=0x2)
syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

20:21:08 executing program 0:
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x40000000000009)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x400000000001, 0x0)
close(0xffffffffffffffff)
openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0)
clone(0x3102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4202, r0, 0x0, 0x0)
tkill(r0, 0x38)
ptrace$cont(0x18, r0, 0x0, 0x0)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xa7})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)
add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)="ea3d7ee9aa8d27c4e6b22700e9889c07052689bcd154", 0x16, 0x0)

20:21:08 executing program 5:
rt_sigaction(0x21, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000004c0)='\'\xc4\'\v\xec\xe4\t\xc5r\x12-\x90\xda\x9a\x94\x02\xec\xea\x10\x90\x03\xcb\xf8\x1b6\xa5t\xd6\xd3\x93\xd3\xdf\x85P\x19G7Q\v\xdcHv\x03Qa\xf3\xd4\xfc(\x83\xfb\xf8C\xf6\x8a$\xb1\x90\xeb\'~\xa0\xd8\xc8\xe8\x94#\xcd\xd5Kp\xbf\xc0\x8d7\x1b?A(\xe8^\x9c\xff\x0f\x1ck\xbc\x95\x05\xcd\x17\xf7\x15o\xd4\xdc4\x84uw\xa6w\x0f\xea`1\xec\xb4\x04\xd5\r\x8d\xde\x1f]\x15\xe5\xe8\xd00\xe5\x8d\x9c\x9ec+\x02\x1d\xffa5\x94\xab\xddNe\xfe\x8c\xc4q\xbb#f\xc1\xb9\x81W\xa4$)!\v\x9b\xa7\b\x91\xe5\xeb\x88\x1c\x0f\xb2.Tr\xe4\x99\x9e\x03\xb4\xd2\xf9KW\xce\xd1cC\xd5\xcf\x97\xa9\xeab\xda\xd6:\xa91q\xf7\xc5\xc0C\xd1\'\x89\xee\x84T:\x88x\xe2\x83\xf2r\xf4&t@\x9e\xa4qf\xdf\xf4\xb5\x01\\a\x85\xd3\xe0\xb7\n\xe7\xed\x84Q\xd7s\xcd4B\xcbQ\xa4\x9f[\x99\xdfJ%\xa8\xfc\xe3`\xc1\x0fy\x12\x181\xa5|8\xc8\xe7\x9f@\xeb:\nJA\xc9\xbc\xd4~}\xce\xe8\xfejH\x8fb\xdd\xbcJ\vk\'\xe7Q\xfd\xaaA`\xb5\xa1\xe4\xf8\x9eG\xcfb\xe8@\x04\xe1\xf8\xacU)(S\xed\xffA\xfaqt\xb6$e\n\xc7\x9b\xb0X\xb6\xd4\t\x99^^\xc2>J\x16\xd0\x8c\xecy*\xa0\a\xe9Ar\xa6\xb4n9j\xe5\xba\x8a\n\xce2\xcf_\x1b.t)\x8d09A[-\xf6\xe7\xe8\x1f\x92>\xb8\xd4>-\xacY\x9e\x88\x96\xa7\xfa\xdaoL\xa6\xec\xe8\xd5\xbfaf\xd7\xfc\x03\x91w)\xcd\x1f\xbe\xc9R\xcfz\x03\xec\br\x83\x8bM-\xf8X\xfd\"\xb4RV\x7f\xda\xd3\xd4h\x1c\xdb\xbe\xa4U\xec\xcd\'\xbc\xd22\x85{,\xe6-,6\x9d\x85\xb4fL\b\x98\xe9@\xee\xc2.\xb3\xd6w\x10\x94\xb5%D\xe8\r\xfe\x98G\x82\fx,\xa2J\x12\x03ec\xd5e-\x1f6\xe7\xb6\xd9\xcf0J\xed\xb7\x9b\xfd\xfc\x00EQ\x1f\x00D\xc95\xdeG +\x1bp\xf4\t\x94\x87\xf1ZbO\xa6\xe9\f`u\xda\xb3\x1d\xf9\x94\x80\xc1\x17\xde(_\xa7\xe7\x11\x9a\xac\x8c\xb1\xd71\xc5\xe9\xd3n\xc2\xa4\x98P\x9aF\xc2\x93\xad@\xa9h\x96\x1b]2\x88\xf3\xd8\xc798\x8c\x9f\xd4W4\xf1}\aD\xa0\xd8\xda\xf4\x1bEx(t|\xf4Y\xfaJ\xc2GS\xc9R\xb5\xda\xa8\x9b\xaa\x01\xe2~\xd8f.#\x94\xbf\x85z\xbf\xa0x62L\x1f\x91\xd2\x1e%\x88\x1f\f\xabb\x8ds\x93\x9e\xed\xd2\xdb\x02\x0e\xcf\xf5\xaf\xc8>+\x03e\xb7\xba\xb9}\xca\xfc\xe8\xed\x9b\xa2\x9ey\bMv\x8f\x8a8\xfd;\x9a5J\xee\x9a\xae\x83>$\x8a6\x05P\x8c\x05\xb8\r\xcf\xdd\x15/\xa9\xa1\xd4\x87{\xc9I4\xe3 i\xa4\xc5\xe5l\x03?\xfdM&\xc0a9}h\x8ef\x10!\xf0\x99\x80\xb72\xcc\x06\'+\xf0\xa1\a\xeeSGH\x12\x068S7s\xd3\xdaT\"\xa9jk\xed\xa2IyM\xa3&t\xfeA\xa9\"\xb4\xec\xdex\x00\x80`p\x91\x84\xbfK\xb6\x00\xa7\xa2\x06\xce\xc8X\x7f\xd1@\xf1\xcf\xdf\xae\xdb\r\xf6h\xdf\xc6+\xac\r\x9f\xc2D\xdf\xd6\xde`\xa4\xf4\xbe#\tH\x06;a(`\xdcw\x1dc_\v\x046j\xf9`\r\xc0\a\x8d\x12:l\xc7j3E\xd7\xcaX\x97\xad\x93\xea\x99\xca\xd7m\xb8\x1e1\xb6Nz\"U/\x0eP\b=\x01W\xcd\xf1x\x85\xf4&\xe7\xf9W\x06\xa4\xf8&\xbc\xf4\xd0\xd2\xd1W\xee\x9a\xdd\xdbu\x0e\x9aV\xe2\xc5\x84`Bu\x12\xa8/=\x17\xc4F\x11\xdfm-)\xd9hc\xba\xb7\x91\xd9\x11\x9a,\x19\xf4]\xa7Y@B\x1f]\x97\x9f\xc2')
creat(0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x2000107c)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, &(0x7f0000000000))
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast2, @in6=@local}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, r0, 0x0, 0x39c, &(0x7f0000000880)='\'\xc4\'\v\xec\xe4\t\xc5r\x12-\x90\xda\x9a\x94\x02\xec\xea\x10\x90\x03\xcb\xf8\x1b6\xa5t\xd6\xd3\x93\xd3\xdf\x85P\x19G7Q\v\xdcHv\x03Qa\xf3\xd4\xfc(\x83\xfb\xf8C\xf6\x8a$\xb1\x90\xeb\'~\xa0\xd8\xc8\xe8\x94#\xcd\xd5Kp\xbf\xc0\x8d7\x1b?A(\xe8^\x9c\xff\x0f\x1ck\xbc\x95\x05\xcd\x17\xf7\x15o\xd4\xdc4\x84uw\xa6w\x0f\xea`1\xec\xb4\x04\xd5\r\x8d\xde\x1f]\x15\xe5\xe8\xd00\xe5\x8d\x9c\x9ec+\x02\x1d\xffa5\x94\xab\xddNe\xfe\x8c\xc4q\xbb#f\xc1\xb9\x81W\xa4$)!\v\x9b\xa7\b\x91\xe5\xeb\x88\x1c\x0f\xb2.Tr\xe4\x99\x9e\x03\xb4\xd2\xf9KW\xce\xd1cC\xd5\xcf\x97\xa9\xeab\xda\xd6:\xa91q\xf7\xc5\xc0C\xd1\'\x89\xee\x84T:\x88x\xe2\x83\xf2r\xf4&t@\x9e\xa4qf\xdf\xf4\xb5\x01\\a\x85\xd3\xe0\xb7\n\xe7\xed\x84Q\xd7s\xcd4B\xcbQ\xa4\x9f[\x99\xdfJ%\xa8\xfc\xe3`\xc1\x0fy\x12\x181\xa5|8\xc8\xe7\x9f@\xeb:\nJA\xc9\xbc\xd4~}\xce\xe8\xfejH\x8fb\xdd\xbcJ\vk\'\xe7Q\xfd\xaaA`\xb5\xa1\xe4\xf8\x9eG\xcfb\xe8@\x04\xe1\xf8\xacU)(S\xed\xffA\xfaqt\xb6$e\n\xc7\x9b\xb0X\xb6\xd4\t\x99^^\xc2>J\x16\xd0\x8c\xecy*\xa0\a\xe9Ar\xa6\xb4n9j\xe5\xba\x8a\n\xce2\xcf_\x1b.t)\x8d09A[-\xf6\xe7\xe8\x1f\x92>\xb8\xd4>-\xacY\x9e\x88\x96\xa7\xfa\xdaoL\xa6\xec\xe8\xd5\xbfaf\xd7\xfc\x03\x91w)\xcd\x1f\xbe\xc9R\xcfz\x03\xec\br\x83\x8bM-\xf8X\xfd\"\xb4RV\x7f\xda\xd3\xd4h\x1c\xdb\xbe\xa4U\xec\xcd\'\xbc\xd22\x85{,\xe6-,6\x9d\x85\xb4fL\b\x98\xe9@\xee\xc2.\xb3\xd6w\x10\x94\xb5%D\xe8\r\xfe\x98G\x82\fx,\xa2J\x12\x03ec\xd5e-\x1f6\xe7\xb6\xd9\xcf0J\xed\xb7\x9b\xfd\xfc\x00EQ\x1f\x00D\xc95\xdeG +\x1bp\xf4\t\x94\x87\xf1ZbO\xa6\xe9\f`u\xda\xb3\x1d\xf9\x94\x80\xc1\x17\xde(_\xa7\xe7\x11\x9a\xac\x8c\xb1\xd71\xc5\xe9\xd3n\xc2\xa4\x98P\x9aF\xc2\x93\xad@\xa9h\x96\x1b]2\x88\xf3\xd8\xc798\x8c\x9f\xd4W4\xf1}\aD\xa0\xd8\xda\xf4\x1bEx(t|\xf4Y\xfaJ\xc2GS\xc9R\xb5\xda\xa8\x9b\xaa\x01\xe2~\xd8f.#\x94\xbf\x85z\xbf\xa0x62L\x1f\x91\xd2\x1e%\x88\x1f\f\xabb\x8ds\x93\x9e\xed\xd2\xdb\x02\x0e\xcf\xf5\xaf\xc8>+\x03e\xb7\xba\xb9}\xca\xfc\xe8\xed\x9b\xa2\x9ey\bMv\x8f\x8a8\xfd;\x9a5J\xee\x9a\xae\x83>$\x8a6\x05P\x8c\x05\xb8\r\xcf\xdd\x15/\xa9\xa1\xd4\x87{\xc9I4\xe3 i\xa4\xc5\xe5l\x03?\xfdM&\xc0a9}h\x8ef\x10!\xf0\x99\x80\xb72\xcc\x06\'+\xf0\xa1\a\xeeSGH\x12\x068S7s\xd3\xdaT\"\xa9jk\xed\xa2IyM\xa3&t\xfeA\xa9\"\xb4\xec\xdex\x00\x80`p\x91\x84\xbfK\xb6\x00\xa7\xa2\x06\xce\xc8X\x7f\xd1@\xf1\xcf\xdf\xae\xdb\r\xf6h\xdf\xc6+\xac\r\x9f\xc2D\xdf\xd6\xde`\xa4\xf4\xbe#\tH\x06;a(`\xdcw\x1dc_\v\x046j\xf9`\r\xc0\a\x8d\x12:l\xc7j3E\xd7\xcaX\x97\xad\x93\xea\x99\xca\xd7m\xb8\x1e1\xb6Nz\"U/\x0eP\b=\x01W\xcd\xf1x\x85\xf4&\xe7\xf9W\x06\xa4\xf8&\xbc\xf4\xd0\xd2\xd1W\xee\x9a\xdd\xdbu\x0e\x9aV\xe2\xc5\x84`Bu\x12\xa8/=\x17\xc4F\x11\xdfm-)\xd9hc\xba\xb7\x91\xd9\x11\x9a,\x19\xf4]\xa7Y@B\x1f]\x97\x9f\xc2', 0xffffffffffffffff}, 0x30)
fcntl$setown(r3, 0x8, r4)
socket$nl_generic(0x10, 0x3, 0x10)
accept$inet(r2, &(0x7f00000003c0)={0x2, 0x0, @multicast2}, &(0x7f0000000400)=0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_delneigh={0x24, 0x1d, 0x611, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xb9}, [@NDA_DST_IPV4={0x8, 0x1, @local}]}, 0xb8}}, 0x0)

20:21:08 executing program 0:
clone(0x3002001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x22)
ptrace$cont(0x18, r0, 0x0, 0x0)
r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0)
getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, &(0x7f0000000140)=""/223, &(0x7f0000000040)=0xdf)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@loopback, @dev, @mcast2, 0x0, 0x0, 0x0, 0x11f})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[  276.339610] binder: 8253:8257 ioctl c018620b 0 returned -14
20:21:08 executing program 3:
r0 = fcntl$dupfd(0xffffffffffffffff, 0x3, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x802122001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578150000000000018008000000072315c9"], 0x20)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x13c, r2, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x68, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0xbf02}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8001, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1000}}}}]}, @TIPC_NLA_BEARER={0xc0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @mcast2, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x9, @mcast2, 0x8}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xfffffffffffffe00, @mcast1, 0x400}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x5, @local, 0x800}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe7e}, @TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x800}, 0xc880)

20:21:08 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b0")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, &(0x7f0000000140), 0x1)

20:21:08 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f00000000c0)={0x5, 0x5, 0x5, 0x7, 0x2})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
prctl$PR_GET_NO_NEW_PRIVS(0x27)

20:21:08 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020b000007000000000021002d542fa457ee12036205001a04000c9a934d4fe600001000e0c99fbd653c00f0ff9da499df0005dc437eed481374722f42ff0c470d1a657399e4dfc000773fec2afb94a2bc07faffffffffffffffd447edfdd0aead158c79afe76d88cc0c38ddb6bbc42c73872cab3ff735fd20e9b21102d116c87bfa1090223b37ca69832aa37aeeef1a18392385e046d6772e2d9a41d357de6eef40f4"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x20, 0x0)
clock_gettime(0x0, &(0x7f0000000400)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f00000009c0), 0x4000000000002ab, 0x22, &(0x7f0000000a80)={0x0, r1+10000000})
r2 = dup(r0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000740)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000780)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f0000000880)=0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@dev={0xfe, 0x80, [], 0x21}, @in6=@remote, 0x4e20, 0x0, 0x4e24, 0x100, 0xa, 0x80, 0xa0, 0x0, r3, r4}, {0x4, 0xc7, 0x2c, 0xec4a, 0x6, 0x6, 0x2, 0x8}, {0x1, 0x2, 0x6, 0x5}, 0x4, 0x0, 0x3, 0x0, 0x2, 0x3}, {{@in6=@rand_addr="5a15c05a579a6d8c38ba82892e605ccf", 0x4d4, 0x2b}, 0x2, @in6=@loopback, 0x3506, 0x0, 0x3, 0x9, 0x0, 0x3, 0x4a67}}, 0xe8)
setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000000)={@loopback, r3}, 0x14)

20:21:08 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000740)={@remote}, 0x6)
r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000080), 0x4)
write$nbd(r1, &(0x7f0000000000)={0x67446698, 0x1, 0x2, 0x3, 0x3, "d5dd188cd81121638985fb300bdd4eab98fe5e9141721b3fb408fd7e2f11eda77f25477aa534427920e9dff73b39966aa05de80b16ca0878118bbbf8cb74f5e9fc16343989cce1729b959abefcb4fbd23baca1ad07190479"}, 0x68)

20:21:09 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

20:21:09 executing program 3:
add_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="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", 0x1000, 0xfffffffffffffffd)
r0 = add_key(&(0x7f0000000080)='encrypted\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000001340)="5cec9ef8b749f5abea7c53dad9c25006e7aae60c138be096c3badc35b383c7e5ff7effad0b577e805b2ffdf0922ed1a6dbc2db9d311f53382e96165411d0458ea8d8a103dd65a8df61e6bc85652b37f67ee95bc54950d865420b29513bae7ba1b4a594b8f8d0e0e666243129dab6cd00994b951ad42226b6e6eea5913e0233f2ad7ee841", 0x84, 0xfffffffffffffffb)
r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, r0)
r2 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)="61b8473956f36a59f804e731b2aebffde2f5ef03297861247eb72626a938f4fdbe97bc6024ca46932872121093a7cb1cca5288d7a22992532d23d0197c94dc751630bc7414af745725c3629fa1adf1971f97cfef7d5f079368be0f5d46fbe762ae1590c3eb22a17f392621e1556da2ca6a544461f0b83bccad6f661cc840ae09192ebc550e8a337b873679bf06ddc2248d989d676f98c7367aaeb0465deec8869a8c248e377c00030a9fe929ca83be460372106ee635daeeded50cae968421ea924fd62b05709c416954a519c5b310", 0xcf, 0xffffffffffffffff)
keyctl$link(0x8, r1, r2)

20:21:09 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, &(0x7f0000000140), 0x1)

20:21:09 executing program 5:
r0 = socket(0x40000000000010, 0x802, 0x0)
write(r0, &(0x7f0000000300)="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", 0xfc)
getsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4)

20:21:09 executing program 2:
r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x3, 0xff)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x101000, 0x0)
ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f0000000180))
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, 0x0)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffd8)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000240)={0x6, {{0xa, 0x4e22, 0xfffffffffffff001, @rand_addr="88a26c9a2c3fd6df6affe5ea00c960e0", 0xaa}}, 0x0, 0x4, [{{0xa, 0x4e24, 0x4, @mcast2, 0x10001}}, {{0xa, 0x4e22, 0x3, @empty, 0xff}}, {{0xa, 0x4e24, 0xac, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}}, {{0xa, 0x4e21, 0x2464, @mcast1, 0x9}}]}, 0x290)
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000500))
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=<r3=>0x0)
sched_setaffinity(r3, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0xe95, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x20000000, 0x0, 0x0, 0x0, 0x0)

20:21:09 executing program 0:
getpeername(0xffffffffffffff9c, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000140)=0x80)
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'gretap0\x00', {0x2, 0x7, @remote}})
r1 = socket$inet6(0x10, 0x3, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg(r1, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900070035000c00060000001900150002000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0)

20:21:09 executing program 3:
fstat(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2, 0x5, &(0x7f0000000380)=[{&(0x7f0000000140)="cc", 0x1, 0x6}, {&(0x7f0000000240)="1346ad6314c02c1c0528a1b0f70190b372200766ffc1c0aa8836b3c68d690c092572195ac794289e85f75e1260ef497b8348a894b18d3870d4d98fbaa9ed2e36ce3a9c9842876a8a993228d85f4a5f6029767faa0a46853e37173ee205b337a932318ad06469fa55149c2e3fccd14ca285b2d22306555fd880ed957e2da78cc1fcf26996386f176cdf8f326b27d389fd5152df161b74eaf5f2ed609901c5b3deba189923edf03daf063105c4c7865abe7922982c1de91c9eb8a6d25e9bd1c74f85294e81d9", 0xc5, 0x9}, {&(0x7f0000000180)="41053573728ee2f1f9030bee0788963d97b900112742b0cf3a481ac1ac1f83b6247a2b34d46859b384ed0aff27", 0x2d, 0x6}, {&(0x7f00000001c0)="abafa3e0f86f", 0x6, 0x3f}, {&(0x7f0000000340)="256ab0bd2d86b61a711d4c780f9d3ddae2", 0x11, 0x10000}], 0x40, &(0x7f0000000480)={[{@grpjquota='grpjquota='}], [{@euid_eq={'euid', 0x3d, r0}}]})
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sync()
r1 = getpid()
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$cgroup_type(r2, &(0x7f00000000c0)='threaded\x00', 0xffffffea)
r3 = add_key(&(0x7f0000000200)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
ptrace(0x10, r1)
keyctl$assume_authority(0x10, r3)
write$P9_RVERSION(r2, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x28, 0x8, '9P2000.L'}, 0x15)
fcntl$notify(r2, 0x402, 0x2)
ptrace(0x11, r1)

20:21:09 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, &(0x7f0000000140), 0x1)

20:21:09 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
link(0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe)
getgroups(0x6, &(0x7f0000000140)=[0x0, 0xee00, 0x0, 0xffffffffffffffff, <r0=>0xee00, 0xee01])
chown(&(0x7f0000000000)='./file0\x00', 0x0, r0)
syz_genetlink_get_family_id$tipc2(0x0)
getegid()
ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x89fd, &(0x7f0000000180)="b59041e43cba0399d0b5d592456ddc9e2734d5e10394b9799b25d15c3e349c0d63395bf0843a92010c4f82db95ac289ac4")
unshare(0x1010020600)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
fstat(r1, &(0x7f0000000040))

20:21:09 executing program 0:
r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
write$P9_RLOCK(r0, &(0x7f0000000580)={0x8, 0x35, 0xfffffffffffffffe}, 0xffffffffffffff2a)

20:21:09 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, &(0x7f0000000140), 0x1)

[  277.194445] binder: 8312:8315 ioctl c018620b 0 returned -14
[  277.202840] IPv6: Can't replace route, no match found
[  277.231466] EXT4-fs (loop3): VFS: Can't find ext4 filesystem
20:21:09 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000200)='pagemap\x00')
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
pipe(0x0)
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4)
bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0xffffffffffffff53)
ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x1000000004e23, @local}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000002c0)=0xda8, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
write$selinux_attr(r0, &(0x7f0000000340)='system_u:object_r:usbmon_device_t:s0\x00', 0x25)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
connect$netlink(0xffffffffffffffff, &(0x7f0000000440)=@unspec, 0xc)
sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000300)={'syzkaller0\x00', {0x2, 0x0, @dev}})
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)

20:21:09 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

20:21:09 executing program 0:
clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x2f)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="054fcff8f1b05829bf5a5c06dd3826992fc73cb00040efb7ee236bec0500000000000000ffffb960b100008000fe3ff317f4c831c3b64254fe"], 0x39)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0))
open(&(0x7f0000000000)='./file0\x00', 0x200500, 0xa)
ptrace$cont(0x7, r0, 0x0, 0x0)

20:21:09 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, &(0x7f0000000140), 0x1)

20:21:09 executing program 2:
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/unix\x00')
lseek(r1, 0x2, 0x0)
getrlimit(0xf, &(0x7f0000000040))

20:21:09 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, &(0x7f0000000140), 0x1)

20:21:09 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x4, {{0xa, 0xfffffffffffffffc, 0x0, @ipv4={[], [], @empty}}}, {{0xa, 0x0, 0x4, @empty}}}, 0x108)
io_setup(0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, 0x0)
syz_open_pts(0xffffffffffffffff, 0x80000000006)
r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000840)={0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x7})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = gettid()
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffffd)
perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffff9c, 0x0)
ptrace$setopts(0xffffffffffffffff, r3, 0x0, 0x0)
tkill(r3, 0x0)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x4)
openat$selinux_user(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000380)='/dev/urandom\x00', 0x8b00, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$BLKRRPART(r2, 0x125f, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f00000001c0)=0xf2)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3c, 0x0, 0x0)

[  278.001731] binder: 8352:8355 ioctl c018620b 0 returned -14
[  278.022624] EXT4-fs (loop3): VFS: Can't find ext4 filesystem
20:21:09 executing program 3:
syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/net\x00')
bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)={&(0x7f0000000540)='./file0\x00', 0x0, 0x8}, 0x10)
r0 = socket$inet6(0xa, 0x800, 0x80)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x400300, 0x0)
r2 = dup3(r0, r1, 0x80003)
write$P9_ROPEN(r2, &(0x7f0000000140)={0x18, 0x71, 0x1, {{0x20, 0x2, 0x4}, 0x65}}, 0x18)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x2, 0x14, 0x31, 0x0, 0x30, 0x0, 0x70bd26, 0x25dfdbfd, [@sadb_x_filter={0x5, 0x1a, @in6=@dev={0xfe, 0x80, [], 0x12}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x10, 0x10}, @sadb_x_filter={0x5, 0x1a, @in=@dev={0xac, 0x14, 0x14, 0x27}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe, 0x0, 0x14}, @sadb_x_sa2={0x2, 0x13, 0x7, 0x0, 0x0, 0x70bd29, 0x3501}, @sadb_x_sec_ctx={0x13, 0x18, 0x2, 0x0, 0x90, "f7609444037eee0af6e59c7d60521fc97e54d1fbde93eae497592f14471c30f989d7624edf8e701f421d5193eb7db5eacf6640d87c87046092590592346a51eda34bbc114fffb1d190f55140e1e22c6198a5c42cdaf61738ad70f90ad0d503d2b03c6d02328afe9ce82ab7d523fe2adac62728c41860f498e9a561b84f5082fee7fff254aaeade4dadb4dc890ba5a598"}, @sadb_x_nat_t_type={0x1, 0x14, 0x5}, @sadb_x_sa2={0x2, 0x13, 0x268b, 0x0, 0x0, 0x70bd27, 0x3503}, @sadb_x_sec_ctx={0x6, 0x18, 0x1f, 0x9, 0x23, "989ad3c3ed876458676e2ba90caa656dfa5c354464a1ee9ba5266f8ee7fb77abd1b27c"}, @sadb_sa={0x2, 0x1, 0x4d3, 0x67, 0x2, 0xf4, 0x3, 0x20000000}, @sadb_lifetime={0x4, 0x4, 0x1, 0x0, 0x19c, 0x4}]}, 0x180}}, 0x4800)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000000000000105000600200000000a00000000000000000500e50000070000001f000000000000250000000000000200010000000000002000020000627c0500050000ff1700000000000000000000000001170000000000000000"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="0b7608802b71a7b4a166d8a18a6f0209"], 0x10}}, 0x0)
sendmmsg(r3, &(0x7f0000000180), 0x400000000000238, 0x0)

20:21:09 executing program 0:
socketpair$unix(0x1, 0x100000000000005, 0x0, 0x0)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x8)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x410080, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1d)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x20000, 0x0)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x2000)
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
syz_open_dev$rtc(&(0x7f00000001c0)='/dev/rtc#\x00', 0x8, 0x0)
lstat(0x0, &(0x7f0000000480))
lchown(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, 0x0)
eventfd(0x9)
read$eventfd(0xffffffffffffffff, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x1c, r4, 0x138, 0x70bd2b}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
sendmmsg(r2, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002240), 0x1ba, &(0x7f00000022c0)}}, {{0x0, 0x0, &(0x7f00000026c0), 0x0, &(0x7f0000002700)}}], 0x75a, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x7ff, 0x0, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1a9d7877, 0x0, 0x417d, 0x237, 0x0, 0x5, 0x0, 0xffffffff00000001, 0x3ff, 0xfffffffffffffff8, 0x81, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x9, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffff9c, 0x0)
mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xffdbc2ca)

20:21:09 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, &(0x7f0000000140), 0x1)

20:21:10 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, &(0x7f0000000140), 0x1)

20:21:10 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, &(0x7f0000000140), 0x1)

20:21:10 executing program 5:
r0 = socket$packet(0x11, 0x3, 0x300)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@remote}, 0x0, @in=@multicast1}}, &(0x7f00000004c0)=0xe8)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={<r2=>0x0, <r3=>0x0}, &(0x7f0000000540)=0xc)
syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x1, 0x3, &(0x7f0000000340)=[{&(0x7f00000000c0)="cdeb96d51b2c1e0e3a0901a6", 0xc, 0x4}, {&(0x7f0000000140)="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", 0xfa, 0x1f}, {&(0x7f0000000240)="b9b9abe87a002e93741f63c37b66935b5f79dfb56b5208d19321d738ad07e40777bcdd617187beafbbf41c0335d842e016597af342164d0e18be75bf04e8ad3144bf2ea46a1a3576ef37e2072bd2cb925c886673016ab7034dd8bd198f5d4d964b88911a69e52725914f1cdd7648758539de9c4cca6171b5d166aa5ea97db22e4383c21bf6b21bc2adf08ff9630e8513b5070b9fb6d972a1c7d41e0273316e17e48be45daf2b9440264081b1ddf3b435745ec53818b261e1febe8cb7b19c83b98ea9a296cd9234717bd2744a4fc67b1f422353973a3fa2a224f4b808e23972e2f2b55fd154f59c17647802a66be13c71ac", 0xf1, 0x1}], 0x2000, &(0x7f0000000580)=ANY=[@ANYBLOB='nodots,dots,dots,dots,fsmagic=0x000000000000003f,uid>', @ANYRESDEC=r1, @ANYBLOB=',fkwner<', @ANYRESDEC=r3, @ANYBLOB="2c61756469742c61707072616973655f747970653d696d617369672c7375626a5f726f6c653d656d3173656c662f26656d3176626f786e65743073797374656da92c66756e633d4d4d41505f434845434b2c00"])
rt_sigqueueinfo(r2, 0x34, &(0x7f0000000640)={0x75921c07, 0x8, 0x6})
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10)

20:21:10 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

20:21:10 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, &(0x7f0000000140), 0x1)

20:21:10 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80, 0x1)
r1 = geteuid()
r2 = getuid()
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000100)={{{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000000200)=0xe8)
r4 = getgid()
getresgid(&(0x7f0000000240), &(0x7f0000000280)=<r5=>0x0, &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
getgroups(0x3, &(0x7f0000000380)=[<r7=>0xee01, 0xee01, 0x0])
getresgid(&(0x7f00000003c0)=<r8=>0x0, &(0x7f0000000400), &(0x7f0000000440))
fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000480)={{}, {0x1, 0x6}, [{0x2, 0x1, r1}, {0x2, 0x7, r2}, {0x2, 0x4, r3}], {0x4, 0x4}, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x4, r6}, {0x8, 0x3, r7}, {0x8, 0x2, r8}], {0x10, 0x2}}, 0x64, 0x1)
seccomp(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20}, {0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]})

20:21:10 executing program 3:
sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x100000000007}, 0x0)
ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=<r0=>0x0)
sched_setattr(r0, &(0x7f0000000080)={0x30, 0x6, 0x1, 0x8, 0x38, 0x101, 0x5, 0x2}, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = dup2(0xffffffffffffffff, 0xffffffffffffff9c)
setns(r1, 0x20000)

20:21:10 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070")
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r1, 0x81fd)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r2, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0xa9, 0x3, 0x80000001}})
mlock(&(0x7f0000009000/0x1000)=nil, 0x1000)
mmap(&(0x7f0000009000/0x2000)=nil, 0x2000, 0xfffffffffffffffe, 0x90010, r1, 0x48)
mlock(&(0x7f0000005000/0x4000)=nil, 0x4000)

20:21:10 executing program 0:
clone(0x13102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(r0, 0x0, 0x2, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x4001, 0x0)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000040)=0x80000000, 0x4)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
tkill(r0, 0x11)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x37})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x21, r0, 0x0, 0x0)

20:21:10 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(0x0, 0x8c, 0x1, 0x0, &(0x7f0000000140), 0x1)

[  278.801541] binder: release 8352:8369 transaction 267 out, still active
20:21:10 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
iopl(0x401)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0xffffffbd, &(0x7f0000000000)={&(0x7f0000000240)=@newsa={0x13c, 0x10, 0x721, 0x0, 0x0, {{@in, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}, {@in=@broadcast, 0x0, 0x833}, @in6=@empty={[0xa]}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x13c}}, 0x0)
pipe(&(0x7f00000003c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x1c)

20:21:10 executing program 2:
openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='\x00')
perf_event_open(&(0x7f0000000400)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffffffffffff, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, &(0x7f0000000080))

20:21:10 executing program 0:
r0 = socket$packet(0x11, 0x4000000000000003, 0x300)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
time(&(0x7f0000000100))
sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r3 = fcntl$getown(r2, 0x9)
fcntl$setownex(r2, 0xf, &(0x7f0000000140)={0x2, r3})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
recvmmsg(r0, &(0x7f00000092c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)=""/149, 0x95}], 0x1}}], 0x40000000000030d, 0x0, 0x0)

20:21:10 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f000007c000/0x4000)=nil, 0x4000, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x4000, 0x0)
r1 = accept(r0, &(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @random}}, &(0x7f00000000c0)=0x80)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f00004ee000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x40000000000055f, 0x0)
syz_genetlink_get_family_id$team(0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000480)={@dev}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'sit0\x00'})
accept4$packet(0xffffffffffffff9c, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000780)=0x14, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000880)={'bcsf0\x00'})
accept$packet(0xffffffffffffff9c, &(0x7f00000008c0), &(0x7f0000000900)=0x14)
r2 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg(r2, &(0x7f0000007e00), 0x136a88c8311572c, 0x0)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x0, &(0x7f00000009c0)={@dev}, &(0x7f0000000a00)=0x14)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000bc0)={{{@in6=@remote, @in=@broadcast}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@loopback}}, &(0x7f0000000cc0)=0xe8)
accept$packet(0xffffffffffffff9c, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000f00)=0x14)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000f40)={{{@in=@dev, @in6}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000001040)=0xe8)

[  278.855437] binder: 8420:8429 ioctl c018620b 0 returned -14
20:21:10 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(0x0, 0x8c, 0x1, 0x0, &(0x7f0000000140), 0x1)

20:21:11 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

20:21:11 executing program 2:
r0 = socket$inet(0x2, 0x7fe, 0x5)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0xfff, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000000200)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
sendto$inet(r0, &(0x7f0000000540)="d34b", 0x2, 0x0, 0x0, 0x0)
getsockname(r0, &(0x7f0000000280)=@sco, &(0x7f0000000300)=0x80)
sendmsg(r0, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000001480)="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", 0xfff}], 0x1}, 0x4000005)
sendto(r0, &(0x7f0000000040)="2bddd958acc3443b585e414d14a8515da9214c4e11e49592a10bcad72a568d6fa44a5250f6a6908e3a5d50573fb99b0a8197ff02a8be0b57b865566d6be89b4710ae74b29f8026450317728de702eacc6a73b29be01bd93323f6ae099a37f48d76c4c8e794829ca818d183211caa21cb52fa", 0x72, 0x800, &(0x7f0000000140)=@isdn={0x22, 0x8, 0x80, 0x7, 0x7fff}, 0x80)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x400100)

20:21:11 executing program 3:
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
pwrite64(r1, &(0x7f000003bfff)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0)
lseek(r0, 0x0, 0x1)
sendfile(r1, r1, &(0x7f0000000440), 0x20)
sendfile(r1, r1, &(0x7f0000000100), 0x7f8)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00')
mount(0x0, 0x0, 0x0, 0x0, 0x0)
pivot_root(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='./file0/file0/file0\x00')
r2 = dup3(r0, 0xffffffffffffffff, 0x80000)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
write$UHID_CREATE2(r2, &(0x7f0000000a80)=ANY=[@ANYPTR=&(0x7f0000000900)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYBLOB="52393cbd8b491c9e8d29fdcde10500b464afa14f362fc1886da7815a308d", @ANYPTR, @ANYRESHEX=r3, @ANYRES32=r2, @ANYRESHEX=r1, @ANYRES16=0x0, @ANYRESHEX, @ANYRESHEX=r0, @ANYRES64=r1], @ANYPTR64]], 0x1)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000400)=<r4=>0x0)
fcntl$setown(r2, 0x8, r4)
mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0)
ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000140)=""/38)
mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000780)='TIPC\x00')
ioctl$sock_SIOCDELDLCI(r3, 0x8981, &(0x7f0000000340)={'team_slave_1\x00', 0x1000})
getuid()
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000480)=0xc)
lstat(&(0x7f0000000500)='./file1\x00', &(0x7f0000000540))
mount$bpf(0x0, &(0x7f0000000240)='\x00', &(0x7f0000000280)='bpf\x00', 0x2, &(0x7f0000000600)=ANY=[@ANYBLOB="2c726f6f74636f6e746578743d777973fdff6d5f752c00"])
mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0)
mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x1910824, 0x0)
umount2(&(0x7f0000000800)='./file0\x00', 0x0)

20:21:11 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(0x0, 0x8c, 0x1, 0x0, &(0x7f0000000140), 0x1)

20:21:11 executing program 0:
r0 = socket$packet(0x11, 0x100000000000002, 0x300)
getsockopt$packet_int(r0, 0x107, 0x14, 0x0, &(0x7f0000000040))
clock_gettime(0x0, &(0x7f0000000500)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/253, 0xfd}, {&(0x7f0000000180)=""/116, 0x74}], 0x2}, 0x66a}, {{&(0x7f0000000200)=@hci={0x1f, <r3=>0x0}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000280)=""/229, 0xe5}], 0x1, &(0x7f00000003c0)=""/137, 0x89}, 0x2}], 0x2, 0x10000, &(0x7f0000000540)={r1, r2+30000000})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'hwsim0\x00', r3})

[  279.646090] binder: release 8420:8442 transaction 270 out, still active
20:21:11 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b00)=ANY=[@ANYBLOB="10000000000000000000000000007178"], 0x10}}], 0x1, 0x40)
setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x2)

20:21:11 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x0, 0x1, 0x0, &(0x7f0000000140), 0x1)

[  279.708785] binder: 8459:8463 ioctl c018620b 0 returned -14
20:21:11 executing program 2:
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000f40)='/selinux/checkreqprot\x00', 0x10000, 0x0)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000400)=0x9)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x40000)
link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00')
ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x10e)
r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='|puacct.usage_pe2cpu_sys\x9e', 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000c80)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f0000000100)=0xe8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4002002}, 0xc, &(0x7f0000000040)={&(0x7f0000000f80)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000001340)=ANY=[@ANYBLOB="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"], @ANYRES16=r1]], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@dev={0xfe, 0x80, [], 0xc}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x8000, 0x4e24, 0x1b7, 0xa, 0x0, 0x20, 0x77, r2, r3}, {0xffffffff, 0x1000, 0x0, 0x10001, 0xffffffffffffffcf, 0x9, 0x4, 0x100000001}, {0x0, 0x1, 0x5, 0x2c7b}, 0x7, 0x6e6bb5, 0x2, 0x1}, {{@in6=@empty, 0x4d2, 0x3c}, 0xa, @in=@rand_addr=0x1, 0x3503, 0x3, 0x1, 0x2, 0x21a, 0x5f3, 0x899d}}, 0xe8)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000c00)=0x7b, 0x4)
bind$inet(r4, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000bc0)={0x10001, 0x40, 0x6}, 0xc)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10)
r5 = getuid()
sendmsg(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000600)="80f17a0b8c8970cad4e7c2198c830f262255157995a738328a6ea456e2363942b6223ced8e1d157847f0c1b27a6f790486384b94faefd0dfba2444691133054cc3c8e8e0c3448446a3c2b9f6f110a48d3902d829438729dc7496c17992daebf777fcec616e2ab5ee4386fc35ddb3c5be77d95c0fffaf93cd81c953d311d52830de1d0e9e0df27d08c3fd370198119340781d16aafdfe831593becee6a47cb0fc059d70333ded95e2eb745ff068798a7f26f16839020454432ad0db8fad8c6f345d112e5a6324307d2828ab93a8466da7e80f1a9a4e52857001931223755f7cfb153a98e80cf6b91cf3b9d6634bb2a11f78cc4b3e54a5ac1f17ba23f8eae550c41ab7fcfb549b1791b61093ef140b2b4974e454654ecf5d28797058e196c632fe4f8b71816b2e3c766121499ac4ccdabdbb8c2c57d4a2b5a2e123d0eba31d36285709a22bbdd00e1da947b486f23cdf7453fb1ea5a4775d4dd315e6555ca87c6326efe9bf74b8daecd441eec2ac284d3c062ca8db46acd4e54eafd2cfe5871feac2ba09f31813b44eb3de3515a7b702ee6e0858841ebaddbc8a01d8bfc444c7c0d5d9829a7f61063e31f4fbdef237ff9d4809dcb115c5ffd86af35d1d2edadae8d793a6a0b37adff41ba5a7188e3d46764a5f242fc20b3f44ec5d18ff251b231135c066b9ab5b889b0774613a5dc7a6d6ad5e2d6d095b610f674be6ac519c7d19be29ddccdfe3bf7ea744230ff61d1f3657407d2cc64a4a432cb843d91f98e39f96f47fbd513a12d4a40bd7e15b5910792bea8f197731950245000a99787b4d267c70852d07c94c280f17934214c64677bb5c3c6a996f4d20fbf54f520ed7575f66cd07aa2e14423134962f73d86bce9eb93c697f66adeb655b7898d1f9e66a045f421937f85c251cd510614d3f5f8ca6230d4e04e3e9f36f73f8484749ac03c6b657e81cc9a201817e44f8cad068d100c2ae02c521a83d7bd5f26d8eb9de2f769a356a4adbcbb4425f66293ad1f49851c233a3a64f474860bd6e78b9edb66e259358fd322140140341245fb111b95c9b2e4b6b63b82e711b59d65b06b70ec3ac731d916a5b9f3d4c84c63c4e25db1ca40b2662e0d03327ea4f82d4d19b65527d48859ae051f6c7726bd84ceb1f8c40cbaeb08ecd0fd6aa1367b62f4c41d85525b4c4d39c0f314d88bb1c63554c199bc5f2c8aed9d2b4e864e232107e28658a612fb8589105b00004308fe4635e3a20cc44ba33557a8c3dbba28d78c5390b6a1e292bbdd4ada2244c87a4135c9dd3a426908b9aeed9adff063fa6fc056b7587e3afc5390bd5f1069db6277e3a84282157c1d4fc8c9326efd496659955724cccf7f0ac6d767dfc9511bcc3b51ab7061a35a24310b1f7b0b003f132360fc2f0df5a0ccc27bcba0395fc3ff3842071f0a4dc2debdc1becfffc9f0519e323f5d9793274b0e5eac4be6da21055b44e3db6ab0bb550cfa7305a78a840e1e46b29ffc4f337b1c6165aaf284290f69a620fe2dc9cdc6db45dec913ab4d083d77207439e758c156a39299872b288c9f18d13e8ae0284e132ddf77140b4d4a1c8b5f2c93359efcf948dbd92338fa90641069b479ce2a2ade41edb50f32dbc746903fc41d9b6c0c478848f8c60e1c77a6fd41f4a859609b944350543a4694c913d8cd8ebf9209615b9a1b726d50e1ed2e810ccb2ed4340eb30d27b22120292057a8c11dc888825c97f2ba1d558246bc5d972c141eb8633592bd3246962f08a5595ae01220b7a78bc7a090d1ccc8613537f766e4e9602685bd00aa5ad7309f5883bcecd75b65b341508a5beee817be3fde4b38cc6da3be077760693023a4295", 0x519}], 0x1, 0x0, 0x0, 0x800}, 0x44804)
read(r4, &(0x7f0000000200)=""/225, 0xe1)
shutdown(r4, 0x1)
ioctl$LOOP_SET_FD(r0, 0x4c00, r4)
prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffe000/0x2000)=nil)
unlink(&(0x7f0000000b40)='./file0\x00')
lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580))
setresuid(r5, r3, r5)
geteuid()
pipe2(&(0x7f0000000140), 0x4000)
clone(0x100, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff)
wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340))
read(r1, &(0x7f0000000d80)=""/86, 0x56)

20:21:11 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x0, 0x1, 0x0, &(0x7f0000000140), 0x1)

20:21:11 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x0, 0x1, 0x0, &(0x7f0000000140), 0x1)

20:21:11 executing program 5:
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000f40)='/selinux/checkreqprot\x00', 0x10000, 0x0)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000400)=0x9)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x40000)
link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00')
ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x10e)
r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='|puacct.usage_pe2cpu_sys\x9e', 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000c80)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f0000000100)=0xe8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4002002}, 0xc, &(0x7f0000000040)={&(0x7f0000000f80)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000001340)=ANY=[@ANYBLOB="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"], @ANYRES16=r1]], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@dev={0xfe, 0x80, [], 0xc}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x8000, 0x4e24, 0x1b7, 0xa, 0x0, 0x20, 0x77, r2, r3}, {0xffffffff, 0x1000, 0x0, 0x10001, 0xffffffffffffffcf, 0x9, 0x4, 0x100000001}, {0x0, 0x1, 0x5, 0x2c7b}, 0x7, 0x6e6bb5, 0x2, 0x1}, {{@in6=@empty, 0x4d2, 0x3c}, 0xa, @in=@rand_addr=0x1, 0x3503, 0x3, 0x1, 0x2, 0x21a, 0x5f3, 0x899d}}, 0xe8)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000c00)=0x7b, 0x4)
bind$inet(r4, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000bc0)={0x10001, 0x40, 0x6}, 0xc)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10)
r5 = getuid()
sendmsg(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000600)="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", 0x519}], 0x1, 0x0, 0x0, 0x800}, 0x44804)
read(r4, &(0x7f0000000200)=""/225, 0xe1)
shutdown(r4, 0x1)
ioctl$LOOP_SET_FD(r0, 0x4c00, r4)
prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffe000/0x2000)=nil)
unlink(&(0x7f0000000b40)='./file0\x00')
lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580))
setresuid(r5, r3, r5)
geteuid()
pipe2(&(0x7f0000000140), 0x4000)
clone(0x100, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff)
wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340))
read(r1, &(0x7f0000000d80)=""/86, 0x56)

20:21:11 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x0, 0x0, &(0x7f0000000140), 0x1)

20:21:12 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

20:21:12 executing program 2:
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000f40)='/selinux/checkreqprot\x00', 0x10000, 0x0)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000400)=0x9)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x40000)
link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00')
ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x10e)
r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='|puacct.usage_pe2cpu_sys\x9e', 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000c80)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f0000000100)=0xe8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4002002}, 0xc, &(0x7f0000000040)={&(0x7f0000000f80)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000001340)=ANY=[@ANYBLOB="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"], @ANYRES16=r1]], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@dev={0xfe, 0x80, [], 0xc}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x8000, 0x4e24, 0x1b7, 0xa, 0x0, 0x20, 0x77, r2, r3}, {0xffffffff, 0x1000, 0x0, 0x10001, 0xffffffffffffffcf, 0x9, 0x4, 0x100000001}, {0x0, 0x1, 0x5, 0x2c7b}, 0x7, 0x6e6bb5, 0x2, 0x1}, {{@in6=@empty, 0x4d2, 0x3c}, 0xa, @in=@rand_addr=0x1, 0x3503, 0x3, 0x1, 0x2, 0x21a, 0x5f3, 0x899d}}, 0xe8)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000c00)=0x7b, 0x4)
bind$inet(r4, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000bc0)={0x10001, 0x40, 0x6}, 0xc)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10)
r5 = getuid()
sendmsg(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000600)="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", 0x519}], 0x1, 0x0, 0x0, 0x800}, 0x44804)
read(r4, &(0x7f0000000200)=""/225, 0xe1)
shutdown(r4, 0x1)
ioctl$LOOP_SET_FD(r0, 0x4c00, r4)
prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffe000/0x2000)=nil)
unlink(&(0x7f0000000b40)='./file0\x00')
lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580))
setresuid(r5, r3, r5)
geteuid()
pipe2(&(0x7f0000000140), 0x4000)
clone(0x100, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff)
wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340))
read(r1, &(0x7f0000000d80)=""/86, 0x56)

20:21:12 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x0, 0x0, &(0x7f0000000140), 0x1)

20:21:12 executing program 5:
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000f40)='/selinux/checkreqprot\x00', 0x10000, 0x0)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000400)=0x9)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x40000)
link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00')
ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x10e)
r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='|puacct.usage_pe2cpu_sys\x9e', 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000c80)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f0000000100)=0xe8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4002002}, 0xc, &(0x7f0000000040)={&(0x7f0000000f80)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000001340)=ANY=[@ANYBLOB="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"], @ANYRES16=r1]], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@dev={0xfe, 0x80, [], 0xc}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x8000, 0x4e24, 0x1b7, 0xa, 0x0, 0x20, 0x77, r2, r3}, {0xffffffff, 0x1000, 0x0, 0x10001, 0xffffffffffffffcf, 0x9, 0x4, 0x100000001}, {0x0, 0x1, 0x5, 0x2c7b}, 0x7, 0x6e6bb5, 0x2, 0x1}, {{@in6=@empty, 0x4d2, 0x3c}, 0xa, @in=@rand_addr=0x1, 0x3503, 0x3, 0x1, 0x2, 0x21a, 0x5f3, 0x899d}}, 0xe8)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000c00)=0x7b, 0x4)
bind$inet(r4, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000bc0)={0x10001, 0x40, 0x6}, 0xc)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10)
r5 = getuid()
sendmsg(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000600)="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", 0x519}], 0x1, 0x0, 0x0, 0x800}, 0x44804)
read(r4, &(0x7f0000000200)=""/225, 0xe1)
shutdown(r4, 0x1)
ioctl$LOOP_SET_FD(r0, 0x4c00, r4)
prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffe000/0x2000)=nil)
unlink(&(0x7f0000000b40)='./file0\x00')
lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580))
setresuid(r5, r3, r5)
geteuid()
pipe2(&(0x7f0000000140), 0x4000)
clone(0x100, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff)
wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340))
read(r1, &(0x7f0000000d80)=""/86, 0x56)

20:21:12 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x3, 0x40000)
ioctl$BLKPG(r0, 0x1269, &(0x7f0000000080)={0x3, 0x5, 0x85, &(0x7f0000000140)="1c93513a9dbdcf3b91a535277a7f6244cd3818f97a4c5f43da8fd74de72201f233ce09bd4524317ed0f16fc7e7a2ac49b27b64aa067208c4e08709ffb0024879611baec1f25a4e6040036379f3f50fb4aac0bc7a4a88c11e689043b7c037a27e19897ec82521e40dc09690b11c3e38b2c028ac042fdcb6754f668cb8257584eeda7b9c5713"})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0xfffffffffffffffc)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0)
r2 = creat(&(0x7f00000002c0)='./file0/../file0\x00', 0xa)
fcntl$lock(r2, 0x7, &(0x7f0000027000)={0x1})
getpgid(0xffffffffffffffff)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000000c0)=<r3=>0x0)
r4 = syz_open_procfs(r3, &(0x7f00004c6f8b)='mounts\x00')
mkdir(0x0, 0x40)
pipe2(0x0, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@empty, 0x6b})
ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f00000006c0)=""/42)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)={0x10000, {{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x0, 0x40, @mcast2}}}, 0x108)
getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="6e6174000000000000bd82bbe6000000000000000000000000000000000000007d0000007d5759ec4fd691164f10ea6ce05be5f0df474fec439efc436b65d8ca4447cdfa779027659510eb86680363871304243a575efa56fe319e18027d79fbe7b3e410b80952a19fbcc1f991dbbd5245db7a2e890298445083dd680f823a3dc4667b36550495d8b2834615a13c518f776c000000000000000000000000000000b9e3d83e44dbc67ba5436e4847cb576aa769ec633b78918a637e7f62149a979f82e052d06ca19b17f0ce1e90f720de848c8ed100ed"], 0x0)
ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000400))
openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount$bpf(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740)='bpf\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000200)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00')
mknod$loop(0x0, 0x0, 0xffffffffffffffff)
read$eventfd(r4, &(0x7f0000000080), 0xff97)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x4, &(0x7f00000000c0))
r5 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x2)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8)
fchdir(r5)

20:21:12 executing program 3:
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
pwrite64(r1, &(0x7f000003bfff)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0)
lseek(r0, 0x0, 0x1)
sendfile(r1, r1, &(0x7f0000000440), 0x20)
sendfile(r1, r1, &(0x7f0000000100), 0x7f8)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00')
mount(0x0, 0x0, 0x0, 0x0, 0x0)
pivot_root(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='./file0/file0/file0\x00')
r2 = dup3(r0, 0xffffffffffffffff, 0x80000)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
write$UHID_CREATE2(r2, &(0x7f0000000a80)=ANY=[@ANYPTR=&(0x7f0000000900)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYBLOB="52393cbd8b491c9e8d29fdcde10500b464afa14f362fc1886da7815a308d", @ANYPTR, @ANYRESHEX=r3, @ANYRES32=r2, @ANYRESHEX=r1, @ANYRES16=0x0, @ANYRESHEX, @ANYRESHEX=r0, @ANYRES64=r1], @ANYPTR64]], 0x1)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000400)=<r4=>0x0)
fcntl$setown(r2, 0x8, r4)
mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0)
ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000140)=""/38)
mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000780)='TIPC\x00')
ioctl$sock_SIOCDELDLCI(r3, 0x8981, &(0x7f0000000340)={'team_slave_1\x00', 0x1000})
getuid()
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000480)=0xc)
lstat(&(0x7f0000000500)='./file1\x00', &(0x7f0000000540))
mount$bpf(0x0, &(0x7f0000000240)='\x00', &(0x7f0000000280)='bpf\x00', 0x2, &(0x7f0000000600)=ANY=[@ANYBLOB="2c726f6f74636f6e746578743d777973fdff6d5f752c00"])
mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0)
mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x1910824, 0x0)
umount2(&(0x7f0000000800)='./file0\x00', 0x0)

20:21:12 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x0, 0x0, &(0x7f0000000140), 0x1)

[  280.507896] binder: release 8459:8474 transaction 273 out, still active
[  280.547245] binder: 8506:8514 ioctl c018620b 0 returned -14
20:21:12 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000680)=""/190, 0xbe}], 0x1}}], 0x1, 0x0, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
io_setup(0x6, &(0x7f0000000200)=<r1=>0x0)
clock_gettime(0x3, &(0x7f00000000c0)={<r2=>0x0, <r3=>0x0})
io_getevents(r1, 0x2, 0x4, &(0x7f0000000040)=[{}, {}, {}, {}], &(0x7f0000000100)={r2, r3+30000000})
r4 = syz_open_procfs(0x0, &(0x7f0000000180)='syscall\x00')
ioctl$TIOCEXCL(r0, 0x540c)
preadv(r4, &(0x7f00000017c0), 0x1d0, 0x0)

20:21:12 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, 0x0, 0x1)

20:21:12 executing program 0:
r0 = socket$unix(0x1, 0x104000000000001, 0x0)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001380)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00')
sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x184, r2, 0x812, 0x70bd2d, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x10000}]}, @IPVS_CMD_ATTR_DEST={0x64, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffffffffffff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffffffffffeff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7fffffff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x1b}}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x100}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x10}}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7fffffff}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x86}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x184}, 0x1, 0x0, 0x0, 0x4000040}, 0x8000)
bind$unix(r0, &(0x7f0000000040)=@abs={0x1}, 0x6e)
ioctl$sock_proto_private(r0, 0x89e0, 0x0)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000380)="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")

20:21:12 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, 0x0, 0x1)

20:21:12 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
set_robust_list(&(0x7f0000000580), 0x18)
read(r0, &(0x7f0000000200)=""/217, 0xd9)
r1 = socket$inet6(0xa, 0x2, 0x0)
close(r1)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180)='SEG6\x00')
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20004400}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, r2, 0x222, 0x70bd27, 0x25dfdbfe}, 0x14}}, 0x20004000)
socket$netlink(0x10, 0x3, 0xa)
r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x100)
ftruncate(r3, 0x200004)
sendfile(r1, r3, 0x0, 0x8000fffffffe)
write$P9_RSYMLINK(r3, &(0x7f0000000100)={0x14, 0x11, 0x1, {0x2, 0x0, 0x5}}, 0x14)

20:21:13 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

20:21:13 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x200000, 0x0)
ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x4)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000001500)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000000)=0x20, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10)
ioctl$int_out(r0, 0x0, &(0x7f0000000140))
sendto$inet(r0, &(0x7f00000006c0)="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", 0xfd01, 0x40008000, 0x0, 0x0)

20:21:13 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140))
clone(0x1ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000180))
ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000000080)={0x7, 0xfffffffffffffffe})
setpriority(0x800000000000002, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0))
request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz'}, 0x0, 0xfffffffffffffffd)

20:21:13 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, 0x0, 0x0)

20:21:13 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff], [], [0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000000))

20:21:13 executing program 3:
openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r1 = creat(&(0x7f0000000180)='./file0\x00', 0x40000000000012)
write$binfmt_script(r1, &(0x7f0000000240)={'#! ', './file0', [{0x20, 'stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00'}, {0x20, 'posix_acl_access'}, {0x20, 'stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00'}, {0x20, '&trustedwlan0#'}, {0x20, 'stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00'}, {0x20, 'stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00'}, {0x20, '/'}, {0x20, 'stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00'}], 0xa, "f37f6fbb2a2e0fdc84d4ae7accf6b760ba7638b588e3fda9753e0274ee8807f0b3b63c32a26988161921fb5a7bb5cfbf14842bfb34b122bc2aec891783a31b25b234"}, 0x1dc)
write$P9_RCLUNK(r0, &(0x7f0000000200)={0x7}, 0x7)
sync_file_range(r0, 0x0, 0x0, 0x2)
fallocate(r1, 0x0, 0x0, 0x2000002)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x0, 0x8})

20:21:13 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000280))
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xffdbc2ca)
unlink(&(0x7f00000001c0)='./file0\x00')
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x28}, 0x10)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='pipefs\x00', 0x0, 0x0)
close(r1)
fsetxattr$security_selinux(r1, &(0x7f0000000180)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:fixed_disk_device_t:s0\x00', 0x29, 0x1)
creat(&(0x7f0000000140)='./file0\x00', 0x0)

20:21:13 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005)
r1 = request_key(&(0x7f0000000080)='blacklist\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0xfffffffffffffffd)
keyctl$describe(0x6, r1, &(0x7f0000000680)=""/152, 0x98)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = getpgid(0xffffffffffffffff)
r4 = getpgrp(0x0)
ioctl(0xffffffffffffffff, 0x7, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000005, 0x50, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/46, 0x2e}], 0x1, 0x0)
setpriority(0x0, r4, 0x10000)
r5 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
r6 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
lsetxattr$trusted_overlay_nlink(&(0x7f0000000840)='./file0\x00', &(0x7f0000000540)='trusted.overlay.nlink\x00', &(0x7f00000005c0)={'L+', 0x10001}, 0xffffffffffffffe5, 0x1)
ioctl$PIO_UNIMAPCLR(r5, 0x4b68, &(0x7f0000000200)={0x8, 0x25e96825, 0x200})
setxattr$security_capability(0x0, &(0x7f0000000240)='security.capability\x00', 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000740)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f00000004c0)=0xe8)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, <r8=>0x0}, &(0x7f0000000580)=0xc)
lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0})
r11 = getuid()
getgroups(0x9, &(0x7f00000009c0)=[0xee01, <r12=>0x0, 0xee01, 0xee01, 0xee01, 0xee01, 0xee00, 0x0, 0xee01])
r13 = getuid()
getresgid(&(0x7f0000000a00)=<r14=>0x0, &(0x7f0000000a40), &(0x7f0000000a80))
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000ac0)={{{@in=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0}}, {{@in=@initdev}, 0x0, @in=@dev}}, &(0x7f0000000bc0)=0xe8)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000c00)={0x0, 0x0, <r16=>0x0}, &(0x7f0000000c40)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000c80)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r17=>0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000000d80)=0xe8)
fstat(r5, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
sendmsg$unix(r5, &(0x7f0000000f80)={&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000380)="3ed77c648efc6e37565168087868771877e534f6f8251847b960fc36b9f0f82dc2076f1ee7124cacaeca471b8181d8b910cf4316d5c46c3593599f5b9b09b94fc788a1cfb34ff470d6e0e022dc36ffd760f9d52f4b8eb510fa450a86a79662c84a5cff77b1f97ca2", 0x68}], 0x1, &(0x7f0000000e40)=[@cred={0x20, 0x1, 0x2, r4, r7, r8}, @cred={0x20, 0x1, 0x2, r4, r9, r10}, @rights={0x28, 0x1, 0x1, [r5, r6, r5, r2, r5]}, @rights={0x18, 0x1, 0x1, [r5, r6]}, @rights={0x20, 0x1, 0x1, [r0, r6, r5]}, @cred={0x20, 0x1, 0x2, r3, r11, r12}, @cred={0x20, 0x1, 0x2, r4, r13, r14}, @cred={0x20, 0x1, 0x2, r3, r15, r16}, @cred={0x20, 0x1, 0x2, r4, r17, r18}], 0x120, 0x20000000}, 0x801)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff)
execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)=[0x0, &(0x7f0000000400)='security.capa%ility\x00'], 0x0)
sendmsg$netlink(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f00000015c0)={0x10, 0x0, 0x102}, 0x10}], 0x1}, 0x40000)

20:21:13 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000981ff8)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create(0xc)
ppoll(&(0x7f0000000040)=[{r2, 0x3}], 0x1, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000984ff4))
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000080)={0x20000006})

[  281.349996] binder: release 8506:8519 transaction 276 out, still active
[  281.379670] binder: 8553:8558 ioctl c018620b 0 returned -14
20:21:13 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, 0x0, 0x0)

20:21:13 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, 0x0, 0x0)

[  281.469035] audit: type=1400 audit(1553631673.328:52): avc:  denied  { map } for  pid=8565 comm="syz-executor.0" path="socket:[20873]" dev="sockfs" ino=20873 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=udp_socket permissive=1
20:21:13 executing program 5:
r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002500)={0x0, <r2=>0x0}, &(0x7f0000002540)=0xc)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0xfffffffffffffff9, 0x7, &(0x7f0000002440)=[{&(0x7f0000000100)="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", 0x1000, 0x6f}, {&(0x7f0000001100)="81f1eccf832a0d51b911272c0b5e47a11bca5f9c38b8deb3a5db62306d2e8e03f309c2494f3ade1c71bdd275751c7df32f3475703f5d1932b96ac660ccf7376002703c93f808f9f159fc3e67733079978235f7bb003d0a61c8f7e6c52635d72413473ab610ffb5729117a3ce9364069b921dbfc2887f6243a5958f30fba8b627e215574290e2587901feba9ed5642341e5bc1f78c6a1b6c465e78eec45198b1d3099866b7bf15d2413568985f05d779da11bd1bf27ce37f1fc2913f1c9b265f982533e7c76db3f3f919da5b171147c65ca400a77f862a0d3cb0d99cd46f93e0a7d0bd99daa6142ac54c018db2b7dbebbffc9545f", 0xf4}, {&(0x7f0000001200)="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", 0x1000, 0x9}, {&(0x7f0000000080)="157ed6944e232c16a3d6c95f8ed3b9c81c9b1662fff0ea5db8f0157cea8990853c", 0x21, 0x4}, {&(0x7f0000002200)="b7ba63f31366348df09f7d880b47af9de1ddfe35a719b4ec66becea6b894c21d4a39e5fe1ffa9f4d372b8bc0b275120f446f4cf4bb71bb43478079166476d3d877497932feef7fe7174ec5e626178d89eeac9a34d01fda64e8e602e120ef369109e8bbb2008b68c8aaaf6206071f2c4f676e7845fee0dbbbff6894dc8242a1919dfd380e1d37a696478f99db7714de02cbe90c8e905153d678c4abb3a39bd1de241d3b263ee3716fd3194f131568f8e5", 0xb0, 0x8}, {&(0x7f00000022c0)="9608e106d4c7fc299916647f1a53daa3fc44fffd4c35162378f6122adbdee11648ca0c777c935b3a1843739a8931b398511a8b71b97fe0ce141d081bf2d327c65358742e9187d6a9897a27ee4ff431d328e4fd82e1cfcab38c10402afd4b8533ff0f81f570a3b22a0e9e88a4de0c3764317010323e869b1287a942", 0x7b}, {&(0x7f0000002340)="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", 0xfd, 0x2}], 0x200000, &(0x7f0000002580)={[{@nonumtail='nnonumtail=1'}, {@shortname_win95='shortname=win95'}, {@shortname_win95='shortname=win95'}], [{@smackfsroot={'smackfsroot', 0x3d, '\x8c'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@smackfsdef={'smackfsdef', 0x3d, ',selfposix_acl_accessmd5sumlo\\-.trusted[wlan0}'}}, {@fsname={'fsname', 0x3d, '&'}}, {@obj_type={'obj_type'}}, {@fowner_gt={'fowner>', r2}}]})
bind$inet(r1, 0x0, 0x0)
setxattr(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f00000000c0)="1b0000003a001f0fff07f4f9102304000a04f51108030100020100", 0x1b)
prctl$PR_SET_FPEMU(0xa, 0x2)
r4 = socket$packet(0x11, 0x5, 0x300)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$void(r4, 0xc0045c79)
openat$cgroup_int(r3, &(0x7f0000002640)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)

[  281.734329] FAT-fs (loop5): Unrecognized mount option "nnonumtail=1" or missing value
20:21:14 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

20:21:14 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000140)="0a3088b070")
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000180)=0x14)
socket$unix(0x1, 0x5, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, 0x0, 0x1)

20:21:14 executing program 0:
sched_setaffinity(0x0, 0xffffff24, &(0x7f0000000500)=0x208000009)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
io_setup(0x40000100000003, &(0x7f0000000000)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])
r2 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setlease(r0, 0x400, 0x2)
mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x0, 0x4011, r2, 0x0)

20:21:14 executing program 5:
r0 = socket$key(0xf, 0x3, 0x2)
r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000180))
r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0)
stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r3=>0x0, <r4=>0x0})
stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400))
lstat(&(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0))
fstat(r0, &(0x7f0000000580))
lstat(&(0x7f0000000900)='./file0/file0\x00', &(0x7f0000000940))
lstat(&(0x7f00000009c0)='./file1\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
fstat(r1, &(0x7f0000000a80))
getuid()
stat(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
r7 = getegid()
r8 = getgid()
fstat(r1, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
getgroups(0x426d, &(0x7f0000000000)=[r5, r4, r9, 0xffffffffffffffff, 0xee01, <r10=>r7])
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000cc0)={0x0, 0x0, <r11=>0x0}, &(0x7f0000000d00)=0xc)
r12 = getegid()
getresgid(&(0x7f0000000d40), &(0x7f0000000200)=<r13=>0x0, &(0x7f0000000240))
fsetxattr$system_posix_acl(r2, &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000800)=ANY=[@ANYBLOB="02000000010003000000000002000300", @ANYRES32=r3, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=r6, @ANYBLOB="040055b1a1604a828a000000000008000700", @ANYRES32=r7, @ANYBLOB="08000400", @ANYRES32=r8, @ANYBLOB="08000400", @ANYRES32=r9, @ANYBLOB="08000500", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r13, @ANYBLOB="10000700000000002000000000000000"], 0x8c, 0x2)
add_key$user(0x0, 0x0, &(0x7f0000000200), 0x0, 0xfffffffffffffff9)
r14 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0)
r15 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
write(r14, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200)
ioctl$RTC_ALM_SET(r14, 0x40247007, &(0x7f0000000280)={0x2e, 0x0, 0x16, 0x9, 0x8, 0x5, 0x5, 0x0, 0xffffffffffffffff})
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/enforce\x00', 0xc00, 0x0)
ioctl$TIOCSSOFTCAR(r14, 0x541a, &(0x7f0000000100)=0xffffffffffff8000)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r14, 0xc0145401, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x1, 0x8})
sendfile(r14, r15, 0x0, 0x666f)

20:21:14 executing program 3:
socket$inet_udp(0x2, 0x2, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)
syz_emit_ethernet(0x3e, &(0x7f0000000400)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x8, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sched_setscheduler(0x0, 0x0, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)

20:21:14 executing program 3:
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0x1000002ac)
fcntl$setstatus(r0, 0x4, 0x40800)
read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3)

[  282.180178] binder: release 8553:8570 transaction 279 out, still active
[  282.213111] binder: 8604:8606 ioctl c018620b 0 returned -14
20:21:14 executing program 2:
r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0)
getgroups(0x0, 0x0)
r1 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0)
write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200)
sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0)
write$P9_RREAD(r0, &(0x7f0000000340)={0x105, 0x75, 0x2, {0xfa, "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"}}, 0x105)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0xb8, 0x0, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="01a2529794b907e4adc2af0ba666ce2b"}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x200}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x129f}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
perf_event_open(&(0x7f00004e7000)={0x2, 0x70, 0xda, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r1, r2, 0x0, 0x10000)

20:21:14 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, 0x0, 0x1)
socketpair(0xb, 0x0, 0x40004000, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000100))

20:21:14 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  282.282954] binder: 8604:8615 ioctl c0306201 0 returned -14
[  282.367003] binder: 8621:8624 ioctl c018620b 0 returned -14
20:21:14 executing program 1:
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x1)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000100)={@mcast2}, &(0x7f0000000140)=0x14)
ioctl(r1, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, 0x0, 0x1)

20:21:14 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  282.452703] binder: 8621:8629 ioctl c0306201 0 returned -14
[  282.518101] binder: 8633:8635 ioctl c018620b 0 returned -14
20:21:14 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)})

[  282.584378] binder: 8633:8638 ioctl c0306201 0 returned -14
20:21:14 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={<r1=>0x0}, &(0x7f00000001c0)=0xc)
r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8000, 0x0)
perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x3, 0x2, 0x2, 0x81, 0x0, 0xfffffffffffffffd, 0x80000, 0x0, 0x6, 0x5, 0x9, 0x3, 0x3, 0x9, 0x276, 0xff, 0x5, 0x47ab, 0x9, 0xbb, 0x22b, 0x8, 0xfff, 0x80000000, 0x9, 0x0, 0xffff, 0x9, 0x2, 0x110b, 0x100, 0x1, 0xd59, 0x101, 0x10001, 0x8, 0x0, 0xfffffffffffff2f4, 0x2, @perf_bp={&(0x7f00000000c0), 0xe}, 0x4000, 0x3, 0x6, 0x3, 0x9, 0x5, 0x1}, r1, 0xc, r2, 0x3)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000280)={0x3, 0x0, [0x0, 0x0, 0x0]})
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, 0x0, 0x1)

[  282.626836] binder: 8641:8642 ioctl c018620b 0 returned -14
20:21:14 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/rfcomm\x00')
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000340)=0xe8)
sendmsg$nl_route_sched(r1, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@gettclass={0x24, 0x2a, 0x400, 0x70bd26, 0x25dfdbff, {0x0, r2, {0x4, 0xfffb}, {0xffff, 0xd}, {0xb, 0x4}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x11)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, 0x0, 0x1)

20:21:14 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000029000901000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="100001ddffff000000006ed99f04e4d61f92926f82e362732c000436fe5177e71cad6aa6314e7f980dcfb908dd2a830c61320da86321a558fb6e0d9792d9940dd5ff237ca62f4b093d2fadf0fd26fb07c7dc8dd001382ab0fbf18060cee4f4"], 0x24}}, 0x0)
setsockopt(r0, 0x3, 0x3, &(0x7f0000000000)="96e4b6aab8588157dba4c06df8910541cc716e05fabfe2fceac07cdecf07494ff86f9efddcbb8f72e7a7109d8aadfd9430e16bc9d4729d8cef111f6074", 0x3d)
r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000080)=0x1)

20:21:14 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

20:21:14 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
tee(r0, r0, 0x200, 0x8)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x1)
futex(&(0x7f00000000c0), 0x88, 0x0, 0x0, 0x0, 0xfffffffffffffffe)

20:21:14 executing program 5:
r0 = socket$key(0xf, 0x3, 0x2)
r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000180))
r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0)
stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r3=>0x0, <r4=>0x0})
stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400))
lstat(&(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0))
fstat(r0, &(0x7f0000000580))
lstat(&(0x7f0000000900)='./file0/file0\x00', &(0x7f0000000940))
lstat(&(0x7f00000009c0)='./file1\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
fstat(r1, &(0x7f0000000a80))
getuid()
stat(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
r7 = getegid()
r8 = getgid()
fstat(r1, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
getgroups(0x426d, &(0x7f0000000000)=[r5, r4, r9, 0xffffffffffffffff, 0xee01, <r10=>r7])
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000cc0)={0x0, 0x0, <r11=>0x0}, &(0x7f0000000d00)=0xc)
r12 = getegid()
getresgid(&(0x7f0000000d40), &(0x7f0000000200)=<r13=>0x0, &(0x7f0000000240))
fsetxattr$system_posix_acl(r2, &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000800)=ANY=[@ANYBLOB="02000000010003000000000002000300", @ANYRES32=r3, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=r6, @ANYBLOB="040055b1a1604a828a000000000008000700", @ANYRES32=r7, @ANYBLOB="08000400", @ANYRES32=r8, @ANYBLOB="08000400", @ANYRES32=r9, @ANYBLOB="08000500", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r13, @ANYBLOB="10000700000000002000000000000000"], 0x8c, 0x2)
add_key$user(0x0, 0x0, &(0x7f0000000200), 0x0, 0xfffffffffffffff9)
r14 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0)
r15 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
write(r14, &(0x7f0000000600)="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", 0x200)
ioctl$RTC_ALM_SET(r14, 0x40247007, &(0x7f0000000280)={0x2e, 0x0, 0x16, 0x9, 0x8, 0x5, 0x5, 0x0, 0xffffffffffffffff})
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/enforce\x00', 0xc00, 0x0)
ioctl$TIOCSSOFTCAR(r14, 0x541a, &(0x7f0000000100)=0xffffffffffff8000)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r14, 0xc0145401, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x1, 0x8})
sendfile(r14, r15, 0x0, 0x666f)

20:21:15 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
prctl$PR_SVE_GET_VL(0x33, 0xd1f1)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
capget(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000))

20:21:15 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008913, &(0x7f0000000100)="0a3b16659a59cbcb4dfa2d67efaadc591fc909b382c82d70")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, 0x0, 0x1)
getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000140)=""/252, &(0x7f00000000c0)=0xfc)

20:21:15 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00\xacs\x00\x00\x00\x00\x00\xec\x97?\x82\x0f|@\x00', 0x102})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'syz_tun\x00', 0x400})
ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f00000000c0))

20:21:15 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

20:21:15 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x10000000037, &(0x7f0000000040), 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000f14000)={0xa, 0x4e21}, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x1)
ioctl$TIOCSBRK(r1, 0x5427)
r2 = fcntl$dupfd(r0, 0x406, r0)
recvfrom$inet(r2, &(0x7f0000000100)=""/52, 0x9e, 0x20, 0x0, 0xfffffffffffffeca)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000080))
rt_sigprocmask(0x2, &(0x7f00000000c0)={0x70}, &(0x7f0000000140), 0x8)

[  283.168597] capability: warning: `syz-executor.0' uses deprecated v2 capabilities in a way that may be insecure
20:21:15 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)})

20:21:15 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

20:21:15 executing program 0:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14)
accept4(r0, &(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @multicast1}}, &(0x7f0000000180)=0x80, 0x80000)
clone(0x4007002c100, 0x0, 0x0, 0x0, 0x0)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
getrlimit(0x6, &(0x7f0000000040))

20:21:15 executing program 1:
ioctl(0xffffffffffffffff, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080)=0x2, 0x8c, 0x1, 0x0, 0x0, 0xfffffffffffffffe)
r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x101000, 0x0)
r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x5, 0x20, 0x1, r1})

20:21:15 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x3)
write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="232120bb9a361dd81d4c57490dd7f72ad3"], 0x152)
r2 = open(&(0x7f00000003c0)='./file0\x00', 0x141042, 0x0)
lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000240)='trusted.overlay.origin\x00', 0x0, 0x0, 0x3)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x20000280, 0x200002b0, 0x200002e0], 0x0, &(0x7f0000000180), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108)
write$binfmt_elf64(r2, &(0x7f0000000480)=ANY=[], 0x2e7)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r2, &(0x7f0000000040), 0xa198)
clone(0x10002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e21, @local}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @loopback}, 0x80, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)='eql\x00', 0x9, 0x8, 0x1ee1})
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000380)=<r3=>0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={r3, r0, 0x0, 0x224, 0x0}, 0x30)
getsockopt$inet6_buf(r2, 0x29, 0xf3, &(0x7f0000000340)=""/30, &(0x7f0000000440)=0x1e)

20:21:15 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x10000, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)={0x13, 0x65, 0xffff, 0x2, 0x6, '9P2000'}, 0x13)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r2 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00')
ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x100, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000000c0)={<r4=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r4})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f)

20:21:15 executing program 0:
syz_genetlink_get_family_id$fou(0x0)
waitid(0x0, 0x0, 0x0, 0x0, 0x0)
openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$net_dm(0x0)
sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, 0x0, 0x4000040)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, 0x0)
io_setup(0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xabc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0x2)
r2 = dup(r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000280))
stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, <r3=>0x0, <r4=>0x0})
lchown(&(0x7f00000001c0)='./bus\x00', 0x0, r4)
r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000240), 0x4)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x11)
sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r6 = open(&(0x7f0000000100)='./file0\x00', 0x20141042, 0x1000000000000)
fchownat(r2, &(0x7f0000000440)='./file0\x00', r3, r4, 0x1100)
prctl$PR_GET_KEEPCAPS(0x7)
sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140128bd703f770f5f0e7e401c000800030002000000"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000)
ftruncate(r6, 0x80080)
ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f0000000500)={0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e20, @multicast1}, 0x8, 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000400)='bcsf0\x00', 0x1, 0xf4f, 0x30a})
sendfile(r2, r6, 0x0, 0x2008000fffffffe)

[  283.430179] binder: release 8641:8646 transaction 291 out, still active
[  283.469018] binder: 8688:8698 ioctl c018620b 0 returned -14
20:21:15 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000140)="0a3d8a060053d2cf62463160ca005838324a1db8eba567a353c2a241dbfd1fd4fb773245f7ad8887ea570db1b888b19531d738caf91efde66a4045656d1699145b8cc365f0a3e7aee4176f9333c29df0e336408a77c39813d9c997dbb4")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, 0x0, 0x1)

20:21:15 executing program 3:
r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000280)='cpuacct.usage_all\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0x2, @loopback, 0x4}, 0x1c)
write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x7f, 0x1}, 0x7)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x3, @remote, 0x3}, 0x1c)
connect$inet6(r2, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev}}, 0x1c)
sendmmsg(r2, &(0x7f0000000240), 0x5c3, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000001c0)={0x0, @speck128, 0x96acc64a7caaa380, "b34ce71bf7d709e0"})
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0207000902000000000000000000"], 0xe}}, 0x0)

20:21:15 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x13, 0x5d}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8", 0x0, 0x1000}, 0x28)
getgroups(0xfffffffffffffe78, 0x0)

20:21:15 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x3)
mkdir(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x40)
listxattr(&(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0)
r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x40011, r1, 0x1b)

20:21:15 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x4, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0x108)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0)
socketpair(0xb, 0x5, 0x2, &(0x7f0000000200))
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r1, &(0x7f0000000100), 0x2df, 0x80000000000)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
write$P9_RSYMLINK(r1, &(0x7f0000000140)={0x14, 0x11, 0x2, {0x4, 0x0, 0x6}}, 0x14)

20:21:16 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)})

20:21:16 executing program 1:
ioctl(0xffffffffffffffff, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000b80)=""/249)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, 0x0, 0x1)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000002c0)={0x2, {{0x2, 0x4e24, @broadcast}}}, 0x88)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000640)=<r2=>0x0)
getresuid(&(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)=<r3=>0x0)
r4 = getgid()
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000740)=<r5=>0x0)
getxattr(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000a40)=@known='com.apple.system.Security\x00', &(0x7f0000000a80)=""/228, 0xe4)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000780)={{{@in, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000880)=0xe8)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
sendmsg$unix(r1, &(0x7f0000000a00)={&(0x7f0000000380)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000400)="1bb59e6203ed53a0e9c59cdf7209f0fcb60ed15fcb2f33c18b02f60c95a8088f830b64609fafda39b6090d6032eccc9310104a0846ab7cb0a740070e1d23353ea151423dd5616fdcded620aa1d46873e8751abd937a826e018ecc7c67a6d163f9d59554729ce7d342a9a34d3a25e2dfe4d115bbb2a4c11df84f572079a4049b81d591d46d8b41a06767fb11cccabfcdeced67d561f77d914c8f841d21e573f3dd2fbc3a7c6b3162e", 0xa8}, {&(0x7f00000004c0)="2be759b5465687b0c89fc81bb50802d799580b265516ffcf0eadf1a50b973665470d1dc2615e3692fb6c136a8ae5f1efe1d55ad95558c625512b6ca0223d06e95304609594fd1b06a3466ff1808ada119bd87c4507db246ee2c80e10fb971a4be92df5e84af35c1a21e57c88273f2251f1c86cba0308766619f16797470bd27af52ef8849cb9dd260c3549364b15ef1b39d11811c9812ac8", 0x98}, {&(0x7f00000000c0)}, {&(0x7f0000000580)="6773560a68155714ac582c78e607d9f0d56439c0967aa1153a6ed4e651f78c8a872d0f88ba3453c9c169a919f831c4660f991cb62b76c885e5abdb8937c22041d510c36864a4a1f04fa43afec45981a9c942535ea8a81bb3ca4db09c162462cd51a9d704f6900a36f0f8aa1113f87b9cc7a6ac86731d1a37fa6f5eadb737aee8ca9fc87d8e4cb0ccda9be2", 0x8b}], 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0000000009000000000000000100e8e1f46cabd6", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00'], 0x68, 0x40000}, 0x20000000)

20:21:16 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400)
r2 = perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r2)

20:21:16 executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x9}, 0x2c)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x28, &(0x7f0000000040)={0x0, <r1=>0x0}}, 0x10)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r1, 0xc935}, 0xc)
bpf$MAP_CREATE(0x2, &(0x7f00000000c0)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000700)={r0, &(0x7f00000006c0)}, 0x10)

20:21:16 executing program 0:
syz_genetlink_get_family_id$fou(0x0)
waitid(0x0, 0x0, 0x0, 0x0, 0x0)
openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$net_dm(0x0)
sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, 0x0, 0x4000040)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, 0x0)
io_setup(0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xabc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0x2)
r2 = dup(r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000280))
stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, <r3=>0x0, <r4=>0x0})
lchown(&(0x7f00000001c0)='./bus\x00', 0x0, r4)
r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000240), 0x4)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x11)
sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r6 = open(&(0x7f0000000100)='./file0\x00', 0x20141042, 0x1000000000000)
fchownat(r2, &(0x7f0000000440)='./file0\x00', r3, r4, 0x1100)
prctl$PR_GET_KEEPCAPS(0x7)
sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140128bd703f770f5f0e7e401c000800030002000000"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000)
ftruncate(r6, 0x80080)
ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f0000000500)={0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e20, @multicast1}, 0x8, 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000400)='bcsf0\x00', 0x1, 0xf4f, 0x30a})
sendfile(r2, r6, 0x0, 0x2008000fffffffe)

20:21:16 executing program 2:
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil)
mmap(&(0x7f00008da000/0x1000)=nil, 0x1000, 0x0, 0xb4972, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000002000/0x4000)=nil)
r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x300, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040080}, 0x4c000)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x4002)
io_setup(0x3, &(0x7f0000000080)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}])
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SVE_SET_VL(0x32, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[  284.259562] binder: release 8688:8712 transaction 294 out, still active
20:21:16 executing program 3:
r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x0, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
vmsplice(r2, &(0x7f0000001500)=[{&(0x7f00000013c0), 0xfffffd90}], 0x1, 0x0)
bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x53)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
splice(r1, 0x0, r3, 0x0, 0x10005, 0x0)

[  284.311284] binder: 8744:8752 ioctl c018620b 0 returned -14
20:21:16 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000180)='ia\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00')
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, 0x0, 0x1)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')

20:21:16 executing program 3:
r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x0, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
vmsplice(r2, &(0x7f0000001500)=[{&(0x7f00000013c0), 0xfffffd90}], 0x1, 0x0)
bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x53)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
splice(r1, 0x0, r3, 0x0, 0x10005, 0x0)

20:21:16 executing program 5:
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
socket$key(0xf, 0x3, 0x2)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff)
write$nbd(r1, &(0x7f0000000100)={0x67446698, 0x1, 0x2, 0x1, 0x3, "a4211dd218a1d12fa271c8d8163c116b229aaf2379b2d75353ac6f739cc56ad4f0bab55c1d2ab75d795e7edb90de9c40eea9d864d7f20f219dc6807abda0d10b85eceae5897ed4d459cd3678748d593b8ecd20ee934a4f8adb2d37073bb8f409464763132bbaf2aa0be7273e2bf6641310c0a312a6c2095f6de742f4f93aed296b52157b70a0462d2bdd725d4a2586d1b99671165d0932194cce22229d6f33a7d3eee0cd29134d338f0e8f401f5cbb464fa2e786a86ea7449b21d5cc8324820cc4e455b598e20dc6ed663dc4b5ab8b40440f05e762980f57771503045d83876b4f95b271eec6fd84daf2eaac25d6892da16f742a35"}, 0x105)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x05\x00', 0x4001})
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x2, [@multicast1, @empty]}, 0x18)

20:21:16 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
link(0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe)
getgroups(0x5, &(0x7f0000000140)=[0xee00, 0x0, 0xffffffffffffffff, <r1=>0xee00, 0xee01])
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in6, @in=@loopback}}, {{@in=@initdev}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000000080)=0xe8)
chown(&(0x7f00000003c0)='./file0\x00', r2, r1)
getegid()
ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x89fd, &(0x7f0000000180)="b59041e43cba0399d0b5d592456ddc9e2734d5e10394b9799b25d15c3e349c0d63395bf0843a92010c4f82db95ac289ac4")
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)

20:21:16 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
futex(&(0x7f00000000c0)=0x2, 0x80, 0x2, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140), 0x2)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
pipe2(&(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
ioctl$TIOCMGET(r1, 0x5415, &(0x7f00000001c0))
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000240)='trusted.overlay.redirect\x00', &(0x7f0000000280)='./file0\x00', 0x8, 0x3)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, 0x0, 0x1)

20:21:17 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, &(0x7f00000007c0)})

20:21:17 executing program 5:
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
socket$key(0xf, 0x3, 0x2)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff)
write$nbd(r1, &(0x7f0000000100)={0x67446698, 0x1, 0x2, 0x1, 0x3, "a4211dd218a1d12fa271c8d8163c116b229aaf2379b2d75353ac6f739cc56ad4f0bab55c1d2ab75d795e7edb90de9c40eea9d864d7f20f219dc6807abda0d10b85eceae5897ed4d459cd3678748d593b8ecd20ee934a4f8adb2d37073bb8f409464763132bbaf2aa0be7273e2bf6641310c0a312a6c2095f6de742f4f93aed296b52157b70a0462d2bdd725d4a2586d1b99671165d0932194cce22229d6f33a7d3eee0cd29134d338f0e8f401f5cbb464fa2e786a86ea7449b21d5cc8324820cc4e455b598e20dc6ed663dc4b5ab8b40440f05e762980f57771503045d83876b4f95b271eec6fd84daf2eaac25d6892da16f742a35"}, 0x105)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x05\x00', 0x4001})
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x2, [@multicast1, @empty]}, 0x18)

20:21:17 executing program 3:
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
socket$key(0xf, 0x3, 0x2)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff)
write$nbd(r1, &(0x7f0000000100)={0x67446698, 0x1, 0x2, 0x1, 0x3, "a4211dd218a1d12fa271c8d8163c116b229aaf2379b2d75353ac6f739cc56ad4f0bab55c1d2ab75d795e7edb90de9c40eea9d864d7f20f219dc6807abda0d10b85eceae5897ed4d459cd3678748d593b8ecd20ee934a4f8adb2d37073bb8f409464763132bbaf2aa0be7273e2bf6641310c0a312a6c2095f6de742f4f93aed296b52157b70a0462d2bdd725d4a2586d1b99671165d0932194cce22229d6f33a7d3eee0cd29134d338f0e8f401f5cbb464fa2e786a86ea7449b21d5cc8324820cc4e455b598e20dc6ed663dc4b5ab8b40440f05e762980f57771503045d83876b4f95b271eec6fd84daf2eaac25d6892da16f742a35"}, 0x105)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x05\x00', 0x4001})
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x2, [@multicast1, @empty]}, 0x18)

20:21:17 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvfrom$unix(r1, &(0x7f00000000c0)=""/254, 0xfe, 0x2000, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f000039a000)=[{0x3, 0x0, 0x0, 0x8}, {0x6}]}, 0x10)
sendmmsg(r0, &(0x7f0000003040), 0x3e1, 0x0)

[  285.105535] binder: release 8744:8757 transaction 297 out, still active
[  285.142248] binder: 8784:8788 ioctl c018620b 0 returned -14
20:21:17 executing program 5:
r0 = accept4(0xffffffffffffff9c, &(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000000100)=0x80, 0x80800)
accept4$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000180)=0x1c, 0x800)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r2 = socket$inet6(0xa, 0x80001, 0x4000000000000)
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000d4b000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x210)
dup2(r1, r2)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x341000, 0x0)
clock_nanosleep(0x5, 0x1, &(0x7f00000001c0)={0x0, 0x1c9c380}, &(0x7f0000000200))

20:21:17 executing program 2:
r0 = timerfd_create(0x0, 0x0)
readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/14, 0x34c}], 0x1)
timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x80000003, 0x8031, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000100)=0x1, 0x8d, 0x1, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)=0x2, 0x0)
clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f00000cf000/0x1000)=nil, &(0x7f00006cb000/0x2000)=nil, &(0x7f0000205000/0x4000)=nil, &(0x7f0000500000/0x4000)=nil, &(0x7f00005e9000/0x2000)=nil, &(0x7f000062a000/0x2000)=nil, &(0x7f0000706000/0x3000)=nil, &(0x7f000045d000/0x4000)=nil, &(0x7f000020f000/0x4000)=nil, &(0x7f0000062000/0x600000)=nil, &(0x7f0000714000/0x4000)=nil, 0x0}, 0x68)
splice(r0, &(0x7f0000000080), r0, &(0x7f00000000c0), 0x2, 0x8)

20:21:17 executing program 3:
clone(0x3102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x2000000000023)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x14})
ptrace$cont(0xffffffffffffffff, r0, 0x3, 0x7)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x0, 0x0)

20:21:17 executing program 5:
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfffffeda)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)

20:21:17 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000000000000000010000000100000045e9fe59718fa469a6b9f84b42962e66298628d3e26fd705e95ab97fccc5721bb151121e438913a27da072b9487c38eabbd077f9607dee8102800e8ad5ca43a5317a9cfd2b87bd3f77094c3c438a88040d3b49cffb289bab6ec6dfdaea8384abfc22698a5ac39dc20bc11f8f88512773961efd3d6f80ced29f30465758a6883312e87819a06ac3b73ac8cb4aa2ebac7f7ece903303af8fa388bd08c2bedcb05a0d"], 0x10}}], 0x1, 0x40)

20:21:17 executing program 5:
r0 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x2, 0x88)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x3, 0xb52c, 0x7ca, 0x5, 0x9}, 0x14)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x11)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x4084, 0x0)
ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000400)='bridge_slave_1\x00')
getsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000300)=""/238, &(0x7f0000000240)=0xee)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x3)
geteuid()
write$binfmt_script(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB='#! ./file0'], 0xa)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000200)={0xffffffffffffffff, 0x3, 0x6, 0x4, 0x7fffffff}, 0x14)
close(r2)
clone(0x10002102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff)
ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$TCGETA(r1, 0x5405, &(0x7f0000000280))

20:21:17 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x12, 0x4, 0x8, 0xfffffffffffffffd}, 0x2c)

20:21:17 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

20:21:17 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, &(0x7f00000007c0)})

20:21:17 executing program 5:
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="b5037afa00513525ff077b6888e244553ce1db85125ce7a310"], 0x19)
fallocate(r1, 0x400000, 0x40000, 0xfff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x0, 0x0, 0x10fffe)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, r1, 0x1, 0x8, 0x20000, 0x1f})
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
write$binfmt_elf32(r1, 0x0, 0x0)

20:21:17 executing program 3:
lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2)
socket$netlink(0x10, 0x3, 0x1f)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000003c0)={0x1, &(0x7f0000000380)=[{0x7fff}]})

[  285.940127] binder: release 8784:8790 transaction 300 out, still active
[  285.960607] binder: 8829:8831 ioctl c018620b 0 returned -14
20:21:17 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvfrom$unix(r1, &(0x7f00000000c0)=""/254, 0xfe, 0x2000, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f000039a000)=[{0x3, 0x0, 0x0, 0x8}, {0x6}]}, 0x10)
sendmmsg(r0, &(0x7f0000003040), 0x3e1, 0x0)

20:21:17 executing program 2:
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c)
r2 = socket$inet(0x2, 0x3, 0xff)
ioctl(r1, 0x80, &(0x7f0000000080)="052d9e46b1592f7e11f3822c74bf890c4ecd7fd074c37126e030502fd83d89dca063b9c549c900ea93bb5ba34af22c758bbbdcb2114799d67545ead5e44aa14e956246631dd380152b0cc71958e0e8e411f0e5ca9e7f996cb1ac262bb179cf545878794cc38cce6d9d6c750a261544b2ad0be814d206f6e81ad17efe053f86d58dc41aba69b30d8d8f1b1357c33e69cc896786e7c78681bc43a57eb51d3c")
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10)
splice(r0, 0x0, r2, 0x0, 0x110002, 0x0)

20:21:17 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
clock_gettime(0x0, &(0x7f0000000100)={<r1=>0x0, <r2=>0x0})
futex(&(0x7f00000000c0)=0x2, 0x9, 0x1, &(0x7f0000000140)={r1, r2+30000000}, &(0x7f0000000180)=0x2, 0x2)
ioctl(r0, 0x0, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, 0x0, 0x1)
lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
getresgid(&(0x7f0000000540), &(0x7f0000000500)=<r5=>0x0, &(0x7f00000005c0))
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, <r6=>0x0}, &(0x7f0000000440)=0xc)
setgroups(0x5, &(0x7f0000000480)=[0x0, r3, r4, r5, r6])

20:21:17 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000140)={0x5, 0x200, 0xfffffffffffffeff, 0x7, 0x9})
ioctl(r0, 0x1000008915, &(0x7f00000000c0)="0acc1f123c123f3188b070")
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000340)=0x1950, 0x4)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r2)
sendto$inet6(r2, 0x0, 0x0, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000001c0)=@req={0x28, &(0x7f0000000180)={'syzkaller1\x00', @ifru_mtu=0x80}})
sendto$inet6(r2, &(0x7f0000000000)="cc", 0x1, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000004840)=[{{0x0, 0x42ab9da01028f079, 0x0}}], 0x4000197, 0x2000, 0x0)

20:21:17 executing program 5:
get_thread_area(&(0x7f0000000000)={0xfce, 0x20000800, 0x0, 0xffffffffffffff80, 0x0, 0x2, 0x9, 0x3, 0x4, 0x5b})
keyctl$link(0x8, 0x0, 0x0)

20:21:17 executing program 5:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpgid(0x0)
r1 = syz_open_procfs(r0, &(0x7f00000000c0)='net/protocols\x00')
preadv(r1, &(0x7f0000000540)=[{&(0x7f0000000000)=""/140}, {&(0x7f00000001c0)=""/69}, {&(0x7f0000000240)=""/215}, {&(0x7f0000000340)=""/141}, {&(0x7f0000000400)=""/145}], 0x1000000000000258, 0x0)

20:21:17 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000140)={@multicast2, @loopback}, 0xc)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000000)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev}}}, 0x108)
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000180)='trusted.overlay.nlink\x00', &(0x7f00000001c0)={'U-', 0x9}, 0x28, 0x0)

20:21:17 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sysinfo(&(0x7f0000000100)=""/3)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000000c0))
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, 0x0, 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x3, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0xffff, 0x100000001, 0x3, 0x6}, {0x7f, 0x101, 0x3, 0x7fff}]})

20:21:18 executing program 3:
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
io_setup(0x6, &(0x7f0000000040)=<r0=>0x0)
io_submit(r0, 0x1, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0xffffff5e}])

20:21:18 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, &(0x7f00000007c0)})

20:21:18 executing program 5:
r0 = socket(0x10, 0x4, 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000000000)=""/58, &(0x7f00000002c0)=0x3a)

20:21:18 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, 0x0, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.stat\x00', 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r1, &(0x7f0000000240)="06ef4fad881ba2dd2be4da52466f11883af6966671e67342f841bfce6cd7c1c4506e0a6b1be4e2cc1363cee0995e802251659752c4d19a1d274b884541630697c442799a42839772fab78eb0708f981806ac0b7e27b81fd11488c8449ff683102991f532b7fae3e783508432eb2e0c0086c91a3efbcae0503e98106fe1ad5e6e343f9fd5ab56840f8e83249b5add6d9c320eacc7fdbdfa8c095ec77308a9752ba86f9983a56e9f0eea227877912ba62c036b01a679d0e695e81dc49246e7884537e3051638a4e8d5de02593d5c312931cd2d11d68e454d912021a27cf5d4340955c73ecaf545bad7402176e105d842f35b6a4528c08ed829dbf13da25d3a10e3caaf15b41e4968998e4ea253244f32203b922771261663c6f3fc7e235efae17bb4cdac3111307d30e65313f9d6331e2ace398f7e021d61e1cd845750ead9fa2704644ff28aa2bed3a2307b8fa60f3305eec8b98144a412b4a6a07889a4de9394400f703bbabbc795f01a7711b9b37a177fb2c4628b034f6f0006a524da01eadf5c188a14698d2acef1794de2491e32d2a5d836c200f644a68aa43bf68ed48b1e183cbe0a78b1a32e64e3108f79a819e26073804b72abd6e3ff92bb4c0f6cb3abb92b40f57e1bc3aba9d99b42d5439c23ed4de591b7d505062be8791df8985f2cc7526868281e8595680acfe361102075bbf77840bd2dd22fa815c0657701cdfae5a6ca4a8764d6693897f5739872c20d4ea7e3a0896f98ea5e09f342329ebd310f09c8798cd06911f9a3e9cf98e177d8cb8c3bec037f0f55c29a714d98839b56e37c5eafb6f3a188aa1047ab7a9c364a993429d564e7e2785dd110af8c98e63af43d75419de7823d9881f3bef8b566ce8bd776e2212efdbfd7afe8e4e97a77ca868a1ee0476dd063d2cee63e825a233b44f46a4fe603ab521979bf8e454fb6f7151f72784698693e5e1854ac8626ec92ca24bbe6c29782b8b62d28b086fdb9437355a5384556935a3383c4a67b1b6c3975d4693bbf5e6c0244ba487cef33b1d0638c2291e73ce593894f83d4fa6635913b731a662623aa8ef32f7dd88cd73bc9e5557a1eaf5d3cbc52208c52911e2ed065e64d431b6dfabe86fc293c5a21b7faf153bd1c44714477edb8474f745bcf8a5e21df57bfda618a339c1fdfa3cceacca009563031be565076397c7726da76f6c028a51f3e8e1d7c7ae8b3a5e68b7f01faaee8471fcc8170c7ff2434febeb822cc1cae9b5800ad763a17a552b9d9301b9b380887129e5ee412eaa9bf1707a54504150921fda84e9ee72a1fd0187d8228a093e7f5f2a4d74d829409659e7954a4bfcea1b71c584c10dfd6a1f88a1aba2ca13a5f75a18a2d73d22e3ee263011538f538b8303c95c59360d9a89fa766fbc95100e8d3c8ea2c5e7c919c929a220657a8994f23872be36f37c44611a886844ecef97e9217c9510f7204bff780a6b99c3d65a0edc986413b4e0d6d9cbf44c9e8fba6dccc5fde19a397213ffe80f644a447d6e475f14977705f66d540e8d48797ddc7890875446fca94027f81efc442a5c4194a145d03edfe65379ef379f3d55c9d8b722d8414f85613705b4c17a898cea8dd4e71b7b7b7e07aba4257d3bcf0c82b95953a6cc112a71923e63d3330b2fca8d7240c0721f3207e84384143b25d88c262c5bf159f31f9ae2ed5996d4fc81b5cc9694bddd41d341f924496fe85b349e135103e9e9e96e591d39499aef1e94603171c81a39f4a0423bb13285ddbcb9bc31418ff9e0cf8986246172bfacaa13fbdbc50cfd7733c46d73b20e2e150191b771b1195bbf16a41878c71cd3895184e7289df412a9a81083c9ab546f43ae92df1e29ee5445de075bf13b3e8b72c7e3ebc65e19b2acce15e5de09e2e3232c7a7306a67ccb2d7dd01bfe33ad0a61e66c30af72eaf2b20d263fa12db0c582b8d27fa3e37fa7299bf3f1ef28a3012a8c43b43eacf8d9b7ed37e533cacb56dcea28a2166fa93e3fb2fa499c20ab6b2a3474fe90aec5415ce4c454339028a0a1dfd5206fe0755ca5d726a59fafc5e1cb9a91eb06782034e331babe162d4bb25ec50c2ca441088185e45e43443c74254b7a780668fd1683f4c14d0fc36254e73df0d857e0c9f2e1f02835defcc7b2a2f0221cfb1cd3616a8edaadfc2811730a87cf242d3a4b14274aec1bfdbe1a0be5b36f4d8ea18d22ded08014a172884fce7f3c2b988d2ff81cb570d54367b7c19470973df65aa13da7b09f0404e68b25a4eb2f5cf3ea539aa85572a5deff972385039896f407f8eeff8954615c606f5e3562a6c34bc898a45797c304567ba0a5bb212c7ca8c9a2c0180b3d50e4c8c8e4975db90c0e11fb62e6cb4226ba0923b2cacb172ea6006dcecdc5b6c8e0b6e02f38b3a3a2417731362998498e148c3baf24f4cc3c26c50136559b85cd8a1f8ee7552f11646a923940618478a2f1b3caeeb64bebaf9a019b6c740cf3fc09e769a9aff447fd215fcca3d2a51f32df4e374597f25dbb55ca218a650132201e1280ebedd8d8ae332768c4bb5d9e6590e981b847f70984f0b3cf08f1791e3e0511f779f440f80d50efa5770cc84ed921eacc233edd139c6d1a553a221155c30104aa3d9f413a536f37da9b2e673a153876693ad25f0f2b38c8f74101ec29d029810db54896a55018a52154ae063d6cda137d32d786e79dfbe9ccab4dffb846ce01d00fe969b3fb9ad2a80705e6129952100744675f31a4d26c3bae1fb4e13804b3ec16e5e7359a355c8d28ec3ba5c2b72463fa911f1fd441c45223e836ce892f323cf131ddc73be01a34b85ff19f87aca2c29001d172d593179b13085ebc5dd6cc8f21bba0748dc5f9aac9ac36f74d883a92d4d3e469468dd0251df0b76973667f76e7e777c78e1b463f8e304c27d7cfcde862a7887ac3b4bb57adb7fd085c8bbe3534171d03363941bc508ed5c7517241962cc56eb8fe665df6397bde054eac944fa3612fb56b7d271d473a4a4734cfc8c74d2dc15e356032993519f915364d49e963c291732c6583ed1e8bfe08179e339cf378b7d433f1a5d7f0252e1adeef62633bb203a2802b1bd1e960ced50bbe75d364808097aa563c104fb7a4fa277fed45ac3f96ac359f25f6d403825ab037abe7712a7e8e39a23e3b7ca2409cf2331672995d47d25bacea78b9cbbb4b1504dfd7f8225e5a700582da4cb39d427450759759edcaed70e79e8a71ee4a7576670a8f59ecd2df1a9e23b8789f62ffe8047859cb888786babdcf065ea64a458dff921e9bdcb3a3ee432c7c8519c609a1f75ea54d91c8ece565fe0bb92220900a10469cfb8ff2cc9d37c4ae305d82d1d138ebfb46111d5bea5e32f1c8de8b00e49cd3d9d795cedb0b25aeb182486c7a654740b4a526067f915cd9075482b86eb62fcf02316adc2673e0248cde879a2c0d2985bd813460b53513a71cd4c864074cb9ab959218c5a00f9a705603fac691d60058a372a5bad3f6e220d73eb6f1ca229de928180b4eb1e4fe867708c02d62744135613007cfcea6dec382e972dfbd7705a0594a2034d5ce457995b6b973f20916d4dfc151e659f552bd99d032d626a49457b9fea92f7fbfed233caa26cf828a2a53116531126d14771b4ca4a44525b70c6862fada986bd87f0ff2fe9574c364c02c934079a3ef83f887d4cc76b95db654b9eeb71f04ae800cf1010417ee8e76c69f68589bf4808296e29e5a7754d05a0bcbb0cf2a7a53e9ba8340e280480e775403bbc14f6d4cf641653ce1ce70444a333fb36c3d90ca345cb486cf519b14ea745503194e6e125fb5ac851bb45eebae5ecfb272efed6f2b8309e098a2cdb2b3e1095ef6b1ce211d26b7c7905e41fb51aed7a5d13403e044398b65f137dc28077c875cfab98e7b1768dba4f2f6c834f0b7de28d9e7ec03c04ca6c3b8179dbe9cd968dc0b5dc2b500ea1752f6858e7fb08efa396051e990a021630d51752cfda681da03f98555651ee5e407403c818fba2611d44be3cf4c1f52b287fee5413758dd7f01b032acf418b2f7b9bea9e099c834a814c5aed423f516d2d49869c92dae2bec13dc820c85961e9762ff5e9d54f58145e9552b7b1f1eb65f5b3dbd673cd4d265973956a12501a8c0e1f73cc5d5fe1972af9874f35b9012cdfa56b7c8223b98e87d45252a862022686da8fff19525311140831c0b0b4a2463dcd2ae8620248a4a15d3804bc7bd5e84d2cf23b3a24f87cad0e4b59cd956cbe83a1ffcd8a74292538ccbe7b3954d2d40eff8a9968257c67eb8b7c6dff25b4bf5ba3c9d22d56e86656f6d4aad111777598b8c2c2eea78486f0af4d0fdd25f81402b5dcd17548019326cdf1b35e072c0f8a1b4433f4f8b8fa9e20f48474a63a55cecc76daf05c0ef8751dc0bb2662ae2d59c0ade92b84d0926c921f5187b398248be63329be9b09d146976abf8c976a2b0a3076e807dc205e5eacd0bf1cc62b95b3199bee1178f5892bb2a77988f863a02f40f72e32e393d355061d1b279a4019bbf876bf03a961abcc3293c64874427e78a7100058e86f5779f9c59d3ba8311336c85978e686bc4a969ec879c9d922cb2be44277ee03bf03b19304dd4258240af775317223b0653438c205202832abbf8d9f8903112ea7255bfba6ca1e7f1f1a4004183ce8106acc997f725d92fa7f7d1116e8b78c1242e38d85f4aa9d8a42157f23e59ded2db719755bcc2f21b090748d0799fb8690357bf1390e30b7a1a0e36f9d9907b46cc12dc94ab9db36eb34f4a5fd39f929fbdaf186149b80f72a2d1a69da3a88d3f91b5e53216e4aa195550e54f33e1a25c78aad684cb503c98fae9a00228245c370f9c19df70126100b246b09b6e2b3e9b4da12cde9ef9c3b7d238c1f1e940aa4bfbb84ef5931ec5cb3c9bcb5a5967f5b87f3e3f72720d50699e26fc7ff44a3db3aa6319541198df69c91a8422cb12ec73e9a1bdfe955796bb43e187e07bbb6443b29187746fe172d5de532296a418ed10448902ec0123ad9295e8b64f81c0b27cabc2ef9ae4e4e2d21a5a6f5d003328f3b217fd5ca4022123440bc4a3bfe4bbad5b7e440c689b12673728f41715f20c2e6a96527c0b499c58e6e14158cd4246fb0b66e48afb448858a75aee2fa36022c30d3acb946b7b800ebaa8f976ed06650126230e75abe6d926fa0c6d32b9c292f577f0b0da0314b709aaa57c330c5b463265ab07b5aff130bf69f39b64456773e7b6b98e2927c75cc4a60f3388090d210f8ac4f308ea416ffe9ab7d4dcc07c08e745228160eabb8a0f4d754a3e8cf551a65583a7a61e6ac6d70c4ec9f3de84b7ffc9804dd65013654213244c2de1ac3a7bcc8c5cd8662de71cf546e587535ee9ad80f7f1f956126b26e77a02a9f29443733af14c3c1875aaf1ba7d73274f974f497223627be4b89f75e34dc6e4e48eab84b85b71e9d4409fc35006ba18db2ec4e79d8687745a3cc0a4a7d690472e382d0281ae2282ce1ddcc704dfbb49e90e55217d51169ef79d2c7a4a4b6b2fb361f1297fc6d2c2ca44ab27f68bca57f265c7993f6f0b5dc045cf7d48420eab8c98956e770f566d9d053fb010e375f5d2b4c4599a24ce9898ab7b4abd90ed6504c0ae3ffa934e29b6db260003f05f17179bacdeaea3363cb0f9b412c0414578755dab9a9d2a54a85594d4ef5032b48e103f41ca413c1863065b03b1c0bc50f2283abbb78be36fbde8b1241798c3cfba492047781cf96aebd239d5b955b748ced80d9ae565cfed85081bdd97c2b2c46c11e85cb2a16a63be3978ef4918b6fd67617d5af9ac8b778414c41268807", &(0x7f0000000100)=""/32}, 0x18)

[  286.761464] binder: release 8829:8838 transaction 303 out, still active
[  286.792164] binder: 8879:8881 ioctl c018620b 0 returned -14
20:21:18 executing program 0:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_tables_targets\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003)
timerfd_gettime(r0, &(0x7f0000000000))

20:21:18 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="480000001400190a20ffff7f0000000002113b850e1de0974881000000fe58a2bc4a03049164643e89000200de213ee23ffbf510040041feff5aff2b000000000000070000000000", 0x48}], 0x1)
write$P9_RLOCK(0xffffffffffffffff, 0x0, 0x0)

20:21:18 executing program 3:
r0 = socket$packet(0x11, 0x2, 0x300)
getsockname(r0, &(0x7f0000000040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000100)=0x80)
r1 = socket$inet6(0xa, 0x803, 0x3)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000000)={@ipv4, 0x0, r2})

20:21:18 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x15\x155\xbay\x89OqL\x0eu\xa1J\xcb\x9f)j\xba8>\x15<\x98\x84<?\t\xccx\xc0\xf5\xde\')|N\x03\x18\x1b@\xfdC.\xd6\xd2\x13T\x1e\xbb\xba\x90\xce\x94(\xabDL\xa1d\xa8\t\xda', 0x4)
syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x1, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0xfffffffffffffe00}, 0x0, 0x0}, 0x0, 0x8, &(0x7f00005eaff8))
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)

20:21:18 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f00000000c0), 0x4)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, 0x0, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$netlink(0x10, 0x3, 0xf)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80860000}, 0xc, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r3, @ANYBLOB="20002cbd7000fcdbdf2503000000600005002c000200080004000000000008000100040000000800040000f0ffff080004000700000008000300050000000c00020008000300ffffffff1c0002000800010002000000080002000104000008000100180000000800010075647000240009000800010001010000080001000700000008000200060000000800010000000000200002000400040008000100070000000400040008000200f1968d27040004005c00050008000100696200000c00020008000100110000002c000200080004000700000008000200010000000800020000feffff080004000600000008000300050000000800010069620000080001006962000008000900756470008800050034000200080001000100000008000400ff0f0000080004001f000000080003006b360000080001000b00000008000300ff0f000008000100657468002c000200080002000000000008000200030000000800010018000000080001000d00000008000200000000001c000200080001000e000000080001001a00000008000400020000001c000100180001006574683a76657468315f746f5f7465616d000000100001000c00010069623a6e723000002ab5599ca75e363647448de65734cb34ef144e8b1b6a30956e67b820a6c8f766d15818b6dd19b0170a32ddfee5ebc16ed3cb210a7e8e4d306a7d0f8f7d9b84a88bb91af094c86ee8275ba69c88c7f20fa1ad1edb8735947481f9342b36d00267cf768c6bcdd66964825763fedd6960a1b989a7621ed9a53ec2f439178abdafda4e68be0da051db64dfc93977458ca8852d34863bfdd13b85a1b992ed5b4965da2c3588f1f2a6ae3a2852c36dd385af2c52006902e1599a6d0dcae2f9a1cd29191c6505007f67c3e5048698280a5d45dfd863f929bbbfd9227a5083d4fad610"], 0x1c8}, 0x1, 0x0, 0x0, 0x801}, 0x8000)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000240)={0x3, {{0xa, 0x4e21, 0x8001, @mcast1, 0x2}}, {{0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0x22}, 0x40}}}, 0x108)

20:21:18 executing program 0:
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="100000000000000000000000000000000000000000000000000000000000000000000000bedb2d057bab67413cf92366cc6d673d2f7c557a308760d6363877ea4a1932b0c33fc2b6659323f0f87aff5870a035bcb5f6ac595908971241ba057782e7b12e209498500f7c24c259f4396f65f7d5e575bc80c97078c0b02c0cf8c034444713d3bb0e45ced700c3947ad7f11fed7770db34088638db4d4194ddb5d1436d916eb527acd586302b6874cfedb9145ccf611bc4"]})

20:21:18 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = fcntl$getown(r0, 0x9)
ptrace$poke(0x5, r1, &(0x7f00000000c0), 0xd4a5)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r2, &(0x7f0000000800)="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", 0x600)
write$P9_RMKDIR(r2, &(0x7f0000000180)={0x14, 0x49, 0x1, {0x0, 0x2}}, 0x14)
sendfile(r2, r3, 0x0, 0x10000)

20:21:18 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685)
r2 = gettid()
request_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='/dev/urandom\x00', 0xffffffffffffffff)
r3 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8)
request_key(&(0x7f0000000140)='usMr\x00', 0x0, 0x0, r3)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x400, 0x1)
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(0x0, 0x11)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000380)='/dev/urandom\x00', 0x8b00, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
preadv(r4, 0x0, 0x0, 0x0)
wait4(r2, &(0x7f0000000000), 0x8, &(0x7f0000000280))
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000200)=0x3)
mknod$loop(&(0x7f0000000240)='./file0\x00', 0xc, 0xffffffffffffffff)
getsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0)

20:21:18 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_settime(0x7, &(0x7f00000000c0)={0x0, 0x1c9c380})
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, 0x0, 0x1)

[  286.927056] selinux_nlmsg_perm: 472 callbacks suppressed
[  286.927097] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pig=8901 comm=syz-executor.2
[  286.950879] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pig=8905 comm=syz-executor.2
20:21:19 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

20:21:19 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00')
sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x240020}, 0xc, &(0x7f00000004c0)={&(0x7f0000000180)={0x328, r2, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x40, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x200000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffff3d04641}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER={0xb8, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1dea}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'ib', 0x3a, 'veth1_to_bond\x00'}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x69}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_bridge\x00'}}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x270}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x38d}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x73}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_BEARER={0x20, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, '\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8c}]}, @TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x10, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_BEARER={0x154, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x64b}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x41}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x553}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x576}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e24, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4b10000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x39}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x883}]}]}]}, 0x328}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x4e21, @local}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='ip6_vti0\x00', 0xd6, 0x6, 0x4})
ioctl$sock_ifreq(r0, 0x8970, &(0x7f00000021c0)={'sit0\x00', @ifru_addrs=@hci})

20:21:19 executing program 3:
r0 = socket(0x10, 0x0, 0x0)
prctl$PR_GET_FPEMU(0x9, &(0x7f0000000800))
pipe(0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
r2 = socket$inet(0x2, 0x4000000001800001, 0x2)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4)
write$UHID_CREATE(r1, &(0x7f00000006c0)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000400)=""/51, 0x33, 0x80000001, 0x92, 0x2, 0x8d, 0x20}, 0x120)
bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x1000000004e23, @local}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000002c0)=0xda8, 0x4)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000003c0)={0x2, &(0x7f0000000340)=[{0x9, 0x5, 0x8, 0x4}, {0x366f, 0x7fff, 0x7ff, 0xfff}]}, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
fcntl$setpipe(r1, 0x407, 0x8ac)
restart_syscall()
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080), &(0x7f0000000380)=0x14)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000500)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x98)
recvfrom(r2, &(0x7f0000000640)=""/69, 0x45, 0x10000, &(0x7f00000005c0)=@un=@file={0x0, './file0\x00'}, 0x80)
connect$netlink(0xffffffffffffffff, &(0x7f0000000440)=@unspec, 0xc)
sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)
ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000300)={'syzkaller0\x00', {0x2, 0x702b, @dev}})
preadv(r1, 0x0, 0x0, 0x0)
write$UHID_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000000c0)=""/220, 0xdc, 0x0, 0x1ff, 0x6, 0x8001, 0x8}, 0x120)
write(r0, &(0x7f0000000480)="220000001e00070700be5bcea13e07010af000a3baf9d825d08ced685bf41e00", 0x20)

20:21:19 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00')
getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=<r2=>0x0)
setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000200)=@v3={0x3000000, [{0x7, 0xfffffffffffff8a7}, {0x1, 0x4212}], r2}, 0x18, 0x2)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000))
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0)

20:21:19 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x4, 0x1, 0x7fff})
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, 0x0, 0x1)

20:21:19 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = fcntl$getown(r0, 0x9)
ptrace$poke(0x5, r1, &(0x7f00000000c0), 0xd4a5)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r2, &(0x7f0000000800)="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", 0x600)
write$P9_RMKDIR(r2, &(0x7f0000000180)={0x14, 0x49, 0x1, {0x0, 0x2}}, 0x14)
sendfile(r2, r3, 0x0, 0x10000)

[  287.592359] binder: release 8879:8884 transaction 306 out, still active
20:21:19 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x40000, 0x0)
writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000000040)="290000002000190063003fffffffda060200000000e80001040000040d001400000100000000000000", 0x29}], 0x1)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/keycreate\x00')
ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000080)={0x6, 0x1, 0x6})

20:21:19 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00')
clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3d)
ptrace$cont(0x18, r1, 0x0, 0x0)
ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @loopback}, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x8, 0x800, 0xb371})
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x1000000000000003, 0x1})
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r1, 0x0, 0x0)

20:21:19 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={<r0=>0xffffffffffffffff})
ioctl$int_in(r0, 0x5452, &(0x7f00000010c0)=0x6)
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000a40)='./file0\x00', 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
setxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0)
getcwd(0x0, 0xc6)
recvmmsg(0xffffffffffffff9c, &(0x7f0000002380)=[{{&(0x7f0000000000)=@ax25={{0x3, @rose}, [@default, @bcast, @remote, @default, @rose, @rose, @rose]}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)=""/240, 0xf0}], 0x1, &(0x7f00000001c0)=""/214, 0xd6}, 0x2}, {{&(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000340)=""/81, 0x51}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/79, 0x4f}, {&(0x7f0000001440)=""/218, 0xda}, {&(0x7f0000001540)=""/26, 0x1a}, {&(0x7f0000001580)=""/125, 0x7d}, {&(0x7f0000001600)=""/128, 0x80}, {&(0x7f0000001680)=""/55, 0x37}], 0x8, &(0x7f0000001740)=""/218, 0xda}, 0x4}, {{&(0x7f0000001840)=@generic, 0x80, &(0x7f0000001b40)=[{&(0x7f00000018c0)=""/107, 0x6b}, {&(0x7f0000001940)=""/225, 0xe1}, {&(0x7f0000001a40)=""/227, 0xe3}], 0x3, &(0x7f0000001b80)=""/58, 0x3a}}, {{&(0x7f0000001bc0)=@generic, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001c40)=""/207, 0xcf}], 0x1, &(0x7f0000001d80)=""/144, 0x90}, 0x4}, {{&(0x7f0000001e40)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f00000022c0)=[{&(0x7f0000001ec0)=""/189, 0xbd}, {&(0x7f0000001f80)=""/174, 0xae}, {&(0x7f0000002040)=""/145, 0x91}, {&(0x7f0000002100)=""/10, 0xa}, {&(0x7f0000002140)=""/236, 0xec}, {&(0x7f0000002240)=""/106, 0x6a}], 0x6, &(0x7f0000002340)=""/9, 0x9}, 0x1000}], 0x5, 0x40000020, &(0x7f00000024c0)={0x0, 0x1c9c380})
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000002580)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
gettid()
pipe2(&(0x7f0000002500)={<r3=>0xffffffffffffffff}, 0x4803)
ioctl$RTC_UIE_ON(r3, 0x7003)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="22ae1b179ca83213139df0a560aec0fefdca1065f628ab5361a9aec44b8c8a172ddfc83315cb861e79375ee3f02bfec935174b9b621a845c985b11f239b0afb0d7f9108013d5110d667ba02ca03899350d5f527b25fad799ab3700c3f54dc8ac0b8a662f2fa4e6f32884f41c83e1d2abffd31f4be07f8f2b95db133c8e754e8b00776ce4cebacdc30800549098b0ab52d805e5577021ebcd8dbd0d024adb773a8cf2efd12971274a53b449dced2550c89ea29ef9cc775e395e349045b9349423309e6ee7ff6202f677fa01847b2a3834838e028ce3d53283665d4f19435690894a29a18bfc4415c478a2e2a79823", 0xee}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0x0)
fcntl$setpipe(r2, 0x407, 0x5)
gettid()
add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
add_key(&(0x7f0000000540)='trusted\x00', &(0x7f0000000580)={'syz', 0x1}, &(0x7f00000005c0)="06780c5e74569d0886fa4e5c809cbd", 0xf, 0xffffffffffffffff)
ioctl$sock_ifreq(r4, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags=0x2})
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f00000003c0)={0x100000001, 0xffffffff, 0xdd4, 0x4}, 0x10)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000002640)='/selinux/policy\x00', 0x0, 0x0)
add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
r5 = dup(r1)
ioctl$PPPIOCSACTIVE(r5, 0x40107446, &(0x7f00000000c0)={0x7, &(0x7f0000000180)=[{0x100000001, 0x800, 0x0, 0xffffffffffffffc1}, {0x1, 0x1, 0xffffffffffffff45, 0x7a}, {0x9, 0x2, 0x2, 0xffff}, {0x8000, 0x80, 0x4, 0x100000001}, {0x5, 0xfffffffffffff060, 0x7fff, 0x69}, {0x6, 0x7fff, 0x0, 0x1}, {0x8, 0x80000001, 0x7fff, 0x1}]})
fcntl$setsig(r0, 0xa, 0x12)

[  287.643864] binder: 8918:8931 ioctl c018620b 0 returned -14
20:21:19 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
pipe2(&(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x800)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0xffffffffffffff6f)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
epoll_create(0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000140)={0x4, 0x138c, 0x6, 0x3ff, 0x3ff, 0x60})
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, 0x0, 0x1)

20:21:19 executing program 0:
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000f40)='/selinux/checkreqprot\x00', 0x10000, 0x0)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000400)=0x9)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x40000)
link(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='./file0\x00')
ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x10e)
r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='|puacct.usage_pe2cpu_sys\x9e', 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000d80)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f0000000bc0)=0xe8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4002002}, 0xc, &(0x7f0000000040)={&(0x7f0000000f80)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], @ANYRES16=r1]], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@dev={0xfe, 0x80, [], 0xc}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x8000, 0x4e24, 0x1b7, 0xa, 0x0, 0x20, 0x77, r2, r3}, {0xffffffff, 0x1000, 0x3, 0x10001, 0xffffffffffffffcf, 0x9, 0x4, 0x100000001}, {0x0, 0x1, 0x5, 0x2c7b}, 0x7, 0x6e6bb5, 0x2, 0x1}, {{@in6=@empty, 0x4d2, 0x3c}, 0xa, @in=@rand_addr=0x1, 0x3503, 0x3, 0x1, 0x2, 0x21a, 0x5f3, 0x899d}}, 0xe8)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000140)=0x7b, 0x4)
bind$inet(r4, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10)
r5 = getuid()
sendmsg(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000600)="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", 0x519}], 0x1, 0x0, 0x0, 0x800}, 0x44804)
read(r4, &(0x7f0000000200)=""/225, 0xe1)
shutdown(r4, 0x1)
ioctl$LOOP_SET_FD(r0, 0x4c00, r4)
prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffe000/0x2000)=nil)
unlink(&(0x7f0000000b40)='./file0\x00')
lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580))
setresuid(r5, r3, r3)
geteuid()
setresuid(r3, r5, r5)
pipe2(&(0x7f0000000140), 0x4000)
clone(0x100, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff)
wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340))
getpid()

20:21:19 executing program 1:
r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000100)={'NETMAP\x00'}, &(0x7f0000000140)=0x1e)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xfffe000000000000, 0xbf25, 0x0, 0xf, 0x19, 0x10, "bb2ac5e25806fc6a6a3cd55a1dc377301cd632996c429007f3134979ea2eff7b306bb2df9ca9dc4afa79d728e47984344e816b650483f53066c9e1e45a46c3f8", "d1881fc9b53e605dd895796778d4344c8af81ff365dcea8742ce89ba031395fbae8112a2c181227ee46d70a4a7aefdfbfc90a3dfde6565b46100146c7b3e8d5b", "eb879b2a180ad8ab67e30ada7fb4cf9ab45d38aa3cf0a07b96a92563a2380578", [0x3f, 0xf19]})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, 0x0, 0x1)
rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00')

20:21:20 executing program 0:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, <r0=>0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00'}, 0x30)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
dup2(r0, r1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="24000000200007041dfffd946f610500020000001f0000000000080008000a000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0xffffffffffffffa1}, 0x0)

20:21:20 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={<r0=>0xffffffffffffffff})
ioctl$int_in(r0, 0x5452, &(0x7f00000010c0)=0x6)
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000a40)='./file0\x00', 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
setxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0)
getcwd(0x0, 0xc6)
recvmmsg(0xffffffffffffff9c, &(0x7f0000002380)=[{{&(0x7f0000000000)=@ax25={{0x3, @rose}, [@default, @bcast, @remote, @default, @rose, @rose, @rose]}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)=""/240, 0xf0}], 0x1, &(0x7f00000001c0)=""/214, 0xd6}, 0x2}, {{&(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000340)=""/81, 0x51}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/79, 0x4f}, {&(0x7f0000001440)=""/218, 0xda}, {&(0x7f0000001540)=""/26, 0x1a}, {&(0x7f0000001580)=""/125, 0x7d}, {&(0x7f0000001600)=""/128, 0x80}, {&(0x7f0000001680)=""/55, 0x37}], 0x8, &(0x7f0000001740)=""/218, 0xda}, 0x4}, {{&(0x7f0000001840)=@generic, 0x80, &(0x7f0000001b40)=[{&(0x7f00000018c0)=""/107, 0x6b}, {&(0x7f0000001940)=""/225, 0xe1}, {&(0x7f0000001a40)=""/227, 0xe3}], 0x3, &(0x7f0000001b80)=""/58, 0x3a}}, {{&(0x7f0000001bc0)=@generic, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001c40)=""/207, 0xcf}], 0x1, &(0x7f0000001d80)=""/144, 0x90}, 0x4}, {{&(0x7f0000001e40)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f00000022c0)=[{&(0x7f0000001ec0)=""/189, 0xbd}, {&(0x7f0000001f80)=""/174, 0xae}, {&(0x7f0000002040)=""/145, 0x91}, {&(0x7f0000002100)=""/10, 0xa}, {&(0x7f0000002140)=""/236, 0xec}, {&(0x7f0000002240)=""/106, 0x6a}], 0x6, &(0x7f0000002340)=""/9, 0x9}, 0x1000}], 0x5, 0x40000020, &(0x7f00000024c0)={0x0, 0x1c9c380})
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000002580)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
gettid()
pipe2(&(0x7f0000002500)={<r3=>0xffffffffffffffff}, 0x4803)
ioctl$RTC_UIE_ON(r3, 0x7003)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="22ae1b179ca83213139df0a560aec0fefdca1065f628ab5361a9aec44b8c8a172ddfc83315cb861e79375ee3f02bfec935174b9b621a845c985b11f239b0afb0d7f9108013d5110d667ba02ca03899350d5f527b25fad799ab3700c3f54dc8ac0b8a662f2fa4e6f32884f41c83e1d2abffd31f4be07f8f2b95db133c8e754e8b00776ce4cebacdc30800549098b0ab52d805e5577021ebcd8dbd0d024adb773a8cf2efd12971274a53b449dced2550c89ea29ef9cc775e395e349045b9349423309e6ee7ff6202f677fa01847b2a3834838e028ce3d53283665d4f19435690894a29a18bfc4415c478a2e2a79823", 0xee}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0x0)
fcntl$setpipe(r2, 0x407, 0x5)
gettid()
add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
add_key(&(0x7f0000000540)='trusted\x00', &(0x7f0000000580)={'syz', 0x1}, &(0x7f00000005c0)="06780c5e74569d0886fa4e5c809cbd", 0xf, 0xffffffffffffffff)
ioctl$sock_ifreq(r4, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags=0x2})
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f00000003c0)={0x100000001, 0xffffffff, 0xdd4, 0x4}, 0x10)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000002640)='/selinux/policy\x00', 0x0, 0x0)
add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
r5 = dup(r1)
ioctl$PPPIOCSACTIVE(r5, 0x40107446, &(0x7f00000000c0)={0x7, &(0x7f0000000180)=[{0x100000001, 0x800, 0x0, 0xffffffffffffffc1}, {0x1, 0x1, 0xffffffffffffff45, 0x7a}, {0x9, 0x2, 0x2, 0xffff}, {0x8000, 0x80, 0x4, 0x100000001}, {0x5, 0xfffffffffffff060, 0x7fff, 0x69}, {0x6, 0x7fff, 0x0, 0x1}, {0x8, 0x80000001, 0x7fff, 0x1}]})
fcntl$setsig(r0, 0xa, 0x12)

20:21:20 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = accept(r0, &(0x7f00000000c0), &(0x7f0000000140)=0x80)
r2 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00')
sendmsg$FOU_CMD_ADD(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x800, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x80)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, 0x0, 0x1)

20:21:20 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
read(r0, &(0x7f0000000040)=""/11, 0x7)
r1 = accept$inet(0xffffffffffffff9c, &(0x7f0000000080)={0x2, 0x0, @multicast1}, &(0x7f00000000c0)=0x10)
getsockname$packet(0xffffffffffffffff, &(0x7f0000005000)={0x11, 0x0, <r2=>0x0}, &(0x7f0000005040)=0x14)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000005c0)={'veth0\x00', &(0x7f0000000580)=@ethtool_ringparam={0x10, 0x5, 0x0, 0x1, 0xc234, 0x0, 0x80000001, 0xffffffffffffffff, 0x89a8}})
setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000005080)={r2, @loopback, @broadcast}, 0xc)
r3 = add_key(&(0x7f00000001c0)='encrypted\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="59413f4989725813aa90088db9589dc924ba17dd8fb677d33bf96f38a5cea8c5aa90b68541e93e3ecd1f49a710c28ac07d4328b7a0704b949bbc875652140c02680f501eff7381093766ce8b373d4986f5e27a3ac1f59e1e150b3620833eacad62863341054acc958440db4864874225556c8d208cc0cc6acdff810615b21635706778c5de6a7f697cacb9e3acb867d0df056a9c9a291db8e62ef5d1978ed26060746f807a2357f965fc02d230804ef697655b2d4202556efaa52d289be73f846cffb24c172f0dcfe805509f43623945562b13352f17e6879d305d87bb94960854467a9db836a458e871cbb1771d7dcc4ff337429616c360", 0xf8, 0xffffffffffffffff)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000340)={r3, 0x21d1}, &(0x7f0000000380)={'enc=', 'oaep', ' hash=', {'streebog512\x00'}}, &(0x7f0000000400)="876b91666bcd996ba6f3398a881603df8d86f8287b07a901a662cd9b64519be9205807152477787ca249f3878e4ab4dbcfb9c0ff04fd1f0e34ed497e87343411c2954b1c68a571cb498ef12fccbed4dd93d5c6df804c739d4ec01755ccc938e23560acea324b7971e0ceeaebf1bc3b3a9ff3a2ccfb14267d55f54be531d331a65c997a7838aaab6fe590ecbd3b679ac449e606f513f9548f3df8ced77d828d278d73879601", &(0x7f00000004c0)=""/110)
syz_execute_func(&(0x7f0000000100)="3666440f9bf5660f3804d65e57c3c3e2c9b7d973734e424a2664f0ff064a460f3038082e67660f50e900004681e40000010017feabc4aba39d6c450754e50c420fae9972b571112d02")
socketpair$unix(0x1, 0xfffffffffffffffd, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000540)=<r6=>0x0)
sched_getscheduler(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
gettid()

20:21:20 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/status\x00', 0x0, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0xe, "1c02a7f99d57e765ba8fa341b392"}, &(0x7f0000000380)=0x32)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="bfc06653287a72b6"], 0x0, 0x0, 0x0})
r2 = dup3(r0, r0, 0x80000)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00')
sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x8c, r3, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x94a8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe9}]}, @TIPC_NLA_MEDIA={0x18, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8a7a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6db2e64d}]}]}, @TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x8c}}, 0x20000800)

[  288.437414] binder: release 8918:8941 transaction 309 out, still active
20:21:20 executing program 0:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x7fff)
perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x84000, 0x1)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
r2 = syz_open_procfs(0x0, 0x0)
ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000380)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0}}], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140))
request_key(&(0x7f0000000000)='encrypted\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)=':(\x00', 0xfffffffffffffffe)

[  288.478393] binder: 8968:8971 ioctl c018620b 0 returned -14
20:21:20 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, 0x0, 0x1)
dup2(r1, r0)

[  288.542427] binder: 8968:8984 BC_ACQUIRE_DONE u0000000000000000 node 313 cookie mismatch b6727a285366c0bf != 0000000000000000
[  288.608188] binder: release 8968:8984 transaction 312 out, still active
20:21:22 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a607300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
fcntl$getownex(r0, 0x10, &(0x7f00000002c0)={0x0, <r1=>0x0})
r2 = socket$inet6(0xa, 0x80000, 0x80)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000480)=0xffffffffffffffff, 0x4)
ptrace$pokeuser(0x6, r1, 0x6, 0x8)
fsetxattr$security_ima(r0, &(0x7f0000000000)='security.ima\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="0409e648c9da31b7b6f49bc34c8fd7f58ab665f6955a31e3c678faee4abe82acb17497604bbeda193102303d393500f8c83e8ef1b3c0d3b2e290d13985b24af8305db244"], 0x8, 0x2)
r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x208108}, 0xc, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="70010000", @ANYRES16=r4, @ANYBLOB="01092abd7000fddbdf2509000000180005000c000200080002008000000008000100756470003c000600080001000600000008000100def3ffff040002000800010004000000040002000800010080ef000004000200040002000400020004000200840004001400010062726f6164636173742d6c696e6b0000540007000800020000000000080001001b00000008000400010000000800040000000000080004001f0000000800040041000000080004000000000008000100060000000800020004000000080001000e0000000c00010073797a30000000000c00010073797a3100000000100007000c00030000800000000000001800010014000200080002000100008008000100110000005c000400140007000800040007000000080002008c490000140007000800040040000000080001000c0000000c00070008000200060000002400070008000200070000000800040000000000080001001800000108000400ff070000cbfdec1eb87be58f2a2a1a4017ff494579bb94c7623f66d1be097fa76a850be89e4ff9a4d2945d5ffa75b41a0a6529462d23ddecc9423da3b5d0bbe7d2b75593b33e1c1dae00a14928c51a9b8a16a4a702e83003a06c4decdbc1b3d50650d69426db8016891b584a83fc5784de06792c535d462ee74da357e2b41bd88aaabb"], 0x170}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004)
ioctl$TCFLSH(r3, 0x540b, 0x8)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

20:21:22 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='uid_map\x00')
sendmsg$nl_generic(r0, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x480000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x7f, 0x2}, 0x7)
preadv(r0, &(0x7f0000000480), 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x5, 0x4, 0xa, 0x10001}, {0xdf, 0xa0f, 0x0, 0x2}, {0x40, 0xf182, 0x42, 0x7}, {0x1, 0x6, 0x8, 0x10000}, {0x100, 0x80, 0xc1, 0x5}, {0x7, 0xffff, 0x4, 0x6}]}, 0x10)

20:21:22 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x10000, 0x0)
ioctl$RTC_AIE_OFF(r0, 0x7002)
ioctl$RTC_AIE_OFF(r0, 0x7002)
mkdir(&(0x7f0000000240)='./file1\x00', 0x44)
r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = creat(&(0x7f0000000140)='./bus\x00', 0x6b)
r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
sendfile(r2, r3, &(0x7f0000000100), 0xd47b)
ftruncate(r2, 0x208200)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in6=@loopback}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8)
r4 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002012, r4, 0x0)
ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000180)="249644d98d4b950119b73c81b7ede2885c9f13a433edd5854a1ed152753c6f473f937d64a5c5f75aa54bf4dff1781249f59e1860ed210d0490d6bebcbffb6bcb853c5d09eae78b34a551101638abdf521993ec1a5d2029737820c013b169a4715f68be0faf951689385978117cff97a08ee4431d3455c5bf")
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)

20:21:22 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x20)
ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000100)=""/221)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KDSKBLED(r1, 0x4b65, 0xfff)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, 0x0, 0x1)

20:21:22 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = epoll_create(0x2)
epoll_pwait(r1, &(0x7f0000001580)=[{}], 0x1, 0x1ff, 0x0, 0x0)
mount(&(0x7f00000000c0)=@sg0='/dev/sg0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nilfs2\x00', 0x8000, &(0x7f00000001c0)='rose0\x00')
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x140000002})
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000040)={'rose0\x00', @remote})
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a0676ffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1)

20:21:22 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={<r0=>0xffffffffffffffff})
ioctl$int_in(r0, 0x5452, &(0x7f00000010c0)=0x6)
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000a40)='./file0\x00', 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
setxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0)
getcwd(0x0, 0xc6)
recvmmsg(0xffffffffffffff9c, &(0x7f0000002380)=[{{&(0x7f0000000000)=@ax25={{0x3, @rose}, [@default, @bcast, @remote, @default, @rose, @rose, @rose]}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)=""/240, 0xf0}], 0x1, &(0x7f00000001c0)=""/214, 0xd6}, 0x2}, {{&(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000340)=""/81, 0x51}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/79, 0x4f}, {&(0x7f0000001440)=""/218, 0xda}, {&(0x7f0000001540)=""/26, 0x1a}, {&(0x7f0000001580)=""/125, 0x7d}, {&(0x7f0000001600)=""/128, 0x80}, {&(0x7f0000001680)=""/55, 0x37}], 0x8, &(0x7f0000001740)=""/218, 0xda}, 0x4}, {{&(0x7f0000001840)=@generic, 0x80, &(0x7f0000001b40)=[{&(0x7f00000018c0)=""/107, 0x6b}, {&(0x7f0000001940)=""/225, 0xe1}, {&(0x7f0000001a40)=""/227, 0xe3}], 0x3, &(0x7f0000001b80)=""/58, 0x3a}}, {{&(0x7f0000001bc0)=@generic, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001c40)=""/207, 0xcf}], 0x1, &(0x7f0000001d80)=""/144, 0x90}, 0x4}, {{&(0x7f0000001e40)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f00000022c0)=[{&(0x7f0000001ec0)=""/189, 0xbd}, {&(0x7f0000001f80)=""/174, 0xae}, {&(0x7f0000002040)=""/145, 0x91}, {&(0x7f0000002100)=""/10, 0xa}, {&(0x7f0000002140)=""/236, 0xec}, {&(0x7f0000002240)=""/106, 0x6a}], 0x6, &(0x7f0000002340)=""/9, 0x9}, 0x1000}], 0x5, 0x40000020, &(0x7f00000024c0)={0x0, 0x1c9c380})
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000002580)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
gettid()
pipe2(&(0x7f0000002500)={<r3=>0xffffffffffffffff}, 0x4803)
ioctl$RTC_UIE_ON(r3, 0x7003)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="22ae1b179ca83213139df0a560aec0fefdca1065f628ab5361a9aec44b8c8a172ddfc83315cb861e79375ee3f02bfec935174b9b621a845c985b11f239b0afb0d7f9108013d5110d667ba02ca03899350d5f527b25fad799ab3700c3f54dc8ac0b8a662f2fa4e6f32884f41c83e1d2abffd31f4be07f8f2b95db133c8e754e8b00776ce4cebacdc30800549098b0ab52d805e5577021ebcd8dbd0d024adb773a8cf2efd12971274a53b449dced2550c89ea29ef9cc775e395e349045b9349423309e6ee7ff6202f677fa01847b2a3834838e028ce3d53283665d4f19435690894a29a18bfc4415c478a2e2a79823", 0xee}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0x0)
fcntl$setpipe(r2, 0x407, 0x5)
gettid()
add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
add_key(&(0x7f0000000540)='trusted\x00', &(0x7f0000000580)={'syz', 0x1}, &(0x7f00000005c0)="06780c5e74569d0886fa4e5c809cbd", 0xf, 0xffffffffffffffff)
ioctl$sock_ifreq(r4, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags=0x2})
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f00000003c0)={0x100000001, 0xffffffff, 0xdd4, 0x4}, 0x10)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000002640)='/selinux/policy\x00', 0x0, 0x0)
add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
r5 = dup(r1)
ioctl$PPPIOCSACTIVE(r5, 0x40107446, &(0x7f00000000c0)={0x7, &(0x7f0000000180)=[{0x100000001, 0x800, 0x0, 0xffffffffffffffc1}, {0x1, 0x1, 0xffffffffffffff45, 0x7a}, {0x9, 0x2, 0x2, 0xffff}, {0x8000, 0x80, 0x4, 0x100000001}, {0x5, 0xfffffffffffff060, 0x7fff, 0x69}, {0x6, 0x7fff, 0x0, 0x1}, {0x8, 0x80000001, 0x7fff, 0x1}]})
fcntl$setsig(r0, 0xa, 0x12)

[  290.784302] binder: 9002:9008 ioctl c018620b 0 returned -14
20:21:22 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, 0x0, 0x1)

20:21:22 executing program 2:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x7f)
getsockname(r0, &(0x7f0000000200)=@un=@abs, &(0x7f0000000280)=0x80)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f00000002c0)='./file0\x00', r0}, 0x10)
ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x12, 0xb8, &(0x7f0000000080)="7a32bdcb227cabadb8ce559b41cd8e344191ccc2e26c741146b3b968a6d1a78bf8e38a1260220ac6dc7a5513270f6edc4c9e45696ba669a1f8ccb4d14c0c5c50079ffd8a72bf9492fb902b6e55074978f33d990ab86232c4154819c4c48f1f6939c3f363177814e52bf9620b256331e117c27220553f1d507a010d9e98fe0e3d08461681e923d2e3a4f681d10cf25595e9a774b5bd3f0c395659b0aa8381cc896e8c56abd3e442a34dbe348c2df1434257a1f82af5684856"})
ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x80009)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100c210}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x84, r1, 0x208, 0x865, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x72a9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffffffff8000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9b33}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1f}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x26}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1a}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x801}, 0x4000)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r0, 0x81, 0x3ff, 0x0, 0x1})

20:21:22 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={<r0=>0xffffffffffffffff})
ioctl$int_in(r0, 0x5452, &(0x7f00000010c0)=0x6)
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000a40)='./file0\x00', 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
setxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0)
getcwd(0x0, 0xc6)
recvmmsg(0xffffffffffffff9c, &(0x7f0000002380)=[{{&(0x7f0000000000)=@ax25={{0x3, @rose}, [@default, @bcast, @remote, @default, @rose, @rose, @rose]}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)=""/240, 0xf0}], 0x1, &(0x7f00000001c0)=""/214, 0xd6}, 0x2}, {{&(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000340)=""/81, 0x51}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/79, 0x4f}, {&(0x7f0000001440)=""/218, 0xda}, {&(0x7f0000001540)=""/26, 0x1a}, {&(0x7f0000001580)=""/125, 0x7d}, {&(0x7f0000001600)=""/128, 0x80}, {&(0x7f0000001680)=""/55, 0x37}], 0x8, &(0x7f0000001740)=""/218, 0xda}, 0x4}, {{&(0x7f0000001840)=@generic, 0x80, &(0x7f0000001b40)=[{&(0x7f00000018c0)=""/107, 0x6b}, {&(0x7f0000001940)=""/225, 0xe1}, {&(0x7f0000001a40)=""/227, 0xe3}], 0x3, &(0x7f0000001b80)=""/58, 0x3a}}, {{&(0x7f0000001bc0)=@generic, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001c40)=""/207, 0xcf}], 0x1, &(0x7f0000001d80)=""/144, 0x90}, 0x4}, {{&(0x7f0000001e40)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f00000022c0)=[{&(0x7f0000001ec0)=""/189, 0xbd}, {&(0x7f0000001f80)=""/174, 0xae}, {&(0x7f0000002040)=""/145, 0x91}, {&(0x7f0000002100)=""/10, 0xa}, {&(0x7f0000002140)=""/236, 0xec}, {&(0x7f0000002240)=""/106, 0x6a}], 0x6, &(0x7f0000002340)=""/9, 0x9}, 0x1000}], 0x5, 0x40000020, &(0x7f00000024c0)={0x0, 0x1c9c380})
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000002580)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
gettid()
pipe2(&(0x7f0000002500)={<r3=>0xffffffffffffffff}, 0x4803)
ioctl$RTC_UIE_ON(r3, 0x7003)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="22ae1b179ca83213139df0a560aec0fefdca1065f628ab5361a9aec44b8c8a172ddfc83315cb861e79375ee3f02bfec935174b9b621a845c985b11f239b0afb0d7f9108013d5110d667ba02ca03899350d5f527b25fad799ab3700c3f54dc8ac0b8a662f2fa4e6f32884f41c83e1d2abffd31f4be07f8f2b95db133c8e754e8b00776ce4cebacdc30800549098b0ab52d805e5577021ebcd8dbd0d024adb773a8cf2efd12971274a53b449dced2550c89ea29ef9cc775e395e349045b9349423309e6ee7ff6202f677fa01847b2a3834838e028ce3d53283665d4f19435690894a29a18bfc4415c478a2e2a79823", 0xee}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0x0)
fcntl$setpipe(r2, 0x407, 0x5)
gettid()
add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
add_key(&(0x7f0000000540)='trusted\x00', &(0x7f0000000580)={'syz', 0x1}, &(0x7f00000005c0)="06780c5e74569d0886fa4e5c809cbd", 0xf, 0xffffffffffffffff)
ioctl$sock_ifreq(r4, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags=0x2})
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f00000003c0)={0x100000001, 0xffffffff, 0xdd4, 0x4}, 0x10)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000002640)='/selinux/policy\x00', 0x0, 0x0)
add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
r5 = dup(r1)
ioctl$PPPIOCSACTIVE(r5, 0x40107446, &(0x7f00000000c0)={0x7, &(0x7f0000000180)=[{0x100000001, 0x800, 0x0, 0xffffffffffffffc1}, {0x1, 0x1, 0xffffffffffffff45, 0x7a}, {0x9, 0x2, 0x2, 0xffff}, {0x8000, 0x80, 0x4, 0x100000001}, {0x5, 0xfffffffffffff060, 0x7fff, 0x69}, {0x6, 0x7fff, 0x0, 0x1}, {0x8, 0x80000001, 0x7fff, 0x1}]})
fcntl$setsig(r0, 0xa, 0x12)

20:21:22 executing program 2:
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x7, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000240)='GPL\x00', 0x2, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = dup3(r2, r0, 0x80000)
write$P9_RREADLINK(r3, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)
ioctl(r2, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
writev(r1, &(0x7f0000001800)=[{&(0x7f0000000280)="8b2eba3a0016ea8378d185b28f5cc9d4897cf72458e4e3e76499a8d60ac898f1278431bf5c8d9ba66bc2b95011b96347e5260eae6d39fc208e80244b36871a0153176b591fc71ba7ca536a9e7682f6bb370655753b428d6683b7795b6c82ff059c3f8b1d46bf958b8b5a4c796310d621248ec8c76a9583d1a62f4d0df5e74e7158ff417445b6f10bf4bb244245fffba9e4468c85ef9317cf3afd55e0b56b51f8030ee37bf83ec34d464f88383f9643c864b458fb86b060ac59b0ee8d9c94149ac3557f458fe28131232bf56eb68c7c23a3da5c7769d8e242850c81d56b67d61ddf7e070fe61fee3636c7861ea8337e465e9d2bbab8e752", 0xf7}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000000080)="5aa18635", 0x4}, {&(0x7f0000001380)="131354f345fedded45e17b3f239564a92127fa2d37b526835c59427b8c68ebbd7f523a960ee39800d4ea8058c076fa3a0bdb5e9b3aa5b3a7e4b9d83fde8fb898eefaf295addb7ca2eb1a787ef3f19cc5bad14ddb87db9e5b343e21743cd9679dc7a3a63f91bab8caec837964d1e55d429333d6622c6e1ed781698a61a7714400b411f12a31fb6bc7c7b3250be1684ba99bfd5d120ad4810ae5c71e9e29f71692c4", 0xa1}, {&(0x7f0000001440)="f04c9318222d98d0dca5dcf7d37770a1d84d0b6f4f2eaf16c7344c909ad2bad2f0de7ab5103feb8bd5c50d8ac841c7b8eb70c72499fb9bade99ae53754d5c89ce6080f8ad63e8b5fb831f2de2233e69b7d8db72b1bf94bf3a3f4a50f5b6d8b30ff739d6beefaaac8d62b9863fe4edcee0b0d4c07ea0164869a8e35f18e25b9d706847faca5aca0a37950ee81fa62b8a10c05c4d2c0bb26e4c622", 0x9a}, {&(0x7f0000001500)="600569f69020f3a8255e590ed2557a88f04acb39c098420f02e6c157ccaa466d4ea2677fabfb99d24b36feae78ef68475ae2f49f6dd2c9c10c1d7fe2badc120697", 0x41}, {&(0x7f0000001580)="8a2a08fb3b2a0e46ca675620253c91a339c349255fe66346216d2a0e4a75148b9eccaee3262a12aa87198ccc1f5e8aa875c0045ca96b94ceafd5b60aea0766110b9ec1b6590b0937f0e061058f9e1de82eaba229d06bfd2f29d741fb8b4dd0", 0x5f}, {&(0x7f0000001600)="9574479ce89fb84f9710bc4dffc9447ae024c3ac76b6bfbf9f649af3c35194926a75080b378e3580540ac0f6dabe659b5c5e6d53537847b598adfcd8209a3fce6da229df6796b260a61138593c77294d5145092940e118fba8ccbbcf41251831397abf97c1ba6c98a681cedca0ba323e244e49ac936fe373688ddde490ca17aede248a410a57bb75cb6d677bda1ca52f58f215c7c2679a356fba82f1f0d7376ea7b34265ddf5dcf4e7ee64330cee13320ec1d47b089dff63565113bbe96d20dcaf649eded954e2e728fc5b26fcf029f901ed059b66ec1224e030735eef44613f", 0xe0}, {&(0x7f0000001700)="0e3d792bf269e9e14d34d42fe3202b41bbb37a7cf19572f7bacf1854f572564edc4d667bd3733f589e58a5326ac55c92e6c6e0b54a14f856573e4c5d5c9c0dbd93881c93b69316d53bcb115d04e299241fd26cdac61b27c493e6b9391bac9b49f9281885d27eda74b4c391626367693ed6c8027beab57cdad5404587b32490d069e171d4f61edcb2564dcfdc434c33c6b33ab6607bf3130cffdc13589d2c1ef81182bf084772b76acbef9e171f98df8811dc988dad03f0273f825e9b51d40492b94113551b2fd17324fef69b0a2f63d9262b005cf736", 0xd6}], 0x9)

[  290.860733] binder: 9002:9019 got transaction with invalid offset (0, min 0 max 24) or object.
[  290.870301] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.5'.
[  290.891228] binder: 9002:9019 transaction failed 29201/-22, size 24-8 line 3348
20:21:22 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
personality(0x404000d)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f00000000c0)={'nr0\x00', 0x7})
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x400000, 0x0)
ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000140))
setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000180)=0x9, 0x4)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, 0x0, 0x1)

[  290.949200] binder: 9002:9019 BC_ACQUIRE_DONE u0000000000000000 no match
20:21:22 executing program 2:
r0 = epoll_create(0x143)
r1 = epoll_create(0x60000000007)
r2 = epoll_create(0x7fffffff)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0))
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
epoll_wait(r2, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x65f)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000000dff4))

20:21:23 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
clone(0x1fffffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x8800, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x5)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})
r2 = dup(r0)
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000040)={'batadv0\x00', 0x600})
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
ioctl$VT_WAITACTIVE(r3, 0x5607)

20:21:23 executing program 3:
socket$inet6(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0))
setrlimit(0x7, &(0x7f00000000c0)={0x7, 0x81})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)='posix_acl_access\x00', 0xffffffffffffffff}, 0x30)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
pipe(0x0)

20:21:23 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="8d6b4ed827c2ee8066b070")
r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f00000002c0))
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, 0x0, 0x1)
r2 = dup2(r1, r0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00')
exit_group(0xff)
sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x88, r3, 0xe, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb}]}]}, @TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000014}, 0x2404c001)

20:21:23 executing program 0:
r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
setns(r0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
geteuid()
getsockopt$sock_buf(r0, 0x1, 0x800003f, 0x0, &(0x7f0000000000))
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x1, @empty, 0x4f}, 0x1c)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x57e, 0x4)
ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000240)={0x1, 0x0, {0x52, 0x80000000, 0x7fffffff, {0x437c, 0x7}, {0x2, 0x3}, @cond=[{0x3, 0x8f4e, 0xe3600000000, 0x6, 0x7, 0xcea}, {0x40, 0xff, 0x10000}]}, {0x57, 0xcc39, 0xde1d, {0x6, 0x300e}, {0xc5, 0x1000}, @ramp={0x2, 0x5, {0x5, 0xfffffffffffffffc, 0xd08, 0x61b}}}})
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
getsockopt$sock_timeval(r2, 0x1, 0x0, 0x0, 0x0)
connect(r1, &(0x7f00000001c0)=@in={0x2, 0x4e20, @local}, 0x80)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x4000000000000d7, 0x0)
ioctl$PPPIOCGDEBUG(r2, 0x80047441, &(0x7f0000000380))
openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x80000, 0x0)

20:21:23 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
readv(r0, &(0x7f0000000000), 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
lseek(r1, 0x51, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x32, 0xffffffffffffffff, 0x0)

[  291.583816] binder: 9002:9019 ioctl c018620b 0 returned -14
[  291.589681] binder: 9002:9025 got transaction with invalid offset (0, min 0 max 24) or object.
[  291.599431] binder: 9002:9025 transaction failed 29201/-22, size 24-8 line 3348
20:21:23 executing program 3:
r0 = open(&(0x7f00000003c0)='./file0\x00', 0x141042, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = epoll_create1(0x0)
fcntl$lock(0xffffffffffffffff, 0x7, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, 0x0)
fcntl$lock(r2, 0x0, 0x0)
fcntl$lock(r2, 0x2000000007, 0x0)
mount(&(0x7f0000000000)=@sg0='/dev/sg0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x840000, &(0x7f0000000140)='&$\x00')
write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[], 0x2e7)
openat$selinux_user(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/user\x00', 0x2, 0x0)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000200)=<r3=>0x0)
ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000400)=""/4096)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x20000, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, r3, 0x2, 0xffffffffffffffff, 0x2)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100)='y\x00', 0x2, 0x2)
arch_prctl$ARCH_SET_CPUID(0x1012, 0x0)
sendfile(r0, r0, &(0x7f0000000040), 0xa198)
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x10802, 0x0)

20:21:23 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11010, r0, 0x0)
pipe2(&(0x7f0000000540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x800)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000005c0)='SEG6\x00')
sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x94, r3, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @rand_addr="574fc318a22a3cf4f3cfaae8f50736fa"}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x5}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x200}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x14c4, 0x1f, 0xbf, 0xb5]}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x1]}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x4}, @SEG6_ATTR_ALGID={0x8, 0x6, 0xff}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x84)
getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f0000000080))
getsockopt$sock_buf(r0, 0x1, 0x3f, &(0x7f00000000c0)=""/147, &(0x7f0000000040)=0x93)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x1})
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x100010, r2, 0x0)

[  291.653091] binder: 9067:9069 ioctl c018620b 0 returned -14
20:21:23 executing program 1:
ioctl(0xffffffffffffffff, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, 0x0, 0x1)

20:21:23 executing program 5:
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000001880)=""/190, 0xbe}], 0x1}}], 0x400000000000098, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
recvmmsg(r1, 0x0, 0xfffffffffffffd3d, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = dup(0xffffffffffffff9c)
r3 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvfrom(0xffffffffffffffff, 0x0, 0x68e, 0x2002061, 0x0, 0x2bc)
r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x100081)
socket$inet6_udp(0xa, 0x2, 0x0)
r5 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
pwritev(r5, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
recvmsg(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000540)=""/97, 0x61}, {&(0x7f0000000a80)=""/254, 0xfe}, {0x0}, {&(0x7f0000000b80)=""/191, 0xbf}, {&(0x7f0000000000)=""/12, 0xc}, {&(0x7f0000000f80)=""/4096, 0x1000}], 0x6, &(0x7f0000000dc0)=""/155, 0x9b}, 0x0)
fcntl$notify(r0, 0x402, 0x4)
sendfile(r4, r5, 0x0, 0x20000102000004)
r6 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x1)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000780)={&(0x7f0000000300), 0xc, 0x0}, 0x40000)
getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f00000004c0)={'broute\x00'}, &(0x7f00000002c0)=0x78)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$TIOCGETD(r6, 0x5424, &(0x7f0000000100))
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @loopback}, &(0x7f0000000240)=0xc)

[  291.711092] audit: type=1400 audit(1553631683.598:53): avc:  denied  { map } for  pid=9076 comm="syz-executor.5" path="pipe:[21587]" dev="pipefs" ino=21587 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=fifo_file permissive=1
[  291.743057] binder: 9067:9079 ioctl 400454d9 20000040 returned -22
20:21:23 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='memory.events\x00', 0x0, 0x0)
ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f00000003c0))
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, 0x0, 0x1)
r2 = getpid()
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, <r3=>0x0}, &(0x7f0000000100)=0xc)
stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000001c0)=0x2)
ioctl$EVIOCGSW(r5, 0x8040451b, &(0x7f0000000280)=""/47)
setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={r2, r3, r4}, 0xc)
setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4)

20:21:23 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
ioctl$TIOCSBRK(r1, 0x5427)
read(r1, &(0x7f0000000180)=""/19, 0xfffffe47)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000300)=0x3)
recvmmsg(r1, &(0x7f0000005b40)=[{{&(0x7f00000000c0)=@rc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/59, 0x3b}], 0x1}}, {{&(0x7f0000000200)=@ethernet={0x0, @local}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)=""/97, 0x61}, {&(0x7f0000000300)}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x4, &(0x7f0000000380)=""/89, 0x59}, 0xfff}, {{&(0x7f0000003680)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000005a40)=[{&(0x7f0000003700)=""/82, 0x52}, {&(0x7f0000003780)=""/131, 0x83}, {0x0}, {&(0x7f0000004840)=""/150, 0x96}, {&(0x7f0000004900)=""/85, 0x55}, {0x0}, {&(0x7f0000004a40)=""/4096, 0x1000}], 0x7, &(0x7f0000005ac0)=""/118, 0x76}}], 0x3, 0x40010020, 0x0)

20:21:23 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x200002, 0x0)
r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000100), 0x8e, 0x0, 0x0, 0x0, 0x200000000001)
dup2(r1, r1)

20:21:24 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
getsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f0000000040)=""/97, &(0x7f00000000c0)=0x61)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

20:21:24 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24)
r1 = request_key(&(0x7f0000000140)='.request_key_auth\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='-em0{]+trusted{vmnet1\x00', 0xfffffffffffffffc)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, 0x100)
r3 = memfd_create(&(0x7f0000000080)='\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00', 0x0)
syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00')
write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff30ffff"], 0x4)
accept4$inet(r2, &(0x7f00000003c0)={0x2, 0x0, @dev}, &(0x7f0000000280)=0x10, 0x800)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f00000002c0))
ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100))
execveat(r3, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x1000)

20:21:24 executing program 2:
r0 = socket$inet(0x2, 0x1, 0x0)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$RTC_WIE_ON(r1, 0x700f)
ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f00000001c0)={0x1, 0x4, 0x1, 0x8000000000000})
getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000040)=""/224, &(0x7f0000000180)=0xe0)
setsockopt$sock_int(r0, 0x1, 0x100000000000a, &(0x7f0000000240)=0x3ff, 0x4)
ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0)

20:21:24 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x100000000000, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = epoll_create1(0x80000)
epoll_pwait(r1, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f00000000c0)={0x3}, 0x8)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, 0x0, 0x1)

20:21:24 executing program 5:
socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/mls\x00', 0x0, 0x0)
getsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
inotify_init()
syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x26d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r3=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
write$P9_RRENAMEAT(r2, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7)

20:21:24 executing program 0:
mlockall(0x10000008007)
fcntl$getflags(0xffffffffffffffff, 0x40b)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff)
r2 = accept4$unix(r1, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e, 0x80800)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000000), 0x84000)

[  292.451921] binder: 9067:9079 ioctl c018620b 0 returned -14
[  292.453178] binder: 9067:9103 BC_ACQUIRE_DONE node 321 has no pending acquire request
[  292.466360] binder: 9067:9079 ioctl 400454d9 20000040 returned -22
[  292.467712] binder: release 9067:9079 transaction 317 out, still active
[  292.479640] binder: release 9067:9102 transaction 320 out, still active
[  292.492913] binder: unexpected work type, 4, not freed
[  292.507777] binder: undelivered TRANSACTION_COMPLETE
20:21:24 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ac5000), 0x4)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0)
connect$unix(r1, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0xa)
r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3)
close(r0)

20:21:24 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, 0x0, 0x1)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e21, @rand_addr=0xfc2}, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e24, @loopback}, 0x20, 0x0, 0x0, 0x0, 0x5, &(0x7f00000000c0)='bridge_slave_0\x00', 0x10001, 0x7, 0x1})

20:21:24 executing program 0:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101000, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
fsetxattr$security_evm(r1, 0x0, 0x0, 0x0, 0x0)

20:21:24 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082)
r1 = memfd_create(&(0x7f0000000000)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\x06_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4081003)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00')
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r3, 0x200, 0x70bd27, 0x25dfdbff, {{}, 0x0, 0x4108, 0x0, {0x14, 0x18, {0x5c04a02f, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x40)
fallocate(r0, 0x11, 0x0, 0x100000001)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

[  292.548339] binder: 9117:9119 ioctl c018620b 0 returned -14
20:21:24 executing program 0:
prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffb000/0x4000)=nil)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000380)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000480)='./file0\x00')
lstat(&(0x7f00000001c0)='./bus\x00', 0x0)
chown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000440))
sched_setscheduler(0x0, 0xfffffffffffffffd, 0x0)
r1 = syz_open_dev$evdev(0x0, 0x0, 0x0)
ioctl$EVIOCGMASK(r1, 0x80104592, 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./bus\x00')
syz_genetlink_get_family_id$net_dm(0x0)
sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, 0x0, 0x20000080)
r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$eventfd(r2, &(0x7f0000000000)=0x3, 0x376416aa)
r3 = getpgid(0x0)
r4 = gettid()
tgkill(r3, r4, 0x27)
mprotect(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0)

20:21:24 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = dup3(r0, r0, 0x80000)
r2 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)="ceaea88731efb3c4dc9ae5ed2cf7ed9160f7d17643d3225a3074186bb38573ad0816c9198e708b5b38d194947a6c6e0b2cf021a93c8e2e0596489e76131e6cc4cb57a860aed297468ab45042429b6ecab3ea820a28d3aefe679a4764fa2be607b65b58868e8b8d7a91aa9386136c7cc0050fdd9870734c715f7868b6caf23d9d4e2996294adac22054490e02877c014f0f9ebc6f6d15f3046afc2b9cec44cc15a3c4c51db29a258f6a5cc234e6b2", 0xae, 0xfffffffffffffffc)
keyctl$instantiate(0xc, r2, &(0x7f00000003c0)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'user:', '', 0x20, 0xffffffffffffffff}, 0x28, 0xfffffffffffffffe)
recvfrom$unix(r1, &(0x7f00000000c0)=""/193, 0xc1, 0x40, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, 0x0, 0x1)

20:21:25 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="00000000000000001e9573a46480c1ede2b0e7f7f6adcf9190ea60aecec46359a8671ddb5419a3274a233416ca7e503971238fb69fb9d7678e6b6b42c4b5a0d17af19665ed2de9cb154c5d504c3bc7712f9697fd8ef27b5ad19d22492e5043ec073a42fc5180d66e18f286c64653e341335a811ffe9444d9eac805884edbd6fa087875612c0aa3a727f5101d65b71b2e2100442a40cab2d19b4c99a145"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0963fddd98cd1aa05a218f538506ccda5948d36309000000d3", @ANYRES64=0x0, @ANYBLOB="2afd000000000000"], 0x0, 0x0, 0x0})
getpeername(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000180)=0x80)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000200)=@req3={0x1, 0x2, 0x0, 0x81, 0x1ff, 0x7fffffff, 0x9997}, 0x9)

20:21:25 executing program 2:
r0 = socket$inet6(0xa, 0x80000, 0x4000000010ffb)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth1\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="4100000005030000bf0700000500000001010000000000008e0f000083700000030000000500000000100000"]})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00\x00\x80\x00\x00\x00\x00@\x00', &(0x7f0000000080)=@ethtool_cmd={0x50}})
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000180)=0x1063, 0x4)
init_module(&(0x7f0000000000)='syz_tun\x00\x00\x80\x00\x00\x00\x00@\x00', 0x79, &(0x7f0000000200)='\x00')
rt_sigreturn()
r1 = dup3(r0, r0, 0x80000)
ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f00000000c0))

20:21:25 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x8100000891e, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, 0x0, 0x10001)

20:21:25 executing program 3:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000000840))
pipe2(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000480)=""/248)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(r0, &(0x7f00000000c0)=""/3, 0x3)
socketpair$unix(0x1, 0x4000000001, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = memfd_create(&(0x7f0000000280)='[\'posix_acl_access\x00', 0x0)
pwritev(r4, &(0x7f0000000440)=[{&(0x7f0000000380)='S', 0x1}], 0x1, 0x4081886)
sendfile(r2, r4, 0x0, 0x20020102000007)
recvfrom$unix(r3, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930000)
dup2(r4, r2)
openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x19)

20:21:25 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0)
sendfile(r0, r0, 0x0, 0x20)
sendfile(r0, r0, &(0x7f0000000100), 0x7f8)
fcntl$setstatus(r0, 0x4, 0x4c00)
fcntl$getown(r0, 0x9)
ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f00000000c0)=<r1=>0x0)
r2 = dup(r0)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000340)={{0xa, 0x4e22, 0x40, @local, 0x10000}, {0xa, 0x4e21, 0x0, @mcast1}, 0x8, [0xfffffffffffffffc, 0x0, 0x8, 0x0, 0x0, 0x4, 0x3a4, 0x5]}, 0x5c)
r3 = syz_open_procfs(r1, &(0x7f0000000140)='net/sco\x00')
ioctl$EVIOCGPHYS(r3, 0x80404507, 0x0)

20:21:25 executing program 0:
mkdir(0x0, 0x0)
openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000380)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000180)='./file0\x00')
prctl$PR_GET_SECCOMP(0x15)
ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0)
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000240)='./bus\x00', &(0x7f0000000280)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000140)=@v2={0x2000000, [{0x1}, {0x4, 0x3}]}, 0x14, 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
linkat(r2, &(0x7f0000000100)='./file0\x00', r1, 0x0, 0x0)
timerfd_gettime(r2, &(0x7f0000000000))
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0)
getresuid(&(0x7f00000005c0), 0x0, 0x0)
chdir(0x0)
sendfile(r2, r2, &(0x7f0000000240), 0x0)
write$P9_RRENAMEAT(r1, &(0x7f00000001c0)={0x7, 0x4b, 0x2}, 0x7)

[  293.336046] binder: 9117:9142 ioctl c018620b 0 returned -14
[  293.344833] binder: release 9117:9142 transaction 326 out, still active
[  293.352072] binder: unexpected work type, 4, not freed
[  293.385929] binder: undelivered TRANSACTION_COMPLETE
20:21:25 executing program 2:
r0 = eventfd2(0x0, 0x0)
r1 = open(&(0x7f00000003c0)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x2e7)
pipe2(0x0, 0x2)
rename(0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(r1, &(0x7f00000002c0)='cgroup.type\x00', 0x2, 0x0)
futimesat(0xffffffffffffffff, 0x0, &(0x7f0000000280)={{0x0, 0x2710}})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'hwsim0\x00'})
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@dev={0xfe, 0x80, [], 0x28}, @dev={0xfe, 0x80, [], 0x19}, @dev={0xfe, 0x80, [], 0x16}, 0x8, 0x8, 0x1000, 0x100, 0xcc5c})
sendfile(r2, r0, &(0x7f0000000040), 0x5)
r3 = accept4$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000140)=0x1c, 0x800)
ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000000)={'bcsh0\x00', 0x81})
ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f00000000c0))
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000080)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)

20:21:25 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup3(r0, r0, 0x80000)
ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f00000000c0)={0x0, 0x3f, 0x0, 0x2})
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r2, r2)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, 0x0, 0x1)

[  293.412303] binder: release 9117:9142 transaction 323 out, still active
[  293.435285] binder: 9173:9175 ioctl c018620b 0 returned -14
20:21:25 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f00000016c0)={0xa, 0x0, 0x0, @loopback, 0x7fff}, 0x1c)
r1 = dup2(r0, r0)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000018c0)=<r2=>0x0)
clone(0x2102001fb9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = gettid()
writev(r1, &(0x7f0000001580)=[{&(0x7f0000000300)="ac6101576df72e8490ebdf2debebb22ca6eb7304e5b2276b307bf4f02614eeb4903b287b005e758fd2528fa519f613c7a36a4f2f73dade439d55945c3bada5bbca543b74ecbdb58411e58dca5fa7606a1cbd8292ac35c358f61bf3759ef6cf1e8e9ecf62cb151821763351e62962fbcb05c467174a3179c93b3934ee8d81bc9022d7efed454ced322fc89ed671bc11aa2013390e23696b040d3a485952695a5e7417dcf8c33090399660de09159d00c9e31294b78808680a8623704d4ddee9b756bc5caa647fa41945de8a12c4dce6d97ff820b1afa7b6025ca43cab38df25eb9174beed02515f0a87c3808962fb75", 0xef}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="e4f95c76c334d5bb465cacf0f4a7040e7d419f2c96bedbed8e298af743806c0440dec7eeed157b25dbe23e34d77b401a70c733f9c3bf8658b7cd6fe5b6d849ee9ebbb585f4a161b3914b524c0dfc1c8c4fa581d043f5fd9b3b12f324c2ad3c5accc11deaf2", 0x65}, {&(0x7f0000001480)="b65cdafbdc3f654a386b1d625387dc7a2ae91d41302134d3a49b8656672764899b6d6acd31fb1226846cd2d6e6c459a996e394535688d19792b45011b8606a342e721c47aa7d24bc5243362beeb8d3f340ecccb62004e13649001896c373ec5776c0303a627b67475d9766438578d7c3ac1361b5127349ed83b3f276861e56ec5aac636188556a13452cb481b3bb3349373f84f3ef9056b0d9f7800f01d37f46b99421bae57f3af261c48379b8386266e5b3cd4895bd79", 0xb7}, {&(0x7f0000001540)='Z', 0x1}], 0x5)
setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast1}}}, 0x88)
ptrace$setopts(0x4206, r3, 0x0, 0x0)
setxattr$security_smack_transmute(&(0x7f0000001600)='./file0\x00', &(0x7f0000001640)='security.SMACK64TRANSMUTE\x00', &(0x7f0000001680)='TRUE', 0x4, 0x2)
tkill(r3, 0x5)
sendmsg$nl_netfilter(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10c0000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xf0, 0x5, 0x4, 0x404, 0x70bd25, 0x25dfdbfd, {0x7, 0x0, 0x9}, [@generic="ae6a24853f24854b50f32bc9b76ea389a47ad0ff901675f68b8366d7905e70dfd8133c2bd583b526d6fddf6c830a056a1e21a0db97dad5bee417abee1e0effce5fc62d65391a748545", @generic="363e25569fbffa3e4051b0c9ee2c478ec83c3a24913c877c9710e76cf2655cbb4c94b8a05ed9133a52d337490e1e8a840e8c73c7340fea6fb33f434f35631026d5fc0236837478ae73bcaa1ad99b237899f89ae2e9eee63fdb2ea7b744a4f6b33ccb0c8f6606b2137d6816227d16471db9d0115aaad3fb092d6956dfd974", @generic="108c408c3fc7f14c52a833da65c6da6ea782488e2a"]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000081}, 0xc000)
rt_sigqueueinfo(r2, 0x1d, &(0x7f0000001700)={0x32, 0x8, 0x57ef})
fcntl$setstatus(r0, 0x4, 0x2000)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x14, 0x4, "0024fd24e2d6db7e7947690baafcc0057b1c8d5f5aa44bfe8930528a2e7946c04dd42ee153b637690fe196514f104eb59a30e088663060245965105027bbaae9", "a9b3eca147c136e63c696ad79761c82fd171acede64612cbce6016c72e213850", [0x5]})

20:21:25 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x7)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_targets\x00')
getsockname$unix(r1, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
fallocate(r1, 0x40, 0x5, 0xfffffffffffffff7)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

[  293.514852] binder: 9173:9188 unknown command -570596599
[  293.533072] binder: 9173:9188 ioctl c0306201 200003c0 returned -22
20:21:25 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008911, &(0x7f0000000680)="0adc1f12abf694f8ee78f1e6743c48a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000900000003000000280300001001000010010000100100001001000000000000580200005802000058020000580200005802000003000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0000000000000000000000000001000000000000000000000000000000000000000000000000000000000000080000009693c7fedd1ad9eebd5e06844d70b3070047ca3b1d2afb934acbd35aa82b433664285dfdf5f21faae121cb779ef9bcf70c0fb89c87fe"], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c80010010000000000000000000000000000000000000000000000004800435400000000000000000000000000000000000000000000000000000000000004000200000005000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020014801000000000000000000000000000000000000000000000000280065756936340000000000000000000000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000000004d2000004d6e4f3ffff01030000280041554449540000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x388)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, 0x0, 0x1)

20:21:25 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0)
ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, 0x0)
bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x37)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
socket(0x0, 0x0, 0x0)
ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0)
sched_getattr(0x0, 0x0, 0xdd, 0x0)
r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0xfffffffffffffe84)
set_thread_area(0x0)
close(r2)

[  293.615094] binder: 9193:9196 ioctl c018620b 0 returned -14
[  293.643929] binder: 9193:9196 ioctl 40046205 7 returned -22
20:21:25 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1f, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r1, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, 0x0, 0x1)

20:21:25 executing program 2:
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/checkreqprot\x00', 0x101082, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0xe, &(0x7f0000000440)=0x6, 0x4)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0)
r2 = add_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="39eb14332825b88f31e11b30eaa8f86660cc79b08a3a95d0c806b25a1ca259e211357d7b87313043bf3780d425196469c7abc04f5acd53c778cfef1c7e222666d72907461ad24f57c401b1fd0d04d17aa615a830549c13f7fc39ecea5f9b8432c571e82f9881f14fd7db1cbe93cbd959b6f130548441ee3c600ebfa0d2475dd60ac27d8c6dbe13cd9ef2dc418f74568dd5eec98fd2be1bd0dbcfaeeacc89f779c2e7b547f72435c5029b33855a4ece31f45474bda720", 0xb6, 0xfffffffffffffff8)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000200)={r2, 0x8, 0x8}, &(0x7f0000000240)=ANY=[@ANYBLOB='enc=pkcs1 hash=sha1-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000002c0)="8ad74f4d275e069949a79a2139735cf3e2a2ec0ca522a11ee7002b548c33a1c6348a9c05a6c79641d33bf8123df09f3a9d700e80f26c7612afc9a281fe0582e22ba69bbc7af72c2203c20c3937a68f0ee824bfcea6f3662e3924f1f30e0bd210419bcd64912fa77f89343d97c8a06e059ebf999cc34522769c31691e337ec708c5539e1ec40274b2c0b006", &(0x7f0000000380)=""/122)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00')
preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x10400003)
getsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000480)={@broadcast, @multicast1}, &(0x7f00000004c0)=0x8)
getpid()
write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000180)={0x7}, 0x7)
ioctl$TIOCEXCL(r3, 0x540c)

20:21:25 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000100)={0x53, 0x9, 0xffff, {0x10000, 0x5}, {0x800, 0x100000001}, @cond=[{0x8fd, 0xffffffff, 0xff, 0x1, 0x2, 0x4}, {0x1ff, 0x8, 0x0, 0x5, 0x7, 0xfffffffffffffffb}]})
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, 0x0, 0x1)

20:21:26 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x100000890f, &(0x7f0000000000)="0adc1f123c123f3188b070")
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10)
getsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f000059dffc), &(0x7f0000d8cffc)=0x4)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10)

20:21:26 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
epoll_create(0xfffffffffffffffc)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, 0x0, 0x1)

20:21:26 executing program 2:
r0 = open(&(0x7f0000000040)='./file0\x00', 0x480000, 0x48)
write$9p(r0, &(0x7f0000000340)="98fdc03d4741154f684142d992fa19664dd03f3a5df612fc1283f356455d69a81837a9f1735c90c99c31c99a7f34a9c8118440c3dd8cb0007e517a64dae93cf71513023606ecf0a7e48b20cee8d90711891ac26c94b3384896050cecd59de4ab5a770c6867de7334ce916d50fed5b047389698388556726afd5a75bbddbf4dac73c34e413ee128921c373ad43fba655be64f9f2d2227a38460b611d115", 0x9d)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='wchan\x00')
sendfile(r1, r1, &(0x7f00000000c0)=0x40000, 0x800000007fe)

20:21:26 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4)
r1 = socket$inet(0x10, 0x4004000000000003, 0x0)
sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000240007021dfffd946fa2830020200a00050000000003fffffffffffff000ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0)

20:21:26 executing program 0:
mkdir(0x0, 0x0)
openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000380)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000180)='./file0\x00')
prctl$PR_GET_SECCOMP(0x15)
ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0)
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000240)='./bus\x00', &(0x7f0000000280)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000140)=@v2={0x2000000, [{0x1}, {0x4, 0x3}]}, 0x14, 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
linkat(r2, &(0x7f0000000100)='./file0\x00', r1, 0x0, 0x0)
timerfd_gettime(r2, &(0x7f0000000000))
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0)
getresuid(&(0x7f00000005c0), 0x0, 0x0)
chdir(0x0)
sendfile(r2, r2, &(0x7f0000000240), 0x0)
write$P9_RRENAMEAT(r1, &(0x7f00000001c0)={0x7, 0x4b, 0x2}, 0x7)

20:21:26 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x38)
ptrace$cont(0x18, r1, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x100})
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r1, 0x0, 0x0)

[  294.300748] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
20:21:26 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
pipe2$9p(&(0x7f0000000040), 0x4000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000001e994a24eee60b8e0000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffeb0, 0x0, &(0x7f0000000480)="2feeb969dd771a5689f53af6ee98b78c80341396ba3610b1dfbdfa0a40abd880802da1f53a8cbe55bc7efbcb77486c4862cb30c38149703241f9d9e930785fd55e0b13e394e91ea8f7c8c955e64e855af6bf4521112fb79bf14e6611f87aa6234834508c3d47b8395be8ba262ff0f2f6c419b497fa80ec48355224d7e2cf48a10d7fc4bece88438032739da1a314fe44de9f89de3493af3077684bbdc6f3d7b3402410006426cf8f052af3eb737c950237eed5c22bd0b7fb9ff39dcda4c97b42193f9364fa60321cfb64fcb2"})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
creat(&(0x7f0000000000)='./file0\x00', 0x1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="000000003df100000000b58a2acaefbf0ec1ef06ebc5f082cb2ab37cc164031b8e39be44c50c28d6d76d5bb5c76e6337fb75c58d3c105c9350eefd931e41cc282442d49834b49ab86f003a0d0ee308ac70b88fed2d74fef964a9ea721fc04e35549cc9b7fbeeb0e5232b7484bc65b3c0ee3be6102a21cef441fdc92d7eca5ecf4f312f7740864f0cd104c168f56fd3b08cf8a04c74bfd13849253254c4b53f133eb12666de2a0ff5b93ba468e68ba88a1a"], 0x0, 0x0, 0x0})

20:21:26 executing program 1:
r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x20800, 0x0)
ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000100)=""/1)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000180), 0x89, 0x2, 0x0, 0x0, 0xffffffffffffffff)
ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000140)=""/37)
setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4)

20:21:26 executing program 3:
r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x4, 0x0)
readv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/113, 0x71}], 0x1)

20:21:26 executing program 5:
r0 = openat$selinux_status(0xffffffffffffff9c, 0xfffffffffffffffe, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0xf8, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x401}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8b}]}, @TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x736}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x5c, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x67dc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2bce}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x404c081}, 0x40000)
syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0x44, 0x7, 0x5, [@loopback]}]}}, @icmp=@timestamp_reply}}}}, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0xfffffffffffffffc]})

20:21:26 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x3, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
syz_genetlink_get_family_id$tipc2(0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)

[  294.404196] binder: 9193:9204 ioctl c018620b 0 returned -14
[  294.411169] binder: 9193:9240 ioctl 40046205 7 returned -22
[  294.419360] binder: release 9193:9204 transaction 332 out, still active
[  294.429178] binder: release 9193:9240 transaction 335 out, still active
[  294.445379] binder: unexpected work type, 4, not freed
[  294.464658] binder: undelivered TRANSACTION_COMPLETE
20:21:26 executing program 3:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00')
r3 = accept$inet6(r2, &(0x7f0000000440)={0xa, 0x0, 0x0, @local}, &(0x7f0000000480)=0x1c)
accept4$inet(0xffffffffffffff9c, 0x0, &(0x7f00000001c0), 0x80000)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0)
setrlimit(0x1, 0x0)
ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000000c0))
socket(0x0, 0x0, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_SIOCBRDELBR(r3, 0x89a1, 0x0)
write$selinux_validatetrans(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, 0x0, 0x0)
ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f00000004c0)=ANY=[@ANYBLOB="ff01000000000000090000000000000001fcffffffffffff07000000000000008b00000000000000670201000000000000000000000000000000000000000000000000000000000000000000000000004be200000000000094000000000000000000000000000000007f0400000000000000000000000000000000000000000000000000000000000000000000000000000200000000000004000000000000000000010000000000d30002e1000000000000000000000000000000000000000000200000000000000000000000000000001000000000000001040000000000000000000000000000ff03800600000000000000000000000000000000000000000000000000000000000000000000000009000000000000000300000000000000ffffff7f00000000ff000802000000000000000000000000000000000000000000000000000000000000000000000014000800000000000004060000000000000100000000000000010407050000000000000000000000000000000000000000000000000000000000000000000000000600000000000000a1000000000000000200000000000000f73cfcff000000000000000000000000000000000000000000000000000000000000000000000000f9ffffffffffffff0700000000000000090000000000000006ff0080000000000000000000000000000000000000000000000000000000000000000000000000010400000000000009000000000000000000000000000000080009ff000000000000000000000000000000000000000000000000000000000000000000000000"])
creat(&(0x7f0000000280)='./file0\x00', 0x2)
creat(0x0, 0x0)
ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014)
listen(0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
dup(0xffffffffffffffff)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
r4 = add_key(&(0x7f0000000180)='user\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="b66d6c14d54ca57284c70ee71c4eb815", 0x10, 0xfffffffffffffffb)
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='\x00', r4)

20:21:26 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f00000000c0), 0x8c, 0x5, 0x0, 0x0, 0x1)
fcntl$setpipe(r1, 0x407, 0x5)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0xa837909930d23af1)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=<r3=>0x0)
sendmsg$nl_netfilter(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x88, 0x2, 0x2, 0x100, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x1}, [@nested={0x4, 0x34}, @nested={0x70, 0x20, [@typed={0x8, 0x80, @pid=r3}, @generic="4e45befe930dc53b51c886ece4d3c797a87e9aac7599c5b6086ab83ac5d7eace089ff909867daab643b29e765bdc63eb1e6c62a6c2c821c0f808ea2312e0458d822ee2af881572810c22396767e4bf267d9c82dd29206cba12b82810bd9b7d8bda813da9"]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000)

[  294.496467] binder: 9249:9255 ioctl c018620b 0 returned -14
20:21:26 executing program 5:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x54}}, &(0x7f0000000040)='GPL\x00', 0x1, 0x99, &(0x7f0000000240)=""/153}, 0x48)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001300)={0x2012})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
write$cgroup_type(r1, &(0x7f0000001340)='threaded\x00', 0x9)
timer_create(0x7, &(0x7f00000000c0)={0x0, 0x3c, 0x0, @thr={&(0x7f0000000080)="f599e0e310f81b355497a9e37e85237e8fe52d30412999eb75b62042265f2b9225c9a724f76590e93f", &(0x7f0000000300)="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"}}, &(0x7f0000000100)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f00000001c0))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x0, 0x0}, 0x10)

20:21:26 executing program 1:
r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/status\x00', 0x0, 0x0)
fadvise64(r0, 0x0, 0x240, 0x3)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x40000, 0x0)
ioctl$TCXONC(r2, 0x540a, 0x80000001)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept(r1, &(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f0000000140)=0x80)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, 0x0, 0x1)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)

20:21:26 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000040)="16e38b30c0c6cdc469655987dc1ca5a697009f26f46ab6251310e1604c16eaa8440cce3dad573ae6e59cde14b05d01fb6f0dce2b5effe106b1ff31249020512d1a91fc0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

[  294.574768] binder: 9249:9263 transaction failed 29189/-22, size 24-8 line 3117
[  294.611272] binder: 9249:9263 BC_ACQUIRE_DONE u0000000000000000 no match
[  294.701996] binder: 9275:9277 ioctl c018620b 0 returned -14
20:21:27 executing program 0:
bind$inet6(0xffffffffffffffff, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c)
r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000040)={0x7, {{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e22, @local}}}, 0x108)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0)

20:21:27 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000a40)='/selinux/checkreqprot\x00', 0x40001, 0x0)
accept4$inet6(r1, 0x0, &(0x7f0000000a80), 0x80800)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x3}, 0x40}, 0x1c)

20:21:27 executing program 2:
clone(0x802102000ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x400000080000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x38)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xeb})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x400000000000000, 0xfffffffffffffffe)

20:21:27 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$security_selinux(r0, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:devtty_t:s0\x00', 0x1e, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, 0x0, 0x1)

20:21:27 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group\xaestat\x00<#I[O9\x93\xe8\xf4\xdcx\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xeb-\xce\xa4x\x1b:\xce\x84\x9ap\xc8(g@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0xc0185879, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7ff00, 0x7fff})
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x0, 0xfffffffffffffffb})
ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000080)={0x22, 0x1c, 0x12, 0x1a, 0x0, 0x9, 0x1, 0x2d, 0x1})
setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x10000, 0x1, 0x7, 0x5, 0x8}, 0xc)

20:21:27 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x26e1, 0x0)
syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x1)
r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='memory.even4s\x00v\xa1J\x9aLH\xfb\vFL?', 0x7a05, 0x1700)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x401})
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x6f1f, 0x8001})
write$cgroup_pid(r1, &(0x7f0000000000), 0xfffffea6)

20:21:27 executing program 0:
epoll_create1(0x0)
epoll_create1(0x0)
r0 = getpid()
capget(&(0x7f00000001c0)={0x0, r0}, 0x0)
r1 = syz_open_dev$sndtimer(&(0x7f0000000400)='/dev/snd/timer\x00', 0x0, 0xfffffffffffffffe)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0)
r2 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0)
write$binfmt_elf64(r2, 0x0, 0x0)
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3, 0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mlockall(0x40000001)
fcntl$getownex(r3, 0x10, &(0x7f0000000200))
r4 = creat(0x0, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000000000)=ANY=[@ANYRESHEX=r4], 0x1)
write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0x1da)
fallocate(r4, 0x0, 0x0, 0x4003ff)
write$cgroup_type(r4, &(0x7f0000000240)='threaded\x00', 0x203)
syz_open_dev$binder(0x0, 0x0, 0x4000200000804)
fallocate(r4, 0x3, 0x8000, 0x8001)
fallocate(r4, 0x3, 0x5e89, 0xfff9)
sendfile(r3, r3, 0x0, 0x3)
unshare(0x40000000)
ioctl$void(r3, 0xc0045c79)
ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000000c0)="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")
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82)

20:21:27 executing program 5:
r0 = socket$inet(0x10, 0x3, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'hsr0\x00', 0x3}, 0x18)
sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="24000000200007031dfffd946f610500020000001f00000000000800080011000400ff7e", 0x24}], 0x1}, 0x0)

20:21:27 executing program 1:
r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, 0x0, 0x1)
fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, <r3=>0x0})
write$cgroup_pid(r0, &(0x7f00000001c0)=r3, 0x12)
prctl$PR_SET_ENDIAN(0x14, 0x2)
ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000240)={0x8000, 0x1, 0x8000, 0x9, 0x401, 0x1})
getsockopt$inet_mreq(r1, 0x0, 0x27, &(0x7f00000000c0)={@broadcast, @broadcast}, &(0x7f0000000100)=0x8)

[  295.159001] audit: type=1400 audit(1553631687.038:54): avc:  denied  { relabelto } for  pid=9288 comm="syz-executor.1" name="UDP-Lite" dev="sockfs" ino=21495 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:devtty_t:s0 tclass=rawip_socket permissive=1
20:21:27 executing program 5:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000040)=0x8, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20040000, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6}, 0x1a)

20:21:27 executing program 5:
perf_event_open(&(0x7f0000940000)={0xffffffffffffffff, 0x70, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x819, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
openat$selinux_member(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/member\x00', 0x2, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000100))
mmap(&(0x7f000060b000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x2)
unshare(0x4020500)
getpid()
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x1)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x2}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
inotify_init()
r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000480)=ANY=[], 0x2e7)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x1c3c, 0x9, 0x2, 0x7, 0x4, [{0x401, 0x6f348f8e, 0x91, 0x0, 0x0, 0x808}, {0x60b8, 0x5, 0x80000000, 0x0, 0x0, 0x200}, {0x400, 0x8, 0xfffffffffffffffb, 0x0, 0x0, 0x800}, {0x80, 0x5, 0x2, 0x0, 0x0, 0x2000}]})
sendfile(r2, r2, &(0x7f00000001c0), 0xa198)
getgroups(0x0, 0x0)
r3 = gettid()
syz_open_procfs(r3, 0x0)

[  295.491149] binder: 9275:9283 ioctl c018620b 0 returned -14
[  295.511808] binder: release 9275:9283 transaction 342 out, still active
[  295.522399] binder: unexpected work type, 4, not freed
[  295.528412] binder: undelivered TRANSACTION_COMPLETE
20:21:27 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
dup2(r0, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, 0x0, 0x1)

20:21:27 executing program 2:
r0 = socket$packet(0x11, 0x2000000000004, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000080), 0x4)
ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x6)
open$dir(0x0, 0x0, 0x0)
mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x10, 0xffffffffffffffff, 0x0)

20:21:27 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xa1, 0x0, &(0x7f0000000000)="79a64e91ab96394b241b3ffeda3e60be131972be0f0a296ed3278dda267cbcedd918cca264039a3b55139cfca1f8363d842a7a9cc51c0ee6fd2ca0789053c1d538ff4f5138e2cd4574356cbc4414e83311aa63308dce887d35695420ab909436af07a2951565f9b77454b7ac3d11784c03da0cf5aa3392d5a02ed45a6bdbb7aa6fe6c1557ec58527c24ee343cd56c74a9ecda435e565a53151924061441baa0916"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000800098fef13c5440f8c689343bad86308466d78e188024f151ee69804b748c7ebf1d9f8de3d2e19357df2f7ad54d90631ad9411272d8d47a76534a93bec4e50ad22a1abaa3ef98213fc7796de"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0080000000000000"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
r1 = dup3(r0, r0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=@gettaction={0xbc, 0x32, 0x510, 0x70bd28, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x9c, 0x1, [{0x10, 0xc, @TCA_ACT_KIND={0x8, 0x1, 'xt\x00'}}, {0x10, 0x1, @TCA_ACT_INDEX={0x8}}, {0x10, 0x10, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1f, @TCA_ACT_INDEX={0x8, 0x3, 0xc5}}, {0x14, 0x7, @TCA_ACT_KIND={0xc, 0x1, 'mirred\x00'}}, {0x10, 0x1b, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x1d, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xd, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080)
getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f00000002c0), &(0x7f0000000380)=0x30)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})
write$binfmt_elf32(r0, &(0x7f00000006c0)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x1, 0x7, 0x8, 0x5a49, 0x3, 0x3e, 0x5d, 0x3af, 0x38, 0x2d9, 0x7, 0x5, 0x20, 0x1, 0x400, 0x10001, 0x1f}, [{0x6474e553, 0xb59e, 0x1, 0x101, 0x0, 0x5c, 0x5, 0x9}], "cf18ad4b7fde677bf949e576a7f15087c027a6dbcadc1baafcad1b942ddda5356e0e47774e1cfaec0e6a5a1055a6dabb0a50ddcf15ea7ea1be01ed60bd0d7e66614ef72597f635dbc8e73d1ff38a9253ae365f565cf5f2def7822f82536a6935ea038c063229524bc0c5d718553ed25221eef4a1c10c528d9a8836b1745cdf9c2db359676fa63b7fd6cdf119651580e3e0e3203dd76ed2cafc1a27d928cc7344888cc14f1af0896554aee1b488d5ac6d895a380310da3f317c2a984948a9", [[], [], [], [], []]}, 0x616)
setrlimit(0xd, &(0x7f0000000280)={0x2})

20:21:27 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f000007c000/0x4000)=nil, 0x4000, 0x2)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x20, 0x8, 0x865, 0x8, 0x1ff})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

[  295.541039] binder: release 9275:9283 transaction 339 out, still active
20:21:27 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000014000905000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="14000300fe8000000000000000000000db210909b3f67d070039c4327860a46be0b367092b238af83988ba02c27602198500be29b76eec0300000000000000704390e72a28b36ded9b3a05495caf92f08a63da6127bcfba89f6b6f01281acfefcae0acf1b85333453bbadaa43e729551e6a85da4f3d849786916d880b4638b2f752a747957d66a66410ca435d76c26e2b45abbb9aa7e0f2bef4e2bc9c8b2a30a4baca5fce4487c7541b149b3276812aa04d0327a2e16330b759e64f760c1d60c48075777e051a6008c32917a0252bec48b1bdc3143c57dd4c324bf6dd17fea706dd0e8fe78136f6cc79c4f100000000000"], 0x2c}}, 0x0)

[  295.597908] binder: 9327:9331 ioctl c018620b 0 returned -14
20:21:27 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
pwrite64(r1, &(0x7f000003bfff)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0)
lseek(r0, 0x0, 0x1)
sendfile(r1, r1, &(0x7f0000000440), 0x20)
sendfile(r1, r1, &(0x7f0000000100), 0x7f8)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00')
pivot_root(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='./file0/file0/file0\x00')
remap_file_pages(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2000002, 0x0, 0x0)
r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00')
write$UHID_CREATE2(r2, 0x0, 0x0)
setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='security.ima\x00', &(0x7f0000000240)=@v2={0x7, 0x0, 0x12, 0xff, 0x75, "83ad28f93018456f328546d0c0430940f3a59a13c8ffcac44c988a4a1556b9cad7730819468aa4bcc410b6c091999b08eb4cae7002c82798efabfd5d047b8ae1f12cd3d6c0dc7e6d7132ce8ab438a3d53067242188f144fa80bb7cc79e62ea43e144de813bbbe7729b260590e6b5bf1dc746a100b7"}, 0x7f, 0x2)
ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000002c0)=<r5=>0x0)
fcntl$setown(r2, 0x8, r5)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r4, 0x40045402, &(0x7f0000000180)=0x1)
sendfile(r3, r4, 0x0, 0x8000)
mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0)
mount$bpf(0x20000000, 0x0, 0x0, 0x5004, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000780)='TIPC\x00')
mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0)
mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x1910824, 0x0)
umount2(&(0x7f0000000800)='./file0\x00', 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)

20:21:27 executing program 1:
r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000340)='asymmetric\x00', &(0x7f0000000400)='securitylo\x00')
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, 0x0, 0x1)
openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x48240, 0x0)

[  295.705286] ------------[ cut here ]------------
[  295.710083] kernel BUG at drivers/android/binder_alloc.c:1130!
[  295.731033] invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI
[  295.736936] Modules linked in:
[  295.740139] CPU: 0 PID: 9338 Comm: syz-executor.4 Not tainted 4.14.108+ #38
[  295.744144] binder: 9327:9344 BC_ACQUIRE_DONE u0000000000000000 no match
[  295.747251] task: ffff8881a29d5e00 task.stack: ffff8881a28f8000
[  295.747271] RIP: 0010:binder_alloc_do_buffer_copy+0xc7/0x500
[  295.747279] RSP: 0018:ffff8881a28ff5d0 EFLAGS: 00010216
[  295.747290] RAX: 0000000000040000 RBX: 0000000020001dd0 RCX: 0000000000000345
[  295.747301] RDX: ffffffff82237477 RSI: ffffc900071cf000 RDI: ffff8881d6da21d8
[  295.785906] RBP: 0000000000000020 R08: ffff8881a28ff8b0 R09: 0000000000000028
[  295.793190] R10: ffffed103451ff06 R11: ffff8881a28ff837 R12: ffff8881d2073d18
[  295.800471] R13: 0000000000000028 R14: 0000000000008000 R15: ffff8881a28ff8b0
[  295.807743] FS:  00007f0c5b347700(0000) GS:ffff8881dba00000(0000) knlGS:0000000000000000
[  295.815967] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  295.821845] CR2: 000000000046d830 CR3: 00000001cac92003 CR4: 00000000001606b0
[  295.829123] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  295.836401] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  295.843696] Call Trace:
[  295.846296]  ? binder_alloc_do_buffer_copy+0x1ef/0x500
[  295.851595]  binder_get_object+0x90/0x190
[  295.855752]  binder_transaction+0x1e2d/0x5640
[  295.860282]  ? check_preemption_disabled+0x35/0x1f0
[  295.865300]  ? binder_inc_ref_for_node+0xba0/0xba0
[  295.870237]  ? perf_trace_lock+0x11e/0x4e0
[  295.874483]  ? perf_trace_lock_acquire+0x4e0/0x4e0
[  295.879425]  ? HARDIRQ_verbose+0x10/0x10
[  295.883515]  ? __might_fault+0x104/0x1b0
[  295.887584]  ? lock_downgrade+0x5d0/0x5d0
[  295.891737]  ? lock_acquire+0x10f/0x380
[  295.895719]  ? __might_fault+0xd4/0x1b0
[  295.899707]  ? __might_fault+0x177/0x1b0
[  295.903785]  ? binder_thread_write+0x512/0x1f90
[  295.908477]  ? perf_trace_lock_acquire+0x4e0/0x4e0
[  295.913419]  ? binder_transaction+0x5640/0x5640
[  295.918091]  ? HARDIRQ_verbose+0x10/0x10
[  295.922181]  ? lock_downgrade+0x5d0/0x5d0
[  295.926370]  ? lock_acquire+0x10f/0x380
[  295.930350]  ? __might_fault+0xd4/0x1b0
[  295.934340]  ? __might_fault+0x177/0x1b0
[  295.938412]  ? binder_ioctl+0xd48/0x14ea
[  295.942490]  ? perf_trace_lock_acquire+0x4e0/0x4e0
[  295.947426]  ? binder_poll+0x230/0x230
[  295.951320]  ? __lock_acquire+0x56a/0x3fa0
[  295.955559]  ? perf_trace_lock+0x11e/0x4e0
[  295.959798]  ? check_preemption_disabled+0x35/0x1f0
[  295.964825]  ? perf_trace_lock_acquire+0x4e0/0x4e0
[  295.969760]  ? check_preemption_disabled+0x35/0x1f0
[  295.974798]  ? binder_poll+0x230/0x230
[  295.978693]  ? do_vfs_ioctl+0xabe/0x1040
[  295.982757]  ? selinux_file_ioctl+0x426/0x590
[  295.987254]  ? selinux_file_ioctl+0x116/0x590
[  295.991755]  ? ioctl_preallocate+0x1e0/0x1e0
[  295.996188]  ? selinux_parse_skb.constprop.0+0x16b0/0x16b0
[  296.001852]  ? __fget+0x1ff/0x360
[  296.005316]  ? lock_downgrade+0x5d0/0x5d0
[  296.009476]  ? lock_acquire+0x10f/0x380
[  296.013454]  ? __fget+0x44/0x360
[  296.016835]  ? check_preemption_disabled+0x35/0x1f0
[  296.021877]  ? security_file_ioctl+0x7c/0xb0
[  296.026308]  ? SyS_ioctl+0x7f/0xb0
[  296.029848]  ? do_vfs_ioctl+0x1040/0x1040
[  296.034007]  ? do_syscall_64+0x19b/0x4b0
[  296.038082]  ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  296.043468] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 0d 04 00 00 48 8b 6d 58 48 29 dd e8 33 33 0d ff 49 39 ed 76 07 e8 29 33 0d ff <0f> 0b e8 22 33 0d ff 4c 29 ed 49 39 ee 77 ec e8 15 33 0d ff 41 
[  296.062781] RIP: binder_alloc_do_buffer_copy+0xc7/0x500 RSP: ffff8881a28ff5d0
[  296.070144] ---[ end trace 8c597235840e84cc ]---
[  296.074911] Kernel panic - not syncing: Fatal exception
[  296.080625] Kernel Offset: 0xaa00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff)
[  296.091455] Rebooting in 86400 seconds..