\xab\xff\x9b\xf9B~S\xd4\xe9m\xc0\xa7\x1dE\xe2\x1b\xc0\xf4\xc1f\xa3\xbb\xc1Ky') r39 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r40 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r40, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r40, 0x0) ioctl$ASHMEM_SET_NAME(r40, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) read$char_usb(r1, &(0x7f0000000000)=""/94, 0x5e) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = dup(r2) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f00000000c0)={0x0, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @broadcast}}}, 0x108) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 02:46:49 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r7 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r9 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r9, 0x2007fff) sendfile(r7, r9, 0x0, 0x8000fffffffe) 02:46:49 executing program 3: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f00000001c0)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r5 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x200000100000011, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x148, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r12, @ANYBLOB="00000000000000000e0012000000010073737400000002002c0208001900000000000200fe8000000000000000000000000000bb00000900290000000000020000000000020000000000000000003b7a8bd9d9c643a80000"], 0x38}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r12}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @dev}]}, 0x28}}, 0x0) bind$packet(r8, &(0x7f0000000100)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @random="962c85e043d8"}, 0xc) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@bridge_delneigh={0x34, 0x1c, 0x100, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xfed69ebed57f92e9, 0x0, 0x4}, [@NDA_VNI={0x8, 0x7, 0xfffff800}, @NDA_SRC_VNI={0x8, 0xb, 0x28c6}, @NDA_IFINDEX={0x8, 0x8, r4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20041081}, 0x0) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[], 0xffffffffffffff24}}, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000380)=0x83, 0x1fb) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x\x11k4\xd3\x1b\x05\xaf\xf0\x1eyRN\xc9\xc6V\x00\x02\x00\x00\x00\x00\x00\x00\x00', 0x275a, 0x0) fallocate(r13, 0x0, 0x0, 0x110003) lseek(r13, 0x0, 0x3) syz_genetlink_get_family_id$team(&(0x7f0000000240)='team\x00') r14 = creat(&(0x7f0000000000)='./bus\x00', 0x0) open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) lseek(r14, 0x0, 0x2) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x2, 0x4, 0x6d, 0x2, 0x0, 0x0}, 0x1a) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r15, &(0x7f00000000c0), &(0x7f0000000480), 0x1}, 0x20) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x2, 0x4, 0x6d, 0x2, 0x0, 0x0, 0x2}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r16, &(0x7f0000000600)="c63152e8bed1735702d66742f0c4c22c2148765287b9bd6f7d397a6b04ef725cb685f7b55e0a3350a721d6b1f8bcea220dc8c62a7d1ebec110488716f04235464947288b0b38cac8da1bf63fa2cf9f281b8797c0e997114a3d192b738d8f1e25e1b57168cd2dbf3d6ed9ac3b9d856d8e0030778e18725277f1dc4484ee037f706e6eeb854cd195753981342c1aac63106aae9e89d555d48861d8cc8c5c3ebe0c89275874c21092b47610cc0d3c6ac4373a39e031c66fcb3060", &(0x7f00000001c0)}, 0xffffffffffffff63) r17 = socket$unix(0x1, 0x5, 0x0) sendfile(r16, r17, 0x0, 0xffffffff) socket$inet6_udp(0xa, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x202, 0xdd) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r18 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r18, 0x2007fff) sendfile(r5, r18, 0x0, 0x8000fffffffe) 02:46:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@timestamp], 0x1) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = dup(r0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000000c0)={0x0, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @broadcast}}}, 0x108) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x4e21, 0x40, @empty, 0x85d}, {0xa, 0x4e22, 0x3, @mcast2, 0x7f}, 0x8, [0x3, 0x0, 0x7fffffff, 0x2, 0xe390, 0x9, 0x4371, 0xfffeffff]}, 0x5c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r10, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r10, 0x0) ioctl$ASHMEM_SET_NAME(r10, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50x0}) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0) fchdir(r12) r13 = getuid() getresgid(&(0x7f0000003180), &(0x7f00000031c0)=0x0, &(0x7f0000003200)) fchown(r12, r13, r14) r15 = gettid() ptrace$setopts(0x4206, r15, 0x0, 0x0) tkill(r15, 0x3c) ptrace$cont(0x18, r15, 0x0, 0x0) ptrace$setregs(0xd, r15, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r15, 0x0, 0x0) r16 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0) fchdir(r16) r17 = getuid() getresgid(&(0x7f0000003180), &(0x7f00000031c0)=0x0, &(0x7f0000003200)) fchown(r16, r17, r18) r19 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x2) keyctl$chown(0x4, r19, 0x0, r20) r21 = gettid() ptrace$setopts(0x4206, r21, 0x0, 0x0) tkill(r21, 0x3c) ptrace$cont(0x18, r21, 0x0, 0x0) ptrace$setregs(0xd, r21, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r21, 0x0, 0x0) getresuid(&(0x7f0000000e00), &(0x7f0000000e40)=0x0, &(0x7f0000000e80)) fstat(r0, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r24, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r24, 0x0) ioctl$ASHMEM_SET_NAME(r24, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff}) r29 = dup(r28) ioctl$PERF_EVENT_IOC_ENABLE(r29, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r29, 0x8903, &(0x7f0000000f40)=0x0) lstat(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001040)='./file0\x00', &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r33 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r33, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r33, 0x0) ioctl$ASHMEM_SET_NAME(r33, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x4e21, 0x40, @empty, 0x85d}, {0xa, 0x4e22, 0x3, @mcast2, 0x7f}, 0x8, [0x3, 0x0, 0x7fffffff, 0x2, 0xe390, 0x9, 0x4371, 0xfffeffff]}, 0x5c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r10, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r10, 0x0) ioctl$ASHMEM_SET_NAME(r10, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50x0}) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0) fchdir(r12) r13 = getuid() getresgid(&(0x7f0000003180), &(0x7f00000031c0)=0x0, &(0x7f0000003200)) fchown(r12, r13, r14) r15 = gettid() ptrace$setopts(0x4206, r15, 0x0, 0x0) tkill(r15, 0x3c) ptrace$cont(0x18, r15, 0x0, 0x0) ptrace$setregs(0xd, r15, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r15, 0x0, 0x0) r16 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0) fchdir(r16) r17 = getuid() getresgid(&(0x7f0000003180), &(0x7f00000031c0)=0x0, &(0x7f0000003200)) fchown(r16, r17, r18) r19 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x2) keyctl$chown(0x4, r19, 0x0, r20) r21 = gettid() ptrace$setopts(0x4206, r21, 0x0, 0x0) tkill(r21, 0x3c) ptrace$cont(0x18, r21, 0x0, 0x0) ptrace$setregs(0xd, r21, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r21, 0x0, 0x0) getresuid(&(0x7f0000000e00), &(0x7f0000000e40)=0x0, &(0x7f0000000e80)) fstat(r0, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r24, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r24, 0x0) ioctl$ASHMEM_SET_NAME(r24, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff}) r29 = dup(r28) ioctl$PERF_EVENT_IOC_ENABLE(r29, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r29, 0x8903, &(0x7f0000000f40)=0x0) lstat(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001040)='./file0\x00', &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r33 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r33, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r33, 0x0) ioctl$ASHMEM_SET_NAME(r33, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x4e21, 0x40, @empty, 0x85d}, {0xa, 0x4e22, 0x3, @mcast2, 0x7f}, 0x8, [0x3, 0x0, 0x7fffffff, 0x2, 0xe390, 0x9, 0x4371, 0xfffeffff]}, 0x5c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r10, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r10, 0x0) ioctl$ASHMEM_SET_NAME(r10, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50x0}) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0) fchdir(r12) r13 = getuid() getresgid(&(0x7f0000003180), &(0x7f00000031c0)=0x0, &(0x7f0000003200)) fchown(r12, r13, r14) r15 = gettid() ptrace$setopts(0x4206, r15, 0x0, 0x0) tkill(r15, 0x3c) ptrace$cont(0x18, r15, 0x0, 0x0) ptrace$setregs(0xd, r15, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r15, 0x0, 0x0) r16 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0) fchdir(r16) r17 = getuid() getresgid(&(0x7f0000003180), &(0x7f00000031c0)=0x0, &(0x7f0000003200)) fchown(r16, r17, r18) r19 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x2) keyctl$chown(0x4, r19, 0x0, r20) r21 = gettid() ptrace$setopts(0x4206, r21, 0x0, 0x0) tkill(r21, 0x3c) ptrace$cont(0x18, r21, 0x0, 0x0) ptrace$setregs(0xd, r21, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r21, 0x0, 0x0) getresuid(&(0x7f0000000e00), &(0x7f0000000e40)=0x0, &(0x7f0000000e80)) fstat(r0, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r24, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r24, 0x0) ioctl$ASHMEM_SET_NAME(r24, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff}) r29 = dup(r28) ioctl$PERF_EVENT_IOC_ENABLE(r29, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r29, 0x8903, &(0x7f0000000f40)=0x0) lstat(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001040)='./file0\x00', &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r33 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r33, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r33, 0x0) ioctl$ASHMEM_SET_NAME(r33, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$FUSE_STATFS(r6, &(0x7f00000002c0)={0xfffffe75, 0x0, 0x5, {{0x200, 0x7, 0xfffffffffffffffc, 0x8, 0x3, 0x200, 0x80000000, 0x8}}}, 0x60) fcntl$setstatus(r0, 0x4, 0x80000000002c00) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000340)=0x3) ioctl$PPPIOCCONNECT(r4, 0x4004743a, &(0x7f0000000240)=0x2) 02:46:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getcwd(&(0x7f0000000000)=""/126, 0x7e) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = dup(r0) clock_adjtime(0x0, &(0x7f00000002c0)={0x5d73, 0x6, 0x6, 0x9, 0x1, 0xfffffffffffffffe, 0x8000, 0x100000000, 0xd4, 0x7, 0x1000, 0xb, 0x5, 0x44f, 0x27fffffff, 0xfffffffffffffffa, 0xff, 0x5, 0x7fff, 0xfff, 0x809, 0x9, 0x9, 0x81, 0xffffffffffffffff, 0x7}) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000000c0)={0x0, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @broadcast}}}, 0x108) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 02:46:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x12) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0xffd9) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xcc93a2cc92445b75) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cg\x9c\xaa\x16\xc0\xc46syz1Xr\xc8,~\xbc\xf3\xc0\x15X\xd1\xc6\xfd\xbc\xd0J\x8d\x98AfSCTk\xb4Vla\x8a\xac\xb9\x7f|R\x04\x8b\x9c\xf3\x14K\xbc\xbe\xe6\xcfH5\xbb&\xa3\v,\v6\xfb\x80\x03\v\x9f\xcc#d\xcaZK3Z\xc6\'\xa5\xf6\x1f\xa5\xdf\x18gJ\x03\x83\xf4\xb7\xa6\x9bS\x89\xedg[\xa0\xa6\xec\xf4\xfb\x03\xe75\x9b9\xdd\x88\x04\xa7\xdb\xf4\x15Es9\x14\xb1\xcc\xd7\xbf\xado\xbe\xfa\x17\xd7\x16\xab,g\xcaNM9\xa3\xde~\xb4>\x8c\x91rP\n\xbeE\x90w_\xec\xade\x8fp\x91{F\x13=\xb9TS\xdb\xf0\x8d\x92\xdb\xcc\x1f\xcc?\x00\x8f\xef\xf0\xbd\xda', 0x200002, 0x0) fchdir(r0) creat(&(0x7f00000004c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000340)={0x3da}, 0xfffffffffffffd27) write$cgroup_int(r1, &(0x7f0000000180)=0x3, 0xffffffffffffff31) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000400)) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x5) fcntl$setstatus(r4, 0x4, 0x44700) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r0, 0x1, 0x3) mkdir(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r5 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0) write$P9_RMKNOD(r1, &(0x7f0000000440)={0x14, 0x13, 0x2, {0x1, 0x2, 0x5}}, 0x2e3) mknodat(r5, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) renameat2(r5, &(0x7f00000000c0)='./file0\x00', r5, &(0x7f0000000280)='./file0\x00', 0x2) renameat2(r5, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r5, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) r6 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x6100) ftruncate(r6, 0x108200) r7 = open(&(0x7f0000000000)='./bus\x00', 0x4000, 0x48) sendfile(r6, r7, 0x0, 0xffffffff) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x7f) [ 505.198088] binder: 21888:21889 transaction failed 29201/-22, size 80-24 line 3259 [ 505.207197] nla_parse: 4 callbacks suppressed 02:46:50 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r7 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r9 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r9, 0x2007fff) sendfile(r7, r9, 0x0, 0x8000fffffffe) [ 505.207206] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 505.207215] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.3'. [ 505.250001] binder: 21891:21896 got transaction with invalid offset (0, min 0 max 0) or object. [ 505.250032] binder: 21891:21896 transaction failed 29201/-22, size 0-24 line 3199 [ 505.250327] binder: undelivered TRANSACTION_ERROR: 29201 [ 505.277523] audit: type=1400 audit(1574736410.083:141): avc: denied { create } for pid=21899 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_scsitransport_socket permissive=1 [ 505.356524] binder: undelivered TRANSACTION_ERROR: 29201 02:46:50 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) pipe(&(0x7f0000001380)) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff}) dup(r9) ioctl$sock_inet_SIOCGIFADDR(r9, 0x8915, &(0x7f0000000080)={'team0\x00', {0x2, 0x4e67, @broadcast}}) syz_open_procfs(0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(r5, 0x8915, &(0x7f0000001740)={'ipddp0\x00', {0x2, 0x4e23, @loopback}}) 02:46:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000340)={0x56, 0x0, 0x7, {0x4, 0x5}, {0xb17, 0x9}, @period={0x5a, 0xff, 0x6, 0x86, 0x5, {0x6e56, 0x4, 0x401}, 0x1, &(0x7f0000000300)=[0xc6b]}}) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x9, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e21, @local}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x0, 0x0, 0x0, 0x8e5, &(0x7f0000000040)='teql0\x00', 0xd1, 0x7, 0x401}) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000000)={0x800, 0xfffffff7, 0xfe4b, 0x158, 0x1, "2d835e1d775adf9b7d8e4063ad0568add6fcf8", 0xd56, 0x10000}) r3 = gettid() r4 = dup(r0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f00000000c0)={0x5, {{0x2, 0x0, @loopback}}, {{0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x12}}}}, 0x108) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x40) fcntl$setstatus(r4, 0x4, 0x80000000002c00) 02:46:50 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r7 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r9 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r9, 0x2007fff) sendfile(r7, r9, 0x0, 0x8000fffffffe) 02:46:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(r2, &(0x7f0000000240)='memory.current\x00', 0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000340)={0xa0, 0x0, 0x5, {{0x2, 0x2, 0x8, 0x4, 0x8, 0x3, {0x6, 0x5, 0x7, 0x80000001, 0x8001, 0x9ea2, 0x74, 0x1ff, 0x200, 0x5, 0x7, 0xee00, r4, 0x1, 0xae}}, {0x0, 0x4}}}, 0xa0) listen(r0, 0x5) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) accept(r0, &(0x7f0000000180)=@x25, &(0x7f0000000000)=0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r7, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x848800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x400, 0x70bd26, 0x25dfdbfc, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0xff}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x881b7fba3c06fa92}, 0x800) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) [ 505.500864] binder: 21915:21917 got transaction with invalid parent offset or type [ 505.534257] binder: 21915:21917 transaction failed 29201/-22, size 80-24 line 3259 02:46:50 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000340)={@flat=@weak_binder, @fda}, 0x0}, 0xa40}], 0x0, 0x0, 0x0}) [ 505.567424] binder: undelivered TRANSACTION_ERROR: 29201 02:46:50 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000340)={@flat=@weak_binder, @fda}, 0x0}, 0xa40}], 0x0, 0x0, 0x0}) [ 505.609666] binder: release 21932:21933 transaction 104 out, still active [ 505.622426] binder: undelivered TRANSACTION_COMPLETE 02:46:50 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000340)={@flat=@weak_binder, @fda}, 0x0}, 0xa40}], 0x0, 0x0, 0x0}) [ 505.656027] binder: send failed reply for transaction 104, target dead [ 505.689459] binder: release 21938:21941 transaction 106 out, still active [ 505.724180] binder: BINDER_SET_CONTEXT_MGR already set 02:46:50 executing program 2: preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{0x0, 0x353}, {&(0x7f00000000c0)=""/250, 0xdb}], 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) write$FUSE_OPEN(r0, &(0x7f0000000080)={0x20, 0xfffffffffffffff5, 0x1, {0x0, 0x2}}, 0x20) r1 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r1, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe3, 0xe3, 0x9, [@datasec={0x5, 0x2, 0x0, 0xf, 0x2, [{0x1, 0x7ff, 0x80000000}, {0x5, 0x4, 0x6}], "efdd"}, @func={0x9, 0x0, 0x0, 0xc, 0x5}, @var={0x7, 0x0, 0x0, 0xe, 0x2}, @datasec={0x1, 0x7, 0x0, 0xf, 0x3, [{0x2, 0x4, 0x81}, {0x3, 0x4, 0x80000001}, {0x4, 0x4, 0x7}, {0x3, 0x1, 0x5}, {0x2, 0x100, 0x3}, {0x5, 0x8000, 0x1}, {0x2, 0x81, 0x7fffffff}], "b61dd6"}, @datasec={0x6, 0x4, 0x0, 0xf, 0x2, [{0x1, 0x8, 0x8}, {0x3, 0x5, 0x1}, {0x2, 0x5, 0x200}, {0x2, 0x10001, 0x75}], "6503"}]}, {0x0, [0x2f, 0x0, 0x2f, 0x2e, 0x0, 0x2e, 0x2e]}}, &(0x7f00000003c0)=""/145, 0x105, 0x91}, 0x20) pwrite64(r2, &(0x7f00000004c0)="78f50e63fa7e4e54c6a6a078dfaabcdf18cac7ebf79d07ee3968636a3f7e2af53f85a2905ca180b6b1d25917341012e74da8887b23757ebcbd7acbab017f94ac232809a5359010bec47486ac2b6fe4d2f428aca4bd982d7faee4", 0x5a, 0xba99) r3 = socket$inet6(0xa, 0x802, 0x88) sendto$inet6(r3, 0x0, 0x0, 0x8800, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="9def15a7ac30cd44f29e6f59d072855c8c2c061324cb3a9b98f984321fb2dd157206c09f2ef57d541fcf831b983adf7d3621bd72932bd4fb46f92567aa15b1b52bbe0c2e7e4f3e92699803dc21efbb221a98519e74aab9877918aa767b37", 0xfffffffffffffefc, 0x0, 0x0, 0x82) recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0xfef3, 0x0, 0x0, 0x0, 0xfffffffffffffdcc}}], 0x400000000000490, 0x6, 0x0) 02:46:50 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@flat=@weak_binder, @fda}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 505.731500] binder: undelivered TRANSACTION_COMPLETE [ 505.757545] binder: 21943:21944 ioctl 40046207 0 returned -16 [ 505.758306] binder: send failed reply for transaction 106, target dead 02:46:50 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r7 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r9 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r9, 0x2007fff) sendfile(r7, r9, 0x0, 0x8000fffffffe) [ 505.818415] binder: 21953:21954 got transaction with invalid parent offset or type [ 505.826835] binder: 21953:21954 transaction failed 29201/-22, size 80-24 line 3259 [ 505.838456] binder: undelivered TRANSACTION_ERROR: 29201 02:46:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x800, &(0x7f0000000380)="0d09aa36a83aa19770aba9698705b93b4c1143a40117305259e316b871e81525a5e461e89fad3727bb136eb9217bdb323db1e703e23c112343bed931edf42b62fa8fa934310360e56b5ed55ce9eaef69762482367c603120cf2aba2c3e72672f9c4c28e17e30577421ea5de1e8e5ed84bfaceb62b7a63f02f580adb2db84e806687c7b365d", &(0x7f0000000000), &(0x7f0000000240), &(0x7f0000000200)="5b44ef134f61") r1 = gettid() r2 = dup(r0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f00000000c0)={0x0, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @broadcast}}}, 0x108) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 02:46:50 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) epoll_pwait(r2, &(0x7f0000000140)=[{}], 0x1, 0x7, &(0x7f0000000500)={0x81}, 0x8) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ash\x00\x00m\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50x0, @dev, @loopback}, &(0x7f0000000180)=0xc) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000001c0)={r1, 0x1, 0x6, @remote}, 0x10) r2 = open(&(0x7f0000000200)='./file0\x00', 0x14242, 0x80) getsockopt(r2, 0xffffffff, 0xbb80, &(0x7f0000000240)=""/89, &(0x7f00000002c0)=0x59) getresuid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000003c0)=0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000400)=0x81) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x10b80, 0x0) ioctl$TCGETA(r4, 0x5405, &(0x7f0000000480)) r5 = open(&(0x7f00000004c0)='./file0\x00', 0x80, 0x100) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r5, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xc8, r6, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xb4, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x9, @ipv4={[], [], @multicast2}, 0x200}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7, @mcast1, 0x400}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x801}, 0x100) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000700)=0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000740)={0x0, r7}) r8 = socket$inet6(0xa, 0x6, 0xf4) lstat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000840)={{{@in6=@mcast1, @in6=@local, 0x4e23, 0x8000, 0x1, 0x0, 0x2, 0x80, 0x80, 0x2c, r1, r9}, {0x9, 0x6, 0x8001, 0x20, 0x6, 0x8, 0xfff, 0x327}, {0x7, 0x7fffffff, 0x101, 0x1d}, 0x6, 0x6e6bc0, 0x2, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4d4, 0x2b}, 0x1d2b5a970c6af80c, @in=@multicast2, 0x3506, 0x2, 0x0, 0x6, 0xfffffffa, 0x8, 0xffff8000}}, 0xe8) r10 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000940)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r11 = syz_genetlink_get_family_id$SEG6(&(0x7f00000009c0)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r10, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, r11, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x800) r12 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000ac0)='/selinux/policy\x00', 0x0, 0x0) ioctl$RTC_WIE_ON(r12, 0x700f) r13 = syz_open_dev$mice(&(0x7f0000000b00)='/dev/input/mice\x00', 0x0, 0x20000) ioctl$RTC_UIE_ON(r13, 0x7003) r14 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b40)='/selinux/status\x00', 0x0, 0x0) ioctl$TIOCNXCL(r14, 0x540d) r15 = syz_genetlink_get_family_id$tipc(&(0x7f0000000bc0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2040400}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x30, r15, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x6, @bearer=@l2={'ib', 0x3a, 'ip6_vti0\x00'}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x100}, 0x800) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000cc0)) 02:46:50 executing program 4: pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x200000100000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @random="962c85e043d8"}, 0x14) fcntl$setsig(r5, 0xa, 0x2b) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r9, r9, &(0x7f00000002c0)=0x202, 0xdd) r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x80080, 0x0) getpeername$packet(r10, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000500)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r11}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r11}) bind$packet(r7, &(0x7f00000003c0)={0x11, 0x4, r11, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14) lseek(r3, 0x0, 0x2) sendfile(r3, r7, 0x0, 0xfffffffffffffffc) sendfile(r3, r7, &(0x7f0000000040), 0x8000fffffffe) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8005) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) fstat(r4, &(0x7f00000008c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = socket(0x200000100000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r14, &(0x7f0000000100)={0x11, 0x0, r15, 0x1, 0x0, 0x6, @random="962c85e043d8"}, 0x14) accept4$packet(r14, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000004c0)=0x14, 0x140000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r16, &(0x7f00000001c0), 0xfb120eb7) ioctl$FIBMAP(r16, 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r17, &(0x7f00000001c0), 0xfb120eb7) ioctl$FIBMAP(r17, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$evdev(&(0x7f0000000540)='/dev/input/event#\x00', 0x5, 0x220c02) socket$inet6(0xa, 0xa, 0x3) r18 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r18, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r18, 0x0) ioctl$ASHMEM_SET_NAME(r18, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff}) r21 = socket$inet_udp(0x2, 0x2, 0x0) close(r21) splice(r20, 0x0, r21, 0x0, 0x2, 0x0) ioctl$PPPIOCGNPMODE(r20, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1}) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000180)=""/72) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000300)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r1, 0x0) [ 505.982607] binder: 21962:21967 BC_ACQUIRE_DONE u0000000000000002 no match [ 506.001946] binder: 21962:21967 BC_INCREFS_DONE u0000000000000001 no match 02:46:50 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r7 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r9 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r9, 0x2007fff) sendfile(r7, r9, 0x0, 0x8000fffffffe) [ 506.027709] binder: 21962:21967 Release 1 refcount change on invalid ref 3 ret -22 [ 506.053999] binder: 21962:21967 got reply transaction with no transaction stack [ 506.070840] binder: 21962:21967 transaction failed 29201/-71, size 80-24 line 2921 [ 506.091126] binder: 21962:21967 got transaction with invalid parent offset or type [ 506.099922] binder: 21962:21967 transaction failed 29201/-22, size 80-24 line 3259 02:46:51 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) open(0x0, 0x400, 0x1) fchdir(r0) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000b28000)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) poll(0x0, 0x0, 0xffffffffffbffff8) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) r4 = dup2(r2, r3) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0x1) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0x0) ioctl$ASHMEM_SET_NAME(r6, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff}) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000080)={0x9e, 0x77, 0x0, 0xffff}, 0xfffffffffffffe42) write(r7, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) pipe(0x0) io_setup(0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r8 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$cgroup_type(r8, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r8, 0x660c) 02:46:51 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r7 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r9 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r9, 0x2007fff) sendfile(r7, r9, 0x0, 0x8000fffffffe) 02:46:51 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r6 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r8 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x2007fff) sendfile(r6, r8, 0x0, 0x8000fffffffe) 02:46:51 executing program 2: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/3) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, 0x0, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000880)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f00000001c0)=0xfffffffffffffed1) r4 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000000080)=""/36, 0x24) r5 = open(0x0, 0x400, 0x0) ioctl$TCSBRKP(r5, 0x5425, 0x7f) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000680)={{{@in=@empty, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in=@dev}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r7 = dup(r3) open(&(0x7f0000000240)='./bus\x00', 0x1400, 0x90) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='cpusetwlan1selinux%trusted\x00', 0x1b, 0x1) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x3ba, 0x0) r9 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r9, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000600)='-{vmnet1[cpuset\'wlan0${system$\x00\xca\xa4\xce\xf0\xf2a\xc51\xc0Cl\xfep\x84\xf1\x8a\xf4\x1b\xc3~{2\x01g\x11\x80R\x80\xbb\x03\xac \xda\x817\x88\x01Y^>\x1c\xb8\xc5\xcaw\xc5\xab\xa3x\x90>\x86qW\xa8\xb7\xdb\xa1\xd6xS\xb2:\x87\x12\x03\xafV\x85\xc4\x0e~\x89\x18\x86\xd4\xd2\xc1\x00\xda\x9b.', 0x71, 0x2) ioctl$EVIOCGABS0(r9, 0x80184540, &(0x7f0000000780)=""/114) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, 0x0, 0x0) fcntl$dupfd(r2, 0x203, r10) r11 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r11, 0x6, 0x8, &(0x7f00000005c0)=0xfffffffffffffffe, 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x12, &(0x7f0000000380)=0x83, 0x1fb) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r12 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r12, 0x2007fff) sendfile(r7, r12, 0x0, 0x8000fffffffe) 02:46:51 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r6 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r8 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x2007fff) sendfile(r6, r8, 0x0, 0x8000fffffffe) 02:46:51 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r6 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r8 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x2007fff) sendfile(r6, r8, 0x0, 0x8000fffffffe) 02:46:51 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000600)=0x207, 0x2) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)=0x1, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, 0x0, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x0, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) shutdown(r2, 0x0) pipe(&(0x7f0000000400)) r3 = dup2(r1, 0xffffffffffffffff) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000180)=0x10001) r4 = open(&(0x7f00000002c0)='./bus\x00', 0x40000141041, 0x402) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0x323) mlockall(0x14) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') r5 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000040)) r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x24) getsockopt$SO_COOKIE(r7, 0x1, 0x39, &(0x7f0000000080), 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) write$FUSE_POLL(r4, &(0x7f0000000540)={0x18, 0xfffffffffffffffe, 0x1, {0x3298}}, 0x18) r8 = socket(0x10, 0x80002, 0x0) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r5) bind$netlink(r8, &(0x7f0000177ff4)={0x10, 0x0, 0x1, 0x8001002}, 0xc) connect$netlink(r8, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x800000}, 0xc) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r8, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) times(&(0x7f0000000440)) connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000b4bffc)=0x1007, 0x4) ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f0000000580)={'bcsh0\x00'}) sendto(r8, &(0x7f0000000340), 0xac, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000780), 0x2bb1f36c7597d46, 0x2, 0x0) sendfile(r4, r7, &(0x7f0000000140), 0x8fff) [ 506.778692] binder: undelivered TRANSACTION_ERROR: 29201 [ 506.786378] binder: 21962:22031 BC_ACQUIRE_DONE u0000000000000002 no match [ 506.793840] binder: 21962:22031 BC_INCREFS_DONE u0000000000000001 no match [ 506.801041] binder: 21962:22031 Release 1 refcount change on invalid ref 3 ret -22 [ 506.809504] binder: 21962:22031 got reply transaction with no transaction stack [ 506.820811] binder: 21962:22031 transaction failed 29201/-71, size 80-24 line 2921 [ 506.867271] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22037 comm=syz-executor.2 [ 506.880376] binder_alloc: 21962: binder_alloc_buf size 30792293039694232 failed, no address space [ 506.896131] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 506.915027] binder: 21962:21967 transaction failed 29201/-28, size 80-24 line 3136 [ 506.933587] binder: undelivered TRANSACTION_ERROR: 29201 [ 507.513650] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22042 comm=syz-executor.2 02:46:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1a}, 0x200}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup(r0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f00000000c0)={0x0, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @broadcast}}}, 0x108) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 02:46:53 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000200)={'gretap0\x00', 0x3}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x400103, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f00000001c0)=r5) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@flat=@weak_binder, @fda}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:46:53 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x30) ftruncate(r2, 0x2081fc) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write(r4, &(0x7f00000001c0), 0xfffffef3) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800002, 0x11, r6, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) read(r3, &(0x7f0000000000)=""/250, 0x128b9372) fcntl$setstatus(r1, 0x4, 0x6100) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xf642e7e) 02:46:53 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) open(0x0, 0x400, 0x1) fchdir(r0) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000b28000)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) poll(0x0, 0x0, 0xffffffffffbffff8) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) r4 = dup2(r2, r3) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0x1) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0x0) ioctl$ASHMEM_SET_NAME(r6, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff}) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000080)={0x9e, 0x77, 0x0, 0xffff}, 0xfffffffffffffe42) write(r7, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) pipe(0x0) io_setup(0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r8 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$cgroup_type(r8, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r8, 0x660c) 02:46:53 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r7 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r9 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r9, 0x2007fff) sendfile(r7, r9, 0x0, 0x8000fffffffe) 02:46:53 executing program 2: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000012, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) accept4(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) clone(0x2112001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$selinux_attr(r1, &(0x7f0000000140)='system_\x1b\xd6\t\xc7\xef\xac\x8c\xe6DZ\x8au:object_r:mtrr_d', 0x23) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3cc, 0x1f000000) lseek(0xffffffffffffffff, 0x0, 0x1) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x30af6000) openat$apparmor_task_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) 02:46:53 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r7 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r9 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r9, 0x2007fff) sendfile(r7, r9, 0x0, 0x8000fffffffe) 02:46:54 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) lsetxattr$smack_xattr_label(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='security.SMACK64EXEC\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="a335a774e458acabc4dc1caf70e1a6a6ee90142edd93a70476387a82f6b1ceb894f1bb4eb02e32934306d95ccaee076d00000000d5b95cb87baaa8208aba8a8d13a9973e451209dec8a0f33f7c0101000055182cc81765767e5d6a9a2410a7a577116363d4eec067a6b69d6569108ffd3fab145d8f019466c5085ef563c655bbc3ba81563a03c75f746e020939b13b212354c80c12a572ae00"/172], 0xe, 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x76, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="11634836000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000a4583266cf6f9f53699964bed30599a557c28425c3f0ad67790f81d07b96592718d70698e711db8d45cd1efae6", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627700000000000000000000000000000000000000008561646600000000000000000000000000000000000000000600000000000000852a62730000000000000000000000000000000000000000ebf334b1e74bc4ade77888fc5739c9ac443d71f9c84f71e45dc829e3b8c5fa34cb58c47703580993193dff0ad4615b7c0dc1fafd42ef6f49f6899d6908911b7cf8b637445d862a480ebf"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000018000000000000003800000000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000100)="f5a6de868bdd25d3f62bc836f059e7627f5091c78e6b09cc0e1f", &(0x7f0000000140)="01f229fd9e0c7f2cc42fcbb0763d7e7b63e3ef", 0x1}, 0x20) [ 509.274452] binder: 22081:22082 unknown command 910713617 [ 509.288410] binder: 22081:22082 ioctl c0306201 20000180 returned -22 02:46:54 executing program 4: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f0000000400)=0x5, 0xfffffffffffffe3d) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, 0x0, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) r6 = socket(0x10, 0x200000000080003, 0x0) dup2(r6, r5) r7 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) r8 = socket(0x10, 0x200000000080003, 0x0) dup2(r8, r7) getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000880)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f00000002c0)=0x2ba) open(&(0x7f0000000140)='.\x00', 0x0, 0x4) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8943, &(0x7f0000000080)={'sit0\x00', @ifru_flags=0x400}) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags=0x6ac9e49cda8ac011}) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00\x00\x00\x81\x00', @ifru_flags}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/commit_pending_bools\x00', 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCBRDELBR(r10, 0x89a1, &(0x7f0000000300)='bcsf0\x00') r11 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r11, 0x4, 0x46800) write$cgroup_type(r11, &(0x7f0000000200)='threaded\x00', 0x175d900f) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r12) r13 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) write$FUSE_INIT(r13, &(0x7f0000000000)={0x11c}, 0x10027) dup3(r12, r13, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r15 = dup(r14) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r15, 0x0, 0x11, &(0x7f0000000480)={{{@in=@empty, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in=@dev}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) dup(r4) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0xa) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x0) r16 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r16, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) 02:46:54 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r7 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r9 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r9, 0x2007fff) sendfile(r7, r9, 0x0, 0x8000fffffffe) 02:46:54 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10004d96}) readv(r1, &(0x7f0000000580)=[{&(0x7f0000000340)=""/152, 0x98}, {0x0}], 0x2) io_setup(0x7fff, &(0x7f00000000c0)=0x0) lookup_dcookie(0x8, &(0x7f00000001c0)=""/102, 0x66) io_submit(r2, 0x1, &(0x7f00000006c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000180)='\f', 0x1}]) io_destroy(r2) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="11634840000000000000000000ffffffff000000000000000000500000000000000800"/56, @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a627700000000000000000000000000000000000000008561646600000000000000000000000000000000000000000000000000000000852a627300"/80], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000018000000000000003ffdffffffffffff"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_pts(r5, 0x400) ioctl$TIOCGPTPEER(r6, 0x5441, 0x1) 02:46:54 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r7 = dup(0xffffffffffffffff) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r9 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r9, 0x2007fff) sendfile(r7, r9, 0x0, 0x8000fffffffe) 02:46:54 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x7fffffff) r1 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0xd8, @dev, 0x3}, 0x1c) prctl$PR_MCE_KILL_GET(0x22) syz_open_procfs(0x0, 0x0) sendmmsg(r1, &(0x7f0000005780), 0x4000000000000d2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) ioctl$TIOCGWINSZ(r4, 0x5413, &(0x7f00000000c0)) 02:46:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'bond_slave_1\x00', 0x8000}) r1 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) pwritev(r1, &(0x7f0000000440)=[{&(0x7f00000000c0)="10dbb4c9cd05d50993cfcb10df045bdbf1202a3274c589913a11fffeef9b5eb07eaf6993639ea1b3a7abc0f571aab813d7ff4ab40e07c77d8d83b653628d2f8c5474a44efd05140b90438296615820fc0f7e7b0ac8706b081aa9d1e0e94edc95d6820155147d4a36bcc86c331fbbe906d2dbbb60611ab2ad34c1fd897cbce07d8d", 0x81}], 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)) 02:46:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup(r0) setsockopt$inet_group_source_req(r2, 0x0, 0x2, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f00000000c0)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0xea46dcc65009b6f8) ioctl$EVIOCSABS3F(r4, 0x401845ff, &(0x7f0000000040)={0x3, 0x100, 0x3, 0xb3ec, 0x7f}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) 02:46:54 executing program 4: socket(0x2, 0x2, 0xfa) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = open(0x0, 0x400, 0x1) fchdir(r0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000b28000)=0x6) gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x0, &(0x7f0000b28000)=0x6) poll(&(0x7f0000b2c000)=[{r7}], 0x1, 0xffffffffffbffff8) dup2(r6, r7) fcntl$setsig(r6, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r5}], 0x1, 0xffffffffffbffff8) dup2(r4, r5) fcntl$setown(r4, 0x8, r3) getsockopt(r4, 0x7, 0x20, &(0x7f0000000500)=""/158, &(0x7f0000000400)=0x9e) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x50000, 0x0) ioctl(r0, 0xebd6, &(0x7f0000000380)="8828") socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$TIOCCBRK(r9, 0x5428) ioctl$TIOCCBRK(r2, 0x5428) r10 = ioctl$TIOCGPTPEER(r2, 0x5441, 0xffffffffffffffff) ioctl$TCFLSH(r10, 0x540b, 0x107fffffff) socketpair(0x5, 0x800, 0x2, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000a80)=ANY=[], 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000080)={0xb, 0x77, 0x1, 0xf65}, 0xb) write(r12, &(0x7f00000001c0), 0xfffffef3) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f627573206c6f5c2c6c6f29766d6e6574302074687265616465640020205b7b2a20746872656164656400202e2f6367726f75702e63707500207468726561646564000afb300fd5f11729af5a8fc3c150f0d02ef95d1c840bd1e28842ce6d97079e4d4967624c0bade9fd3a2f474c62487606a81733019b483c0b2b6632f090a85d35e67f4be7a8f24dd5a5b68e3a20b13ca47b32c130a9b3dd4b73113f82266e1ff52c285781e415ef403626b63970c4d4ae1936"], 0xb9) read(r11, &(0x7f0000000200)=""/250, 0x50c7e3e3) pipe(&(0x7f00000003c0)) io_setup(0x8000009, &(0x7f0000000180)) getsockname$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000300)=0xfffffffffffffeb4) ioctl$TIOCSTI(r10, 0x5412, 0xff) r13 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$cgroup_type(r13, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r13, 0x660c) openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/Dv/nufv\x00', 0x0, 0x0) 02:46:54 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001400)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="ea0000008000000000cbc624877c8252c28f5e87a64820546a1ebe346adb3b91e7f1ffd7e4ab569f8eb9808e0b61a0bf7a301ffe8db90773d9e5411f2b25f3fbc7cf9482c1f0d81a590ed76f2c4af37bd3d331de23d61ca62ef8d48f42ffd933acf060c10300000082fc393b9e707b787f0dd1510494b0f420326bcc4e2b65e7c68bacee7877a6274d908e5a5d512b87ed3eb24d00d331edbedf8a03a722ffa87cc2df90a435c0ec4758b087c23cc9c5e726fea9244948dc6d312327f598770ea4d57dbcfbf5d371927da316afbd1402c9bb6e54a1c04afb2c40cc3fc204c6adf7830c244748fcba60eb53c4a3fbefddbd4ee7bdc2029b822b10b7bc50e3bab649ab2050b1642ad75e1acbe2b9f44c08bf38041983dbcbddbb02257c82eb11f3796f9c841f9302b69e61c845ba342626b6a865cde309deb443bd180083f4483fc18c72ab9f6175f5a9a9965e8d6f561a932c15e3661c12a7", @ANYPTR64, @ANYRESOCT, @ANYBLOB="e6c55c5d9eb82ee4510100010029a741efca44f937d0492482ba837296d961244e2e0c734057402cc43b3897cc275fd87f333c960d2bc40dd887fc8dc4872bf5b65c87e940b30e2d839bffbceb1b6756580642ad22dc2d38c961accefd1437ab97d0552ff4380721dfdeaefa9636c1d133f9363db5693655581453dfb355b4f05a8250b56113108719f730a49ffb2fc3ccd44f4dcc804d96518766fd8c83c4034e5e1b12bd2f10513fbff65f6604", @ANYRESDEC], 0x0, 0x12d}, 0x20) tkill(r0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 02:46:54 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r7 = dup(0xffffffffffffffff) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r9 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r9, 0x2007fff) sendfile(r7, r9, 0x0, 0x8000fffffffe) 02:46:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) r1 = accept4(0xffffffffffffffff, &(0x7f0000001640)=@hci, &(0x7f00000016c0)=0x80, 0x800) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000001700)=[@timestamp, @mss={0x2, 0x2}, @mss={0x2, 0x6}], 0x20c7) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() r3 = dup(r0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f00000000c0)={0x0, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @broadcast}}}, 0x108) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = creat(&(0x7f0000000140)='./bus\x00', 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff}) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000005640)=[{{&(0x7f0000000400)={0xa, 0x4e20, 0x80000000, @empty, 0xffffffff}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000440)}, {&(0x7f0000001c80)="f127436c6765abeb8a4ed53d6d1eecac82a5ea1aecbf6d54b70f355333e9c94e68466a5fe1a0667cc5f6be906c3a40671d6593295e18674f20299db420f03fd6e61674b84fe77087a02a6bcb9604ec3b0e50a2fe490f8c1eb3bdf7235406dd1d262eb3bbd787442d9df413f67c702608fa323b5e0e36086d36c9d6cf059aab71d89ef3be6a76d50bb12a8d9b98c97a6832361b9c1c93ca22449c10d41eb886305ac43ba523b708beb65c52b3352708999f5e10f2f3f2bc7fa147bfdcb51ee4b25f815660797573b1a65c5498b1898b", 0xcf}, {&(0x7f0000001d80)="9569d55083f231f8988d537c0797bcce5d883f1a9fc2aaafb6d4997097e697c2136240ea9b4ae897b278ebf8ace7e1a3b4ca1239d1c08a0b96459295635c14e51ebc6e8c94a53ea448eabcafc08668239a799c9b1c976f2894d2032a9bbc76b513e6554f79e32ac729e6576f25c9380148443b603ea91a83249b4ea70e61030ae6dc096604d9b72a3ef7e1802dd0855a642a5a4cf94edf548fcb3a08f5ad9e794b21de48878347be9e33ee3d7f5e19bc6cd7b7f7d6bee00867c927d2cccd9ef2b0352bbddb97836484665e4fe8c3", 0xce}], 0x3}}, {{&(0x7f0000001e80)={0xa, 0x4e24, 0x5, @mcast1, 0xffffffc1}, 0x1c, &(0x7f0000001f40)=[{&(0x7f0000001ec0)="9f8359cf3c51df2e457dbd354be99b1652da5aa994a15656273b18f8fdae18f3953c70f659dfaafd27854ebf053993f83cd3fecd5fbce175c620c9ba995e95a888372034dadaf0d306dfd51a46858b782b34147e2eefe2640431f43cdd21eaa11db5faec99759c", 0x67}, {&(0x7f0000004380)="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", 0x1000}], 0x2, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], 0x88}}, {{&(0x7f0000002040)={0xa, 0x4e22, 0x1, @remote, 0x7f}, 0x1c, &(0x7f00000021c0)=[{&(0x7f0000002080)="cb7381a30f657dff0a33419d8020f47f43a545328dee0f80f370b2167d91355b8e0c3cc4bd2815bf758d9a2a38893c4fb5bf5c4b6c917cc47c1895a1cd49bb6cd62cb8c2259a83bd931825657afae5510a44a3057ec888be5409cbd34eab717ecffa9fa6e574c845f9f5dae8857be004f5720166db0032efd435a31382270aaf5828a0a83209a20cd686179f7e44dcf00300a58e606665161dc436e3b06d0a2cec1df49f661addf9d12f5a40fa", 0xad}, {0x0}], 0x2, &(0x7f0000002200)=ANY=[@ANYBLOB="14000000000b0000000000000900000000140000000000000029000000430000000500000000000000280000000000000029000000390000003202000400000000fe8000000000000000000000000000aa780000000000000029000000390000003b0c000100000000ff0100000000000000000000000000012ba9bda188454d79c2772a42710751873b33925ac6fc79971938722417688497f7b0bc223f0a3d1bce960d7e5497236e00000000000000000000fffffffffffd00000000000000000000000000000001"], 0xd0}}, {{&(0x7f0000002300)={0xa, 0x4e21, 0xfffffffa, @mcast2, 0x5}, 0x1c, &(0x7f00000054c0)=[{&(0x7f0000005380)="b7eace4f3856e0e7f78bab37ebf56984f84042c290afd6eb414cb3273388b01263bf9d8619423ba545bf8bc363bb562a5d5ad2ce08f20d7120724b2bbe11af705f7c5544621eec31c05c0cc83957e70f0550be41e60753653872875a011d9d9d794153c36fb21620abe3207e512348b5", 0x70}, {&(0x7f0000005400)="c1351cf4c4fdfa7199d429fd113e695e38356246bea5684567c85dadd92b2361dce2c098d4a1c83ac5dd7cfb5acda377fb6c31b977543a66e2a2b65b5578c26042ab73461f290046ce77da67d1f71db3241ecf1926e15f2078f74f82dbbcee24b362aaae54b8395639bd45f87375393bd5ab0a648a03e3aa0c5948092e3107f6132ddb2e6cb6b729bab1462cfd75cf497e8de7c6f153041ab5fc4fa152b6b1e0a937bdd2c0", 0xa5}], 0x2, &(0x7f0000005500)=ANY=[@ANYBLOB="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"], 0x10e}}], 0x4, 0x0) recvmsg(r8, &(0x7f00000013c0)={&(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)=""/29, 0x1d}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000000240)=""/12, 0xc}], 0x3, &(0x7f0000000300)=""/67, 0x43}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = syz_open_dev$mice(0x0, 0x0, 0x0) r13 = syz_genetlink_get_family_id$nbd(0x0) r14 = creat(0x0, 0x0) ioctl$EVIOCGKEYCODE(r14, 0x80084504, 0x0) creat(0x0, 0x0) r15 = socket$inet(0x2, 0x80000, 0x6) setsockopt$sock_int(r15, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) pipe2(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0xe000) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r12) r17 = socket$inet(0x2, 0x80000, 0x6) setsockopt$sock_int(r17, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r18 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r18, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r18, 0x0) r19 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r19, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r19, 0x0) ioctl$ASHMEM_SET_NAME(r19, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r7 = dup(0xffffffffffffffff) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r9 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r9, 0x2007fff) sendfile(r7, r9, 0x0, 0x8000fffffffe) 02:46:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="00273503723cfd3000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup(r0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f00000000c0)={0x0, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @broadcast}}}, 0x108) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key(&(0x7f00000002c0)='syzkaller\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)="2c91e115343379b7c835c69c7a13d9642d1b4ee15c45e0507d46afca0689325c82cfbb2bbdd0a96832506a2bc0a8e3629b09b075b6c86c83e59d69a8e6ebcada2916c138d12e623560847caf9edeb279d3aaca67525628", 0x57, 0xfffffffffffffffc) keyctl$search(0xa, r3, &(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x2}, r4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000013) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 02:46:55 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) fstatfs(r0, &(0x7f00000001c0)=""/187) r1 = dup2(r0, r0) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62000000000000000000000085616466e6bd6c0be900000000000000000000000000000000000000000000000000000000852a627300"/75], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000001800000000008fb138000000bf2e0000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 02:46:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup(r0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f00000000c0)={0x0, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @broadcast}}}, 0x108) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ftruncate(r3, 0xffffffffffff45dc) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 02:46:55 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) [ 510.390361] binder: 22164:22165 ioctl 4b62 20000100 returned -22 [ 510.397636] binder: 22164:22165 got transaction with invalid offset (0, min 0 max 80) or object. [ 510.409969] binder: 22164:22165 transaction failed 29201/-22, size 80-24 line 3199 [ 510.421190] binder: undelivered TRANSACTION_ERROR: 29201 [ 510.445183] binder: 22164:22170 ioctl 4b62 20000100 returned -22 02:46:55 executing program 1: mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000080)) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000006c0)=0x14, 0x800) r1 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000700)='/selinux/relabel\x00', 0x2, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50x0, &(0x7f0000003200)) fchown(r9, r10, r11) r12 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x2) keyctl$chown(0x4, r12, 0x0, r13) r14 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r14, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r14, 0x0) ioctl$ASHMEM_SET_NAME(r14, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff}, 0x0) r16 = accept$unix(0xffffffffffffffff, &(0x7f00000007c0)=@abs, &(0x7f0000000840)=0x6e) r17 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r17, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r17, 0x0) ioctl$ASHMEM_SET_NAME(r17, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50x0, &(0x7f0000003200)) fchown(r22, r23, r24) r25 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x2) keyctl$chown(0x4, r25, 0x0, r26) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000540)="fec77968addb21b3b225c0025bef38f25eb253ef7edee63bc375fdeeb4189302ce351a1c67284d3e401144d3b6f03b653a89bb8bcd612e2e429ed3063d6351881be1d9c34bc5fa17eec5301855c394d5721f", 0x52}, {&(0x7f0000000140)="6da38676b1bef434499a40640241b463766827d877b491326aa34873f3e26f3376cbec", 0x23}, {&(0x7f00000005c0)="d01ba41ccdf05e874fe459a3b9c4286f6083ce1e9bdc7fa89a815772720ad640355178a1d84eed0d11007a04d6295610c43eacc85a82d277ac3930da84bb1f2a38c489588b2fc04a", 0x48}], 0x3, &(0x7f0000000900)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r3, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r4, 0xffffffffffffffff, r5, r6, r7]}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r13}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r14, r15, r16, r17]}}, @rights={{0x1c, 0x1, 0x1, [r18, r19, r20]}}, @cred={{0x1c, 0x1, 0x2, {r21, r23, r26}}}], 0xd8, 0xea5e943d9ddf2805}, 0x15ebee1b9eefa007) r27 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r27, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r27, 0x0) ioctl$ASHMEM_SET_NAME(r27, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) fchdir(r0) r3 = creat(&(0x7f00000004c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000340)={0x3da}, 0xfffffffffffffd27) write$cgroup_int(r1, &(0x7f0000000180)=0x3, 0xffffffffffffff31) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000400)) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000380)=0x0) fcntl$lock(r0, 0x6, &(0x7f00000003c0)={0x0, 0x3, 0x80000000, 0x2, r5}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44700) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000140)) open(&(0x7f0000000000)='./bus\x00', 0x100, 0x0) lseek(r0, 0x1, 0x3) mkdir(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r6 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0) write$P9_RMKNOD(r1, &(0x7f0000000440)={0x14, 0x13, 0x2, {0x1, 0x2, 0x5}}, 0x2e3) mknodat(r6, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) renameat2(r6, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r6, &(0x7f0000000280)='./file0\x00', 0x2) renameat2(r6, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r6, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) r7 = creat(&(0x7f0000000700)='./bus\x00', 0x1a) fcntl$setstatus(r7, 0x4, 0x6100) socketpair(0x1, 0xa, 0x2, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8924, &(0x7f0000000080)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8924, &(0x7f0000000080)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8924, &(0x7f0000000080)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ftruncate(r10, 0x108200) r11 = open(&(0x7f0000000740)='./file0\x00', 0x4000, 0x48) sendfile(r7, r11, 0x0, 0x8000fffffffe) sendfile(r7, r11, 0x0, 0xffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = fcntl$dupfd(r12, 0x0, r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = fcntl$dupfd(r14, 0x0, r14) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000600)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000480)=0xe8) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x6, 0x8, 0xffff, 0x800006, 0x80, r13, 0x8000, [], r16, r15, 0x2, 0x5}, 0x3c) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000500)='/proc/self\x00', 0x0, 0x0) 02:46:57 executing program 4: socket$inet6(0x10, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xd) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001040)='/selinux/policy\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190820ffff7fffffff5602113b850e1de0974881000000fe58a2bc4a01009164643e89720000de213ee23ffbf510040041feff5aff2b000000000000070000000000", 0x48}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x8000000000000004) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000000101000008000000000000000000ff0b0002000800fbffffff0000"], 0x20}}, 0x0) r3 = open$dir(&(0x7f0000002880)='./file0\x00', 0x2, 0x20) writev(r3, &(0x7f0000002680), 0x10000367) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, 0x0, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000010c0)='net/tcp6\x00') read$FUSE(r6, &(0x7f0000000000), 0x1170) write$FUSE_NOTIFY_POLL(r6, 0x0, 0x15) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000001080)=0x8) fchdir(0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x0, 0x2, 0xfffffffffffffffb, 0x6}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = gettid() clone(0x40000000, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socketpair(0x1, 0x80000, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8946, &(0x7f0000000100)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') r9 = dup3(0xffffffffffffffff, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = fcntl$dupfd(r11, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00\x00\x00v\x98\x91bS\xb3\x81\x99\x00', 0xb00}) ioctl$TUNSETLINK(r10, 0x400454cd, 0x30a) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r5, &(0x7f0000001080)=ANY=[], 0x0) r13 = socket(0x11, 0x800000003, 0x0) bind(r13, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r13, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r14, 0x0, r14) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001000)='pids.events\x00', 0x275a, 0x0) ptrace(0x10, r7) wait4(r7, 0x0, 0x2, 0x0) 02:46:57 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x88009, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x800}) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x4e22, @broadcast}, 0x10) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x8, 0x1, 0x1}}, 0x14) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYRESHEX=0x0], 0x3}}, 0x0) write$tun(r0, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"/4029], 0xfca) mount(&(0x7f00000000c0)=@loop={'j\x00\x00\xef\xce\xe1\x13\x00', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='nsfs\x00', 0x1000000, 0x0) 02:46:57 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) 02:46:57 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mlock(&(0x7f0000ff1000/0xd000)=nil, 0xd000) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) creat(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x9a6}], 0x1, 0x0, 0x187}, 0x100) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000480)='reno\x00', 0x5) sendmsg(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="c0831d29e97834af45ba4cbd422047e80d88ab527bae215d0779a01c0607a8447aa37f102ca4c7e89ba16ab90cf78c127b", 0x31}, {&(0x7f0000000280)="646d66f1fb274041aff71096d579de90d7db37e9f4abea6784e365687424e3d3103d63f1e9b4ea85a00c87ec5cc01925820661672a9e6edf3534dd6b21072bd156c28d4814c965d206b986d2e4fe42b59eef0d22212026bd3f349877973e947122f5de187f75f7c310229724bca931b47b05c80958aa4b18ae29d70d46e7d70ffaf5fad7e26e3375b3ec53d91d92abbc4774eaeed307acc690e4d65ef3b27a42e2885ad1e322b67e482c9ce3201c3318004d31284731d967fc5f90f6ca", 0xbd}], 0x2}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xfffffe94) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) lseek(r5, 0xfffffffffffff2d1, 0x0) dup3(r5, r4, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) creat(0x0, 0x0) r6 = open(&(0x7f0000000400)='./bus\x00', 0x40, 0x40) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r7}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@local, @loopback, r7}, 0xc) syz_open_procfs(0x0, 0x0) [ 512.897059] binder: 22191:22192 unknown command 7 [ 512.902857] binder: 22191:22192 ioctl c0306201 20000180 returned -22 02:46:57 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) eventfd2(0x43, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@flat=@weak_binder, @fda}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 512.979334] binder: 22202:22206 got transaction with invalid parent offset or type [ 513.004144] binder: 22202:22206 transaction failed 29201/-22, size 80-24 line 3259 [ 513.016328] binder: undelivered TRANSACTION_ERROR: 29201 02:46:57 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) [ 513.079945] binder: 22212:22214 got transaction with invalid parent offset or type [ 513.092340] binder: 22212:22214 transaction failed 29201/-22, size 80-24 line 3259 [ 513.101233] binder: undelivered TRANSACTION_ERROR: 29201 [ 513.182210] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 02:46:58 executing program 5: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x42840, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) fchdir(r0) r3 = creat(&(0x7f00000004c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000340)={0x3da}, 0xfffffffffffffd27) write$cgroup_int(r1, &(0x7f0000000180)=0x3, 0xffffffffffffff31) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000400)) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000380)=0x0) fcntl$lock(r0, 0x6, &(0x7f00000003c0)={0x0, 0x3, 0x80000000, 0x2, r5}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44700) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000140)) open(&(0x7f0000000000)='./bus\x00', 0x100, 0x0) lseek(r0, 0x1, 0x3) mkdir(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r6 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0) write$P9_RMKNOD(r1, &(0x7f0000000440)={0x14, 0x13, 0x2, {0x1, 0x2, 0x5}}, 0x2e3) mknodat(r6, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) renameat2(r6, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r6, &(0x7f0000000280)='./file0\x00', 0x2) renameat2(r6, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r6, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) r7 = creat(&(0x7f0000000700)='./bus\x00', 0x1a) fcntl$setstatus(r7, 0x4, 0x6100) socketpair(0x1, 0xa, 0x2, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8924, &(0x7f0000000080)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8924, &(0x7f0000000080)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8924, &(0x7f0000000080)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ftruncate(r10, 0x108200) r11 = open(&(0x7f0000000740)='./file0\x00', 0x4000, 0x48) sendfile(r7, r11, 0x0, 0x8000fffffffe) sendfile(r7, r11, 0x0, 0xffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = fcntl$dupfd(r12, 0x0, r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = fcntl$dupfd(r14, 0x0, r14) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000600)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000480)=0xe8) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x6, 0x8, 0xffff, 0x800006, 0x80, r13, 0x8000, [], r16, r15, 0x2, 0x5}, 0x3c) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000500)='/proc/self\x00', 0x0, 0x0) 02:46:58 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) [ 513.409099] binder: 22230:22234 ioctl c0306201 20000140 returned -14 [ 513.428283] binder: 22230:22239 ioctl c0306201 20000140 returned -14 INIT: Id "5" respawning too fast: disabled for 5 minutes INIT: Id "2" respawning too fast: disabled for 5 minutes INIT: Id "3" respawning too fast: disabled for 5 minutes INIT: Id "1" respawning too fast: disabled for 5 minutes INIT: Id "4" respawning too fast: disabled for 5 minutes INIT: Id "6" respawning too fast: disabled for 5 minutes 02:47:00 executing program 4: socket$inet6(0x10, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xd) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001040)='/selinux/policy\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190820ffff7fffffff5602113b850e1de0974881000000fe58a2bc4a01009164643e89720000de213ee23ffbf510040041feff5aff2b000000000000070000000000", 0x48}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x8000000000000004) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000000101000008000000000000000000ff0b0002000800fbffffff0000"], 0x20}}, 0x0) r3 = open$dir(&(0x7f0000002880)='./file0\x00', 0x2, 0x20) writev(r3, &(0x7f0000002680), 0x10000367) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, 0x0, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000010c0)='net/tcp6\x00') read$FUSE(r6, &(0x7f0000000000), 0x1170) write$FUSE_NOTIFY_POLL(r6, 0x0, 0x15) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000001080)=0x8) fchdir(0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x0, 0x2, 0xfffffffffffffffb, 0x6}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = gettid() clone(0x40000000, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socketpair(0x1, 0x80000, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8946, &(0x7f0000000100)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') r9 = dup3(0xffffffffffffffff, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = fcntl$dupfd(r11, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00\x00\x00v\x98\x91bS\xb3\x81\x99\x00', 0xb00}) ioctl$TUNSETLINK(r10, 0x400454cd, 0x30a) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r5, &(0x7f0000001080)=ANY=[], 0x0) r13 = socket(0x11, 0x800000003, 0x0) bind(r13, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r13, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r14, 0x0, r14) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001000)='pids.events\x00', 0x275a, 0x0) ptrace(0x10, r7) wait4(r7, 0x0, 0x2, 0x0) 02:47:00 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0xf) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$RTC_VL_CLR(r1, 0x7014) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@flat=@weak_binder, @fda}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:47:00 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) eventfd2(0x43, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@flat=@weak_binder, @fda}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:47:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xcc93a2cc92445b75) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) fchdir(r0) r3 = creat(&(0x7f00000004c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000340)={0x3da}, 0xfffffffffffffd27) write$cgroup_int(r1, &(0x7f0000000180)=0x3, 0xffffffffffffff31) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000400)) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000380)=0x0) fcntl$lock(r0, 0x6, &(0x7f00000003c0)={0x0, 0x3, 0x80000000, 0x2, r5}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44700) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000140)) open(&(0x7f0000000000)='./bus\x00', 0x100, 0x0) lseek(r0, 0x1, 0x3) mkdir(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r6 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0) write$P9_RMKNOD(r1, &(0x7f0000000440)={0x14, 0x13, 0x2, {0x1, 0x2, 0x5}}, 0x2e3) mknodat(r6, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) renameat2(r6, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r6, &(0x7f0000000280)='./file0\x00', 0x2) renameat2(r6, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r6, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) r7 = creat(&(0x7f0000000700)='./bus\x00', 0x1a) fcntl$setstatus(r7, 0x4, 0x6100) socketpair(0x1, 0xa, 0x2, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8924, &(0x7f0000000080)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8924, &(0x7f0000000080)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8924, &(0x7f0000000080)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ftruncate(r10, 0x108200) r11 = open(&(0x7f0000000740)='./file0\x00', 0x4000, 0x48) sendfile(r7, r11, 0x0, 0x8000fffffffe) sendfile(r7, r11, 0x0, 0xffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = fcntl$dupfd(r12, 0x0, r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = fcntl$dupfd(r14, 0x0, r14) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000600)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000480)=0xe8) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x6, 0x8, 0xffff, 0x800006, 0x80, r13, 0x8000, [], r16, r15, 0x2, 0x5}, 0x3c) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000500)='/proc/self\x00', 0x0, 0x0) 02:47:00 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) 02:47:00 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ustat(0x2f25, &(0x7f0000000100)) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@flat=@weak_binder, @fda}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 515.884462] binder: 22251:22257 got transaction with invalid parent offset or type [ 515.891673] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. [ 515.894295] binder: 22252:22258 got transaction with invalid parent offset or type [ 515.894329] binder: 22252:22258 transaction failed 29201/-22, size 80-24 line 3259 [ 515.894486] binder: undelivered TRANSACTION_ERROR: 29201 02:47:00 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x50, r0, 0x57701000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@flat=@weak_binder, @fda}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 515.902394] binder: 22252:22258 got transaction with invalid parent offset or type [ 515.902427] binder: 22252:22258 transaction failed 29201/-22, size 80-24 line 3259 [ 515.906969] binder: undelivered TRANSACTION_ERROR: 29201 02:47:00 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) [ 515.930599] binder: 22262:22263 got transaction with invalid parent offset or type [ 515.930634] binder: 22262:22263 transaction failed 29201/-22, size 80-24 line 3259 [ 515.931085] binder: undelivered TRANSACTION_ERROR: 29201 [ 516.001504] binder: 22270:22272 got transaction with invalid parent offset or type [ 516.001540] binder: 22270:22272 transaction failed 29201/-22, size 80-24 line 3259 [ 516.001702] binder: undelivered TRANSACTION_ERROR: 29201 [ 516.071928] binder: 22251:22257 transaction failed 29201/-22, size 80-24 line 3259 [ 516.118032] binder: undelivered TRANSACTION_ERROR: 29201 02:47:01 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ustat(0x2f25, &(0x7f0000000100)) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@flat=@weak_binder, @fda}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:47:01 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@flat=@weak_binder, @fda}, &(0x7f00000000c0)={0x0, 0x162, 0x38}}}], 0x0, 0x0, 0x0}) 02:47:01 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) 02:47:01 executing program 4: socket$inet6(0x10, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xd) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001040)='/selinux/policy\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190820ffff7fffffff5602113b850e1de0974881000000fe58a2bc4a01009164643e89720000de213ee23ffbf510040041feff5aff2b000000000000070000000000", 0x48}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x8000000000000004) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000000101000008000000000000000000ff0b0002000800fbffffff0000"], 0x20}}, 0x0) r3 = open$dir(&(0x7f0000002880)='./file0\x00', 0x2, 0x20) writev(r3, &(0x7f0000002680), 0x10000367) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, 0x0, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000010c0)='net/tcp6\x00') read$FUSE(r6, &(0x7f0000000000), 0x1170) write$FUSE_NOTIFY_POLL(r6, 0x0, 0x15) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000001080)=0x8) fchdir(0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x0, 0x2, 0xfffffffffffffffb, 0x6}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = gettid() clone(0x40000000, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socketpair(0x1, 0x80000, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8946, &(0x7f0000000100)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') r9 = dup3(0xffffffffffffffff, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = fcntl$dupfd(r11, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00\x00\x00v\x98\x91bS\xb3\x81\x99\x00', 0xb00}) ioctl$TUNSETLINK(r10, 0x400454cd, 0x30a) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r5, &(0x7f0000001080)=ANY=[], 0x0) r13 = socket(0x11, 0x800000003, 0x0) bind(r13, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r13, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r14, 0x0, r14) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001000)='pids.events\x00', 0x275a, 0x0) ptrace(0x10, r7) wait4(r7, 0x0, 0x2, 0x0) 02:47:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xcc93a2cc92445b75) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) fchdir(r0) r3 = creat(&(0x7f00000004c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000340)={0x3da}, 0xfffffffffffffd27) write$cgroup_int(r1, &(0x7f0000000180)=0x3, 0xffffffffffffff31) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000400)) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000380)=0x0) fcntl$lock(r0, 0x6, &(0x7f00000003c0)={0x0, 0x3, 0x80000000, 0x2, r5}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44700) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000140)) open(&(0x7f0000000000)='./bus\x00', 0x100, 0x0) lseek(r0, 0x1, 0x3) mkdir(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r6 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0) write$P9_RMKNOD(r1, &(0x7f0000000440)={0x14, 0x13, 0x2, {0x1, 0x2, 0x5}}, 0x2e3) mknodat(r6, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) renameat2(r6, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r6, &(0x7f0000000280)='./file0\x00', 0x2) renameat2(r6, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r6, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) r7 = creat(&(0x7f0000000700)='./bus\x00', 0x1a) fcntl$setstatus(r7, 0x4, 0x6100) socketpair(0x1, 0xa, 0x2, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8924, &(0x7f0000000080)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8924, &(0x7f0000000080)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8924, &(0x7f0000000080)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ftruncate(r10, 0x108200) r11 = open(&(0x7f0000000740)='./file0\x00', 0x4000, 0x48) sendfile(r7, r11, 0x0, 0x8000fffffffe) sendfile(r7, r11, 0x0, 0xffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = fcntl$dupfd(r12, 0x0, r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = fcntl$dupfd(r14, 0x0, r14) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000600)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000480)=0xe8) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x6, 0x8, 0xffff, 0x800006, 0x80, r13, 0x8000, [], r16, r15, 0x2, 0x5}, 0x3c) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000500)='/proc/self\x00', 0x0, 0x0) 02:47:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup(r0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0) fchdir(r3) r4 = getuid() getresgid(&(0x7f0000003180), &(0x7f00000031c0)=0x0, &(0x7f0000003200)) fchown(r3, r4, r5) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x105600, 0x0) ioctl$RTC_WIE_OFF(r6, 0x7010) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8202000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)={0x728, 0x23, 0x400, 0x70bd29, 0x25dfdbfd, {0x1a}, [@nested={0x160, 0x2c, [@typed={0x8, 0x18, @u32=0x1f}, @generic="c894383096c4dc4532e0e88c73abb9ea7559eac2a2ae47afcf9b0766927050f55d91cde630684166e56af32e4d4b39dd028d7ad99465618c2aea638ec39956b15d02e3f9c6d0c9877088791569fe5d59fc50696ed716015b23c867636abbff83ac0fd3e2a1930e95070b908b1128d7eeb9a2c834f4c186e355266d90db21ebbe087f28b03b50bf872290414dbb9de1bfcaf7bdfecf242730a49ddb05af6b570c8830ab36b0b22bdea8a514", @typed={0x8, 0x27, @pid}, @generic="cbd877b012671611dac720699f442001904a60b43210b26092122619e0af5681928b4b5f7bec18863f2ebf5be9f620cbe713bded4bb88e4b2778f23c6d70f9524049a2274c6287a7167141479eb7fe11b88f68b4a0ba2ddcf69b867a8c67c98c39727eea68d670fd75ed2b8a635bdd86e12aabf2105e7531fe6dd3626937a6457b312e997bdc733e0a5ee108d75fef1f08c38388f2c6f1840c61538a6923297833", @generic]}, @typed={0xa4, 0x7a, @binary="7ee3d6d05b6154a2aba07c3db40d43b7dcbf46352d3ff6a80f4ba816e75cbf41cd3bcaf86bc7305953222482033cfc42b08cc259615aba05e83daad4cfd5f53e5624e45c7867be5466382a54b42db46552883880c753a47c1ab78d7f535ea2dadea95f7ed9161f72507a5ce75dc3b96dfdc1d218af0b7f2a05f3172a27031243f66cf74dea9d54c30ccca713012a87879d8e0a19657c70ba1aabfc7a49a1"}, @generic="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", @nested={0x410, 0xd, [@typed={0x8, 0x7c, @uid=r4}, @generic="842a413bb56466d7cb9c207b4fb36baf408e02a9f057dcea38b0c7287d7c0f458338195bfee479b5f8175360f140321ebf278c0a7ec336a4c4932898b8", @typed={0x8, 0x68, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="6832e8f919d24185e4cd9679a8470253142591292b053ac777411f7c9e98bb5e4009a787757a04926a8dea9e79e05695d4c2e214509ab3ac603ee4b76a28f3405a8c56d21290af851de3acecbf4a0218307059ce9b24dee3d702f3665c72b3126a31260adaba46e92b506270abb674360063405a720176694dc7a18d91d62a06efa0803a60b3a90e9332c623fe9ebbd9cbaf79479aa20c7ef26020b07c64acbede56951a53ac032be310df9db7b2592d1720f5b5e9c160c299468a54c80a8008917e7bb8dc524bc9c45cc305b16c90487c17cc147e06ddd11e", @generic="93feb35ba6eac49dee7580b640dc610c8281480217c328235157607e16a7cd9cfc675c8859fa41e3f80d04d36d09e016e9f3b4067a51006d69570c4b0deb8969ca9837166cf7a3b6579fd59999203402a4e66099a60ee6e092bce67b25318e2f8891aaf2e919c677a94630e430494259c78c809ff0bd1c4a522dbc17f42282a633e7f77319812c81d0fa35e8f59117b6de120749d537679096b324ac930b430d054070b5549a8a1bae5ef6b1e3c07ecd979c268ccad4322555b9d58e2fc8f879d8bcb3a5322f4b1b262e25d78d23c494add66e69a9f604ec691a49bcf768", @typed={0x6c, 0x24, @binary="33a2a78af6e6782ed0a344ea47bc1254f0eb8a512b5bddfd010630b505686aa3454d36f55bf37e9041fd9849854f35c98e31836227291e6887693b01a7f33e6021e9cd34b6da81919dc40e5ea7bac3aa254ebdbc4cc62a82b7af6aa8dc58a208d3748a6899"}, @generic="51726bdb1d6b50b628f98a606621640deda425d21c85564f0e13dd5ab5fce39d42ef83abc5667ebf574d975e4d0fce65e8d2d9b6351c93b2a0e48a9b2bee363b0b98abaa58870bc1ad29140eb64f9a7047527cbedc0a9b468e397daabded5cd6447836afdbb6610b57efc778e9f58bdd801821a745b6043ef372dcb4b7c4dbd4e4158bfde63f0511fcd98189200760e9d99ad000dfa6b004740d5ad9ae1f60b2bc91ac8e81de3302b3fb43341ccc107f1e70237f4bfb6621e723b2ad50c917b6c8b07f7850a874e895a66ee672c09f3c6f", @generic="9d325260ac9f10211ada824c7fa75ef1ea695400fa687422fdc15a8a221c3fc73bfa068d6e8212c36eb95673fecf7c7f27e2357327682669fc9762a9773b3608c992eb07f7055a97e2e86a6725b0cc482374e6d465b6e179571c586cf73c3066a3d26b512d602dad4841c4d4e03ad2461f8d28dfbf8c6ef465c3254ca8033c6102f75ca45bcd5d17b39cb0331756395d5099f1166bc0c8ad324e974fbf5e3eae5821e6463ca131214075762bce3d346bfa7272", @generic="f482e89fbb4eee65420dcee175ed068ef13868330e"]}]}, 0x728}}, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f00000000c0)={0x0, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @broadcast}}}, 0x108) tkill(r1, 0x40) pread64(r0, &(0x7f00000002c0)=""/167, 0xa7, 0x2) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 02:47:01 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pselect6(0x40, &(0x7f0000000040)={0x3f, 0x6, 0xace, 0x4, 0x1ff, 0x100, 0x6, 0x10a}, &(0x7f00000001c0)={0x0, 0x20, 0x8, 0x40, 0x0, 0xfffffffffffffffa, 0x8, 0x1e96}, &(0x7f0000000200)={0x4, 0x2, 0x7ff, 0x6211, 0x4, 0x400, 0x68e, 0x1}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280)={0x10001}, 0x8}) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1163484000000000000000000200000000000000000000000000000000000000000000005000000000000000180000000000961f2e59e012a0cb2a9607bee3940000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a627700000000000000000000000000000000000000008561646600000000000000000000000000000000000000000000000000000000852a627300"/80], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000180000000096467608ce000000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) setrlimit(0xd, &(0x7f0000000300)={0x101}) [ 516.433024] binder: 22285:22287 got transaction with invalid parent offset or type [ 516.441872] binder: 22285:22287 transaction failed 29201/-22, size 80-24 line 3259 [ 516.444670] binder: 22284:22292 got transaction with invalid offset (354, min 24 max 80) or object. [ 516.444705] binder: 22284:22292 transaction failed 29201/-22, size 80-24 line 3199 02:47:01 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) 02:47:01 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@request_death={0x400c630e, 0x2}], 0x0, 0x0, 0x0}) [ 516.513087] binder_alloc: 22298: binder_alloc_buf size 2330049857210818664 failed, no address space [ 516.513095] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 516.513114] binder: 22298:22299 transaction failed 29201/-28, size 80-2276006661682364440 line 3136 02:47:01 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000600)={&(0x7f00000005c0)='./file0\x00', 0x0, 0x8}, 0x10) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r1, &(0x7f0000007c40)=[{{&(0x7f0000000080)={0xa, 0x4, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x28}}], 0x2, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) setpgid(r2, r3) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000006c0)='/selinux/status\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) perf_event_open$cgroup(&(0x7f0000000640)={0x2, 0x70, 0x12, 0x5, 0x5, 0xff, 0x0, 0xf359, 0x2000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_config_ext={0x3, 0x6}, 0x20900, 0x8, 0x7fffffff, 0x7, 0x80, 0x2, 0x4ec}, r4, 0x8, r6, 0x217c06a63cb97563) ptrace$cont(0x20, r2, 0x0, 0x0) syz_open_procfs(r2, &(0x7f0000000440)='net/ip6_mr_cache\x00') r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@flat=@weak_binder, @fda}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x2000, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sched_setattr(0x0, &(0x7f0000000200)={0x30, 0x0, 0x0, 0xfff, 0x0, 0x12b6, 0x0, 0xddb}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000808}, 0xc, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="4001000095e421ff09df18f4cddfc190789cb5e6b155145fca38d3f1be126d21470444d695e9057c71198225d2de6342c0bb9750dad263d63a7e040c24ac26a0913b08f9e9444531466409dd58facf47c1eebda752d17875b2975dbce7faa80f916285aac23028e35766fd6d57c87d25cd", @ANYRES16=r9, @ANYBLOB="000200080000fedbdf2505000000240009000800010002000000080001000100000008000100040000000800010004000000400007000c00040008000000000000000c0004000100010000000000080002008500000008000100090000000c00030004000000000000000800010005000000b400050008000100657468001400020008000200010000000800030009000000080001006962000024000200080002000000000008000300000200000800010012000000080001001400000008000100756470000c00020008000100190000000800010065746800440002000800010015000000080002000000008008000400000000000800010003000000080001000c00000008000300090000000800020065030000080003000700000008000100657468001400050008000100756470000800010075647000"], 0x3}}, 0x2004c092) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) setsockopt$inet6_MRT6_ADD_MFC(r11, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x4e22, 0x8, @ipv4={[], [], @broadcast}, 0x80000000}, {0xa, 0x4e22, 0x851, @loopback, 0x1}, 0xfffa, [0x808, 0x37, 0x0, 0x9, 0x1f, 0x8, 0x4, 0x2]}, 0x5c) [ 516.513745] binder: undelivered TRANSACTION_ERROR: 29201 [ 516.515189] binder_alloc: 22298: binder_alloc_buf size 2330049857210818664 failed, no address space 02:47:01 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x9, 0x0, 0x15}, @fda}, &(0x7f00000000c0)={0x0, 0x20, 0x40}}}], 0x0, 0x0, 0x0}) [ 516.515196] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 516.515213] binder: 22298:22302 transaction failed 29201/-28, size 80-2276006661682364440 line 3136 [ 516.515475] binder: undelivered TRANSACTION_ERROR: 29201 [ 516.558510] binder_alloc: 22306: binder_alloc_buf size -4596714861136695144 failed, no address space [ 516.558518] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 516.558535] binder: 22306:22307 transaction failed 29201/-28, size 80-24 line 3136 [ 516.558684] binder: undelivered TRANSACTION_ERROR: 29201 [ 516.583749] binder_alloc: 22306: binder_alloc_buf size -4596996336113405800 failed, no address space [ 516.583757] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 516.583780] binder: 22306:22309 transaction failed 29201/-28, size 80-24 line 3136 [ 516.584746] binder: undelivered TRANSACTION_ERROR: 29201 [ 516.648309] binder: 22313:22317 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 516.648321] binder: 22313:22317 unknown command 0 [ 516.648329] binder: 22313:22317 ioctl c0306201 20000180 returned -22 [ 516.740371] binder: 22324:22327 got transaction with invalid parent offset or type [ 516.740402] binder: 22324:22327 transaction failed 29201/-22, size 88-24 line 3259 [ 516.740550] binder: undelivered TRANSACTION_ERROR: 29201 [ 516.753125] binder: 22324:22328 got transaction with invalid parent offset or type 02:47:01 executing program 2: socket$inet6(0x10, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xd) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001040)='/selinux/policy\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190820ffff7fffffff5602113b850e1de0974881000000fe58a2bc4a01009164643e89720000de213ee23ffbf510040041feff5aff2b000000000000070000000000", 0x48}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x8000000000000004) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000000101000008000000000000000000ff0b0002000800fbffffff0000"], 0x20}}, 0x0) r3 = open$dir(&(0x7f0000002880)='./file0\x00', 0x2, 0x20) writev(r3, &(0x7f0000002680), 0x10000367) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, 0x0, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000010c0)='net/tcp6\x00') read$FUSE(r6, &(0x7f0000000000), 0x1170) write$FUSE_NOTIFY_POLL(r6, 0x0, 0x15) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000001080)=0x8) fchdir(0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x0, 0x2, 0xfffffffffffffffb, 0x6}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = gettid() clone(0x40000000, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socketpair(0x1, 0x80000, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8946, &(0x7f0000000100)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') r9 = dup3(0xffffffffffffffff, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = fcntl$dupfd(r11, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00\x00\x00v\x98\x91bS\xb3\x81\x99\x00', 0xb00}) ioctl$TUNSETLINK(r10, 0x400454cd, 0x30a) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r5, &(0x7f0000001080)=ANY=[], 0x0) r13 = socket(0x11, 0x800000003, 0x0) bind(r13, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r13, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r14, 0x0, r14) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001000)='pids.events\x00', 0x275a, 0x0) ptrace(0x10, r7) wait4(r7, 0x0, 0x2, 0x0) 02:47:01 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@flat=@weak_binder, @fda}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:47:01 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f00000002c0)=0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) accept4$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14, 0x800) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() r6 = dup(r2) ioctl$PPPIOCGFLAGS1(r6, 0x8004745a, &(0x7f0000000040)) ioctl$ASHMEM_SET_NAME(r6, 0x41007701, &(0x7f0000000000)='\x00') setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f00000000c0)={0x0, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @broadcast}}}, 0x108) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x40) fcntl$setstatus(r2, 0x4, 0x80000000002c00) 02:47:01 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) 02:47:01 executing program 3: socket$inet6(0x10, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xd) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001040)='/selinux/policy\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190820ffff7fffffff5602113b850e1de0974881000000fe58a2bc4a01009164643e89720000de213ee23ffbf510040041feff5aff2b000000000000070000000000", 0x48}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x8000000000000004) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000000101000008000000000000000000ff0b0002000800fbffffff0000"], 0x20}}, 0x0) r3 = open$dir(&(0x7f0000002880)='./file0\x00', 0x2, 0x20) writev(r3, &(0x7f0000002680), 0x10000367) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, 0x0, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000010c0)='net/tcp6\x00') read$FUSE(r6, &(0x7f0000000000), 0x1170) write$FUSE_NOTIFY_POLL(r6, 0x0, 0x15) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000001080)=0x8) fchdir(0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x0, 0x2, 0xfffffffffffffffb, 0x6}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = gettid() clone(0x40000000, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socketpair(0x1, 0x80000, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8946, &(0x7f0000000100)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') r9 = dup3(0xffffffffffffffff, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = fcntl$dupfd(r11, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00\x00\x00v\x98\x91bS\xb3\x81\x99\x00', 0xb00}) ioctl$TUNSETLINK(r10, 0x400454cd, 0x30a) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r5, &(0x7f0000001080)=ANY=[], 0x0) r13 = socket(0x11, 0x800000003, 0x0) bind(r13, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r13, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r14, 0x0, r14) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001000)='pids.events\x00', 0x275a, 0x0) ptrace(0x10, r7) wait4(r7, 0x0, 0x2, 0x0) 02:47:01 executing program 4: socket$inet6(0x10, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xd) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001040)='/selinux/policy\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190820ffff7fffffff5602113b850e1de0974881000000fe58a2bc4a01009164643e89720000de213ee23ffbf510040041feff5aff2b000000000000070000000000", 0x48}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x8000000000000004) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000000101000008000000000000000000ff0b0002000800fbffffff0000"], 0x20}}, 0x0) r3 = open$dir(&(0x7f0000002880)='./file0\x00', 0x2, 0x20) writev(r3, &(0x7f0000002680), 0x10000367) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, 0x0, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000010c0)='net/tcp6\x00') read$FUSE(r6, &(0x7f0000000000), 0x1170) write$FUSE_NOTIFY_POLL(r6, 0x0, 0x15) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000001080)=0x8) fchdir(0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x0, 0x2, 0xfffffffffffffffb, 0x6}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = gettid() clone(0x40000000, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socketpair(0x1, 0x80000, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8946, &(0x7f0000000100)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') r9 = dup3(0xffffffffffffffff, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = fcntl$dupfd(r11, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00\x00\x00v\x98\x91bS\xb3\x81\x99\x00', 0xb00}) ioctl$TUNSETLINK(r10, 0x400454cd, 0x30a) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r5, &(0x7f0000001080)=ANY=[], 0x0) r13 = socket(0x11, 0x800000003, 0x0) bind(r13, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r13, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r14, 0x0, r14) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001000)='pids.events\x00', 0x275a, 0x0) ptrace(0x10, r7) wait4(r7, 0x0, 0x2, 0x0) [ 516.753158] binder: 22324:22328 transaction failed 29201/-22, size 88-24 line 3259 [ 516.753503] binder: undelivered TRANSACTION_ERROR: 29201 [ 516.957368] binder: undelivered TRANSACTION_ERROR: 29201 [ 516.976498] binder: 22335:22340 got transaction with invalid parent offset or type [ 516.984743] binder: 22335:22340 transaction failed 29201/-22, size 80-24 line 3259 [ 517.000611] binder: undelivered TRANSACTION_ERROR: 29201 [ 517.006631] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. [ 517.020561] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.3'. [ 517.032129] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.2'. 02:47:01 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x100, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0x323) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup3(r9, r10, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmsg$TIPC_CMD_GET_NODES(r11, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000020}, 0xc, &(0x7f0000000500)={&(0x7f0000000100)={0xfffffdc4, r8, 0x100, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0xfffffffffffffef5}, 0x1, 0x0, 0x0, 0x8084}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r7, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xa51040}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r8, 0x35c, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}}, 0x8000) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10820006a}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r8, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x1ff}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x2000044}, 0x44848) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r8, 0x200, 0x70bd27, 0x25dfdbff, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x6d2394b4}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r8, 0xdd53e8bd7d43fbf6, 0x70bd2d, 0x25dfdbfc, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x4, 0x4, 0x131, 0x9}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20004004}, 0x24010840) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) [ 517.034182] binder: 22335:22350 got transaction with invalid parent offset or type [ 517.034220] binder: 22335:22350 transaction failed 29201/-22, size 80-24 line 3259 [ 517.034482] binder: undelivered TRANSACTION_ERROR: 29201 02:47:02 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@flat=@weak_binder, @fda}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:47:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) umount2(&(0x7f0000000000)='./file0\x00', 0x2) r1 = gettid() r2 = dup(r0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f00000000c0)={0x0, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @broadcast}}}, 0x108) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) fcntl$setstatus(r0, 0x4, 0x80000000002c00) [ 517.348642] binder: 22378:22379 got transaction with invalid parent offset or type 02:47:02 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) [ 517.403840] binder: 22378:22379 transaction failed 29201/-22, size 80-24 line 3259 02:47:02 executing program 1: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x3) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r2 = socket(0x9, 0x2, 0xff) sendto(r2, &(0x7f00000001c0)="ad808534183c7bfd7bce64e2251b78877e886fee1d9f6bb5186019b2e0d8e40e1e79f1bb646dd60a870ff8ee08190593de0b0713b176af8970de8748545f175271c45cb4e08b27bb1136bdf8661407db24f9a5932991616e8df6d528dd8945b10354a942d8e5123266ecb43a17f0319188220e4b4c1acecf6b033ac5c0ea39d080395508b6b5881b250751113eb3", 0x8e, 0x20000000, &(0x7f0000000100)=@nfc_llcp={0x27, 0x1, 0x0, 0x7, 0x1f, 0x3, "58eb86271eedf8691c8baf4288186ecb75cf93dd1f1693dffbfc8510f97223c9f19778e0d1df1bc655a82b6e4f0523865f0b6e1c8f86861ecc8e0e2c5ef45c", 0x26}, 0x80) r3 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0xbb0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGABS2F(r5, 0x8018456f, &(0x7f0000000540)=""/4096) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0x0) ioctl$ASHMEM_SET_NAME(r6, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_START(r9, 0x54a0) r10 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r10, 0x40087703, 0x1) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2200802}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r11, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r10, 0x0) ioctl$ASHMEM_SET_NAME(r10, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) 02:47:04 executing program 3: socket$inet6(0x10, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xd) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001040)='/selinux/policy\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190820ffff7fffffff5602113b850e1de0974881000000fe58a2bc4a01009164643e89720000de213ee23ffbf510040041feff5aff2b000000000000070000000000", 0x48}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x8000000000000004) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000000101000008000000000000000000ff0b0002000800fbffffff0000"], 0x20}}, 0x0) r3 = open$dir(&(0x7f0000002880)='./file0\x00', 0x2, 0x20) writev(r3, &(0x7f0000002680), 0x10000367) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, 0x0, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000010c0)='net/tcp6\x00') read$FUSE(r6, &(0x7f0000000000), 0x1170) write$FUSE_NOTIFY_POLL(r6, 0x0, 0x15) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000001080)=0x8) fchdir(0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x0, 0x2, 0xfffffffffffffffb, 0x6}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = gettid() clone(0x40000000, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socketpair(0x1, 0x80000, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8946, &(0x7f0000000100)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') r9 = dup3(0xffffffffffffffff, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = fcntl$dupfd(r11, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00\x00\x00v\x98\x91bS\xb3\x81\x99\x00', 0xb00}) ioctl$TUNSETLINK(r10, 0x400454cd, 0x30a) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r5, &(0x7f0000001080)=ANY=[], 0x0) r13 = socket(0x11, 0x800000003, 0x0) bind(r13, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r13, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r14, 0x0, r14) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001000)='pids.events\x00', 0x275a, 0x0) ptrace(0x10, r7) wait4(r7, 0x0, 0x2, 0x0) 02:47:04 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0xffffdffffffffffe) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a627700000000000000000000000000000000000000008561646600000000000000000000000000000000000000000000000000000000852a627300"/80], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="0000000000000000180000000000000038000000000000006b84230be7c14b52353eae9fa32d59e56741837b31f533"], @ANYBLOB="900ce25bc297f2b1"], 0x0, 0x0, 0x0}) 02:47:04 executing program 2: socket$inet6(0x10, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xd) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001040)='/selinux/policy\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190820ffff7fffffff5602113b850e1de0974881000000fe58a2bc4a01009164643e89720000de213ee23ffbf510040041feff5aff2b000000000000070000000000", 0x48}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x8000000000000004) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000000101000008000000000000000000ff0b0002000800fbffffff0000"], 0x20}}, 0x0) r3 = open$dir(&(0x7f0000002880)='./file0\x00', 0x2, 0x20) writev(r3, &(0x7f0000002680), 0x10000367) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, 0x0, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000010c0)='net/tcp6\x00') read$FUSE(r6, &(0x7f0000000000), 0x1170) write$FUSE_NOTIFY_POLL(r6, 0x0, 0x15) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000001080)=0x8) fchdir(0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x0, 0x2, 0xfffffffffffffffb, 0x6}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = gettid() clone(0x40000000, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socketpair(0x1, 0x80000, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8946, &(0x7f0000000100)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') r9 = dup3(0xffffffffffffffff, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = fcntl$dupfd(r11, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00\x00\x00v\x98\x91bS\xb3\x81\x99\x00', 0xb00}) ioctl$TUNSETLINK(r10, 0x400454cd, 0x30a) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r5, &(0x7f0000001080)=ANY=[], 0x0) r13 = socket(0x11, 0x800000003, 0x0) bind(r13, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r13, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r14, 0x0, r14) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001000)='pids.events\x00', 0x275a, 0x0) ptrace(0x10, r7) wait4(r7, 0x0, 0x2, 0x0) 02:47:04 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x80000001, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x70, 0x0, 0x0, 0x31, 0x0, 0x0, 0x2000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext={0x2000000005, 0x2}, 0x0, 0x3, 0x2000, 0x0, 0x7f, 0x0, 0x20}, 0x0, 0xffffffffffffffff, r0, 0x8) socket$inet6(0xa, 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x3, 0x0, 0xffff0001}}, 0x30) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00') write$FUSE_LSEEK(r2, &(0x7f0000000100)={0x18, 0xfffffffffffffffe, 0x5, {0x6}}, 0x18) r3 = socket$inet(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) r6 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r7 = creat(&(0x7f0000000300)='./file0\x00', 0x20) write$P9_RREMOVE(r7, &(0x7f0000000280)={0x1}, 0xff7f) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000200)={0x0, r7}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xfe16) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x\x11k4\xd3\x1b\x05\xaf\xf0\x1eyRN\xc9\xc6V\x00\x02\x00\x00\x00\x00\x00\x00\x00', 0x275a, 0x0) fallocate(r9, 0x0, 0x0, 0x110003) lseek(r9, 0x0, 0x3) r10 = syz_genetlink_get_family_id$team(&(0x7f0000000240)='team\x00') r11 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r11, 0x4, 0x6100) r12 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) lseek(r11, 0x0, 0x2) sendfile(r11, r12, 0x0, 0x20008) r13 = socket$inet6_udp(0xa, 0x2, 0x0) r14 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0x40400, 0x0, 0x3, 0x3, 0x0, 0x3}, 0x20) connect$inet6(r14, 0x0, 0x0) r15 = open(&(0x7f0000000400)='./bus\x00', 0x40, 0x40) getpeername$packet(r15, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r16}) setsockopt$inet6_IPV6_PKTINFO(r13, 0x29, 0x32, &(0x7f0000000080)={@mcast2, r16}, 0x14) setsockopt$inet_mreqn(r12, 0x0, 0x24, &(0x7f0000000040)={@local, @loopback, r16}, 0xc) r17 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r17, r17, &(0x7f00000002c0)=0x202, 0xdd) getpeername$packet(r17, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r18}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000080)={@mcast2, r18}, 0x14) setsockopt$inet_mreqn(r15, 0x0, 0x24, &(0x7f0000000040)={@multicast2, @multicast2, r18}, 0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r9, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x17100010}, 0xc, &(0x7f0000000340)={&(0x7f0000002040)=ANY=[@ANYBLOB="c0020000", @ANYRES16=r10, @ANYBLOB="000128bd7000fedbdf250200000008000100", @ANYRES32=r8, @ANYBLOB="9000020040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000100004006c6f616462616c616e6365004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000001c000400ff7f0102020000000500000700000000abed021f0000000008000100", @ANYRES32=r8, @ANYBLOB="4400020040000100240001006d6f646500000000000000000000000000000000000000000000000000000000080003000500000010000400726f756e64726f62696e000008000100", @ANYRES32=r16, @ANYBLOB="b800020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040004000000080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004005b4800003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r18, @ANYBLOB="000102004000017bc20001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000100004006c6f616462716c010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004002bdb000008000600"/128, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000000000044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000001400040080000202008000000600070601000080"], 0xe}, 0x1, 0x0, 0x0, 0x40}, 0x8000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000300)=0xe8) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r20}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r20, 0x40345410, &(0x7f0000000240)={{0x2, 0x1, 0x8, 0x0, 0x7a}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r20, 0x29, 0x22, &(0x7f0000000340)={{{@in=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000000440)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @empty}, &(0x7f00000004c0)=0xc) r23 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$cgroup_type(r23, &(0x7f0000000200)='threaded\x00', 0xf642e7e) getsockopt$inet6_IPV6_XFRM_POLICY(r23, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000600)=0xe8) r25 = socket$netlink(0x10, 0x3, 0x0) r26 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r26, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r26, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r25, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r27}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r27}]]}}}]}, 0x38}}, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000640)={0x0, @multicast2, @loopback}, &(0x7f0000000680)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000006c0)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f00000007c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000800)={{{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000000900)=0xe8) r31 = socket$netlink(0x10, 0x3, 0x0) r32 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r32, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r32, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r31, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r33}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r33}]]}}}]}, 0x38}}, 0x0) r34 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r34, &(0x7f00000036c0)=[{{&(0x7f0000000340)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='<'], 0x1}}], 0x1, 0x0) getsockopt$inet_mreqn(r34, 0x0, 0x31, &(0x7f0000000940)={@remote, @remote, 0x0}, &(0x7f0000000980)=0xc) r36 = socket$netlink(0x10, 0x3, 0x0) r37 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r37, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r37, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r36, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r38}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r38}]]}}}]}, 0x38}}, 0x0) sendmsg$TEAM_CMD_NOOP(r7, &(0x7f0000000d80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d40)={&(0x7f00000009c0)={0x358, r10, 0x100, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r19}, {0x13c, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r21}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xfffffff8}}, {0x8, 0x6, r22}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xfffff800}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r24}}}]}}, {{0x8, 0x1, r27}, {0xec, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r28}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x11b}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r29}}}]}}, {{0x8, 0x1, r30}, {0x44, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r33}}, {0x8}}}]}}, {{0x8, 0x1, r35}, {0xb8, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r38}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8}}}]}}]}, 0x358}, 0x1, 0x0, 0x0, 0x4000004}, 0x2116e17f341ed9cd) r39 = socket$netlink(0x10, 0x3, 0x0) r40 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r40, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r40, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r39, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x2, r41}]]}}}]}, 0x38}}, 0x0) r42 = socket$netlink(0x10, 0x3, 0x0) r43 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r43, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r43, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x2, r44}]]}}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r46 = socket$inet6(0x10, 0x8000000100000003, 0x0) r47 = dup2(r45, r46) ioctl$PERF_EVENT_IOC_ENABLE(r47, 0x8912, 0x400200) getsockopt$inet6_mreq(r47, 0x29, 0x14, &(0x7f0000000340)={@loopback, 0x0}, &(0x7f0000000380)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@empty, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f00000004c0)=0xe8) recvmsg(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000500)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000580)=""/168, 0xa8}, {&(0x7f0000000640)=""/3, 0x3}], 0x2, &(0x7f00000006c0)=""/208, 0xd0}, 0x2000) r51 = socket$netlink(0x10, 0x3, 0x0) r52 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r52, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r52, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r51, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x2, r53}]]}}}]}, 0x38}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000001240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001280)=0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000006ac0)=[{{&(0x7f00000012c0)=@isdn, 0x80, &(0x7f0000001940)=[{&(0x7f0000001340)=""/129, 0x81}, {&(0x7f0000001400)=""/100, 0x64}, {&(0x7f0000001480)=""/224, 0xe0}, {&(0x7f0000001580)=""/41, 0x29}, {&(0x7f00000015c0)=""/239, 0xef}, {&(0x7f00000016c0)=""/206, 0xce}, {&(0x7f00000017c0)=""/40, 0x28}, {&(0x7f0000001800)=""/62, 0x3e}, {&(0x7f0000001840)=""/226, 0xe2}], 0x9, &(0x7f0000001a00)=""/147, 0x93}}, {{&(0x7f0000001ac0)=@un=@abs, 0x80, &(0x7f0000003f00)=[{&(0x7f0000001b40)=""/108, 0x6c}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000003bc0)=""/98, 0x62}, {&(0x7f0000003c40)=""/45, 0x2d}, {&(0x7f0000003c80)=""/221, 0xdd}, {&(0x7f0000003d80)=""/4, 0x4}, {&(0x7f0000003dc0)=""/177, 0xb1}, {&(0x7f0000003e80)=""/116, 0x74}], 0x9}, 0x4}, {{&(0x7f0000003fc0)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f00000040c0)=[{&(0x7f0000004040)=""/126, 0x7e}], 0x1, &(0x7f0000004100)=""/127, 0x7f}, 0x6}, {{&(0x7f0000004180)=@caif=@dbg, 0x80, &(0x7f0000005700)=[{&(0x7f0000004200)=""/80, 0x50}, {&(0x7f0000004280)=""/94, 0x5e}, {&(0x7f0000004300)=""/229, 0xe5}, {&(0x7f0000004400)=""/20, 0x14}, {&(0x7f0000004440)=""/155, 0x9b}, {&(0x7f0000004500)=""/196, 0xc4}, {&(0x7f0000004600)=""/73, 0x49}, {&(0x7f0000004680)=""/14, 0xe}, {&(0x7f00000046c0)=""/31, 0x1f}, {&(0x7f0000004700)=""/4096, 0x1000}], 0xa, &(0x7f00000057c0)=""/4096, 0x1000}, 0x401}, {{&(0x7f00000067c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000006a40)=[{&(0x7f0000006840)=""/68, 0x44}, {&(0x7f00000068c0)=""/157, 0x9d}, {&(0x7f0000006980)=""/94, 0x5e}, {&(0x7f0000006a00)=""/31, 0x1f}], 0x4, &(0x7f0000006a80)=""/21, 0x15}, 0x8}], 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r57 = socket$inet6(0x10, 0x8000000100000003, 0x0) r58 = dup2(r56, r57) ioctl$PERF_EVENT_IOC_ENABLE(r58, 0x8912, 0x400200) accept$packet(r58, &(0x7f0000006c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000006c40)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r61 = socket$inet6(0x10, 0x8000000100000003, 0x0) dup2(r60, r61) r62 = socket$netlink(0x10, 0x3, 0x0) r63 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r63, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r63, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r62, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x2, r64}]]}}}]}, 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r60, 0x8933, &(0x7f0000006d40)={'team0\x00', r64}) r66 = socket$netlink(0x10, 0x3, 0x0) r67 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r67, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r67, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r66, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x2, r68}]]}}}]}, 0x38}}, 0x0) r69 = socket$netlink(0x10, 0x3, 0x0) r70 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r70, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r70, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r69, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x2, r71}]]}}}]}, 0x38}}, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000006d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000006dc0)=0x14, 0x80000) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000007280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x30208000}, 0xc, &(0x7f0000007240)={&(0x7f0000006e00)={0x408, r10, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8, 0x1, r41}, {0x220, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r44}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r48}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r49}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x1}, {0x8, 0x4, 0x3}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r50}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x9427}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r53}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r54}, {0xf0, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x5faf}}, {0xfd56, 0x6, r55}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0xffffffffffffff0c}, {0x8, 0x4, r59}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0xfffffffffffffe77}, {0x8, 0x4, 0x1f}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r65}, {0x44, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x40}}, {0x8, 0x6, r68}}}]}}, {{0x8}, {0x80, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r71}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r72}}, {0x8}}}]}}]}, 0x408}, 0x1, 0x0, 0x0, 0x40000c1}, 0x4410) ioctl$sock_proto_private(r3, 0x89e1, &(0x7f00000001c0)="e2d3af03c530a22b7ce998071b6f61a981cf5e20b3c9588ae96d4ca1883a011ee1ecb11ff3a61d9a892d598f1fe71ce08412bb6a19a229b09fb771cc32a38c305c6e4e37b70bf48977491919889aecaff8f09c3aaa4fb08e21a85eab5bc64dc1641f38e9b0c0e73d827036b9cfdcdc280ba002a8cd800f2cd6ae7f8d7a478078a4c79e476c438ed5a4c6de48dc062518d3579b228f6199c999c15d051bec37fb41a012a73cd8bdb37f74") open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags=0x4}) 02:47:04 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a627700000000000000000000000000000000000000008561646600000000000000000000000000000000000000000000000000000000852a627300"/80], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000018000000000000003800000000000000"], @ANYBLOB="9c01000000120300"], 0x0, 0x0, 0x0}) [ 520.071305] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.3'. [ 520.081582] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.2'. [ 520.084765] binder_alloc: 22417: binder_alloc_buf size 864216139432456 failed, no address space [ 520.084771] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 520.084788] binder: 22417:22418 transaction failed 29201/-28, size 80-24 line 3136 02:47:05 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000580)=0x6) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r1 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r1) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r8 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x2007fff) sendfile(r6, r8, 0x0, 0x8000fffffffe) [ 520.085209] binder: undelivered TRANSACTION_ERROR: 29201 [ 520.086710] binder_alloc: 22417: binder_alloc_buf size 864216139432456 failed, no address space [ 520.086718] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 02:47:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup(r0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f00000000c0)={0x0, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @broadcast}}}, 0x108) ptrace$setopts(0x4206, r1, 0x1d, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$EVIOCGBITSW(r4, 0x80404525, &(0x7f0000000000)=""/18) tkill(r1, 0x40) arch_prctl$ARCH_GET_CPUID(0x1011) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 02:47:05 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000580)=0x6) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r1 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r1) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r8 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x2007fff) sendfile(r6, r8, 0x0, 0x8000fffffffe) [ 520.086735] binder: 22417:22419 transaction failed 29201/-28, size 80-24 line 3136 [ 520.087016] binder: undelivered TRANSACTION_ERROR: 29201 02:47:05 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000580)=0x6) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r1 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r1) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r8 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x2007fff) sendfile(r6, r8, 0x0, 0x8000fffffffe) 02:47:05 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x40000, 0x0) ioctl$KDDISABIO(r1, 0x4b37) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000012c0)={0xc, 0x0, &(0x7f0000000300)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f00000001c0)=[@increfs={0x40046304, 0x3}, @free_buffer={0x40086303, r4}], 0xb9, 0x0, &(0x7f0000000200)="782e537d19762f411faaad78b9da08f9432c53e53138369d6e003e01ae19889a0d966cfeae2c25c61e2aaa3bb6cf2fd86fb97e8652909ec31ce4b649d9ae45d0263ce1ff466ec8014aa634de874864b45ca73d89ad7738dab8eff626fbf8d31f9087b3ec39ed44e02e021fc17762dfc962e4f0a45aed3a2a9364dfd4276c121833a107e508849d001631d7d5104f71d166f56cca6112eccb25c0fc0bfc9142b992dcbcb2f653ab356bf2745ea7f667e0e77d988447eb3374fd"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@flat=@weak_binder, @fda, @fd}, &(0x7f00000000c0)={0x207, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000100)) 02:47:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x20, 0x0, @local}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000240)=0x1c7, 0x4) sendto$inet(r1, 0x0, 0x0, 0x20000804, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10) r2 = gettid() r3 = dup(r0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) ioctl$ASHMEM_SET_NAME(r4, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000010c0)='net/tcp6\x00') read$FUSE(r6, &(0x7f0000000000), 0x1170) write$FUSE_NOTIFY_POLL(r6, 0x0, 0x15) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000001080)=0x8) fchdir(0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x0, 0x2, 0xfffffffffffffffb, 0x6}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = gettid() clone(0x40000000, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socketpair(0x1, 0x80000, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8946, &(0x7f0000000100)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') r9 = dup3(0xffffffffffffffff, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = fcntl$dupfd(r11, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00\x00\x00v\x98\x91bS\xb3\x81\x99\x00', 0xb00}) ioctl$TUNSETLINK(r10, 0x400454cd, 0x30a) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r5, &(0x7f0000001080)=ANY=[], 0x0) r13 = socket(0x11, 0x800000003, 0x0) bind(r13, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r13, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r14, 0x0, r14) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001000)='pids.events\x00', 0x275a, 0x0) ptrace(0x10, r7) wait4(r7, 0x0, 0x2, 0x0) 02:47:07 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) personality(0x400000d) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@mcast2}, {@in6=@mcast2, 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x68, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xe0, 0x60, "e5ded35713882b9ed9bc5c5a1c66b92f789b133cc773ecd14dfa9409"}}]}, 0x158}}, 0x0) 02:47:07 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@flat=@weak_binder, @fda}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) prctl$PR_GET_SECUREBITS(0x1b) 02:47:07 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) 02:47:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup(r0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f00000000c0)={0x0, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth0\x00', 0x1}, 0x18) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 02:47:07 executing program 3: socket$inet6(0x10, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xd) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001040)='/selinux/policy\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190820ffff7fffffff5602113b850e1de0974881000000fe58a2bc4a01009164643e89720000de213ee23ffbf510040041feff5aff2b000000000000070000000000", 0x48}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x8000000000000004) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000000101000008000000000000000000ff0b0002000800fbffffff0000"], 0x20}}, 0x0) r3 = open$dir(&(0x7f0000002880)='./file0\x00', 0x2, 0x20) writev(r3, &(0x7f0000002680), 0x10000367) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, 0x0, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000010c0)='net/tcp6\x00') read$FUSE(r6, &(0x7f0000000000), 0x1170) write$FUSE_NOTIFY_POLL(r6, 0x0, 0x15) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000001080)=0x8) fchdir(0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x0, 0x2, 0xfffffffffffffffb, 0x6}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = gettid() clone(0x40000000, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socketpair(0x1, 0x80000, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8946, &(0x7f0000000100)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') r9 = dup3(0xffffffffffffffff, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = fcntl$dupfd(r11, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00\x00\x00v\x98\x91bS\xb3\x81\x99\x00', 0xb00}) ioctl$TUNSETLINK(r10, 0x400454cd, 0x30a) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r5, &(0x7f0000001080)=ANY=[], 0x0) r13 = socket(0x11, 0x800000003, 0x0) bind(r13, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r13, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r14, 0x0, r14) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001000)='pids.events\x00', 0x275a, 0x0) ptrace(0x10, r7) wait4(r7, 0x0, 0x2, 0x0) 02:47:07 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000001c0)={0x3f, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x88) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000280)="bab99ded3b979b8464252bd28cb00682dc935b4a71fe8ecdb6b43f9d5fc2d26b39bcc2f385e054b9ae9472c35ac76d14caca31b6aae6606cfcc80014548cdc200e3e800846fd2aceac53f7ea6bcd955337a365aa6d7f755312ef447cf5714c37ec5fc8670a5710667bbc0ee89c111fc22531f98241e15d7c0c06168fe931771825eec0de3c38779159c59c4b213d056768ec32e222c49234fb9e263d1d17403d", &(0x7f0000000100)=""/31, 0x4}, 0x20) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@flat=@weak_binder, @fda}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) ioctl$ASHMEM_SET_NAME(r4, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PIO_CMAP(r5, 0x4b71, &(0x7f0000000140)={0x64, 0x7, 0xffffffff, 0x1, 0xf5f, 0x80000000}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) faccessat(r3, &(0x7f0000000100)='./file0\x00', 0x20, 0x400) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a627700000000000000000000000000000000000000008561646600000000000000000000000000000000000000000000000000000000852a627300"/80], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000018000000000000003800000000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) [ 523.154931] binder: undelivered TRANSACTION_ERROR: 29201 [ 523.201470] binder: 22497:22499 got transaction with invalid offset (-1136567704429657088, min 0 max 80) or object. [ 523.201499] binder: 22497:22499 transaction failed 29201/-22, size 80-24 line 3199 [ 523.201655] binder: undelivered TRANSACTION_ERROR: 29201 [ 523.208490] binder: 22497:22502 got transaction with invalid offset (-1136567704429657088, min 0 max 80) or object. [ 523.208521] binder: 22497:22502 transaction failed 29201/-22, size 80-24 line 3199 [ 523.208839] binder: undelivered TRANSACTION_ERROR: 29201 [ 523.386153] binder: 22507:22522 got transaction with invalid parent offset or type [ 523.386276] binder: 22507:22522 transaction failed 29201/-22, size 80-24 line 3259 02:47:08 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r1, 0x40049409, 0xffffffffffffffff) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/access\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x6, 0x0, 0x39}, @fda, @fd={0x66642a85, 0x0, r3}}, &(0x7f00000000c0)={0x0, 0x20, 0x40}}, 0x440}], 0x0, 0x0, 0x0}) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000100)="bf4b916be7180decedcab7553052a991309dae445484506da4cabb62e49ce1386dd9e21719494e28e1077bbfa29967314c8ec112aec7238a0b178b4fea63cbb66ec08c182b4908ab8f54e9672121f8fac372af91fe9ebe818a70a7a0d3ba428e9fcbc700fc3934d8f18277c9aa20555bc63e27622466c37a1c82", 0x7a) 02:47:08 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000001c0)={0x3f, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x88) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000280)="bab99ded3b979b8464252bd28cb00682dc935b4a71fe8ecdb6b43f9d5fc2d26b39bcc2f385e054b9ae9472c35ac76d14caca31b6aae6606cfcc80014548cdc200e3e800846fd2aceac53f7ea6bcd955337a365aa6d7f755312ef447cf5714c37ec5fc8670a5710667bbc0ee89c111fc22531f98241e15d7c0c06168fe931771825eec0de3c38779159c59c4b213d056768ec32e222c49234fb9e263d1d17403d", &(0x7f0000000100)=""/31, 0x4}, 0x20) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@flat=@weak_binder, @fda}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) ioctl$ASHMEM_SET_NAME(r4, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) 02:47:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/context\x00', 0x2, 0x0) r2 = socket$inet6(0x10, 0x8000000100000003, 0x0) r3 = dup2(r0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) ioctl$ASHMEM_SET_NAME(r4, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ftruncate(r8, 0x78409b8b000) r9 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$BLKROSET(r9, 0x125d, &(0x7f00000001c0)=0x7fffffff) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = fcntl$dupfd(r10, 0x0, r10) ioctl$sock_inet6_SIOCADDRT(r11, 0x890b, &(0x7f0000000000)={@ipv4={[], [], @local}, @mcast2, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21c00082, r7}) connect$inet6(r11, &(0x7f0000000080)={0xa, 0x4e22, 0x119, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, 0x1c) 02:47:08 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00'}) r1 = socket(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[{0x8952, 0x59, 0x2f, 0x3}, {0x7, 0x4, 0x0, 0xe55}, {0xea8, 0x1, 0x8, 0x10000}, {0x4, 0x4, 0x1, 0xc22}, {0x4, 0x3, 0x6, 0x5c}, {0x6, 0x5, 0x3e, 0x8}]}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000001400210109000000000000000a000000", @ANYRES32=r4, @ANYBLOB="0800080000f2000014000200000000000000000000dc2ab890adc691eb248ca206ba00ff7f0000011400010000f700000000003e864c87761dbace32fb32bcaa5e02ae1dbd0a5d011400060000001000"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 02:47:08 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x49) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f00000001c0)={0x0, {0x2, 0x4e24, @loopback}, {0x2, 0x4e24, @empty}, {0x2, 0x4e20, @loopback}, 0xa0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x6, 0x400}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@flat=@weak_binder, @fda}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:47:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcf") ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x101, 0x0, 0x1, 0xffffffffffffff9c}) creat(&(0x7f0000000180)='\x00', 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x100, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f00000001c0)={0x7, 0x21, 0x2}, 0x7) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000100)={'NETMAP\x00'}, &(0x7f0000000500)=0x1e) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x30, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @vti={{0x8, 0x1, 'vti6'}, {0x26a}}}]}, 0x30}}, 0x0) open(&(0x7f0000000440)='./file0\x00', 0x400, 0x4) socket$packet(0x11, 0x0, 0x300) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0x100000028) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001340)=ANY=[@ANYBLOB="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"/2568], 0xa00) ioctl$void(0xffffffffffffffff, 0x0) setns(r4, 0x0) mount(&(0x7f0000000ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x4d2, 0x33}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r6, &(0x7f0000002000)=[{{&(0x7f0000000740)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x40001c0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000000000000a004e2000000003fe8000000000000000000000000000bb020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000010000000a004e2300000000fe8000000000000000000000000000aa26000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a6ead400"/272], 0x110) iopl(0x0) pread64(r4, &(0x7f0000000480)=""/104, 0x68, 0x0) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) [ 523.618521] binder: undelivered TRANSACTION_ERROR: 29201 [ 523.691634] binder: undelivered TRANSACTION_ERROR: 29201 [ 523.697262] binder: BINDER_SET_CONTEXT_MGR already set [ 523.697272] binder: 22535:22541 ioctl 40046207 0 returned -16 [ 523.704666] binder_alloc: 22535: binder_alloc_buf, no vma [ 523.704685] binder: 22535:22537 transaction failed 29189/-3, size 88-24 line 3136 [ 523.754119] binder: BINDER_SET_CONTEXT_MGR already set [ 523.754130] binder: 22554:22559 ioctl 40046207 0 returned -16 [ 523.755436] binder_alloc: 22535: binder_alloc_buf, no vma [ 523.755455] binder: 22554:22559 transaction failed 29189/-3, size 80-24 line 3136 [ 523.760970] binder: BINDER_SET_CONTEXT_MGR already set [ 523.760981] binder: 22554:22560 ioctl 40046207 0 returned -16 [ 523.772789] binder_alloc: 22535: binder_alloc_buf, no vma [ 523.772812] binder: 22554:22560 transaction failed 29189/-3, size 80-24 line 3136 [ 523.813619] binder: undelivered TRANSACTION_ERROR: 29189 [ 523.819481] binder: undelivered TRANSACTION_ERROR: 29189 [ 523.825355] binder: undelivered TRANSACTION_ERROR: 29189 [ 523.848763] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 523.859743] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 523.912346] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 524.090984] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 02:47:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r1 = gettid() lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000200)={'U-', 0x24b}, 0x28, 0x666056a88150d485) r2 = dup(r0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f00000000c0)={0x0, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @broadcast}}}, 0x108) chmod(&(0x7f0000000240)='./file0\x00', 0x20) ptrace$setopts(0x4206, r1, 0x0, 0x4) tkill(r1, 0x40) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 02:47:10 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) 02:47:10 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x600004) r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x2) keyctl$chown(0x4, r2, 0x0, r3) ioctl$TUNSETGROUP(r1, 0x400454ce, r3) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a627700000000000000000000000000000000000000008561646600000000000000000000000000000000000000000000000000000000852a627300"/80], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000018000000000000003800000000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 02:47:10 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) setns(r0, 0x2040000) fchdir(r2) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000800)={0x2, 0x6, {0x0, 0x39, 0x0, 0x1f, 0xb, 0x67, 0x2}}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/attr/exec\x00', 0x2, 0x0) r4 = open(&(0x7f0000000480)='./bus\x00', 0x141046, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00E8\xddV\x82li\x1d/y6\xa2\xea\xff7\xcaz\xb1\x04\xa5\x14[\x1d+5B\\q.\x11\x91Y\xe0\xcb\xc5.$\x13h\xac\x89\xca\x86\x11\x03\x1c\x9d\x06KB\x05,\x84>\x84i\x10\x96\xf1BC\xb31\x7f\x96\x7f\x82\"2\x00\x00\x00\x00\x00') socket(0x2, 0x2, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x101}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000080)=@v1={0x0, @aes256, 0x3}) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000300)=ANY=[]) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x3, 0x6}]}, 0x50}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYRES32], 0x1}, 0x1, 0x0, 0x0, 0x400c008}, 0x24000894) sched_setparam(0x0, &(0x7f0000000500)=0xfffd) stat(0x0, &(0x7f0000000580)) r7 = socket(0x2, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, 0x0, &(0x7f0000000100)) creat(&(0x7f0000000540)='./bus\x00', 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r9, 0x0, 0x0, 0x20000481, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r9, 0x0, r8, 0x0, 0x1000000000000003, 0x0) sendto$packet(r9, &(0x7f0000000300)='\x00', 0x1, 0x3ffffff, 0x0, 0x0) 02:47:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcf") ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x101, 0x0, 0x1, 0xffffffffffffff9c}) creat(&(0x7f0000000180)='\x00', 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x100, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f00000001c0)={0x7, 0x21, 0x2}, 0x7) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000100)={'NETMAP\x00'}, &(0x7f0000000500)=0x1e) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x30, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @vti={{0x8, 0x1, 'vti6'}, {0x26a}}}]}, 0x30}}, 0x0) open(&(0x7f0000000440)='./file0\x00', 0x400, 0x4) socket$packet(0x11, 0x0, 0x300) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0x100000028) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001340)=ANY=[@ANYBLOB="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"/2568], 0xa00) ioctl$void(0xffffffffffffffff, 0x0) setns(r4, 0x0) mount(&(0x7f0000000ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x4d2, 0x33}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r6, &(0x7f0000002000)=[{{&(0x7f0000000740)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x40001c0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000000000000a004e2000000003fe8000000000000000000000000000bb020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000010000000a004e2300000000fe8000000000000000000000000000aa26000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a6ead400"/272], 0x110) iopl(0x0) pread64(r4, &(0x7f0000000480)=""/104, 0x68, 0x0) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) 02:47:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcf") ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x101, 0x0, 0x1, 0xffffffffffffff9c}) creat(&(0x7f0000000180)='\x00', 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x100, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f00000001c0)={0x7, 0x21, 0x2}, 0x7) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000100)={'NETMAP\x00'}, &(0x7f0000000500)=0x1e) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x30, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @vti={{0x8, 0x1, 'vti6'}, {0x26a}}}]}, 0x30}}, 0x0) open(&(0x7f0000000440)='./file0\x00', 0x400, 0x4) socket$packet(0x11, 0x0, 0x300) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0x100000028) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001340)=ANY=[@ANYBLOB="0701010275010000c200000001800000f9020000ff0f00000000000000000000b83556951da66d0c9428e71b0600287a40abf444dada49208e8df6647233f89d1e4425efa2d1e513fea30e36fd8ce97b82a3a26c8d808cc8f4705a62ba3e56e8e6785846b526077fcb3dbba1eb05f535fb0e1d1de8ec08b1bab2f4e58d88673f3a517fced345d0c0f329b7a69a36c845ad0ab4246bdff19041677a864d3c9faab34a0a2cb78b87cdd0da480f77042e880feefa93d94a76de9f1ba6a96591fc3528c9093158d04223433b46241a7c6f1f23237e23d087c7bc4833f6b0203b9e66e2f2bf37a22d04ebc48ac1589249993666dc200d30fa9954b280407927496254000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018c634af23b9e3bd22670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f9ffffff00"/2568], 0xa00) ioctl$void(0xffffffffffffffff, 0x0) setns(r4, 0x0) mount(&(0x7f0000000ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x4d2, 0x33}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r6, &(0x7f0000002000)=[{{&(0x7f0000000740)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x40001c0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000000000000a004e2000000003fe8000000000000000000000000000bb020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000010000000a004e2300000000fe8000000000000000000000000000aa26000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a6ead400"/272], 0x110) iopl(0x0) pread64(r4, &(0x7f0000000480)=""/104, 0x68, 0x0) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) 02:47:10 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@flat=@weak_binder, @fda}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000100)) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x2) [ 526.124597] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 526.136444] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 526.197886] binder: 22585:22589 got transaction with invalid parent offset or type [ 526.205729] binder: 22585:22589 transaction failed 29201/-22, size 80-24 line 3259 02:47:11 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@flat=@weak_binder, @fda}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:47:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup(r0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f00000000c0)={0x0, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @broadcast}}}, 0x108) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80000, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@ipv4={[], [], @rand_addr=0x101}, 0x3, 0x2, 0x3, 0x4, 0xd65, 0x4}, 0x20) fcntl$setstatus(r0, 0x4, 0x80000000002c00) [ 526.298784] binder: undelivered TRANSACTION_ERROR: 29201 02:47:11 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) [ 526.350228] binder: 22598:22601 got transaction with invalid parent offset or type [ 526.401440] binder: 22598:22601 transaction failed 29201/-22, size 80-24 line 3259 02:47:11 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x8001) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a627700000000a8afea00000000000000000000000000852a6254000000000000f2ffffff000000000500000000000000396ef9ea76af74ddf19c01adf5bbff7b3034c3bbb352b09cce63a582f9352404c2f7"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000018ffff0000000000384000000000ffff"], @ANYBLOB="dfffff670b115356e804000000000000003f7faadc31ac4d4de423"], 0x0, 0x0, 0x0}) [ 526.444239] binder: undelivered TRANSACTION_ERROR: 29201 02:47:11 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), 0x5c, 0x0, &(0x7f00000001c0)="f93f7adca2d077c0f965a5f04569ebaa7489ec1dd04b0e46ea0c0cb5add37116c8ef4750b57128e8e38cd07facc45705f04ffda0aed9c85dd0b2fa367a928501629072c79485e013b12b59b0c34334b187d7222759dd5035b873eeff"}) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@flat=@weak_binder, @fda}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:47:11 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) 02:47:11 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@flat=@weak_binder, @fda}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000100)) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x2) 02:47:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@sack_perm, @window={0x3, 0x6bca, 0x3}, @mss={0x2, 0x4000000}, @timestamp, @timestamp, @sack_perm, @mss={0x2, 0x4}], 0x7) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000000), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) renameat(r2, &(0x7f0000000100)='./file0\x00', r2, &(0x7f0000000140)='./file0\x00') tkill(r1, 0x2e) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 02:47:11 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e24, 0x1, @mcast1, 0x2}, {0xa, 0x4e21, 0xff, @local, 0x80000000}, 0x3004, [0x8, 0xffff8d88, 0x8, 0x7fff, 0x0, 0x2, 0x7, 0x1]}, 0x5c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fbfffffd) [ 526.947566] binder: 22624:22626 got transaction with invalid parent offset or type [ 526.976738] binder: 22624:22626 transaction failed 29201/-22, size 80-24 line 3259 02:47:11 executing program 2: mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x2, 0x0) splice(r0, 0x0, r1, 0x0, 0x6, 0x0) r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) write$binfmt_elf64(r2, &(0x7f0000000d80)=ANY=[@ANYBLOB="7f454c4600004841010000000000000000000000000000000000000000000000400000000042000001f9ffffffffffffff0000000000003800000000000000000000000000000000000000000000000000000000000000000000008acb0000000008110000000000000000000000000000000000000000004ff68954565a51302f3b52591abec9f0059e03ed4b176c9f1fb53179b40581d2818663d7542c655bb1657baa3bd4b97a34af8e6dc7"], 0x78) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev, @in=@dev}}, {{@in=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000040)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="b7ffff07df25070020e3fb6bad3cbf01000047ae1e27c51047e2004e56fcb5e4722dbc"], 0x1c}}, 0x0) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000500)=0x5, 0x4) sendto$inet(r3, 0x0, 0x0, 0x20000801, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x5a) ioctl$BLKROSET(r6, 0x125d, &(0x7f0000000280)=0x76c1) r7 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x501000, 0x0) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f0000000340)={0x4, 0xfffa, 0x0, 0x40, 0xffff, 0x6}) 02:47:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCPKT(r8, 0x5420, &(0x7f0000000540)=0x6) r9 = syz_open_pts(r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCFLSH(r9, 0x540b, 0x2) [ 527.008246] binder: undelivered TRANSACTION_ERROR: 29201 02:47:11 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) 02:47:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup(r0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f00000000c0)={0x0, {{0x2, 0x4e21, @loopback}}, {{0x2, 0x0, @broadcast}}}, 0x108) ptrace$setopts(0x4206, r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000200)={0x9, 0x101, 0x3f, 0x1, 0x4, 0x2, 0xf8, 0x81, 0xf61, 0xb3}) r5 = accept$inet(0xffffffffffffffff, &(0x7f0000000800)={0x2, 0x0, @remote}, &(0x7f0000000840)=0x10) getsockname(r5, &(0x7f0000000880)=@isdn, &(0x7f0000000900)=0x80) tkill(r1, 0x40) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$sock_buf(r6, 0x1, 0x1c, &(0x7f00000002c0)=""/221, &(0x7f0000000040)=0xdd) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) listen(r8, 0x200) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 02:47:14 executing program 0: eventfd2(0x0, 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000580)=0x6) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r2 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r1, 0x80047013, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, 0x0) r7 = dup(r2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r9 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r9, 0x2007fff) sendfile(r7, r9, 0x0, 0x8000fffffffe) 02:47:14 executing program 2: mknod(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000100)='\"\xa8\xc8\x06_\x1cN\xcf:\xee\xf7\x91\xc4^LA\"\x05\xc3Punt_exec_t\x1as0\x80', 0x1, 0x0) rename(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./bus\x00') 02:47:14 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) removexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='trusted.overlay.upper\x00') r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@flat=@weak_binder, @fda}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:47:14 executing program 3: r0 = socket$inet(0x2, 0x2, 0x2000000088) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) epoll_wait(r3, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x1) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000080)={0x3b, @broadcast, 0x0, 0x4, 'none\x00'}, 0x2c) bind(r0, &(0x7f0000e79ff0)=@in={0x2, 0x4e20}, 0x10) recvmsg(r0, &(0x7f00000005c0)={0x0, 0xfffffffffffffeda, &(0x7f0000000080), 0x10d}, 0x0) sendto$inet(r0, &(0x7f0000000000)="9ba72b3db7ec018900ca721a20582f12e4807da20b99507a007f28916cf600000000000040000d724b75cc0600000005cfb28e44f4775eca053cfd714372c22ea62162339d", 0x45, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) 02:47:14 executing program 4: writev(0xffffffffffffffff, &(0x7f0000000000), 0x250) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r0) sendmsg$sock(r0, &(0x7f00000002c0)={&(0x7f0000000000)=@isdn={0x22, 0x68, 0x6, 0x6, 0x29}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="30c34af6d031f7923b78d542b06cf90862009d5e3f6ace2658af018c49b57d90dab2de8f645fc2851a4087166020c371c0a0917587e60f917845a0b2de1a6a180fcfc93b0a89", 0x46}, {&(0x7f0000000100)="635557115af485386a40d8ce52d14e097c6e83af3b64ab729fb49cc3d213483ff2f29a81fcb10812b96dce9ec51b5bf8c831807ee572cf9f55b64d33f83a2e7ad7a4ff7441", 0x45}, {&(0x7f0000000180)="e67987f48e58e36f59b1903f0a77de9cee126b978283ac6c4f8f906193b608a514c7", 0x22}, {&(0x7f00000001c0)="5cc4b435d8ad6b2f041bd2e959b2a95c341e3b7478202ce8fdb5bcbc9bdedf0b1e35a2a3f5cb0f6176b01b77873a99ca2e2c2d487ab4cffff9fb15fadd411d6a5553877798f72796e3e047c4b9c1df77d6ca54b1f6e12f2f22d249e292c81bb96b83b663f5bf73277143648c32e2939c80df16f3ad08b3bbf295b984621bd5d2a382f7d1b81e3c3f25673c4ad923489782d310a35f57a819d08316ad3d1bdc9ad1871e73cbf3b05a1fd6c93bf357a6ea9feab73d199b02fba3e6a16438e8ef", 0xbf}], 0x93}, 0x28001) 02:47:14 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x20}, 0x20}}, 0x0) 02:47:14 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x2001) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "359662a33b6f60ee6ae1a4e81ec922f4c44b8afa6c85304819acd17209bafe8a5bc9e00cb2798144a253174369853d93af5a2de0c6cf14d2dae3b0f6c01c72ac", "1c6246a8aaaa1671556d0e8483691160ea4593141de6701eab0430bcf90dca49503411894f4a1299a3b4d8e48af684cb8ef544550af07ed900b1abf0e3ac1885", "195a86dc23e131f34edf9261304205ff71b295d9f0bb1056d78190011ba94177"}) [ 529.375104] binder: 22664:22670 got transaction with invalid parent offset or type [ 529.385418] audit: type=1401 audit(1574736434.183:143): op=setxattr invalid_context=22 02:47:14 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000140)=0xd96, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r1, r2, &(0x7f00000000c0), 0x10001) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0), 0x0, 0xc, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x90080, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000100)={{}, 0x12, 0x1}, 0x18) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)='bic\x00', 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) connect$inet(r3, 0x0, 0x0) writev(r3, &(0x7f0000000740)=[{&(0x7f0000000400)}, {&(0x7f00000004c0)="13c9a3949dd0f3efe8f2965e91a58407d75fcd334196055d39b2ae70073e697fc32b90344e4c2c1f46abdf6c7786", 0x2e}, {&(0x7f0000000540)="7e258bdad4ee0be4fb37906e874ed2440aa14da5d9fef7c8b0a0c2b57166789b6a8d2d43312cf02c4b11ae311a6d27cb786c2a5d17f065fe103d4464c0cc97501ff2748e842cd36740c694810effa66536255818a2c606a90d59905fd72734d042580b36bfa7713a9152f2ba06dd6dd241092a63c90b5459e64ca7ae24df965c7630bd9be733db82665a0956a51da42f306be70d52ace835f3cd3d5f499274d2e120f6c88811873580a4405b780f07", 0xaf}, {&(0x7f0000000600)="7ecef7e7307a6beb4cfb2cc1f3dc1f58ac544d556a46aea3a7262a7313986d65d7366ac4370d1b9be8a26a29ad541073d85aacef2d927d396cc6ff3fc74512b948e7f2e530319503f128594c2361ed43cb1312fa08e53e4b", 0x58}, {&(0x7f0000000680)="3e64e07bbbea7a4463ed6e79a2b5020bdae6c18ce121c89a34ea64950e164961e6e24e827ca9a4d5cdaf8339bb186725b7c64a6512e6d0b9268d2d840604498007f2bb026dd3ac312317a5be3bb0984a2d3720161af3f7f602b35d5f6bac397ffa2e012848ce188f6222ca17673523ff278099bce295a30e2f8f2969bdda6b", 0x7f}], 0x5) epoll_create1(0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x422000a7b, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) r7 = gettid() ptrace$setopts(0x4206, r7, 0x0, 0x0) tkill(0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, 0x0) ptrace$cont(0x7, r7, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xc0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0xfff}, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440)={r8}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002cc0)={r7, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000002c80)='_em0/\x00'}, 0x30) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002d00)={0x0, 0x0}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYRES32=0xee01, @ANYBLOB="e62725d97524ceb85863b7c4f8540fe0b4f0832f5bc5d4fc31300b88cfc1b239730a97060ab50a5542a78d6b51e07e8141e658baf63577a3e183901d010abded2004fb4e1385729efed97f9c33fe", @ANYBLOB, @ANYBLOB="08000200d29cfee83d23a475b03e384fc393c1f8b1ed0ec0f93400000002e3bfbc927114fa14b49d837a9965cf1cf244a69d0fd6fcdce6084e654e5e4cc392d1b25c0da0bcc52e", @ANYRES32, @ANYRESDEC], 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r12 = getegid() chown(&(0x7f0000000280)='./file0\x00', 0x0, r12) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0, 0x0}, &(0x7f00000006c0)=0xc) r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00') r15 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') renameat2(r14, &(0x7f0000000000)='./file0\x00', r15, &(0x7f0000000040)='./file0\x00', 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) getgroups(0x5, &(0x7f0000000080)=[0xee00, 0x0, r11, 0x0, r13]) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) r16 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r16, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r17 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r17, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) r18 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r19 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r19, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r20 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002e80)={&(0x7f00000002c0)=@abs={0x1}, 0x6e, &(0x7f0000002bc0)=[{0x0}, {0x0}, {&(0x7f0000000840)="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", 0x997}, {&(0x7f0000000180)="9567236915765eaa2381ab25637dde6b418306", 0x13}, {&(0x7f0000001840)="a09ff92ff62d9780cbf3d47dee344b5163af4a41db8310ba69cf39ff4af748305471a230b5413e58c43d177e8f1c8337853a6fab92b3bf3c4e81f73bba3c66de4ff8c133c7f3e779fe107f6a93f6bdb408866ae3c177f26b91815b430d2c63c224376324988ee59adc247a96d633baa6833045a1ef5e714aa8c054f216b51d7dfac54d4698da07f860fd0a8fb6d2065666b6d37c192c0c30d01bcedb385173208e624e59556b1ca67c46676cbf43d841ab9a03ca707e10f0e02e0baa2aa82264a81157b9ec9565c27dc5d26ccd58c2b6b406e8c1046a27f8cc141fa9ab3e6c8f30fb696d5a", 0xe5}, {&(0x7f0000001940)="aedbd4127c932bc7b07fe7ace106f5757643f3b29ad8d5077be479b64f6d11e0b447768e4f861e722f550aae0f8e58b37ee014077174984ba06466893f4fdedc25beb9e1ab9400736c0f983401e7e6a34b236f15ca2177d6bc28dec954405560ca0b888a17b6a96dd63067aabdbd8c87089c4129b21efd526b0323e73879c2e694b7d33b8527e85b6b64418267009f654b2eebb61bddbcea43e7305d5c94073e8a3c152353118b850aaeb61a02f797fe2571e91bb2214b19a78b3de1d49884818ab501123ce45b72d511ee6317d5de085ba953", 0xd3}, {&(0x7f0000000240)="4a48e53ee414f888c29935cfde560e4f28535e", 0x13}, {&(0x7f0000001a40)="d8ddecfb8e8e03d9c70fde075a0162beafd73aa572c8d154d28c9ce49c993fd32e20e5ef4d64e4fab467206dd0e4e64ff0ae0b2bed7e9ecef41ab6f51c1c1470b6666b63b913cb29f0734b0da50233f7a8593cacd2f6a1eede6036cc8af355c53c86484064060f12de", 0x69}, {0x0}, {&(0x7f0000002ac0)="7c39ea675973bbabc6b1ec9b62db7ad3eac4f9b4b299dfa08fb69781058450cfeaace7d15f8221e11668c8a0236d8f43cba13231b07ba1cb23df52a7dc2174a1fe01912606875cc88cecbbf23ed457af24e5b399b611d8653d68c90e65eea00ad69f0d9e175b01905dcef4a0493c3a52a006aab341443708baafc4bbbed06f1b6070ed1d140ea2cb7b361448ba5ffaab84430f9a435ce3ffbdbeedfc88bab3", 0x9f}], 0xa, &(0x7f0000002ec0)=ANY=[@ANYBLOB="1c000000000000080100000002000000a1cb5bc7e6011d344994", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB, @ANYRES32, @ANYRES32=r16, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r17, @ANYRES32=r18, @ANYRES32=r0, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r3, @ANYRES32, @ANYRES32=r20], 0x6e, 0x20000000}, 0x8000) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 02:47:14 executing program 4: socket$key(0xf, 0x3, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600100001000130700000000fbdbdf25fe8000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x160}}, 0x0) 02:47:14 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @random="192bce5e2dfb", [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 529.386267] audit: type=1401 audit(1574736434.183:144): op=setxattr invalid_context=22 [ 529.452273] binder: 22664:22670 transaction failed 29201/-22, size 80-24 line 3259 02:47:14 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)="8c2fb074d782b99a4ebb28bd49ca9d8f70aca1f2e24e7dc4636db1607852800ad7239bfbb123065f680fcd8bd0da6e13b662424ccd67943bc81a1d56defee801abbb295542689614ad3cf075062ecc8f45aa7708f05b4a75cd21c51a0cdf5c1d22ec6c88b2f328c35d2284ce37375165fc7b892d92b8d60d65de6a11b376b8379dea0e24d9d54997f9b0c35fdbb691b6a85b1dd235877eaf2c6b56cdebc12feefd6c32891969cc07ec80aa29bcc95a7fa0866e97a784c0ac21edab15d06cfb51b0f47e5f4404000000", 0xc9}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/62, 0x3e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a40)=""/38, 0x26}, {&(0x7f0000000a80)=""/108, 0x6c}], 0x2}}], 0x2, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x5) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r4 = socket$inet6(0xa, 0x40000080806, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000340)={@local, @loopback, @empty, 0x1, 0x0, 0x0, 0x0, 0x70, 0x80240020, r3}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x2011, r5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x1c) [ 529.480208] binder: undelivered TRANSACTION_ERROR: 29201 02:47:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r5, 0x0) ioctl$ASHMEM_SET_NAME(r5, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff}) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x422000a7b, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) r7 = gettid() ptrace$setopts(0x4206, r7, 0x0, 0x0) tkill(0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, 0x0) ptrace$cont(0x7, r7, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xc0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0xfff}, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440)={r8}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002cc0)={r7, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000002c80)='_em0/\x00'}, 0x30) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002d00)={0x0, 0x0}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYRES32=0xee01, @ANYBLOB="e62725d97524ceb85863b7c4f8540fe0b4f0832f5bc5d4fc31300b88cfc1b239730a97060ab50a5542a78d6b51e07e8141e658baf63577a3e183901d010abded2004fb4e1385729efed97f9c33fe", @ANYBLOB, @ANYBLOB="08000200d29cfee83d23a475b03e384fc393c1f8b1ed0ec0f93400000002e3bfbc927114fa14b49d837a9965cf1cf244a69d0fd6fcdce6084e654e5e4cc392d1b25c0da0bcc52e", @ANYRES32, @ANYRESDEC], 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r12 = getegid() chown(&(0x7f0000000280)='./file0\x00', 0x0, r12) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0, 0x0}, &(0x7f00000006c0)=0xc) r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00') r15 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') renameat2(r14, &(0x7f0000000000)='./file0\x00', r15, &(0x7f0000000040)='./file0\x00', 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) getgroups(0x5, &(0x7f0000000080)=[0xee00, 0x0, r11, 0x0, r13]) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) r16 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r16, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r17 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r17, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) r18 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r19 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r19, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r20 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002e80)={&(0x7f00000002c0)=@abs={0x1}, 0x6e, &(0x7f0000002bc0)=[{0x0}, {0x0}, {&(0x7f0000000840)="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", 0x997}, {&(0x7f0000000180)="9567236915765eaa2381ab25637dde6b418306", 0x13}, {&(0x7f0000001840)="a09ff92ff62d9780cbf3d47dee344b5163af4a41db8310ba69cf39ff4af748305471a230b5413e58c43d177e8f1c8337853a6fab92b3bf3c4e81f73bba3c66de4ff8c133c7f3e779fe107f6a93f6bdb408866ae3c177f26b91815b430d2c63c224376324988ee59adc247a96d633baa6833045a1ef5e714aa8c054f216b51d7dfac54d4698da07f860fd0a8fb6d2065666b6d37c192c0c30d01bcedb385173208e624e59556b1ca67c46676cbf43d841ab9a03ca707e10f0e02e0baa2aa82264a81157b9ec9565c27dc5d26ccd58c2b6b406e8c1046a27f8cc141fa9ab3e6c8f30fb696d5a", 0xe5}, {&(0x7f0000001940)="aedbd4127c932bc7b07fe7ace106f5757643f3b29ad8d5077be479b64f6d11e0b447768e4f861e722f550aae0f8e58b37ee014077174984ba06466893f4fdedc25beb9e1ab9400736c0f983401e7e6a34b236f15ca2177d6bc28dec954405560ca0b888a17b6a96dd63067aabdbd8c87089c4129b21efd526b0323e73879c2e694b7d33b8527e85b6b64418267009f654b2eebb61bddbcea43e7305d5c94073e8a3c152353118b850aaeb61a02f797fe2571e91bb2214b19a78b3de1d49884818ab501123ce45b72d511ee6317d5de085ba953", 0xd3}, {&(0x7f0000000240)="4a48e53ee414f888c29935cfde560e4f28535e", 0x13}, {&(0x7f0000001a40)="d8ddecfb8e8e03d9c70fde075a0162beafd73aa572c8d154d28c9ce49c993fd32e20e5ef4d64e4fab467206dd0e4e64ff0ae0b2bed7e9ecef41ab6f51c1c1470b6666b63b913cb29f0734b0da50233f7a8593cacd2f6a1eede6036cc8af355c53c86484064060f12de", 0x69}, {0x0}, {&(0x7f0000002ac0)="7c39ea675973bbabc6b1ec9b62db7ad3eac4f9b4b299dfa08fb69781058450cfeaace7d15f8221e11668c8a0236d8f43cba13231b07ba1cb23df52a7dc2174a1fe01912606875cc88cecbbf23ed457af24e5b399b611d8653d68c90e65eea00ad69f0d9e175b01905dcef4a0493c3a52a006aab341443708baafc4bbbed06f1b6070ed1d140ea2cb7b361448ba5ffaab84430f9a435ce3ffbdbeedfc88bab3", 0x9f}], 0xa, &(0x7f0000002ec0)=ANY=[@ANYBLOB="1c000000000000080100000002000000a1cb5bc7e6011d344994", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB, @ANYRES32, @ANYRES32=r16, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r17, @ANYRES32=r18, @ANYRES32=r0, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r3, @ANYRES32, @ANYRES32=r20], 0x6e, 0x20000000}, 0x8000) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 02:47:17 executing program 0: eventfd2(0x0, 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000580)=0x6) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r2 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r1, 0x80047013, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, 0x0) r7 = dup(r2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r9 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r9, 0x2007fff) sendfile(r7, r9, 0x0, 0x8000fffffffe) 02:47:17 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140), 0xffffffaa}], 0x3}, 0x0) clone(0x800007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="13d50f34"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d59e49ecefedf29f150f48fa7ec5cab66b559969cd332a5eeff075656d6b7d21bf145e62166c6b31cfef16b080776ad79c7e8683ac61d859a6", @ANYBLOB="27fb1299e4fd3329137c"], 0x0, 0x43}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 02:47:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008000"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x4000) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000240)={0x8001, 0x4, 0x1}) r2 = gettid() r3 = dup(r0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f00000000c0)={0x0, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @broadcast}}}, 0x108) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x40) fcntl$setstatus(r0, 0x4, 0x80000000002c00) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) ioctl$ASHMEM_SET_NAME(r4, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x400, 0x4d, 0xbb, 0x9}, {0x2, 0x81, 0x0, 0x8068}, {0x3, 0x8b, 0x7f, 0x2}]}) [ 532.390327] binder_alloc: 22718: binder_alloc_buf size -1935725915575943064 failed, no address space [ 532.418404] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 532.432394] binder: 22718:22724 transaction failed 29201/-28, size 80-24 line 3136 02:47:17 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140), 0xffffffaa}], 0x3}, 0x0) clone(0x800007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="13d50f34"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d59e49ecefedf29f150f48fa7ec5cab66b559969cd332a5eeff075656d", @ANYBLOB="27fb1299e4fd3329137c495a519f5cbbc5b9c6fab5"], 0x0, 0x32}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 532.443676] binder: undelivered TRANSACTION_ERROR: 29201 [ 532.458130] binder_alloc: 22718: binder_alloc_buf size -1935725915575943064 failed, no address space [ 532.471541] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 532.483324] binder: 22718:22739 transaction failed 29201/-28, size 80-24 line 3136 02:47:17 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000100)={0x2, 'nr0\x00', 0x4}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = dup(r4) creat(&(0x7f0000000040)='./file0\x00', 0x124) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r5) prctl$PR_GET_FP_MODE(0x2e) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0x0) ioctl$ASHMEM_SET_NAME(r6, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)=@delsa={0x3c, 0x11, 0x1, 0x0, 0x0, {@in=@dev, 0x0, 0xa}, [@srcaddr={0x14}]}, 0x3c}, 0x8}, 0x0) 02:47:17 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a627700000000000000000000000000000000000000008561646600000000000000000000000000000000000000000000000000000000852a627300"/80], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000018000000000000003800000000000000"], @ANYBLOB="0000003a39193d82"], 0x0, 0x0, 0x0}) 02:47:17 executing program 3: r0 = getpgid(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000080)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000100), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f0000000240), 0x3d8) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) ptrace(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) [ 532.623510] binder_alloc: 22758: binder_alloc_buf size -9062059141622661016 failed, no address space [ 532.645250] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 02:47:17 executing program 0: eventfd2(0x0, 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000580)=0x6) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r2 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r1, 0x80047013, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, 0x0) r7 = dup(r2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r9 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r9, 0x2007fff) sendfile(r7, r9, 0x0, 0x8000fffffffe) [ 532.667040] binder: 22758:22760 transaction failed 29201/-28, size 80-24 line 3136 [ 532.704271] binder: undelivered TRANSACTION_ERROR: 29201 [ 532.717079] binder_alloc: 22758: binder_alloc_buf size -9062059141622661016 failed, no address space [ 532.739624] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 02:47:17 executing program 3: mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffff9, 0x0, 0x0, 0x0}, 0x40) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x20000200008e19, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 02:47:17 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x80000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@flat=@weak_binder, @fda}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 532.764157] binder: 22758:22768 transaction failed 29201/-28, size 80-24 line 3136 [ 532.779162] binder: undelivered TRANSACTION_ERROR: 29201 02:47:17 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00 \x00', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="4ef27f454c460000002f006c00000000000416004410050300000000f1449c08c3bce5990000000000000000004ebeed284c4529d864fad5"], 0x534) 02:47:17 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0xfffffffc, 0x2, 0x0, 0xfffffffff7fffffb, 0x4}, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) keyctl$get_keyring_id(0x0, 0x0, 0x0) socket(0x0, 0x803, 0xff) [ 532.811609] binder: 22776:22778 got transaction with invalid parent offset or type [ 532.821574] binder: 22776:22778 transaction failed 29201/-22, size 80-24 line 3259 [ 532.831443] binder: undelivered TRANSACTION_ERROR: 29201 [ 532.839306] binder: BINDER_SET_CONTEXT_MGR already set [ 532.844921] binder: 22776:22784 ioctl 40046207 0 returned -16 02:47:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@ipv4_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfc}}, 0x1c}}, 0x0) 02:47:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/134, 0x86}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x893f, 0x0, 0x0, 0x800e00519) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) read(r2, &(0x7f0000000080)=""/203, 0x100000070) shutdown(r1, 0x0) 02:47:20 executing program 0: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) 02:47:20 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$inet6(0xffffffffffffffff, &(0x7f000000a800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f00000025c0)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') 02:47:20 executing program 3: r0 = socket(0xa, 0x4000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x48f, &(0x7f0000000000)={0x11, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lblcr\x00'}, 0x2c) 02:47:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) shutdown(0xffffffffffffffff, 0x0) fchdir(r1) recvfrom$inet(r0, 0x0, 0xa4d, 0x2002, 0x0, 0x800e00515) shutdown(r0, 0x0) 02:47:20 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001400)=ANY=[@ANYBLOB="d3d2b93c38f19c0408cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="eabe9f303b222957eecbc624877c785255f910c28f5e87a64820546a1ebed56adb3b91e7f1ffd7e4ab569f8e39808e0b61a0bf7a301ffe8dac0773d9e5411f2b25f3fbc7cf94", @ANYRESOCT, @ANYRESHEX], 0x0, 0x6f}, 0x20) tkill(r4, 0x39) ptrace$setregs(0xffffffffffffffff, r4, 0x95, &(0x7f00000003c0)="7e050039bd1d0f6f3e023c96c21f4b63aa12fb54fb6deb4dfc4dc84e92f82137c58a34ec24a54388047630f4c645750be650b02a60723e7853af6d16a8e7720de5c0c4fe7166544803ba18f954dbfb467996959843") ptrace$cont(0x7, r4, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a627700000000000000000000000000000000000000008561646600000000000000000000000000000000000000000000000000000000852a627300"/80], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="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"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 02:47:20 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000002c0)={{0xffffffffffffffff, 0x3, 0x9, 0x2, 0x10b3}}) accept(0xffffffffffffffff, &(0x7f0000000100)=@caif=@dgm, &(0x7f00000001c0)=0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB="852a627700000000000000000000000000000000000000008561646600000000000000000000000000000000000000000000000000000000852a627300000000000000000000000000000000000000004820d55e505aea2c3c8a36cb9097d8dadffc7dfd2c015a802744f560d4e060aeb021bbafe0123a5eeb0dc407d7d6f4f7800ee5ed3c74e529c0a2f7ae2468feb2e9d8df793dce6583c62aed3dff85e270c2"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000018000000000000003800000000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) lsetxattr$trusted_overlay_origin(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='trusted.overlay.origin\x00', &(0x7f0000000280)='y\x00', 0x2, 0x3) 02:47:20 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x80000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@flat=@weak_binder, @fda}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:47:20 executing program 3: mlock(&(0x7f0000e06000/0x4000)=nil, 0x4000) mremap(&(0x7f0000e08000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000000c0)=""/233, &(0x7f0000000000)=0xe9) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x400032, 0xffffffffffffffff, 0x0) 02:47:20 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x2, 0x8de7d8f023d07bd7}, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x2, 0x8de7d8f023d06bd7}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x14) [ 535.492941] binder: 22813:22815 got transaction with invalid parent offset or type [ 535.510723] binder: 22813:22815 transaction failed 29201/-22, size 80-24 line 3259 [ 535.522204] binder: 22817:22822 got transaction with invalid parent offset or type 02:47:20 executing program 3: syz_open_procfs(0x0, &(0x7f0000000200)='net/fib_triestat\x00') eventfd2(0x0, 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x108800, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x9bb) 02:47:20 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r3, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqsrc(r6, 0x0, 0x28, &(0x7f0000000240)={@dev, @rand_addr, @initdev}, &(0x7f0000000200)=0xc) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@flat=@weak_binder, @fda}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 535.522293] binder: 22817:22822 transaction failed 29201/-22, size 80-24 line 3259 [ 535.522802] binder: undelivered TRANSACTION_ERROR: 29201 [ 535.581947] binder: undelivered TRANSACTION_ERROR: 29201 02:47:21 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000001c0)={'ve\x00', 0x810b}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r7, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_DISABLE(r7, 0x2401, 0x3f) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={@local, 0x0, r8}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="00000000000000000000000000000080"}, 0xffffffffffffff97) sendmmsg(r0, &(0x7f00000065c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)="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", 0x5ad}], 0x1}}], 0x4000000000000f9, 0x0) 02:47:21 executing program 4: perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffd6a) socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0) fchdir(r3) r4 = getuid() getresgid(&(0x7f0000003180), &(0x7f00000031c0)=0x0, &(0x7f0000003200)) fchown(r3, r4, r5) r6 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x58, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c400200000000000000000000000100000000000009000001000000000000000000000050170000000000001800000000000000e25957d1900b5e4230355e4c2ee20320a3886ea3f40dc52458761b8666ed31a46f5637c4a6a13d5d49737714bbedcb103923fc2d0a44c87cef47e92a559a7b4f5c515df1b09d20903c000000000000000000000000000055d6c078c5dc3ce39a64de94c5c8198c6e30c0f0f8264f86451f614cfcea181ffc69c6ec22914ef6a2c909ffc4c5", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB="852a687700100000020000000000000000000000000000008561646600000000010000000000000000000000000000001700000000000000852a62770100"/80], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000018000000000000003800000000000000"], @ANYBLOB='\vc\x00\x00'], 0xf4, 0x0, &(0x7f00000003c0)="2953b5e93655a9ebc8c2518753dbb5e7e7a486a3db479c8f88dc8b2a6afe0d621405663e86752bd7fa999bfa2ef33ad25e3bee428c058748649e0812cdde0b338a532b64dcd75080db10becb00254340b82718f527aaf4fc9381913df1693a4ddaa4602f5183e9dcecc34d6f3bd1589b446e2459b8a110e357eec37719d2833c6f617cc7dd65e20ed299b46cb9b54c7143ab98cad1c377a9a06bd8e7a44e279fd700c0a715c2bb47b385377b4067cdd8a33a095ec245d87283cc9fd8606b738169ed881ffb90469c5f8c1ad73ef5e49fb5b0f8574b7807e42e2a79f414baf13879a61058cfe6096b79512b332622c6c9d9e79d1a"}) keyctl$chown(0x4, r6, 0x0, r7) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000006c0)='/selinux/load\x00', 0x2, 0x0) write$P9_RGETATTR(r2, &(0x7f00000001c0)={0xa0, 0x19, 0x1, {0x2c80, {0x38, 0x2, 0x5}, 0xe28ae11d3a620e4d, r4, r7, 0x20, 0x7fffffff, 0x4, 0x9, 0x7, 0x200, 0x0, 0x0, 0x2d, 0x1, 0x5, 0x4, 0x0, 0x7, 0x8}}, 0xa0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, &(0x7f0000000080)='ip6tnl0\x00') r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = syz_open_dev$mice(&(0x7f0000000340)='/dev/input/mice\x00', 0x0, 0x40000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000380)={'vxcan1\x00', 0x0}) connect(r9, &(0x7f0000000640)=@hci={0x1f, r12}, 0x80) ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x4e23, @multicast1}, 0xa0, 0x0, 0x0, 0x0, 0xdf, &(0x7f0000000000)='netpci0\x00', 0x5, 0x7fffffff, 0x9}) 02:47:21 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000002c0)={{0xffffffffffffffff, 0x3, 0x9, 0x2, 0x10b3}}) accept(0xffffffffffffffff, &(0x7f0000000100)=@caif=@dgm, &(0x7f00000001c0)=0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB="852a627700000000000000000000000000000000000000008561646600000000000000000000000000000000000000000000000000000000852a627300000000000000000000000000000000000000004820d55e505aea2c3c8a36cb9097d8dadffc7dfd2c015a802744f560d4e060aeb021bbafe0123a5eeb0dc407d7d6f4f7800ee5ed3c74e529c0a2f7ae2468feb2e9d8df793dce6583c62aed3dff85e270c2"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000018000000000000003800000000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) lsetxattr$trusted_overlay_origin(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='trusted.overlay.origin\x00', &(0x7f0000000280)='y\x00', 0x2, 0x3) 02:47:21 executing program 0: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) 02:47:21 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a627700000000000000000000000000000000000000008561646600000000040000000000000000000000000000000000000000000000852a627300"/80], @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000018000000000000003800000000000000d90cf9b8e27c48838f2f3168b74e95d0f6799449341b269d5713d1c91cd7fa91544657f54eb1afce3f4eac1e3782386b06345f411e1f76b388a6fe62c5df5ff07410d3af3136ca19b9c4484861f75b60cecdfdbf8adec3dab0c6d16aea350aa75c1a22798bbe28de2480f571a15d6441726693341a11dd8558d0f86b04101176632bacecf216cf33578cb8381b2cd5dec816b346777d748db3d81dc74f3ddc7c156c84200000000000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 02:47:21 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000002c0)={{0xffffffffffffffff, 0x3, 0x9, 0x2, 0x10b3}}) accept(0xffffffffffffffff, &(0x7f0000000100)=@caif=@dgm, &(0x7f00000001c0)=0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB="852a627700000000000000000000000000000000000000008561646600000000000000000000000000000000000000000000000000000000852a627300000000000000000000000000000000000000004820d55e505aea2c3c8a36cb9097d8dadffc7dfd2c015a802744f560d4e060aeb021bbafe0123a5eeb0dc407d7d6f4f7800ee5ed3c74e529c0a2f7ae2468feb2e9d8df793dce6583c62aed3dff85e270c2"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000018000000000000003800000000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) lsetxattr$trusted_overlay_origin(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='trusted.overlay.origin\x00', &(0x7f0000000280)='y\x00', 0x2, 0x3) 02:47:21 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r2 = open(&(0x7f00000002c0)='./bus\x00', 0x40000141041, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockname$unix(r4, &(0x7f0000000100), &(0x7f00000001c0)=0x6e) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x323) r5 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8fff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r8, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r8, 0x0) ioctl$ASHMEM_SET_NAME(r8, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\xa7\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\x14^\xaa\xc8\xc3\xc8\xfb\x19\xbb\xb5\xcf+\xda\x1f\xa7}4\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFNETMASK(r10, 0x891c, &(0x7f00000000c0)={'vxcan1\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000000)={0x0, 0x41000000000004}) 02:47:21 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000040)={0x2, {{0xa, 0x4e20, 0x10000, @rand_addr="a1afe34e34442838d4c6983d5b85ce1c", 0x7}}}, 0x88) [ 536.239747] binder: 22845:22850 got transaction with invalid parent offset or type [ 536.250609] binder: 22846:22853 ioctl 6611 0 returned -22 [ 536.251177] binder_alloc: 22834: binder_alloc_buf, no vma [ 536.251196] binder: 22846:22853 transaction failed 29189/-3, size 80-24 line 3136 [ 536.251531] binder: undelivered TRANSACTION_ERROR: 29189 02:47:21 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) socketpair$unix(0x1, 0xc, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff}) dup(r5) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0x1) connect(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = memfd_create(&(0x7f0000000700)='net/arp\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pwritev(r9, &(0x7f0000000380)=[{&(0x7f0000000680)='d', 0x1}], 0x1, 0x4081806) sendfile(r7, r9, 0x0, 0x20020102000007) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r11, &(0x7f00000001c0), 0xfffffef3) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) clone(0x2502001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$FUSE_DIRENT(r11, &(0x7f00000003c0)=ANY=[@ANYBLOB="f1"], 0x1) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) vmsplice(r10, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_genetlink_get_family_id$tipc2(0x0) recvfrom$unix(r8, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930212) syz_open_procfs(0x0, 0x0) fcntl$setstatus(r7, 0x4, 0x2800) [ 536.258793] binder: 22846:22856 ioctl 6611 0 returned -22 [ 536.266400] binder: 22848:22852 got transaction with invalid parent offset or type [ 536.266436] binder: 22848:22852 transaction failed 29201/-22, size 80-24 line 3259 [ 536.267541] binder: undelivered TRANSACTION_ERROR: 29201 02:47:21 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653f0d89abf4d209bc876003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab35f4ad614fd33cebbc158bb2b03b5b2461179f5f90bba001b5080da6218a8106df2858ec973328e5a2c078a3fe3b52020203517e25ee74e82ba80a0fa881e689f7615baf78f08ea33bcb860d6a0b61193d4a1cb622431d42fee5e9153", 0xa6}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r1, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)='\x00'}, 0x30) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r3, 0x200400000004, &(0x7f0000000000)="0ba86c081928ce5cf6d5130e7ab188578d872635366c0c5852682db4b6ef5ed1a510fc1fad078c6168a12acadaf56d5397b58cbfdea43c047a6869285e962d5d77f6ac3b82ee8d97fe4dcfbe275526e9fe5c7c82f522d50628e4ee10c922d981798490a0222a0a622e4d7d6d699dcf6d52b3b4532d33c3e6dc2c8410f5c0b299a89a60") creat(&(0x7f0000000200)='./bus\x00', 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) 02:47:21 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000540)=@generic={0x3}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[0xe0ffffff, 0x3], [], @local}}, 0x1c) dup2(r2, r2) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x0, 0x0) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x0, 0x0) setpgid(r3, r4) pread64(r2, &(0x7f0000001940)=""/4096, 0x1000, 0x1200000000000000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x10040, 0x0) socket$inet6(0xa, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$EVIOCGSND(r7, 0x8040451a, &(0x7f00000001c0)=""/54) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)) r8 = socket$inet6(0xa, 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$FS_IOC_SETVERSION(r5, 0x40087602, &(0x7f0000000040)=0x80) dup2(r8, r8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000000301ffff808fc201000000000000101b0100062e9eab80cc3321f24b5548de49baafa3bf6009bcd3768d4929c15da78cfdde107fe5dfd1fe0d579716aec342db43f69da4c089cea582ff01000000000000affbad56b2b57191d13df8298ff323554dcaf63454e1a5355cb88b2dd2417c5d98941c1082d3f3099a5513f4bd651edca0afb4b43bcbafb291e992d7db98f5ebdd030708870ac5d37fa5feffffffff00000000a309d2a73c7bc5f78cd3df6f2960b9277e0372710f84a983e27dfb2a6d781c93e5ebd4995597edadcbce8877eba8772175e4000000004d58a8f3c3a6cdff46be6f50c6022a64b28f0b435023152d0787cf7872ced3e6d0a4b49e343a6d9b2ad96404bfd3b88be36679b5e7277202e6600d7a091424f74c75e1720fdcda95004a9e0100000000000000393137ffab41f994e8989a4237d163850ae6aeb829f2fa5624dab179bde5b2b1a94638b997c05b1ae1750f4b4271546b1d972e00ee30325087d73dd2d7bb67974cbe573cb33db6c63f0329beac75f98174f392dfa0fdd7781a35f93fd317c57056d4dd2e20814ef00adba9d432b60aea8dff47a06ff58179e35978c704306bddc3a18318458bf6372631abad07bccc69e99df12b2ae8e986b774bb060000002be04ac3f819eec4463c9fbc0f8642a7db4b83cdf2e015c6f638f049598d9fbf04beb63fa6ff942d9e959b5680c464b9b2ec833f0170338c38339aa97805069832c0edbd75f5b28e49361b0974c1d5cf8626108b520fadd41f2496c856046a5f4445b1674f7afb0039942eda41ce1b387f4733af8a45bc76c18d4b70a2b4dee692cd2660a50b6c34d390b5f839930fbf830b95e1cbf3361c7a57ad9eb4a2875c4bf8bbfee2528d28c9000091830c34538f0df08412716e410334365fe7af000000000000000000000000000000000000000000000000000000b5598c9511555cc21026ae1f36795ab37bb3c7e8366b44776dce36ec9ca8c2a26a030000d486d1cb0fdd94bcc52caca4e924463185769b1f42fc4e3bcd5eb0dd0b1faa9bb2b7"], 0x29d}}, 0x0) recvmmsg(r9, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 02:47:21 executing program 5: pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) r2 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x131802, 0x0) getpeername$packet(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000700)=0x14) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r6, &(0x7f0000000380)={0xa, 0x4e24, 0xfffffffc, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000740)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x35, r5}) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @ipv4={[], [], @multicast1}, 0x9}, 0x1c, 0x0}}], 0x1, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000001000050700000500000065fc2ce332ac7348574d1d9605f248f4dd84dcfbd3dbc9be0735750f2692b7233688a5482f230877f2db1962fa3bb15d69e2dc2dc47a0d6a2e8561fd7423faa7c43c112ca89079ea55665a0d89976f8d37aa3a5437d8de5eae9682d03439689294ae0f30e6ad644608aa1cc96f0a1e870fb5a384aef29a2affb77c62bb77551aea3c227411336dc0d5a3d6fd328d560cc8414b886a7556f3ea0320f2bbd0d415c2d66b9b09daa4814df3b7060025cd21f41acfbc534dd38ab18f77883200000000000000", @ANYRES32=0x0, @ANYPTR64=&(0x7f0000000d00)=ANY=[@ANYRESOCT=r7, @ANYRESOCT, @ANYRESOCT, @ANYRES16, @ANYPTR64, @ANYRES64=0x0], @ANYRES32=r9], 0x4}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan1\x00', r9}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000080)={@remote, 0x62, r9}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, 0x0, 0x8000fffffffe) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) r10 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGNAME(r10, 0x80404506, &(0x7f0000001800)=""/151) syz_genetlink_get_family_id$ipvs(&(0x7f0000001380)='IPVS\x00') r11 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x2000000000000, 0x1e) sendmsg$IPVS_CMD_NEW_SERVICE(r11, &(0x7f0000001440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x26009020}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x200080d0}, 0x20004800) sendto(r10, 0x0, 0x0, 0x4000000, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x80000, 0x0) pipe(0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) close(r12) splice(0xffffffffffffffff, 0x0, r12, 0x0, 0x2, 0x0) [ 536.349115] binder: 22845:22850 transaction failed 29201/-22, size 80-24 line 3259 02:47:21 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000180)) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50x0}) capget(&(0x7f0000000200)={0x3e61e27e883c4fdf, r3}, &(0x7f0000000240)={0x7, 0x5, 0xc5, 0x9, 0x7fff, 0x4}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x5, 0x0) write(r4, &(0x7f0000000100)="e1", 0xfffffff7) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/status\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000005c0)={0x6, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0863104002000000000000000500009fa5f34e3da43100000000000f630c400203000000000000000000009961f8f5e90dec0514482541f33bd18019f6630e8b2a165262559e975c9c53a5e40d04874bb0cf1605c940b84a919f1689be370fb8f8943ec431c3bce1d3b1a5bbb3afe8665c13c0ac3153fbb18a7db1db35e351164224bbcc47357770ae5ca2d3663923bee61febf1b9c195a76ce74e8557bbd27be9dac037848ca2d5d72f3d446b6e954352cd373a66a15dc8d55b9afc5c898934ebae066a7d03cb66a1b8ab26f56e4a234cd4101f979383"], 0xce, 0x0, &(0x7f00000004c0)="646d2bd7bd4d7bf7d6a9222be64d4848a0f84892b2180e0003030bfa42b850f5523d3c6cc385e8966126b827c15b0a6aff014e1bfe4af015738108f3687375be624da19745b93bac9820289f1af3daf8fa65bcd5fc87f90d4cf521393663e93fb05ee2e14b309c525bfe31f3970098ac888bc10cdf1bcb06973319aa7d51da9cb7c5b6428a59e539854fa6f17eff3786e020fedf8d4de65b4c64b90b6ecc146b33f21a1ab3b18177b4abfbb92dd24406ac2f0021f2820cdf9155d00b12f3cadb14c16a4824eb9a56c5f702d389b2"}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f00000000c0)={{0x2, 0x0, @reserved="b50516a5d712bece564226b4bc0af0a08024dd467359b7399b5db33b435ee426"}}) dup2(r0, r4) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 02:47:21 executing program 0: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) [ 536.404601] binder: BINDER_SET_CONTEXT_MGR already set [ 536.410298] binder: undelivered TRANSACTION_ERROR: 29201 [ 536.430142] binder: 22864:22870 ioctl 40046207 0 returned -16 02:47:21 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000000c0)="3c4affc55e17f2cd39e80bb7b8316e6d00e93aad905c024b52d31cf035d8aed899e60e84b3e530cea496c4fa09b0cb713694fcb8b8a4136d6e42f56de8e79818c9c264b4199f29edc9f2c694025058706105b00a9158115d6b978d529e07a3d930ea58ab4863dc929fbe2f53ccf563bbefda89423ab0052e08ce1188229b7de8e17fe8b796404286f6c22380deb036cc351ce20879f979fba049d675cd55fc", &(0x7f0000000300)="8adc829412f6f3ef49f9713c08fdf1e769af952a1c9cadfbb4121f9039ab622903a377824d57d84b511a0e2bf83b78d9fda02d3e7c7cbe6a5a44fa316385b8480f5054a5c28f0bdd546eb3c922f7e7d18c3fffce57fa5e05b8b32293451e3980de9b8171fa7ec783eaa67767841da9deff05f09dc58ed9a0de1ab6c0de788174fa21ca76c2e36d9b6a0be6a70c9e048bb1af5babb08731ee2f97523b959f0a8b573221896a15fd16462a465e59f3c1945162eadc9f594dc8b5cb54d0e269a0c8ee4f50214b62436b2dbfd834c5f379603c54a68bdecdc99316ddb24f56a855111d116f53bd96f89be6572ddf35d1c826", 0x9}, 0x20) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r4 = getpid() fcntl$lock(r3, 0x26, &(0x7f0000000180)={0x0, 0x6, 0x6, 0x80000001, r4}) vmsplice(r1, &(0x7f0000000280)=[{&(0x7f0000001440)="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", 0xbc1}], 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) connect$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 536.581216] audit: type=1400 audit(1574736441.383:145): avc: denied { read } for pid=22873 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 02:47:21 executing program 4: r0 = socket(0x200000000000011, 0x3, 0x0) bind$packet(r0, &(0x7f0000000240)={0x11, 0x4}, 0x14) setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) r1 = socket(0x200000000000011, 0x3, 0x0) bind$packet(r1, &(0x7f0000000240)={0x11, 0x4}, 0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = socket(0x200000100000011, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) keyctl$session_to_parent(0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x70, 0x3, 0x3, 0x47, 0x4, 0x0, 0x6, 0x80002, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x2, @perf_config_ext={0xe5c}, 0x5b517e5aafd00e73, 0x7, 0xec01, 0xde7b318eb44dd908, 0x9, 0x4, 0x4}, r10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x148, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r11, @ANYBLOB="00000000000000000e0012000000010073737400000002002c0208001900000000000200fe8000000000000000000000000000bb00000900290000000000020000000000020000000000000000003b7a8bd9d9c643a80000"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r11}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @dev}]}, 0x28}}, 0x0) bind$packet(r5, &(0x7f0000000100)={0x11, 0x19, r11, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000040)=r11) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$packet_int(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) dup2(r0, r1) [ 536.640297] audit: type=1400 audit(1574736441.443:146): avc: denied { net_admin } for pid=2106 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 536.652661] audit: type=1400 audit(1574736441.453:147): avc: denied { read } for pid=22864 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 02:47:22 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) [ 536.661718] audit: type=1400 audit(1574736441.463:148): avc: denied { net_admin } for pid=2106 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 02:47:22 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@flat=@weak_binder, @fda}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0x0, 0x3, 0x8}, 0xc) r3 = socket(0x200000100000011, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x148, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r7, @ANYBLOB="00000000000000000e0012000000010073737400000002002c0208001900000000000200fe8000000000000000000000000000bb00000900290000000000020000000000020000000000000000003b7a8bd9d9c643a80000"], 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @dev}]}, 0x28}}, 0x0) bind$packet(r3, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @random="962c85e043d8"}, 0xc) r8 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x20a02, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0x3, &(0x7f0000000300)=@raw=[@call={0x85, 0x0, 0x0, 0x61}, @map_val={0x18, 0x8, 0x2, 0x0, r2}], &(0x7f00000003c0)='GPL\x00', 0x0, 0x97, &(0x7f0000000400)=""/151, 0x40f00, 0x1, [], r7, 0x11, r8, 0x8, &(0x7f0000000500)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x3, 0xcde6, 0x3}, 0x10}, 0x70) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x149480, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r9, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x14}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x10) [ 536.696964] audit: type=1400 audit(1574736441.493:149): avc: denied { net_admin } for pid=2106 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 02:47:22 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000180)=@req3={0x6, 0xbb, 0xf63, 0x3d, 0x8, 0x0, 0x3}, 0x1c) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r4, 0x12081ff) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r7, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r7, 0x0) ioctl$ASHMEM_SET_NAME(r7, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TCGETS2(r6, 0x802c542a, &(0x7f0000000000)) [ 536.748285] audit: type=1400 audit(1574736441.553:151): avc: denied { net_admin } for pid=22885 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 536.770181] audit: type=1400 audit(1574736441.573:152): avc: denied { write } for pid=22874 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 536.845036] audit: type=1400 audit(1574736441.643:153): avc: denied { dac_override } for pid=22874 comm="syz-executor.5" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 536.846348] audit: type=1400 audit(1574736441.643:154): avc: denied { net_raw } for pid=22885 comm="syz-executor.0" capability=13 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 02:47:22 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) symlinkat(&(0x7f0000000100)='./file0\x00', r1, &(0x7f00000001c0)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="ee820ec73664abdb8a43274d3a5a5e377e2a6b23d48063ab8a1feb5ac441bf6621264833d56633766c78db25ae140dd136e7fbb5b35139d62abd00951884329544015c66da810c8596d8b7eb3202f525ecc9d7c50b8372bca72a4e54f454a7e87ff099fd179ad7b73118e9ebed0c29b5cf3454572e36b2864da9fad7f6d405958fbb84fba86f8d170fc4a2eb010c3ec960b4a2fd95"], 0x0, 0x0, 0x0}) [ 537.164568] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 537.164576] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. [ 537.197511] binder: BINDER_SET_CONTEXT_MGR already set 02:47:23 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) [ 537.197529] binder: 22864:22904 ioctl 40046207 0 returned -16 [ 537.471549] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 537.471555] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. [ 537.811059] binder_alloc: 22834: binder_alloc_buf, no vma [ 537.811089] binder: 22919:22921 transaction failed 29189/-3, size 80-24 line 3136 [ 537.862006] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 537.862014] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 537.926220] binder: undelivered TRANSACTION_ERROR: 29189 [ 537.971818] binder: BINDER_SET_CONTEXT_MGR already set [ 537.971828] binder: 22919:22922 ioctl 40046207 0 returned -16 [ 538.027943] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 538.027952] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 538.578222] binder: BINDER_SET_CONTEXT_MGR already set [ 538.578233] binder: 22935:22936 ioctl 40046207 0 returned -16 02:47:23 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) llistxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/46, 0x2e) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r5, 0x0) ioctl$ASHMEM_SET_NAME(r5, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20020110}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)={0x250, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x59ec62dc}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER={0xac, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7ff, @mcast2}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x2, @local, 0x6}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @rand_addr=0x8}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8001, @dev={0xfe, 0x80, [], 0x18}}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'teql0\x00'}}]}, @TIPC_NLA_LINK={0x90, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}]}, @TIPC_NLA_LINK_NAME={0xfffffffffffffd7c, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd8}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa9}]}, @TIPC_NLA_NODE={0x3c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x28, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xa}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80}]}, @TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa04}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x54}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x8000}, 0x2) r4 = accept$packet(r3, 0x0, &(0x7f0000000440)) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r5, 0x0) ioctl$ASHMEM_SET_NAME(r5, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff}) r2 = dup(r1) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x22d) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 539.190542] binder: BINDER_SET_CONTEXT_MGR already set 02:47:24 executing program 4: timer_create(0x0, &(0x7f0000000100)={0x0, 0x10}, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r4 = gettid() recvmmsg(r3, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000003b00), 0x0, &(0x7f0000000180)=""/106, 0x28}}], 0x400000000000116, 0x0, &(0x7f0000000000)={0x77359400}) write$P9_RRENAMEAT(r3, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) dup3(r0, r3, 0x0) tkill(r4, 0x1004000000013) 02:47:24 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) [ 539.211478] binder: 22944:22948 ioctl 40046207 0 returned -16 [ 539.249140] binder: BINDER_SET_CONTEXT_MGR already set [ 539.254504] binder: 22944:22950 ioctl 40046207 0 returned -16 [ 539.257694] IPv6: NLM_F_REPLACE set, but no existing node found! 02:47:24 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@flat=@weak_binder, @fda}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KDGKBLED(r4, 0x4b64, &(0x7f00000001c0)) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f0000000140)) [ 539.372090] IPv6: NLM_F_REPLACE set, but no existing node found! 02:47:24 executing program 3: r0 = socket(0x200000000000011, 0x1, 0x1f) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip6tnl0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) ioctl$ASHMEM_SET_NAME(r4, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff}, 0x800) splice(r4, &(0x7f0000000180)=0x9, r5, &(0x7f0000000200)=0x43, 0xffffffff80000000, 0x4) r6 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0xe00000, 0x0) ioctl$PPPIOCSACTIVE(r6, 0x40107446, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[{0xe6, 0x0, 0x3, 0x3}, {0x5, 0x3, 0x9, 0x4}, {0x9, 0x5, 0x0, 0x4e9}, {0x9201, 0xff, 0x81, 0x32}, {0xa6f, 0x5, 0x20, 0x69ea8505}, {0x9, 0x1, 0x9, 0x3}]}) ioctl$TIOCNXCL(r3, 0x540d) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg$inet(r0, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="96c6322ea684879088175969ec15e10d40e4719016cbc15a36a88c6c843e12b1f5cb6a73613ceec274", 0x33}], 0x1}}], 0x40001c0, 0x0) 02:47:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000000400)='./file0\x00', 0x14) ioctl$TIOCLINUX6(r2, 0x541c, &(0x7f0000000440)={0x6, 0x71}) r3 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x80002, 0x0) sendmsg(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000018007f5300fe01b2a4a280930a600000ffa84308910000003900140003000b0001f3da1a51726ca2c407b5950000000000156f757284366a660006000000000000dc1338d54400009b84136ef75afb83de", 0x55}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000640)) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_SERVICE(r11, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xf0, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x2a}}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1f}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x80}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf8000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$EVIOCGPHYS(r9, 0x80404507, &(0x7f0000000300)=""/225) ioctl$ASHMEM_SET_SIZE(r7, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r7, 0x0) ioctl$ASHMEM_SET_NAME(r7, 0x40087708, &(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$TCSETSW(r10, 0x5403, &(0x7f0000000440)={0x9, 0x1, 0x1, 0xfff, 0x91, 0x0, 0x8, 0x6, 0x1, 0x3eee, 0xfffffffc, 0xcc7}) getxattr(&(0x7f0000000200)='./bus\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="73397374656dae0002f7e9f98605d6b286d83cc61af45d62294f6f69e8727310f993da72a09a0e38b1e977ca8f2c0b2664e0d58dd78385492d3851253b6e1e4c999a65b0eaa49ba698831dfcef10e1f77c29d6383eebd740012d5a225e8161b3e03990b2c37bde5ce916fd1cb6a570055a638f22980c13bf3e26161bcc7a00be05899f90cdd2078cbc35f729f02107ded9b1338fb2e2b491c5a890276966bab973000000000000006801630f8a4ff2ba9b0e00000000"], &(0x7f0000000800)=""/159, 0x9f) sendfile(r1, r5, &(0x7f0000000080), 0x9001) [ 539.814314] binder: BINDER_SET_CONTEXT_MGR already set [ 539.830958] binder: 22963:22967 ioctl 40046207 0 returned -16 02:47:24 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) accept4$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14, 0x1800) r2 = socket$inet6(0xa, 0x5, 0x5) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/icmp\x00') setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000140)={@mcast1, 0xffffffff, 0xb7a1b3e1d9158522, 0x5c4a799b1a532b4b, 0x8, 0xbb84, 0xb0}, 0x20) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req={0x7, 0x9, 0x10001, 0x200}, 0x10) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r4, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000040)=0x100060, 0xa808) 02:47:24 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a627700000000000000000000000000000000000000008561646600000000000000000000000000000000000000000000000000000000852a627300"/80], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000018000000000000003800000000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 02:47:24 executing program 3: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x1d4b2675aa93a75a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0xfffffffffffffe13) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0x0) ioctl$ASHMEM_SET_NAME(r6, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) [ 540.171528] IPv6: Can't replace route, no match found 02:47:25 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f0000000040)=@ipx, 0xfffffffffffffe44, &(0x7f0000000440)=[{0x0}, {0x0}, {0x0}, {0x0, 0xfc}, {&(0x7f0000000400)=""/28, 0x1c}], 0x5}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) clone(0x7f8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4028ddbb014b093f0f341401"], 0xc}}, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0xb1, 0x1, 0x80, 0xa5, 0x0, 0x7ff, 0x8000, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8001, 0x4, @perf_config_ext={0x7e20, 0xe791}, 0x4, 0x101, 0x4, 0x0, 0x1, 0x5, 0x8000}, 0x0, 0x3, r0, 0x0) ptrace$setopts(0x4200, r1, 0x0, 0x1) tkill(r1, 0x3e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_proto_private(r3, 0x89e9, &(0x7f00000001c0)="12a134c69a2bfe104117cf9a6b6f7854476cf79af28e7750e0166ce5ee86b90754285314823238cf6ad708344fd72a7d231ce9d8541ff80a103ab9d7036ece946d98eab530313e41cc2ddac6a50b21f7344357ead9bb7453ce3fa43abafd57c3420e61b0df4f9eb5c01efc79e25765b9211b936d689d0f63cc1b4195eef67cecbb8f6bde44c0537517597cdc7a529af55ed64ee8d3090326d58d043d4b095bda966d8580731c1e5e087efedcd2a322a50eafb08e58") creat(&(0x7f0000000140)='./file0\x00', 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r4}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x1) [ 540.409382] binder: BINDER_SET_CONTEXT_MGR already set [ 540.425640] binder: 22986:22989 ioctl 40046207 0 returned -16 [ 540.481671] binder: BINDER_SET_CONTEXT_MGR already set [ 540.510312] binder: 22986:22995 ioctl 40046207 0 returned -16 02:47:25 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) [ 541.095641] binder: BINDER_SET_CONTEXT_MGR already set [ 541.102135] binder: 23012:23013 ioctl 40046207 0 returned -16 [ 541.197208] binder_alloc: 22834: binder_alloc_buf, no vma [ 541.218685] binder: 23012:23013 transaction failed 29189/-3, size 80-24 line 3136 02:47:26 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000280)) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) listen(0xffffffffffffffff, 0x0) mlock2(&(0x7f0000724000/0x2000)=nil, 0x2000, 0x1) write$FUSE_INIT(r3, &(0x7f0000000000)={0x11c}, 0x10027) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000300)='bcsf0\x00') ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x10000) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) mmap(&(0x7f00008ba000/0xa000)=nil, 0xa000, 0x200010a, 0x12, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000600)=@nat={'nat\x00', 0x19, 0x2, 0x28c, [0x20000340, 0x0, 0x0, 0x20000370, 0x200003a0], 0x0, &(0x7f0000000200), &(0x7f0000000340)=[{0x0, '\x00', 0x0, 0x2}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x0, 0x10, 0x9100, 'rose0\x00', 'ipddp0\x00', 'syzkaller1\x00', 'nlmon0\x00', @broadcast, [0x0, 0x542d1bae21866ad6, 0xff, 0x0, 0x80, 0xff], @link_local, [0x0, 0xff, 0x80, 0xff, 0x4c3ca5fabd3efe1d, 0x1fe], 0x9e, 0x9e, 0xd6, [@cpu={'cpu\x00', 0x8, {{0x100, 0x1}}}], [], @common=@dnat={'dnat\x00', 0x10, {{@remote, 0xfffffffffffffffc}}}}, {0x11, 0x8, 0xf2, 'veth1\x00', 'vcan0\x00', 'ip_vti0\x00', 'batadv0\x00', @link_local, [0x7f, 0x0, 0x0, 0x181, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}, [0x7f, 0x0, 0x0, 0x1fe, 0xff], 0xee, 0xee, 0x126, [@limit={'limit\x00', 0x20, {{0xfff, 0xc9c, 0x0, 0x7f, 0x7, 0x4}}}, @cluster={'cluster\x00', 0x10, {{0x7db86941, 0x4, 0x7}}}], [], @arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}}]}]}, 0x304) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/218, 0xda, 0x0, &(0x7f0000000240)={0xa, 0x4e22, 0x3ff, @empty, 0x1200}, 0xffffffffffffff06) socket$inet6_udp(0xa, 0x2, 0x0) [ 541.243995] binder: undelivered TRANSACTION_ERROR: 29189 [ 541.258262] binder: BINDER_SET_CONTEXT_MGR already set [ 541.267482] binder: 23012:23014 ioctl 40046207 0 returned -16 02:47:26 executing program 3: r0 = socket(0x200000000010, 0x2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x782) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r3) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000000)='vcan0\x00') ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f000095c000)="2400000026007f000000000000007701000000ff0100000000000000ffffffff0100ff10", 0x24) [ 541.428566] input: syz1 as /devices/virtual/input/input20 02:47:26 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getresuid(&(0x7f0000000200), &(0x7f0000000240)=0x0, &(0x7f0000000280)) r4 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x2) keyctl$chown(0x4, r4, 0x0, r5) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f00000002c0)=0xe8) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0) fchdir(r7) r8 = getuid() getresuid(&(0x7f0000000300), &(0x7f0000000600), &(0x7f0000000640)) getresgid(&(0x7f0000003180), &(0x7f00000031c0)=0x0, &(0x7f0000003200)) fchown(r7, r8, r9) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0) fchdir(r10) r11 = getuid() getresgid(&(0x7f0000003180), &(0x7f00000031c0)=0x0, &(0x7f0000003200)) fchown(r10, r11, r12) mount$fuseblk(&(0x7f0000000100)='/dev/loop0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='fuseblk\x00', 0x50002, &(0x7f00000004c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x5000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xb1}}, {@default_permissions='default_permissions'}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@euid_lt={'euid<', r6}}, {@hash='hash'}, {@pcr={'pcr', 0x3d, 0x16}}, {@euid_lt={'euid<', r8}}, {@euid_gt={'euid>', r11}}, {@subj_type={'subj_type', 0x3d, 'lo'}}]}}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r13 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@flat=@weak_binder, @fda}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 541.589373] audit_printk_skb: 2099 callbacks suppressed [ 541.589382] audit: type=1400 audit(1574736446.393:855): avc: denied { net_admin } for pid=2105 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 541.608976] audit: type=1400 audit(1574736446.413:856): avc: denied { net_admin } for pid=2106 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 541.610869] audit: type=1400 audit(1574736446.413:857): avc: denied { net_admin } for pid=2106 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 541.612699] audit: type=1400 audit(1574736446.413:858): avc: denied { net_admin } for pid=2106 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 541.614536] audit: type=1400 audit(1574736446.413:859): avc: denied { net_admin } for pid=2106 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 541.616331] audit: type=1400 audit(1574736446.413:860): avc: denied { net_admin } for pid=2106 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 541.617501] audit: type=1400 audit(1574736446.413:861): avc: denied { net_admin } for pid=2106 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 541.620014] audit: type=1400 audit(1574736446.423:862): avc: denied { net_admin } for pid=2097 comm="syz-executor.1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 541.621796] audit: type=1400 audit(1574736446.423:863): avc: denied { net_admin } for pid=2097 comm="syz-executor.1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 541.623411] audit: type=1400 audit(1574736446.423:864): avc: denied { net_admin } for pid=2097 comm="syz-executor.1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 541.892592] binder: BINDER_SET_CONTEXT_MGR already set [ 541.892605] binder: 23031:23032 ioctl 40046207 0 returned -16 [ 542.492001] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22985 comm=syz-executor.2 [ 542.614045] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=20083 sclass=netlink_route_socket pig=22985 comm=syz-executor.2 02:47:27 executing program 2: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000140), 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000040)="72950f7bfaafc933e51a6a45f81c09a06ed9c9fd16b1e3a31094d6a397d83e6ca977f81ec58970af4473a5e6418cc7a673479b3ba3ac54245122792c361c27f874066dfe9693f701977feab9f479fb6d3d1f9bfd7c54c3c4e9419e4e12f9b09856914ba87d1f0bc02e4de57983bbefceb28c7a2e78c6820cd7e6904246c30beef1945cde44cd841362fabbe3ce1ec8cc7187bae807fd4fd6e4539022a15b407fbe7bc84499e767b244730b42613d465f9debe8f2496d102f8149449a06edc8857f7f57d8cb0d0489f9d508874e7a802a38e0daa9f00d70ff44e3776a9c26009c8469383aef1e1904b03148", 0xeb) 02:47:27 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) 02:47:27 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = accept4$inet(r9, &(0x7f0000000280), &(0x7f00000002c0)=0x10, 0x53de0b1e2b8f8aa4) getsockopt$inet_mtu(r10, 0x0, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4) write$P9_RSTAT(r4, 0x0, 0x0) sendto(r7, &(0x7f0000000340), 0xac, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000001c0)={0x1, 'syzkaller1\x00'}, 0x18) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000500)='TIPC\x00') ioctl(r0, 0x8, &(0x7f0000000580)) recvmmsg(r7, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) clone(0x0, &(0x7f0000000640)="e1fea4c5bb0f699682fd37c5ad1a14d20afc2093db1a28cd359bd0ae7b53802fe27accc96526d718565c81ae3d4a901e0a1f01e37e5fcba72ad07c592309a4825b50a25a0884a172a71e035d3156888f8ae12bfbc4e837ba972d9a23cf4b56611f539eb172aa8978fc38a02b7b4349d39671579350b6d4969b18185ece417bc621f2043e734e95d87597df4e32c7", &(0x7f00000000c0), &(0x7f00000003c0), &(0x7f0000000700)="f1ea51d793d343ef785f269e27bc9b35c756a451c99cbdeb5d648ed9b1580c18f187e2995f273c52d3391c28b1683e5809aca445a286b013970945b55c23a3e82daa89d13cd66835e8ec0f39eb2e796f4ed003a859d79c2991ea0323ae2e822e5ec3110d58c4ca2294a4677dae26c6e4a9c7cdbca39458cd49ae1102a26bae5045287a8e69ece03c3462dca17c7e8a6e06e86b06d0db4e41b2c54c0cf3bef45b637fe0e4781bd864f9a72c51cafa76302a19aee7b4fc7aa00817dac545e7ed4e533b7058") ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000440)={0x9, 0x1, 0x5, 0xfff, 0x11, 0x9, 0x8, 0xfb, 0x1, 0x68589d9d, 0xfffffffc, 0x1}) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000040)={0x2a, 0x4, 0x0, {0x0, 0x40, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) sendfile(r1, r6, &(0x7f0000000080), 0x9001) 02:47:27 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) getsockopt$IPT_SO_GET_ENTRIES(r9, 0x0, 0x41, &(0x7f0000000b80)={'raw\x00', 0xce, "caee9fc9ec2e4ce2ecf8386a0ee8ab274dfc0f255b9bb1255fbbe8940141c921691ea16079997d504370781e990322b001e6c420b80e7779f21ddefa6c0696fc7a534fa1300b03ab1bb838a60e1b0ddcf924c49651795398663b0fa6630c5eb3c716049cd28b319a0b8968288e044400395ef65d02cf350c870dda944fbbac81ef8ccdf1596f433d9ba7e22536ed7479771c3c842a5808a48a77e925256e50284ddfe6459bc30a6982cf49b0690e5291a6b8c863580f78e3ca0ebf6f11db5105d0ef63047fac39a08414b20e3ae7"}, &(0x7f0000000c80)=0xf2) getsockopt$SO_COOKIE(r6, 0x1, 0x39, &(0x7f0000000640), &(0x7f0000000680)=0x8) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x3) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="300400000ff8dc3b0b1992623a02e942a7880c8258bfbb3842979088d7fe134455c1e8e45625205304410bb96ca08ddd01004dd1c1cde925561d99faf3e35f52836e72aaced47b97d0c2ff77e441f11851922e4aa4f2f1369cda928e0eef46d3dbd58399a04e15d5ade896cf2365fea1fb43c62c314e00"/128, @ANYRES16=r7, @ANYBLOB="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"], 0x3}}, 0xbd96b9f073d96152) sendmsg$TIPC_NL_LINK_RESET_STATS(r5, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="000028bd7000000000000a000000380005000800010075647000240002000800030053ff0000080001000c0000e9070003003f0000000800040000000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8800) r10 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r10, 0x5, 0x0, 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10006804}, 0xc, &(0x7f0000000400)={&(0x7f0000000e00)=ANY=[@ANYBLOB="f400bb893c95e481970000dbc65f2e53de2b10f293c7437ddb94ab74671bbcbddc1432740a20376aaefc73fd9179d016d05a7815256f5f164ecbb426ce82f0a0f2f12a48368fc462ead76002f85a8c72e73e4a6612a4e862cefd1fd5587a1951937d03a9019e90a2da8e6f05af1f2fe60b29bd84787759f82980e7fcd576b9d911", @ANYRES16=r7, @ANYBLOB="c24a28bd7000fddbdf2506000000100007000c00040001040000000000002000050008000100696200000c00020008000200000000000800010065746800280007000c0003004000000000000000080001000200000008000200070000000800010000000000240007000c000300090000000000000008000200ff0000000c000300ff0f0000000000002c00090008000200070000000800020004000000080002000000010008000200faffffff0800020006000000280006000400020008000100ff7f0000080001001f0000000400020008000100000000000400020010000600080001005d20000004000200"], 0xf4}, 0x1, 0x0, 0x0, 0x800}, 0x4018000) sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x300, r7, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_NET={0x58, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb8d9}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffa}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xbde}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x198, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x200, @empty, 0x27}}}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'eth', 0x3a, 'ip6_vti0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8001, @mcast2, 0x40}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @mcast1, 0x8c19}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x76c900ca, @ipv4={[], [], @local}, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x80, @loopback, 0x800}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x5, @empty, 0xfff}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x101}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0x1c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0x300}, 0x1, 0x0, 0x0, 0x10}, 0x6e000) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff}) close(r0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000001c0)=0x1) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) pipe(0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/Qev/ashmem\x00', 0x80080, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x1) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r5, 0x0) ioctl$ASHMEM_SET_NAME(r5, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) 02:47:28 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) getpriority(0x2, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r1) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000100), &(0x7f0000000140)=0x4) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@flat=@weak_binder, @fda}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 543.581339] binder: BINDER_SET_CONTEXT_MGR already set 02:47:28 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) getsockopt$IPT_SO_GET_ENTRIES(r9, 0x0, 0x41, &(0x7f0000000b80)={'raw\x00', 0xce, "caee9fc9ec2e4ce2ecf8386a0ee8ab274dfc0f255b9bb1255fbbe8940141c921691ea16079997d504370781e990322b001e6c420b80e7779f21ddefa6c0696fc7a534fa1300b03ab1bb838a60e1b0ddcf924c49651795398663b0fa6630c5eb3c716049cd28b319a0b8968288e044400395ef65d02cf350c870dda944fbbac81ef8ccdf1596f433d9ba7e22536ed7479771c3c842a5808a48a77e925256e50284ddfe6459bc30a6982cf49b0690e5291a6b8c863580f78e3ca0ebf6f11db5105d0ef63047fac39a08414b20e3ae7"}, &(0x7f0000000c80)=0xf2) getsockopt$SO_COOKIE(r6, 0x1, 0x39, &(0x7f0000000640), &(0x7f0000000680)=0x8) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x3) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="300400000ff8dc3b0b1992623a02e942a7880c8258bfbb3842979088d7fe134455c1e8e45625205304410bb96ca08ddd01004dd1c1cde925561d99faf3e35f52836e72aaced47b97d0c2ff77e441f11851922e4aa4f2f1369cda928e0eef46d3dbd58399a04e15d5ade896cf2365fea1fb43c62c314e00"/128, @ANYRES16=r7, @ANYBLOB="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"], 0x3}}, 0xbd96b9f073d96152) sendmsg$TIPC_NL_LINK_RESET_STATS(r5, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="000028bd7000000000000a000000380005000800010075647000240002000800030053ff0000080001000c0000e9070003003f0000000800040000000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8800) r10 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r10, 0x5, 0x0, 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10006804}, 0xc, &(0x7f0000000400)={&(0x7f0000000e00)=ANY=[@ANYBLOB="f400bb893c95e481970000dbc65f2e53de2b10f293c7437ddb94ab74671bbcbddc1432740a20376aaefc73fd9179d016d05a7815256f5f164ecbb426ce82f0a0f2f12a48368fc462ead76002f85a8c72e73e4a6612a4e862cefd1fd5587a1951937d03a9019e90a2da8e6f05af1f2fe60b29bd84787759f82980e7fcd576b9d911", @ANYRES16=r7, @ANYBLOB="c24a28bd7000fddbdf2506000000100007000c00040001040000000000002000050008000100696200000c00020008000200000000000800010065746800280007000c0003004000000000000000080001000200000008000200070000000800010000000000240007000c000300090000000000000008000200ff0000000c000300ff0f0000000000002c00090008000200070000000800020004000000080002000000010008000200faffffff0800020006000000280006000400020008000100ff7f0000080001001f0000000400020008000100000000000400020010000600080001005d20000004000200"], 0xf4}, 0x1, 0x0, 0x0, 0x800}, 0x4018000) sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x300, r7, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_NET={0x58, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb8d9}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffa}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xbde}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x198, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x200, @empty, 0x27}}}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'eth', 0x3a, 'ip6_vti0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8001, @mcast2, 0x40}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @mcast1, 0x8c19}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x76c900ca, @ipv4={[], [], @local}, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x80, @loopback, 0x800}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x5, @empty, 0xfff}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x101}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0x1c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0x300}, 0x1, 0x0, 0x0, 0x10}, 0x6e000) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50x0}) fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x0, 0x3, 0x8, 0x5, r1}) mkdir(0x0, 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000903000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x60020000) mount(0x0, 0x0, 0x0, 0x80800, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r2, &(0x7f0000000000), 0x0, 0x0) [ 543.725395] binder: undelivered TRANSACTION_ERROR: 29189 [ 543.797022] binder: BINDER_SET_CONTEXT_MGR already set [ 543.829141] binder: 23078:23086 ioctl 40046207 0 returned -16 [ 543.858475] binder_alloc: 22834: binder_alloc_buf, no vma [ 543.858497] binder: 23078:23087 transaction failed 29189/-3, size 80-24 line 3136 02:47:28 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, 0x0) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) [ 543.858970] binder: undelivered TRANSACTION_ERROR: 29189 02:47:28 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@flat=@weak_binder, @fda}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 543.998591] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23063 comm=syz-executor.5 02:47:28 executing program 2: pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r5 = openat$full(0xffffffffffffff9c, 0x0, 0x400, 0x0) getpeername$packet(r5, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0x8000fffffffe) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) r6 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$EVIOCGNAME(r6, 0x80404506, &(0x7f0000001800)=""/151) syz_genetlink_get_family_id$ipvs(&(0x7f0000001380)='IPVS\x00') r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r7, 0x0, 0x0, 0x8020003) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000001440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x26009020}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x200080d0}, 0x20004800) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r8, &(0x7f00000018c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty, 0xfffffffe}, 0x1c, 0x0, 0x0, 0x0, 0xfffffffffffffcff}}, {{&(0x7f0000000440)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x15f}}], 0x2, 0x0) sendto(r8, 0x0, 0xffffffc3, 0x9f232a42ec1c6363, 0x0, 0xffffffffffffff1d) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0) pipe(&(0x7f0000000200)) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) [ 544.435961] binder: 23088:23099 got transaction with invalid offsets size, 614 [ 544.436472] binder: BINDER_SET_CONTEXT_MGR already set [ 544.436481] binder: 23097:23104 ioctl 40046207 0 returned -16 [ 544.448921] binder_alloc: 22834: binder_alloc_buf, no vma 02:47:29 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000100)=@v2={0x2000000, [{0x6, 0x1}, {0x9, 0xffffff81}]}, 0x14, 0x1) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x20, 0x0, 0x10000001, 0x800000001, 0x0, 0x0, {0xa}, [@nested={0xc, 0x2, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x6) r1 = creat(&(0x7f0000000140)='./file0\x00', 0xd98efa493a2f5479) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x195d2d4be3a2d70d, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x425}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x4}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x92}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x9004}, 0x80) [ 544.448945] binder: 23097:23104 transaction failed 29189/-3, size 80-24 line 3136 [ 544.450421] binder: undelivered TRANSACTION_ERROR: 29189 [ 544.464367] binder: BINDER_SET_CONTEXT_MGR already set [ 544.464384] binder: 23097:23106 ioctl 40046207 0 returned -16 [ 544.473671] binder_alloc: 22834: binder_alloc_buf, no vma [ 544.473693] binder: 23097:23106 transaction failed 29189/-3, size 80-24 line 3136 [ 544.473996] binder: undelivered TRANSACTION_ERROR: 29189 [ 544.955720] binder: 23088:23099 transaction failed 29201/-22, size 72-614 line 3172 [ 545.011703] binder: 23088:23099 ioctl c0306201 20000100 returned -14 [ 545.050402] binder: undelivered TRANSACTION_ERROR: 29201 [ 545.094853] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 545.435409] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 546.097980] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23125 comm=syz-executor.5 02:47:31 executing program 2: pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r5 = openat$full(0xffffffffffffff9c, 0x0, 0x400, 0x0) getpeername$packet(r5, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0x8000fffffffe) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) r6 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$EVIOCGNAME(r6, 0x80404506, &(0x7f0000001800)=""/151) syz_genetlink_get_family_id$ipvs(&(0x7f0000001380)='IPVS\x00') r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r7, 0x0, 0x0, 0x8020003) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000001440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x26009020}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x200080d0}, 0x20004800) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r8, &(0x7f00000018c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty, 0xfffffffe}, 0x1c, 0x0, 0x0, 0x0, 0xfffffffffffffcff}}, {{&(0x7f0000000440)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="6f000000000000002900000036000000001b000000000000010600000000000000668fd70f0f6adba6cb3df78bfeb9934a1ee4b0c7501f1065d74502000000a729c4841e47a2431ade75e641e71ce6d9a62ff20ff3f995aa4247896ebde2ec000000000000000000000000000740000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000004010005020000040100c910ff0100000000000000000000000000010105000000000000000030a2d7c1036ae3ed23acb11aab14cab066ef9957d2685ea1d1879d5124517dfd90da8222572450cec5bdb8708e7b3e065d8abbcbef115b8da66afcc4965834eb9be0312f07168f573232d85c0b8f36f3606d8d7142fe9aabebd220211ef8a298a81bbb74c419b0c793660c5a74168f0349cdc6e4b56024000000000000000000000000000000008898939ce11488e1e2aea114e1ffffff1ebedbc2b9f632018545f6c7e1f87bea360b015137"], 0x15f}}], 0x2, 0x0) sendto(r8, 0x0, 0xffffffc3, 0x9f232a42ec1c6363, 0x0, 0xffffffffffffff1d) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0) pipe(&(0x7f0000000200)) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) 02:47:31 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, 0x0) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) 02:47:31 executing program 3: pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x40, 0x6, 0x1}, 0xffddade4a2cbd9c1) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = openat$full(0xffffffffffffff9c, 0x0, 0x408840, 0x0) getpeername$packet(r7, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={@ipv4={[], [], @multicast2}, 0xfffffffc}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0x8000fffffffe) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4044000) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket(0x200000100000011, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r8 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGNAME(r8, 0x80404506, 0x0) syz_genetlink_get_family_id$ipvs(0x0) creat(0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r6, 0x0, 0x10) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) splice(0xffffffffffffffff, 0x0, r9, 0x0, 0x0, 0x0) 02:47:31 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0) fchdir(r2) r3 = getuid() getresgid(&(0x7f0000003180), &(0x7f00000031c0)=0x0, &(0x7f0000003200)) fchown(r2, r3, r4) getresgid(&(0x7f0000000280)=0x0, &(0x7f00000002c0), &(0x7f0000000300)) write$FUSE_ATTR(r1, &(0x7f00000003c0)={0x78, 0x0, 0x5, {0x3, 0x5, 0x0, {0x3, 0x1, 0x80, 0x1f, 0x3, 0x8c8, 0x7, 0x4, 0x2, 0xfffffff9, 0x8001, r3, r5, 0x2, 0x5}}}, 0x78) r6 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) r7 = accept(0xffffffffffffffff, &(0x7f0000000100)=@generic, &(0x7f00000001c0)=0x80) getsockopt$inet6_int(r7, 0x29, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x4) r8 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioperm(0x0, 0x4e79, 0x40) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a627700000000000000000000000000000000000000008561646600000000000000000000000000000000000000000000000000000000852a627300"/80], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000718000000000000003800000000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 02:47:31 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x1000) r2 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x4000000000020009) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) utimes(0x0, &(0x7f0000000180)={{}, {r5, r6/1000+30000}}) socket$inet6(0x10, 0x3, 0x0) sendfile(r3, r4, 0x0, 0x80001d00c0d0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = creat(&(0x7f0000000140)='./bus\x00', 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff}) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r11, &(0x7f0000005640)=[{{&(0x7f0000000400)={0xa, 0x4e20, 0x80000000, @empty, 0xffffffff}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000440)}, {&(0x7f0000001c80)="f127436c6765abeb8a4ed53d6d1eecac82a5ea1aecbf6d54b70f355333e9c94e68466a5fe1a0667cc5f6be906c3a40671d6593295e18674f20299db420f03fd6e61674b84fe77087a02a6bcb9604ec3b0e50a2fe490f8c1eb3bdf7235406dd1d262eb3bbd787442d9df413f67c702608fa323b5e0e36086d36c9d6cf059aab71d89ef3be6a76d50bb12a8d9b98c97a6832361b9c1c93ca22449c10d41eb886305ac43ba523b708beb65c52b3352708999f5e10f2f3f2bc7fa147bfdcb51ee4b25f815660797573b1a65c5498b1898b", 0xcf}, {&(0x7f0000001d80)="9569d55083f231f8988d537c0797bcce5d883f1a9fc2aaafb6d4997097e697c2136240ea9b4ae897b278ebf8ace7e1a3b4ca1239d1c08a0b96459295635c14e51ebc6e8c94a53ea448eabcafc08668239a799c9b1c976f2894d2032a9bbc76b513e6554f79e32ac729e6576f25c9380148443b603ea91a83249b4ea70e61030ae6dc096604d9b72a3ef7e1802dd0855a642a5a4cf94edf548fcb3a08f5ad9e794b21de48878347be9e33ee3d7f5e19bc6cd7b7f7d6bee00867c927d2cccd9ef2b0352bbddb97836484665e4fe8c3", 0xce}], 0x3}}, {{&(0x7f0000001e80)={0xa, 0x4e24, 0x5, @mcast1, 0xffffffc1}, 0x1c, &(0x7f0000001f40)=[{&(0x7f0000001ec0)="9f8359cf3c51df2e457dbd354be99b1652da5aa994a15656273b18f8fdae18f3953c70f659dfaafd27854ebf053993f83cd3fecd5fbce175c620c9ba995e95a888372034dadaf0d306dfd51a46858b782b34147e2eefe2640431f43cdd21eaa11db5faec99759c", 0x67}, {&(0x7f0000004380)="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", 0x1000}], 0x2, &(0x7f0000001f80)=[@flowinfo={{0x14, 0x29, 0xb, 0x2}}, @hopopts_2292={{0x70, 0x29, 0x36, {0x2f, 0xa, [], [@calipso={0x7, 0x18, {0x0, 0x4, 0x7, 0x7, [0x3, 0x7f]}}, @calipso={0x7, 0x38, {0x1, 0xc, 0x81, 0x33d, [0x4, 0x216, 0xb3, 0x52, 0x9, 0xfffffffffffffffb]}}]}}}], 0x88}}, {{&(0x7f0000002040)={0xa, 0x4e22, 0x1, @remote, 0x7f}, 0x1c, &(0x7f00000021c0)=[{&(0x7f0000002080)="cb7381a30f657dff0a33419d8020f47f43a545328dee0f80f370b2167d91355b8e0c3cc4bd2815bf758d9a2a38893c4fb5bf5c4b6c917cc47c1895a1cd49bb6cd62cb8c2259a83bd931825657afae5510a44a3057ec888be5409cbd34eab717ecffa9fa6e574c845f9f5dae8857be004f5720166db0032efd435a31382270aaf5828a0a83209a20cd686179f7e44dcf00300a58e606665161dc436e3b06d0a2cec1df49f661addf9d12f5a40fa", 0xad}, {0x0}], 0x1, &(0x7f0000002200)=[@flowinfo={{0x14, 0x29, 0xb, 0x9}}, @tclass={{0x14, 0x29, 0x43, 0x5}}, @rthdr={{0x28, 0x29, 0x39, {0x32, 0x2, 0x0, 0x4, 0x0, [@local]}}}, @rthdr={{0x78, 0x29, 0x39, {0x3b, 0xc, 0x0, 0x1, 0x0, [@mcast1, @rand_addr="2ba9bda188454d79c2772a4271075187", @rand_addr="3b33925ac6fc79971938722417688497", @rand_addr="f7b0bc223f0a3d1bce960d7e5497236e", @ipv4={[], [], @rand_addr=0xfffffffd}, @loopback]}}}], 0xd0}}, {{&(0x7f0000002300)={0xa, 0x4e21, 0xfffffffa, @mcast2, 0x5}, 0x1c, &(0x7f00000054c0)=[{&(0x7f0000005380)="b7eace4f3856e0e7f78bab37ebf56984f84042c290afd6eb414cb3273388b01263bf9d8619423ba545bf8bc363bb562a5d5ad2ce08f20d7120724b2bbe11af705f7c5544621eec31c05c0cc83957e70f0550be41e60753653872875a011d9d9d794153c36fb21620abe3207e512348b5", 0x70}, {&(0x7f0000005400)="c1351cf4c4fdfa7199d429fd113e695e38356246bea5684567c85dadd92b2361dce2c098d4a1c83ac5dd7cfb5acda377fb6c31b977543a66e2a2b65b5578c26042ab73461f290046ce77da67d1f71db3241ecf1926e15f2078f74f82dbbcee24b362aaae54b8395639bd45f87375393bd5ab0a648a03e3aa0c5948092e3107f6132ddb2e6cb6b729bab1462cfd75cf497e8de7c6f153041ab5fc4fa152b6b1e0a937bdd2c0", 0xa5}], 0x2, &(0x7f0000005500)=ANY=[@ANYBLOB="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"], 0x10e}}], 0x4, 0x0) recvmsg(r11, &(0x7f00000013c0)={&(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)=""/29, 0x1d}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000000240)=""/12, 0xc}], 0x3, &(0x7f0000000300)=""/67, 0x43}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = syz_open_dev$mice(0x0, 0x0, 0x0) r16 = syz_genetlink_get_family_id$nbd(0x0) r17 = creat(0x0, 0x0) ioctl$EVIOCGKEYCODE(r17, 0x80084504, 0x0) r18 = creat(0x0, 0x0) r19 = socket$inet(0x2, 0x80000, 0x6) setsockopt$sock_int(r19, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) pipe2(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0xe000) ioctl$LOOP_CHANGE_FD(r20, 0x4c00, r15) r21 = socket$inet(0x2, 0x80000, 0x6) setsockopt$sock_int(r21, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) sendmsg$NBD_CMD_STATUS(r15, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000001700)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r16, @ANYBLOB="000125bd7000fbdbdf25050000000c00040000100000000000000c000400dd170000000000000c00030000000100", @ANYRES32=r17, @ANYBLOB="4c00070008000100", @ANYRESHEX=r21, @ANYBLOB="08000100", @ANYRES32=r18, @ANYBLOB="0804000100", @ANYBLOB, @ANYPTR64=&(0x7f0000001600)=ANY=[], @ANYBLOB="08000100", @ANYRES32=r14, @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="0c00030005000000000000000c000400ff7f0000000000000800010000000000"], 0x11}, 0x1, 0x0, 0x0, 0x80}, 0x0) r22 = open(&(0x7f0000000500)='./bus\x00', 0x161042, 0xa1) close(r22) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r22, 0x0) r23 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000001440)='/selinux/status\x00', 0x0, 0x0) r24 = getpid() r25 = syz_open_procfs(r24, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r25, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) r26 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001480)='/selinux/checkreqprot\x00', 0x214503, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000015c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0x90, r16, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x132}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xd4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffd}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x44, 0x7, [{0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r22}, {0x8, 0x1, r23}, {0x8}, {0x8, 0x1, r9}, {0x8, 0x1, r25}, {0x8, 0x1, r26}]}]}, 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r16, 0x5, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xe553e7dcafda5e12}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0x4020001) 02:47:31 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binier#\x00', 0x0, 0x402) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@flat=@weak_binder, @fda}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:47:31 executing program 5: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001400)=ANY=[@ANYBLOB="d319890000f19c0400cd8034"], 0xc}}, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000000)=""/45) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ea0000008000000000cbc624877c8252c28f5e87a64820546a1ebe1f6adb3b91e7f1ffd7e4ab569f8eb9808e0b61a0bf7a301ffe8dac0773d9e5411f2b25f3fbc7cf9482c1f0d81a590ed76f2c4af37bd3d331de23d61ca62ef8d48f42ffd913acf060c10300000082fc399eaab8787f0dd1510490b0f420326bcc4e2b65e7c68bacee7877a6274d908e5a5d512b87ed3eb24d00d331edbedf8a03a722ffa87cc2dfec4758b087c23cc9c5e726fea942494855d4bd3388b68af3", @ANYPTR64, @ANYPTR64, @ANYRESOCT, @ANYBLOB="e6c55c5d9eb82ee4510100010029a741efca44f9", @ANYRESDEC], 0x0, 0x109}, 0x20) tkill(r0, 0x39) ioprio_set$pid(0x2, 0x0, 0x1) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x0, 0x0, 0x3ff}}}}, 0x30}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x80) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) perf_event_open(&(0x7f0000000700)={0x2, 0x70, 0xff, 0x0, 0x3f, 0x9, 0x0, 0x10000, 0x40480, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x0, @perf_bp={&(0x7f00000006c0), 0x5}, 0x10310, 0x401, 0x8, 0x2, 0x7, 0x3, 0x3}, 0x0, 0xa, r5, 0xa350cdc42161febc) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xc442c710b2945351}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00022cbd7000fbdbdf250300000008000400010100000800060041b90000b5a1af519d853e1032bc70445116e8ca498bc80fad44bc1bfc277dae66f374a7fe2df0dd51f1e409d9d470fbf9134ec153fceac3e6d774be4a84abe686fb8c0a2d311322ca1e6663ee2ddcf27ed3cd90bae50a1fdf73bc41aa37de99a3ee867c3c1819761520c9198af99d87dd3d338ddc9f0cfff1a4453d3a9639af548ffbef2c30567b5cb0e51c12e537e43ba70ff4fbc76b101ce7ececb4d8866a82e2fe46fea8a89561293cc1244d69274c0f9fdb294d1939788963c1a4f98dc5ba31185db52409e9ed4c98ae0560d219c05313b18e2562ba37cb9388ee437b2bc79ad549733e8a838329c9ca13b6a44b7aa18acc1597c5e686b9113b9589d66542f423bb59e2ec8592b941e284e6a4f0fc6f90c0aa971810fe8ef258becaa93955b5acf039c40119f347887a90cbd65924d7063215444b0fa833178662f34e7b23f3a5546dfa1aa21babf0164a92f70843d084d6ffe165c71c274a6e1e970c1c4a68fbc59dee"], 0x2c}}, 0x200000a4) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa8, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffff7f}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x15, 0xe1afaf5c47c74846}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x50}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x33}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfff}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4840}, 0x4841) r6 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 546.601951] audit_printk_skb: 1807 callbacks suppressed [ 546.601961] audit: type=1400 audit(1574736451.403:1469): avc: denied { dac_override } for pid=23137 comm="syz-executor.3" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 02:47:31 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000007c0)="6b2a048792705c307bd65faa4599fe94889ed4d044163e18ee772926dc000000000000000000000000007408cbfc98540700a5e3d83a6a101fa04bafba91799d2a", 0xfffffffffffffda1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0x8d, 0x4000000000000800, 0x1}, 0x10) vmsplice(r2, &(0x7f00000001c0), 0x3ca, 0xe) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu\x00', 0x200002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0x0, 0x4000000000000800, 0x1}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000040), &(0x7f00000001c0)}, 0x20) fchdir(r3) r5 = open(&(0x7f0000000080)='./bus\x00', 0xef8423a1c5cd7068, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)) r6 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x6100) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r7, &(0x7f00000000c0)='./file0\x00') mkdirat(r7, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r8 = open(&(0x7f0000000080)='./bus\x00', 0x141046, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r8, &(0x7f0000000740)={&(0x7f0000000040), 0xc, &(0x7f0000000700)={&(0x7f00000009c0)=ANY=[@ANYBLOB="64000000f501e2a7334f450b53a86b544fc9aa77dbab2c18af528bece978ebad1256ea000000808b76cc0aaf77a8e29f6bec87cad295bd816add1beb86d6deb4ad1a016029f75d028f15a39bc2dab32e517a54d7b426ad0f8d5e8e1b104e270fffc1f92a51df347765d916c6db", @ANYRES16=r9, @ANYBLOB="10002cbd7000fcdbdf2515000000440009080800020000000000080001000065d900000008000200e55d0000080002009104000008000200a800000008000100f7ffffff080002009801040008000200040000000c00060008000100090000ffc2ac1490be9197db688dfbdc4ca526c241932f2c30fc10233b32ec2696651487e0045ef38571ca0ae3cdd41cfc3e69463f8d2d8d72a6ac53cc9e6f7c7669c858b10956f4feab4e7e38ed61b9b52367e62e93a24412d644a8a3e72095ad4bca66e7e6620254"], 0x3}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000894) sendmsg$TIPC_NL_BEARER_SET(r7, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000b00)=ANY=[@ANYBLOB="e8010098d7fe4479f37de41552f98aed00", @ANYRES16=r9, @ANYBLOB="000127bd7000ffdbdf25e3ffffff5c0004001400010062726f6164636173742d6c696e6b00000400070034000700080001000900000008000400020000000800030008000000080002005c020000080003000600000008000400e80100000c00010073797a3100000000ac0004001c00070008000200000000000800010018ea000008000100120000001c000700080002000700000008000300f7efffff080004000600000014000700080001001000000008000200000000000c00010073797a31000000000c000700080002000800000044000700080004000300000008000400cbfbffff0800020001000000080002002000000008000400000800000800030000000000080002000000000008000300d70800001c000900080002000000200008000340060000000800010006000000680004000c00010073797a30000000002400070008000100180000000800030009000000080003000200000008000200ff0f00000c00010073790062726f6164636173742d6c696e6b000014000700080004003f0b000008000100100000001400070008000200070000000800010009000000140009000800010006000000080002004c0100002000020008000200960400000800020000800000080002000010000004000400ef3f21affc6e7d71a115b6e3e483626d8259943bcb4cd676a2bb47fe9dd91c6e6330bc38a250a9fe5373cee2abe8c7a1de4095ac8790f71196c822b976dedb917aca2841a954ef9a70a9a339063de95f3c58a5be98648ccafb9d213c8d2bb17315361112abb6f614f387b946f1815e20876faeefbcbf00000000000000000018d4a18c13"], 0x1e8}, 0x1, 0x0, 0x0, 0x20000000}, 0x400) write$FUSE_INIT(r5, &(0x7f0000000000)={0xfffffffffffffd66, 0x0, 0x7, {0x7, 0x1f, 0xfffffffc, 0x5010, 0x0, 0x1000, 0xfffffffd, 0x4}}, 0x271) clone(0x2142001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d9189) socket(0x4, 0x2, 0x1e) r10 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r10, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r10, 0xc0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x5b4, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x7, 0x3}, 0x0, 0x0, &(0x7f0000000680)={0x1, 0x7, 0x5, 0x80000000}, &(0x7f00000000c0)=0x9, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=0x24}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=r11, 0x4) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r11, 0x4) fcntl$F_GET_RW_HINT(r12, 0x40b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) write$input_event(r1, &(0x7f00000001c0)={{0x77359400}, 0x5, 0xfff8, 0x8}, 0x18) readahead(0xffffffffffffffff, 0x6, 0x100000000) pwrite64(r6, &(0x7f0000000500)="8f2d0b68f901b970c304881a7c0f467deff28699261da94e9957dad1060779f40d1e3467fd794bd2c5cf3ecc8e4420c793a17a7765aa22b3095e1c46fd66e58902d4df88541abfb4e779ca0dbbe2fc73a7534fae7b5bb18856c761e6778b30f7cfdb4029adf3aefb013bfde2a6e3790147250f9a388b1a3104152bcaa5b78257bd6c31793a51178b8ee4e87cc3d6c0c450b8c5bbe8ca12fb4fa7a6029f95bdd9fe26ceea89b8fc2d6a849ff182267e4d4d510aebeacd16c5435783cccb6d288342325685bc2ee2d44c6e16c946", 0xcd, 0x0) 02:47:31 executing program 5: r0 = open(&(0x7f00003b6ff8)='./file0\x00', 0x10000000080040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rename(&(0x7f0000fdbff8)='./file0\x00', &(0x7f0000000000)='./file1\x00') rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xeffffffffffffffe}, 0x0, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigreturn() r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_sigtimedwait(&(0x7f00009ac000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) creat(&(0x7f0000fdeff8)='./file1\x00', 0x0) close(r0) [ 546.612302] audit: type=1400 audit(1574736451.403:1468): avc: denied { net_admin } for pid=2095 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 02:47:31 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) [ 546.614361] audit: type=1400 audit(1574736451.413:1471): avc: denied { net_admin } for pid=2095 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 02:47:32 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f00000002c0)=0x5) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r3, 0x20, 0x70bd25, 0x25dfdbfb, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x1, @link='syz1\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x80) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@flat=@weak_binder, @fda}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 546.615612] audit: type=1400 audit(1574736451.413:1470): avc: denied { dac_override } for pid=23136 comm="syz-executor.4" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 02:47:32 executing program 5: r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0xa251c7588dad7e8b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000380)=0x9) fsetxattr$security_evm(r0, &(0x7f0000000200)='security.evm\x00', &(0x7f0000000280)=@sha1={0x1, "110076d25543fa56ea1ed836bafb0f57b28ac765"}, 0x15, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PIO_UNISCRNMAP(r6, 0x4b6a, &(0x7f00000003c0)="f159b371444c9601a632281059fbed290c49218dd25f1b598d03f1bbc199881ef0020a49160f21e3df6c5f828d990ce6868622efef812d26221a6f5f4803bffaedf2edb72c068a226c36b2ce7e50e14a61a5e4c688d17220005d15a37ff00e7fd83e3f41beab5df3107a51b50982d4af9a62d8fc467435f9a23c58c0ab9b61f89d2670f39dbb468d6cbc1c604067fc0a4db6c9629bbc379020607f0a36fc54271aadaa23ebe93cd92cefc2c0f1e5626bb6d753d1b59d927def6eae613d1be2e92fc8ed1b1b10c5c512941161fec5a809cd68be9ae4120ad0786f7f19c2e1743f2d5a102ba6bcbd3b83da154f4e370c12bddd") r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r7, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r7, 0x0) ioctl$ASHMEM_SET_NAME(r7, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff}) dup(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$getflags(r8, 0x81f) r10 = openat(r0, &(0x7f0000000580)='./file0\x00', 0x400500, 0x48) ioctl$TIOCMBIC(r10, 0x5417, &(0x7f0000000540)=0x3) dup(r9) getsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000800)={@mcast1, 0x0}, &(0x7f0000000300)=0x1) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'ifb0\x00', r11}) getpeername$unix(r8, &(0x7f0000000000), &(0x7f00000000c0)=0x6e) [ 546.636047] audit: type=1400 audit(1574736451.433:1472): avc: denied { sys_admin } for pid=2097 comm="syz-executor.1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 02:47:32 executing program 2: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0, 0x0) poll(&(0x7f0000000180)=[{r1, 0x14}, {r0, 0x8000}, {r0}], 0x3, 0x2) ftruncate(0xffffffffffffffff, 0x0) r2 = inotify_init1(0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000000)=""/250, 0x128b9372) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r5, 0x0, 0x0) clone(0x68040000, 0x0, 0x0, 0x0, 0x0) ptrace(0x4207, r5) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'yam0\x00\x01\x17\x8b\x00', 0x40}) ptrace$setregset(0x4209, r5, 0x20000004, &(0x7f0000000100)={0x0}) [ 546.702665] audit: type=1400 audit(1574736451.503:1473): avc: denied { sys_admin } for pid=2097 comm="syz-executor.1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 546.713710] audit: type=1400 audit(1574736451.513:1474): avc: denied { dac_override } for pid=23137 comm="syz-executor.3" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 02:47:32 executing program 5: r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0xa251c7588dad7e8b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000380)=0x9) fsetxattr$security_evm(r0, &(0x7f0000000200)='security.evm\x00', &(0x7f0000000280)=@sha1={0x1, "110076d25543fa56ea1ed836bafb0f57b28ac765"}, 0x15, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PIO_UNISCRNMAP(r6, 0x4b6a, &(0x7f00000003c0)="f159b371444c9601a632281059fbed290c49218dd25f1b598d03f1bbc199881ef0020a49160f21e3df6c5f828d990ce6868622efef812d26221a6f5f4803bffaedf2edb72c068a226c36b2ce7e50e14a61a5e4c688d17220005d15a37ff00e7fd83e3f41beab5df3107a51b50982d4af9a62d8fc467435f9a23c58c0ab9b61f89d2670f39dbb468d6cbc1c604067fc0a4db6c9629bbc379020607f0a36fc54271aadaa23ebe93cd92cefc2c0f1e5626bb6d753d1b59d927def6eae613d1be2e92fc8ed1b1b10c5c512941161fec5a809cd68be9ae4120ad0786f7f19c2e1743f2d5a102ba6bcbd3b83da154f4e370c12bddd") r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r7, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r7, 0x0) ioctl$ASHMEM_SET_NAME(r7, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff}) dup(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$getflags(r8, 0x81f) r10 = openat(r0, &(0x7f0000000580)='./file0\x00', 0x400500, 0x48) ioctl$TIOCMBIC(r10, 0x5417, &(0x7f0000000540)=0x3) dup(r9) getsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000800)={@mcast1, 0x0}, &(0x7f0000000300)=0x1) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'ifb0\x00', r11}) getpeername$unix(r8, &(0x7f0000000000), &(0x7f00000000c0)=0x6e) [ 546.717343] audit: type=1400 audit(1574736451.513:1475): avc: denied { dac_override } for pid=23135 comm="syz-executor.2" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 546.738440] audit: type=1400 audit(1574736451.543:1476): avc: denied { dac_override } for pid=23136 comm="syz-executor.4" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 546.746574] audit: type=1400 audit(1574736451.543:1477): avc: denied { dac_override } for pid=23135 comm="syz-executor.2" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 548.116069] binder: BINDER_SET_CONTEXT_MGR already set [ 548.116080] binder: 23187:23199 ioctl 40046207 0 returned -16 02:47:33 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x44000) openat$cgroup_int(r1, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x1bf, &(0x7f0000000340)={@flat=@weak_binder, @fda}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:47:33 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) 02:47:33 executing program 3: r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x9, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r2 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000140)=[{}, {r1}, {}], 0x3, &(0x7f0000000400), 0x0, 0x0) ioprio_get$pid(0x0, 0x0) getegid() ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000180)={'bridge_slave_0\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="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"]}) getgid() ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000640)=ANY=[@ANYBLOB="080000000000000004000000000006000000000000003e96075c000000000300000000000000a9d30000000000000000000000002127ab00000000000000000000020000000000339c0000000000000000000016a6000000006500010000000000000005000000000000000000000000000000000000000000000000030000000000000000000000000000ffffffff0000000002000000000000000300000000000000000000000000000000000000000000000030000000e926cf885c657c2626ec13e78c00000000000000000000000800f3eeb3b2ce7a283ab037e40e8362000000000000fdffffffffffffffff0700000000000000000000000000000000000000000000000400000000ae7932b200000000000000018c5c3ee46ee707445109000000000000000000000000000039bb00000000000000000000000000000000000000000000001000000000000000000000000000000180ffffffffffff06000000000000000800000000000000000000000001a172d730eee5c56bf8518d0f128fa3bae51a3ed116fb9420ccb8fda9ad7050c0fca3c069c20cb82416ea4adbcba3b23cfd98a05a10af143c0b584940ad68c6e55b64b1d76d6c414498a3e9a36c2ba2e8a059efd2e0914e897981866ba2dd63771ebef786073b1ad672272cf982195ef257676d8aa7082bf9bed7"]) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r7 = dup(0xffffffffffffffff) setsockopt$inet_int(r7, 0x0, 0x0, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_CAP_ACK(r7, 0x10e, 0xa, &(0x7f00000000c0)=0x19, 0x4) dup3(r6, 0xffffffffffffffff, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x25) clone(0x2102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) getpgid(0x0) 02:47:33 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) times(&(0x7f0000000080)) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001, 0x1}, {{@in6=@loopback, 0x0, 0x3c}, 0x0, @in=@empty}}, 0xe8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) gettid() io_setup(0x6, &(0x7f0000000140)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x3c) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x8000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r7, &(0x7f0000000000)=ANY=[], 0x323) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) r10 = dup2(r9, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup3(r12, r13, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) sendmsg$TIPC_CMD_GET_NODES(r14, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000020}, 0xc, &(0x7f0000000500)={&(0x7f0000000100)={0xfffffdc4, r11, 0x100, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0xfffffffffffffef5}, 0x1, 0x0, 0x0, 0x8084}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r10, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xa51040}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r11, 0x35c, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}}, 0x8000) sendmsg$TIPC_CMD_GET_LINKS(r7, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10820006a}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r11, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x1ff}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x2000044}, 0x44848) sendmsg$TIPC_CMD_SET_NETID(r6, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r11, 0x200, 0x70bd27, 0x25dfdbff, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x6d2394b4}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$TIPC_CMD_SET_NETID(r5, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x101000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r11, 0x812cd544175a38cc, 0x70bd2b, 0x25dfdbfe, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x400}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x2006801) io_submit(r4, 0x0, &(0x7f0000000040)) [ 548.886510] binder: BINDER_SET_CONTEXT_MGR already set [ 548.907373] binder: 23212:23215 ioctl 40046207 0 returned -16 [ 548.966402] binder: BINDER_SET_CONTEXT_MGR already set [ 548.976244] binder: 23212:23217 ioctl 40046207 0 returned -16 02:47:33 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000100)=0x9) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) mknodat(r2, &(0x7f00000001c0)='./file1\x00', 0x8000, 0x2) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x8) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@flat=@weak_binder, @fda}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000200)="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") socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$RTC_ALM_READ(r7, 0x80247008, &(0x7f0000000140)) [ 549.555822] binder: BINDER_SET_CONTEXT_MGR already set [ 549.584152] binder: 23230:23234 ioctl 40046207 0 returned -16 02:47:34 executing program 4: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, 0x0, &(0x7f00000004c0)) r0 = socket(0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg(0xffffffffffffffff, 0x0, 0x80) pipe(0x0) ioctl$PIO_FONT(r0, 0x4b61, 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'veth1_to_hsr\x00', 0x4}, 0x18) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0x1da9, 0x4) sendto$inet(r1, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) 02:47:34 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) clock_adjtime(0x3, &(0x7f00000001c0)={0x0, 0x1, 0x1, 0x7f, 0xa0a, 0x3, 0x68ee, 0x1000, 0xcd, 0x9, 0x7, 0x81, 0x2, 0x3ff, 0x7fff, 0x100, 0x2, 0x7ff, 0x7, 0x9, 0x5, 0x1, 0x8, 0xfffffffffffffff7, 0x280000, 0x3240}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@flat=@weak_binder, @fda}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000100)) 02:47:34 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) truncate(&(0x7f0000000240)='./bus\x00', 0x801) r2 = open(&(0x7f0000000540)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x8000ffffffff) creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fallocate(r3, 0x0, 0x7fff, 0x5f5) r6 = dup(r3) fchmodat(r6, &(0x7f0000000080)='./bus\x00', 0x10) lseek(r3, 0x0, 0x3) 02:47:34 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) 02:47:34 executing program 5: eventfd2(0x0, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0x1bc) r5 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f00000002c0)=0xffa0) r8 = open(&(0x7f0000000140)='.\x00', 0x0, 0x4) getdents(r8, &(0x7f0000000080)=""/36, 0x24) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags=0x6ac9e49cda8ac011}) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r10, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags=0x6ac9e49cda8ac011}) r11 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r11, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags=0x6ac9e49cda8ac011}) getsockopt$inet_IP_XFRM_POLICY(r11, 0x0, 0x11, &(0x7f0000000600)={{{@in=@empty, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in=@dev}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) sendmmsg(r13, &(0x7f0000004180), 0x0, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r14 = dup(r5) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0xa) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) r15 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r15, &(0x7f00000001c0)=@known='user.syz\x00', &(0x7f0000000000)='-\xf6\x8f1\x17\x1b\xcc\x9d\xefcm$\x00\x00\x00\x00', 0x10, 0x0) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r16 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r16, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r16, 0x80184540, &(0x7f0000000780)=""/114) r17 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r17, 0x0, 0x0) fcntl$dupfd(r2, 0x203, r17) r18 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r18, 0x6, 0x8, &(0x7f00000005c0)=0xfffffffffffffffe, 0xfffffffffffffe6d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0) setsockopt$inet6_tcp_int(r14, 0x6, 0x12, &(0x7f0000000380)=0x83, 0x1fb) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r14, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r19 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r19, 0x2007fff) sendfile(r14, r19, 0x0, 0x8000fffffffe) 02:47:35 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) 02:47:35 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) write$FUSE_POLL(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, 0x5, {0x3}}, 0x18) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000040)={0x8, 0x35, 0x2}, 0x8) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x1800) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x2800, 0xa) sendfile(r4, r5, 0x0, 0x80001d00c0d0) [ 550.206939] binder: BINDER_SET_CONTEXT_MGR already set [ 550.231015] binder: 23255:23256 ioctl 40046207 0 returned -16 02:47:35 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x1000) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0xb8, 0x0, &(0x7f00000004c0)=[@increfs_done={0x40106308, 0x1}, @increfs={0x40046304, 0x3}, @release, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/76, 0x4c, 0x0, 0x3f}, @fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/11, 0xb, 0x0, 0x1c}}, &(0x7f00000003c0)={0x0, 0x28, 0x40}}, 0x2040}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000400)={@fda={0x66646185, 0x7, 0x1, 0x5}, @fd={0x66642a85, 0x0, r1}, @flat=@handle={0x73682a85, 0x101, 0x2}}, &(0x7f0000000480)={0x0, 0x20, 0x38}}}, @register_looper], 0x89, 0x0, &(0x7f0000000580)="1c65aeb4ffa2d353ef72bcb1d36b4e49f6cc6893548bcf04f013ee60852b7ced40c8a2ee2bad87cb9c070a510bd14d973320d80c5ce54e496e4ca308d636715c5fd0630aa446067996b7da272fbff0812d4de5fd8d6fa74dcf707129ed24e70952d7d201ddcb1c666d3ca34f38271885c4f8942a7cd0fc0bc97c9e6de6e737625c37315f14778da251"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a627700000000000000000000000000000000000000008561646600000000000000000000000000000000000000000000100000000000852a627300"/80], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000018000000000000003800000000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) chroot(&(0x7f0000000100)='./file0\x00') getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000140)={@rand_addr, @multicast1}, &(0x7f00000001c0)=0xc) 02:47:35 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/icmp\x00') readv(r0, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000001600)={0x5, 0x8000, 0x5, 0x101, 0x9, 0x31aa}) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000001640)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0xd432}) pipe(0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$loop(0x0, 0x4, 0x51d00) write(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000001c0)) sendmsg(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000640)="24000000210007021dfdfd946f61", 0xe}], 0x1}, 0x0) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r5, 0x0) ioctl$ASHMEM_SET_NAME(r5, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) read(r6, &(0x7f0000000200)=""/250, 0x50c7e5e2) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r9 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) dup2(r9, r2) sendfile(r7, r8, 0x0, 0x80000001) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/icmp\x00') [ 550.880727] binder: BINDER_SET_CONTEXT_MGR already set 02:47:35 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x139) socket(0x10, 0x2, 0x0) syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c795) r0 = open(&(0x7f0000000e00)='./file1\x00', 0x0, 0x0) mount(&(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000200)='mountstats\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) 02:47:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) listen(r0, 0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0xe272701a2b625e12, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f00000002c0)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000240)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8000, 0x0, 0xff, 0x7, 0x0, 0x2000}, 0xffffffffffffffd1) socketpair$unix(0x1, 0x42c8ec7ff3a42412, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet6_int(r6, 0x29, 0x17, &(0x7f00000000c0)=0x8, 0x2bb) r7 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x6100) write$cgroup_type(r7, &(0x7f0000000200)='threaded\x00', 0x175d9189) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, 0x0, 0xffffffffffffffe3) connect$inet6(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f0000000540)="8d468862c2d327e6349e4453f5d1c98cb702ff210bd7ce624c9a066eb8063a72670d16efb28b13308b2477a71986fdf10e6b8e6ec13f64ce22714dcae3106d9c7904bcb6a1bbcfe959e34df8df7fcf04e9e5086091384538050a22349b20b73c2e4a00564b7a2470863d07c587ec81e867c867a5e267cd1d17cef27688ba4540fdfe622889def35ffe12707bdd9d47a9d3b8255507fd97eed440165245add2756a238c44e5edd2317c0366882726526998b5", 0xb2) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r9 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = accept$inet6(r11, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev}, &(0x7f00000001c0)=0x1c) ioctl$sock_inet_SIOCSIFFLAGS(r12, 0x8914, &(0x7f0000000000)={'veth1_\x03\x00\x00\x00\x00i\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r13 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r13, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) [ 551.538727] binder: BINDER_SET_CONTEXT_MGR already set [ 551.544078] binder: 23284:23287 ioctl 40046207 0 returned -16 [ 551.608520] binder: BINDER_SET_CONTEXT_MGR already set [ 551.613859] binder: 23284:23292 ioctl 40046207 0 returned -16 [ 551.640150] audit_printk_skb: 2151 callbacks suppressed [ 551.640159] audit: type=1400 audit(1574736456.443:2195): avc: denied { net_admin } for pid=2100 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 02:47:36 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) truncate(&(0x7f00000000c0)='./bus\x00', 0x1000) r2 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x4000000000020009) r3 = accept(0xffffffffffffffff, &(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x440) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000380)=ANY=[@ANYBLOB="020049009697edf08bda1a73b2505eb486137b1778a81762ad08c33bdab7292015104891065c0696d95a6f3bb8f69046202a50544c119fb40d25f730054bd056bef052424c8fa304f4e70a7002ff24ebc6f4e43ec1c3fec4a0bebe66051dc23571596778d7fbf98a48568464e8e5f75e456933ea50f80febfef13df4661a01891522c90f346106462b0ee6574db4f88fad898ad5fe16806f98368913b74cd3a6b91d31b0d682323d707c8d02c646aaf3a81ddcae9a94a1b301ef2fa35b0da0a8c3"]) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000240)=0x1c, 0x4) close(0xffffffffffffffff) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r5, 0x0, r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) prctl$PR_GET_NAME(0x10, &(0x7f0000000280)=""/80) ioctl$sock_inet6_udp_SIOCINQ(r9, 0x541b, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) [ 551.642204] audit: type=1400 audit(1574736456.443:2196): avc: denied { net_admin } for pid=2100 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 551.644067] audit: type=1400 audit(1574736456.443:2197): avc: denied { net_admin } for pid=2100 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 02:47:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{0x200000000006, 0x0, 0x6, 0xfffffffb}]}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000000)=0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) clone(0x2088c503, 0x0, 0x0, 0x0, &(0x7f00000001c0)="329117d380804892b12765d00559bfd10d") socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0) fchdir(r5) r6 = getuid() getresgid(&(0x7f0000003180), &(0x7f00000031c0)=0x0, &(0x7f0000003200)) fchown(r5, r6, r7) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100)=0x0) setreuid(r6, r8) 02:47:36 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000005c0)={'vlan0\x00', 0xd803}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'vlan0\x00\x00\xf6\xff\xff\xff\xff\xff\xff\xff\x00', {0x2, 0x0, @local}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010005fba000000000000100000000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) [ 551.645774] audit: type=1400 audit(1574736456.443:2198): avc: denied { net_admin } for pid=2100 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 02:47:37 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) [ 551.675500] audit: type=1400 audit(1574736456.473:2199): avc: denied { dac_override } for pid=23283 comm="syz-executor.5" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 551.682514] audit: type=1400 audit(1574736456.473:2200): avc: denied { dac_override } for pid=23290 comm="syz-executor.4" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 551.692765] audit: type=1400 audit(1574736456.493:2201): avc: denied { sys_admin } for pid=23282 comm="syz-executor.3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 02:47:37 executing program 4: r0 = epoll_create1(0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000001}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) eventfd2(0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/enforce\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x800000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) write$UHID_CREATE(r1, &(0x7f0000000140)={0x0, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa0\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb5\xac\x00\xef\x9e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfc\x05\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 'syz1\x00i\x00\x00\x00\x00\x00\x00\x00\f\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) [ 551.703821] audit: type=1400 audit(1574736456.513:2202): avc: denied { sys_admin } for pid=23282 comm="syz-executor.3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 551.714181] audit: type=1400 audit(1574736456.513:2203): avc: denied { dac_override } for pid=23282 comm="syz-executor.3" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 551.717498] audit: type=1400 audit(1574736456.513:2204): avc: denied { dac_override } for pid=23282 comm="syz-executor.3" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 02:47:37 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f0000000500)) pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x0) r3 = dup(0xffffffffffffffff) close(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f00000003c0)={{0x2, 0x3, 0x6, 0x0, 0x1000}, 0x9, 0x7f, 'id1\x00', 'timer1\x00', 0x0, 0x38, 0x4, 0xdcea4c4}) write$cgroup_int(r2, &(0x7f0000000300)=0x3, 0x12) prctl$PR_GET_TSC(0x19, &(0x7f0000000540)) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@flat=@weak_binder, @fda}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/v\x00\x00\x00\x00\x00\x00\x00\x00er\x00', 0x400000, 0x0) ioctl$ION_IOC_HEAP_QUERY(r5, 0xc0184908, &(0x7f0000000280)={0x34, 0x0, &(0x7f0000000240)}) accept4$unix(r5, &(0x7f00000001c0), &(0x7f0000000140)=0x6e, 0x400) 02:47:37 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x0, 0xffffffffffff3ffc}, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) r2 = accept4(r1, &(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000080)=0x80, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x6, {{0x2, 0x4e22, @rand_addr=0xc973}}}, 0x88) sendto$inet6(r1, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) ioperm(0x6, 0xff, 0xffffffffffffffe0) 02:47:38 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0xfffffffffffffffc}, @fd}, &(0x7f00000000c0)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0}) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00'}, 0x10) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r5, 0x0) ioctl$ASHMEM_SET_NAME(r5, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r1) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r8 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x2007fff) sendfile(r6, r8, 0x0, 0x8000fffffffe) [ 553.447519] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 553.498986] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 553.529844] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 553.563699] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 553.565550] binder: BINDER_SET_CONTEXT_MGR already set 02:47:38 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x98, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x68, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x2004400d}, 0x200c1) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@flat=@weak_binder, @fda}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 553.565560] binder: 23334:23338 ioctl 40046207 0 returned -16 [ 553.602570] binder_alloc: 22834: binder_alloc_buf, no vma [ 553.602592] binder: 23334:23338 transaction failed 29189/-3, size 80-24 line 3136 [ 553.639499] binder: BINDER_SET_CONTEXT_MGR already set 02:47:38 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000005c0)={'vlan0\x00', 0xd803}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'vlan0\x00\x00\xf6\xff\xff\xff\xff\xff\xff\xff\x00', {0x2, 0x0, @local}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010005fba000000000000100000000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) [ 553.639511] binder: 23334:23343 ioctl 40046207 0 returned -16 [ 553.680092] binder: 23337:23341 got transaction with invalid number of fds (-4) [ 553.680126] binder: 23337:23341 transaction failed 29201/-22, size 96-24 line 3278 [ 553.949878] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 02:47:38 executing program 2: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) write(r1, &(0x7f00000001c0), 0xfb120eb7) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) socket$inet6(0xa, 0x0, 0x0) ioctl$TIOCCONS(r1, 0x541d) r4 = socket$nl_route(0x10, 0x3, 0x0) fsetxattr$security_ima(r4, &(0x7f00000003c0)='security.ima\x00', 0x0, 0x0, 0x2) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @rand_addr=0x5}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) setitimer(0x0, &(0x7f0000000340)={{0x0, 0x7530}, {r6, r7/1000+10000}}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000580)={0x2000000000000104, &(0x7f0000000400)=[{0x6, 0x0, 0x4, 0x3}]}, 0xffffffffffffff08) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) lsetxattr$trusted_overlay_opaque(&(0x7f0000000440)='./file0\x00', &(0x7f00000004c0)='trusted.overlay.opaque\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) sendmmsg(r5, &(0x7f0000004b00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)="9033877ace25a0cd47de5752f2fe725302f5297240df794a3f9e8efd1c159b2bb4cfdc71f2cd4ccab950100494", 0x2d}, {0x0}, {&(0x7f00000002c0)="f7fc370763ed7a4dbfaf549cd1dc94c047d2bfd2da573ebddcf5db435637f045346375f1b75c21a0106605fa2c283aaa0014062099dc4b58d700b3a07dbc83010c24cb730b30aee0103d81b75a4f6ce90dd0237bd4b22d66e95966a0ad75b3f8338268b29e2dd7c90b5b33722b010ce947eab220e38600", 0x77}, {0x0}], 0x4}}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000080)="4326b5be4c72829e48001bfdce33d9a34689f07e340cec408be4e862cc21d93ea75e", 0x22}, {&(0x7f0000000b40)}, {0x0}, {&(0x7f0000000f40)="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", 0x357}], 0x4}}], 0x2, 0x80) sendto$inet(r5, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e5e2) [ 554.003397] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 554.063987] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 02:47:38 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000580)=0x6) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r1 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r1) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r8 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x2007fff) sendfile(r6, r8, 0x0, 0x8000fffffffe) [ 554.109446] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz1 [ 554.144033] binder: undelivered TRANSACTION_ERROR: 29201 02:47:39 executing program 4: unshare(0x20020000) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getdents(r1, &(0x7f0000000240)=""/234, 0xea) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000340)='./file0\x00', r2, &(0x7f00000003c0)='./file1\x00') [ 554.184999] binder: BINDER_SET_CONTEXT_MGR already set 02:47:39 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a627700000000000000000000000000000000000000008561646600000000000000000000000000000000000000000000000000000000852a627300"/80], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="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"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) [ 554.185026] binder: 23353:23354 ioctl 40046207 0 returned -16 [ 554.194407] binder_alloc: 22834: binder_alloc_buf, no vma [ 554.194431] binder: 23353:23354 transaction failed 29189/-3, size 80-24 line 3136 [ 554.235439] binder: BINDER_SET_CONTEXT_MGR already set [ 554.235452] binder: 23353:23357 ioctl 40046207 0 returned -16 [ 554.443901] binder: undelivered TRANSACTION_ERROR: 29189 [ 554.474540] binder: undelivered TRANSACTION_ERROR: 29189 [ 554.647420] binder: BINDER_SET_CONTEXT_MGR already set [ 554.688181] binder: 23364:23366 ioctl 40046207 0 returned -16 [ 554.738827] binder: BINDER_SET_CONTEXT_MGR already set [ 554.744171] binder: 23364:23370 ioctl 40046207 0 returned -16 02:47:39 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000140)=[@acquire, @decrefs={0x40046307, 0x3}], 0xb7, 0x0, &(0x7f00000001c0)="2bf9a1f6262a806d6b7309d02f484e7b9c455e7cc8f9dc8e7ba68c62bbff812db71a2d7a77afa7f161a7939aed286c62607073633daf0e1b0ec1857f97fbfdef465cb890fb65674a237a1deafefd41d4ddfb5f151b4520dc86817fd5dda986b19638a5c63276aeac8b4a5fa54c98cef90f9602ecdfa6db7608f6c34ad4f7a9ed1d795c06bc0779ac5229730075c53078698ce4dbecee03ea61639116c5743501b8bb12ae3c05a3a28d18d85bc68f09512c369f1881fe3c"}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000100)={0x8, 0x8, 0x3, 0x4, 0x15, 0x9, 0x92, 0x7f, 0x9, 0x1f}) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a627700000000000000000000000000000000000000008561646600000000000000000000000000000000000000000000000000000000852a627300"/80], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000018000000000000573800000000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) memfd_create(&(0x7f00000002c0)='/dev/binder#\x00', 0x6) 02:47:39 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') socket$inet(0x2, 0x1, 0x0) pipe(&(0x7f0000000040)) socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() open(&(0x7f00000002c0)='./bus\x00', 0x40000141041, 0x0) open(&(0x7f0000000240)='./bus\x00', 0x0, 0xe3) wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="0400cd80"], 0x4}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="07000000008001000000000000000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r2], 0x2c}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$INOTIFY_IOC_SETNEXTWD(r4, 0x40044900, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x0, 0x120, 0xffffffffffffffae}, 0x20) tkill(r1, 0x38) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$P9_RWALK(r6, &(0x7f00000003c0)={0xfffffffffffffc92, 0x6f, 0x2, {0x13b13b13b13b131d}}, 0xffffffffffffff65) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 02:47:39 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000580)=0x6) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r1 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r1) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r8 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x2007fff) sendfile(r6, r8, 0x0, 0x8000fffffffe) [ 555.240461] binder: BINDER_SET_CONTEXT_MGR already set [ 555.299110] binder: 23379:23382 ioctl 5441 0 returned -22 02:47:40 executing program 3: readv(0xffffffffffffffff, &(0x7f0000002340), 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f00000001c0)) setitimer(0x1, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x7530}}, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) accept$inet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) write(r1, &(0x7f0000000340)="4e0e25b561211d9ea321054aef46997621e931832c4a843b36b24460f63ea76cfa85ec", 0x23) read(r0, &(0x7f0000000200)=""/250, 0x50c7e5e2) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) dup2(0xffffffffffffffff, r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000280)=0x32, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @multicast2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = creat(&(0x7f0000000140)='./bus\x00', 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff}) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000005640)=[{{&(0x7f0000000400)={0xa, 0x4e20, 0x80000000, @empty, 0xffffffff}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000440)}, {&(0x7f0000001c80)="f127436c6765abeb8a4ed53d6d1eecac82a5ea1aecbf6d54b70f355333e9c94e68466a5fe1a0667cc5f6be906c3a40671d6593295e18674f20299db420f03fd6e61674b84fe77087a02a6bcb9604ec3b0e50a2fe490f8c1eb3bdf7235406dd1d262eb3bbd787442d9df413f67c702608fa323b5e0e36086d36c9d6cf059aab71d89ef3be6a76d50bb12a8d9b98c97a6832361b9c1c93ca22449c10d41eb886305ac43ba523b708beb65c52b3352708999f5e10f2f3f2bc7fa147bfdcb51ee4b25f815660797573b1a65c5498b1898b", 0xcf}, {&(0x7f0000001d80)="9569d55083f231f8988d537c0797bcce5d883f1a9fc2aaafb6d4997097e697c2136240ea9b4ae897b278ebf8ace7e1a3b4ca1239d1c08a0b96459295635c14e51ebc6e8c94a53ea448eabcafc08668239a799c9b1c976f2894d2032a9bbc76b513e6554f79e32ac729e6576f25c9380148443b603ea91a83249b4ea70e61030ae6dc096604d9b72a3ef7e1802dd0855a642a5a4cf94edf548fcb3a08f5ad9e794b21de48878347be9e33ee3d7f5e19bc6cd7b7f7d6bee00867c927d2cccd9ef2b0352bbddb97836484665e4fe8c3", 0xce}], 0x3}}, {{&(0x7f0000001e80)={0xa, 0x4e24, 0x5, @mcast1, 0xffffffc1}, 0x1c, &(0x7f0000001f40)=[{&(0x7f0000001ec0)="9f8359cf3c51df2e457dbd354be99b1652da5aa994a15656273b18f8fdae18f3953c70f659dfaafd27854ebf053993f83cd3fecd5fbce175c620c9ba995e95a888372034dadaf0d306dfd51a46858b782b34147e2eefe2640431f43cdd21eaa11db5faec99759c", 0x67}, {&(0x7f0000004380)="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", 0x1000}], 0x2, &(0x7f0000001f80)=[@flowinfo={{0x14, 0x29, 0xb, 0x2}}, @hopopts_2292={{0x70, 0x29, 0x36, {0x2f, 0xa, [], [@calipso={0x7, 0x18, {0x0, 0x4, 0x7, 0x7, [0x3, 0x7f]}}, @calipso={0x7, 0x38, {0x1, 0xc, 0x81, 0x33d, [0x4, 0x216, 0xb3, 0x52, 0x9, 0xfffffffffffffffb]}}]}}}], 0x88}}, {{&(0x7f0000002040)={0xa, 0x4e22, 0x1, @remote, 0x7f}, 0x1c, &(0x7f00000021c0)=[{&(0x7f0000002080)="cb7381a30f657dff0a33419d8020f47f43a545328dee0f80f370b2167d91355b8e0c3cc4bd2815bf758d9a2a38893c4fb5bf5c4b6c917cc47c1895a1cd49bb6cd62cb8c2259a83bd931825657afae5510a44a3057ec888be5409cbd34eab717ecffa9fa6e574c845f9f5dae8857be004f5720166db0032efd435a31382270aaf5828a0a83209a20cd686179f7e44dcf00300a58e606665161dc436e3b06d0a2cec1df49f661addf9d12f5a40fa", 0xad}, {0x0}], 0x2, &(0x7f0000002200)=[@flowinfo={{0x14, 0x29, 0xb, 0x9}}, @tclass={{0x14, 0x29, 0x43, 0x5}}, @rthdr={{0x28, 0x29, 0x39, {0x32, 0x2, 0x0, 0x4, 0x0, [@local]}}}, @rthdr={{0x78, 0x29, 0x39, {0x3b, 0xc, 0x0, 0x1, 0x0, [@mcast1, @rand_addr="2ba9bda188454d79c2772a4271075187", @rand_addr="3b33925ac6fc79971938722417688497", @rand_addr="f7b0bc223f0a3d1bce960d7e5497236e", @ipv4={[], [], @rand_addr=0xfffffffd}, @loopback]}}}], 0xd0}}, {{&(0x7f0000002300)={0xa, 0x4e21, 0xfffffffa, @mcast2, 0x5}, 0x1c, &(0x7f00000054c0)=[{&(0x7f0000005380)="b7eace4f3856e0e7f78bab37ebf56984f84042c290afd6eb414cb3273388b01263bf9d8619423ba545bf8bc363bb562a5d5ad2ce08f20d7120724b2bbe11af705f7c5544621eec31c05c0cc83957e70f0550be41e60753653872875a011d9d9d794153c36fb21620abe3207e512348b5", 0x70}, {&(0x7f0000005400)="c1351cf4c4fdfa7199d429fd113e695e38356246bea5684567c85dadd92b2361dce2c098d4a1c83ac5dd7cfb5acda377fb6c31b977543a66e2a2b65b5578c26042ab73461f290046ce77da67d1f71db3241ecf1926e15f2078f74f82dbbcee24b362aaae54b8395639bd45f87375393bd5ab0a648a03e3aa0c5948092e3107f6132ddb2e6cb6b729bab1462cfd75cf497e8de7c6f153041ab5fc4fa152b6b1e0a937bdd2c0", 0xa5}], 0x2, &(0x7f0000005500)=ANY=[@ANYBLOB="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"], 0x10e}}], 0x4, 0x0) recvmsg(r8, &(0x7f00000013c0)={&(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)=""/29, 0x1d}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000000240)=""/12, 0xc}], 0x3, &(0x7f0000000300)=""/67, 0x43}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = syz_open_dev$mice(0x0, 0x0, 0x0) r13 = syz_genetlink_get_family_id$nbd(0x0) r14 = creat(0x0, 0x0) ioctl$EVIOCGKEYCODE(r14, 0x80084504, 0x0) r15 = creat(0x0, 0x0) r16 = socket$inet(0x2, 0x80000, 0x6) setsockopt$sock_int(r16, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) pipe2(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0xe000) ioctl$LOOP_CHANGE_FD(r17, 0x4c00, r12) r18 = socket$inet(0x2, 0x80000, 0x6) setsockopt$sock_int(r18, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) sendmsg$NBD_CMD_STATUS(r12, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000001700)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r13, @ANYBLOB="000125bd7000fbdbdf25050000000c00040000100000000000000c000400dd170000000000000c00030000000100", @ANYRES32=r14, @ANYBLOB="4c00070008000100", @ANYRESHEX=r18, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0804000100", @ANYBLOB, @ANYPTR64=&(0x7f0000001600)=ANY=[], @ANYBLOB="08000100", @ANYRES32=r11, @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="0c00030005000000000000000c000400ff7f0000000000000800010000000000"], 0x11}, 0x1, 0x0, 0x0, 0x80}, 0x0) r19 = open(&(0x7f0000000500)='./bus\x00', 0x161042, 0xa1) close(r19) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r19, 0x0) r20 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000001440)='/selinux/status\x00', 0x0, 0x0) r21 = getpid() r22 = syz_open_procfs(r21, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r22, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) r23 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001480)='/selinux/checkreqprot\x00', 0x214503, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r9, &(0x7f00000015c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0x90, r13, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x132}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xd4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffd}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x44, 0x7, [{0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r19}, {0x8, 0x1, r20}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r22}, {0x8, 0x1, r23}]}]}, 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x6c08f5de7fc2edff}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r13, 0x400, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20005002) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x14, 0xa7, 0xfffffbff, 0x0, 0x21, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x3c) ptrace(0x537cb90df83a7d4c, 0x0) [ 555.355115] binder: 23379:23380 ioctl 40046207 0 returned -16 [ 555.413376] binder: BINDER_SET_CONTEXT_MGR already set [ 555.419090] binder: 23379:23382 ioctl 40046207 0 returned -16 02:47:40 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00{\xb8!2X7\x0e:\x83]\xa2\xc1\xef\xb7!\xff\xf3$\x92\xe9\x02ey\xa4\xfa\xc7Ss\x8a\x1bHa\x00\x19\x9d\xa5)\xec\xbd\x82\x1c\xc1y\x8a\xb1\x01\x96\x96\xbbD\xca\x1f\xf3}M\xdbq\xd3]\xfb\xd5\xc7\xac\xf4,\x9a\x88\xa5\x8f\x8cf\x8fn#\xde\xc65\\%4\a\xccsD\x00\xd0\xf9M6\xc4\x8aa\xedIL\'\xf9\x02\xd1\x96\x88\xbet\x97\xed\x06\xd8Tub5\x92\xf5\xeaJx\xe5\xd5x%n\x82\xd8\x9f\x81\xccG\xb2\xf7E\x93s\x9bk@<\xe1\x15\xf7\xad;\xdd\x16\x85\xe8{\xca\x19\x17\xa7\xefy\x99\xb4\xf0U\xde\x9f\xc5~{\"-x\x98\b\a\xd8\xba\xd1m\x9e\xc6r\"\xc3\xdeX;\x98\xa7\xf7QQ\x13@B\xad\x14\xfb\xa9\x9d\xb2\xd8IJ5\x87O\xb6k\x00\x8dv\x90\xed\x05\x80WL\x02)\x9c', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) close(r1) io_setup(0x40000000085, &(0x7f0000000040)=0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x44800) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000200)={0x1, 0x41, 0x3f, 0x0, 0xc}) ftruncate(r3, 0x108200) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x10000}]) 02:47:40 executing program 4: openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/mls\x00', 0x0, 0x0) pipe(&(0x7f00000006c0)) creat(&(0x7f0000000300)='./bus\x00', 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f0000000040)=@ipx, 0x3f7, &(0x7f0000000440)=[{0x0, 0xffffffffffffff5d}, {0x0}, {0x0}, {0x0, 0xa7}, {&(0x7f0000000400)=""/17, 0x2f2}], 0x5}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) clone(0x7f8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="40340e9bd8734cf10c57ccdbf2bb01402120149d0f34b268fde2aaf743392e20"], 0x18}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getpeername$packet(r6, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) r8 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0xc, 0x3f, 0x2da2, 0x3, 0x98, r4, 0x401, [], r7, r8, 0x2, 0x1}, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000700)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x38, 0x0, 0x1f, 0xcd23, 0x3, 0x3, 0x200, 0x1a1, 0x40, 0xaf, 0x3, 0x3ff, 0x38, 0x1, 0x8001, 0x80}, [{0x6474e551, 0x800, 0x7fffffff, 0x0, 0x0, 0xfffffffffffffff7, 0x3c75, 0x1}], "d5599951f6faeb88fd4ffe0d04454d816e7ccdf92506953ccf28b3e563028204dd1aa3161430f951b723c07239e131d528eab8b1118bea32be578717114ba9f5ceeae23db4d5fc36067be71025fd47bf66cd26ca5f80b2b24e27255a906f10cae3c1f6e5e63a4a3ee2b280f1a237a92fd618a572407fde3934ebbe109bb04bdc438922378de3e0c50d3510e62b654648eb3cd50054d98203a4e5385774366701befcd1935d904c7d99a731b2f98214c4fb72786410f81cd3210eefd807eaa6c499d7141edb62845cbda2c3c7e4587d338a3121b2", [[], [], [], [], [], [], [], [], []]}, 0xa4c) ptrace$cont(0x7, r1, 0x0, 0x0) [ 555.467672] binder: 23379:23389 ioctl 5441 0 returned -22 02:47:40 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKROSET(r4, 0x125d, &(0x7f0000000140)=0x20008) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@flat=@weak_binder, @fda}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:47:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl(r0, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b0071") socket$inet(0x10, 0x80003, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0xff81, &(0x7f0000000040)=[{&(0x7f0000000080)="24000000200307d16b1fbf02c489b2000202000a1f0000020028080008000c00e9110000280000001180ffffba16a0aa1c0900000000000012000040000000eff24d8238cfa47e89be8d37fd23f7efbf544a68c104b92d06485b79e2953d59586f5f434e737d48198402b096d0c90634bf81aa912ea0f6b724f5395deef26e8c4325c85c753c65bdcc007afdf9f9f27166052a5e", 0x2c2}], 0x1}, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000140)={@local}, &(0x7f0000000180)=0x8) write$cgroup_type(r2, &(0x7f00000001c0)='threaded\x00', 0x9) 02:47:40 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) [ 556.039143] binder: BINDER_SET_CONTEXT_MGR already set [ 556.088822] binder: 23401:23404 ioctl 40046207 0 returned -16 02:47:40 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x80) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f00000001c0)={{0x2, 0x0, 0x3d77060e, 0x0, 0x7f}, 0x9, 0x80000001, 0x200000001fffd}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@flat=@weak_binder, @fda}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:47:40 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r2}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00009300000000100c000200788e49f16750004008001b0000000000"], 0x34}}, 0x0) 02:47:41 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r1, &(0x7f0000000280)={0x7, 0x7b, 0x2}, 0x7) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r3, 0x2081fc) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r6, 0x0) read(r4, &(0x7f0000000000)=""/250, 0xedf1d44) r7 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(r7, 0x4, 0x40400) write$FUSE_WRITE(r7, &(0x7f0000000080)={0xfffffffffffffd7f}, 0x18) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) fcntl$setstatus(r2, 0x4, 0x6100) fdatasync(r1) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0xf642e7e) connect$inet(0xffffffffffffffff, &(0x7f0000005740)={0x2, 0x0, @empty}, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000200)={0x0, r1}) 02:47:41 executing program 3: r0 = memfd_create(&(0x7f0000000140)='ppp1+nodev![\x00', 0x0) write$P9_RSETATTR(r0, &(0x7f0000000040)={0x7}, 0x7) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7fffffd}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x10, r0, 0x2) mincore(&(0x7f0000005000/0x4000)=nil, 0x4000, &(0x7f0000000440)=""/15) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f00000000c0)) 02:47:41 executing program 4: r0 = socket(0x5, 0x80002, 0xfd) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000100)=0x10, 0xc1800) dup2(0xffffffffffffffff, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w^2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf0\xc1\xfb\xae\xb5\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93\x7f\xbc\x1a\x7f\xa90xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) [ 556.650858] audit: type=1400 audit(1574736461.453:2972): avc: denied { net_admin } for pid=2106 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 556.667136] audit: type=1400 audit(1574736461.463:2973): avc: denied { net_admin } for pid=23422 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 02:47:41 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write(0xffffffffffffffff, &(0x7f0000000000)="2400000052001f0014f9f407000904000a00071008000100ffffffff", 0x1c) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f0000000080)) [ 556.668136] binder: BINDER_SET_CONTEXT_MGR already set [ 556.668148] binder: 23420:23429 ioctl 40046207 0 returned -16 [ 556.677553] audit: type=1400 audit(1574736461.473:2974): avc: denied { sys_admin } for pid=2097 comm="syz-executor.1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 556.680101] audit: type=1400 audit(1574736461.483:2975): avc: denied { sys_admin } for pid=2097 comm="syz-executor.1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 02:47:42 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) signalfd(r0, &(0x7f0000000100)={0x3b}, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@flat=@weak_binder, @fda}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 556.685369] audit: type=1400 audit(1574736461.483:2976): avc: denied { sys_admin } for pid=2097 comm="syz-executor.1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 02:47:42 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) 02:47:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fremovexattr(r0, &(0x7f0000000000)=@known='trusted.overlay.metacopy\x00') [ 556.689891] audit: type=1400 audit(1574736461.493:2977): avc: denied { net_admin } for pid=23422 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 556.691532] audit: type=1400 audit(1574736461.493:2978): avc: denied { net_admin } for pid=23422 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 556.708076] audit: type=1400 audit(1574736461.503:2979): avc: denied { dac_override } for pid=23425 comm="syz-executor.5" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 556.717364] audit: type=1400 audit(1574736461.503:2980): avc: denied { sys_admin } for pid=2097 comm="syz-executor.1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 02:47:42 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77622a85, 0xa}, @fda}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 556.733775] audit: type=1400 audit(1574736461.533:2981): avc: denied { net_admin } for pid=2097 comm="syz-executor.1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 02:47:42 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xffe0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000040), 0x0) close(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x4fff}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x800, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000010005fba0009008d2633568e00000000", @ANYBLOB="ea758b8a067a00193e2bd32ef3ce474f4018a3e3fd3bb646ca3f44fc2076986e9e01d6373066409043b8006834eb215fa6c960eb90bff61d674f609dfbad62d1810a1f042086185d767dfeff4b17941ea5a09348ca7546195aa46901d9f01d2fefbc062cb4862d603c3f6b7a08d2c06703d0774e5d67190619d15ec5ff175125836c307db7034d427db11d1f6e7758c2f7c4779516740716ce693b9b51745b78fe9ee047d446049ab0579a71f86af67b99d289c4f8744acf8b67c4a220d82e73f0d188d38623f93edc1b7c7fdead06a2793ad0b0eb3f4c1e8a44", @ANYBLOB="030000000000000008001b0000000000"], 0x3}}, 0x0) pipe(0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x0) splice(r8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write(r7, &(0x7f00000001c0), 0xfffffef3) read(r6, &(0x7f0000000b80)=""/270, 0xb37af43) sendfile(r0, r5, &(0x7f0000d83ff8), 0x8000fffffffe) dup(0xffffffffffffffff) [ 557.114147] binder: BINDER_SET_CONTEXT_MGR already set [ 557.114159] binder: 23437:23439 ioctl 40046207 0 returned -16 [ 557.142524] binder_alloc: 22834: binder_alloc_buf, no vma [ 557.142549] binder: 23437:23439 transaction failed 29189/-3, size 80-24 line 3136 02:47:43 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/context\x00', 0x2, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x4, 0x0) getpgrp(0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x8, 0xfa}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x1}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 557.143292] binder: undelivered TRANSACTION_ERROR: 29189 [ 557.179153] binder: BINDER_SET_CONTEXT_MGR already set [ 557.179165] binder: 23437:23442 ioctl 40046207 0 returned -16 [ 557.450991] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 02:47:43 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) [ 557.451106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23445 comm=syz-executor.2 [ 557.451162] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23445 comm=syz-executor.2 02:47:43 executing program 3: add_key(&(0x7f0000000000)='encrypted\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) clone(0x4001ffff, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='sched\x00.\xb59\xba\xc3\xcd\xfb\xd2\a\xd2\xa5\xbf\xb9\xe1\xd0\xd1jW\xdeV\xa4\x93\xbb\xe6S\xc0Dh04V\x9b\xea\xa5\xbfrw]\xc9K^\xaf\xbb\n6&\xebo,]\xe3S\xb35<*:\x11T') preadv(r3, &(0x7f00000017c0), 0x199, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 557.451218] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23445 comm=syz-executor.2 [ 557.451280] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23445 comm=syz-executor.2 [ 557.451332] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23445 comm=syz-executor.2 [ 557.451383] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23445 comm=syz-executor.2 [ 557.451434] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23445 comm=syz-executor.2 [ 557.451496] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23445 comm=syz-executor.2 [ 557.451549] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23445 comm=syz-executor.2 [ 557.451598] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23445 comm=syz-executor.2 [ 557.848249] binder: BINDER_SET_CONTEXT_MGR already set [ 557.848262] binder: 23448:23451 ioctl 40046207 0 returned -16 [ 557.885975] binder_alloc: 22834: binder_alloc_buf, no vma [ 557.886002] binder: 23448:23451 transaction failed 29189/-3, size 80-24 line 3136 [ 557.886696] binder: undelivered TRANSACTION_ERROR: 29189 [ 557.912254] binder: BINDER_SET_CONTEXT_MGR already set [ 557.912267] binder: 23448:23454 ioctl 40046207 0 returned -16 [ 558.521477] binder: BINDER_SET_CONTEXT_MGR already set [ 558.521489] binder: 23465:23469 ioctl 40046207 0 returned -16 [ 558.528735] binder_alloc: 22834: binder_alloc_buf, no vma [ 558.528758] binder: 23465:23469 transaction failed 29189/-3, size 80-24 line 3136 [ 558.529434] binder: undelivered TRANSACTION_ERROR: 29189 [ 558.549734] binder: BINDER_SET_CONTEXT_MGR already set [ 558.549746] binder: 23465:23470 ioctl 40046207 0 returned -16 02:47:44 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0xfc}, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000380)={0xa, 0x4e24, 0xfffffffc, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) close(r2) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001d0075ed050000000000000002000000", @ANYRES32=r5, @ANYBLOB="34cfc4400c0001"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xd87ca2d) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 02:47:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) dup2(r0, 0xffffffffffffffff) listen(r0, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x4e22, 0x8, @loopback, 0x225}, 0x1c) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) write(r1, &(0x7f0000000340), 0xffffffec) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080), 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r3, 0x2008002) sendfile(r2, r3, 0x0, 0x8000fffffffe) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r4, r5, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x3, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x40000000000}}, 0xa0) r6 = socket(0x11, 0x800000003, 0x1e) bind(r6, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$void(r6, 0x70604c0bad6ed202) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r2, r4, r7) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000001c0), 0xfffffeda) r10 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r10, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 02:47:44 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10020080}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000220000042dbd7000fddbdf2502008009010000000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x4801) r3 = creat(&(0x7f0000000040)='./file0\x00', 0xabbc238f98db74e4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000080)={0x2, 'veth0\x00'}, 0x18) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f00000000c0)={'nr0\x00', {0x2, 0x4e20, @remote}}) 02:47:44 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) 02:47:44 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x280800, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x198, r2, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x134, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff6c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffc00}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x76}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x360}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6b0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x23}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) getsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f00000003c0), &(0x7f0000000400)=0x4) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000440)=0xeb) pipe2$9p(&(0x7f0000000480), 0x800) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000004c0)={0x6, 0xfffffffc, 0x2, 0x8, 0x14, 0x4, 0x3, 0x8, 0x5, 0x93c, 0xfff, 0x6b}) r3 = add_key(&(0x7f0000000500)='id_legacy\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)="92fb273ad8e9ffaa8f90c6de8ea77fa766abb6b1dcaff2450a746b6a3d3ff179b3023f86670897c02639d727c3091c7dc5a272e2dc36c163a5b6899b3047511df7a667599b4f968e489bee09cf43fc7c8cc4fd9cd7441d55fcfd1bda8db2a1c3", 0x60, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000000700)=0xe8) keyctl$chown(0x4, r3, r4, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000780)={'ip_vti0\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000007c0)={@in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x20, 0x0, "eea75830f782e67dde1fbce6a15a50ab5a39938f66fbf00ba80714aa7be2749d82b349a6263ab3d6c28b5caa9b00f2e54f6bd09809e2a33c2c742732590548ce38d04a9765faa2fbf412fab47eef211f"}, 0xd8) pipe2(&(0x7f00000008c0)={0xffffffffffffffff}, 0x84000) timerfd_gettime(r6, &(0x7f0000000900)) r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000940)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(r7, 0x894b, &(0x7f0000000980)) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000009c0)) ptrace(0x1, 0x0) r8 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000a00)='/selinux/checkreqprot\x00', 0x20c000, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r8, &(0x7f0000000c40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x13c, r9, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x58, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa2f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbaa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x37}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4dc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x73e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9b89}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb35c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7cf}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x5d7f7b58f39188bb) r10 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, r10) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000c80)=""/247) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000d80)=0x1) r11 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000dc0)='/selinux/mls\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r11, 0x400454d1, &(0x7f0000000e00)={0x1, 0x5, [@empty, @empty, @dev={[], 0x1e}, @broadcast, @random="498452881c1a"]}) [ 559.905269] binder: BINDER_SET_CONTEXT_MGR already set [ 559.937011] binder: 23499:23506 ioctl 40046207 0 returned -16 02:47:44 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2172, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x810210c}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[]}, 0x1, 0x0, 0x0, 0xdaf91aa8ad5e2420}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x1) ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50x0}) prctl$PR_CAPBSET_READ(0x17, 0x24) getresgid(&(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000380)) fchown(r2, r3, r4) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r5, 0x0) ioctl$ASHMEM_SET_NAME(r5, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff}) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r7, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r7, 0x0) ioctl$ASHMEM_SET_NAME(r7, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) [ 560.118641] binder: BINDER_SET_CONTEXT_MGR already set [ 560.124910] binder: 23499:23511 ioctl 40046207 0 returned -16 [ 560.259557] binder: 23499:23511 unknown command 1717991472 [ 560.266435] binder: 23499:23511 ioctl c0306201 20000180 returned -22 02:47:45 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@flat=@weak_binder, @fda={0x66646185, 0x0, 0xfffffffffffffffe}}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:47:45 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000140)={0x1f, 0xffffffff, 0x7, 0x6, 0x1a, 0x7, 0xa0, 0x7, 0x0, 0x4, 0x1, 0x400}) r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x20008088) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000000)={0x20, 0x6, 0xcc87, 0x5, 0x9, 0x9, 0x24, 0xa1, 0x9, 0x401, 0x400, 0xfffffffc}) write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0x100000198) r7 = getpid() lseek(0xffffffffffffffff, 0x0, 0x1) sched_setscheduler(r7, 0x5, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x202, 0xdd) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x4, 0x0, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) io_submit(0x0, 0x1, &(0x7f0000001480)=[0x0]) eventfd(0x0) sendfile(r1, r4, 0x0, 0x8000fffffffe) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 02:47:45 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fdinfo/3\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92v\xf9\xba\xf4\x12\r\"^\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea\x00'/247) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) shutdown(r0, 0x1) [ 561.886428] audit: type=1400 audit(1574736466.683:3680): avc: denied { sys_admin } for pid=2103 comm="syz-executor.2" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 02:47:46 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000100)={0x2}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a627700000000000000000000000000000000000000008561646600000000000000000000000000000000000000000000000000000000852a627300"/80], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000018000000000000003800000000000000"], @ANYBLOB="0000dd0000000000"], 0x0, 0x0, 0x0}) 02:47:46 executing program 3: openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x323) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r3 = getpid() ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000400)) sched_setscheduler(r3, 0x5, &(0x7f0000000180)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) r5 = socket(0x10, 0x80002, 0x0) bind$netlink(r5, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r5, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) connect$netlink(r5, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x90) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCOUTQNSD(r7, 0x894b, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) write$P9_RSTAT(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="6c0000007e010000d9df5ebd7ee649a7f0bd31005500000000000000030300000004000000000000000000000000000081c89138e87587000100160000000000008083234f002fa9656c696e04002f706f6c69637975782f"], 0x4d) sendto(r5, &(0x7f0000000340), 0xac, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000500)='TIPC\x00') ioctl(r0, 0x8, &(0x7f0000000580)) write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r8, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r8, 0x0) ioctl$ASHMEM_SET_NAME(r8, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) 02:47:46 executing program 2: r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'team_slave_1\x00', 0x8000}) removexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') [ 561.920666] audit: type=1400 audit(1574736466.723:3681): avc: denied { sys_admin } for pid=2106 comm="syz-executor.4" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 561.980639] audit: type=1400 audit(1574736466.783:3682): avc: denied { net_admin } for pid=2103 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 02:47:46 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) fadvise64(r0, 0x3f, 0x100, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000140)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) iopl(0x22) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="cc000000190000000000000000000000ac1e0001000000000000000000000000fe88000000000700000000000000000100000000000000000a00000000000000b19a51f4f749e060252cb170a80293f2c6982d1eef36000c44196b0f383c29bb044a258cad190e2ee500f4946e804895183a68a3401009ce283f3ab0bcdf74f8c7187ceab1779214cfd117f8596a2a262743c1d79c3f4408d19966db1f5ddf6c39d83f8cbe582f83c7b51f75df4cf80f33ccb859c37afc1580a9236a9cbf174ad45e3eaf609509d48e51d0119c2bbae6f8", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014000d0000000000000000000000ffffe0000001"], 0xcc}, 0x8}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x4000, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'nr0\x00'}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000027c0)={@remote, @broadcast}, &(0x7f0000002800)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002a80)={'rose0\x00'}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r4 = openat$null(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_procfs(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000002bc0)={{{@in=@initdev, @in6=@mcast2}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000300)=0xe8) r6 = socket(0x10, 0x80002, 0x0) getsockopt$netlink(r6, 0x10e, 0x9, 0x0, &(0x7f0000000280)) r7 = socket(0x10, 0x80002, 0x0) getsockopt$netlink(r7, 0x10e, 0x9, 0x0, &(0x7f0000000280)) r8 = socket(0x10, 0x80002, 0x0) getsockopt$netlink(r8, 0x10e, 0x9, 0x0, &(0x7f0000000280)) getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000ac0)={{{@in=@empty}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000002f40)=0xe8) syz_open_dev$mice(0x0, 0x0, 0xa4bcd6ca7f9c8017) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') mkdirat(r9, &(0x7f0000000040)='./file0\x00', 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@multicast1, @in=@remote}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f0000000340)=0x132) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, 0x0, &(0x7f00000033c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getpeername$packet(r1, &(0x7f0000003840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000003880)=0x14) open(&(0x7f00000007c0)='./file0\x00', 0xc580, 0x0) accept4$packet(r1, 0x0, 0x0, 0x0) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) sendto$inet(r2, 0x0, 0x47, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(r2, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x3e1) setsockopt$sock_int(r2, 0x1, 0x1000000000008, &(0x7f0000000000)=0xda9, 0x4) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) [ 562.035301] audit: type=1400 audit(1574736466.813:3687): avc: denied { net_admin } for pid=2103 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 02:47:47 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) [ 562.046060] binder_alloc: 22834: binder_alloc_buf, no vma [ 562.046087] binder: 23555:23558 transaction failed 29189/-3, size 80-24 line 3136 [ 562.046784] binder: undelivered TRANSACTION_ERROR: 29189 [ 562.100328] binder: BINDER_SET_CONTEXT_MGR already set [ 562.100342] binder: 23555:23558 ioctl 40046207 0 returned -16 [ 562.476810] binder: BINDER_SET_CONTEXT_MGR already set [ 562.493684] binder: 23567:23568 ioctl 40046207 0 returned -16 02:47:47 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/d\x00\x04\xe7\xff\xff\xff\xcf\xder#\xf0', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00') preadv(r3, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00') ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0xc38b9f961ef00e53, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10, {0x2, 0x4e23, @loopback}, 'syzkaller0\x00'}) preadv(r4, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) write$P9_RCLUNK(r4, &(0x7f00000000c0)={0x7, 0x79, 0x1}, 0x7) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r5, 0x0) ioctl$ASHMEM_SET_NAME(r5, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KDGETLED(r7, 0x4b31, &(0x7f0000000100)) io_setup(0x8000009, &(0x7f0000000180)) prctl$PR_SET_SECUREBITS(0x1c, 0x33) r8 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_type(r8, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r8, 0x660c) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_void(r9, 0x1, 0x36, 0x0, 0x0) [ 563.891863] selinux_nlmsg_perm: 564 callbacks suppressed [ 563.891876] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23559 comm=syz-executor.3 02:47:49 executing program 5: ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000100)={'NETMAP\x00'}, 0x0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) open(0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x100000028) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ioctl$void(0xffffffffffffffff, 0x0) setns(r1, 0x0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r1) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/member\x00', 0x2, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfffffc8f) tee(r4, r3, 0x100000000, 0x0) tee(r2, r5, 0x80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = gettid() ptrace$setopts(0x4206, r8, 0x0, 0x0) tkill(r8, 0x80003c) ptrace$cont(0x18, r8, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) getpeername$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x8) ptrace$setregs(0xd, r8, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r8, 0x0, 0x0) r11 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r11, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r11, 0x0) ioctl$ASHMEM_SET_NAME(r11, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) 02:47:49 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0) fchdir(r3) r4 = getuid() getresgid(&(0x7f0000003180), &(0x7f00000031c0)=0x0, &(0x7f0000003200)) fchown(r3, r4, r5) write$FUSE_CREATE_OPEN(r2, &(0x7f00000001c0)={0xa0, 0xffffffffffffffda, 0x4, {{0x3, 0x0, 0x3, 0x6, 0x0, 0x3, {0x4, 0x20, 0x40, 0x5, 0x5, 0x7, 0x80000001, 0x7, 0x2, 0x8, 0x1, r4, 0xee01, 0x7, 0x4}}, {0x0, 0xc}}}, 0xa0) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TCSETA(r6, 0x5406, &(0x7f0000000040)={0x6, 0x81, 0xe6, 0x800, 0x17, 0x80, 0x7f, 0x5, 0x4, 0x3}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="11000000000000000000000000000000000000000000000000000000000050000019000000000018000000000000e0ffffff00000043b9e12d9a38f056c170be0a7c7a49d8f27bdf4a75b389de4daeea1a601f912c5b7f4d56d9c325a06f9d6af66cb2cfe92901bb307e70f69507c4fe11bf6153abb33b3f89616bda35dd9a6733a742097845d044cf5204aeb8cfe2c7da044d306801f7eabaca54065ba3b4d811646799698994746060ab8ed0fb1424e3a906e37786d9082688268f577c323ec6d1a60b25", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a627700000000000000000000000000000000000000008561646600000000000000000000000000000000000000000000000000000000852a627300"/80], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000018000000000000003800000000000000"], @ANYBLOB="0000000000070000df48968018cdf804d225e967237cfccc4b801537d3df54b952739ef142b648239024bb739a3b193cb8a1925ff07aa66263705b8cef1bf73ae269fb508a2b2bfe2bdede4c177f41178d3bcdbe848e51c25c0f175d14a9001bd9fd27d850bdb82fe7a0377136e2d2402f0cf17dbb723755d1b26bc6fb1e42dd8c444dfa13c633b5089def43dde1a70605c753f1b553a4871b0caf460bca76e0b8076ffd518a0d62c799d088b7080f"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) write$selinux_user(r9, &(0x7f0000000100)={'system_u:object_r:zero_device_t:s0', 0x20, 'sysadm_u\x00'}, 0x2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$TIOCGISO7816(r11, 0x80285442, &(0x7f0000000140)) [ 564.663413] binder: BINDER_SET_CONTEXT_MGR already set [ 564.708340] binder: 23607:23610 ioctl 40046207 0 returned -16 02:47:50 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000100)='TRUE', 0x4, 0x2) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0) write$P9_ROPEN(r2, &(0x7f00000001c0)={0x18, 0x71, 0x1, {{0x0, 0x3, 0x3}, 0x1000}}, 0x18) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xdc, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11632da05354444dc948400000000000000000000000000016b658ec4be50000000000000000000000000000000000200050006f9b0000000000dd447694381ea5a8cf877f7b1754d053cd34d330f30f40ac74656ae3cb24e5ae62fdf04ce8986bdcd29f8ff0e136e84869a40a01dd4a5db6b9cb0f4f695d1910ca71717c40876a3d053a12e141875e7c0d72719cd493914d0a70ad1d9830f6e71d9ea0375e0221f38a23cd11189c40bbc025aadfad2ca6f646a39929b4ba698706f65e916beff39d9816", @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRESOCT], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESDEC], @ANYBLOB="00000000000020bc16e758e1516922223f11fc00fb"], 0x0, 0x0, 0x0}) 02:47:50 executing program 3: openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x323) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r3 = getpid() ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000400)) sched_setscheduler(r3, 0x5, &(0x7f0000000180)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) r5 = socket(0x10, 0x80002, 0x0) bind$netlink(r5, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r5, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) connect$netlink(r5, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x90) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCOUTQNSD(r7, 0x894b, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) write$P9_RSTAT(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="6c0000007e010000d9df5ebd7ee649a7f0bd31005500000000000000030300000004000000000000000000000000000081c89138e87587000100160000000000008083234f002fa9656c696e04002f706f6c69637975782f"], 0x4d) sendto(r5, &(0x7f0000000340), 0xac, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000500)='TIPC\x00') ioctl(r0, 0x8, &(0x7f0000000580)) write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r8, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r8, 0x0) ioctl$ASHMEM_SET_NAME(r8, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="cc000000190000000000000000000000ac1e0001000000000000000000000000fe88000000000700000000000000000100000000000000000a00000000000000b19a51f4f749e060252cb170a80293f2c6982d1eef36000c44196b0f383c29bb044a258cad190e2ee500f4946e804895183a68a3401009ce283f3ab0bcdf74f8c7187ceab1779214cfd117f8596a2a262743c1d79c3f4408d19966db1f5ddf6c39d83f8cbe582f83c7b51f75df4cf80f33ccb859c37afc1580a9236a9cbf174ad45e3eaf609509d48e51d0119c2bbae6f8", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014000d0000000000000000000000ffffe0000001"], 0xcc}, 0x8}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x4000, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'nr0\x00'}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000027c0)={@remote, @broadcast}, &(0x7f0000002800)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002a80)={'rose0\x00'}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r4 = openat$null(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_procfs(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000002bc0)={{{@in=@initdev, @in6=@mcast2}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000300)=0xe8) r6 = socket(0x10, 0x80002, 0x0) getsockopt$netlink(r6, 0x10e, 0x9, 0x0, &(0x7f0000000280)) r7 = socket(0x10, 0x80002, 0x0) getsockopt$netlink(r7, 0x10e, 0x9, 0x0, &(0x7f0000000280)) r8 = socket(0x10, 0x80002, 0x0) getsockopt$netlink(r8, 0x10e, 0x9, 0x0, &(0x7f0000000280)) getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000ac0)={{{@in=@empty}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000002f40)=0xe8) syz_open_dev$mice(0x0, 0x0, 0xa4bcd6ca7f9c8017) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') mkdirat(r9, &(0x7f0000000040)='./file0\x00', 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@multicast1, @in=@remote}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f0000000340)=0x132) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, 0x0, &(0x7f00000033c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getpeername$packet(r1, &(0x7f0000003840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000003880)=0x14) open(&(0x7f00000007c0)='./file0\x00', 0xc580, 0x0) accept4$packet(r1, 0x0, 0x0, 0x0) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) sendto$inet(r2, 0x0, 0x47, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(r2, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x3e1) setsockopt$sock_int(r2, 0x1, 0x1000000000008, &(0x7f0000000000)=0xda9, 0x4) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 02:47:50 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000700)='/selinux/context\x00', 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x6d, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r1, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000640)={0x1, &(0x7f0000000600)=[{0x1c, 0x0, 0x0, 0x9}]}) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000680)='trusted.overlay.origin\x00', &(0x7f00000006c0)='y\x00', 0x2, 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x8000, 0x0) 02:47:50 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) 02:47:50 executing program 5: ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000100)={'NETMAP\x00'}, 0x0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) open(0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x100000028) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ioctl$void(0xffffffffffffffff, 0x0) setns(r1, 0x0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) [ 566.692835] audit_printk_skb: 1533 callbacks suppressed [ 566.692843] audit: type=1400 audit(1574736471.493:4199): avc: denied { net_admin } for pid=2100 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 02:47:51 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x6) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000200)) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={0x0, r3, 0x1b}, 0x10) write$evdev(r3, &(0x7f00000003c0)=[{{}, 0x5, 0xa33, 0xa5e}, {{}, 0x0, 0x48a0, 0x7f}, {{0x0, 0x7530}, 0x1, 0x2, 0x9a8}, {{0x0, 0x7530}, 0x4, 0x5, 0x5}, {{0x77359400}, 0x0, 0x65d3, 0x3}, {{r5, r6/1000+10000}, 0xfdd5c09d2a006b89, 0x3a, 0x10000}, {{r7, r8/1000+10000}, 0x17, 0x8000, 0x2}, {{}, 0x4, 0x7, 0x7}, {{}, 0x0, 0x6, 0x2}], 0xfffffe94) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a627700000000000000000000000000000000000000008561646600000000000000000000000000000000000000000000000000000000852a627300"/80], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000001800000000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) [ 566.715504] binder: BINDER_SET_CONTEXT_MGR already set [ 566.715517] binder: 23652:23654 ioctl 40046207 0 returned -16 [ 566.731787] audit: type=1400 audit(1574736471.513:4200): avc: denied { dac_override } for pid=23652 comm="syz-executor.1" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 566.795058] audit: type=1400 audit(1574736471.593:4201): avc: denied { call } for pid=23652 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 566.795094] binder_alloc: 22834: binder_alloc_buf, no vma [ 566.795117] binder: 23652:23654 transaction failed 29189/-3, size 80-24 line 3136 [ 566.801703] binder: undelivered TRANSACTION_ERROR: 29189 [ 566.821647] audit: type=1400 audit(1574736471.623:4202): avc: denied { net_raw } for pid=23632 comm="syz-executor.4" capability=13 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 566.836620] binder: BINDER_SET_CONTEXT_MGR already set [ 566.836636] binder: 23652:23656 ioctl 40046207 0 returned -16 [ 566.845750] audit: type=1400 audit(1574736471.643:4203): avc: denied { dac_override } for pid=23652 comm="syz-executor.1" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 566.893855] audit: type=1400 audit(1574736471.703:4204): avc: denied { sys_admin } for pid=2097 comm="syz-executor.1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 566.895683] audit: type=1400 audit(1574736471.703:4205): avc: denied { sys_admin } for pid=2097 comm="syz-executor.1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 566.942896] audit: type=1400 audit(1574736471.743:4206): avc: denied { sys_admin } for pid=2097 comm="syz-executor.1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 02:47:52 executing program 2: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 02:47:52 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getpeername$unix(r1, &(0x7f00000000c0)=@abs, &(0x7f0000000040)=0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x11, 0x1a001000000}, [@ldst]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) [ 566.996315] audit: type=1400 audit(1574736471.783:4207): avc: denied { sys_admin } for pid=2097 comm="syz-executor.1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 02:47:52 executing program 1: mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a627700000000000000000000000000000000000000008561646600000000000000000000000000000000000000000000000000000000852a627300"/80], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000018000000000000003800000000000000"], @ANYBLOB="0000000000000093"], 0x0, 0x0, 0x0}) [ 567.053637] audit: type=1400 audit(1574736471.853:4208): avc: denied { net_admin } for pid=2097 comm="syz-executor.1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 567.390460] binder: BINDER_SET_CONTEXT_MGR already set [ 567.390471] binder: 23658:23659 ioctl 40046207 0 returned -16 02:47:52 executing program 4: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) recvmmsg(r0, &(0x7f0000001800)=[{{0x0, 0xffffffffffffffd7, 0x0}}], 0x1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$P9_RREADDIR(r5, &(0x7f0000000340)={0x122, 0x29, 0x2, {0x7ff, [{{0x68, 0x3, 0x4}, 0x8b49, 0x1, 0x7, './file0'}, {{0x39, 0x3, 0x5}, 0x8001, 0x8, 0x7, './file0'}, {{0x80, 0x3, 0x8}, 0x6, 0x1, 0x7, './file0'}, {{0x2, 0x3, 0x7}, 0x40, 0x87, 0x7, './file0'}, {{0x80, 0x0, 0x3}, 0x9, 0x20, 0x7, './file0'}, {{0x9, 0x0, 0x1}, 0x7, 0x8, 0x7, './file0'}, {{0x0, 0x3, 0x5}, 0xe8, 0x0, 0x7, './file0'}, {{0x18, 0x3, 0x5}, 0x800, 0x7, 0x7, './file0'}, {{0x120, 0x3, 0x3}, 0x8, 0x41, 0x7, './file0'}]}}, 0x122) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$NS_GET_OWNER_UID(r7, 0xb704, &(0x7f0000000080)=0x0) fstat(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r3, r8, r9) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[]}}, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 568.313533] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23651 comm=syz-executor.3 02:47:53 executing program 3: pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x200000100000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x148, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0xe, 0x12, @sit={{0x0, 0x1, 'sit\x00'}, {0x0, 0x2, [@IFLA_IPTUN_FLAGS={0x22c, 0x8, 0x19}, @IFLA_IPTUN_LOCAL={0x0, 0x2, @remote}, @IFLA_IPTUN_PROTO, @IFLA_IPTUN_LOCAL={0x0, 0x2, @empty}, @IFLA_IPTUN_FLAGS]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r9}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @dev}]}, 0x28}}, 0x0) bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @random="962c85e043d8"}, 0xc) fcntl$setsig(r5, 0xa, 0x2b) r10 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r11 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400400, 0x0, 0x1, 0x9, 0x2, 0x8}, 0x20) r12 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r12, r12, &(0x7f00000002c0)=0x202, 0xdd) getpeername$packet(r12, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r11, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r13}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r13}) bind$packet(r10, &(0x7f00000003c0)={0x11, 0x4, r13, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14) lseek(r3, 0x0, 0x2) sendfile(r3, r10, 0x0, 0xfffffffffffffffc) sendfile(r3, r10, &(0x7f0000000040), 0x8000fffffffe) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8005) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r15, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) ioctl$TUNSETTXFILTER(r15, 0x400454d1, &(0x7f00000004c0)=ANY=[@ANYBLOB="eeff5e57ff7f000000000000c44c5f82adfdf371f401fc3300"]) r16 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r16, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) ioctl$TUNSETTXFILTER(r16, 0x400454d1, &(0x7f0000000100)) r17 = accept4$inet6(r5, 0x0, &(0x7f0000000140), 0x0) fstat(r17, &(0x7f0000000740)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = socket(0x200000100000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r18, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r19, &(0x7f0000000100)={0x11, 0x0, r20, 0x1, 0x0, 0x6, @random="962c85e043d8"}, 0x14) r21 = accept4$packet(r19, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x140000) r22 = dup3(r21, r2, 0x0) ioctl$EVIOCGNAME(r22, 0x80404506, &(0x7f0000001800)=""/151) syz_genetlink_get_family_id$ipvs(&(0x7f0000001380)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000001440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xfffffffffffffefe, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20004800) sendto(r22, 0x0, 0x0, 0x4000000, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r24 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, r24, 0x0, 0x2, 0x0) ioctl$PPPIOCGNPMODE(r23, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1}) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000180)=""/72) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000300)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r1, 0x0) 02:47:53 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[]]], 0x8) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001100090468fe0700000000000700ff3f03000000450001070000001419001a000400", 0x26}], 0x1) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) 02:47:53 executing program 4: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000140)='threaded\x00', 0x10000031f) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x2, 0xf8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @mss={0x2, 0xfff}], 0x2) r2 = gettid() mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='sockfs\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) tkill(r2, 0x7) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ptrace$setopts(0x4206, r2, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) accept4$inet6(r6, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c, 0x80000) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000000c0)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000040)=[@window={0x3, 0x2e, 0x800}, @window={0x3, 0x0, 0x401}, @mss={0x2, 0x400}, @sack_perm, @timestamp], 0x5) r7 = getpid() tkill(r7, 0x40) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 02:47:53 executing program 2: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x10000, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, 0x0, &(0x7f00000001c0)) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r5 = dup(r3) ioctl$TIOCNOTTY(r0, 0x5422) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r6 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) sendfile(r5, r6, 0x0, 0x8000fffffffe) [ 569.049347] binder: BINDER_SET_CONTEXT_MGR already set [ 569.071808] binder: 23686:23694 ioctl 40046207 0 returned -16 [ 569.142971] binder: BINDER_SET_CONTEXT_MGR already set [ 569.158596] binder: 23686:23700 ioctl 40046207 0 returned -16 02:47:54 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000000000000000000000000004800000000000000d4767911758d0607", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="8561646600000000040000000000000001000000000000002f00000000000000852a62770010000000000000000000000000000000000000852a627300"/80], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x000\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="085f58acbfa0b8c100000000000000"], 0x0, 0x0, 0x0}) [ 569.216025] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23693 comm=syz-executor.5 02:47:54 executing program 4: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) [ 569.622549] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 569.681316] binder: BINDER_SET_CONTEXT_MGR already set 02:47:54 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x800) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="852a62770000ff07000000000000000000000100008000000000640300000000000000000000000000000000730000000000000000000000000000000000000000306955ddb6bc3f9bb6cc43df0b4fdb563b00"/97], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="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"], @ANYBLOB="0000000000001000"], 0xff13, 0x0, 0x0}) r2 = socket$inet6(0xa, 0x3, 0x16) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x5, 0x4) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VT_OPENQRY(r4, 0x5600, &(0x7f0000000040)) [ 569.681327] binder: 23717:23718 ioctl 40046207 0 returned -16 [ 569.707304] binder_alloc: 22834: binder_alloc_buf, no vma [ 569.707329] binder: 23717:23718 transaction failed 29189/-3, size 72-506247542069622484 line 3136 [ 569.708056] binder: undelivered TRANSACTION_ERROR: 29189 [ 569.743273] binder: BINDER_SET_CONTEXT_MGR already set [ 569.743285] binder: 23717:23723 ioctl 40046207 0 returned -16 [ 570.066163] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.3'. [ 570.280610] binder: BINDER_SET_CONTEXT_MGR already set [ 570.289434] binder: 23738:23739 ioctl 40046207 0 returned -16 [ 570.308211] binder_alloc: 22834: binder_alloc_buf, no vma [ 570.314906] binder: 23738:23739 transaction failed 29189/-3, size 80-24 line 3136 [ 570.322854] binder: 23738:23739 ioctl c0306201 20000180 returned -14 02:47:55 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0xa, 0x68059ec6e87510e3, 0x3) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) ioctl$ASHMEM_SET_NAME(r4, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r4, 0xc0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0xc314, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x1, 0xf, 0x7fff, 0x4}, &(0x7f0000000440)=0x7f, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x9}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000140)='[lo\x00', r5}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001a40)={r3, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000001a00)='vmnet1\x00', r5}, 0x30) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r5}, 0xc) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000080)=r6) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r7, 0x29, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB="7f08040403400900ff010000400001000073c6e369002300b6674c28838e4a81000000000010010000f35900d54a00000000fe80000eda961150ae2ab95b11b26b580000000000000000e8e700a200f90000bb4000000000009b0365030fb426870e43f933a4c3180000000000561e9d4c6e82b4374a019022911771a2fe97b2b1b5f21d6359934eea1d"], 0x48) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_opts(r7, 0x29, 0x6, 0x0, 0x0) 02:47:55 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0x323) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup3(r8, r9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) sendmsg$TIPC_CMD_GET_NODES(r10, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000020}, 0xc, &(0x7f0000000500)={&(0x7f0000000100)={0xfffffdc4, r7, 0x100, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0xfffffffffffffef5}, 0x1, 0x0, 0x0, 0x8084}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r6, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xa51040}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r7, 0x35c, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}}, 0x8000) sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10820006a}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r7, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x1ff}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x2000044}, 0x44848) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r7, 0x200, 0x70bd27, 0x25dfdbff, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x6d2394b4}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r7, 0x800, 0x70bd28, 0x25dfdbfe, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x1f}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r11 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) pwritev(r11, &(0x7f0000000000), 0x300, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r11) sendfile(r0, r0, 0x0, 0x24000000) 02:47:55 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) 02:47:55 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) fallocate(r0, 0x5, 0x3, 0x8) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000200)) ptrace$cont(0x1f, r1, 0x0, 0x3) syz_open_procfs(r1, &(0x7f00000001c0)='net/softnet_stat\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x3c) ptrace$cont(0x18, r6, 0x0, 0x0) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r6, 0x0, 0x0) prlimit64(r6, 0xf, 0x0, &(0x7f0000000240)) read$char_usb(r5, &(0x7f0000000100)=""/99, 0x63) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@flat=@weak_binder, @fda}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 570.352720] binder: undelivered TRANSACTION_ERROR: 29189 02:47:55 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000140)={@loopback, @dev}, &(0x7f0000000180)=0x8) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x155) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x20, 0x0, &(0x7f0000000200)=[@release={0x40046306, 0x3}, @acquire={0x40046305, 0x3}, @request_death], 0x35, 0x0, &(0x7f0000000240)="309d5d853bcbd2a4b3e3b1966dbe25c8d77c3cb1e62d4cf91a50da20914f6adc67d5a870fd47e62e4ae7629b467131a7692e5a20e2"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) capget(&(0x7f0000000000)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000040)={0x1ff, 0x20, 0xffff8001, 0x5f3b, 0x1, 0x2}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) fsetxattr$security_capability(r2, &(0x7f0000000340)='security.capability\x00', &(0x7f0000000380)=@v2={0x2000000, [{0x2, 0x6}, {0xc9, 0xf81}]}, 0x14, 0x2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@flat, @ptr={0x70742a85, 0x0, 0xfffffffffffffffd, 0x69}, @ptr={0x70742a85, 0x0, &(0x7f0000000480)=""/4096, 0x1000}}, &(0x7f0000000440)={0x0, 0x18, 0x40}}, 0xe00}], 0x0, 0x0, 0x0}) [ 570.683689] binder: BINDER_SET_CONTEXT_MGR already set [ 570.708484] binder: 23747:23750 ioctl 40046207 0 returned -16 02:47:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f000012afe4)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x10002) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r0, &(0x7f0000000040)='F', 0xfffffffffffffe43, 0x20000003, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000000)={0x81}, 0x4) shutdown(r1, 0x0) 02:47:55 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@increfs_done={0x40106308, 0x870f}], 0x0, 0x0, 0x0}) [ 570.831217] sock: process `syz-executor.3' is using obsolete setsockopt SO_BSDCOMPAT 02:47:55 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) [ 570.967828] binder: 23756:23757 got transaction with invalid offsets ptr [ 570.974779] binder: 23756:23757 transaction failed 29201/-14, size 104-24 line 3305 [ 571.012907] binder: undelivered TRANSACTION_ERROR: 29201 [ 571.199190] binder: BINDER_SET_CONTEXT_MGR already set [ 571.224718] binder: 23763:23765 ioctl 40046207 0 returned -16 [ 571.277899] binder: BINDER_SET_CONTEXT_MGR already set [ 571.300464] binder: 23763:23769 ioctl 40046207 0 returned -16 02:47:56 executing program 5: clone(0x4000204, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000080)='./file0\x00', 0x1039, 0x0) execve(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) clone(0x10900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w^2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf0\xc1\xfb\xae\xb5\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93\x7f\xbc\x1a\x7f\xa90xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cg\x9c\xaa\x16\xc0\xc46syz1Xr\xc8,~\xbc\xf3\xc0\x15X\xd1\xc6\xfd\xbc\xd0J\x8d\x98AfSCTk\xb4Vla\x8a\xac\xb9\x7f|R\x04\x8b\x9c\xf3\x14K\xbc\xbe\xe6\xcfH5\xbb&\xa3\v,\v6\xfb\x80\x03\v\x9f\xcc#d\xcaZK3Z\xc6\'\xa5\xf6\x1f\xa5\xdf\x18gJ\x03\x83\xf4\xb7\xa6\x9bS\x89\xedg[\xa0\xa6\xec\xf4\xfb\x03\xe75\x9b9\xdd\x88\x04\xa7\xdb\xf4\x15Es9\x14\xb1\xcc\xd7\xbf\xado\xbe\xfa\x17\xd7\x16\xab,g\xcaNM9\xa3\xde~\xb4>\x8c\x91rP\n\xbeE\x90w_\xec\xade\x8fp\x91{F\x13=\xb9TS\xdb\xf0\x8d\x92\xdb\xcc\x1f\xcc?\x00\x8f\xef\xf0\xbd\xda', 0x200002, 0x0) fchdir(r0) creat(&(0x7f00000004c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000340)={0x3da}, 0xfffffffffffffd27) write$cgroup_int(r1, &(0x7f0000000180)=0x3, 0xffffffffffffff31) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000400)) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000380)=0x0) fcntl$lock(r0, 0x6, &(0x7f00000003c0)={0x0, 0x3, 0x80000000, 0x2, r4}) r5 = creat(&(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x5) fcntl$setstatus(r5, 0x4, 0x44700) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) ioctl$EVIOCGPROP(r5, 0x80404509, &(0x7f0000000140)) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r0, 0x1, 0x3) mkdir(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r6 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x20) write$P9_RMKNOD(r1, &(0x7f0000000440)={0x14, 0x13, 0x2, {0x1, 0x2, 0x5}}, 0x2e3) mknodat(r6, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) renameat2(r6, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r6, &(0x7f0000000280)='./file0\x00', 0x2) renameat2(r6, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r6, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) r7 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x6100) ftruncate(r7, 0x108200) r8 = open(&(0x7f0000000000)='./bus\x00', 0x4000, 0x48) sendfile(r7, r8, 0x0, 0x8000fffffffe) sendfile(r7, r8, 0x0, 0xffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x6, 0xbee, 0x99c9, 0x41b, 0x10, 0xffffffffffffffff, 0x7, [], 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x3c) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000500)='/proc/self\x00', 0x0, 0x0) 02:47:56 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd) sigaltstack(&(0x7f0000ffb000/0x4000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[]}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0) close(r0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x4fff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010005fba0009008d2633568e00000000", @ANYRES32=0x0, @ANYBLOB="0300f6254f8e0000000000e17937d2453b1e0681e95f0080de9c4e"], 0x28}}, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x200002, 0x0) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f00000001c0)=""/209) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0x526987c9) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) setxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x3) accept4(r0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) read(r6, &(0x7f0000000b80)=""/270, 0xb37af43) sendfile(r0, r5, &(0x7f0000d83ff8), 0x8000fffffffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 02:47:56 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) [ 571.690265] binder_alloc: 22834: binder_alloc_buf, no vma [ 571.701301] audit_printk_skb: 2382 callbacks suppressed [ 571.701311] audit: type=1400 audit(1574736476.503:5003): avc: denied { net_admin } for pid=2095 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 571.723808] audit: type=1400 audit(1574736476.523:5004): avc: denied { net_admin } for pid=2100 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 571.733583] audit: type=1400 audit(1574736476.523:5005): avc: denied { net_admin } for pid=23774 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 571.735075] audit: type=1400 audit(1574736476.533:5006): avc: denied { net_admin } for pid=2100 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 02:47:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x8000000004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x5) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f13000)={0xa, 0xce22}, 0x1c) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) ioctl$ASHMEM_SET_NAME(r4, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) 02:47:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x10c0020}, 0xfffffe9c) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) fchdir(r0) creat(&(0x7f00000004c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000340)={0x3da}, 0xfffffffffffffd27) write$cgroup_int(r1, &(0x7f0000000180)=0x3, 0xffffffffffffff31) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) ioctl$ASHMEM_SET_NAME(r4, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50x0) fcntl$lock(r0, 0x6, &(0x7f00000003c0)={0x0, 0x3, 0x80000000, 0x2, r6}) r7 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x44700) truncate(&(0x7f0000000580)='.\x00', 0xa00) ioctl$EVIOCGPROP(r7, 0x80404509, &(0x7f0000000140)) open(&(0x7f0000000000)='./bus\x00', 0x41000, 0xc) lseek(r0, 0x1, 0x3) mkdir(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r8 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0) write$P9_RMKNOD(r1, &(0x7f0000000640)={0x14, 0x13, 0x0, {0x1, 0x3, 0x5}}, 0x14) mknodat(r8, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) renameat2(r8, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r8, &(0x7f0000000280)='./file0\x00', 0x2) renameat2(r8, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r8, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) r9 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r9, 0x4, 0x6100) ftruncate(r9, 0x108200) r10 = open(&(0x7f0000000600)='./bus\x00', 0x4000, 0x0) sendfile(r9, r10, 0x0, 0x8000fffffffe) openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x2000, 0x0) sendfile(r9, r3, 0x0, 0xffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x6, 0xbee, 0x99c9, 0x41b, 0x10, 0xffffffffffffffff, 0x7, [], 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x3c) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000500)='/proc/self\x00', 0x0, 0x0) [ 571.740056] audit: type=1400 audit(1574736476.543:5008): avc: denied { net_admin } for pid=2095 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 571.743610] audit: type=1400 audit(1574736476.543:5007): avc: denied { net_admin } for pid=23774 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 571.743635] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 02:47:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x4, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/mnt\x00') r4 = dup2(r2, r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000140)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ID(r7, 0x80082407, &(0x7f0000000040)) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x2d1b3d3c3f639583, 0x0) [ 571.745630] audit: type=1400 audit(1574736476.543:5009): avc: denied { net_admin } for pid=2100 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 571.757905] audit: type=1400 audit(1574736476.553:5010): avc: denied { net_admin } for pid=2095 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 571.771326] audit: type=1400 audit(1574736476.573:5011): avc: denied { net_admin } for pid=2095 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 571.785586] audit: type=1400 audit(1574736476.583:5012): avc: denied { net_admin } for pid=2095 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 02:47:58 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) [ 572.430119] binder: BINDER_SET_CONTEXT_MGR already set [ 572.430133] binder: 23773:23807 ioctl 40046207 0 returned -16 [ 573.403382] input: syz0 as /devices/virtual/input/input22 [ 573.403399] input: failed to attach handler leds to device input22, error: -6 [ 573.469448] binder: 23773:23777 transaction failed 29189/-3, size 80-24 line 3136 [ 573.469490] binder_alloc: 22834: binder_alloc_buf, no vma [ 573.469509] binder: 23773:23807 transaction failed 29189/-3, size 80-24 line 3136 [ 573.469713] binder: undelivered TRANSACTION_ERROR: 29189 [ 573.608734] binder: undelivered TRANSACTION_ERROR: 29189 02:47:58 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000100)='\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\xe9', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@flat=@weak_binder, @fda={0x66646185, 0x4, 0x80000000}}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 573.682572] input: syz0 as /devices/virtual/input/input23 [ 573.718659] input: failed to attach handler leds to device input23, error: -6 02:47:58 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0xd9, 0x81, 0x4, 0x4}, {0x6, 0x9, 0x1, 0x9}]}) fcntl$setflags(r2, 0x2, 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a627700000000000000000000000000000000000000008561646600000000000000000000000000000000000000000000000000000000852a627300"/80], @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="00000000000000000000000001000000000000000000000055881bd70b6c3a0efe05b889ae4f66f3d6da8abd22035856af544becf395c5ca2d2c3456a55bb785cc968b3b07dc1be9a41ca6351cccfdf0e2f82395e9cbfe0283fa5bbe39a3c3c795d14a7c714b78af410ce91bce8a58ec2806"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 02:47:59 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, 0x0, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) 02:47:59 executing program 5: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000500)={'filter\x00', 0x4}, 0x68) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, &(0x7f0000000140)) recvmmsg(r3, &(0x7f0000001640)=[{{&(0x7f0000000180)=@x25, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000580)=""/253, 0xfd}, {&(0x7f0000000740)=""/232, 0xe8}, {&(0x7f0000000840)=""/183, 0xb7}, {&(0x7f0000000900)=""/215, 0xd7}, {&(0x7f0000000680)=""/124, 0x7c}], 0x5}, 0x5}, {{&(0x7f0000000a80)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000b00)=[{&(0x7f00000003c0)}], 0x1}, 0x4}, {{&(0x7f0000000c00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000c80)=""/1, 0x1}, {&(0x7f0000000cc0)=""/208, 0xd0}, {&(0x7f0000000dc0)=""/173, 0xad}], 0x3, &(0x7f0000000ec0)=""/15, 0xf}, 0x52d8}, {{&(0x7f0000000f00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000f80)=""/7, 0x7}], 0x1, &(0x7f0000001000)=""/255, 0xff}, 0x8}, {{&(0x7f0000001100)=@nfc_llcp, 0x80, &(0x7f00000011c0)=[{&(0x7f0000001180)=""/44, 0x2c}], 0x1}, 0x5}, {{&(0x7f0000001200)=@generic, 0x80, &(0x7f0000001540)=[{&(0x7f0000001300)=""/114, 0x72}, {&(0x7f0000001380)=""/38, 0x26}, {&(0x7f00000013c0)=""/115, 0x73}, {&(0x7f0000001440)=""/155, 0x9b}, {&(0x7f0000001500)=""/30, 0x1e}], 0x5, &(0x7f00000015c0)=""/108, 0x6c}, 0x3}], 0x6, 0x12101, &(0x7f00000017c0)) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000001800)={0x2f, @local, 0x4e21, 0x4, 'none\x00', 0x4, 0x4, 0x20}, 0x2c) syz_genetlink_get_family_id$tipc(0x0) fchdir(r2) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) r7 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x46800) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x4) r8 = socket(0x11, 0x0, 0x0) getsockname$packet(r8, 0x0, &(0x7f0000000140)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r7, &(0x7f0000000200)='threaded\x00', 0x175d900f) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) fremovexattr(r10, &(0x7f0000000300)=ANY=[@ANYBLOB="62747266732e756964e3f672e6a4d0ef58dd55fd3e5f6d617000"]) r11 = fcntl$dupfd(r10, 0x605, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xfe16) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x\x11k4\xd3\x1b\x05\xaf\xf0\x1eyRN\xc9\xc6V\x00\x02\x00\x00\x00\x00\x00\x00\x00', 0x275a, 0x0) fallocate(r15, 0x0, 0x0, 0x110003) lseek(r15, 0x0, 0x3) r16 = syz_genetlink_get_family_id$team(&(0x7f0000000240)='team\x00') r17 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r17, 0x4, 0x6100) r18 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) lseek(r17, 0x0, 0x2) sendfile(r17, r18, 0x0, 0x20008) r19 = socket$inet6_udp(0xa, 0x2, 0x0) r20 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r20, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r20, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0x40400, 0x0, 0x3, 0x3, 0x0, 0x3}, 0x20) connect$inet6(r20, 0x0, 0x0) r21 = open(&(0x7f0000000400)='./bus\x00', 0x40, 0x40) getpeername$packet(r21, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r20, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r22}) setsockopt$inet6_IPV6_PKTINFO(r19, 0x29, 0x32, &(0x7f0000000080)={@mcast2, r22}, 0x14) setsockopt$inet_mreqn(r18, 0x0, 0x24, &(0x7f0000000040)={@local, @loopback, r22}, 0xc) r23 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r23, r23, &(0x7f00000002c0)=0x202, 0xdd) getpeername$packet(r23, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r24}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000080)={@mcast2, r24}, 0x14) setsockopt$inet_mreqn(r21, 0x0, 0x24, &(0x7f0000000040)={@multicast2, @multicast2, r24}, 0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r15, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x17100010}, 0xc, &(0x7f0000000340)={&(0x7f0000002040)=ANY=[@ANYBLOB="c0020000", @ANYRES16=r16, @ANYBLOB="000128bd7000fedbdf250200000008000100", @ANYRES32=r14, @ANYBLOB="9000020040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000100004006c6f616462616c616e6365004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000001c000400ff7f0102020000000500000700000000abed021f0000000008000100", @ANYRES32=r14, @ANYBLOB="4400020040000100240001006d6f646500000000000000000000000000000000000000000000000000000000080003000500000010000400726f756e64726f62696e000008000100", @ANYRES32=r22, @ANYBLOB="b800020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040004000000080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004005b4800003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r24, @ANYBLOB="000102004000017bc20001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000100004006c6f616462716c010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004002bdb000008000600"/128, @ANYRES32=r14, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000000000044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000001400040080000202008000000600070601000080"], 0x2c0}, 0x1, 0x0, 0x0, 0x40}, 0x8000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r25) ioctl$ifreq_SIOCGIFINDEX_team(r25, 0x8933, &(0x7f0000000040)={'team0\x00', r4}) r27 = socket(0x200000100000011, 0x2, 0x0) r28 = socket$nl_route(0x10, 0x3, 0x0) r29 = socket$netlink(0x10, 0x3, 0x0) r30 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r30, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r30, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r29, &(0x7f0000000040)={0x0, 0x148, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r31, @ANYBLOB="00000000000000000e0012000000010073737400000002002c0208001900000000000200fe8000000000000000000000000000bb00000900290000000000020000000000020000000000000000003b7a8bd9d9c643a80000"], 0x38}}, 0x0) sendmsg$nl_route(r28, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r31}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @dev}]}, 0x28}}, 0x0) bind$packet(r27, &(0x7f0000000100)={0x11, 0x0, r31, 0x1, 0x0, 0x6, @random="962c85e043d8"}, 0xc) r32 = socket(0x200000100000011, 0x2, 0x0) r33 = socket$nl_route(0x10, 0x3, 0x0) r34 = socket$netlink(0x10, 0x3, 0x0) r35 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r35, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r35, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r34, &(0x7f0000000040)={0x0, 0x148, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r36, @ANYBLOB="00000000000000000e0012000000010073737400000002002c0208001900000000000200fe8000000000000000000000000000bb00000900290000000000020000000000020000000000000000003b7a8bd9d9c643a80000"], 0x38}}, 0x0) sendmsg$nl_route(r33, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r36}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @dev}]}, 0x28}}, 0x0) bind$packet(r32, &(0x7f0000000100)={0x11, 0x0, r36, 0x1, 0x0, 0x6, @random="962c85e043d8"}, 0xc) r37 = socket(0x200000100000011, 0x2, 0x0) r38 = socket$nl_route(0x10, 0x3, 0x0) r39 = socket$netlink(0x10, 0x3, 0x0) r40 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r40, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r40, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r39, &(0x7f0000000040)={0x0, 0x148, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r41, @ANYBLOB="00000000000000000e0012000000010073737400000002002c0208001900000000000200fe8000000000000000000000000000bb00000900290000000000020000000000020000000000000000003b7a8bd9d9c643a80000"], 0x38}}, 0x0) sendmsg$nl_route(r38, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r41}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @dev}]}, 0x28}}, 0x0) bind$packet(r37, &(0x7f0000000100)={0x11, 0x0, r41, 0x1, 0x0, 0x6, @random="962c85e043d8"}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r43 = dup(r42) ioctl$PERF_EVENT_IOC_ENABLE(r43, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r43, 0x8933, &(0x7f0000000380)={'lo\x00', r6}) r45 = socket(0x200000100000011, 0x2, 0x0) r46 = socket$nl_route(0x10, 0x3, 0x0) r47 = socket$netlink(0x10, 0x3, 0x0) r48 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r48, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r48, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r47, &(0x7f0000000040)={0x0, 0x148, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r49, @ANYBLOB="00000000000000000e0012000000010073737400000002002c0208001900000000000200fe8000000000000000000000000000bb00000900290000000000020000000000020000000000000000003b7a8bd9d9c643a80000"], 0x38}}, 0x0) sendmsg$nl_route(r46, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r49}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @dev}]}, 0x28}}, 0x0) bind$packet(r45, &(0x7f0000000100)={0x11, 0x0, r49, 0x1, 0x0, 0x6, @random="962c85e043d8"}, 0xc) r50 = socket(0x200000100000011, 0x2, 0x0) r51 = socket$nl_route(0x10, 0x3, 0x0) r52 = socket$netlink(0x10, 0x3, 0x0) r53 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r53, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r53, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r52, &(0x7f0000000040)={0x0, 0x148, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r54, @ANYBLOB="00000000000000000e0012000000010073737400000002002c0208001900000000000200fe8000000000000000000000000000bb00000900290000000000020000000000020000000000000000003b7a8bd9d9c643a80000"], 0x38}}, 0x0) sendmsg$nl_route(r51, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r54}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @dev}]}, 0x28}}, 0x0) bind$packet(r50, &(0x7f0000000100)={0x11, 0x0, r54, 0x1, 0x0, 0x6, @random="962c85e043d8"}, 0xc) r55 = socket(0x200000100000011, 0x2, 0x0) r56 = socket$nl_route(0x10, 0x3, 0x0) r57 = socket$netlink(0x10, 0x3, 0x0) r58 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r58, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r58, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r57, &(0x7f0000000040)={0x0, 0x148, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r59, @ANYBLOB="00000000000000000e0012000000010073737400000002002c0208001900000000000200fe8000000000000000000000000000bb00000900290000000000020000000000020000000000000000003b7a8bd9d9c643a80000"], 0x38}}, 0x0) sendmsg$nl_route(r56, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r59}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @dev}]}, 0x28}}, 0x0) bind$packet(r55, &(0x7f0000000100)={0x11, 0x0, r59, 0x1, 0x0, 0x6, @random="962c85e043d8"}, 0xc) r60 = socket(0x200000100000011, 0x2, 0x0) r61 = socket$nl_route(0x10, 0x3, 0x0) r62 = socket$netlink(0x10, 0x3, 0x0) r63 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r63, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r63, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r62, &(0x7f0000000040)={0x0, 0x148, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r64, @ANYBLOB="00000000000000000e0012000000010073737400000002002c0208001900000000000200fe8000000000000000000000000000bb00000900290000000000020000000000020000000000000000003b7a8bd9d9c643a80000"], 0x38}}, 0x0) sendmsg$nl_route(r61, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r64}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @dev}]}, 0x28}}, 0x0) bind$packet(r60, &(0x7f0000000100)={0x11, 0x0, r64, 0x1, 0x0, 0x6, @random="962c85e043d8"}, 0xc) r65 = socket(0x200000100000011, 0x2, 0x0) r66 = socket$nl_route(0x10, 0x3, 0x0) r67 = socket$netlink(0x10, 0x3, 0x0) r68 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r68, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r68, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r67, &(0x7f0000000040)={0x0, 0x148, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r69, @ANYBLOB="00000000000000000e0012000000010073737400000002002c0208001900000000000200fe8000000000000000000000000000bb00000900290000000000020000000000020000000000000000003b7a8bd9d9c643a80000"], 0x38}}, 0x0) sendmsg$nl_route(r66, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r69}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @dev}]}, 0x28}}, 0x0) bind$packet(r65, &(0x7f0000000100)={0x11, 0x0, r69, 0x1, 0x0, 0x6, @random="962c85e043d8"}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r71 = dup(r70) ioctl$PERF_EVENT_IOC_ENABLE(r71, 0x8912, 0x400200) r72 = socket(0x200000100000011, 0x2, 0x0) r73 = socket$nl_route(0x10, 0x3, 0x0) r74 = socket$netlink(0x10, 0x3, 0x0) r75 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r75, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r75, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r74, &(0x7f0000000040)={0x0, 0x148, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r76, @ANYBLOB="00000000000000000e0012000000010073737400000002002c0208001900000000000200fe8000000000000000000000000000bb00000900290000000000020000000000020000000000000000003b7a8bd9d9c643a80000"], 0x38}}, 0x0) sendmsg$nl_route(r73, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r76}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @dev}]}, 0x28}}, 0x0) bind$packet(r72, &(0x7f0000000100)={0x11, 0x0, r76, 0x1, 0x0, 0x6, @random="962c85e043d8"}, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r71, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', r76}) sendmsg$TEAM_CMD_NOOP(r13, &(0x7f0000000b80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000040}, 0xc, &(0x7f0000000b40)={&(0x7f0000001840)={0x6ec, r16, 0x1, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r26}, {0x178, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r31}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r36}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x90000000}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r41}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r6}, {0xc4, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r44}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r49}, {0x1d0, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r54}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r59}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r64}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r4}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x4, 0x3, 0xd4, 0x8}, {0x2, 0x40, 0x3, 0x3}, {0x1f, 0x20, 0x58, 0x5}, {0x5dfd, 0x7, 0x3f, 0x6}, {0x4, 0x4, 0xff, 0x9f}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r69}}}]}}, {{0x8, 0x1, r6}, {0xec, 0x2, [{0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x3c, 0x4, [{0x4, 0x6a, 0x0, 0xff}, {0xc600, 0x6, 0x1f, 0x4}, {0x401, 0x6, 0x72, 0x4}, {0x7, 0xff, 0x20, 0x3d77}, {0x672, 0x19, 0x6, 0xffffff9d}, {0x0, 0xd7, 0x0, 0x9}, {0x6, 0x2, 0x1c, 0x4}]}}}, {0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x4c, 0x4, [{0x800, 0x81, 0x80, 0xfffffffd}, {0x9, 0xb3, 0x1, 0xffff}, {0x81, 0xd9, 0xfa, 0x3}, {0x8001, 0x80, 0x6, 0x7fffffff}, {0x2, 0x3f, 0x2, 0x7fffffff}, {0xffff, 0x6, 0x3, 0x7}, {0x0, 0x0, 0x1f, 0x6}, {0x401, 0x81, 0x4, 0x2}, {0x5, 0x4, 0x9, 0x7}]}}}]}}, {{0x8, 0x1, r4}, {0x1b8, 0x2, [{0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xd7a}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r9}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r77}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8}}}]}}]}, 0x6ec}, 0x1, 0x0, 0x0, 0x4040000}, 0x2800c040) ioctl$sock_inet_udp_SIOCINQ(r11, 0x541b, &(0x7f0000000100)) [ 574.343120] binder: 23841:23842 got transaction with invalid offset (4294967296, min 24 max 80) or object. [ 574.388557] binder: 23841:23842 transaction failed 29201/-22, size 80-24 line 3199 02:47:59 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000200)=ANY=[@ANYBLOB="c4000000190001000000000000000000ff010000000000000000000000000001e0000001000020f64854ede0966400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c1151ca678c9e6d000000000000000000000000000000000000000000000c001f00080008000000000092034fa5f3441f1bce700e4ab74d7c24"], 0xc4}}, 0x0) [ 574.486246] binder: undelivered TRANSACTION_ERROR: 29201 02:47:59 executing program 3: openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x323) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000180)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) r5 = socket(0x10, 0x80002, 0x0) bind$netlink(r5, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r5, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) connect$netlink(r5, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) ioctl$sock_SIOCOUTQNSD(r5, 0x894b, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) write$P9_RSTAT(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="6c0000007e0100000055000000000000000303000000040000000000000000000000000000000100160000000000001c000010002fa9656c696e75782f706f6c69637975782f706f6c6963794e"], 0x4d) sendto(r5, &(0x7f0000000340), 0xac, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) ioctl(r0, 0x8, &(0x7f0000000580)) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x20000, 0x0) write$P9_RCLUNK(r6, 0x0, 0xfffffffffffffca7) recvmmsg(r5, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[@ANYBLOB="b520000006000000e0517f08000000a72ed763cff694bd7f4ecab21e4a9ddec7483eee198c4f6efe09c408b6e91abe2e58ee53ab99de20f7d97f667e5c0f5604417042409a3f28e040eeb799c98c7ae4c1311a57724b2bcbb637e994a89d4610df8321088bf93a7b7c4c3b7b9756c1d51b26a96ea9e8c6d0268b83"], 0x79) clone(0x0, &(0x7f0000000640)="e1fea4c5bb0f699682fd37c5ad1a14d20afc2093db1a28cd359bd0ae7b53802fe27accc96526d718565c81ae3d4a901e0a1f01e37e5fcba72ad07c592309a4825b50a25a0884a172a71e035d3156888f8ae12bfbc4e837ba972d9a23cf4b56611f539eb172aa8978fc38a02b7b4349d39671579350b6d4969b18185ece417bc621f2043e734e95d87597df4e32c7", &(0x7f00000000c0), &(0x7f00000003c0), &(0x7f0000000700)="f1ea51d793d343ef785f269e27bc9b35c756a451c99cbdeb5d648ed9b1580c18f187e2995f273c52d3391c28b1683e5809aca445a286b013970945b55c23a3e82daa89d13cd66835e8ec0f39eb2e796f4ed003a859d79c2991ea0323ae2e822e5ec3110d58c4ca2294a4677dae26c6e4a9c7cdbca39458cd49ae1102a26bae5045287a8e69ece03c3462dca17c7e8a6e06e86b06d0db4e41b2c54c0cf3bef45b637fe0e4781bd864f9a72c51cafa76302a19aee7b4fc7aa00817dac545e7ed4e533b7058") ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000440)={0x4, 0x1, 0x7, 0xfff, 0xd, 0x9, 0x8, 0xfb, 0x1, 0x83d9, 0xfffffbfc, 0x4}) getxattr(&(0x7f0000000200)='./bus\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='systqm.\x00'], &(0x7f0000000800)=""/159, 0x9f) sendfile(r1, r4, &(0x7f0000000080), 0x9001) 02:47:59 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000000900)=""/4098, 0x1002}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfdbe) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 02:48:00 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, 0x0, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) [ 575.206200] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 575.246002] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.5'. [ 575.324406] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 575.358155] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.5'. [ 575.419594] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 575.444293] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:00 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='?dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x100012, r2, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xc442c710b2945351}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00022cbd7000fbdbdf250300000008000400010100000800060041b90000b5a1af519d853e1032bc70445116e8ca498bc80fad44bc1bfc277dae66f374a7fe2df0dd51f1e409d9d470fbf9134ec153fceac3e6d774be4a84abe686fb8c0a2d311322ca1e6663ee2ddcf27ed3cd90bae50a1fdf73bc41aa37de99a3ee867c3c1819761520c9198af99d87dd3d338ddc9f0cfff1a4453d3a9639af548ffbef2c30567b5cb0e51c12e537e43ba70ff4fbc76b101ce7ececb4d8866a82e2fe46fea8a89561293cc1244d69274c0f9fdb294d1939788963c1a4f98dc5ba31185db52409e9ed4c98ae0560d219c05313b18e2562ba37cb9388ee437b2bc79ad549733e8a838329c9ca13b6a44b7aa18acc1597c5e686b9113b9589d66542f423bb59e2ec8592b941e284e6a4f0fc6f90c0aa971810fe8ef258becaa93955b5acf039c40119f347887a90cbd65924d7063215444b0fa833178662f34e7b23f3a5546dfa1aa21babf0164a92f70843d084d6ffe165c71c274a6e1e970c1c4a68fbc59dee"], 0x2c}}, 0x200000a4) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800588}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x48, r5, 0xbd7533980abd27d9, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x4}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000) read(r2, &(0x7f00000001c0)=""/162, 0xa2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@flat=@weak_binder, @fda}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 575.540528] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 575.550252] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.5'. [ 575.628472] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 575.686547] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:00 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, 0x0, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) 02:48:00 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@flat=@weak_binder, @fda}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000100)=0x4) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f00000001c0)=""/230) 02:48:01 executing program 4: r0 = socket$inet(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="240000005e0025501dfffd946f610500070000001d00000077000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000bcbfd22aab9aac115fd5e36d520013000000000000", 0x4c}], 0x1, 0x0, 0xffffffffffffff66}, 0x0) [ 576.286631] binder: BINDER_SET_CONTEXT_MGR already set [ 576.353281] binder: 23880:23885 ioctl 40046207 0 returned -16 02:48:01 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@flat=@weak_binder, @fda}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50x0}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0xd432}) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) syz_open_dev$loop(0x0, 0x4, 0x51d00) write(r1, 0x0, 0x66467658f9365c94) sendmsg(0xffffffffffffffff, 0x0, 0x0) setitimer(0x1, &(0x7f00000000c0)={{}, {0x0, 0x2710}}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40800}, 0xc, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=r2, @ANYBLOB="000127bd7000fcdbdf2525000000100001006e657464657673696d000000100002006e657464657673696d30000008008b0004000000080001007063690014000200303030303a30303a31302e300000000008008b00", @ANYRES32=0x0, @ANYBLOB="080001007063690014000200303030303a30303a31302e300000000408008b0004000000a8cfd3658326516da721779fbeb4003e34df2a68203e40fed7933656c87c40285b7f8a7d79446fce5bed48a99c0c372497fcc9e045f05948621b6518d6867ab53cc659ae4d0795e7d0660589799edf3b174e7c36014d6eb6738eda91997a78861ee897d23c2122"], 0x84}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80800001}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r2, @ANYBLOB="bbfd28bd7000fcdbdf2505000000080001007063690014000200303030303a30303a31302e30000000000800030001000000080001008163690014000200303030303a30303a31302e30000000000800030003000000080001007063690014000200303030303a30303a31302e30000000000800030003000000100001006e657464657673696d000000100002006e657464657673696d3000000800030003000000100001006e657464657673696d000000100002006e657464657673696d3000000800030002000000"], 0xd0}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x1c, 0x0, 0x902, 0x70bd28, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r9, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r9, 0x0) ioctl$ASHMEM_SET_NAME(r9, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50x0}}, {{@in6=@remote}, 0x0, @in=@initdev}}, &(0x7f0000000780)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x2, &(0x7f0000000600)=ANY=[@ANYBLOB="2e989714e6380309000000000000cb"], &(0x7f0000000640)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x4, [], r10, 0x0, r5, 0x8, &(0x7f00000007c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000800)={0x5, 0x9, 0x80, 0x4}, 0x10}, 0x70) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r6) r11 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) ftruncate(r5, 0x81) dup2(r11, r1) 02:48:01 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) [ 576.714921] audit_printk_skb: 2058 callbacks suppressed [ 576.714931] audit: type=1400 audit(1574736481.513:5699): avc: denied { net_admin } for pid=2097 comm="syz-executor.1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 576.720313] audit: type=1400 audit(1574736481.523:5700): avc: denied { net_admin } for pid=2100 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 576.724743] audit: type=1400 audit(1574736481.523:5701): avc: denied { net_admin } for pid=2100 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 576.735896] audit: type=1400 audit(1574736481.533:5702): avc: denied { net_admin } for pid=2100 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 576.744592] audit: type=1400 audit(1574736481.543:5703): avc: denied { net_admin } for pid=2100 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 576.753285] audit: type=1400 audit(1574736481.553:5704): avc: denied { net_admin } for pid=2100 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 576.760743] audit: type=1400 audit(1574736481.563:5705): avc: denied { net_admin } for pid=2100 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 576.767358] audit: type=1400 audit(1574736481.563:5706): avc: denied { net_admin } for pid=2100 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 576.787185] audit: type=1400 audit(1574736481.583:5707): avc: denied { net_admin } for pid=2100 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 576.800975] audit: type=1400 audit(1574736481.603:5708): avc: denied { net_admin } for pid=2100 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 577.235295] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12152 sclass=netlink_route_socket pig=23854 comm=syz-executor.3 [ 577.272470] binder: BINDER_SET_CONTEXT_MGR already set [ 577.281275] binder: 23906:23907 ioctl 40046207 0 returned -16 [ 577.299825] binder_alloc: 22834: binder_alloc_buf, no vma [ 577.307250] binder: 23906:23907 transaction failed 29189/-3, size 80-24 line 3136 [ 577.361577] binder: undelivered TRANSACTION_ERROR: 29189 02:48:02 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x10000, 0x0) write$9p(r1, &(0x7f00000005c0)="21b8ed417ad9191d39e3ac7d3c3fb087ca6539becbdf4e84d9aea84a9eb94c05862b6bbbfb668721e25d6885ba6623b1f28e536c6198ea89cf13813cb76bbe56e60b5023eb013e31c9f7d2f1d3aed8e8bfba17d02afba83be055c79981f4926f338dfea4f03b68899bc86fcd0e4a0e3963212be7402b3ee1bfb318da4c17d772c09edf7f9223fab147bda1c7cdd6af4a8213a668067b382f4b50f7fe80ca42965c3674b362c11d6ff590744f4406da33b88aada6cd47c28b6e53a7f562caa10b858093f5459efcef8649f7a8f05aafa0d2fd8c761a029925bfc3be8d30307a1bbceff2c923a0fd9ebab7b265", 0xec) ioctl$TIOCLINUX3(0xffffffffffffffff, 0x541c, 0x0) fchdir(r0) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f00000001c0)={0x0, 0x0, 0x0}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_GET_TSC(0x19, &(0x7f0000000100)) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$cgroup_type(r5, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0x0) ioctl$ASHMEM_SET_NAME(r6, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) [ 577.404383] binder: BINDER_SET_CONTEXT_MGR already set [ 577.475365] binder_alloc: 22834: binder_alloc_buf, no vma [ 577.481104] binder: 23906:23910 ioctl 40046207 0 returned -16 [ 577.494464] binder: 23906:23912 transaction failed 29189/-3, size 80-24 line 3136 [ 577.535991] binder: undelivered TRANSACTION_ERROR: 29189 [ 578.460875] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12152 sclass=netlink_route_socket pig=23928 comm=syz-executor.3 02:48:03 executing program 3: openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x323) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000180)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) r5 = socket(0x10, 0x80002, 0x0) bind$netlink(r5, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r5, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) connect$netlink(r5, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) ioctl$sock_SIOCOUTQNSD(r5, 0x894b, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) write$P9_RSTAT(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="6c0000007e0100000055000000000000000303000000040000000000000000000000000000000100160000000000001c000010002fa9656c696e75782f706f6c69637975782f706f6c6963794e"], 0x4d) sendto(r5, &(0x7f0000000340), 0xac, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) ioctl(r0, 0x8, &(0x7f0000000580)) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x20000, 0x0) write$P9_RCLUNK(r6, 0x0, 0xfffffffffffffca7) recvmmsg(r5, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[@ANYBLOB="b520000006000000e0517f08000000a72ed763cff694bd7f4ecab21e4a9ddec7483eee198c4f6efe09c408b6e91abe2e58ee53ab99de20f7d97f667e5c0f5604417042409a3f28e040eeb799c98c7ae4c1311a57724b2bcbb637e994a89d4610df8321088bf93a7b7c4c3b7b9756c1d51b26a96ea9e8c6d0268b83"], 0x79) clone(0x0, &(0x7f0000000640)="e1fea4c5bb0f699682fd37c5ad1a14d20afc2093db1a28cd359bd0ae7b53802fe27accc96526d718565c81ae3d4a901e0a1f01e37e5fcba72ad07c592309a4825b50a25a0884a172a71e035d3156888f8ae12bfbc4e837ba972d9a23cf4b56611f539eb172aa8978fc38a02b7b4349d39671579350b6d4969b18185ece417bc621f2043e734e95d87597df4e32c7", &(0x7f00000000c0), &(0x7f00000003c0), &(0x7f0000000700)="f1ea51d793d343ef785f269e27bc9b35c756a451c99cbdeb5d648ed9b1580c18f187e2995f273c52d3391c28b1683e5809aca445a286b013970945b55c23a3e82daa89d13cd66835e8ec0f39eb2e796f4ed003a859d79c2991ea0323ae2e822e5ec3110d58c4ca2294a4677dae26c6e4a9c7cdbca39458cd49ae1102a26bae5045287a8e69ece03c3462dca17c7e8a6e06e86b06d0db4e41b2c54c0cf3bef45b637fe0e4781bd864f9a72c51cafa76302a19aee7b4fc7aa00817dac545e7ed4e533b7058") ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000440)={0x4, 0x1, 0x7, 0xfff, 0xd, 0x9, 0x8, 0xfb, 0x1, 0x83d9, 0xfffffbfc, 0x4}) getxattr(&(0x7f0000000200)='./bus\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='systqm.\x00'], &(0x7f0000000800)=""/159, 0x9f) sendfile(r1, r4, &(0x7f0000000080), 0x9001) 02:48:03 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x2081fd) fcntl$setstatus(r1, 0x4, 0x6100) write$P9_RWSTAT(r2, &(0x7f0000000000)={0x7}, 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r7 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x220002, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$KDSETLED(r8, 0x4b32, 0xfffffffffffffff7) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x110101, 0x0) write$cgroup_type(r9, &(0x7f0000000200)='threaded\x00', 0x9) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r10 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r10, 0x0, 0xffff, 0x4003f8) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = fcntl$dupfd(r11, 0x0, r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() wait4(0x0, 0x0, 0x80000000, 0x0) 02:48:03 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0x7}, 0x1c) r1 = dup2(r0, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x4e24, 0xfffffffb, @loopback, 0x659}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000240), 0x8) listen(r0, 0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) r3 = gettid() r4 = syz_open_procfs(r3, &(0x7f00000001c0)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') write$selinux_context(r4, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r5 = fcntl$dupfd(r4, 0x0, r2) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x20000, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x28af62c25667baf1, &(0x7f0000000280)=0x10000, 0x4) r7 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r7, &(0x7f0000000340)={0xa, 0x14e24}, 0x1c) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r7, &(0x7f00000092c0), 0x818, 0x0) sendfile(r7, r5, 0x0, 0xecc) flistxattr(0xffffffffffffffff, &(0x7f0000000500)=""/121, 0x1a1) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x20000004, &(0x7f00000002c0)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000640)={'icmp6\x00'}, &(0x7f0000000680)=0x1e) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r8, &(0x7f0000000340), 0xffffffec) recvfrom$inet6(r8, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000000)={'lo\x00'}) r10 = socket$inet6(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f00000004c0)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r11 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r11, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 02:48:03 executing program 5: pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x200000100000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x148, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="3800000010000507c20200070000000000000000", @ANYRES32=r9, @ANYBLOB="00000000000000000e0012000000010073737400000002002c0208001900000000000200fe8000000000000000000000000000bb00000900290000000000020000000000020000000000000000003b7a8bd9d9c643a80000"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r9}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @dev}]}, 0x28}}, 0x0) bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @random="962c85e043d8"}, 0xc) fcntl$setsig(r5, 0xa, 0x2b) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000080)={@local, 0x0, 0x1000000000000, 0x102, 0x2, 0x0, 0x6, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400400, 0x0, 0x1, 0x9, 0x2, 0x8}, 0x20) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r11, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getpeername$packet(r11, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000004c0)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) ioctl$TUNSETTXFILTER(r12, 0x400454d1, &(0x7f0000000400)=ANY=[@ANYRESDEC=r0]) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000100)=ANY=[@ANYBLOB]) accept4$inet6(r5, 0x0, &(0x7f0000000140), 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) accept4$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x140000) syz_genetlink_get_family_id$ipvs(&(0x7f0000001380)='IPVS\x00') 02:48:03 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@flat=@weak_binder, @fda}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getpeername(r7, &(0x7f00000003c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x80) bind$packet(r5, &(0x7f0000000480)={0x11, 0x16, r8, 0x1, 0xae}, 0x14) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000280)={'broute\x00', 0x0, 0x3, 0x6f, [], 0x9, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/111}, &(0x7f0000000300)=0x78) 02:48:03 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) 02:48:03 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="852a627700000000000000000000000000000000000000008561646600000000000000000000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000066481"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000018000000000000003800000000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 02:48:04 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x10c) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r4, &(0x7f0000000040)='syz0\x00', 0x1ff) fallocate(r3, 0x0, 0x0, 0x108000) truncate(&(0x7f0000000240)='./bus\x00', 0x8002) r5 = open(&(0x7f00000002c0)='./bus\x00', 0x40000141041, 0x0) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0x323) r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8fff) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) [ 579.664196] binder: BINDER_SET_CONTEXT_MGR already set [ 579.712281] binder: 23960:23962 ioctl 40046207 0 returned -16 [ 579.744559] binder: BINDER_SET_CONTEXT_MGR already set [ 579.751797] binder: 23960:23964 ioctl 40046207 0 returned -16 02:48:04 executing program 1: write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000100), 0x4) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000200)=0xd2, 0x4) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(r1, &(0x7f0000001740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200808}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)={0x1238, 0x26, 0x32e, 0x70bd2b, 0x25dfdbff, {}, [@nested={0x1098, 0x37, [@generic="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", @typed={0x8, 0x78, @u32}, @typed={0x8, 0x58, @fd=r0}, @typed={0x8, 0x62, @fd=r3}, @generic="e34ba558ed63d6b879c289f69c3550c2ed0be6952b2aafd0d9e10843119c84d49477acb28c372ebe4dbd2e2fa1c319931d9b4ae288d135e3dd5de715c27cf966aec2a440eff335737f55c0f09192a1844ac615497efb40ed462413591a7f599c9a825ca1185bc7120bc6a56a7e18d4db1b5b34ccb0fd6061593ef1ba"]}, @nested={0x9c, 0x31, [@generic="dbe843a7983d86615b82d815389e1a76b27cac982dcc17fcf29f9159a8752ceb9bf719ad3477bc9b6d5d8ba51a456a3ae17265c863b9216c4c11fb5d4cde923a52917068b8cd47e007f67c72d38f0e253f41d637f3d034c3b54efa387c63e958c20589456a277a22b0d3d6ca791ef57a", @typed={0x8, 0x5b, @fd=r1}, @typed={0x4, 0x86}, @typed={0x1c, 0x12, @binary="61848bc618ad7ca57c9d511bcc49a6a3f8619c4d313866"}]}, @generic="e55ab8a4072d7e71ce156a82d6b4d3dbafc543ec4af511031334efa219c8c2128c59b624d8a496717cd90c55525577833c01aff60176d328e8149308793e7e772c4dc1051b4c8aedb4fe6ee478a31b6ef016cec7ea678f5cc8f25cf27e0fc37c0452d51ecaf5abe1cd7a5beb58ea38aa866fa34aa637ccc6cbc217f7e112a71b11848c610134469dd266b56f6169336990b57bb7bec438127ffbb80c9a55ff3cf25a2e50c719edc1dba8c62a2f13dd2cd6058064796c340e590c96133c57a5d1a462be47751162240e60d78f0c415dcd78b261a6f0023a5cf73b3653f300875621d2493008c902773c1483e4186d"]}, 0x1238}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000001780)={0xffffff81, 0x7, 0x881f, 0x5, 0x7}, 0x14) prctl$PR_GET_FPEMU(0x9, &(0x7f00000001c0)) r4 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) r5 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f0000001800)=""/4096, 0x1000) r6 = add_key(&(0x7f0000000240)='trusted\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r5) r7 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r7, &(0x7f0000001800)=""/4096, 0x1000) r8 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, r7) keyctl$negate(0xd, r6, 0x9, r8) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r9 = syz_open_dev$binderN(0x0, 0x0, 0x800) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000017c0)={0x0, 0x0}) r11 = gettid() ptrace$setopts(0x4206, r11, 0x0, 0x0) tkill(r11, 0x3c) ptrace$cont(0x18, r11, 0x0, 0x0) ptrace$setregs(0xd, r11, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r11, 0x0, 0x0) tgkill(r10, r11, 0x3d) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000002800)=ANY=[@ANYBLOB="11634840000000000000000020000000000000000000000000000000000000000000000050000000000000001800ec0000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a627700000000000000000000000000000000000000008561646600000000000000000000000000000000000000000000000000000000852a627300"/80], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000001800000000000000380000002a231742"], @ANYBLOB="0000f77ad00000795100b08a42e1120c362c0ca64a8d02e2783d6247c5176ea2cc1d529afc005e8f7bcd1340c6fed0728e450a3e1690f4ec310486e3096ee0f361afff23505ec5e5bb2b9391463d9e50f86e72390cb112f016374ec3920d836f757d78728d6320fa7b1a805264706c5c642c5c89ab1e68913dd231b361b1d311"], 0x0, 0x0, 0x0}) 02:48:04 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) 02:48:04 executing program 5: pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x200000100000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x148, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="3800000010000507c20200070000000000000000", @ANYRES32=r9, @ANYBLOB="00000000000000000e0012000000010073737400000002002c0208001900000000000200fe8000000000000000000000000000bb00000900290000000000020000000000020000000000000000003b7a8bd9d9c643a80000"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r9}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @dev}]}, 0x28}}, 0x0) bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @random="962c85e043d8"}, 0xc) fcntl$setsig(r5, 0xa, 0x2b) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000080)={@local, 0x0, 0x1000000000000, 0x102, 0x2, 0x0, 0x6, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400400, 0x0, 0x1, 0x9, 0x2, 0x8}, 0x20) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r11, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getpeername$packet(r11, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000004c0)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) ioctl$TUNSETTXFILTER(r12, 0x400454d1, &(0x7f0000000400)=ANY=[@ANYRESDEC=r0]) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000100)=ANY=[@ANYBLOB]) accept4$inet6(r5, 0x0, &(0x7f0000000140), 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) accept4$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x140000) syz_genetlink_get_family_id$ipvs(&(0x7f0000001380)='IPVS\x00') 02:48:05 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='system.posix_acl_default\x00', &(0x7f0000000080)='\x00', 0x0, 0x1) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) lseek(r1, 0x800002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VT_RELDISP(r5, 0x5605) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000100)={0xfca7, 0x1, 0x8, 0x2, 0x100}, 0x14) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1) fallocate(r1, 0x3, 0x400000, 0x8020003) [ 580.807397] nla_parse: 28 callbacks suppressed [ 580.807405] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 580.845785] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.5'. [ 581.194358] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12152 sclass=netlink_route_socket pig=23956 comm=syz-executor.3 02:48:06 executing program 3: openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x323) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000180)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) r5 = socket(0x10, 0x80002, 0x0) bind$netlink(r5, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r5, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) connect$netlink(r5, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) ioctl$sock_SIOCOUTQNSD(r5, 0x894b, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) write$P9_RSTAT(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="6c0000007e0100000055000000000000000303000000040000000000000000000000000000000100160000000000001c000010002fa9656c696e75782f706f6c69637975782f706f6c6963794e"], 0x4d) sendto(r5, &(0x7f0000000340), 0xac, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) ioctl(r0, 0x8, &(0x7f0000000580)) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x20000, 0x0) write$P9_RCLUNK(r6, 0x0, 0xfffffffffffffca7) recvmmsg(r5, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[@ANYBLOB="b520000006000000e0517f08000000a72ed763cff694bd7f4ecab21e4a9ddec7483eee198c4f6efe09c408b6e91abe2e58ee53ab99de20f7d97f667e5c0f5604417042409a3f28e040eeb799c98c7ae4c1311a57724b2bcbb637e994a89d4610df8321088bf93a7b7c4c3b7b9756c1d51b26a96ea9e8c6d0268b83"], 0x79) clone(0x0, &(0x7f0000000640)="e1fea4c5bb0f699682fd37c5ad1a14d20afc2093db1a28cd359bd0ae7b53802fe27accc96526d718565c81ae3d4a901e0a1f01e37e5fcba72ad07c592309a4825b50a25a0884a172a71e035d3156888f8ae12bfbc4e837ba972d9a23cf4b56611f539eb172aa8978fc38a02b7b4349d39671579350b6d4969b18185ece417bc621f2043e734e95d87597df4e32c7", &(0x7f00000000c0), &(0x7f00000003c0), &(0x7f0000000700)="f1ea51d793d343ef785f269e27bc9b35c756a451c99cbdeb5d648ed9b1580c18f187e2995f273c52d3391c28b1683e5809aca445a286b013970945b55c23a3e82daa89d13cd66835e8ec0f39eb2e796f4ed003a859d79c2991ea0323ae2e822e5ec3110d58c4ca2294a4677dae26c6e4a9c7cdbca39458cd49ae1102a26bae5045287a8e69ece03c3462dca17c7e8a6e06e86b06d0db4e41b2c54c0cf3bef45b637fe0e4781bd864f9a72c51cafa76302a19aee7b4fc7aa00817dac545e7ed4e533b7058") ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000440)={0x4, 0x1, 0x7, 0xfff, 0xd, 0x9, 0x8, 0xfb, 0x1, 0x83d9, 0xfffffbfc, 0x4}) getxattr(&(0x7f0000000200)='./bus\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='systqm.\x00'], &(0x7f0000000800)=""/159, 0x9f) sendfile(r1, r4, &(0x7f0000000080), 0x9001) 02:48:06 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0x7}, 0x1c) r1 = dup2(r0, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x4e24, 0xfffffffb, @loopback, 0x659}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000240), 0x8) listen(r0, 0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) r3 = gettid() r4 = syz_open_procfs(r3, &(0x7f00000001c0)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') write$selinux_context(r4, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r5 = fcntl$dupfd(r4, 0x0, r2) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x20000, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x28af62c25667baf1, &(0x7f0000000280)=0x10000, 0x4) r7 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r7, &(0x7f0000000340)={0xa, 0x14e24}, 0x1c) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r7, &(0x7f00000092c0), 0x818, 0x0) sendfile(r7, r5, 0x0, 0xecc) flistxattr(0xffffffffffffffff, &(0x7f0000000500)=""/121, 0x1a1) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x20000004, &(0x7f00000002c0)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000640)={'icmp6\x00'}, &(0x7f0000000680)=0x1e) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r8, &(0x7f0000000340), 0xffffffec) recvfrom$inet6(r8, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000000)={'lo\x00'}) r10 = socket$inet6(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f00000004c0)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r11 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r11, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 02:48:06 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0}) 02:48:06 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) 02:48:06 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0xa577d940f0ef1eaf, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) pipe2(0x0, 0x0) ioctl$VT_OPENQRY(r1, 0x5600, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000080)=""/43, 0x2b}], 0xffffffffffffffc6, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, 0x0, 0x0) r3 = dup(r0) setsockopt$inet6_tcp_int(r3, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) openat$full(0xffffffffffffff9c, 0x0, 0x40, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240)=0x204, 0x327) time(0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) clock_gettime(0x0, 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) r4 = open(&(0x7f0000000900)='./bus\x00', 0x141042, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ftruncate(r4, 0x7fbf) sendfile(r3, r4, 0x0, 0x8000fffffffe) 02:48:06 executing program 5: pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x200000100000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x148, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="3800000010000507c20200070000000000000000", @ANYRES32=r9, @ANYBLOB="00000000000000000e0012000000010073737400000002002c0208001900000000000200fe8000000000000000000000000000bb00000900290000000000020000000000020000000000000000003b7a8bd9d9c643a80000"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r9}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @dev}]}, 0x28}}, 0x0) bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @random="962c85e043d8"}, 0xc) fcntl$setsig(r5, 0xa, 0x2b) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000080)={@local, 0x0, 0x1000000000000, 0x102, 0x2, 0x0, 0x6, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400400, 0x0, 0x1, 0x9, 0x2, 0x8}, 0x20) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r11, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getpeername$packet(r11, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000004c0)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) ioctl$TUNSETTXFILTER(r12, 0x400454d1, &(0x7f0000000400)=ANY=[@ANYRESDEC=r0]) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000100)=ANY=[@ANYBLOB]) accept4$inet6(r5, 0x0, &(0x7f0000000140), 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) accept4$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x140000) syz_genetlink_get_family_id$ipvs(&(0x7f0000001380)='IPVS\x00') [ 582.137991] audit_printk_skb: 1647 callbacks suppressed [ 582.137999] audit: type=1400 audit(1574736486.933:6258): avc: denied { sys_admin } for pid=2105 comm="syz-executor.3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 582.249924] binder: BINDER_SET_CONTEXT_MGR already set 02:48:07 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f00000001c0)=0x100, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) setxattr$security_evm(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.evm\x00', &(0x7f0000000280)=@ng={0x4, 0x10, "5f49234156ca7ed8c2270a5b828f87ec0caafe"}, 0x15, 0x7) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="852a6277000000000000000000000000000000000000000085616466000000000000000000001300000000000400000000000000000000008591031fc8429621b1162a627300"/89], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000018000000000000003800000000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) [ 582.249937] binder: 23998:24000 ioctl 40046207 0 returned -16 [ 582.285206] binder: BINDER_SET_CONTEXT_MGR already set [ 582.285219] binder: 23998:24004 ioctl 40046207 0 returned -16 02:48:07 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @loopback}, 0x0, 0x2}, 0x20) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000200)='/dov/input/erent#\x00', 0x5, 0x9780) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000240)={r3, 0x0, 0x708, 0x7fffffff}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x19) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000100)=0xb, 0x81400) getsockopt$inet6_mreq(r6, 0x29, 0x14, 0x0, &(0x7f0000000180)) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x\x11k4\xd3\x1b\x05\xaf\xf0\x1eyRN\xc9\xc6V\x00\x02\x00\x00\x00\x00\x00\x00\x00', 0x275a, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) dup2(r10, r9) r11 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) sendfile(0xffffffffffffffff, r11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0x40400, 0x0, 0x3, 0x3, 0x0, 0x3}, 0x20) wait4(0x0, 0x0, 0x0, 0x0) [ 582.298749] audit: type=1400 audit(1574736487.103:6259): avc: denied { sys_admin } for pid=2097 comm="syz-executor.1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 02:48:07 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) [ 582.300504] audit: type=1400 audit(1574736487.103:6260): avc: denied { sys_admin } for pid=2097 comm="syz-executor.1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 582.306334] audit: type=1400 audit(1574736487.103:6261): avc: denied { sys_admin } for pid=2097 comm="syz-executor.1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 582.339120] audit: type=1400 audit(1574736487.143:6262): avc: denied { create } for pid=23994 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:semanage_trans_lock_t:s0 tclass=rawip_socket permissive=1 [ 582.353779] audit: type=1400 audit(1574736487.163:6263): avc: denied { bind } for pid=23994 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:semanage_trans_lock_t:s0 tclass=rawip_socket permissive=1 02:48:07 executing program 1: openat$keychord(0xffffffffffffff9c, &(0x7f0000000140)='/dev/keychord\x00', 0x1a1000, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, 0x0, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) [ 582.355889] audit: type=1400 audit(1574736487.163:6265): avc: denied { node_bind } for pid=23994 comm="syz-executor.2" src=20004 scontext=system_u:object_r:semanage_trans_lock_t:s0 tcontext=system_u:object_r:node_t:s0 tclass=rawip_socket permissive=1 [ 582.369459] audit: type=1400 audit(1574736487.163:6266): avc: denied { sys_admin } for pid=2097 comm="syz-executor.1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 582.378347] audit: type=1400 audit(1574736487.183:6267): avc: denied { connect } for pid=23994 comm="syz-executor.2" lport=20004 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:semanage_trans_lock_t:s0 tclass=rawip_socket permissive=1 02:48:08 executing program 5: pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x200000100000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x148, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="3800000010000507c20200070000000000000000", @ANYRES32=r9, @ANYBLOB="00000000000000000e0012000000010073737400000002002c0208001900000000000200fe8000000000000000000000000000bb00000900290000000000020000000000020000000000000000003b7a8bd9d9c643a80000"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r9}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @dev}]}, 0x28}}, 0x0) bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @random="962c85e043d8"}, 0xc) fcntl$setsig(r5, 0xa, 0x2b) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000080)={@local, 0x0, 0x1000000000000, 0x102, 0x2, 0x0, 0x6, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400400, 0x0, 0x1, 0x9, 0x2, 0x8}, 0x20) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r11, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getpeername$packet(r11, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000004c0)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) ioctl$TUNSETTXFILTER(r12, 0x400454d1, &(0x7f0000000400)=ANY=[@ANYRESDEC=r0]) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000100)=ANY=[@ANYBLOB]) accept4$inet6(r5, 0x0, &(0x7f0000000140), 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) accept4$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x140000) syz_genetlink_get_family_id$ipvs(&(0x7f0000001380)='IPVS\x00') [ 582.616411] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 582.616420] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.5'. [ 582.911845] binder: BINDER_SET_CONTEXT_MGR already set [ 582.911858] binder: 24011:24019 ioctl 40046207 0 returned -16 [ 584.417168] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 584.427545] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.5'. [ 584.809468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12152 sclass=netlink_route_socket pig=24044 comm=syz-executor.3 02:48:11 executing program 3: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0x8d, 0x4000000000000800, 0x1}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000040), &(0x7f00000001c0)}, 0x20) vmsplice(r2, &(0x7f00000001c0), 0x3, 0xe) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b700000001ed01edbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b7060000080000004d400300000000005504000001ed009a3400000000ffffffbc640000000000007b1a00fe000000001d00000000000000b7010000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693002e7f3be3618ef1e50becb19bc461e91a7168c5181554a090f3204fc966a1275daf51ebd615b6bf01c8e8b1b5e4fef3bef70548aec0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc6422af4516c8608867f3e1b16cb7798b3e6440c2fbdb00a3e35208fc620d2cd8dff0c710e4cdbf4fc41fbb07f94369e646b8ee6de2109fbe4ef154400e2438ec649dc7c075098836a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda8a3658d4202c028bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d873fcd0e06dd31af9612f2460d0b116c930bb34698454bcfb1008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06ad99edc3a6138d5fcfba53f8d0c5dff616236fd9aa58f2477184b6a89adafffffffffffffffd228a40f9411fe7226a4040996e37c4f46756d50b928f63fc77b830282294484fa6da21b629865029e3bd90ecf517a2d0ab5b79d6041cb17a475f677085eaa790167cdd110d9fcc36a8dc6cf1c8e24fe23d7b67259611b731c6fc186844deadc5bdaa83c0556cbb3c059516806c9b3382fa112a062deb156619f6d14206180c0d4201ddb5e08f8325537bdfcb5e63d851e44dd66a233020e21523d52fb773cae297bb9c53b24e05e3c7e47420849fec082cb98cc58a3005d3dc31ef661261ddce821b6322061516eb2000000632058e42ccbf931b694069c46818c26e5a5396d975aad73cc0c4ea176dd51a6efe7d6c32ff62e0c63aa73feac44dd37775d26a406371fdccc17cfc9440108b6871d4a90978859534ff3b0688e4a28232980b5ffe49c8d0df46ad2a47e871ff9b6f2a71c485a1a2c4fc9a1d4dca04bdf2e55f61c585bf681c879457c5b10bd8847d31a11f00fd29f2c0af08d67b003f41e0aec206eafa65ceeb5ff9150e185077dc6e8f4a8e0b7afc0b84c711200c330767e85e0ad2f55853fb910a1185107ba81f690f5f0d5d14cd21b2bd3f884a250e769c3c20dd8260ae6f2dda82ae27012c290920a58f6000000000000000000000000001ac32344a9be361b378f35897316606fa2ec9cd1e3d1e1bd2a5d784758a69ba843838413052bc3b94d305a891692e92041c0c8743988eea18c974dd27412a9b9fff734fc7469a5f2f6c45bbf000000475a4c2105cbd938530bee180bbaf968dd4dcee1ff647dc9da36d7fdcfcfb508732f587d5e7b154919ea6a322535ab196398927cc4a77ee4f09aba17981cae6fb1a6e7f822279b25acdb84b164ead8930c86c7b0837865d215d51ea71ae199e18d7ebc2826696cf387a8799c51889fa5aa972a06ebbdb8a796d878c5181bc7910a387d84b042a583f40cb2141924964dd60903a9db58d2bdf8eb77c9cf25248cbd7dfe074c87480a4a0d6ec9ad4e889d879258f7c1ae9800467a054f3a4e6d64d6216853ba3a6f2c1b37927f83bec6df1798e618007986d2fcaf702e6b4de43fb48a28862c9d137c387e888fb9504ba46f311937870ca8abdca4d724ee5871fdf6f2979766fca1fd05f0ca3a1ebe7aa4ba0a97d0a079bfbb8f234295aa6b29dab66383a2be94915b0bae75be6eaba235852038d91896ad074feeffa0286faf25d0a9b536707c740029a7ad01bd7f43c3f50fbd373e1f69576b12338449e8c40f79211f9c43099b785a2bc427a0da23f5b66afd9db0d22b9cb7148f465efc01ad92cf33c7e201130a4975f42cb8302cfb9012f60ff41b369455fbd1dfab44ffc2a1fc034b1554c49ad038f9e8c502fb0b945baa7f44a18facd7689954d7ed8ff8454088e0c694e66442b3b713c057a9fec2146bcc4e9e07c3334e1550e44124a002feb1dcab50b244359537bf21077ebe1ea53abf16e5aa4bd1f8e0d7800bd2d119cf65a53879063d48c2f8f24c31cce7254db175b8cdb3dfa42c16a2fb7438b642938d3cfd9760dc3f5205ab2e7411bce914a29db165759c489083c2917c77e08ebb7d26d3989e2f48506732f45c98934cce03024bdb61b0f59c18d9562f3169a32a4e35a57f2f3ac4c935af00016f00"/1605], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffdb7}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) write$tun(r6, 0x0, 0x0) r7 = creat(&(0x7f0000000140)='./file0\x00', 0xb7ab56357c7a5cd3) fallocate(r7, 0x0, 0x0, 0x4003fe) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000040), &(0x7f00000001c0)}, 0x20) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r8) fchdir(r3) r9 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)) r10 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) io_setup(0x800, &(0x7f00000001c0)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r12) r13 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680)='/dev/loop-control\x00', 0x80, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r13, 0xc0406618, &(0x7f00000006c0)={{0x2, 0x0, @descriptor="13498f6dbfd9380c"}}) io_cancel(r11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x8, 0x902, r12, &(0x7f0000000300)="be6ce12496608bb8726747fc0246f5a93342d0dad3fca6660111758f1758406b5ebb1a752b266102842b634db387336c30fce4007ee80d7be7ed2c7174f466421ee0fbd2ee8afa936d50eac3a72a7952331020bd57912949269918b87cb29ea8ac19b358639722acf00488dcc54f3914b3b4d3bb981d4ed2818b3c993aa33ea8523121dd4aec35b42789c699ad66d94b0c7416670fd41f05817b0079465a17b590834e7aee936dbf6ff0664e98bf42431f3cfc78a00fbe3ac397f1273b", 0xbd, 0x7}, &(0x7f0000000440)) write$FUSE_INIT(r9, &(0x7f0000000000)={0x50}, 0x50) clone(0x82290800, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r10, &(0x7f0000000200)='threaded\x00', 0x175d9189) 02:48:11 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) ioctl$TIOCLINUX3(0xffffffffffffffff, 0x541c, 0x0) fchdir(r0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/avc/hash_stats\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRES32], 0x4) fchmodat(0xffffffffffffffff, &(0x7f0000000540)='./bus/file0\x00', 0x80) setsockopt(r1, 0xfffff61f, 0x8, &(0x7f00000004c0)="c5eba1470be4348ad495ebf470c34d65425b", 0x12) pipe(0x0) ioctl(r0, 0xfffffffffffffffe, &(0x7f0000000600)="b00473") ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x1ff, 0x6, 0x13, 0x0, 0x9, 0x7, 0x2, 0x6}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) preadv(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) read(r5, &(0x7f0000000000)=""/250, 0xedf1d44) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f00000001c0)={0xc, @loopback, 0x4e22, 0x1, 'none\x00', 0xd, 0x0, 0x1}, 0x2c) write$P9_RCLUNK(r2, &(0x7f00000000c0)={0x7, 0x79, 0x1}, 0xffffffffffffffca) fchdir(0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/146, 0x92}, {&(0x7f0000000380)=""/63, 0x3f}], 0x2, 0x3f) readahead(0xffffffffffffffff, 0x7f, 0x210a) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r7 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_type(r7, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000500)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r7, 0x660c) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x36, 0x0, 0x0) 02:48:11 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_netdev_private(r1, 0x89f6, &(0x7f00000000c0)="871dd3a97e5db8b49da69afb5e9c9d9b4889d7cc303d9170b4b88ce4f77d773b7c1b0912e43dc4f77db4c2d82961e90ba4e65ebcb4213603d59cf41dca733e74a328d5552d3e039249b3ce82fadf164479e5a72331f99f2bdfbed2211d0d617a20ed8528321da1f6f4df397c465629da04d669ec346542b0e768118258912982daa57f8e537c4f1b5f212e5b91169879ea9bc6f4b5c125f68b37be8099") ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket(0x0, 0x80000, 0x8) getsockopt$bt_hci(r3, 0x0, 0x3, &(0x7f0000000200)=""/154, &(0x7f00000002c0)=0x9a) dup(r2) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000001c0)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x3c}, [@ldst={0x5}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 02:48:11 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) sendmsg$netlink(r5, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1400f5a5b000000000000001000000011655ba145e12343d15d432502f5832775f33c7fb8ead31d41390733c3a1e2e0c2e230e6fb9eb1870d4936b4fdfc95f7490a6b5d577002c8a56a26acf0a023745263fda910f7973f2d4f8cb6f3942f3228fd2d7d986dd0177754ae9a09446e987e6995622ad311b26609eafa95faa4ed6ec66b48c3523d51c0edd20aee5392ef42e1eae0cbafc4259ebd21aa7973bb8ed58248b21a26dc12505b7b5b3ace71e19792e2df2f9", @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYRESHEX]], 0x18}, 0x4000011) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r6) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f00000000c0)={'ip6_vti0\x00', {0x2, 0x4e21, @broadcast}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$PPPIOCATTACH(r9, 0x4004743d, &(0x7f0000000140)=0x1) r10 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r10, 0x40087703, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$TUNSETVNETLE(r12, 0x400454dc, &(0x7f0000000100)=0x1) mmap(&(0x7f00006ff000/0x4000)=nil, 0x4000, 0xe, 0x10, r8, 0x4000) r13 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r13, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r13, 0x0) ioctl$ASHMEM_SET_NAME(r13, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, 0x0, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) 02:48:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0x7}, 0x1c) r1 = dup2(r0, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x4e24, 0xfffffffb, @loopback, 0x659}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000240), 0x8) listen(r0, 0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) r3 = gettid() r4 = syz_open_procfs(r3, &(0x7f00000001c0)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') write$selinux_context(r4, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r5 = fcntl$dupfd(r4, 0x0, r2) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x20000, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x28af62c25667baf1, &(0x7f0000000280)=0x10000, 0x4) r7 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r7, &(0x7f0000000340)={0xa, 0x14e24}, 0x1c) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r7, &(0x7f00000092c0), 0x818, 0x0) sendfile(r7, r5, 0x0, 0xecc) flistxattr(0xffffffffffffffff, &(0x7f0000000500)=""/121, 0x1a1) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x20000004, &(0x7f00000002c0)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000640)={'icmp6\x00'}, &(0x7f0000000680)=0x1e) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r8, &(0x7f0000000340), 0xffffffec) recvfrom$inet6(r8, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000000)={'lo\x00'}) r10 = socket$inet6(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f00000004c0)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r11 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r11, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 02:48:11 executing program 4: ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000001600)={0x5, 0x8000, 0x0, 0x101, 0x9}) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0xd432}) pipe(0x0) syz_open_dev$loop(0x0, 0x3, 0x51d00) write(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000001c0)) ftruncate(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="962c85e043d8"}, 0x14) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2b) io_submit(0x0, 0x0, &(0x7f0000001500)) fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f0000001640)='security.SMACK64TRANSMUTE\x00', &(0x7f00000013c0)='TRUE', 0xfffffffffffffee3, 0x0) setitimer(0x1, &(0x7f00000000c0)={{}, {0x0, 0x2710}}, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e5e2) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) dup2(r3, r0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80000001) socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000380)=0x83, 0x1fb) open(&(0x7f0000001240)='./file0\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000011c0)='net/dev_mcast\x00') r4 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r7 = gettid() ptrace$setopts(0x4206, r7, 0x0, 0x0) tkill(r7, 0x3c) ptrace$cont(0x18, r7, 0x0, 0x0) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r7, 0x0, 0x0) r8 = syz_open_procfs(r7, &(0x7f00000004c0)='\xd7\'D\xcf\x0f0\xb5[\xbc\xe5\xbe3\x12\xf2et\xf5\x91\xed\x16#*\xae]]\xc6\xef\x94\xde7\xc3\xc8\xf6\xf0)\xcfX\x9b\x9cY\"\xbf\x1d\xfc!\x13\xf8I\x0e*\xef\xf9\xe5\xb5&U\x0eu\x9d>\x82\x06\xfd\x1a\xbd_N\\3\xdaT\xb4t1\xd6Q\x863\xec\xf2cwv\xd8\xf4\xce_\x8d\xecD)\xc6\xc57f\x9e\x8c\x89\xacK\nne\xd5PU\x0f>\'p\x0e\x85\xe6\x97\xa0\xab\xcd\x8f\x84\x90\xa42\x8eW\xebR`D\xc0\xbaf\xfa\xb4{\x9ep\x17') getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x0, r9}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9}) bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) lseek(r5, 0x0, 0x2) sendfile(r5, r6, 0x0, 0xfffffffffffffffc) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) r10 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r10, r10, &(0x7f00000002c0)=0x202, 0xdd) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x4, 0x0, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14) lseek(0xffffffffffffffff, 0x0, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc) r11 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r11, 0x4, 0x6100) r12 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r13, r13, &(0x7f00000002c0)=0x202, 0xdd) getpeername$packet(r13, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r14}) lseek(r11, 0x0, 0x0) sendfile(r11, r12, 0x0, 0xfffffffffffffffc) ioctl$LOOP_CLR_FD(r12, 0x4c01) openat$zero(0xffffffffffffff9c, &(0x7f0000001200)='\x00\x00\x02\x00', 0x400000, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000600)='-{vmnet1[cpuset\'wlan0${system$\x00\xca\xa4\xce\xf0\xf2a\xc51\xc0Cl\xfep\x84\xf1\x8a\xf4\x1b\xc3~{2\x01g\x11\x80R\x80\xbb\x03\xac \xda\x817\x88\x01Y^>\x1c\xb8\xc5\xcaw\xc5\xab\xa3x\x90>\x86qW\xa8\xb7\xdb\xa1\xd6xS\xb2:\x87\x12\x03\xafV\x85\xc4\x0e~\x89\x18\x86\xd4\xd2\xc1\x00\xda\x9b.', 0x71, 0x2) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000780)=""/114) syz_open_procfs(0x0, &(0x7f0000000100)='net/icmp\x00') 02:48:11 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = gettid() r2 = eventfd2(0x87, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000000)={0x0, 0x0}) r4 = getpgid(r3) syz_open_procfs(r4, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') timer_create(0x4, &(0x7f0000000040)={0x0, 0x2a, 0x0, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r5, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) connect$inet(r5, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000480)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@tmpl={0x44, 0x5, [{{@in=@multicast1}, 0xa, @in6=@mcast2}]}]}, 0xfc}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000580)=@updpolicy={0x1100, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@algo_auth={0x1048, 0x1, {{'sha3-224-ce\x00'}, 0x8000, "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"}}]}, 0x1100}}, 0x40006c40) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r5, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x2c, r9, 0x1301, 0x70bd2c, 0x25dfdbfb, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @l2={'eth', 0x3a, 'rose0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044011}, 0x10101) sendmsg$nl_xfrm(r8, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="fc000000190001000000000000000000ff010000000000000000000000000001ac1414aa00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000edff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500e000000100000000000000000000000000000000000000000a000000ff02000000000000000000000000000100000000000000000000000000000000000000004137f9e5c85bee9302303aed38999669112e6dc225c3903dfa90739ee97620ea5b80446cf61ba757f0064b21b313f38077e55527760ae77836"], 0xfc}}, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000013) setsockopt(r6, 0x1ff, 0x0, &(0x7f0000000380)="38a09a8a3a0b165a89f1249aa5968c2fc952212c3d8e15e50e8190ad30af47645aea5430fe630978607a925fc1640e218201feaab2db2403d96aa06364100f0e62ef142cf0d3b53c1f964d4fe18fb71bfc", 0x51) 02:48:11 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, 0x0, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) [ 587.159701] audit_printk_skb: 4533 callbacks suppressed [ 587.159717] audit: type=1400 audit(1574736491.963:7780): avc: denied { net_admin } for pid=24080 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 02:48:12 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000180)) pipe(&(0x7f0000000640)) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0xfa) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x40000) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f0000000140)={0x2, [0x0, 0x0]}) write(r5, &(0x7f00000001c0), 0xfffffef3) r6 = open(0x0, 0x20141042, 0x0) pipe(&(0x7f0000000300)) pipe(&(0x7f0000000300)={0xffffffffffffffff}) ioctl$EVIOCSABS3F(r7, 0x401845ff, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x0, 0x7f}) ioctl$EXT4_IOC_SWAP_BOOT(r6, 0x6611) read(r7, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x182) r8 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r8, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) dup3(r6, r7, 0xc0000) syncfs(r1) [ 587.165444] audit: type=1400 audit(1574736491.963:7781): avc: denied { write } for pid=24057 comm="syz-executor.2" laddr=::ffff:127.0.0.1 lport=20004 faddr=::ffff:127.0.0.1 fport=20004 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:semanage_trans_lock_t:s0 tclass=rawip_socket permissive=1 [ 587.166422] audit: type=1400 audit(1574736491.963:7779): avc: denied { net_admin } for pid=2095 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 587.166658] audit: type=1400 audit(1574736491.963:7782): avc: denied { write } for pid=24057 comm="syz-executor.2" laddr=::ffff:127.0.0.1 lport=20004 faddr=::ffff:127.0.0.1 fport=20004 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:semanage_trans_lock_t:s0 tclass=rawip_socket permissive=1 [ 587.168983] audit: type=1400 audit(1574736491.973:7784): avc: denied { net_admin } for pid=2100 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 587.171006] audit: type=1400 audit(1574736491.973:7785): avc: denied { net_admin } for pid=2100 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 587.173720] audit: type=1400 audit(1574736491.973:7786): avc: denied { map_create } for pid=24072 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 02:48:12 executing program 3: clone(0x1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0xfffffffffffffffd, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) sched_getparam(r3, &(0x7f0000000080)) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)) ptrace(0x10, r0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r5 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x20000, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000001140)={0xffffffffffffffff, 0xfffffffffffffe48}) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x101100, 0x0) ioctl$UI_ABS_SETUP(r6, 0x401c5504, &(0x7f0000000180)={0x6, {0x1, 0x100, 0xfffffffb, 0x101, 0x41, 0x8}}) [ 587.182021] audit: type=1400 audit(1574736491.983:7788): avc: denied { dac_override } for pid=24072 comm="syz-executor.3" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 587.184635] audit: type=1400 audit(1574736491.973:7787): avc: denied { net_admin } for pid=2095 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 587.187939] audit: type=1400 audit(1574736491.983:7789): avc: denied { net_admin } for pid=2100 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 02:48:13 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) 02:48:13 executing program 4: clone(0x2000004100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4200, r0, 0xfffffffffffffffe, 0x1) tkill(r0, 0x14) ptrace$cont(0x420b, r0, 0x8, 0xfffffffffffffe63) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f0000000280)='/dmv/ashme\xed\x00') fcntl$getown(0xffffffffffffffff, 0x9) r2 = fcntl$getown(r1, 0x9) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x1c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)="d1b1f00af6c1dca9e07bdab2cac33e8cbdf82517077227e741458ebb810ab14ce92d2f8be2271c869e78d58235114407cc84d233f25789deb63d2fa96e24523b0bdaa4df0b0c1ac1e7e0e30b05c8cfbd4578ac5f1385bb3e2a91ae576a7855dd7db654e85deca8079a48a8fedf9cf5d1bf78d9f8550ee4f2e63206a10212f917f85a4a125016a31e3987fb9da8db81e1642efa6d36da5c954d6076c642c4e111b6deb78fdffe4446038c5f5af61763443b4db0c88370f76e") tkill(r2, 0x15) 02:48:13 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) recvmsg(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/108, 0x6c}, {&(0x7f0000000080)=""/162, 0xa2}, {&(0x7f0000000180)=""/141, 0x8d}, {&(0x7f0000000240)=""/223, 0xdf}], 0x4, &(0x7f0000000580)=""/4096, 0x1000}, 0x12120) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PIO_CMAP(r4, 0x4b71, &(0x7f0000001600)={0x3, 0x101, 0x80000001, 0x0, 0x8, 0x1}) write$P9_RLERROR(r2, &(0x7f00000015c0)={0xa, 0x7, 0x2, {0x1, '%'}}, 0xa) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0) 02:48:14 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) 02:48:14 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_open_pts(r1, 0x4000000000000002) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r5, 0x0) ioctl$ASHMEM_SET_NAME(r5, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r4, 0x8200) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x2, 0x0) write$binfmt_misc(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00'], 0x1) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x4800002, 0x11, r5, 0x0) getresuid(&(0x7f00000004c0), &(0x7f0000003280), 0x0) ftruncate(r3, 0x2081fc) fcntl$setstatus(r1, 0x4, 0x44800) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) 02:48:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0x7}, 0x1c) r1 = dup2(r0, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x4e24, 0xfffffffb, @loopback, 0x659}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000240), 0x8) listen(r0, 0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) r3 = gettid() r4 = syz_open_procfs(r3, &(0x7f00000001c0)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') write$selinux_context(r4, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r5 = fcntl$dupfd(r4, 0x0, r2) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x20000, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x28af62c25667baf1, &(0x7f0000000280)=0x10000, 0x4) r7 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r7, &(0x7f0000000340)={0xa, 0x14e24}, 0x1c) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r7, &(0x7f00000092c0), 0x818, 0x0) sendfile(r7, r5, 0x0, 0xecc) flistxattr(0xffffffffffffffff, &(0x7f0000000500)=""/121, 0x1a1) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x20000004, &(0x7f00000002c0)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000640)={'icmp6\x00'}, &(0x7f0000000680)=0x1e) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r8, &(0x7f0000000340), 0xffffffec) recvfrom$inet6(r8, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000000)={'lo\x00'}) r10 = socket$inet6(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f00000004c0)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r11 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r11, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 02:48:15 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000000880), 0x4000224, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x4}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8020000}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:48:15 executing program 5: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0x8d, 0x4000000000000800, 0x1}, 0x10) vmsplice(r2, &(0x7f00000001c0), 0x3ca, 0xe) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu\x00', 0x200002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x6, 0x0, 0x4000000000000800, 0x1, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x200}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000040), &(0x7f00000001c0)}, 0x20) fchdir(r3) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)) r6 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x6100) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r7, &(0x7f00000000c0)='./file0\x00') mkdirat(r7, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r8 = open(&(0x7f0000000080)='./bus\x00', 0x141046, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r8, &(0x7f0000000740)={&(0x7f0000000040), 0xc, &(0x7f0000000700)={&(0x7f00000009c0)=ANY=[@ANYBLOB="64000000f501e2a7334f450b53a86b544fc9aa77dbab2c18af528bece978ebad120aaf77a8e29f6bec87cad295bd816add1beb86d6deb4ad1a016029f75d028f15a39bc2dab32e517a54d7b426ad0f8d5e8e1b104e270fffc1f92a51df347765d916c6db", @ANYRES16=r9, @ANYBLOB="10002cbd7000fcdbdf2515000000440009080800020000000000080001000065d900000008000200e55d0000080002009104000008000200a800000008000100f7ffffff080002009801040008000200040000000c00060008000100090000ffc2ac1490be9197db688dfbdc4ca526c241932f2c30fc10233b32ec2696651487e0045ef38571ca0ae3cdd41cfc3e69463f8d2d8d72a6ac53cc9e6f7c7669c858b10956f4feab4e7e38ed61b9b52367e62e93a24412d644a8a3e72095ad4bca66e7e6620254"], 0x3}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000894) sendmsg$TIPC_NL_BEARER_SET(r7, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40c028}, 0xc, &(0x7f0000000480)={&(0x7f0000000780)=ANY=[@ANYBLOB="e8010000", @ANYRES16=r9, @ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x20000000}, 0x400) write$FUSE_INIT(r5, &(0x7f0000000000)={0x50, 0x8000000000000020, 0x0, {0x7, 0x1f, 0x0, 0x0, 0xfffc}}, 0x50) clone(0x2142001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d9189) socket(0x4, 0x2, 0x1e) r10 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r10, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r10, 0xc0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x3}, 0x0, 0x0, &(0x7f0000000080)={0x3, 0x7, 0x5, 0x80000000}, &(0x7f00000000c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0x24}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=r11, 0x4) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r11, 0x4) fcntl$F_GET_RW_HINT(r12, 0x40b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) write$input_event(r1, &(0x7f00000001c0)={{0x77359400}, 0x5, 0xfff8, 0x8}, 0x18) readahead(0xffffffffffffffff, 0x6, 0x100000000) pwrite64(r6, &(0x7f0000000500)="8f2d0b68f901b970c304881a7c0f467deff28699261da94e9957dad1060779f40d1e3467fd794bd2c5cf3ecc8e4420c793a17a7765aa22b3095e1c46fd66e58902d4df88541abfb4e779ca0dbbe2fc73a7534fae7b5bb18856c761e6778b30f7cfdb4029adf3aefb013bfde2a6e3790147250f9a388b1a3104152bcaa5b78257bd6c31793a51178b8ee4e87cc3d6c0c450b8c5bbe8ca12fb4fa7a6029f95bdd9fe26ceea89b8fc2d6a849ff182267e4d4d510aebeacd16c5435783cccb6d288342325685bc2ee2d44c6e16c946", 0xcd, 0x0) 02:48:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000000)={0x324b, 0xfff, 0x3e}) r3 = socket(0x11, 0x2, 0x1) setsockopt(r3, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x3d9) 02:48:15 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) 02:48:15 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x3f) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r1) r3 = socket$unix(0x1, 0x5, 0x0) connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r0], 0x18}, 0x0) close(r0) r4 = socket$unix(0x1, 0x5, 0x0) close(r4) 02:48:16 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendmmsg$inet(r0, &(0x7f00000035c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000700)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000003840)=ANY=[@ANYBLOB="6c000000000000000000000007000000050000000000001414aaac14141689489a7ad31422000000e7e000000200000000ac14ad088914140aac1e0001ac1414bbac1414bb44140860e00000027fffffff00000002fffff80500"/108], 0x6c}}], 0x2, 0x0) 02:48:16 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) 02:48:16 executing program 3: r0 = syz_open_procfs(0x0, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) dup2(0xffffffffffffffff, r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='\x00\x00\x00z\x05IQ\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0xd432}) pipe(0x0) read(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000000)) write(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r2, 0x0, 0x4008010) ftruncate(0xffffffffffffffff, 0x0) io_setup(0x80000009, &(0x7f0000000380)=0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f00000005c0)=""/4096, 0x18) io_submit(r4, 0x20000000000000c9, &(0x7f00000004c0)) setitimer(0x1, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x7530}}, 0x0) r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000011c0)='tasks\x00', 0x2, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = accept$inet(r6, 0x0, 0x0) sendto(r3, &(0x7f0000000440)="9a2e0aefbf82d722a84e995c052871b118938eeab8fb4cbe5eafa578ef5cae84933697fbfdbb4ea508e2aa5ccd7eb04a3c0347f8d56e1c6d9bac9f512286d259a7c357ea9eeeb5da034b18226837fb90e9e7f002d1bb", 0x56, 0x40800, &(0x7f0000001240)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x3, 0x4, 0x4, 0x1, {0xa, 0x4e24, 0x9, @mcast2, 0xd58}}}, 0x80) pipe(&(0x7f0000000140)={0xffffffffffffffff}) write(r10, &(0x7f0000000540)="4e0e25b561211d9ea321054aef46997621e931832c4a843b36b24460f63ea76cfa85ec5244809b9d1f88a1a1cf9cd4cdf660ff949a2df49e20430d8f35c65f4cc2bb107941757f52ba0842604a004f2e", 0xffffffffffffffb7) read(r7, &(0x7f0000000200)=""/250, 0x50c7e5e2) r11 = socket$inet6(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) dup2(0xffffffffffffffff, r11) r12 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r12, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r12, 0x1, 0x6, &(0x7f0000000280)=0x8, 0x4) connect$inet(r12, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r12, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r13 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @multicast2}, 0x10) setsockopt$sock_int(r13, 0x1, 0x6, &(0x7f0000000280)=0x32, 0x4) connect$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r13, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r14 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r14, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r14, 0x107, 0x11, &(0x7f0000000100)=0x20c7, 0x4) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0x0) r15 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) dup2(r9, r1) sendfile(r8, r15, 0x0, 0x80000001) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r16 = gettid() ptrace(0x537cb90df83a7d4c, r16) syz_open_procfs(r16, &(0x7f0000000100)='nDcmp\x00') [ 592.193425] audit_printk_skb: 4675 callbacks suppressed 02:48:17 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080), &(0x7f0000000180)=0x4) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e70e) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)=0x0) sched_setparam(r5, &(0x7f0000000140)) creat(&(0x7f0000000700)='./bus\x00', 0x11) set_tid_address(&(0x7f0000000040)) write$FUSE_INIT(r4, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) clone(0x2142001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x11000490) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xfffffffffffffd02) socket(0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./control\x00', 0x8) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]) ioctl$RNDGETENTCNT(r6, 0x80045200, &(0x7f0000000340)) r7 = gettid() r8 = syz_open_procfs(r7, &(0x7f00000001c0)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') write$selinux_context(r8, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) accept4$unix(r1, 0x0, &(0x7f0000000000)=0x1a8, 0x800) write$smack_current(r8, &(0x7f0000000240), 0x2b) open(&(0x7f0000022ff6)='./control\x00', 0x20000, 0x0) r9 = openat(r1, &(0x7f0000000380)='./control\x00', 0x800, 0x200) mkdirat(r9, &(0x7f00000003c0)='./control\x00', 0x0) rmdir(&(0x7f0000000040)='./control\x00') [ 592.193437] audit: type=1400 audit(1574736496.993:9348): avc: denied { write } for pid=24166 comm="syz-executor.2" laddr=::ffff:127.0.0.1 lport=20004 faddr=::ffff:127.0.0.1 fport=20004 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:semanage_trans_lock_t:s0 tclass=rawip_socket permissive=1 02:48:17 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4000000c}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r5, 0x0) ioctl$ASHMEM_SET_NAME(r5, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) [ 592.270710] audit: type=1400 audit(1574736497.073:9350): avc: denied { sys_admin } for pid=2106 comm="syz-executor.4" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 592.296746] audit: type=1400 audit(1574736497.093:9351): avc: denied { sys_admin } for pid=2106 comm="syz-executor.4" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 592.321396] audit: type=1400 audit(1574736497.123:9352): avc: denied { sys_admin } for pid=2097 comm="syz-executor.1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 592.328093] audit: type=1400 audit(1574736497.123:9353): avc: denied { sys_admin } for pid=2097 comm="syz-executor.1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 592.342976] audit: type=1400 audit(1574736497.143:9354): avc: denied { sys_admin } for pid=2097 comm="syz-executor.1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 592.344158] audit: type=1400 audit(1574736497.143:9355): avc: denied { sys_admin } for pid=2106 comm="syz-executor.4" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 592.394323] audit: type=1400 audit(1574736497.193:9356): avc: denied { sys_admin } for pid=2097 comm="syz-executor.1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 592.404500] audit: type=1400 audit(1574736497.203:9357): avc: denied { net_admin } for pid=2106 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 02:48:19 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00008f6ff9)='mounts\x00') ppoll(&(0x7f0000a18000)=[{r3}], 0x20000000000000c8, 0x0, 0x0, 0xffffffffffffff54) r4 = gettid() link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) tkill(r4, 0x1004000000015) umount2(&(0x7f0000000300)='./file0\x00', 0x1d) 02:48:19 executing program 3: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) setuid(0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000d00)=[{&(0x7f0000000780)="0873afa616b1e61046c20597f7f5bb6fba9f6b2cda72517b8aa2930f67a9c2bbd9b8cedb0a3e6dc25a4c34d280fd299ad68a2546dcb46578bdc78cf010558bd4b8e0a2f79f"}, {&(0x7f0000000800)="a5d38a3b4fe11d08d290d8dd9fffaf84"}, {&(0x7f0000004ac0)="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"}, {&(0x7f0000000980)="bd51e25b21ba26cb0549271f3afdae9a7b2634912421c3652c4d0e010167a5c17ee4b902fc57db97bbc375d19a0bbdc5f7e63187559d462e9c99f8c665c943d005eff0f55a53d0053e1eb986872ec11038902ab1f64a58f001a8eba3f1f1c9e4b291d2a98f0b1d4e3d7622e5059ad5e3244ad7f1b554c2dec0b7a26241e743604a28927a5a010fe185393b9eab984666da40840443683e596a7ec433ad6bcca1416e7a1cf1a36ad80f6004ffbe46ea4bb86342f2118b236f71b8630a41a0104775"}, {&(0x7f0000000a80)="fbb64c3bbb63753737ad83410888d3f7693372813ad83179d8036549c4d717c7e469bf82bdc7170584827b6b692417628220d0ec5590559d08620b2f34e41520b0a328a3ef005c68147a41"}, {&(0x7f0000000840)="6ccd"}, {&(0x7f0000005ac0)="579f1aeed3c6d1f2af5071d03581b1f06a2be89ce584ace5ef2d70130727e772adbfe0d7cb87f977f696a7915250798f205a2b7c8d7ca2b7a582e5722afd80cdf2b8dcd2cf944256ff70643f4f17c9a7692518166ed01e301ec6af92ebc862d2d42d608ccb8412fb4283005df31e9cf76c27b611d56c735911ea631a2df582ff6db93676542c94275e8dec53b386a64686c57e62ca2cdafa3705eef5b68750c8ec45b66b779239232730aeea7485fdcdba579dcebc557a00f7f016496415d55530837d4062bce280275ce5295aaf0131cef12aa1491357cb2cb66d6b1c936f6af979b229e4705687b651883251aedf511261738797c837719659f452d1b7b4baf6f829ae48dd18ba3d7c65734666b48c7d3cd45d3267966faf768809dbec516f4e59aae2a98a54274c0182869aeae180e84c5d22b4808debf612dcc93381c6d8b7356b197be32b6474f7644194e5234bd23cdffb0dcc43ddd225a4f56371db2ed3b6341a17d576e0af027fb28f43a3fa8d98a23227d641d7f228b587b29064ca9405207d769fb0445e01db597580c5883e8b72bcfe82eea45feeb89e49fede97472fb12154bcf6bfacc9d89885c2a59f0662689b7012671d4871089fa0c947dc8d72fa000fa498da4b1f8390a46525b6da69bf1cebfb03495b67e0e96dc3ee5b9b4db55e4fb5dff80d9a31895cc0fd487a5a7eb2e82a5aa2401a947b44ddd14fc3cac57ec937d87fe6e891404d8804ef765a6e60e6f5605ac2c6505cdc7ad936c7566d4e3636cce034868d50ed45abd42c1571af672b06c0907019e508bbbaced578a1fb2a168cbd20db28fc7ad7a969c8b792d32ef625e6ee776332bca72f7beaed2bb3c1debef22d44f6d9771561455abc531a9ec3bb650e201687da76b651b96d6f6db9204d376e9aba08d82c208525bf81adfa195755c644740656f54db7401a5e415140d9ed14c32e07b613a647bc60461ff173ed14855c5bc360e7947acc66ee3320820da9a149cefbbe3cc0b3034483d06c83feaac5ae3ab0862664926f11e01349802261d747bb9470130a752019b0808b2aaf17fdfc90e711ad88ea8e31c5f544214e81d2ee05090041ab8ca7609981d34338d070fc32f55622de3473f39ad11dc97587b6a8f0ab0cdeaba727f2f7b7628d01f896a1f2a9e35dafa54dde3f5620bdb2bd1219a26a93e80ccd2f490038c362882216152df9b42e91a061f166dab147b1636353eaa9987133adb7bf4b5d1a584e6e68b64dd2c6c985b09f059efca4f3eb076790a6b072bbf79e9d178f23ed470c434a4a64ed899e04d7bb90d9fd91257dcb4c2a8508ec794120f420156b0e941eac13b9b9927991417afef07a5ef567549c16050eea0704e122126e981609615a00d256d0818b220755b923c2fa6f1dc75daca107af314bafa31ee2cede96372582508fe604934eaa52a5d23b043c81e95ce0d59415aab64c8e4cf6cc3607ac3f97f2da8ea6d2481d38fea161a9256c1e83f0f38dd65b7bd9b99e321086cc2012d1ef96925d6ffa3946f5dd51466c41860e93c72a4f69e1a52a00cb9127817a5ff3d8a694e6486537cf98f4c8c9709ce16e0ba8557b82b81e07fad0514dcf11a17429b4b0c72471a8fb03250d8194e73882f5f5063b17729db1c610b40527abb37b778076ae6b2c8acd173e12b93a7a052c1e7246dec43307cc8f4d6407f4b60b6c42b05d42af1bf42b0e1fd4d74acd874bf0099331a8dbd79c36510a1822b0cd62bc2d8de861bd559b9082dc52365699c89a8d5ea9adaba82c143bd1bc13c6728ea220a85ea57e03f0bd7c24201f6f253a467e979c17399667b2ebf22d782a956fb83b99f4fd3f3019f53b29ecb81556e0e0c1d54ce293fc217d8272cd2d2417e4322aa413fdc00e49cb7e465907ef81ea19ab2b0271796f5a60a55ddc701c58830b23af3bfdf2cb335bc6c1d549cffb32e1deb09528f3f1de3031769c0da96c516b3d9eab9d60ec91fb95a16f164599581c195fbca6cf19cfedfbdc6f0f95e0ce23e79fea98c718eb900566d5c3da69c5951aeb099778f9ba161877d61bc29c1c414c6cfa0d56d369bef627154fa51a6fbf2d5af5b4e3c9aceb597dee2f983bf0013edc59fa2d8b76a1d44eaf0b0db735f262ddffa4595cf2b21fa6ca9a429ae312ff7be847b28363bded3962e19192bfb9272994d7e69ff711d2e832b43d1b38f30010102d59b395582c49e794ccc6ac75c626a1f9df6143878e51324e13152837b142616feae8b644407ce1ebf481c3863adad55ead632c2c995ddc912c72d279ffafbe511bcc152c9baa9a5e5a7839599f3959f24a80182927fcc8818867ee0c6f8482de452cef8091db9c082c2d5c45f814f927771a8ac40c1b6e8f291689efae76ceb7df160fac3f4249b195a474954e3708cc3ef118b7222ce74f22ce416c2a01336ece4791afdee1e872fd31a7c497c7eeb22c5ece391043f727f11944246ff57e675cdfcdd1f8db11d6671a30e50879f3cb98df528756da765bbf892fb56911492c2e267331c5d9e0449f6fb95659dd3f1b4f7f13b022f52e19edfdd56f166ad9b0cc12ad17e5a932003c890c428631b9eb05f6e9e763456b98622e83d903af885f4e7af1c564e08889e7dcb0b5955aef0d1716fcf216fc90a85d8323e42e988054629d20a950b97d4cb666b950109bc7f7e8837e001ec822c4f4ca3075f3943698236375535214b5ddd76947afe2bc6715db66aa71f25f08c01f115f87e90b11b935c1e5090b65225e111330341ab1e748273a76b50a1bb2650a19af98448a35fa97714cde78f775b74b54af1f1cc029275fad78c3257bef91df4f9ce46242654f9fbd5964db7f593cc049365d832c9b4d812ccdc8ae68eba6b7353e1885f312bbe3837057ee2b9e51c4851f4aa172a8c125e83c8ca89bf5a3e0bbb105c253eb96efb93d09d83745d4335dbd03ca0c1fbc7979fd0794d4d9cb3b2c8b4a1edf2be6777c98be35135179509721e6b70253e1bb412d116b2e7aca24cbeeaf307ea2a1917ad4ea2c78dd213b1d3d4b0dc27066f45aaff391836ebb68ee59b96121c921ab7ddbab4a065def8ba03ff79b958e15fa66eb04a58563c8f300a0f8f2442b51fe91abeaedd44afd42e3979a61bf6abf1d61ed7e67e8f74fd0e38c2fe4d80203143c67125fa5790ddd43734fd19e7c7f7bb09b74da4079fe1e3a611fa49f9e6f534f2d099ec1831cbf3b9494f85c6adc692a82667f490f82534939e5d452e47a6391d90c0af81a814b2bcb8c508ebf51acfc3a9283d67bc11f06f1494cd5e17709b7971b6d900ef3d4888048ccb10617f4bef34d4ccf5e36ee77812df848747c9b464af6e3a5aa40e56c1294c412abc3c5c903ef99ac6e1002804d8af7012e82072f72f2eb4c721a3add21488d709af121a42bf6df5a91cb1f108c53b6e6723d79a271949dc483ab457530e0ea1a0cce1895643ef1b69fc01d0e7a43a624f4dd90eb2b4fe42d0f4aa4a4b63653e1514268fb84c1e67e7ca88066c7c533e113cc5d3e0b3d38e535adb589349dcbacd0ea87933d86db82696dd80eb867e408369fe3f103ee898f1e506766e944db0bb579d6fdc01f69a682a32d1fc27ea00a169f9e4e348ecba2a72095837e5396bc9b0cb5da46e328bd5d249afbc31016858857c3f8dab389f98dc616cf250d0976fc4124817abd965d22ed42716ce38b3100a5d54e22cecca50c1f8024d505599395f5a8680ff95fce4b617624859787d7cd8e473520f11b37fd339522cbeffda0c2546b44bb1b8ee1f053d6ebe3e39c780789ab5ead032d242ec528dc135660d6a3ecb676a905697690bfd7d0bf4fbf1601844ab0549951422ff0583ff53245fa06b01fbdfd977e5ff833159354e7b4f683e3bc3ce5b03ac49fb8c5bdb2d488a34808260c319dc1a7a19d9b0e4396be94ce7c68623f878d3971f50e170654fc721d3006cef5a973ec581251075fdc88075db30a82e7aef4b3a4c587c4b9243d0ac933018bcd9c76c3f1780422b3622b99c0b0481ceca689a2cb3b680e4b94ae930504075e6db5f402f7ac0077efcaaca7e65090518b197f1a79e128d705653ff50e6ad058b4a218dc286068b90aaa573e0ef986817519f1794f978d42b0d5254628798b82c7a4c796f81d39876b17c4de17cc0b036029ac9cd4c5db5633b094a290fc489eacf9d38c5b1c3da9090c9fd4523e32016d8daa13b7762cea6484616bdac64d4ea0ee46c0533271a6c9ec33747d0ddf91b0e9e4f17a321136dbe1584ee8a587e833c50acb8fbfc8521169bbfae0c1aa98a1cf614552e613ccef2db1ca63e611cca1303d2cf98f04895bad79f04fad1c321edad68336fcb6073eb3beda49c5ae8e44ce2c705b242c4e8aec0651d726720dc90681ab70a70139bf7e0efc84474485a2c828f310a34a21752f9ce532e8f50b4df64513535e13eabccbd56121bc4d5171f4c002bea600eb55a5705695acb904e68045c0fdbee4e70ca066f34ac3d3cd659dd74f9eea925052c75aae9deb726535519d555d0fec5f94758ec1203b4e86c0f787ce891736483abee29548654a6b6c789fdfacdc4112ae639f35c9faa742facc5cf6752d9ab181eb5b2efa21fc6e3fbb2543f3e9543c95c68cf6c8e8529bad3ecbd444501df41a785a5fd8930334eb60e93991b89bdca8713f5ee69738539e0a45f1042ab7d21baf44b24fae976666f3736d1d52cef9bba0a77fa06f6b1ac99c39ceb64c900aeff2a942bd0602933f7e92cc2820e2de2312904f5afd33a3aa8aae22490cb645cf7d12dd78ecaa830d2f019ae81ebb507571a2ba1538b7ebb4c1e39d25a56672c645d232152c3f350065a864c7456bba1093b03a8a973886a05c43373801e09749383a27a392dfc073ef3fa28a06f8dde5015a5fb3a54adf1b295495025e86dc29411d7411b18dd99f3f1200b0b2ef3cae7ab4f0ff18bdff0d8455c84015954bbd06a1ad2e507c1d5cec46ab8e036f4b86a73284a785a4c41307511e612d70c0545aa5a3c3d4ebb2c559da9f9920a751a5af1beb5b2031af2ebfed4556ce62a5e84845919d1998a6e1481efd6830141c577c1a1e789dfc3754acb3c79f8ff898e6ef14258d80001b03ad8eb300c7836cec474191e745ee3558494a228bf172f448de0d70100496d4720ccf01095cd8a572804876c38ab94bb44a5cfb2aeda816fdee61f268326bd5c58a441a9adcada525841f1bf8c3bb83032dd60389f494f6a617e58760fca4018d2207b4de3a3ba0155835bf6ee71882899ce24f46d4276d0d82e68d48a8b097d6603ca7f4154843a7ffa33e305f03ffce6041d0a7b19e44e21ed04a9db81da3805344528624fca2ec24f9ec71021de2ba333be4962053c212e156d07019ebd915b15caf2d4e8c0535e21cc5df115aacaa4c2864b7cf69e10f87446450a68b9e28ce9f992197e11109887d0f8c455b93723d3f942a02e29608b3aa1440750c3cf37af0a7b0f3cc8e5e73e6dd0ddf1bae59ce81d3041ebc9de447a71924ea7ada964283dbda27ce1b65873cf407495834deb8fed42cc02ff454b73397245bf11f3e28b77a4df9e663b6a56e0161d34c3472fe59fa662ae79c98cfc6dd21fa57fa0195f9ff246cd2b70836663f8593a04e8b3c4551c0947f0b1e2835aeac186b25b18a36ca6e01259ddeaf3cfcc5ff936459b9fe624c5b880f887932b86a7094036476c40916136bafd892595be1d53fbd00c48a7d5467bb45db274b9d7f51c291d1fad6c6eb8efe39c46c410975bbf9060369465f0db42ab64652572d776cebfaeb"}, {&(0x7f0000000b00)="16a60b175cc478447c0ea699227d96dfaeb7e39e17aa36ab600962b77fb8e9cd979a4d683e3a37529ae5391f43459951d420b420e90417a9b1f992e108346e1af3ab6f614cff32023a569aa9998488d9aa3ccdb763ab19d90da0ef397dfcb5660440dc86706ed6ac35209345ccf1ef57094691cd53cbcafb8262ee50e200b25ac2e996d3e3d960ad231030af444cb885f197601b9515a777431b68135a5b3d4ead9839f28c679ef93965641f700e8661b71617228c40a2a52e31d459ef9dd3993ef900ae94a8942a7c25f398303b7a4efdaa0911c6be19b9"}, {&(0x7f0000000c00)="cddf087868b78f07d19e11e6ba8497d34c2db34a1c9b13fc0bbbabf989b22553cf6740113b7455f7d1b5ea90888c7a6cb95b2d8cf58ab5ebed362d0e15fd9ab126ec67cf1d03aa5acfc21197a7ad7eec1debbb9d7feeea5d5f4a950aa86c85bf4ed0a0f4c79f6125e90305caf6ba0ca53d2d309826ea5d8d7fe8916383a9c6f4c277381daa708b4dd63fe0baa61e69336276bd90e068e6d7e43a1b831721415c86bfbc999f4ad5d5f04039a9d8db9e10481e63d4b6787e877b1b8bf385989deac6f2c72792adbfb3c5a3d209afc09c5046cb582f690f"}], 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000100)=0x72, 0x4) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) timerfd_gettime(0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) syz_genetlink_get_family_id$team(0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000640)=0x14, 0x800) getsockopt$inet6_mreq(r1, 0x29, 0x12, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'sit0\x00'}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000027c0)={@remote, @broadcast}, &(0x7f0000002800)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000002ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002b00)=0x14) getsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0463044080000000"], 0x0, 0x0, 0x0}) r5 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup2(r6, r5) dup3(r4, r5, 0x0) pipe2(&(0x7f0000000580), 0x800) r7 = socket$inet(0x2, 0x4000020000000001, 0x0) bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x280088c0, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000000)="a504", 0x2) setsockopt$inet_mtu(r7, 0x0, 0xa, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x1000001d0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x280000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000001040)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_aout(r8, &(0x7f0000001080)=ANY=[@ANYBLOB="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"/546], 0x865) recvmsg(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) shutdown(r8, 0x1) r9 = socket$inet(0x2, 0x4000020000000001, 0x0) sendto$inet(r9, 0x0, 0x0, 0x4000000, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, 0x0, &(0x7f0000000680)=0xfffffc3d) accept4$packet(0xffffffffffffff9c, 0x0, &(0x7f0000000400), 0x80000) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(r11, 0x29, 0x22, &(0x7f0000000ec0)={{{@in=@loopback}}, {{@in=@remote}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xfffffffffffffe8d) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000880)={{{@in6=@remote, @in6=@ipv4={[], [], @loopback}}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000006c0)=0xe8) getsockname$packet(r1, &(0x7f00000041c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) 02:48:19 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) 02:48:19 executing program 5: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0x8d, 0x4000000000000800, 0x1}, 0x10) vmsplice(r2, &(0x7f00000001c0), 0x3ca, 0xe) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu\x00', 0x200002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x6, 0x0, 0x4000000000000800, 0x1, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x200}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000040), &(0x7f00000001c0)}, 0x20) fchdir(r3) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)) r6 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x6100) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r7, &(0x7f00000000c0)='./file0\x00') mkdirat(r7, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r8 = open(&(0x7f0000000080)='./bus\x00', 0x141046, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r8, &(0x7f0000000740)={&(0x7f0000000040), 0xc, &(0x7f0000000700)={&(0x7f00000009c0)=ANY=[@ANYBLOB="64000000f501e2a7334f450b53a86b544fc9aa77dbab2c18af528bece978ebad120aaf77a8e29f6bec87cad295bd816add1beb86d6deb4ad1a016029f75d028f15a39bc2dab32e517a54d7b426ad0f8d5e8e1b104e270fffc1f92a51df347765d916c6db", @ANYRES16=r9, @ANYBLOB="10002cbd7000fcdbdf2515000000440009080800020000000000080001000065d900000008000200e55d0000080002009104000008000200a800000008000100f7ffffff080002009801040008000200040000000c00060008000100090000ffc2ac1490be9197db688dfbdc4ca526c241932f2c30fc10233b32ec2696651487e0045ef38571ca0ae3cdd41cfc3e69463f8d2d8d72a6ac53cc9e6f7c7669c858b10956f4feab4e7e38ed61b9b52367e62e93a24412d644a8a3e72095ad4bca66e7e6620254"], 0x3}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000894) sendmsg$TIPC_NL_BEARER_SET(r7, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40c028}, 0xc, &(0x7f0000000480)={&(0x7f0000000780)=ANY=[@ANYBLOB="e8010000", @ANYRES16=r9, @ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x20000000}, 0x400) write$FUSE_INIT(r5, &(0x7f0000000000)={0x50, 0x8000000000000020, 0x0, {0x7, 0x1f, 0x0, 0x0, 0xfffc}}, 0x50) clone(0x2142001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d9189) socket(0x4, 0x2, 0x1e) r10 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r10, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r10, 0xc0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x3}, 0x0, 0x0, &(0x7f0000000080)={0x3, 0x7, 0x5, 0x80000000}, &(0x7f00000000c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0x24}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=r11, 0x4) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r11, 0x4) fcntl$F_GET_RW_HINT(r12, 0x40b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) write$input_event(r1, &(0x7f00000001c0)={{0x77359400}, 0x5, 0xfff8, 0x8}, 0x18) readahead(0xffffffffffffffff, 0x6, 0x100000000) pwrite64(r6, &(0x7f0000000500)="8f2d0b68f901b970c304881a7c0f467deff28699261da94e9957dad1060779f40d1e3467fd794bd2c5cf3ecc8e4420c793a17a7765aa22b3095e1c46fd66e58902d4df88541abfb4e779ca0dbbe2fc73a7534fae7b5bb18856c761e6778b30f7cfdb4029adf3aefb013bfde2a6e3790147250f9a388b1a3104152bcaa5b78257bd6c31793a51178b8ee4e87cc3d6c0c450b8c5bbe8ca12fb4fa7a6029f95bdd9fe26ceea89b8fc2d6a849ff182267e4d4d510aebeacd16c5435783cccb6d288342325685bc2ee2d44c6e16c946", 0xcd, 0x0) 02:48:19 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080), &(0x7f0000000180)=0x4) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e70e) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)=0x0) sched_setparam(r5, &(0x7f0000000140)) creat(&(0x7f0000000700)='./bus\x00', 0x11) set_tid_address(&(0x7f0000000040)) write$FUSE_INIT(r4, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) clone(0x2142001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x11000490) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xfffffffffffffd02) socket(0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./control\x00', 0x8) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]) ioctl$RNDGETENTCNT(r6, 0x80045200, &(0x7f0000000340)) r7 = gettid() r8 = syz_open_procfs(r7, &(0x7f00000001c0)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') write$selinux_context(r8, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) accept4$unix(r1, 0x0, &(0x7f0000000000)=0x1a8, 0x800) write$smack_current(r8, &(0x7f0000000240), 0x2b) open(&(0x7f0000022ff6)='./control\x00', 0x20000, 0x0) r9 = openat(r1, &(0x7f0000000380)='./control\x00', 0x800, 0x200) mkdirat(r9, &(0x7f00000003c0)='./control\x00', 0x0) rmdir(&(0x7f0000000040)='./control\x00') 02:48:19 executing program 1: socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000103ff008cc00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000008008001b00000000000800040000000000"], 0x3}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000100)={'team_slave_1\x00', @link_local}) 02:48:19 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r3, r1, 0x41c, 0x3) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x235) 02:48:20 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r7 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r9 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r9, 0x2007fff) sendfile(r7, r9, 0x0, 0x8000fffffffe) 02:48:20 executing program 3: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) setuid(0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000d00)=[{&(0x7f0000000780)="0873afa616b1e61046c20597f7f5bb6fba9f6b2cda72517b8aa2930f67a9c2bbd9b8cedb0a3e6dc25a4c34d280fd299ad68a2546dcb46578bdc78cf010558bd4b8e0a2f79f"}, {&(0x7f0000000800)="a5d38a3b4fe11d08d290d8dd9fffaf84"}, {&(0x7f0000004ac0)="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"}, {&(0x7f0000000980)="bd51e25b21ba26cb0549271f3afdae9a7b2634912421c3652c4d0e010167a5c17ee4b902fc57db97bbc375d19a0bbdc5f7e63187559d462e9c99f8c665c943d005eff0f55a53d0053e1eb986872ec11038902ab1f64a58f001a8eba3f1f1c9e4b291d2a98f0b1d4e3d7622e5059ad5e3244ad7f1b554c2dec0b7a26241e743604a28927a5a010fe185393b9eab984666da40840443683e596a7ec433ad6bcca1416e7a1cf1a36ad80f6004ffbe46ea4bb86342f2118b236f71b8630a41a0104775"}, {&(0x7f0000000a80)="fbb64c3bbb63753737ad83410888d3f7693372813ad83179d8036549c4d717c7e469bf82bdc7170584827b6b692417628220d0ec5590559d08620b2f34e41520b0a328a3ef005c68147a41"}, {&(0x7f0000000840)="6ccd"}, {&(0x7f0000005ac0)="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"}, {&(0x7f0000000b00)="16a60b175cc478447c0ea699227d96dfaeb7e39e17aa36ab600962b77fb8e9cd979a4d683e3a37529ae5391f43459951d420b420e90417a9b1f992e108346e1af3ab6f614cff32023a569aa9998488d9aa3ccdb763ab19d90da0ef397dfcb5660440dc86706ed6ac35209345ccf1ef57094691cd53cbcafb8262ee50e200b25ac2e996d3e3d960ad231030af444cb885f197601b9515a777431b68135a5b3d4ead9839f28c679ef93965641f700e8661b71617228c40a2a52e31d459ef9dd3993ef900ae94a8942a7c25f398303b7a4efdaa0911c6be19b9"}, {&(0x7f0000000c00)="cddf087868b78f07d19e11e6ba8497d34c2db34a1c9b13fc0bbbabf989b22553cf6740113b7455f7d1b5ea90888c7a6cb95b2d8cf58ab5ebed362d0e15fd9ab126ec67cf1d03aa5acfc21197a7ad7eec1debbb9d7feeea5d5f4a950aa86c85bf4ed0a0f4c79f6125e90305caf6ba0ca53d2d309826ea5d8d7fe8916383a9c6f4c277381daa708b4dd63fe0baa61e69336276bd90e068e6d7e43a1b831721415c86bfbc999f4ad5d5f04039a9d8db9e10481e63d4b6787e877b1b8bf385989deac6f2c72792adbfb3c5a3d209afc09c5046cb582f690f"}], 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000100)=0x72, 0x4) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) timerfd_gettime(0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) syz_genetlink_get_family_id$team(0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000640)=0x14, 0x800) getsockopt$inet6_mreq(r1, 0x29, 0x12, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'sit0\x00'}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000027c0)={@remote, @broadcast}, &(0x7f0000002800)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000002ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002b00)=0x14) getsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0463044080000000"], 0x0, 0x0, 0x0}) r5 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup2(r6, r5) dup3(r4, r5, 0x0) pipe2(&(0x7f0000000580), 0x800) r7 = socket$inet(0x2, 0x4000020000000001, 0x0) bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x280088c0, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000000)="a504", 0x2) setsockopt$inet_mtu(r7, 0x0, 0xa, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x1000001d0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x280000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000001040)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_aout(r8, &(0x7f0000001080)=ANY=[@ANYBLOB="01000009810100000d010000000000000000000000000000000000000000633941d6880eab39f9e057198c1b94921e6eea5e6c012de335c6e3dc404862240695492d9f4d0b9ac90ca92d9f99d88e7bc70cdb7cb78d1a5cb5811ac651119650c94fc3251dbb7fc093422c4d16797ee70ddd43798de1b9b36b15f6607d38576e39e6918b50828ad435381af64a6461e6a002d59ae8fcb882d0bae037a30a77394a6db4431a886088548395d0aa0007698953e41f7aff2a68df9581b509cef609b32fe878c1f352d739ef7db93f31918b0a07000000000000003edecc7b349113a9752fddeca6be4b70b26997a5e08fb3b177452b391c4aef204d22af8e37a29317a9837171646a8cb80448990ca2abe128c630a3fa35fe6df3ef90bd2f1ec892ba6409d80dd8d27f1450ebd19aa600312fc778dd63e96eb048290a7123b2fc0aa0ad5bc9083b35cae992a7a51230e81b7894d5e90fa9b6e05f0d48799d2db9b53a80d805c6fe676aab99aaea8fe93b7bd2589800a12914bccce30610fc1a3fac4927ea4a141fbb54dd15fecc0684770ece5132c64087820c75db0e867b80af0ef93b6c639b77b23b3a7f1fff65c88985afdd64025a88fc91228be0bf0f6cc1cf980a77b570312713ce5d4ab2b137069672bd8670cea632140e885663d515e6d57105801d9c19504c25dbba53f452045627131c0a92d743123639715e9940ae6f0338bb8ab5f6ee888f204fee3b7f5dc866969927be00"/546], 0x865) recvmsg(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) shutdown(r8, 0x1) r9 = socket$inet(0x2, 0x4000020000000001, 0x0) sendto$inet(r9, 0x0, 0x0, 0x4000000, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, 0x0, &(0x7f0000000680)=0xfffffc3d) accept4$packet(0xffffffffffffff9c, 0x0, &(0x7f0000000400), 0x80000) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(r11, 0x29, 0x22, &(0x7f0000000ec0)={{{@in=@loopback}}, {{@in=@remote}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xfffffffffffffe8d) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000880)={{{@in6=@remote, @in6=@ipv4={[], [], @loopback}}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000006c0)=0xe8) getsockname$packet(r1, &(0x7f00000041c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) 02:48:20 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r7 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r9 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r9, 0x2007fff) sendfile(r7, r9, 0x0, 0x8000fffffffe) 02:48:21 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f0000000200)=""/245) 02:48:21 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x29cb5a25, &(0x7f0000000340), 0x0, 0x0, 0xffbe}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bcsh0\x00', 0x21}) socketpair$unix(0x1, 0x0, 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xa5cc554) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) open(0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) ptrace(0x10, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0xffffffffffffffff, r2, 0x200000000000, 0x0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 02:48:23 executing program 2: r0 = memfd_create(&(0x7f0000000180)='&.\\keyring\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo\x00') write$FUSE_DIRENT(r0, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0x14) fchdir(r1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) 02:48:23 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r7 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r9 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r9, 0x2007fff) sendfile(r7, r9, 0x0, 0x8000fffffffe) 02:48:23 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) close(r1) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x42) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x800002, 0x11, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r2, 0x0, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') sendfile(r2, r3, 0x0, 0x88201) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') getdents(r4, &(0x7f0000000040)=""/253, 0xfd) r5 = syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r5, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000800}, 0xc, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"]}, 0x1, 0x0, 0x0, 0x30000000}, 0x801) sendmsg$IPVS_CMD_NEW_DAEMON(r4, 0x0, 0x1) r6 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r6, 0x0, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') sendfile(r6, r7, 0x0, 0x88201) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000400)={{{@in=@dev, @in=@dev}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f0000000140)=0xfffffffffffffeb8) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000b80)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\x00', 0x200002, 0x0) r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r8, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r8, 0x0) ioctl$ASHMEM_SET_NAME(r8, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0x8d, 0x4000000000000800, 0x1}, 0x10) vmsplice(r2, &(0x7f00000001c0), 0x3ca, 0xe) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu\x00', 0x200002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x6, 0x0, 0x4000000000000800, 0x1, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x200}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000040), &(0x7f00000001c0)}, 0x20) fchdir(r3) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)) r6 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x6100) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r7, &(0x7f00000000c0)='./file0\x00') mkdirat(r7, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r8 = open(&(0x7f0000000080)='./bus\x00', 0x141046, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r8, &(0x7f0000000740)={&(0x7f0000000040), 0xc, &(0x7f0000000700)={&(0x7f00000009c0)=ANY=[@ANYBLOB="64000000f501e2a7334f450b53a86b544fc9aa77dbab2c18af528bece978ebad120aaf77a8e29f6bec87cad295bd816add1beb86d6deb4ad1a016029f75d028f15a39bc2dab32e517a54d7b426ad0f8d5e8e1b104e270fffc1f92a51df347765d916c6db", @ANYRES16=r9, @ANYBLOB="10002cbd7000fcdbdf2515000000440009080800020000000000080001000065d900000008000200e55d0000080002009104000008000200a800000008000100f7ffffff080002009801040008000200040000000c00060008000100090000ffc2ac1490be9197db688dfbdc4ca526c241932f2c30fc10233b32ec2696651487e0045ef38571ca0ae3cdd41cfc3e69463f8d2d8d72a6ac53cc9e6f7c7669c858b10956f4feab4e7e38ed61b9b52367e62e93a24412d644a8a3e72095ad4bca66e7e6620254"], 0x3}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000894) sendmsg$TIPC_NL_BEARER_SET(r7, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40c028}, 0xc, &(0x7f0000000480)={&(0x7f0000000780)=ANY=[@ANYBLOB="e8010000", @ANYRES16=r9, @ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x20000000}, 0x400) write$FUSE_INIT(r5, &(0x7f0000000000)={0x50, 0x8000000000000020, 0x0, {0x7, 0x1f, 0x0, 0x0, 0xfffc}}, 0x50) clone(0x2142001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d9189) socket(0x4, 0x2, 0x1e) r10 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r10, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r10, 0xc0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x3}, 0x0, 0x0, &(0x7f0000000080)={0x3, 0x7, 0x5, 0x80000000}, &(0x7f00000000c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0x24}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=r11, 0x4) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r11, 0x4) fcntl$F_GET_RW_HINT(r12, 0x40b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) write$input_event(r1, &(0x7f00000001c0)={{0x77359400}, 0x5, 0xfff8, 0x8}, 0x18) readahead(0xffffffffffffffff, 0x6, 0x100000000) pwrite64(r6, &(0x7f0000000500)="8f2d0b68f901b970c304881a7c0f467deff28699261da94e9957dad1060779f40d1e3467fd794bd2c5cf3ecc8e4420c793a17a7765aa22b3095e1c46fd66e58902d4df88541abfb4e779ca0dbbe2fc73a7534fae7b5bb18856c761e6778b30f7cfdb4029adf3aefb013bfde2a6e3790147250f9a388b1a3104152bcaa5b78257bd6c31793a51178b8ee4e87cc3d6c0c450b8c5bbe8ca12fb4fa7a6029f95bdd9fe26ceea89b8fc2d6a849ff182267e4d4d510aebeacd16c5435783cccb6d288342325685bc2ee2d44c6e16c946", 0xcd, 0x0) 02:48:23 executing program 3: r0 = socket(0x2000000000000010, 0x1000040000000003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r1) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'bond0\x00', {0x2, 0x4e20, @loopback}}) r4 = dup(r2) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000080)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000200)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e21, 0xffff, 0x4e20, 0x0, 0xa, 0x180, 0xa0, 0x32, 0x0, r5}, {0x6, 0x29, 0x100000000, 0x7, 0x9, 0x1, 0x3cc, 0x8}, {0x7fffffff, 0x109d, 0x401, 0x4}, 0x7ff, 0x0, 0x3, 0x0, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d3, 0x3c}, 0x2, @in=@local, 0x3505, 0x4, 0x0, 0xe5, 0xfffffc01, 0x0, 0x9}}, 0xe8) write(r0, &(0x7f0000000000)="2200000014006701040000000000000402080313010000000800020041030ee376ab", 0x22) 02:48:23 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_RSTATFS(r2, &(0x7f0000000780)={0x43, 0x9, 0x2, {0x44, 0xffff, 0x92, 0x1, 0x9, 0x9, 0x200, 0x1, 0x7}}, 0x43) unshare(0x40600) socketpair(0x1, 0x2, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x5c, r4, 0x218, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x8}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xc}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xe6}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xa1f4c7322b3ff160) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fdinfo/3\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = accept4$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f0000000700)=0xe8) recvfrom$packet(r8, &(0x7f0000000500)=""/137, 0x89, 0x1, &(0x7f0000000740)={0x11, 0x19, r11, 0x1, 0xff, 0x6, @dev={[], 0x27}}, 0x14) ioctl$GIO_FONTX(r7, 0x4b6b, &(0x7f0000000340)=""/161) r12 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92v\xf9\xba\xf4\x12\r\"^\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea\x00'/247) setxattr$security_selinux(&(0x7f0000000200)='./file0\x00', &(0x7f0000000400)='security.selinux\x00', &(0x7f0000000440)='system_u:object_r:mount_tmp_t:s0\x00', 0x21, 0x1) sendfile(r12, r5, 0x0, 0x1f7) [ 598.270084] audit_printk_skb: 4440 callbacks suppressed [ 598.270091] audit: type=1400 audit(1574736503.073:10839): avc: denied { sys_admin } for pid=2103 comm="syz-executor.2" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 598.365272] audit: type=1400 audit(1574736503.163:10840): avc: denied { sys_admin } for pid=2103 comm="syz-executor.2" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 02:48:23 executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r3, &(0x7f0000001080)=@un=@abs={0x1}, 0x80) bind(r3, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x2, 0x2, 0x2, 0x3, {0xa, 0x4e23, 0x2, @loopback, 0x8}}}, 0x80) write(r1, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(r0, &(0x7f0000000180)=0x7, 0x396) r4 = socket$inet6(0xa, 0x400000000001, 0x0) getrlimit(0x2, &(0x7f0000000240)) r5 = dup(r4) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="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"], 0x30e}}, 0x1) ioctl$FS_IOC_SETFLAGS(r5, 0x40046602, &(0x7f0000000640)=0x1) r7 = inotify_init() lseek(r7, 0x4, 0x4) ioctl$UI_SET_SNDBIT(r5, 0x4004556a, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0xc80, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x7, @loopback}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x100000031, &(0x7f0000000140)=0x8, 0xfd73) recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}) fcntl$dupfd(0xffffffffffffffff, 0x0, r8) r9 = dup2(0xffffffffffffffff, r8) ioctl$TCSETSW(r9, 0x5403, &(0x7f0000000340)={0x3f, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8000, 0xbb4}) getsockname(r9, &(0x7f00000001c0)=@rc, &(0x7f0000000580)=0xfffffffffffffefb) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) r11 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000019000), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="ec9a45ad14000000000000000100000001000000", @ANYRES32=r11], 0x14}, 0x0) r12 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r13 = dup2(0xffffffffffffffff, r12) sendmsg$netlink(r13, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="140000000000000001000000f5545ee6", @ANYRES32=r12], 0x14}, 0x0) setsockopt$inet_tcp_int(r13, 0x6, 0xa, &(0x7f0000000100), 0x0) bind$inet(r10, &(0x7f0000738ff0)={0x2, 0x4e21, @local}, 0x10) connect$inet(r10, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r10, 0x6, 0x16, &(0x7f0000000500)=[@window={0x3, 0x3, 0x8}, @timestamp, @window={0x3, 0x0, 0x81}, @window={0x3, 0x7d30, 0x2}, @window={0x3, 0x2}], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f00000000c0), 0x4) dup2(r10, r10) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7ff) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000380)=0x83, 0x9) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback, 0x200}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r14 = open(&(0x7f0000000480)='./bus\x00', 0x101042, 0x0) ftruncate(r14, 0x2007fff) sendfile(r5, r14, 0x0, 0x8000fffffffe) [ 598.371020] audit: type=1400 audit(1574736503.173:10841): avc: denied { dac_override } for pid=24286 comm="syz-executor.4" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 598.374679] audit: type=1400 audit(1574736503.173:10842): avc: denied { dac_override } for pid=24286 comm="syz-executor.4" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 02:48:23 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r7 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r9 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r9, 0x2007fff) sendfile(r7, r9, 0x0, 0x8000fffffffe) [ 598.408822] audit: type=1400 audit(1574736503.213:10843): avc: denied { net_admin } for pid=24289 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 02:48:23 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r1 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BLKROGET(r6, 0x125e, &(0x7f0000000080)) r7 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f0000000140)={0x9, {{0x2, 0x4e23, @rand_addr=0x8}}, {{0x2, 0x4e24, @remote}}}, 0x108) setsockopt$inet_udp_int(r3, 0x11, 0xc7615811f88dda0, &(0x7f0000000000), 0x4) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000480)=r1) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x6, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 598.412863] audit: type=1400 audit(1574736503.213:10844): avc: denied { net_admin } for pid=24289 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 598.412889] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'. [ 598.418278] audit: type=1400 audit(1574736503.213:10845): avc: denied { create } for pid=24286 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 598.425249] audit: type=1400 audit(1574736503.223:10846): avc: denied { map_create } for pid=24285 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 598.427227] audit: type=1400 audit(1574736503.223:10847): avc: denied { write } for pid=24286 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 02:48:24 executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r3, &(0x7f0000001080)=@un=@abs={0x1}, 0x80) bind(r3, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x2, 0x2, 0x2, 0x3, {0xa, 0x4e23, 0x2, @loopback, 0x8}}}, 0x80) write(r1, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(r0, &(0x7f0000000180)=0x7, 0x396) r4 = socket$inet6(0xa, 0x400000000001, 0x0) getrlimit(0x2, &(0x7f0000000240)) r5 = dup(r4) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="021380fa72b8dbc862dd50392f8ab9c060083f35f24dd7685fe8e14849971d3fd7be625655f56a93126c23020000000002000000df25080012090000000000000000000000050000000900000001ac010000000000000000000000000000aaee7bb550075649e48881d17f3c0200c11a9b3924f84f460f633decddfd98b1d95994976fe94da9000000000000e909382bce938eae516a5d06551a59c483095d838105d027076d5113937b84f8233dbea6534c11c60dfe69906ac3de9b8cdef2ba983fff3d9cfe60dda1a3a715a6807184c69b5128ff71feed2e80ce14c0f7c86aaa404669ce687838626ebeabc0824c5b098e9b92b32a35619b49135765dce3ce15bcfe2242f161fae5eea2c4b6d667732ecbe6116cc2677af801c18b3941b24b161fd224b7145fb140bc46719ca2e1c34c654829f281e571341d3753f300000000b96d633a4675248dcac1bb73ebf33d1aa85e79aba72b13d2cf74ca71265fd37d600040ab54b4a12d983d26660fcda17f6eeedec9470f599f499e8a7e17486b087b5c99979659d76fc58461d6df2f9b4ac81fc6524dd63a21d8765f9d64491391d98005a59365b5c03bd176a007088ce1602b5787085aefc62056d25cd3b7d66301206d387386f003e5a31fad9bf2b84000000095836afb35189110c95316dfa321da070025f0c2dedda6645110e1f126f5b1b4ccd87495b338ebcd5fb8fbab76e004776c63f2ea0147283234b7293e356d8685d79ea45394dcdbab3b55f6e00889ff09f45381c1d3b48def309c682a1a8c333144beb7902d81e5eb6ab22adb2990040bead584f35e44fde0d4a7d6bda44ec9b2bc48367aad358c7299ae89e995a3620828a85d7adfda6d0a7a72cf2de160504e8c15080000660075b22f57071b2f14e5b6f27d249e4289c283372116c95a7558ac19eb91000000000000000000000b333b7965bbb597939f6dad42f7aba196978773b8c2fffffffffffff98ed345def53f691baa49b48de9da383fae1c20897a0c08007e456bbe625852d03a3839a40ed4060a54ce126cc834bf84623fb924522bba07000000000000000000000000000000000900fda13031a70000000007280641ee000000000000005ecf912d71bdae40d97bd6c99fe8655af969cd67deb84263d625d0b55c3f55e3eea0049dc48226495ab0ebf83dc9b462124e7de3e1f5faeae5575f002963533a8656687146238cb2e53e1a7b5ce732de43f125ccbd3f81e3fc1e553bb5d3ed8c5b0b087ea7488bd1eb1b059d0566f339ace165f32eb7da937dca581735ab6f19d948d9e4be952ed379274657e843b0afa147b15157591de7326e66f354c7b62f789ac57984e9e72b6fef81ce6de3eeb6f28b79f093218333afc4f5e4304cb8e0c1f7adac7b915b2c333ac7418a0cd5f4d6b269a2a31065f3379a0db71f4525d3f917d30825eae2837a199382e863742fcfcbdbd6af6c49bbf6e19b9b49f34422c05b95b177483a8e290887e9322390f9c723d4bd447f2caf785a997dca8bae80ed342d067fbaceb8d76a9b3a0a894b98df1f0701ca594eeceb9183de"], 0x30e}}, 0x1) ioctl$FS_IOC_SETFLAGS(r5, 0x40046602, &(0x7f0000000640)=0x1) r7 = inotify_init() lseek(r7, 0x4, 0x4) ioctl$UI_SET_SNDBIT(r5, 0x4004556a, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0xc80, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x7, @loopback}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x100000031, &(0x7f0000000140)=0x8, 0xfd73) recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}) fcntl$dupfd(0xffffffffffffffff, 0x0, r8) r9 = dup2(0xffffffffffffffff, r8) ioctl$TCSETSW(r9, 0x5403, &(0x7f0000000340)={0x3f, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8000, 0xbb4}) getsockname(r9, &(0x7f00000001c0)=@rc, &(0x7f0000000580)=0xfffffffffffffefb) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) r11 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000019000), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="ec9a45ad14000000000000000100000001000000", @ANYRES32=r11], 0x14}, 0x0) r12 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r13 = dup2(0xffffffffffffffff, r12) sendmsg$netlink(r13, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="140000000000000001000000f5545ee6", @ANYRES32=r12], 0x14}, 0x0) setsockopt$inet_tcp_int(r13, 0x6, 0xa, &(0x7f0000000100), 0x0) bind$inet(r10, &(0x7f0000738ff0)={0x2, 0x4e21, @local}, 0x10) connect$inet(r10, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r10, 0x6, 0x16, &(0x7f0000000500)=[@window={0x3, 0x3, 0x8}, @timestamp, @window={0x3, 0x0, 0x81}, @window={0x3, 0x7d30, 0x2}, @window={0x3, 0x2}], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f00000000c0), 0x4) dup2(r10, r10) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7ff) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000380)=0x83, 0x9) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback, 0x200}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r14 = open(&(0x7f0000000480)='./bus\x00', 0x101042, 0x0) ftruncate(r14, 0x2007fff) sendfile(r5, r14, 0x0, 0x8000fffffffe) 02:48:24 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r3, &(0x7f0000001080)=@un=@abs={0x1}, 0x80) bind(r3, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x2, 0x2, 0x2, 0x3, {0xa, 0x4e23, 0x2, @loopback, 0x8}}}, 0x80) write(r1, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(r0, &(0x7f0000000180)=0x7, 0x396) r4 = socket$inet6(0xa, 0x400000000001, 0x0) getrlimit(0x2, &(0x7f0000000240)) r5 = dup(r4) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="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"], 0x30e}}, 0x1) ioctl$FS_IOC_SETFLAGS(r5, 0x40046602, &(0x7f0000000640)=0x1) r7 = inotify_init() lseek(r7, 0x4, 0x4) ioctl$UI_SET_SNDBIT(r5, 0x4004556a, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0xc80, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x7, @loopback}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x100000031, &(0x7f0000000140)=0x8, 0xfd73) recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}) fcntl$dupfd(0xffffffffffffffff, 0x0, r8) r9 = dup2(0xffffffffffffffff, r8) ioctl$TCSETSW(r9, 0x5403, &(0x7f0000000340)={0x3f, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8000, 0xbb4}) getsockname(r9, &(0x7f00000001c0)=@rc, &(0x7f0000000580)=0xfffffffffffffefb) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) r11 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000019000), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="ec9a45ad14000000000000000100000001000000", @ANYRES32=r11], 0x14}, 0x0) r12 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r13 = dup2(0xffffffffffffffff, r12) sendmsg$netlink(r13, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="140000000000000001000000f5545ee6", @ANYRES32=r12], 0x14}, 0x0) setsockopt$inet_tcp_int(r13, 0x6, 0xa, &(0x7f0000000100), 0x0) bind$inet(r10, &(0x7f0000738ff0)={0x2, 0x4e21, @local}, 0x10) connect$inet(r10, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r10, 0x6, 0x16, &(0x7f0000000500)=[@window={0x3, 0x3, 0x8}, @timestamp, @window={0x3, 0x0, 0x81}, @window={0x3, 0x7d30, 0x2}, @window={0x3, 0x2}], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f00000000c0), 0x4) dup2(r10, r10) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7ff) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000380)=0x83, 0x9) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback, 0x200}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r14 = open(&(0x7f0000000480)='./bus\x00', 0x101042, 0x0) ftruncate(r14, 0x2007fff) sendfile(r5, r14, 0x0, 0x8000fffffffe) [ 598.434109] audit: type=1400 audit(1574736503.233:10848): avc: denied { map_read map_write } for pid=24285 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 02:48:24 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a74, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_BROADCAST={0xc, 0x2, @random="91ef2fd58056"}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x34}}, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000280)={0x8, {{0x2, 0x4e23, @remote}}, 0x1}, 0x90) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x2e0040, 0x0) ioctl$BLKGETSIZE(r7, 0x1260, &(0x7f0000000240)) socket$unix(0x1, 0x0, 0x0) r8 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) bind$unix(r8, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) accept4$packet(r6, 0x0, &(0x7f00000045c0), 0x800) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'bcsh0\x00', 0x4000}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 600.102890] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24338 comm=syz-executor.1 [ 600.176458] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24338 comm=syz-executor.1 02:48:25 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000800)='ns\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003880)={0x0, 0x989680}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/keycreate\x00') r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x80) write$P9_RATTACH(r3, &(0x7f0000000080)={0x14, 0x69, 0x2, {0x13a, 0x2, 0x4}}, 0x14) preadv(0xffffffffffffffff, 0x0, 0x7d, 0x2000000000) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) ioctl$ASHMEM_SET_NAME(r4, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r7 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r9 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r9, 0x2007fff) sendfile(r7, r9, 0x0, 0x8000fffffffe) 02:48:25 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) [ 600.338243] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24338 comm=syz-executor.1 [ 600.411347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24338 comm=syz-executor.1 [ 600.543537] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24338 comm=syz-executor.1 02:48:25 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x8, 0x80000, 0xfd) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000600)=0x209, 0xfffffffffffffdae) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x27, 0x0, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000140)=ANY=[], 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) shutdown(r2, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./bus\x00', 0x40000141041, 0x402) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0x323) mlockall(0x1) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') r4 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000040)) r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x7) getsockopt$SO_COOKIE(r6, 0x1, 0x39, 0x0, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) write$FUSE_POLL(r3, &(0x7f0000000180)={0xffffffffffffffd4, 0x0, 0x24}, 0xffffff83) r7 = socket(0x10, 0x80002, 0x0) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, @thr={&(0x7f0000000640)="601d1e17eb296e55f0ec6d9277c5c6654ed7a8ee981313fec5693e3690775664bf63427aca99c38daa1d9dc465d3d4898030a2fe009556a5dd1685a2121e22a84d398c76b6d986168275a78b26ba017393fbb24dcd8a1724c197a528ede6774d33c9a95271aa4c1d35f1436b877397508b1ed8ae099d9d2e59f233fda89e2c45d54607dd66b7858a8796ca6cb47ed35a214fe5658b8920433a1403a74c4b3520883786632d15fe06e841dec5283f8a1a26a0", &(0x7f0000000300)="5dd1fe141a30375709aa184e1f1d"}}, &(0x7f00000003c0)) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, 0xffffffffffffffff) bind$netlink(r7, &(0x7f0000177ff4)={0x10, 0x0, 0x1, 0x8001002}, 0xc) connect$netlink(r7, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbff, 0x4c14630}, 0x6) write(r7, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) times(0x0) connect$netlink(r7, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r7, 0x1, 0x3, &(0x7f0000000100)=0x4, 0x4) sendto(r7, &(0x7f0000000340), 0xfc, 0x800, 0x0, 0xffffff3b) recvmmsg(r7, &(0x7f0000000100), 0x0, 0x2, 0x0) sendfile(r3, r6, &(0x7f0000000140), 0x8fff) [ 600.587510] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24338 comm=syz-executor.1 02:48:25 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r7 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r9 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r9, 0x2007fff) sendfile(r7, r9, 0x0, 0x8000fffffffe) [ 600.643314] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24338 comm=syz-executor.1 [ 600.680591] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24338 comm=syz-executor.1 [ 600.748179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24338 comm=syz-executor.1 [ 600.810024] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24338 comm=syz-executor.1 02:48:25 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r4, 0x0) ftruncate(r1, 0x48280) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r5, 0x1, 0x10, &(0x7f0000002180), &(0x7f0000000000)=0x4) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:48:25 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e05775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000380)=0x14) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001400012000ee00000000000002000000", @ANYRES32=r5, @ANYBLOB="080002"], 0x3}}, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r7, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r7, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmmsg$inet6(r9, &(0x7f0000000dc0)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0xff, @mcast2, 0x401}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000400)="5e78ac4b4608b660dbe39bea7945f904d07e879810329b9953d699ebe091f8cb18caec18511447e4071a23e7416a236a7dc5279bfffcb09470d2dc580efeb531887b0c6bfdd41a2395c414517bd42a4872fe3f56903ff3068b9d3e36a8136c04ce7c5a395703b6f55671792297c9556b2831671d230f0445e72fae6c5984d37295b8a986efa51b684395c9396ecf8d052643f7d5f1a69cfad5d42a291d6502e6980aeed1d2c993acd12baf46b07f4e75ac64e71c1931f75f388bcc8f9d39ff8ef9d97c14be1fcc266d", 0xc9}, {&(0x7f0000000500)="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", 0xfb}, {&(0x7f0000000600)="5b23c81556bae956c0f35b5d7f00980410c8b860a182ffc780a8f22e2d10e3dd6261ca92a081022303d9929a5d69d3cd8e06c370d147e2db289941d6dd003292f4b3cb798daa44b64f88deeff5810ba612a5abf23610a5a734bf", 0x5a}, {&(0x7f0000000680)="2a5296614c719852bf9cfe1cb193d8600cb41b19ee437a9f1b04d709cd01a9c67ccbd8dc164e426a3c48af91f3eab4f4144c23e0a317d4bf547de8e27f6f9db86f6f77701a4554615e91dc57ef4301e2b64de56d029a254bf4216a8b25569c33f717a49561b13afa797dff3a99aa95852dd6eb12c35dfeba430952fc87bee7db599738008d743136f026a7d5f5879e16f0a21e858b34057f87f5969e27596118fd33388e55621eb6f7914d1f39506ed3292d85c7b4a89b88eb7292ddb09876c6c396613e7e97", 0xc6}], 0x4}}, {{&(0x7f00000007c0)={0xa, 0x4e23, 0xffffffff, @rand_addr="8bf1f4d6a325472f9482133e8612e67d", 0xff}, 0x1c, &(0x7f0000000d00)=[{&(0x7f0000000800)="92ecca088684c0cb0ea8aa166214a9a1cf327bb00de8096c6071ee778fa866e44b33", 0x22}, {&(0x7f0000000840)="4ea4745be38c8013e6c253c5dacd3af3fef3311a083d88ea50ecb729ea3f28528ba1b4e0981a3f76d83ddd7ccfdf43ecb36cceba68ea99205579492e6bc3f9c53f2e9a9e26bd3cb9ccea9ac9d5b6f9906c6ab472ffdcfb903f16f8fa114ec9a746ac90aa7597b9b0374c9699b95302f6db42b8e3df5273b7de38385ceb02448bb006b73b3dea166272c427b20b105cfefacad9f376485e99ab527fa5e55ed78e952bfb042b0d71e2e3e2e3103d6329ce7dfc7ca9685d4aea73a801446c166fce462a3f4781b4950752c82f9ffb7f46b59e5b469ef94ae6069b511bdc8a5473cb7fc30b61cf0d380c70e721eaa84384f1dd45b4266c28aa", 0xf7}, {&(0x7f0000000940)="715a30d3fdb0d569b25f8f9eff5b6c0bc7afded46b461a527d06f641f553e074c91735ab", 0x24}, {&(0x7f0000000980)="268d73f0e53ebb7d449f82a278ea6c08db2a93cf8d9c4b1ceae3886f05efe994e82b5a572f14ecb7b6c5bac7be8395c35bdf2e7686c9f0d5e5d9dd4375d2fd677638b51bc559c6691c2d463d7b8b1257d79f7a5e69ab06d317f0ad6d79a880debec1288198c2e22e4f527eb14c61d66807f6fa3c20a16347e0c7c1d856057e6886f0308faa3f753e40b431e0dfd8548dd0c4a699b03a47cdf5a5410ef8a7322079843b9044b6e22374367576a20796751c1fc6e698a43826d75364a47b073c4b3c829fff12471a3f29a77efb414c", 0xce}, {&(0x7f0000000a80)="fd5bcfa2376691379bca85302ff784baf54c9d32ec410fa5a208a0969bc4a772db01eeb7a1e469738b8e7c570df6370f28202b3d7089d6f4b34f291b28c1e8c56858ac26fac9b99fd78c4dabff6f2dd4ead33ee5f0b0f4beba16031f13d8f300499c49cebebd529c02f8a40bb5d23938b7c3baf799afb228abb3aa7e68d0f1999140f3a4afa9b22045188665ce17b40bb838959ee08343b194bf8db1655c", 0x9e}, {&(0x7f0000000b40)="2a121ab9175b787ebe41aa12a10502a61cb778d96d4ee1aa9c78d1e772e91cf9ef0c8b3a7f8c363ac57faa861e011d7a393d52617194648f5e9411ee8274d95d638d03fb951a5bd02178bb2eb79c2c575db1fcfa16fc4d8a5e7500790207252ff9e85dabf26cbfcf8cddd2cfe23014a3286841851a487548d9", 0x79}, {&(0x7f0000000bc0)="acf301635eaae81c5fe911ea0e1f0f64e1eee6b95db583bff3ac9913860ec30cab527eae226a12440bdbf1d03ea49ce7a884f3273765e5326ab0db897fcfd29cdcb4e1fb56fbe99358d46518eaea01d0e841a55fd83b482a2bc81a4be0cc0f51d025b73eae04af4a7a247b3fe05fbf9c37f77e0c8226315f2cee52a2e89171d2d6f3df9f88c631e9fc6e273903c57d9bfa441807d05a260770cd2032457cc43fd6fde4301da28169ae5327bfed124acf4ee821d214b46551a39bba7c77410abdddf6a198d9a2e95935888512fdd73d91cd403601defc50e62ae46cd9826eda9296bf9227937d536041f6c30f63b57a7fe188f755bfa428d3e93321f0af6b", 0xfe}, {&(0x7f0000000cc0)}], 0x8, &(0x7f0000000d80)=[@dontfrag={{0x14, 0x29, 0x3e, 0x5}}], 0x18}}], 0x2, 0x1) ioctl$ASHMEM_SET_NAME(r7, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50x0}) openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x20000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000340)={r3, 0x1, 0x6, @dev}, 0x10) dup3(r0, r1, 0x0) 02:48:26 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r7 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r9 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r9, 0x2007fff) sendfile(r7, r9, 0x0, 0x8000fffffffe) 02:48:26 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}}}, &(0x7f0000000140)=0xe8) write$FUSE_ATTR(r0, &(0x7f0000000180)={0x78, 0x83a7f98d0bd4b828, 0x2, {0x92, 0x6, 0x0, {0x5, 0x7, 0x0, 0x2, 0x681, 0x100000001, 0x0, 0x58, 0x6, 0x8001, 0x87, r1, 0xee01, 0x3, 0x2}}}, 0x78) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40000) getpeername$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f00000002c0)={'netpci0\x00', 0x7}) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@local}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000400)=0xe8) r4 = open(&(0x7f0000000440)='./file0\x00', 0x101000, 0xc) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000480)={0x1, 0x7, 0x5}) ioctl$int_in(r2, 0x73, &(0x7f00000004c0)=0x7) r5 = fcntl$dupfd(0xffffffffffffffff, 0x80c, r4) getsockopt$ARPT_SO_GET_ENTRIES(r5, 0x0, 0x61, &(0x7f0000000500)={'filter\x00', 0x89, "f12f67abe52369f7c8d280ad187be196549e4c4641c147cd6e95ae6946ca8cd65343443dd99fcb7d2ea875660ddad9a79be8db347630091b0263912b2316d8e93313313adf5ba027d638dc87271cd20d4b6301f8a717942cc147dc38434ccb8c9828257e77fa61a4858a8f5124dac16475cb3dae739bac900fbcafa730977f10a23bf1de679fb62ae5"}, &(0x7f00000005c0)=0xad) r6 = epoll_create(0x0) epoll_pwait(r6, &(0x7f0000000600)=[{}, {}, {}, {}], 0x4, 0x3, &(0x7f0000000640)={0x1}, 0x8) setxattr$trusted_overlay_nlink(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)='trusted.overlay.nlink\x00', &(0x7f0000000700)={'U+', 0xfffffffffffffd27}, 0x28, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000740)='/dev/zero\x00', 0x10000, 0x0) fallocate(r7, 0x4, 0x5, 0x0) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000780)='/dev/null\x00', 0x20d840, 0x0) ioctl$UI_DEV_DESTROY(r8, 0x5502) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_FLUSH(r9, 0x0, 0x485, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) r10 = accept4$unix(r7, &(0x7f0000000800), 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f0000000880)={0xef, 0x1f, 0xffffffff, 0x2944, 0x400}) pipe2(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x6000) getpeername$packet(r5, &(0x7f0000000900)={0x11, 0x0, 0x0}, &(0x7f0000000940)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000980)={0x18, 0x1, 0x20, 0x40, 0x80, r11, 0x3, [], r12, 0xffffffffffffffff, 0x2, 0x5}, 0x3c) lgetxattr(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)=@random={'system.', 'filter\x00'}, &(0x7f0000000a40)=""/187, 0xbb) r13 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x8a011, r13, 0x645c6000) 02:48:26 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000200000002, &(0x7f0000000180)=0x2, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000140)=0x7, 0x2) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x10b0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000100)) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffff7be, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 02:48:26 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080), &(0x7f0000000180)) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000340)=""/250, 0xfa) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)=0x0) sched_setparam(r5, &(0x7f0000000140)) r6 = creat(&(0x7f0000000700)='./bus\x00', 0x11) fcntl$setstatus(r6, 0x4, 0x6100) set_tid_address(&(0x7f0000000040)) write$FUSE_INIT(r4, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x1, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) clone(0x2142001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x11000490) write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d9189) socket(0x4, 0x5, 0x0) mkdir(&(0x7f00000000c0)='./control\x00', 0x18) [ 601.801915] device veth0 entered promiscuous mode [ 601.881184] device veth0 left promiscuous mode 02:48:26 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r7 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r9 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r9, 0x2007fff) sendfile(r7, r9, 0x0, 0x8000fffffffe) [ 602.123395] device veth0 entered promiscuous mode 02:48:26 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}}}, &(0x7f0000000140)=0xe8) write$FUSE_ATTR(r0, &(0x7f0000000180)={0x78, 0x83a7f98d0bd4b828, 0x2, {0x92, 0x6, 0x0, {0x5, 0x7, 0x0, 0x2, 0x681, 0x100000001, 0x0, 0x58, 0x6, 0x8001, 0x87, r1, 0xee01, 0x3, 0x2}}}, 0x78) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40000) getpeername$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f00000002c0)={'netpci0\x00', 0x7}) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@local}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000400)=0xe8) r4 = open(&(0x7f0000000440)='./file0\x00', 0x101000, 0xc) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000480)={0x1, 0x7, 0x5}) ioctl$int_in(r2, 0x73, &(0x7f00000004c0)=0x7) r5 = fcntl$dupfd(0xffffffffffffffff, 0x80c, r4) getsockopt$ARPT_SO_GET_ENTRIES(r5, 0x0, 0x61, &(0x7f0000000500)={'filter\x00', 0x89, "f12f67abe52369f7c8d280ad187be196549e4c4641c147cd6e95ae6946ca8cd65343443dd99fcb7d2ea875660ddad9a79be8db347630091b0263912b2316d8e93313313adf5ba027d638dc87271cd20d4b6301f8a717942cc147dc38434ccb8c9828257e77fa61a4858a8f5124dac16475cb3dae739bac900fbcafa730977f10a23bf1de679fb62ae5"}, &(0x7f00000005c0)=0xad) r6 = epoll_create(0x0) epoll_pwait(r6, &(0x7f0000000600)=[{}, {}, {}, {}], 0x4, 0x3, &(0x7f0000000640)={0x1}, 0x8) setxattr$trusted_overlay_nlink(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)='trusted.overlay.nlink\x00', &(0x7f0000000700)={'U+', 0xfffffffffffffd27}, 0x28, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000740)='/dev/zero\x00', 0x10000, 0x0) fallocate(r7, 0x4, 0x5, 0x0) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000780)='/dev/null\x00', 0x20d840, 0x0) ioctl$UI_DEV_DESTROY(r8, 0x5502) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_FLUSH(r9, 0x0, 0x485, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) r10 = accept4$unix(r7, &(0x7f0000000800), 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f0000000880)={0xef, 0x1f, 0xffffffff, 0x2944, 0x400}) pipe2(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x6000) getpeername$packet(r5, &(0x7f0000000900)={0x11, 0x0, 0x0}, &(0x7f0000000940)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000980)={0x18, 0x1, 0x20, 0x40, 0x80, r11, 0x3, [], r12, 0xffffffffffffffff, 0x2, 0x5}, 0x3c) lgetxattr(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)=@random={'system.', 'filter\x00'}, &(0x7f0000000a40)=""/187, 0xbb) r13 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x8a011, r13, 0x645c6000) 02:48:26 executing program 2: openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x323) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r3 = getpid() ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000400)) sched_setscheduler(r3, 0x5, &(0x7f0000000180)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) r5 = socket(0x10, 0x80002, 0x0) bind$netlink(r5, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r5, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) connect$netlink(r5, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCOUTQNSD(r7, 0x894b, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) write$P9_RSTAT(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="6c0000007e0100000055000000000000000303000000040000000000000000000000000000000100160000000000001c000010002fa9656c696e75782f706f6c69637975782f706f6c6963794e3ee3e73f9269916f75702f73797a3100040077727200000000"], 0x66) sendto(r5, &(0x7f0000000340), 0xac, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000500)='TIPC\x00') ioctl(r0, 0x8, &(0x7f0000000580)) write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b520000006000000e0517fe6000000a72ed763cff694bd7f4ecab21e4a9ddec7483eee198c4f6efe09c408b6e91abe2e58ee53ab99de20f7d97f667e5c0f5604417042409a3f28e040eeb799c98c7ae4c1311a57724b2bcbb637e994a89d4610df8321088bf93a7b7c4c3b7bb156c1d51b26a96ea9e8c6d0268b83"], 0x79) clone(0x0, &(0x7f0000000640)="e1fea4c5bb0f699682fd37c5ad1a14d20afc2093db1a28cd359bd0ae7b53802fe27accc96526d718565c81ae3d4a901e0a1f01e37e5fcba72ad07c592309a4825b50a25a0884a172a71e035d3156888f8ae12bfbc4e837ba972d9a23cf4b56611f539eb172aa8978fc38a02b7b4349d39671579350b6d4969b18185ece417bc621f2043e734e95d87597df4e", &(0x7f00000000c0), &(0x7f00000003c0), &(0x7f0000000700)="f1ea51d793d343ef785f269e27bc9b35c756a451c99cbdeb5d648ed9b1580c18f187e2995f273c52d3391c28b1683e5809aca445a286b013970945b55c23a3e82daa89d13cd66835e8ec0f39eb2e796f4ed003a859d79c2991ea0323ae2e822e5ec3110d58c4ca2294a4677dae26c6e4a9c7cdbca39458cd49ae1102a26bae5045287a8e69ece03c3462dca17c7e8a6e06e86b06d0db4e41b2c54c0cf3bef45b637fe0e4781bd864f9a72c51cafa76302a19aee7b4fc7aa00817dac545e7ed4e533b7058") ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000440)={0x9, 0x1, 0x5, 0xfff, 0x11, 0x9, 0x8, 0xfb, 0x1, 0x68589d9d, 0xfffffffc, 0x1}) getxattr(&(0x7f0000000200)='./bus\x00', &(0x7f0000000940)=ANY=[@ANYBLOB="7379fedd49ff36185e5de0589cc9fb169b199f03d5a66e55070491ee41fd5ec4fc860000000000000000dca85e8f0000000000008e42a559329fa85b744cbf2256a38a7753a37dbf63016e1e36c3d007b20ac48662dbe236cd8c9e9951a3686c74420b9392121843015ba2229181b03a2a0511faf75abb4b55bab8f0a4f207c415a50b6f339a1d3f3e0f21c88a3e7a4f031b8391ff5f76c7bfa11da176f399b0dc5512cd927475439082aef463b1f0a93b60"], &(0x7f0000000800)=""/159, 0x9f) sendfile(r1, r4, &(0x7f0000000080), 0x9001) [ 602.188725] device veth0 left promiscuous mode [ 603.294905] audit_printk_skb: 2230 callbacks suppressed [ 603.294921] audit: type=1400 audit(1574736508.093:11593): avc: denied { dac_override } for pid=24405 comm="syz-executor.2" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 603.332851] audit: type=1400 audit(1574736508.133:11594): avc: denied { net_raw } for pid=24365 comm="syz-executor.3" capability=13 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 603.340572] audit: type=1400 audit(1574736508.143:11595): avc: denied { dac_override } for pid=24365 comm="syz-executor.3" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 603.344471] audit: type=1400 audit(1574736508.143:11596): avc: denied { create } for pid=24365 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 603.346216] audit: type=1400 audit(1574736508.143:11597): avc: denied { write } for pid=24365 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 603.350773] audit: type=1400 audit(1574736508.153:11598): avc: denied { dac_override } for pid=24365 comm="syz-executor.3" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 603.441833] audit: type=1400 audit(1574736508.243:11599): avc: denied { dac_override } for pid=24365 comm="syz-executor.3" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 603.496963] audit: type=1400 audit(1574736508.303:11600): avc: denied { read } for pid=24365 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 603.530041] audit: type=1400 audit(1574736508.333:11601): avc: denied { net_admin } for pid=24365 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 603.599531] audit: type=1400 audit(1574736508.403:11602): avc: denied { dac_override } for pid=24405 comm="syz-executor.2" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 02:48:28 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000001fd8)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x70) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r1, 0x4) r2 = socket(0x11, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'ip6tnl0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r10) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev}, 0x14) r11 = dup(r2) write$FUSE_NOTIFY_RETRIEVE(r11, &(0x7f0000000140)={0x30, 0x5, 0x2}, 0x4e0) 02:48:28 executing program 5: mmap(&(0x7f0000001000/0x600000)=nil, 0x600000, 0x0, 0x10004000000032, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='\x00d\x00\xec\xff\x03E') getdents64(r1, &(0x7f0000000140)=""/66, 0x42) getdents64(r1, &(0x7f0000000040)=""/90, 0x5a) getdents64(r1, &(0x7f0000000df0)=""/528, 0x7f355eb8) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/create\x00', 0x2, 0x0) 02:48:28 executing program 4: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYRES64], 0x1) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000300)={'mangle\x00'}, &(0x7f0000000380)=0x54) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000003c0)={'raw\x00'}, &(0x7f00000004c0)=0x54) 02:48:28 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r7 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r9 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r9, 0x2007fff) sendfile(r7, r9, 0x0, 0x8000fffffffe) 02:48:28 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x148, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r9, @ANYBLOB="00000000000000000e0012000000010073737400000002002c0208001900000000000200fe8000000000000000000000000000bb00000900290000000000020000000000020000000000000000003b7a8bd9d9c643a80000"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r9}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @dev}]}, 0x28}}, 0x0) bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @random="962c85e043d8"}, 0xc) sendto(r4, &(0x7f0000000400)="f4a7cec03c7003a7b1776aa3657052d133f4eff541424aa221ff37effcee4907a9767bb09aba7d1e77cda1ea80e18ae4d1242ddf11e308b0327e16018c7127274fac94501449db5f1c3aea87a805c2ddab01af3fc191fdc2ead0c3eddb35806a8634e89ad91fd90510912d5f7840d35963439d3bcc3cf1b6bb865f56d6e9", 0x7e, 0x6800, &(0x7f0000000480)=@ll={0x11, 0xf5, r9, 0x1, 0x8, 0x6, @random="76c3902b949f"}, 0x80) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x148, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r12, @ANYBLOB="00000000000000000e0012000000010073737400000002002c0208001900000000000200fe8000000000000000000000000000bb00000900290000000000020000000000020000000000000000003b7a8bd9d9c643a80000"], 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014000100000000000000000002000000", @ANYRES32=r12, @ANYBLOB="080002000100000208000400ac141400"], 0x28}}, 0x0) bind$packet(r3, &(0x7f0000000100)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @random="962c85e043d8"}, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000005c80)={'vcan0\x00', r12}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x1}) r13 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r13, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000001000000000000000000000000000000000020000100000000000000000003000000000000000000030000000000f3ffffffffefffff000000000000000000000000001400"/88], 0x58) execveat(r13, &(0x7f0000000080)='\x00', 0x0, 0x0, 0x1000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14) 02:48:28 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/enforce\x00', 0x502, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, 0x0) r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x2) keyctl$chown(0x4, r1, 0x0, r2) keyctl$setperm(0x5, r1, 0x2) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) splice(r4, 0x0, r6, 0x0, 0x1420000a77, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0xfffffffffffffeee, &(0x7f0000000180)={0x0}}, 0x0) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) flistxattr(r9, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x7, 0x4, 0x480, 0x280, 0x280, 0x280, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000300), {[{{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @multicast1, 0x0, 0x1fffffffe}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @multicast1, 0xf}}}, {{@arp={@multicast1, @dev={0xac, 0x14, 0x14, 0x1a}, 0xaff597bced20ca8, 0xffffff00, @empty, {[0x101, 0x0, 0x7f, 0x0, 0xff, 0xff]}, @mac=@dev={[], 0x1f}, {[0x0, 0x0, 0x0, 0x0, 0x1fe, 0xff]}, 0x0, 0x11b0, 0x7, 0x6, 0x1000, 0x52f, 'ip6gretap0\x00', 'team0\x00', {0x1fe}, {0xff}, 0x0, 0x20}, 0xf0, 0x118}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3ff}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x5cc) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_REMOTE={0x8, 0x5, @dev}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000011000104000000001f00000002200000", @ANYRES32=r10], 0x2}}, 0x0) ftruncate(0xffffffffffffffff, 0x4) getsockopt$SO_COOKIE(r4, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000140)=0x8) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffd88) 02:48:28 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="240000001d0007031dfffd946f610500070000006700000077000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) [ 604.119433] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 604.164003] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. 02:48:29 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self\x00', 0x502000, 0x0) vmsplice(r3, &(0x7f00000001c0)=[{&(0x7f0000000300)}, {&(0x7f0000001740)="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", 0x1048}, {&(0x7f00000003c0)="e9c04387a60352dfc09d48c589ef42245d524976e595af329b1f7f7ee74d38f6f877265f8ab9b046ea2674cf1a0fef012987fd57b3836136a0bf0451fb1b88", 0xfffffffffffffe49}], 0x3, 0xe) read(r0, &(0x7f0000000440)=""/250, 0xfa) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000013c0)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x800000000000}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x4d5, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) sendmmsg(r4, &(0x7f0000000240), 0x400000000000052, 0x0) getsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000180), &(0x7f0000000300)=0x4) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f00000000c0)={0x1a, 0x279, 0x9, 0x2, 0x3, 0x81}) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000001c0)}, 0x20) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) fchdir(r5) r6 = open(0x0, 0x1d1143, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r7 = creat(&(0x7f0000000700)='./bus\x00', 0x0) prctl$PR_MCE_KILL(0x21, 0x3, 0x0) fcntl$setstatus(r7, 0x4, 0x0) write$FUSE_INIT(r6, &(0x7f0000000000)={0x50}, 0x50) clone(0x2142001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet6_int(r1, 0x29, 0x4c, &(0x7f0000000340), &(0x7f0000000380)=0x4) setsockopt$netlink_NETLINK_PKTINFO(r6, 0x10e, 0x3, &(0x7f0000000100)=0x7, 0x4) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x2000, 0x0) 02:48:29 executing program 1: syz_open_procfs(0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340), 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000001600)={0x5, 0x8000, 0x0, 0x0, 0x9, 0x31aa}) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0xd432}) pipe(0x0) read(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000000)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) io_submit(0x0, 0x4, &(0x7f00000019c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0xc, 0xb54d, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x683cb2b4bc11b951, r0}, 0x0, 0x0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) setitimer(0x1, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x7530}}, 0x0) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000011c0)='tasks\x00', 0x2, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = accept$inet(r3, 0x0, 0x0) sendto(r2, &(0x7f0000000440)="9a2e0aefbf82d722a84e995c052871b118938eeab8fb4cbe5eafa578ef5cae84933697fbfdbb4ea508e2aa5ccd7eb04a3c0347f8d56e1c6d9bac9f512286d259a7c357ea9eeeb5da034b18226837fb90e9e7f002d1bb08", 0x57, 0x40800, &(0x7f0000001240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x3, 0x4, 0x4, 0x1, {0xa, 0x4e24, 0x9, @mcast2, 0xd58}}}, 0x80) write(r5, &(0x7f0000000340)="4e0e25b561211d9ea321054aef46997621e931832c4a843b36b24460f63ea76cfa85ec5244809b9d1f88a1a1cf9cd4cdf660ff949a2df49e20430d8f35c65f4cc2bb107941757f52ba0842604a004f2e", 0xfffffd5f) read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r7, 0xffffffffffffffff) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000003c0)={0x2, 0x4e23, @local}, 0xfffffffffffffdc1) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000280)=0x32, 0x4) connect$inet(r8, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000300)={0x2, 0x0, @multicast2}, 0x10) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0x6, &(0x7f0000000280)=0x32, 0x4) connect$inet(r9, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r9, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r11, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r11, 0x107, 0x11, &(0x7f0000000100)=0x20c7, 0x4) write$binfmt_elf32(r11, &(0x7f0000000440)=ANY=[], 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r13 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) dup2(r13, r1) sendfile(r5, r12, 0x0, 0x80000001) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r14 = gettid() ptrace(0x537cb90df83a7d4c, r14) wait4(r14, 0x0, 0x2, 0x0) syz_open_procfs(r14, &(0x7f0000000100)='nDcmp\x00') [ 604.469178] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:29 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg(r1, 0x0, 0x62d941eedacd8f09) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x3661}}) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r4, 0x5501) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(r2) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x4fff}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001000000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) pipe(&(0x7f00000001c0)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) setxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x3) accept4(0xffffffffffffffff, 0x0, 0x0, 0x40400) r7 = open(&(0x7f0000002000)='./bus\x00', 0x504c2, 0x0) ftruncate(r7, 0x2007fff) pipe(&(0x7f0000000340)) socketpair$unix(0x1, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 02:48:29 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x323) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40000, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) write$P9_RSTAT(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='l'], 0x1) sendfile(r1, r5, 0x0, 0x9001) 02:48:29 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) [ 605.140133] input: syz0 as /devices/virtual/input/input24 02:48:30 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000003200018b0000000067f3bb4908f8157414000100100001000800018ddee8a40f4084b1aeec87a4fe773b48d9cab7a594dd96bf5c9be0920a7df722050d2a092cdad18d324c10"], 0x1}}, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420800a74, 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, r3, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 02:48:30 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x4fff}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000003c0)={'team0\x00', 0x400}) write$apparmor_current(0xffffffffffffffff, &(0x7f00000000c0)=@profile={'changeprofile ', 'security!cgroup,\x00'}, 0x1f) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 02:48:30 executing program 1: syz_open_procfs(0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340), 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000001600)={0x5, 0x8000, 0x0, 0x0, 0x9, 0x31aa}) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0xd432}) pipe(0x0) read(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000000)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) io_submit(0x0, 0x4, &(0x7f00000019c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0xc, 0xb54d, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x683cb2b4bc11b951, r0}, 0x0, 0x0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) setitimer(0x1, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x7530}}, 0x0) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000011c0)='tasks\x00', 0x2, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = accept$inet(r3, 0x0, 0x0) sendto(r2, &(0x7f0000000440)="9a2e0aefbf82d722a84e995c052871b118938eeab8fb4cbe5eafa578ef5cae84933697fbfdbb4ea508e2aa5ccd7eb04a3c0347f8d56e1c6d9bac9f512286d259a7c357ea9eeeb5da034b18226837fb90e9e7f002d1bb08", 0x57, 0x40800, &(0x7f0000001240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x3, 0x4, 0x4, 0x1, {0xa, 0x4e24, 0x9, @mcast2, 0xd58}}}, 0x80) write(r5, &(0x7f0000000340)="4e0e25b561211d9ea321054aef46997621e931832c4a843b36b24460f63ea76cfa85ec5244809b9d1f88a1a1cf9cd4cdf660ff949a2df49e20430d8f35c65f4cc2bb107941757f52ba0842604a004f2e", 0xfffffd5f) read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r7, 0xffffffffffffffff) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000003c0)={0x2, 0x4e23, @local}, 0xfffffffffffffdc1) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000280)=0x32, 0x4) connect$inet(r8, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000300)={0x2, 0x0, @multicast2}, 0x10) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0x6, &(0x7f0000000280)=0x32, 0x4) connect$inet(r9, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r9, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r11, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r11, 0x107, 0x11, &(0x7f0000000100)=0x20c7, 0x4) write$binfmt_elf32(r11, &(0x7f0000000440)=ANY=[], 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r13 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) dup2(r13, r1) sendfile(r5, r12, 0x0, 0x80000001) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r14 = gettid() ptrace(0x537cb90df83a7d4c, r14) wait4(r14, 0x0, 0x2, 0x0) syz_open_procfs(r14, &(0x7f0000000100)='nDcmp\x00') 02:48:31 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) [ 606.277463] selinux_nlmsg_perm: 454 callbacks suppressed [ 606.277476] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24490 comm=syz-executor.5 02:48:31 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e21, @loopback}, 0x10) r1 = dup(r0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socket$key(0xf, 0x3, 0x2) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000580)=0xdb000000, 0x4) r4 = openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x8101, 0x0) write$eventfd(r4, &(0x7f0000000140), 0x8) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[]}, 0x1, 0x0, 0x0, 0x58880}, 0x30004081) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f00000034c0)={@local, @empty, @empty, 0x0, 0x40, 0x1f, 0x100, 0xfffffffeffffffff, 0x802402a6}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') getsockopt$SO_COOKIE(r6, 0x1, 0x39, &(0x7f0000000640), &(0x7f0000000680)=0x8) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[]}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x244000, 0xc4) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={r7, 0x1, 0x3, 0x8000, &(0x7f0000000340)=[0x0, 0x0], 0x2}, 0x20) r8 = socket$inet6(0x10, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udp\x00') r10 = dup(r8) sendfile(r10, r9, 0x0, 0x525) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x20) r11 = socket$inet6(0x10, 0x0, 0x0) dup(r11) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="85fcfe59e6b3b26ff8770501e4a9244a5a65a7ee01845411a4583233f1cf171157ac3897117f3939ac26b6c9ffd0bc8e9eee9813ee77a99c501e6add61795cfae171ab7271bc288606000000d147bb570f0fd46b83cf5207141a7b027ac5c795ba73cef2f7a1a3c716fd4fc2698af07c589f42ace26bdb87c7376a810000000000", @ANYRES64=r11, @ANYBLOB="000327bd7000ffdbdf250c0000006400010008000300070000001000bd077564703a73797a3200000000100001007564703a73797a3200000000380004001400010002004e06000000aa0000000000000000200002000a004e20000000040000000000000030000000000000000000000800"], 0x3}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) sendto$inet(r0, &(0x7f00000000c0)="e0", 0xffd4, 0x0, 0x0, 0x0) [ 606.362907] device lo left promiscuous mode 02:48:31 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0x0, 0x0}) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f00000000c0)=@abs={0x1}, 0x6e) bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0xa) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0x0) ioctl$ASHMEM_SET_NAME(r6, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) 02:48:32 executing program 1: syz_open_procfs(0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340), 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000001600)={0x5, 0x8000, 0x0, 0x0, 0x9, 0x31aa}) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0xd432}) pipe(0x0) read(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000000)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) io_submit(0x0, 0x4, &(0x7f00000019c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0xc, 0xb54d, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x683cb2b4bc11b951, r0}, 0x0, 0x0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) setitimer(0x1, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x7530}}, 0x0) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000011c0)='tasks\x00', 0x2, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = accept$inet(r3, 0x0, 0x0) sendto(r2, &(0x7f0000000440)="9a2e0aefbf82d722a84e995c052871b118938eeab8fb4cbe5eafa578ef5cae84933697fbfdbb4ea508e2aa5ccd7eb04a3c0347f8d56e1c6d9bac9f512286d259a7c357ea9eeeb5da034b18226837fb90e9e7f002d1bb08", 0x57, 0x40800, &(0x7f0000001240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x3, 0x4, 0x4, 0x1, {0xa, 0x4e24, 0x9, @mcast2, 0xd58}}}, 0x80) write(r5, &(0x7f0000000340)="4e0e25b561211d9ea321054aef46997621e931832c4a843b36b24460f63ea76cfa85ec5244809b9d1f88a1a1cf9cd4cdf660ff949a2df49e20430d8f35c65f4cc2bb107941757f52ba0842604a004f2e", 0xfffffd5f) read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r7, 0xffffffffffffffff) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000003c0)={0x2, 0x4e23, @local}, 0xfffffffffffffdc1) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000280)=0x32, 0x4) connect$inet(r8, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000300)={0x2, 0x0, @multicast2}, 0x10) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0x6, &(0x7f0000000280)=0x32, 0x4) connect$inet(r9, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r9, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r11, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r11, 0x107, 0x11, &(0x7f0000000100)=0x20c7, 0x4) write$binfmt_elf32(r11, &(0x7f0000000440)=ANY=[], 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r13 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) dup2(r13, r1) sendfile(r5, r12, 0x0, 0x80000001) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r14 = gettid() ptrace(0x537cb90df83a7d4c, r14) wait4(r14, 0x0, 0x2, 0x0) syz_open_procfs(r14, &(0x7f0000000100)='nDcmp\x00') 02:48:32 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept4$inet6(r3, &(0x7f0000000000), &(0x7f0000000040)=0x1c, 0x80000) socket$packet(0x11, 0x2, 0x300) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0x200000100000011, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r14 = dup(r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) ioctl$NS_GET_OWNER_UID(r14, 0xb704, &(0x7f00000002c0)=0x0) ioctl$TUNSETOWNER(r12, 0x400454cc, r15) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x148, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r10, @ANYBLOB="00000000000000000e0012000000010073737400000002002c0208001900000000000200fe8000000000000000000000000000bb00000900290000000000020000000000020000000000000000003b7a8bd9d9c643a80000"], 0x38}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r10}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @dev}]}, 0x28}}, 0x0) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @random="962c85e043d8"}, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='gretap0\x00', 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'vxcan1\x00', r16}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@rand_addr="489592572ca0aed6de1b4bc6da12572c", 0x0, r17}) [ 607.151507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24490 comm=syz-executor.5 [ 607.151571] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24490 comm=syz-executor.5 02:48:32 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/prev\x00') write$cgroup_subtree(r2, &(0x7f00000003c0)={[{0x2b, 'memory'}, {0x2d, 'io'}, {0x2d, 'pids'}, {0x2d, 'pids'}, {0x2b, 'io'}, {0x3b, 'memory'}]}, 0x24) recvmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/206, 0xce}, {&(0x7f0000000240)=""/133, 0x85}, {0x0}], 0x3}, 0x20) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x1000) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, &(0x7f0000000300)) open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000000000020009) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) lstat(0x0, &(0x7f0000000600)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ftruncate(r4, 0x200004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$P9_RSYMLINK(r7, &(0x7f0000000400)={0x14, 0x11, 0x1, {0xb, 0x0, 0x2}}, 0x14) sendfile(r3, r4, 0x0, 0x80001d00c0d0) [ 607.151622] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24490 comm=syz-executor.5 [ 607.153201] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24490 comm=syz-executor.5 [ 607.153260] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24490 comm=syz-executor.5 02:48:32 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x4, 0x4, 0x4, 0xff}, 0x13) bpf$MAP_CREATE(0x2, &(0x7f0000000180)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) open(&(0x7f0000000000)='./file0\x00', 0x2a2000, 0xc0) 02:48:32 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x7) getsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4) io_setup(0x1ff, &(0x7f0000000040)) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) gettid() getpid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000003c0)=0x0) syz_open_procfs(r3, &(0x7f0000000780)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2k\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4}J\x83\xc3n\xa7\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11%\x98\xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\xce\x12\xd0\x10{\xd7cD\xae\xa0.\x0f\xdc\xbb\xc6\xb6\xb8w}\x0fDj\xa3\x14\f\x17\xf4l\x96\b\x9f\xdd\xb7') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000340)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket(0x200000100000011, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfc69e807bca0b698) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x148, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r14, @ANYBLOB="00000000000000000e0012000000010073737400000002002c0208001900000000000200fe8000000000000000000000000000bb00000900290000000000020000000000020000000000000000003b7a8bd9d9c643a80000"], 0x38}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r14}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @dev}]}, 0x28}}, 0x0) bind$packet(r8, &(0x7f0000000100)={0x11, 0x0, r14, 0x1, 0x0, 0x6, @random="962c85e043d8"}, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000440)={'team0\x00', r14}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000480)={r15, 0x1, 0x6, @random="277c04664cb8"}, 0x10) ioctl$sock_inet_SIOCRTMSG(r5, 0x890d, &(0x7f0000000180)={0x0, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, {0x2, 0x4e24, @remote}, {0x2, 0x4e20, @local}, 0x100, 0x0, 0x0, 0x0, 0x80, &(0x7f0000000140)='rose0\x00', 0xfffffffffffffede, 0x10001, 0x9}) io_submit(0x0, 0x0, &(0x7f0000000880)) r16 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r16, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r16, 0x0) ioctl$ASHMEM_SET_NAME(r16, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) [ 607.909843] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.2'. 02:48:32 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_subtree(r3, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) 02:48:33 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x4, 0x3, 0x1a}, 0x18) close(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x4fff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000010005fba00cca18d2633568e00000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b000000000012a74fc93af125d2486e4cc20b0502ac16b7dd3a2185e322e749735b3814684f3db9e6582d271516a2d667a80397fe1c0095c7f5a49efb7e691270a1c563777b665973ebdba9b218ba1b52bd16cbd342dfd07580a725ef91e77b707a00382aaba764f1da523a4aa302839dbdb820e0ea490d91ca6bcaa7b7ae11b5c6ca017ef8216935bf0a2dd05b819431cfdae5395f742119ed0c33ca5a68616b59166b6c8fbd40f3a11fab2d93436a30e0784782bc1b96578a69244517f82cf9b5ff0f5a9ad3342a9f3d6546b5cacdaf5b54a02d8d40fb1a75401ad3a2c152ab1c"], 0x28}}, 0x0) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x4fff}) ftruncate(r4, 0x2007fff) sendfile(r0, r4, 0x0, 0x8000fffffffe) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) 02:48:33 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x88) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mknodat(r5, &(0x7f00000001c0)='./file0/../file0\x00', 0x40, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x3e, &(0x7f0000000540)=0x6, 0x45e5d2626e90a9af) sendto(r2, &(0x7f0000000040), 0xfe4c, 0x0, 0x0, 0x8b) [ 608.317865] audit_printk_skb: 1983 callbacks suppressed [ 608.317874] audit: type=1400 audit(1574736513.113:12265): avc: denied { sys_admin } for pid=2105 comm="syz-executor.3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 608.322283] audit: type=1400 audit(1574736513.123:12266): avc: denied { net_admin } for pid=2095 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 608.323929] audit: type=1400 audit(1574736513.123:12267): avc: denied { net_admin } for pid=2095 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 608.325734] audit: type=1400 audit(1574736513.123:12268): avc: denied { net_admin } for pid=2095 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 608.327335] audit: type=1400 audit(1574736513.123:12269): avc: denied { net_admin } for pid=2095 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 608.380442] audit: type=1400 audit(1574736513.183:12270): avc: denied { net_admin } for pid=2100 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 608.385949] audit: type=1400 audit(1574736513.183:12271): avc: denied { sys_admin } for pid=2106 comm="syz-executor.4" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 02:48:33 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) [ 608.390620] audit: type=1400 audit(1574736513.193:12272): avc: denied { net_admin } for pid=2095 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 02:48:33 executing program 4: pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) r5 = openat$full(0xffffffffffffff9c, 0x0, 0xf630652407c83dd8, 0x0) getpeername$packet(r5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0x8000fffffffe) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket(0x0, 0x2, 0x0) r6 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$EVIOCGNAME(r6, 0x80404506, &(0x7f0000001800)=""/151) syz_genetlink_get_family_id$ipvs(&(0x7f0000001380)='IPVS\x00') r7 = creat(&(0x7f0000000040)='./bus\x00', 0x84b531ef15536ebc) fallocate(r7, 0x0, 0x0, 0x8020003) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0x7, 0x0, 0x1, 0x0, 0x0, 0x88021}, 0x100) socket$nl_route(0x10, 0x3, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000140)=0x1c, 0x800) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000ae72d58f11a4660448f53a8a80000008001b000000000012117e80a49066384d894748779fa7bb8025867bb708eba286d54f5edd74eca748bce4dcd02cd14082056f"], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000010005fba000200008173cd7b8027228b000057a7db9618b0eb99d1000000000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) sendto(r9, 0x0, 0xffffffffffffff08, 0x14025861, 0x0, 0xfffffd7f) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x88000, 0x0) [ 608.392571] audit: type=1400 audit(1574736513.193:12273): avc: denied { net_admin } for pid=2095 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 02:48:33 executing program 1: syz_open_procfs(0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340), 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000001600)={0x5, 0x8000, 0x0, 0x0, 0x9, 0x31aa}) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0xd432}) pipe(0x0) read(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000000)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) io_submit(0x0, 0x4, &(0x7f00000019c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0xc, 0xb54d, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x683cb2b4bc11b951, r0}, 0x0, 0x0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) setitimer(0x1, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x7530}}, 0x0) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000011c0)='tasks\x00', 0x2, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = accept$inet(r3, 0x0, 0x0) sendto(r2, &(0x7f0000000440)="9a2e0aefbf82d722a84e995c052871b118938eeab8fb4cbe5eafa578ef5cae84933697fbfdbb4ea508e2aa5ccd7eb04a3c0347f8d56e1c6d9bac9f512286d259a7c357ea9eeeb5da034b18226837fb90e9e7f002d1bb08", 0x57, 0x40800, &(0x7f0000001240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x3, 0x4, 0x4, 0x1, {0xa, 0x4e24, 0x9, @mcast2, 0xd58}}}, 0x80) write(r5, &(0x7f0000000340)="4e0e25b561211d9ea321054aef46997621e931832c4a843b36b24460f63ea76cfa85ec5244809b9d1f88a1a1cf9cd4cdf660ff949a2df49e20430d8f35c65f4cc2bb107941757f52ba0842604a004f2e", 0xfffffd5f) read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r7, 0xffffffffffffffff) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000003c0)={0x2, 0x4e23, @local}, 0xfffffffffffffdc1) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000280)=0x32, 0x4) connect$inet(r8, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000300)={0x2, 0x0, @multicast2}, 0x10) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0x6, &(0x7f0000000280)=0x32, 0x4) connect$inet(r9, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r9, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r11, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r11, 0x107, 0x11, &(0x7f0000000100)=0x20c7, 0x4) write$binfmt_elf32(r11, &(0x7f0000000440)=ANY=[], 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r13 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) dup2(r13, r1) sendfile(r5, r12, 0x0, 0x80000001) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r14 = gettid() ptrace(0x537cb90df83a7d4c, r14) wait4(r14, 0x0, 0x2, 0x0) syz_open_procfs(r14, &(0x7f0000000100)='nDcmp\x00') [ 608.394333] audit: type=1400 audit(1574736513.193:12274): avc: denied { net_admin } for pid=2100 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 02:48:34 executing program 2: r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/validatetrans\x00', 0x1, 0x0) write$selinux_validatetrans(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745fb58b70bcfc436a19626c655f6465766963655f743a73302073797374656d5f753a6f626a6563745f723a7061737377645f657865635f743a73302030303030303030303030303030303030303030302073797374656d5f753a73797374656d5f723a6b65726e656c5f743a733000"], 0x7b) [ 609.014338] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 609.014344] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.2'. 02:48:34 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, 0x0) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r7 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r9 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r9, 0x2007fff) sendfile(r7, r9, 0x0, 0x8000fffffffe) 02:48:34 executing program 2: pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x5) r4 = socket(0x0, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @random="962c85e043d8"}, 0x14) fcntl$setsig(r4, 0xa, 0x2b) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x1, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x0, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00'}) bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, 0x0, 0x1, 0xfe}, 0x14) r9 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r9, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r9, 0x0) ioctl$ASHMEM_SET_NAME(r9, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) fstat(0xffffffffffffffff, &(0x7f00000008c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) r12 = socket(0x200000100000011, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000001780)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f00000038c0)=[{{&(0x7f00000005c0)=@rc, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000640)=""/146, 0x92}, {&(0x7f0000000700)=""/229, 0xe5}, {&(0x7f0000000800)=""/111, 0x6f}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f00000004c0)=""/58, 0x3a}], 0x5, &(0x7f0000000a40)=""/133, 0x85}, 0x7ff}, {{&(0x7f0000000b00)=@can, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000b80)=""/255, 0xff}, {&(0x7f0000000c80)=""/111, 0x6f}, {&(0x7f0000000d00)=""/195, 0xc3}, {&(0x7f0000000540)=""/21, 0x15}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f0000000e00)=""/106, 0x6a}, {&(0x7f0000000e80)=""/89, 0x59}], 0x7, &(0x7f0000000880)=""/10, 0xa}, 0x2}, {{&(0x7f0000000f80)=@tipc, 0x80, &(0x7f0000001240)=[{&(0x7f0000001000)=""/144, 0x90}, {&(0x7f00000010c0)=""/214, 0xd6}, {&(0x7f00000011c0)=""/99, 0x63}], 0x3, &(0x7f0000001280)=""/30, 0x1e}, 0x8}, {{&(0x7f00000012c0)=@tipc, 0x80, &(0x7f0000001400)=[{&(0x7f0000001480)=""/118, 0x76}, {&(0x7f0000001340)}], 0x2}, 0x6}, {{&(0x7f0000001500)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001580)=""/60, 0x3c}, {&(0x7f00000015c0)=""/166, 0xa6}, {&(0x7f00000028c0)=""/4096, 0x1000}], 0x3, &(0x7f00000016c0)=""/158, 0x9e}, 0x8000}], 0x5, 0x80002002, &(0x7f00000017c0)={r13, r14+10000000}) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f00000000c0)={'ip6erspan0\x00', r11}) bind$packet(r12, &(0x7f0000000100)={0x11, 0x0, r16, 0x1, 0x40, 0x6, @random="2d2c000600"}, 0x14) r17 = accept4$packet(r12, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) r18 = dup3(r17, r2, 0x0) ioctl$EVIOCGNAME(r18, 0x80404506, &(0x7f0000001800)=""/151) syz_genetlink_get_family_id$ipvs(&(0x7f0000001380)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000001440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xfffffffffffffefe, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20004800) sendto(r18, 0x0, 0x0, 0x4000000, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) r20 = socket$inet_udp(0x2, 0x2, 0x0) close(r20) r21 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r21, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x86800) splice(r19, 0x0, r22, 0x0, 0x9, 0xe) ioctl$PPPIOCGNPMODE(r19, 0xc008744c, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000180)=""/72) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, 0x0) [ 609.973658] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 610.099237] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 02:48:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000180)={{0x2, 0x4e21, @loopback}, {0x285, @broadcast}, 0x56, {0x2, 0x4e20, @empty}, 'ip6_vti0\x00'}) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="28006f001c000100000000000200000007000000", @ANYRES32=r4, @ANYBLOB="000000000c000200aaaaaaaaaa000000"], 0x28}}, 0x0) 02:48:35 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, 0x0) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r7 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r9 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r9, 0x2007fff) sendfile(r7, r9, 0x0, 0x8000fffffffe) 02:48:35 executing program 1: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x2081fc) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x1800007, 0x11, r2, 0x0) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xf642e7e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$eventfd(r4, &(0x7f0000000000)=0x24, 0x8) creat(&(0x7f0000000140)='./bus\x00', 0x0) [ 611.147856] team_slave_1 selects TX queue 2, but real number of TX queues is 2 [ 611.310642] selinux_nlmsg_perm: 212 callbacks suppressed [ 611.310650] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24597 comm=syz-executor.3 [ 611.761097] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24597 comm=syz-executor.3 02:48:36 executing program 5: pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="962c85e043d8"}, 0x14) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x1000000000000, 0x102, 0x1, 0x0, 0x0, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400}, 0x20) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_procfs(0x0, 0x0) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f00000000c0)={@mcast2, 0x6f, r7}) bind$packet(r4, &(0x7f00000003c0)={0x11, 0x4, 0x0, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0x8000fffffffe) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8005) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) fstat(0xffffffffffffffff, &(0x7f00000008c0)) socket(0x200000100000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) r9 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$EVIOCGNAME(r9, 0x80404506, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000001380)='IPVS\x00') r10 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r10, 0x0, 0x0, 0x8020003) sendto(r9, 0x0, 0x0, 0x4000000, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) close(0xffffffffffffffff) splice(r11, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPIOCGNPMODE(r11, 0xc008744c, &(0x7f0000000380)={0x2b}) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000180)=""/72) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) 02:48:36 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r2, 0x12081ff) fcntl$setstatus(r1, 0x4, 0x6100) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) pipe(&(0x7f0000000080)) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xf642e7e) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r5 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x4003fe) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4, 0x40}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$UHID_INPUT(r3, &(0x7f0000000340)={0x8, "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", 0x1000}, 0x1006) 02:48:36 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='7/\x01\x00roup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r2, 0x208200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x100) sendfile(r2, r3, 0x0, 0x8000fffffffe) fadvise64(r1, 0x0, 0x0, 0x4) 02:48:36 executing program 3: clone(0x802102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() nanosleep(&(0x7f0000000000)={0x0, 0x1c9c380}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x14b}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KDGKBDIACR(r4, 0x4b4a, &(0x7f00000003c0)=""/200) r5 = socket(0x200000100000011, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x148, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r9, @ANYBLOB="00000000000000000e0012000000010073737400000002002c0208001900000000000200fe8000000000000000000000000000bb00000900290000000000020000000000020000000000000000003b7a8bd9d9c643a80000"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r9}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @dev}]}, 0x28}}, 0x0) bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @random="962c85e043d8"}, 0xc) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback, 0x37, r9}) pipe2(&(0x7f0000000040), 0x40000) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000006) gettid() ptrace$cont(0x1f, r0, 0x0, 0x0) 02:48:36 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, 0x0) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r7 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r9 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r9, 0x2007fff) sendfile(r7, r9, 0x0, 0x8000fffffffe) 02:48:37 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_DEV_DESTROY(r0, 0x5502) 02:48:37 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x2081fd) r3 = socket$unix(0x1, 0x2, 0x0) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) bind(r3, &(0x7f0000001580)=@in6={0xa, 0x4e20, 0x0, @local, 0x7}, 0x80) fcntl$setstatus(r1, 0x4, 0x6100) write$P9_RWSTAT(r2, &(0x7f0000000000)={0x7}, 0x7) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xf642e7e) r4 = open(&(0x7f0000000180)='./bus\x00', 0x1ad201, 0x100) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r6 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r6, 0x0, 0xffff, 0x4003f8) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000100)={0x0, r5}) [ 612.536426] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 612.604654] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.3'. 02:48:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f00000000c0)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100), 0x4) tkill(r1, 0x10010000000038) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 02:48:37 executing program 4: syz_open_procfs(0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340), 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000001600)={0x5, 0x8000, 0x0, 0x0, 0x9, 0x31aa}) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0xd432}) pipe(0x0) read(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000000)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/enforce\x00', 0xb2002, 0x0) io_submit(0x0, 0x4, &(0x7f00000019c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0xc, 0xb54d, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x2, r2}, 0x0, 0x0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0}]) setitimer(0x1, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x7530}}, 0x0) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000011c0)='tasks\x00', 0x2, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = accept$inet(r3, 0x0, 0x0) sendto(r1, &(0x7f0000000440)="9a2e0aefbf82d722a84e995c052871b118938eeab8fb4cbe5eafa578ef5cae84933697fbfdbb4ea508e2aa5ccd7eb04a3c0347f8d56e1c6d9bac9f512286d259a7c357ea9eeeb5da034b18226837fb90e9e7f002d1bb08", 0x57, 0x40800, &(0x7f0000001240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x3, 0x4, 0x4, 0x1, {0xa, 0x4e24, 0x9, @mcast2, 0xd58}}}, 0x80) write(r5, &(0x7f00000004c0)="4e0e25b561211d9ea321054aef46997621e931832c4a843b36b24460f63e6b9cfa85ec5244809b9d1f88a1a1cf9cd49e20430d8f35c65f4cc2bb107941757f52ba0842604a004f2efb7a05f5df4b2104a95d82276171b1b54cae96f9e20620488cbc7583440740ec82eddc9a00"/130, 0xffffffd9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r7, 0xffffffffffffffff) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000280)=0x32, 0x4) connect$inet(r8, &(0x7f0000000000)={0x2, 0xfffe, @broadcast}, 0x10) sendmmsg(r8, &(0x7f00000004c0), 0x0, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000300)={0x2, 0x0, @multicast2}, 0x10) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0x6, &(0x7f0000000280)=0x32, 0x4) connect$inet(r9, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r9, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r11, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r11, 0x107, 0x11, &(0x7f0000000100)=0x20c7, 0x4) write$binfmt_elf32(r11, &(0x7f0000000440)=ANY=[], 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r13 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) dup2(r13, r0) sendfile(r5, r12, 0x0, 0x80000001) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r14 = gettid() ptrace(0x537cb90df83a7d4c, r14) syz_open_procfs(r14, &(0x7f0000000100)='nDcmp\x00') [ 612.869224] input: syz1 as /devices/virtual/input/input26 02:48:37 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r7 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r9 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r9, 0x2007fff) sendfile(r7, r9, 0x0, 0x8000fffffffe) [ 613.334323] audit_printk_skb: 1872 callbacks suppressed 02:48:38 executing program 1: clone(0x800007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0xbc, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="13cd0f34"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)}], 0x3}}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="128714e4c4214bb8ca409a3950c86e0ffbca08f62d38b2f2d6e1bc1b2508219606f981c5b113ca4acffbdd2bf34bfce0e6046b3a141178ff45fe4bf2ade2e7abfb4c902c69b5b28d9229b3353955193258a922a65c75667476671f83855e47fbaf77b99a89f2cfa05fe4a129fd249f9b4cbd2f3aa8c97a7640f1ba4369aa89e6935421e2384746758556069a6c070938bdb1548a5406f6c420ea6f7fd3c0d0a5b3f15ea6170b67dd0dce469a81f177b11bc3d0b0ee482adda48537f26e5f024f6f512546217489b1f7f936939f0b27d6e60600db182e820cda2db55b2e67eb52cb3ca401a3c69a676df1288c16431e0b7550804c7bcf4c7176086c525d2dc0a55771594c4554061a007e6b810ba447bd3f6c410e6c69efeac5e85a361a", @ANYPTR64, @ANYRESHEX, @ANYRES16, @ANYRES16, @ANYRESDEC, @ANYRESHEX, @ANYRES32, @ANYPTR], 0x0, 0x130}, 0x20) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 613.334332] audit: type=1400 audit(1574736518.133:12900): avc: denied { net_admin } for pid=2100 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 02:48:38 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'nr0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1d\x00', 0x4}, 0xf) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000100)={0xffffffffffffffff}) write$P9_RSTATFS(r3, &(0x7f0000000140)={0x43, 0x9, 0x2, {0x0, 0x80, 0x2, 0x3, 0x0, 0x100, 0x7, 0x7, 0x8001}}, 0x43) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000040)={'raw\x00'}, &(0x7f00000000c0)=0x54) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 02:48:38 executing program 5: capset(&(0x7f00000fc000)={0x20080522}, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000340), 0x1c) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x4040, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000080)) sendmmsg$sock(r0, &(0x7f0000004f80)=[{{&(0x7f00000000c0)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(xchacha12-simd,crct10dif-generic)\x00'}, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="b1054f57beca438947738eb67adea5422dae580738efa8fe5e240df39286a7ef5744e2b00879cc5c71202ef1ebc4c52048f3277203858ed2b584d92349e06746e419d718d75dd6821b40b52d1c2cbf10da9cfb415f302178d70e56ee6d9f4627e4eb19f5991f9853c91690364a48acc5664c8a1977c809d69d34450ebc3ea7"}, {&(0x7f00000001c0)="acfd1c65753bd7d42d6c645c72a9cbfdc3afa24f5e05600e82df4989e8f46fcaef1da0561a3480be2a017a48fdbe83710ba21cbc9534d926f7a85af86b639ad20e81fed408cd0dda367819e7e14246b80d49b725e7ee3eac49335bf97d6cef05ebf231d21722581cc89db025a0ae461ca0d44ef5d97417b8af38ec8c906500f5e46a761893eaac7bceb7350cdf4f6dcd6f49450b2b3abce4d5e1eb138edb24a7951e390d91857edd35e4def0782ccb2567dd9653dd22fa1900a8cebfab3e303a94c993cab3f9ae3f3c745f5892f43c9705e4b28f90db3c48b95cf7c8d2dde68c72f6518d10c666ff"}, {&(0x7f00000002c0)="961386f4cb6b198d0dac773b6e26d1bafcf6994d0a4b0154bfa2d48d43c822a57c9b4378aaf22af53e6b8366e000083df18ebeb9e1103cea790fa1"}]}}, {{&(0x7f0000000380)=@generic={0x1, "f133e7bc3516ad5ecb77cad5d65081dee63edbfe59801d29da8eb23ebd8acbd04638e193c06e81f674abb6182ad7865ba2b26a71f67b32011967bf763acd1af3bdfed88fd74f05386ac948d9cc498cebb72efce88ddae98dd468c862d35c783d433f03a4e9e1b7ce5907c227d6e5aef1bd3f3a171da03367243af70cdcc5"}, 0x0, &(0x7f0000000880)=[{&(0x7f0000000400)="c6779bb07bc94f68b6f7aa14357a7bbbd95df5ceb853cf1f4048ba87966afd2a868485f6490508f7d844f98cefc4aff619d84fcaff333b9d0a008c3f94abe5fa8c6eeb74f3fb3be3856bcad77b749359691d976a5f11957f1c3f8c747d4f87e2925859676612030dc27f5c50c3ca88cbc186c31b0e1d35fd02695bb523706d0bf2e7aff22592def3fb5a75c5938a10cc3a864ca7e3a913238f3b23da9a55ae48b29c8ec52ce619364a57a637c8edacae1d6a949cee5bd11e5fe4289a35fdf21170d204fe114aa24fb4e604bd379413180d0f967a07b2b3c6065d3e552e0874c331c1b4d292e8ccd42cfda66bfa3c1847d1b2"}, {&(0x7f0000000500)="e841e9046e8ef2f8a8e3272855c9ea67c21db764fce2b161bccb79141e94644d2cefef16fd134be8846f5530f116a4"}, {&(0x7f0000000540)="5f84403e9ef10c829015330053ad7f11e747461268d534d0db30d5bd25aceb46ca792fa7225eceb8767f0a4b2158d1ecb40f519031b412c7707c643797132ed141be4d79213e11193bdc409796dbc66a9501fe166235755a19a6fdcf7c7806e507dbe9f5ceab74fd7dd258e719a76128f279f026e0df2097bc4376f472789da50abcdd466fdcef15511c40df56e7d162b479c3019962bd2b1731834b95a42c4d5fdd19c538d7207702b20c09293dbf1e18da6083f5ae6b7bcf4e24bdf5457e7c889d57de1c3b6de3731db1deddad219a0b92b6c876b1331dab074034ba8cdb9e"}, {&(0x7f0000000640)="f4ea95aa13551da488ca03ce8194f23116d66e5f955b516424ccce1674c8bc5f89ff02168058e30adba3796f6e4332e1b97ce2300f2779f6eacfadb54139be2cf40326156fe7f8d1092449e7e253a63f9e321bbfc07eee1bbac7eba839a3abba65c6ac30cea1cd7132f0ebe24d118978d40f8c3c3ba0c06136e19be4bd42dafa8b0626e46c73f2f6c8ceb0b4a3f00767288a79916e89ecbecdda14e244ae5d44c8a155727a01dadbe054840e1dc2494952c4be63d2a7a976a74668eade2533d613c563eb88ed9df59f59b3da2a4fc938cfe8a8442b6ae962fe2fbb"}, {&(0x7f0000000740)="724f26167fbe38b6569acba09e59a20cc4c1317972eab59610ab"}, {&(0x7f0000000780)="c657e56238ee91645ee13b169cdc22155df9fe3d3b762ae887bc832722a39a15a51e357af7ef4e6a8277a26be7df2b7f81dd7b25fbb5b80777dab21997dd6e8c46439a40d84cb4b8fb78e1d93d0e19b7ee9e46a74d1fecab093c983dc2bb71e6679f464f89f0ffefe739d59d827f08f3da9850a0bf054e4a1c85fe93e4163996cb42d251c817c61b0fcc50d3c0b5e460adcc0488ec63603af7bf9c49af1b74b9f67e1d1faf8986583207ee9337e026ac019654ffee757db41ce2f6651273f383554fdb"}]}}, {{&(0x7f0000000900)=@isdn={0x22, 0x41, 0xff, 0x9, 0x5}, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000980)="98e10639bf077b5da6c2fec3d07ba690e40e2b0b98300637167b7b2c4a0c433e44635ee90b300e68873bd2d6ef025ddd267ad0a864d1514f907512be6131814f63bdd71803744d4a5f896f8f314be15934bef896feec9dbae552c5c728dd25a9"}, {&(0x7f0000000a00)="d20418f025ebebf863f8748a8f2751d651094ffee7d6a77f210ef79af55648b1229c37b497be5f5a3dc58dbe3f68fb9178665f5f5e84428a39c14f4e1f68a355af29be0865cb7468096f888fa9040f75b30b44faf62b374647bd8f6299a2e78a317def8976aadeb86d53d4645c9b49255cbee2a54618b0f5094e"}, {&(0x7f0000000a80)="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"}, {&(0x7f0000001a80)="763c36187d2ffb93e0c20a62548c638b7db4fe7058e121241b0faf5f87247215b4e1ecc7714b0a2205d9f3b67a3f305e634f3ee9ecec8dc15f1acd6ce9db8138a0ae03a8dd6a7c2322d00501d72d75d75fbaeccfeb2ad53856efce429da1642115f0b1606a7390dcf4f33470e5186db39a3e162115517b818e5b71723d04364b8da4b2f5d96fc7836629"}], 0x0, &(0x7f0000001b80)=[@mark={{0x0, 0x1, 0x24, 0x80000000}}, @mark={{0x0, 0x1, 0x24, 0x5}}, @mark={{0x0, 0x1, 0x24, 0x5c}}, @timestamping={{0x0, 0x1, 0x25, 0x100}}, @mark={{0x0, 0x1, 0x24, 0x9}}]}}, {{&(0x7f0000001c00)=@nfc_llcp={0x27, 0x0, 0x1, 0x5, 0x3, 0x0, "4c2398458cb5e7da087727ced6f70653386244d1e5665ad2a4d2a71ad20dd4cc3d51a06cc6ffed448582be9d42da7fb6fe9a0490a9229ceeab95be66af628d", 0x39}, 0x0, &(0x7f0000002040)=[{&(0x7f0000001c80)="5cea7481a536c514c8ff73ffdac60dab8d8fd2eab5269c84440d5887447d3a8059e15f6254e7e43ddae71e1a5e2c9ee260c55d695741a41b4991abe610915bd046760a535c8c2b1eea12e4594e3e50f3725a93adf9893f91e0beed4307a727a7db8b4f91c3aac052f4e2edde3cadbf15b916b86e3303c6ff29662a4a5b14dcd51b249ed212896b0fb2910c2078027ce69333f05dc9f8acedc8"}, {&(0x7f0000001d40)="490381b1c296b3bee562690d44567c38b97e14a220ea25b0dc10e176b494f53ae2f6fc0107061abfbae283627bbb3d6e2794eae340d0804bc5153cd2c4e7c8c63b20b95845eb75e893a1566b246236714936c0d09f36e8fc46fc342f1b83f267b093bb5ae61f2693d17344aabb7ef43616141ae9be470e12b35399060c4b959db5645cb3da6a5abd3674f7b97908c019a011a69754ff3d05de"}, {&(0x7f0000001e00)="2f87aadd78cdba4635bf8c943fe1b7e051610fdae1a3711edba9cb96b7e80adf1d5b6ac67a725a5fa2d1e1b71f0f3e217da82f394e29ac009b92068fc1210d1091ddcfd96cfd0cd9e3250093f06ba37503d14495c67e37acdb1dfbcb47eae926fb827d36f6b1596cb4d6d191c2eb0e9d9f299a2a2925f775e5337ccb2c99fca823666bceb33b0c6f1392272ae6289e8528aa6d6501665d261921eee06bf517e34ac62a9806add653b1d6fc5c466ae0a3cee2c1dfa8650b438a69183ec3cfd28153fe2b9adea915f118cc7ed1d47693e214782ec0624641b8dd7d5b"}, {&(0x7f0000001f00)="96dcef4834dc111f8b42b7943f1565ecb6ded7f1b1f06f5a3603cdad772e"}, {&(0x7f0000001f40)="98253f07ad5d2594643596dabdbbdc4fdd6bd8aa46cc246378ace4221a746e15fd5cbabfb21b503dcd084f2a71cc7cfdd2de905b458c881ee7ee75bc97debc94832fd62f73b688a906e1faf45a77a65fe8f7aff82d060ae06d9f408e57d49486ed06aeb75526224e7d23e57058587309d338e0dccb7546a4cbc64784ca1b027cee5b8c6ca1d250ccd30035c43f75ecebf08a1144a77b7351c585cc005a2dad27c7ec52f4c87add3b784ab8f4006ad704ca7457e7a39b83946a86a133c555f257a8d3867b0ae2"}], 0x0, &(0x7f00000020c0)=[@timestamping={{0x0, 0x1, 0x25, 0x40000000}}, @txtime={{0x0, 0x1, 0x3d, 0x5}}, @mark={{0x0, 0x1, 0x24, 0x80000001}}, @mark={{0x0, 0x1, 0x24, 0x3bc}}, @mark={{0x0, 0x1, 0x24, 0xffff}}, @txtime={{0x0, 0x1, 0x3d, 0xffff}}, @timestamping={{0x0, 0x1, 0x25, 0x1}}, @txtime={{0x0, 0x1, 0x3d, 0x5c}}, @mark={{0x0, 0x1, 0x24, 0x5}}, @mark={{0x0, 0x1, 0x24, 0x5}}]}}, {{&(0x7f00000021c0)=@llc={0x1a, 0x101, 0x0, 0x0, 0x8, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd1a25a4a59080dc6}}, 0x0, &(0x7f0000002500)=[{&(0x7f0000002f80)="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"}, {&(0x7f0000002240)="f533a196c65827dc5114488aeade0a6dff8bfa43a859db0aea0e7b556d8323c956e5b34963ad0117104091e964ee2347b0fde0538b0fb4e9e82ef73b6ebd99632ecc6fc0f17757afad9e3b44feb835b46c0c9c7b88b6fffb529e570c9fa3822177554ed34befcef23a7062415da2524a9ba0e9ca77931ce230b73e528e3298a7fa9e13fe312633841acf5995"}, {&(0x7f0000002300)="cace4147276e7e88bd8c35b42bbc713c11277fc49bcff53620a1e8404ab918b496264ac824507b47bc27adaa83b3e7b991b50c64918a8ac2d4c8f075810edce46c056051be19bd042cd19c608d645c4a8230d2469a75f88389a618dd4308e625ad6d3d844f12d569b5d0de044dac9109d73f021678c9cde01c61bfa856e1158e33c2634f69d909b5cc01ba51b265dd1464ffc7a62f6639643ea9346b25edd60b7fed9d61db1d7dc1931a25932606b67cb0ea94f9e3d864885ccfc16dd9ad99"}, {&(0x7f00000023c0)="6975524b096f6b0e2ab809c500c1cb7c6901b82601c6f208c931502092093dca3cb73aae0c88624f1856f0af2a5db23c8f4efb643a97e49b26bc30ced8eeabd8a1ce4aa90b140abb6e9ca93551a79186272db616ba47d8d1ba"}, {&(0x7f0000003f80)="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"}, {&(0x7f0000002440)="8f18da551e6a3929681287b9360a9dacdd46343afa7d5f9350a9d8d295764b028ba85ad591ae666bdc0845ebe9dd170901eddbe70fe0f30a2d4bc559b8f8a3d626558fb1fa7da26f0211cc9c2feec080bfbd0e37914710d64ea7faa99aea0d77695de8bd5c16ce014445a76812ac58d0f960551e2f663516e7a6895d80ddf418d8ee1135"}]}}, {{&(0x7f0000002580)=@un=@file={0x2c036c307b107942, './file0\x00'}, 0x0, &(0x7f0000002a00)=[{&(0x7f0000002600)="7f1a3434fb206db512f0702f5c7cd23e023cf9d11f8c4686215ecb744273954c2a2dabd654fc388bae4d23045d3aed98d385b175fa0215fdffe32beacb8b3e99ad07564a83556361e7249a80ca557ddd0fece57d1f8308d05797d8546011e0a5e6fd45a6d9bd5bb08cacac7490b4f43bc9eabdd539ebdce0f69e1a4dfec2bb6e9c4e33c209"}, {&(0x7f00000026c0)="6419c1812af79aeed1eedd309fa36bf2991d7f46c050bc562e1078d2920b88b06ef7b49b58ba464239a5b3e4e6bae0223d343b4e6e9cbc08fd59ffc9d56fa368df086867f8d06496e498e9a9dcdf323a2972c72f5015591d0ce96f30aaeaab4cfb8f5c3f0d2c1c86fb1d6805a0acba769f4469ddfe7207da545965c08d3c77006f53d7127e7133e2c4eab784901751ba39b5bcf28e42f434e9474dc77967d899d4550f86f87cbe099b30d0da167dad73ac9577741ba64d9145be31298995a4a9889590e8c43594f3689d493e9d931a50b5cb"}, {&(0x7f00000027c0)="70a129bd003922c3c63a31254694a2d86d2c763f1fbc02f97cf60c42c0719a7ffddc3a140c5f1551a309494171dd2e939b9b42ddaede659b2bd258a1799019a067aa87228d109609ed26008b27d78b2cc81aee000ab3cd082a818d70a9"}, {&(0x7f0000002840)="f41e8dfbbe7f97cbf0116ba7cc4d15a38d06f631666b87820b7a4014bc4e9ca1f34ec4293541c27b72567d3cb41a2105e2c3c088e9f2b41b93c7c355fc7c37261c0d0f9129682d5f58a45d4cc699f88ef8f0a94a576b315cbc2b37812e10e64a0fb944b81392b22e2a025e32a212a5afea59c2362d8df52f8b143069cdb564a427e3f31f82d75937965ba18b848489a98741c2ecda030fdd3bc6819d6b4da111d1ba140e9cd1445e0a482d4125fa5a9b2fafa366b6d259ae0a4c5c8ff1bbd7156eb957a4ebf511ff3107a55966c5cfd46c96afbfc582591766"}, {&(0x7f0000002940)="6d5ba9b9d235484a33f861bbfe8db97d3cfa5a6f1d45ba73080b2f1a11bd7d97637c389c0c6e01eb45b08d8a"}, {&(0x7f0000002980)="3a1d1e64bbcd2fe878b893b882"}, {&(0x7f00000029c0)="09c11a4cd85ffb"}], 0x0, &(0x7f0000002a80)=[@timestamping={{0x0, 0x1, 0x25, 0x200}}, @timestamping={{0x0, 0x1, 0x25, 0x7}}]}}, {{&(0x7f0000002ac0)=@x25={0x9, @null=' \x00'}, 0x0, &(0x7f0000002d40)=[{&(0x7f0000002b40)="9bbbfbdb71c138f2d100bb85bfa44336bb0998d5f26d5f46b5450e4ee83f7be292881408944b00ed024a2040a1ff240a3fe99509b7afa59ddca2bc6f9260652bd0f9d263ba090766aca55d37dfdbd80fbfc50cc291c1aede1087887705f10dfbe6f56182fbb062961c519b904c543c35d5757ecb1345b37ffec621625cb0c481e2fe17899d8f6498ebb37e4bc086a320b19e77b454d377548874c50c8eaca4b33ad1dae17622fedb6ef1ee0cefbc10289dbd5520de4ec59de6947295f4d64e42857b5a57cb114602baad2acef55542e2c42c0554a5c983ae20a847aa0a806f1ecdacb79e62970843f4d7cee45b8bf1"}, {&(0x7f0000002c40)="efade773a2d85222cac4a17df37f58e9efdfe03fc203aec39d6ece8be7f017734727a48caf38fc85cec3b04032b4df8f1071c911fa5a0435dcd93ff9aa22afe09db7959b4132536ed1a34c1b3f39c78e8636fc0574cfd31e6438e2e8dea1e0eb1ad7457ec98f4f9e5979cba79e2e0b3cfd33df9ed0400779b5e7d0aa4f5ac180edf07bec5aaced8782f74c778bbd63e65bc9dacc8a6c9390784f8d5e0ef624f5a3c773f6529ac579a9aed7d4b70dee66031bdc37c797d75fcdfda2ea4d3038bf5a8368b7e5eab67100cb47b63ead94ea5f67f19962d43ab7d8d19f3d04906880d6f5877ab4acb9"}], 0x0, &(0x7f0000002d80)=[@mark={{0x0, 0x1, 0x24, 0x6}}, @txtime={{0x0, 0x1, 0x3d, 0xd1}}, @txtime={{0x0, 0x1, 0x3d, 0xfffffffffffffb37}}, @timestamping={{0x0, 0x1, 0x25, 0x21}}, @mark={{0x0, 0x1, 0x24, 0x81}}, @timestamping={{0x0, 0x1, 0x25, 0x8001}}, @timestamping={{0x0, 0x1, 0x25, 0x80000000}}, @mark={{0x0, 0x1, 0x24, 0x9}}]}}], 0x209, 0x400c860) [ 613.346219] audit: type=1400 audit(1574736518.143:12901): avc: denied { dac_override } for pid=24645 comm="syz-executor.5" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 02:48:38 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x200000000000002, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x810b}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={@local, 0x0, r3}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="d214c0e12eb5e6ea076cca63e0537907"}, 0xfffffffffffffdf2) sendmmsg(r0, &(0x7f00000065c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)="4ac98949bac9664db244ba7ca1d09ba82fcd0464d4410b411e0bf9ace798544244e73689d153760f96c962c333f172c72171605a9f65939f476d9f8f0be53524469d178a5453022a99b1de29126c00d9996395eaaba98778d6092fd68bedbea9fe309a203a6db87e81c0dc000c6d3ae2f962545b15d44749c8ed0d6f1e4e8aafa93d4fff3fedaa8f442f5dc874a3cc7842551f88c256cb909bd032e19d3c017939178ff04c78c6110bb0b6b8d240e7c9fdb90d0143820b6d15f0bacfc1b4e0325abca3ca8b3a94c4659c93ce9850c89c4c48f9a667a252b667c678d1787e7cb1a50176338a37afe8dfd1a2e0aafdf8fd0f46e8ce528eacd548c70497abcf77253099929a59da006fa42499506871d627fce00bf38b3a699df7eba1abe488c9d1c968eeb8b395b3223912c595df498ab64df512021bf88793975ac27e7c2afe0a620e84cae6855fa353593ad9aa87ac4c9712ccf63358d761bc0fa51767c3914ee27321eaee3bf2517f712deaf3d97f6aac187b61b43b472749ed119e48a2972b037e82453cfee3a879d19f2d8824907d9469671bd3fef51aaeea77d2ef6fdc8e70ceabf90dca6504599bbd18263d2d94c470907f40a0b20448e151587fa828e76cce49009f40180aef2e81194245efcb1195e30ca973dd9740c3b5308705e2b5fa5158002376d1b46a0a40a7e8306d2c2e745b8d01c4d6ed59549c60b7ac8360743b16faff75348d5b27284baab1025cee3916d205259ad2636c7c385d4fd8cb15e0f676242dbe9d42ee3c5538d133c54f05fbd942a0e178e285ca2aca92c84556731e7273b97605da2ce3dd65b2133407f0c712c3f3f14a39b1a404ec7eabf616205b86c09aa58aa6768c47e7036cc01be7d8f62cf97d115c781e1483481bc352e2a14cb42a4adef1acb1448fbb6ab89c64d921aacf9d2a161860aa12bd49d61aacf3bb6fd6288ecc8d13893fef4876f205b857a294433b0e88724806e5e62bc55f90cbedf81e33c524e25ec6b98b224ac02a5fd4e789e1f8fc9d9f67cdf49908619522f9530321c79e8c29d3537d250a1ad91a57ee076d849cebdde3e9a9a643bd64a705c8d6e29e0f0c6ea19e75801a813c5a7c0ae3497e15f7e9008ae45d189104a10c9ae9006ff73b158926eb24130f875e1876e42664babfb4d4b583d8c7c6398510f188c04984667527c28fd78c3e4271011f8fbecddfc48eadddd843cd998a21edc363966ed2010d75c3a5a8d72114e7c129379d75472270cfb1d43529099f8b8be01cb623220dfe5e0eff69b864e5bc443cbee239b42a2d6f8dc5cdc7212fbfa60a73f18451f10b31bf0ae0e8e7a226144638e49e71a47b4dd03d2ae913f0a79295e6c2ad3b736622854f924340c0440634206820d6c22a005de58ea1cc05665db78f02b2972925c4f74a8902707c6921ee6eb10b3e717b98afe2eef3b614e7e5bcf3600942b5121a107e6e16d43da447b7cd1ec4ef688c17c986e24f6481dc9a9515d277ff2e3a2fef56f5f2fb9ead15e9322ac32427c21a6cdbe5766c10aad4ea2b4e30a461a7e541e1b14d22543a4ae7dee215e5e51d21aa230313a33841e735adeae6f52a6f40b039c67ce46c90468896c602eb0b5f5c4e8ebb89ce9838157fc77a8bb19d5b420377243b24e3e12b6c58fe3ced4cd890265455ddd7d65876ba41980e1c9290df82c1cdbd8f34f2b39754ada22955dd89ddb62001446d62c0b9d0de5b2bb98c7eb9915912c1091ca110a6433acb50f7ae3e48a175e48c756f51131214d11a52e56b1681f37aedaf36fae2a61a13423ce30ece6535f52bec3f4a7d3a3f1fc8b06ae025d4f3ac0db67c28f801e97b8abbf8013b43cea79f2a9d66eb9243a64d2e45a2ecd0a279c356c423760dcf159f960724895e56881e9801190bf9c84f4efa159791e60050866799dc57b0eb1c8245918fe8246eb2ca5a0220ca7cf2215486bc972b3d844ffdb54cca7e2b00dddf2afa240e51578086792a308806be3d0095854872a2cb112cb1aff9a52b344a667110c5dc3eea74aaf4d2b42da282a263749b", 0x5ad}], 0x1}}], 0x4000000000000f9, 0x0) [ 613.351975] audit: type=1400 audit(1574736518.153:12902): avc: denied { dac_override } for pid=24645 comm="syz-executor.5" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 613.354684] audit: type=1400 audit(1574736518.153:12903): avc: denied { dac_override } for pid=24645 comm="syz-executor.5" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 613.409012] audit: type=1400 audit(1574736518.213:12904): avc: denied { sys_admin } for pid=2097 comm="syz-executor.1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 02:48:39 executing program 3: r0 = socket(0x10, 0x80002, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000100)=0x10, 0xc1800) dup2(0xffffffffffffffff, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w^2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf0\xc1\xfb\xae\xb5\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93\x7f\xbc\x1a\x7f\xa90xffffffffffffffff}) r5 = dup(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000002f00)={'vxcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r8) r9 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r9, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r9, 0x0) ioctl$ASHMEM_SET_NAME(r9, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50x0, 0x0}) recvmmsg(r8, &(0x7f0000007540)=[{{&(0x7f0000003e40)=@alg, 0x80, &(0x7f0000005180)=[{&(0x7f0000003ec0)=""/4096, 0x1000}, {&(0x7f0000004ec0)=""/90, 0x5a}, {&(0x7f0000004f40)=""/202, 0xca}, {&(0x7f0000005040)=""/196, 0xc4}, {&(0x7f0000005140)=""/17, 0x11}], 0x5}, 0x9}, {{&(0x7f0000005200)=@generic, 0x80, &(0x7f0000005300)=[{&(0x7f0000005280)=""/78, 0x4e}], 0x1, &(0x7f0000005340)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000006340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000007440)=[{&(0x7f00000063c0)=""/4096, 0x1000}, {&(0x7f00000073c0)=""/68, 0x44}], 0x2, &(0x7f0000007480)=""/148, 0x94}, 0x9}], 0x3, 0x40000001, &(0x7f0000007640)={r10, r11+10000000}) [ 613.410700] audit: type=1400 audit(1574736518.213:12905): avc: denied { sys_admin } for pid=2097 comm="syz-executor.1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007c40)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000002c0)="1d2bdd90b1b31abd4622332b2dcae3f0aeb5fb49d1f6dd1e443257db9b3fbdfc5599297fcb5f12e983f19322c821d09406c40687dc1d11c05c276bc92065818f2a1e29d24f657e190700684961e0e4588e6d18d86dc042016313c28b2b199c423bb74c2e48b290dc8706012c4ddbe10d671fa5bced23abf76b44bce46b1e3e1a79f994c2346c80fa950e243452c3be0a5e5c8e62ed00fdaee35de98a4597e3e5c9cb7e6375c548e760f0c875fa4213627e6bda3a369629003c12648c4c837f8222f588e9eaea62f61aefadeab1d6832a392d35d92257016e6350704f2e7b7c302460dec5895b22b2225f7c4fc783b94dbd1894f6cc1b8401a276a8a16e1866131a4ec270bf3277c20b1a7e29e432678943e43753ad1e5cd31f56076e807b18ac1d280c4f99019b5f2557328eeb205e7daca8f7e5d1480d0f71481b8161ebecb48caca043cec6f23578d7df630d457f4b7114c2ff92b0d605c765bb54ab51036c13b3c381782197f7e3918c44a9bdd985f20d2b15ef93bc236e00e2d308776bef9c156f3d4b30a9ea5aad28785b660bc9c8c1f00c03b3f5af1dde42ae058e3ef13fba78d7636ae69d13f95d53dc43fd2c7969f7245b383c355e271c1162afc5457fcd6cbd845464536dd4a65f755d3ccf93acaeeddd09b2e4162eb8bd5d478396f5ef599ce7449b73d1288e90bec330e5b5f65fa8f11d390bf05d1d0e47ff8f8adca9fe118d56a169e1443605bccdd1cf2935b01e3f69e0035d8d1559227f9072e38577be327c872e1f3b2f42bf67ef71370f5e3854b94c8c946ed942af14701c45c4358fa173188812d4f913f3cd0a2aab72e6084ede7e8afd7e690868e3419c764ea574b2ad6e1c27fa91e81f8f42b2220efd95785640dc293a6d288467b92e1e1b8cf674027d40140223abf4d90c71b3a29c4b5b5df00511c67649dedcf536e8f1943f7281cdfdb08627a38ee9e7cc5e5793e697a66b4ab1d584896d798538e4c5973fd7ec15c43c5f5369ec44bd2c6425895ae12f4bcf9729b8117db378b5c9276ee2595e0448f33a630a811b52e1f38352469ce5f37fd1bbb2d327a2a8fab0345ad46e3a0599fcb9d218515a620ef5b7e334a7b657dd7c46d082893c50f3c5b21e9b09a260fbf30b77c730a6a9c9a0195f991634eaea7e8f8a5dbd3b9813d115d5e794776c6eec10bda0c668612d35daba01aa2675bafeba75672c5ae125786ee3a53bc5a089a47ba84e3bd06c8581aea252920f808e732e681163383c60db2f5e969613b665345bc95848e2e566d716015e3e8112ee8830838596e18d981e54e56a124d9268ddf129838e5d27674baaf126f0498694636bdbd3f59256fa8022d90c072f9d4edb3d192e4647fe77450fda86d2931083c51f335ce158335941d463d58a8a19a67cbfa21478887c4177b93472964f0e212635e86899bf0d929c6c5ab5b0838206792e0f8f1624cf2163a758b50dab7064c018ca34c717a0e1dc617567880b09c4b122a545dfc50be3a0749ffca5bb877629abc8d40fb43c9fb9f9b546deb2a7bc130d1f4821ee214d0931bec705cd825ccc091f049f56f23ed633eb47584b8f57ff34bf3235fd2a0a5a298c220f1cc9fe16b9d5cacdcc42500bf86dd4ce1a3da0c9a271287953aa736f3967b250e3a04ad40d9d786cb9ff2a2a0da5a2d1570a24c281437752a10b390a045c344991d890e746f99267d0f99eb5f01fa4d45f65ae8ff454fa62374478097db75162480bc68848659e9600761d93d2064f894fd42586e9ca2735edc9e7fcde20be337a902b6cf20880f16dbe64320bf9a6f3634cbfa84dd87751808c6cea3052f25b1bcd33dcfeb87d089c5db3e7fae72fa2226facc31382b7788544040766bb5697d4dba1ee6a3422f9587bd40b0f57f95ba9047ab18cb64af0619630230c3f512cd1317878c6e047ebc9e8d18164062c010a667f169e21715f0164e8f5ba6893feaf290c9dd0b7496e85f1efbd78c495c57017bc098e8105707796e2696a928309b904bc3053002e6311667c884521fc2abc528c5b91ad64e1cee73405e40f50c8471208df37e970d134c683a7edaa97f9ea1a7c0b8f953562d4567b4c5842b1b354edd8dcf806b8339e981fa768144e6519ae402251a1ae807b674d34943044d19b3e5c55096e6108c385e83be149320cc6e36d1d967697de19d4090f2432e9ef7af7b02b8321ce09a77b0c8ec43c5a21f86aa971f62cfec40713a3c2c281bac3b2a634cbf770630facdf86d96a3b46e0b17a5761907facab7599f28d3f81ed4869cb2aaf99f55009fdf4339c7ec1f0d5afd8aba78855f76cbaeb4c79da1a14d7716f2797e1d3e98800e3414a6b21f19e0874db2f4216970e796891635d7569514ce64168d26290baad1750dc1fb17036b07518c9509c211d845f70ad470c26c9ac191e957a964dbad30cbd68f12c679b589f113d9e6a1e6dfb3e20ad3310b9b3c3e83136e15a6201a5256173b92d11cbf0f5b67b4e207f0bdd1207590f1a64320564824dc0ca0e6880a6915ada37029bdbc000dd9980c10214fc90ed981592c3e456cbb41629de68d7b78afa2ec80648552886a47f7e84054e20858a46159fa22dbff3f2d794c3ff3b25a776c8110a0a97d72d1d961ea650d994db64f9296ec071dce74a6911701a6adaccfe87e6755095297378881046d09569de63ef701c0ca2e3b4a95f055e93ca6dd3476109bc37471e333b19984c6fcd04eaa705c1b8c67aa9624563650fef8a4e73a1bb56d01355c797ce1e1c53f150dd3a5c1c71dd426829eedeaa9887eb0656e1d4b4730d31302b2fbdb7ebf64e1ebc0178d0842b17c4643ce2f5e7d8a35eebfc9972c8d629cb7ff2bfb7e7cada97888fcb063d36cad0ac25097c7c839172599b4c7a0c44208491bf14fa24abdc4fb4ac766a2aff4aade49f38c60952f5c898a37d97300f7cde61625b494c8cb2be5304e33ce07b5b352e057eab38b1229e6dc8ed9e957bb8506de2459386153f6688593ba70de2a648f32d368cf72769d6c1d0bdae2c3535a4defa7ec101f089ef74e9f03170d6f0484554f799561aee4ca2f8a29f499215764c55abd65eca65a76d3095c81bcd6ede7bea2aab7da7f94e54de55e24ca26a41d10af3c5101085897cdcb323a89e3adf7f7631c36f2651e5837ab81d0c468d1a13d17633a10442d752d0bcefc84b7fa057c31091a174f6325f066d99c223338ba0937ff98cf6520cf04f590edc1a23100de7c42247a177f1e764ae7c7673e740e87676a69e9a08f1e207e258a1d5f13aa32739ab48de7fe80d1c9da3d1c558e9bf213ea2e5774d34e945d78e51e4d365109743b5ac4d31d720c6bd104eac6c50ecaa539f2a438f35a6c6d80802c7811cd3bba20fa2ee95e5f8e33472aaa9bd6649d1c7b74dfa3b6666ae68d340f01a8b709210a89f6ac8417a6e17b837b92b18ceead4751d5c680fd12c3eb83eebc0d56a3f2d3f995e068a4ee4f8a6d32564460b99804851cd818d2ab8d77e510c1347281c7405352b7a5f557b639998f9346353f8fe420a3fbcbac4e669293a18e970cfbc317c9135ceafaa9931c5abff929ed492dda9de1042fb1d070c2e52889dddeee5f7e4087c80a07f920ab0dfef6feaa8db06e17539f1552b43801f5ab8db102fc6200e2d8aa05fd3b7bb5566d3061d6961df25a297fd3bea85ed22cee98abd26a216267b88d6393082b7a0647aaf5257cf4f2b8086e5ba66ebcdfb46187c1876f626d023bcb5e9d0f341e44d234b12dce8b5c7bb7e3e49926f4d5e72f557a1058298d10942c2d30ae44598e3bdce7ceecbdc5c3451281b455daaf83493ef5a1e4d950c2740fad5d7becbd333f73c2db7afd2b354d8c48ee48a8b05887a6e58734125776fbba4425ee76603b487b1f241a7dd75f5bf1aee4846acd46f894179b74a91545cf98b5fb36686b2bb508f35c57a929047f7dd3cdf3f624d931add0e88fe3e5a51d75f96da72e958d1bcc96fe7e2ab08f58d05fd7c32b5b24f19ceef60da9f7507c61f75cfe4618d66e7d3eee2a5fac2136f61f32f8fa684a1e6745de17af2809a99c95d42571eaf4502752a51a59ba31ccd94c7888a9193ba878bbd3a1bf297cdf778cc1e1568436e2e59658eec9cc56a2bad98f0b24ce2ba3e5def3a1693fea63b674b652f121f24cbde16c343257d485777ac19e172977cb622de14328188aa662948e2036df8a4a0e4db0471ecbf4fb675a09cb0c6cd9ab41410e85abe75a2e9bebc7218fd36af46e0b8293bf87371ab210bf1c6baa7f3cf122185524f7ce0bd01955d60ffe48d9aa10f638bbfafb0c4085d8cf11fc59e7b25f975f3ba2cee4d822c20d8e53673f761e8a808468f28d265894fb1f13b65e504f28b5be7e13370ed5b79e0cc4eab837c22e75f1caab5c381e35b380d9ba64f57a3ab13228cf7e21f0b8c61555283338448f0be23d191dc94e6644e867137e3df6310498aa31f9d6d1459923a70832a71349841fd67d0bf4ca4109f34c2fc4a3e882caffbca4f0a8b804fac08b2b6c05cc7501a3b3595a37651d05251e109ae8905b8da6aa0051e90a72ed181d7112c0879ae635d010f8f208f34affeb41121b95ad12b410f7b05a04693dd9413f1e6c7f0f89e227af3e132502cc0776f2b06e8e63bc10c01b5347f2bef375f9e64c24b00ed61ae83ce08d847f2075833777cf5bf5df897e7f0ab9ae01b57c553bcdba9dda847a70e04b2dc66b6acde6eb0e14fd52acd80b64acc15c371b6b5a5c216d7459969d1dda04e5f35a125b43bd7edfc336c79b479a34122344ae2ebc8eb35851d1d3ea36a83d41eff4befaee86c61420c462e1975a9f0736e594ea6572e0052c646bb518031249bea470f4589895219d20e38b7042ef0341c88712d9ba9d039212e27710e3ab1fdba10f530a9992a1d3d42439ad6ce5e00b8a9ef0297e37ed9daaa547e866d9ae61932c0653c5e9de94395a0fa2af9885c3fa49cf26de26b8748476ef0ac3b299d91f8dfc04f524fd602068b9cc8b55a2c98803fe09b3b091cac2a603e54582de0980d62cedc5486a15f326eea59e9f751ba4a6000fcd35b58f9314ab7e79d664b3790e2256007d0ec923867bd49f8c36f4f7fb4e28db5919a79102340f2626cd7068a2b5da975d5385c97e9e5b19aa2e3bc96a00a41d679fc5fbf2b29653eac9eae266aa78a44112ffa10d76a91b705013fd7312521e0cd4aea158dbe41470e7ac2204a890b3d32f2dd222d9c85f01e7f14ca135df10d067401312be26dc8afd49055960dd3eb0173e53451b368f059bd8a1c6548b4dd1d720efc66152cb3634565072f61397ac2e2ea2335f89d24dbae3fac6c31e866d0d182859208cbe9462c6cdfd95eefb821f3b4f7433840b6c6aaec3d0192760fae16271c42c1326b2cabfdebd220e94ac40fd58794004473e9d40f698f39e0095dff4fc3906ffae80a8686694915121d8db62924735933ec3eacde1525f61647cfc1e4305ae2b02b2b149b0ff7230d939d77d53a1c24f626e198c73deac9c26bc0d625be466db4ba73e9d6c4eed481becb395a5857121910d88cba06ebbd6366edeed842b7e66f44946cb7ecb6a0d5032fa374b79543090e5cd2eb78d5f04c2214778c47f40b3dd44f5421397e4e35de093ae07be5a485aeebe41f72415ef808711e9123d8bb363d0f590879ca4db4161f2ab83c15dbbe1c26d29eb3ad878f3acd8928a675b529c1bfc6f54ef1f6bb3b80a2e0bb3c9736bb1e62b5de0c7407bff14222db695172f2b481bae26eab2ba12dec586bb71990906ce455ecee", 0x1000}, {&(0x7f00000001c0)="239eba2a051b6ede590206d0cfcb977df3a095f0bdbb688245492b225cb7f87da5d5fe98151f955d89cfa5bed67448651dd2c770cd22970a57c394daf0925f17b049a23679717d23077aa5290cc71e480c200993a99f56ab0c2d3437c4eba8dd16c46aa4103fb07f", 0x68}, {&(0x7f0000000240)="9c2b4bc534527f2640ff01de32b3e3ec6bce4355669da8b397f887a6", 0x1c}, {&(0x7f00000012c0)="5d17d67f65215a710f752ca6a5e0b80ceac144c024aedb69f90ca44ae2314d9a0a8919cba30a386c2f698d6a733c3e4e313a9fec2d82600a3f46fa5622cc96e8f3e83db9c4c22dabac5643fba64841d39009ace303c1b082d30c9da95fe68faeb74beb", 0x63}, {&(0x7f0000001340)="32d677748ed142ccaf", 0x9}, {&(0x7f0000001380)="2a228848133be8be80e3ccf4d5d2ec844d27e4c64a0ec2ef22a23f4a8c99ae", 0x1f}, {&(0x7f00000013c0)="32674f762527f889a5aeafb12804814b6f197159cd41d056d65b07760ca6504c83f77c44ef0a32ff8dc3b654af66fbdadc232786d03737bde567f817e43463ecd07b485ce49903a388603292977d4cd60935943fe9defe442bef2b3a254193429394f536b08022b02c09474ff3e38fdcd6f2de73e3cfbcefae880dada147e098ea26f77f3055e2e16118c98ed0d995c57ef0e836c1511fbd5abbbe07a0f6467d3290f810aee74ffcae07a8f63ae7da75ef5d25d5c2d48a", 0xb7}, {&(0x7f0000001480)="9f8261c9d889dbd93ab9f2a06181cff69d620d0f57e1c20dfb91fdb9b123584bcaaf21f8aae4e8d128c4f9502fc50f5125b8b9686ddf38a873cc78fe993e00f3c67485990cdd62b15073b438a54c64fe1082e8a06abdf3b30a303162be2e45c31164903479890b615c9334369342498bddc1587b527bedb0e4d4afa623c290", 0x7f}], 0x8, &(0x7f0000001580)}}, {{&(0x7f00000015c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000001640)="b300fa6ac41bdd4ca1546c26cdaa5eb5f3354554ae0b93d7fffd93a1b5bed0f8fbb6dca7b067bda77da2babb84cddb2ae375eff4873c81a95c413a13b502b3d7ad0effe0f7460013daf5398c6d46fdc695c53da394b553dad290d03cb6ccdba4cc420bb284101f50aee92e2f62eb9462092a2fdc8d06d86dba5b30794be2fc9937483dab364b492f1e4707618702882451d07c909e77f59da1039455a5e5d5383ac44dee203d582d87baa3014ea056f258549a6199b2b2127254bc0a97dcba5cc352d19f8f5cfccaf8334b94a6d2a18b94846e7ea336dd3ccf0c1e15d572c8af7c13d9923e37d407", 0xe8}], 0x1}}, {{&(0x7f0000001800)=@llc={0x1a, 0x30d, 0x2, 0x2, 0x7, 0x5}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001880)="d0d27892f028d81873e96b3362ba3a4105442bf91bd57fd263363fa45fc507d8d5a856d3efa82bcb77494839d324f556c8d97d307d72d97d4225be51121b0d0db8e01a26a20bcde6e83a9adf7a29542a9a167e7d9abf00dd7b126bce7338d49e31d816bcbf68f1f21d370ed5a0a8bbc0a0725f163776b1de77f2e60121bb01e9a82aaa0ab8", 0x85}, {&(0x7f0000001940)="437acf3263a3b57c9e1200a81f2a16d261ba174e6c78d43846bd5f5e4f13ad86cb7eb8f6dee730eb3f7d8368aaaa45db3eccce44f8876e74879c76ba3baa193d83354c2eaad9484e9c2b7902423209dfb1e376477b7a343396edf26569df8493c15a61fbaaba0231243789182734b183e34e62d78337cd64ca2c6e8ae37dda522e9c6c", 0x83}, {&(0x7f0000001a00)="00c3bd761edd9100abc0b9dda65ee66ceb6ba4c37370", 0x16}, {&(0x7f0000001a40)="1007dcbf4b05bb593c0f68eb9f5ecc6a8446c9c436eab8f8a5fdeb9c0d2b267e1a1b12250051d5fcbde30b86b6650b0bb59ae93504a39606a0cc", 0x3a}], 0x4, &(0x7f0000001ac0)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x18}}, {{&(0x7f0000001b00)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @empty}, 0x4, 0x0, 0x4, 0x3}}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001b80)="3bd1305279b02aaaa4c956944b8c166628dc6726f8bbe221cbaf0bd78e9b151cee51520d896a7aee07819a29abb3ca953ea8e468fcaad1fe60dc2fe3cdf0051da6b275cb73f864f623786de333db8944ba2e31815f06e5f26fd2d59a82480b4eb5bcce85a7501ce7122fb8deda8b67c78ba4dc38e8c47036eae0d71fe97922bf373615816d0bb7c212cabbf0c2b38463a237543d4b25011c4a283ab1e188452ff5ea8c1ab652893d9061ff173efa9829484b07e4a48838d7848c", 0xba}], 0x1, &(0x7f0000001c80)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0xfffffff7}}, @mark={{0x14, 0x1, 0x24, 0x8001}}, @timestamping={{0x14, 0x1, 0x25, 0x3ff}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0xfffffffe}}], 0x90}}, {{&(0x7f0000002f40)=@xdp={0x2c, 0x2, r7, 0x21}, 0x80, &(0x7f0000003000)=[{&(0x7f0000002fc0)="7b041042a4820d165cfc9f2f32def6aa84", 0x11}], 0x1}}, {{&(0x7f0000003040)=@llc={0x1a, 0x103, 0x7, 0x1, 0x9, 0x40, @link_local}, 0x80, &(0x7f0000003500)=[{&(0x7f00000030c0)="051babd5741cfc893ace034ef4b6173a201d870c05daf5964b2cee172f708c6f00eb03f64db85f1a8b5f41685657dbd114973fcfbc2b0fd8a16d7691bf3752ac4da964f4290d5aa41ebbca77614315faeb7ef9c43b32b762ab6599632a7e728d1c6d144885dfa862e493655c2099b0b615bc119785c44b54d5488d862ef11f7f6add2cd977d1b94a329f45674670911e8d53080af78d0575fadf6c650d8b82a9f284c63ad36061812421577099dbb403f5dbaa165092a3b971b94f86d3eb2cadaac26b6f00a8dd664d38cdbf51de98f2e31359a1090fdf3ccaaafc932bf552404566b31bc6a6fb754bab281bbeaf19700abd3b68ff4f6a7894", 0xf9}, {&(0x7f00000031c0)="9d16680c371d7d", 0x7}, {&(0x7f0000003200)="6fb7e6f9fc3e8e61a20280e0148f983950fe7039afcf778614295b669cadd4fb697772420f2875a4b2d4d6e88507c2a161aa931f13c58890400f998142b14066288436995d9ba725965791", 0x4b}, {&(0x7f0000003280)="569ae079e99bc4697b5bcf15419eec45bfce6b5a30dacbb8a527dc22c933143221fafa4568622f7ed7347c97c33ffd392d9968625f7baa15e2c817a9b8230239af3f9c3141adf4a8c8f546a10c379dbc284bafe49258eab734e6d93cdb0f", 0x5e}, {&(0x7f0000003300)="d06607ab13b3106bf685e51ffebbd857373fc358f46e33ed4ba926d23711a37b47a535af8ea8f476eba903d0ad57bd1ec2ca54c6e71e46fbbfc3bce1df7dc2f16d1b1d9939be27dd26b429578617612dddd49da625b4480a59677814efb45112146bb5c391f23a0c08a8e4d3de4975041a4d2d8f81b4b4dfba2a963672c3984d042e486d1cc69eb327c90e828a88e529410c14f12a8fb988ea516ed5aed8fb28d2a27d8aae960bd0dc1f9c733c37b97b53231a48edeab81f9295ef32c8abf220b565b6871ef2fb283296dc0dcd2a61eb801486a5a9cb86d5b306912e020fb9643c7109cfd60c6a4c357465521c182c470ae3bbec0c2456", 0xf7}, {&(0x7f0000003400)="311f06fcd9eee0ad5b4a2bbc1535a673f6a9ef57c99b9f324b9b1070d3aa1cad9ba23196419ca38c140be67b9d240dcb1304fe1188753491d7d4f4f5ee6408093756d9b84e4a2437c533334c2bd27d69b540a71a502253ee3f3ef0a958039129a904019d68f3d1964656f6ab88343606123a7f5fb4faf07bb8ed90514419a5fa8bf82c7f5284e45617d78b14dfa932fa70fce98d893f497979f39638844ecc98d3ccbef2883593baa1a064322dcff1f6898b536688469789887686ec246c72de9f7c88cccff2cb519353f8bc613e33bcf156cf767fee892cd7f89647679fda076cc493d4ed034c2aa8a5b96e531616", 0xef}], 0x6, &(0x7f0000003580)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0xaf}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffff}}, @mark={{0x14, 0x1, 0x24, 0xf9ac000}}], 0x78}}, {{&(0x7f0000003600)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0xffffffe1, @remote, 0x54ed3a02}}, 0x80, &(0x7f0000003d00)=[{&(0x7f0000003680)="90b5fb5e653cb683360637c1c81166d285c89dbde4aba9166ef396e099f908ca1d1eea8012abba44c484631120895b9a53f101154e897749a8bfd9f5a03394ef3ac52999d4dd5dd94a4c22dbfc9f252a469584c82fc2a8cb394fe99e144f381cfff5d2109f6cefdb4f79ac7ff75a6612b2b2bd15aa02f5ef5ae41f1f660a3161c655ad3d8637690a793fa5789cb24c4c1a69c1f92c1457b27ec6fdd1e940f9e01508ac9c1c69caf2631968c3831cd19af3bf35fb8e68e98af74d79fe2e10611bd33572f73e6884984eea6cdc21c10a4b5639384290ae7f0042fe51f7c2e942ccbb4168953247ab25f97afe", 0xeb}, {&(0x7f0000003780)="10c2fc27100b94d2eed70a5320", 0xd}, {&(0x7f00000037c0)="1c8b45785165fb0db8e273ea58cfff4c0ed5c19d204893daa109a04f327ecbaccc52deaa1e899ad3dcc91c6acc84c1475452f5da33202785a163331b4dffb052d4f6aac3c4ab31fb24197a3e0076982c479fd5b6634ea79ff061d75bd597108d76f91f3b84e9d038f9ffa5f19d33c24c146c4f4b21a58e09222f8369cacfd2e69aa4035c0ac1a7d4acfaf1f84c13f0fd50875872dde1738d49a48ad9f49f69176a39dd6badda9f27a050defe1882b53f58d06c29e855cf16dac7dcf1a3a70dfc96c5302c4383c7273cb648e9d6ae92e9b10280056242e934", 0xd8}, {&(0x7f00000038c0)="b572b374aa4a80d2435ea4b56f4efc880fce44c2137d95c478a3a7c9ef3901f570faecf69ee40959448eb0e69b3fb36adf4124592380c244b4cc687bbdadca532839785cc1f3b1023351af2c20e068a11cbdf8a64e7a2302544ad0458d05acd5682674defc258a68d93c7032f1c3cb215694119596ee82c13a0bccd2e56cffb9e501da7a9e18d755d114c98a5d2327670f1c9da97660fcc2bcf968947a4f68f33bd2372dcb16328b3acc3350484de7b4e67bea592d80ee950471594a1f1d54b9cbedec4685ec8a4d820cb1bed16694f0adb4f03e8e41b1cf6233dc9c48f2da9fc89c2dd1ee5c57c63f3988", 0xeb}, {&(0x7f00000039c0)="2a4189709b02730f4878ee41ee86bd16979a67093cb8c34a77572d43e97a523f6b4f902d0f65c1f764ea933c8bb90c22ccc286e0b784bbf4929e7015bf1193e29d1b5d347d09c839d8c88f3f1d18d0253601e3dd7034bb3e53f8b7ab0ad0ff55fcb5c0055b3a660d49eb3b75e25eab212367f21380e2e81b35646be97c18f1b3fe26d4d49781eebf21b278e4d04320c8ce1f41638ceab22133fa139f06d98ac7e0e911b401268873da74751aa8a32b67c3769a8ee74975c83fa6e146943c71436bd2bfbf947e811e0c0dbf5bf4b9f2ab810302e52b3d2d242bb15aafa3556f399892b94185188d24c241b0d0b351af323eef", 0xf2}, {&(0x7f0000003ac0)="7eb58860ed534c0315964797cb3dfb5f79e65baca3e7e4c891e5ee75940b5942819d1712a583b0e9c233b7088fe67bfa3a084aa3ea340eb676c4f7c944442f9727d0fbd5cf976ddcb25a5d00cada0995f7dc8c61bc86c6e4d6eb5abe8ebf04417a9f8e69040c13074555866e20d7926f59e5bdbe595bf9943fc20f41b12873790684e7df8d49df2a51aca7aa323536d693607edfad0712b36c51f2a86e20c0cb3666f819654128cb6c82d433ad6065bdaf6b7565e7c77b1ac487551b08238a11c21a3a760d", 0xc5}, {&(0x7f0000003bc0)="c9849408e034923436c398cb93f0b28b21411d19d4f8349e90a30c87e5492f8de57dbdcdd897147bc22bafe665bc268288c26ef27d9494bb243165799456795a1174d79a4d0c", 0x46}, {&(0x7f0000003c40)="deb24b1de6bbe17e64fe3ad29d75282b9019e6e6701b3510dfcca35c0ff6b270028bad1616dcfb08e08771d37cd2c17f27939725f6e6cd88dc58e877", 0x3c}, {&(0x7f0000003c80)="256981ca3703730a24a534fcc96708da84533352a0f60f89a3c8159b48fe5a07b489e8065846fa99c45ced20d62a144a32a45d14eb9c4474e77e2e5fd1df37d83bfde8d173c9d5993773796a3112edbb9288f21c4fc2c724464eee0e05a29ec9936f3fc1a8a45e419b92b9d5168b", 0x6e}], 0x9, &(0x7f0000003dc0)=[@txtime={{0x18, 0x1, 0x3d, 0x400000000}}, @mark={{0x14, 0x1, 0x24, 0x1000}}, @mark={{0x14, 0x1, 0x24, 0x2}}], 0x48}}, {{&(0x7f0000007680)=@hci={0x1f, r12, 0x4fabed983cab33d}, 0x80, &(0x7f0000007b80)=[{&(0x7f0000007700)="a951b67061a9e2e2f9ba11aec5d1a93eeddd8d71407f64c6c459c4fbb88775014173b63c884a91857e90522226909b8bd5f210e63502c0", 0x37}, {&(0x7f0000007740)="abe4b06a495475240843b178cf8b4320e4d3c75134ce78ca39eebc4259e48756b03fda50f4313f969b3efde127d52ac4088694d1c8b82111706387fea96ca34eda78fa5930ba3eea1f2bf3706313fadb838e7ea309ff638197137974407faf303d27e451b2f11c495879a13d2da41de88fcca7f2ac18bee43712f1d19149f59d0d357235d981ba29688f0d4994a9a89ddaccae0a1d6ff69d3a244a5bacbf0bc2f87434e4e0904475d0d7cf94120916d2078dcefb55fbd6f182dc", 0xba}, {&(0x7f0000007800)="a75d9412ae6493f51b3cae221e99c01243351ffd29e53c0805da2a41dd7aeeefa723e8", 0x23}, {&(0x7f0000007840)="8f573408013cf6c1beb36c4fabd1383ea7c2eea376d93624a18f66a22f50bf44925b2ff22b6ac210b10910b44f9011d5e6e2acf192430296db62c204271c45c034b8028631af1fd42388ba94bbac8a5347da", 0x52}, {&(0x7f00000078c0)="013a0c22ee24594877481188dc603b1fa70beb691ad98699fa3a7dad16ef645fa70c7db6e04e2b0284e5679e9cd509d93aab8765c37f8a616034c323a892d3817168d46e464c95401055b6f3bfd3693735f5db03fa67fc5269fe96f99c7692ac4a5eece332eda9e8b863d7800e5727bfd94eb49007b7ae02ebe57e5b4a4f55c0a3", 0x81}, {&(0x7f0000007980)="9e8790955a467cc5b0149092f6e8aae08c5128b7822a7980bbbaf18cc001b3cee61955e34686e85ba312db2779c257dfd3fef9d6d6269fcae5a1e88c9af3ab054bb6a6e32e3c2d63a183faabd2fd360c4c8cba0ca4b4d2b7b074a43ffc9c8246a86fe97dead417351d8cfda803a5ab78bd5c7c15d6e1166973a5df13a2f09f39e94c1458b76412c8491cd33bbe89849ea76db5ab6b9ed9ac13b2524c06dd0dac8ce793317daba5c6018b136da258844c41236f0fd64c369b6d159f43c7f7eee0494ad63ba03a84b855e8286ec06f4afc4370119ec7a4267fabe0e4d99abcf4846f9db6d7ca6457c6b4da61b2d73ece4ff62cc82c763607", 0xf7}, {&(0x7f0000007a80)="d9bed353c2f40fb7e8ec29cf36304c6699ad3a4586979cbc702061023929de6ef8c8a5e7b93b2a81ef36edf460520175e3591bce4a47778eb630aff49106ca9ab0164bc31e039edec1f24a0a0a7f5b2a17b8636987bd0f6288ae71fd38835e77747c872c3a5ab4aa20ccbb0848c8d2ed23c7", 0x72}, {&(0x7f0000007b00)="948ade8fe7a7d0101f3af8b73e857e939a20e145f49b29706d9e7ba61b0a64ae52a538f8e691f60cd4b7ec92ac71e32b14044a9c066aaf3134dc06ddbd0e178f17bc4037244353928772f31e576f3933e70e454b8b559680ee9ef3464f", 0x5d}], 0x8, &(0x7f0000007c00)=[@timestamping={{0x14, 0x1, 0x25, 0xc3}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x30}}], 0x8, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$P9_RVERSION(r5, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0xffff, 0x8, '9P2000.L'}, 0x15) [ 613.416204] audit: type=1400 audit(1574736518.213:12906): avc: denied { sys_admin } for pid=2097 comm="syz-executor.1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 613.440109] audit: type=1400 audit(1574736518.243:12907): avc: denied { net_raw } for pid=24645 comm="syz-executor.5" capability=13 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 613.441710] audit: type=1400 audit(1574736518.243:12908): avc: denied { create } for pid=24645 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 613.443041] audit: type=1400 audit(1574736518.243:12909): avc: denied { write } for pid=24645 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 613.534865] input: syz1 as /devices/virtual/input/input27 02:48:39 executing program 4: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)) r0 = socket(0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x408002, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfb120eb7) ioctl$PIO_FONT(r0, 0x4b61, 0x0) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat(r3, &(0x7f0000000340)='./file0\x00', 0x30000, 0x45946e798d1fc940) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, &(0x7f00000004c0)=""/241, 0x0, 0xf1}, 0x20) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r5, &(0x7f0000004b00)=[{{0x0, 0x0, &(0x7f0000001f40)=[{0x0}, {&(0x7f0000000b40)="70799d7f93aee25740609238367b30d5bd2da4a8a782f1e2bfe6e09ea5587d2488139bce0b6720aa3beec624a66fba665935593f143410e814194574d6c5caa5a0a643a77a6837f10a97664379ac508c2c604e84b914cca11d7c13c7516775c47b89811abd1b86bdc06b4c2df598cc7f7707a1c0400e52e98972dcc9", 0x7c}, {&(0x7f0000000f40)="54a0e828872fe6e9bda086485e7f3bde08422042e5a05f13bea1486085300093f4a5a4abda46a4397be6331a2788d84995d0682db2ecba4cc024be1f493430feba24e7ef0e3987eb5ab799e035467f84ea4affb56e6ec3c3ec6bedb3a146f7d5ac1dd0fbbe738f75eec6fcfb55946d08623418c6a554fa5ae4bab3e352df47136233937c1c3ddd6c5bee1826a294c32a78eca238409a18e551720236a1187feb5975a28f5bbb83c8ad97f63537144bdffef8a43b62aa89d46cfed06318678870256e07a42a6f989ca29cce7992fdbbecb9407eceea5cd8b6daac884fc609af653c90b36f4ff03477eaebeeb62ade20c9c0a65cee56e82e9168cbebc2fbddf931caaa483bc10127aa87b13e88929aaba33011d800a0771d8d90cd838a4f34cd7faa044f9713f5d3e2d7be15ec44f4196799fe8f6705af7e23a81e33f5d3dd1236ecbec240ef8ebfe4df5bd1783f8730828da1357f7e1a66bb475d76bacbeb41818e016de90130f5796cf7ffa4cc28fca35fa3db8a271c150ee10c296bee997fdf46b06372b7f1b2a7d8159baaee675a02e5b4185fb68c337a3ccf92ebb8b836f6a70342c533229f978ba5f3ebb9460df23739be87b9aa01bd1a804f40d744d0cc060b44a520a4a1dd3e95c86150a9fb914d34bc6b61d91f344aacee3c94c1040e867d5cd4d37687bf685a27216307431b31f486b22da39374da24ad1cd61b98855c1eb493245ba97333227c45cb4e5743e119423a42cf73721e1ca0e5cade1f4c0f1c7d098ce5baa5adcd1d73eee5f7498617c5bd00181f3364d7f1a0f54f5633aa8e7ec42244f023b2d5a311933e9a52f68e8c3e46caa6d9611ca5d3216caf842275c9bcaf6503245ccda6d53907ca4ac3af4452896044b41ab55884d5cdbcf048044eb5d1cc5691f5142751f3c7e214afaede155e713e72cb9634e4de1f661527cca426983d788e31d6b0c831383d2140a7b9b134f6e68b0378589532b11bba1008347dfb481ff083177ca4d4454c32011fd1e9fa1bfe8698f1791a4097bc5ec4e0b1d8a93f457a2263d391d158eb", 0x2ef}], 0x3}}], 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0x1da9, 0x4) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x80010, r6, 0xffffe000) ioctl$ASHMEM_SET_NAME(r6, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r2) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000180)=""/90, &(0x7f0000000080)=0x5a) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$RTC_PLL_GET(r3, 0x80207011, &(0x7f0000000000)) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="4c8b6dae815451de97b6ac9b16c34615"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sigaltstack(&(0x7f0000ffd000/0x2000)=nil, 0x0) r4 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@local, 0x0, 0x0, 0x2}, 0x20) ptrace$setopts(0x4206, r4, 0x2, 0x0) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x40010, r5, 0x0) ioctl$ASHMEM_SET_NAME(r5, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r7 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r9 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r9, 0x2007fff) sendfile(r7, r9, 0x0, 0x8000fffffffe) 02:48:40 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\b\x80\x00\x00\x00\x00*', 0x8002}) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff}) ioctl$sock_ifreq(r3, 0x8922, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_map={0x1ff}}) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000040)={'eql\x00\x00\x00\xa9[\x00', @ifru_settings={0x85, 0x0, @cisco=&(0x7f00000000c0)={0xff, 0x478}}}) getuid() 02:48:40 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) inotify_init() close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0xfe22, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000000000000000000100000000000000000"], 0x14}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x80000000, 0x0) 02:48:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r2}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1025a73700200008000000000200000000000000", @ANYRES32=r2, @ANYBLOB="080002000000000008000100ac72a2f19eb16803090ef3f1d9f61414bb"], 0x28}}, 0x0) [ 615.873430] …: renamed from eql [ 616.095737] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pig=24750 comm=syz-executor.2 02:48:41 executing program 1: pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x200000100000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @random="962c85e043d8"}, 0x14) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r8 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x4, 0x1, 0x7}, 0x20) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r9, r9, &(0x7f00000002c0)=0x202, 0xdd) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r10}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r10}) bind$packet(r7, &(0x7f00000003c0)={0x11, 0x4, r10, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14) lseek(r3, 0x0, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f00000001c0)={@local, 0x3, 0x2, 0xff, 0x5, 0x0, 0xa2}, 0x20) sendfile(r3, r7, 0x0, 0xfffffffffffffffc) sendfile(r3, r7, 0x0, 0x8000fffffffe) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8005) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 02:48:41 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f00cff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab35f4ad614fd33cebbc158bb2b03b5b2461179f5f90bba00", 0x54}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) 02:48:41 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$UHID_INPUT(r1, &(0x7f0000000440)={0x8, "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", 0x1000}, 0x1006) getitimer(0x3, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe000000008500000006000000b7000000000008009500f10100000000487591731cba12c07d57d9527a1e89a4530f92304f242b416ae9eeefc0e9c60ebab1c176bf9fb4dde984510c82dc2b9381b72b100d0682fd0a0c4906b29e22fe2d1dee18f638ac047b5e02"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x687}, 0x48) 02:48:41 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r7 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r9 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r9, 0x2007fff) sendfile(r7, r9, 0x0, 0x8000fffffffe) 02:48:41 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x200000100000011, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x148, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r7, @ANYBLOB="00000000000000000e0012000000010073737400000002002c0208001900000000000200fe8000000000000000000000000000bb00000900290000000000020000000000020000000000000000003b7a8bd9d9c643a80000"], 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @dev}]}, 0x28}}, 0x0) bind$packet(r3, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @random="962c85e043d8"}, 0xc) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001e00)=[{{&(0x7f0000000100)=@ll={0x11, 0x4, r7, 0x1, 0x7, 0x6, @broadcast}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000240)="8091c603a9133c3a9fc11b1e9b5ab8829878861615ebf8f74834d37d14c57604f5d9bcfd9cab9f81cf506b6a7fafe5b16fcea8f659baa612a7aff9e842e89d21a26ec683ce4abdca309f9698b7afd81d9a71d642b193caa09771880a974c393898db935e1b2ed35fa2299e8b287f3f18efd96d366c553a5acf8fc13c9570476236250f43cf2c2c3ae8ea82648606c77a788104dabadbff1ef152451825d399cb8fa194cae31d2405e8cbd0bca008465d0b19f6eb43f6eb98643bb4d6c18528c30628f889b6d2", 0xc6}, {&(0x7f0000000340)="6c89a256ad007c68757c00b14a4385dcc852a129b99f3b10e6de00e13f5af930a710fd8bcef256b65332e9787be7b128bc4227d462eddd20862c7a148a6354a85e485f06d1f8129f3ad2cee48f28f8a72ab432a3fec8e76a16c20e0cad3d6da841d73f4876e1f8e6c9dc087a1920852fd4e24b2911880fae3d4c3ab76dd4f576401117e2deadfb1dc3cb8c3088604a7c507e6a0f63023dd517585d84754b057ef5202c", 0xa3}, {&(0x7f0000000400)="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", 0x1000}], 0x3, &(0x7f0000000180)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x63c}}, @mark={{0x14, 0x1, 0x24, 0x3d207adc}}, @mark={{0x14, 0x1, 0x24, 0x5}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000080)="5cbe5844dc77d9bd57a38b034b8375b765b18f4bcf887c89f299", 0x1a}, {&(0x7f0000001400)="fb53a5d54198b28366e1204e54802202190e4f47420f4e0f982bf9ac16a9900d7d5c0f8bd22c965c5d633c164a444a1ff7e5638eb0", 0x35}, {&(0x7f0000001440)="67bad0722be78128a70e8a8b55babdad82fa5ef1c7bd544e8e5b7b3e6b5adc71950881bded791441707eb357c10c857013694ce86fa659c7bb74b54a30638a70752869135d955f987e56b0f081b317e3f033e25a78f41e36e788d2e14e1e514423aca15b9acd97ce05", 0x69}, {&(0x7f00000014c0)="0897e1f6faab115cc3c07b30cd928175cf305df990d830aef8bc1ffc999a00a73ed1bbf6681212d676591b45cd2ad3d5582d8bb66b65c7514ea66077c74324b8defeab91225f96f67a3fddee4a955f7f0f0f35f2631e3f923763cf9321197d212050ae7b4f9e89eb40e84bf43886f28750ba6474fa85e925c1ec7048b9e89eafc68745fb6bd373193e161bb208163f3eb946528ed00058407f0201ab739421ea5d4b0790ab84645ffec6cf5751435726928d804e74f57b45cc99d70406ab14edad8171151edd764e11d502b52260faf2ff0f03208713951eb5621ee1adbea68e7e71a8d6bbc520f8", 0xe8}, {&(0x7f00000015c0)="347887c14b560b4f533d8c4b0c0d4ba0811e0d6972b0e67d802d9879e534af328716360b9dbe8b1bcf65e01d443fe984ab5b3e4a13d05df8f1eef68a7110139ede561c384312ef658d23a99d58604eb0d0202b105db3e655aeaf36d78855ab7877d6b03054731631233e7f56a54ce0209cca121119d0166a54c3251011035cbbc7eef95f16e9420258883cd4d305b65fcf3aa447261be8", 0x97}], 0x5, &(0x7f0000001700)=[@txtime={{0x18, 0x1, 0x3d, 0x7fff}}, @timestamping={{0x14, 0x1, 0x25, 0x80}}], 0x30}}, {{&(0x7f0000001740)=@ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000017c0)="678d57fccc834e84212bf9d279a91a900c3477fd15aafccbaaf61898be4511e7309443cfc6ef9cf01256f257fdfc91094018898cf8a2e3801132eccd1e956c6083c329e063ff8216c6104d56be74da0f918c384ce08ccb3e430312170514b8d24d9b7d13c9629a2fdc994bd5cd8c581289af56665f48f1a305c98ecca944fb2e39b1c88cea98b0401f11897b765acd6d195809e8066fac1c34060dbaf629d355c10604154d7e859758f20d5f7b052a785b50917156ec797d2cb49938ec540d2bce4fdc1a65c810ee2e4c", 0xca}, {&(0x7f00000018c0)="2e10fa2df3d309cd22595562efa09de8a5386b6b9b134b2c21fb2cfa0d7aa053a69f679dc0b3982566da8744561a3fd48bc2eb0d1f50e0de60565b16cba2830dcdef86e9a71f8f5f9b16", 0x4a}, {&(0x7f0000001940)="4d1a2228246a2f961fb7e6609e34519d7e695323b90b6c19ba04bb363755d9b005b9de42f8fcddb331c7a21354eb975071a61371233c60dc04a9e265abf5abe8faaba1c6048694f5ec3712afe41d819b29a4a586632cc7c9e14aaca066a0daf187f9563ea277effffe683c61fd140400bc8ddcad648342cfd07eef097a5dffc69f07ec1e3089323a51148b9ea425a4f65264c5467c10e10c121160eeffa3", 0x9e}], 0x3, &(0x7f0000001a40)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0xfffbfffffffffff8}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x629d79af}}, @mark={{0x14, 0x1, 0x24, 0x5}}], 0x4d}}, {{&(0x7f0000001ac0)=@nfc_llcp={0x27, 0x0, 0x2, 0x5, 0x2, 0xa9, "b03775ab8e5505ae006b64c49dc0fffc206e28e572997721b3abf9b823eb1b630568feb5365d2580ada60369256d4630d8d999c39a524f5bb16db698c0677a", 0x1}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001b40)="b42fb494c00d0a4e08a3373b8bcab8d8d02d30e9cc21a5ba7455bc5711bb0bf301e10f7a8e149a34e8e9b66e93c10b98a83a499178f6cd4885f5e748e28f798bf60a1fe10f46f1ceda23480de7466caf347d", 0x52}, {&(0x7f0000001bc0)="6e4c1c5e7cc72ec2166b8631a057dde728b60e58787d18caac5e1fdb74fb1edc3df097334a9e0c0e08673b950e122c79594205fc9cbf365d24d4787eb4b429947d", 0x41}, {&(0x7f0000001c40)="b20cb03857faa06b53c98935b5805429dc60a3f462191d41f21f744a0e656ae632b121b19f2fe69ef6bc1a0a65d0ad97e262307d50487e2966d1ed2b6cf6092fa0aa724ea67f0286464570c6f4099b9edc9590ec49b94f964669722ae553391740f1b7f871214ebd2741017dc0d2795a71ad93ff9fa72431158510aa8caf8d5bd593bd2432e947376c44a0886a6ebfdd9c792686a7dbc3da627f44cc2b9304870ba2c1dbad7c0f54de729e6b29fc8727c8ede42696c1402e0a5e0a795fb897e24c47856ec44a1692992867cb2969f8be24804dc3b8", 0xd5}], 0x3, &(0x7f0000001d80)=[@txtime={{0x18, 0x1, 0x3d, 0x1ff}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}], 0x48}}], 0x4, 0x4804a) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001300ad", 0x7}], 0x1) close(r2) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 02:48:41 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000000300), 0x121, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='/dev/sr0\x00', r1}, 0x10) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x8000, 0x6, 0x2000}, 0xfffffd96) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x57e, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/enforce\x00', 0x425040, 0x0) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000340)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000140), &(0x7f00000002c0)=0x14) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000001c0)={0xffffffff, 0x64, 0x6, 0x40, 0x4, [{0x7fffffff, 0x7, 0x5, 0x0, 0x0, 0x2104}, {0x1, 0x4, 0x1, 0x0, 0x0, 0x100}, {0xfff, 0x6, 0x6b, 0x0, 0x0, 0x1908}, {0x8001, 0x4, 0x2, 0x0, 0x0, 0x3000}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x29}, 0x2}, 0x1c) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = fcntl$dupfd(0xffffffffffffffff, 0x0, r8) accept$inet6(r9, 0x0, &(0x7f0000000040)) connect$inet6(r2, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @dev}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) [ 617.005008] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 617.018608] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:41 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/user\x00', 0x2, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x1) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) [ 617.312325] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36743 sclass=netlink_tcpdiag_socket pig=24765 comm=syz-executor.5 02:48:42 executing program 3: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000100)=ANY=[@ANYBLOB="1801000600000f0004000000000000008cb6e9b81e8eae777dbc4220fe7a00b6315985cb"], 0x18) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r2) r3 = syz_open_dev$binderN(&(0x7f0000001640)='/dev/binder#\x00', 0x0, 0x800) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x3c) ptrace$cont(0x18, r4, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r4, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001680)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f0000001780)=0xe8) r6 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x2) keyctl$chown(0x4, r6, 0x0, r7) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r9, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r9, 0x0) ioctl$ASHMEM_SET_NAME(r9, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000001980)=0xe8) fstat(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r20 = dup(r19) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r20, 0x8903, &(0x7f0000001a40)=0x0) r22 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0) fchdir(r22) r23 = getuid() getresgid(&(0x7f0000003180), &(0x7f00000031c0)=0x0, &(0x7f0000003200)) fchown(r22, r23, r24) r25 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x2) keyctl$chown(0x4, r25, 0x0, r26) r27 = gettid() ptrace$setopts(0x4206, r27, 0x0, 0x0) tkill(r27, 0x3c) ptrace$cont(0x18, r27, 0x0, 0x0) ptrace$setregs(0xd, r27, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r27, 0x0, 0x0) r28 = geteuid() r29 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x2) keyctl$chown(0x4, r29, 0x0, r30) r31 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001a80)='./cgroup/syz1\x00', 0x200002, 0x0) r32 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r32, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r32, 0x0) ioctl$ASHMEM_SET_NAME(r32, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff}) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) setxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x3) accept4(r0, 0x0, 0x0, 0x80800) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.events\x00', 0x0, 0x0) r8 = socket$inet(0x2, 0x800, 0x2) accept(r8, &(0x7f0000000400)=@hci, 0x0) r9 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) ftruncate(r9, 0x2007fff) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r11, &(0x7f00000001c0), 0xfffffef3) read(r10, &(0x7f0000000b80)=""/270, 0xb37af43) sendfile(r0, r9, &(0x7f0000d83ff8), 0x8000fffffffe) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000480)=ANY=[@ANYBLOB="00000400000000009941639cee5783e3620d0b85753916b19205b25d11eaf1714fe4bd61dbcee6334a25076ae20722371de3397c5a1e136744539052ff4d117457f7a2a74a8ead02fb91c51f88d2e7b2bfde992c56c5a532b1d6b73beb26237683a6d1dea24c4648df6ee1dac2a4b6906b65f84aa63e952f43b7299da92caf50870ed42e15167e718fdaf97e0faa508684e1bfcc3b6626b6d1d7e98c1d87044f5f3f89e8fe0b709e9b2207838508ac3da0f78cba9caebe3f6799d7bc94e3da643721ba"], 0x1) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 617.869489] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=24765 comm=syz-executor.5 [ 617.964940] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=24765 comm=syz-executor.5 [ 618.038891] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=24765 comm=syz-executor.5 [ 618.114204] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=24765 comm=syz-executor.5 02:48:42 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) 02:48:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x17, 0x14, 0x121, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @loopback}, @IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @loopback}}]}, 0x40}}, 0x0) 02:48:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VT_WAITACTIVE(r2, 0x5607) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x14}, 0x20) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x2e) wait4(0x0, 0x0, 0x0, 0x0) [ 618.324186] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 618.355535] audit_printk_skb: 2550 callbacks suppressed 02:48:43 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800003, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000000)=0x4, 0x80, 0x2, 0x0, &(0x7f0000000040)=0x2, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x200000a, 0x4032, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") exit(0x0) [ 618.355553] audit: type=1400 audit(1574736523.153:13760): avc: denied { dac_override } for pid=24779 comm="syz-executor.4" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 618.368078] audit: type=1400 audit(1574736523.173:13761): avc: denied { sys_admin } for pid=2105 comm="syz-executor.3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 618.396615] audit: type=1400 audit(1574736523.193:13762): avc: denied { sys_admin } for pid=2097 comm="syz-executor.1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 618.407426] audit: type=1400 audit(1574736523.203:13763): avc: denied { net_admin } for pid=2105 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 618.419924] audit: type=1400 audit(1574736523.223:13764): avc: denied { sys_admin } for pid=2097 comm="syz-executor.1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 618.422181] audit: type=1400 audit(1574736523.223:13765): avc: denied { net_admin } for pid=24803 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 618.425406] audit: type=1400 audit(1574736523.223:13766): avc: denied { sys_admin } for pid=2097 comm="syz-executor.1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 618.433951] audit: type=1400 audit(1574736523.233:13767): avc: denied { net_admin } for pid=2100 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 618.435817] audit: type=1400 audit(1574736523.233:13768): avc: denied { net_admin } for pid=2100 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 618.450243] audit: type=1400 audit(1574736523.253:13770): avc: denied { net_admin } for pid=2105 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 02:48:44 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x10010000000036) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0xe, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r5) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r7 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r7, 0x12081ff) fcntl$setstatus(r6, 0x4, 0x6100) write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0xf642e7e) r8 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r9 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r9, 0x0, 0x0, 0x4003fe) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x40}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup2(r11, r10) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) write$UHID_INPUT(r8, &(0x7f0000000340)={0x8, "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", 0x1000}, 0x1006) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r14 = dup(r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) ioctl$TCSETSF(r14, 0x5404, &(0x7f0000000080)={0x1fc6, 0xfff, 0x5, 0x7ff, 0x2, 0xbf, 0x4, 0x1f, 0x7, 0x2, 0x1ff, 0x80}) [ 619.181318] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.5'. [ 619.212742] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 02:48:44 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) [ 619.386204] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 02:48:44 executing program 5: r0 = eventfd2(0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) r2 = fcntl$getown(r0, 0x9) getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000480)='\x1e6\xd9') readv(r3, &(0x7f0000002340), 0x100000000000003a) readv(r3, &(0x7f0000000580), 0x25b) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000004c0)='\x00\x00\x00\x00\x00\x00\x01\x01\x00\x00\x00\x80\x00', 0x0, 0x0) r5 = socket$inet(0x2, 0x80000, 0x6) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x400, 0x0, @mcast2}, 0x34a, 0x0}}], 0x1, 0x4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @ipv4={[], [], @multicast1}, 0x9}, 0x1c, 0x0, 0x0, 0x0, 0xffffffffffffff76}}], 0x1, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r11 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r11, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r11, 0x0) ioctl$ASHMEM_SET_NAME(r11, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r17, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100736974000c00020008", @ANYRES32=r19], 0x4}}, 0x0) r20 = socket$netlink(0x10, 0x3, 0x0) r21 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4001, r22}]]}}}]}, 0x38}}, 0x0) sendmmsg$inet6(r8, &(0x7f0000000940)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x9, @ipv4={[], [], @multicast2}, 0xffff}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000200)="1e37fc1b4fb98504dae847fd01b9e6ce1ca55e7aa1c20ab34f8077aad946b5918c9c3271ddcfa4fb44c6b65e", 0x2c}, {&(0x7f0000000800)="3a5efc46ed8fa81f8b04e2201e9f137419c71ad2ac8ce636c3e9b03321d0242492aeb033b22536b86fb80a418c3250a65f8d727045dba91d61799326259476da1ff956697a332dffdefd95baacebcded59530f15939acba036abde7c0afa344104abc37839cb6751b16fe271c224b7975b4925faecdc64721a7e6e855ea7d69da177714a4140f28e5b3fcc9f91ddff2901361dbb551d0c8b07ef32a795b6201e3c3a21984ea403e92254f0153a48fa9d4b7287a4cc4f5d89589e6e87e4d7256561a6", 0xc2}, {&(0x7f0000000380)="de07fb6cf21d0ad6918414044cf135e8a8e0b02b95c07fc467f196d3e1c8524161a383fecd5d1f33210ca08e4f501300955a94c4cac4fe34be", 0x39}], 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB="200000000000000029000000360000000c0000000000000041e617e5ba2b000100000000000048010000000000002900000036000000872500000000000005020020c910fec8000000000000004a458bd746359ace0000000000000105020006c910fe800000000000000000000000000010c20400000003040108000100010000000000000068000000000000002900000039000000350a004300000000fe8000000000000000000000000d00aafe80000000000000000100000000000afe88000000000000000000000000000100000000000000000000000000000000fe0b0e000000000000000000000000bb28000000000000002900000037000000260100000000000008000000002000010000000000000000140000000000000029000000080000000100"], 0x128}}, {{&(0x7f0000000680)={0xa, 0x4e21, 0x7, @loopback, 0x8001}, 0xffffffffffffff12, &(0x7f00000006c0)=[{&(0x7f0000000b40)="7371e18b0c5747e93c396acfa7a8b2de5784961abd79016afa3e1563a4a48247cb391aee7b5a43046181182a8193b9a9222faf1c9cd00a0db606fac62966cfe7cbc9cb798c374bf538cd8e5109c52da2b7fb50136808a55fbba58297c9bc83de72b5c1011e43e539b308dadc936772132a4c3a8671a78191d2a6279243b3073164b1095a0d772e10dc203444f74863130d0fe5c951e041c085f7c375a062e7450a15ae7b95f5695c46ca8442c6a150e25e712ac10e1508", 0xb7}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="14000000000000002900000008000000070000000000000014000000000000002900000034000000", @ANYRES32=r19, @ANYBLOB="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", @ANYRES32=r22, @ANYBLOB="0000000038000000000000002900000037000000a103000000000000c20400000005000100c9100000000000000000000000000000000100000000005000000000000000290000003700000004060000000000000100c20400fb00000103000000c910fe88000000000000000000000000000107100000000702400200030000000000000001020000000000"], 0x1dd}}], 0x2, 0x40000) syncfs(0xffffffffffffffff) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000000c0)=0x80000000021, 0x4) setsockopt$sock_int(r5, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x4c000) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x1800000000009) r23 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r23) r24 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r25 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r25, &(0x7f0000000440)=[{&(0x7f00000003c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r24, 0x4c00, r25) r26 = socket$inet6(0xa, 0x2, 0x0) r27 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') sendfile(r26, r27, &(0x7f0000000040)=0x100000, 0x8001) r28 = socket$inet6(0xa, 0x2, 0x0) r29 = syz_open_procfs(r2, &(0x7f0000000900)='net/dev\x00') sendfile(r28, r29, &(0x7f0000000040)=0x100000, 0x8001) r30 = socket$inet6(0xa, 0x2, 0x0) r31 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') sendfile(r30, r31, &(0x7f0000000040)=0x100000, 0x8001) write$binfmt_elf32(r4, &(0x7f0000000c40)=ANY=[@ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRES16=r27, @ANYRESOCT=r28, @ANYRESHEX=r30]], 0xffffffffffffff47) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x411, r23, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r23, 0x4, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r33, &(0x7f00000001c0), 0x526987c9) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keyclord\x00', 0x4767e0, 0x0) eventfd(0x8) fstat(r18, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x2002, {0x0, 0x1, 0x6}, 0x0, 0x0, r34, 0x2000000000442, 0xfffd, 0x100000000, 0x9, 0x24, 0x6, 0x7fff, 0x3, 0x3, 0x915, 0xac46, 0x0, 0x20000000000003}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r23, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r32, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r24, r25, 0x0, 0x180003) 02:48:44 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a74, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r5}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0x4, 0xfd}]}, 0x28}}, 0x0) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$sock_inet6_tcp_SIOCATMARK(r8, 0x8905, &(0x7f00000000c0)) ioctl$ASHMEM_SET_NAME(r6, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) 02:48:45 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x476, 0x101002) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='pids.events\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) futimesat(r3, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={{r4, r5/1000+30000}, {r6, r7/1000+10000}}) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=[@timestamping={{0x14}}], 0x18}}], 0x1, 0x0) write$evdev(r0, &(0x7f0000000080)=[{{0x0, 0x7530}}], 0x2a29) 02:48:45 executing program 4: pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0xffffffffffffff97) syz_open_procfs(0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x101000, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGNAME(r4, 0x80404506, &(0x7f0000001800)=""/151) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8020003) sendto(r4, 0x0, 0x0, 0x4000000, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x80000, 0x0) pipe(0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x4008080, 0x0, 0x0) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) splice(0xffffffffffffffff, 0x0, r7, 0x0, 0x8000000ffffffff, 0xd) 02:48:45 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x2002004c, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r2, 0x0, 0x4) timerfd_gettime(r2, &(0x7f00000000c0)) r3 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) r4 = open(&(0x7f0000000340)='./bus\x00', 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r3, 0x80006) r5 = syz_open_procfs(0x0, &(0x7f00000004c0)='\x00\xaeC\xae\xc4\x05\xa9\xbd~\xfb\x96\xf7,k\x1a+@\xe54\x01\x01\x01\x00w\xa7\x04~\\\xd4Y\x04\xaf^\xc6\xf2\x98\"\xa0\xa1\x04\xaf\x81\x00ov0x0}) r2 = fcntl$getown(r0, 0x9) getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000480)='\x1e6\xd9') readv(r3, &(0x7f0000002340), 0x100000000000003a) readv(r3, &(0x7f0000000580), 0x25b) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000004c0)='\x00\x00\x00\x00\x00\x00\x01\x01\x00\x00\x00\x80\x00', 0x0, 0x0) r5 = socket$inet(0x2, 0x80000, 0x6) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x400, 0x0, @mcast2}, 0x34a, 0x0}}], 0x1, 0x4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @ipv4={[], [], @multicast1}, 0x9}, 0x1c, 0x0, 0x0, 0x0, 0xffffffffffffff76}}], 0x1, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r11 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r11, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r11, 0x0) ioctl$ASHMEM_SET_NAME(r11, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r17, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100736974000c00020008", @ANYRES32=r19], 0x4}}, 0x0) r20 = socket$netlink(0x10, 0x3, 0x0) r21 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4001, r22}]]}}}]}, 0x38}}, 0x0) sendmmsg$inet6(r8, &(0x7f0000000940)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x9, @ipv4={[], [], @multicast2}, 0xffff}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000200)="1e37fc1b4fb98504dae847fd01b9e6ce1ca55e7aa1c20ab34f8077aad946b5918c9c3271ddcfa4fb44c6b65e", 0x2c}, {&(0x7f0000000800)="3a5efc46ed8fa81f8b04e2201e9f137419c71ad2ac8ce636c3e9b03321d0242492aeb033b22536b86fb80a418c3250a65f8d727045dba91d61799326259476da1ff956697a332dffdefd95baacebcded59530f15939acba036abde7c0afa344104abc37839cb6751b16fe271c224b7975b4925faecdc64721a7e6e855ea7d69da177714a4140f28e5b3fcc9f91ddff2901361dbb551d0c8b07ef32a795b6201e3c3a21984ea403e92254f0153a48fa9d4b7287a4cc4f5d89589e6e87e4d7256561a6", 0xc2}, {&(0x7f0000000380)="de07fb6cf21d0ad6918414044cf135e8a8e0b02b95c07fc467f196d3e1c8524161a383fecd5d1f33210ca08e4f501300955a94c4cac4fe34be", 0x39}], 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x128}}, {{&(0x7f0000000680)={0xa, 0x4e21, 0x7, @loopback, 0x8001}, 0xffffffffffffff12, &(0x7f00000006c0)=[{&(0x7f0000000b40)="7371e18b0c5747e93c396acfa7a8b2de5784961abd79016afa3e1563a4a48247cb391aee7b5a43046181182a8193b9a9222faf1c9cd00a0db606fac62966cfe7cbc9cb798c374bf538cd8e5109c52da2b7fb50136808a55fbba58297c9bc83de72b5c1011e43e539b308dadc936772132a4c3a8671a78191d2a6279243b3073164b1095a0d772e10dc203444f74863130d0fe5c951e041c085f7c375a062e7450a15ae7b95f5695c46ca8442c6a150e25e712ac10e1508", 0xb7}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="14000000000000002900000008000000070000000000000014000000000000002900000034000000", @ANYRES32=r19, @ANYBLOB="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", @ANYRES32=r22, @ANYBLOB="0000000038000000000000002900000037000000a103000000000000c20400000005000100c9100000000000000000000000000000000100000000005000000000000000290000003700000004060000000000000100c20400fb00000103000000c910fe88000000000000000000000000000107100000000702400200030000000000000001020000000000"], 0x1dd}}], 0x2, 0x40000) syncfs(0xffffffffffffffff) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000000c0)=0x80000000021, 0x4) setsockopt$sock_int(r5, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x4c000) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x1800000000009) r23 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r23) r24 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r25 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r25, &(0x7f0000000440)=[{&(0x7f00000003c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r24, 0x4c00, r25) r26 = socket$inet6(0xa, 0x2, 0x0) r27 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') sendfile(r26, r27, &(0x7f0000000040)=0x100000, 0x8001) r28 = socket$inet6(0xa, 0x2, 0x0) r29 = syz_open_procfs(r2, &(0x7f0000000900)='net/dev\x00') sendfile(r28, r29, &(0x7f0000000040)=0x100000, 0x8001) r30 = socket$inet6(0xa, 0x2, 0x0) r31 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') sendfile(r30, r31, &(0x7f0000000040)=0x100000, 0x8001) write$binfmt_elf32(r4, &(0x7f0000000c40)=ANY=[@ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRES16=r27, @ANYRESOCT=r28, @ANYRESHEX=r30]], 0xffffffffffffff47) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x411, r23, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r23, 0x4, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r33, &(0x7f00000001c0), 0x526987c9) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keyclord\x00', 0x4767e0, 0x0) eventfd(0x8) fstat(r18, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x2002, {0x0, 0x1, 0x6}, 0x0, 0x0, r34, 0x2000000000442, 0xfffd, 0x100000000, 0x9, 0x24, 0x6, 0x7fff, 0x3, 0x3, 0x915, 0xac46, 0x0, 0x20000000000003}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r23, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r32, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r24, r25, 0x0, 0x180003) 02:48:46 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*', 0x4fff}) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0xffffff01}) r2 = socket$inet(0x2, 0x80a, 0x0) r3 = socket$inet(0x2, 0x80a, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'eql\x00'}) dup3(0xffffffffffffffff, r1, 0x0) 02:48:46 executing program 4: pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0xffffffffffffff97) syz_open_procfs(0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x101000, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGNAME(r4, 0x80404506, &(0x7f0000001800)=""/151) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8020003) sendto(r4, 0x0, 0x0, 0x4000000, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x80000, 0x0) pipe(0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x4008080, 0x0, 0x0) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) splice(0xffffffffffffffff, 0x0, r7, 0x0, 0x8000000ffffffff, 0xd) 02:48:46 executing program 2: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0xc00) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfb120eb7) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = eventfd2(0x7, 0x801) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000080)) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0xb91280) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000003c0)='security.ima\x00', &(0x7f0000000440)=@sha1={0x1, "f6c22f460365f9360c48948b1b0b911ab5185102"}, 0x15, 0x0) open(&(0x7f0000000380)='./bus\x00', 0x6015fe683ab85867, 0x0) r3 = socket$inet(0x2, 0x80000, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TUNGETFEATURES(r5, 0x800454cf, &(0x7f0000000300)) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000140)='security.evm\x00', &(0x7f0000000340)=@md5={0x1, "86ee0dffff0000000000005db000"}, 0x11, 0x1) ioctl$FIBMAP(r1, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r3, 0x0, 0xffffff32, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x8d) sendmmsg(r3, &(0x7f0000004b00)=[{{0x0, 0x0, &(0x7f0000000100)}}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000b40)}, {&(0x7f0000000f40)="54a0e828872fe6e9bda086485e7f3bde08422042e5a05f13bea1486085300093f4a5a4abda46a4397be6331a2788d84995d0682db2ecba4cc024be1f493430feba24e7ef0e3987eb5ab799e035467f84ea4affb56e6ec3c3ec6bedb3a146f7d5ac1dd0fbbe738f75eec6fcfb55946d08623418c6a554fa5ae4bab3e352df47136233937c1c3ddd6c5bee1826a294c32a78eca238409a18e551720236a1187feb5975a28f5bbb83c8ad97f63537144bdffef8a43b62aa89d46cfed06318678870256e07a42a6f989ca29cce7992fdbbecb9407eceea5cd8b6daac884fc609af653c90b36f4ff03477eaebeeb62ade20c9c0a65cee56e82e9168cbebc2fbddf931caaa483bc10127aa87b13e88929aaba33011d800a0771d8d90cd838a4f34cd7faa044f9713f5d3e2d7be15ec44f4196799fe8f6705af7e23a81e33f5d3dd1236ecbec240ef8ebfe4df5bd1783f8730828da1357f7e1a66bb475d76bacbeb41818e016de90130f5796cf7ffa4cc28fca35fa3db8a271c150ee10c296bee997fdf46b06372b7f1b2a7d8159baaee675a02e5b4185fb68c337a3ccf92ebb8b836f6a70342c533229f978ba5f3ebb9460df23739be87b9aa01bd1a804f40d744d0cc060b44a520a4a1dd3e95c86150a9fb914d34bc6b61d91f344aacee3c94c1040e867d5cd4d37687bf685a27216307431b31f486b22da39374da24ad1cd61b98855c1eb493245ba97333227c45cb4e5743e119423a42cf73721e1ca0e5cade1f4c0f1c7d098ce5baa5adcd1d73eee5f7498617c5bd00181f3364d7f1a0f54f5633aa8e7ec42244f023b2d5a311933e9a52f68e8c3e46caa6d9611ca5d3216caf842275c9bcaf6503245ccda6d53907ca4ac3af4452896044b41ab55884d5cdbcf048044eb5d1cc5691f5142751f3c7e214afaede155e713e72cb9634e4de1f661527cca426983d788e31d6b0c831383d2140a7b9b134f6e68b0378589532b11bba1008347dfb481ff083177ca4d4454c32011fd1e9fa1bfe8698f1791a4097bc5ec4e0b1d8a93f457a2263d391d158eb7dfa29b59c6fec5cd9316a91c839e2f39d91d384e16eb06c400bd05ae53022fa967e0059163eae2f1572048694ac53be7db2e9be6ca9da6c160fed9533e286cad88c8eea6865659b9451351de37d9d4a33da3a8714ae348f091e528e1b7f151916d9077dd5ac51d659", 0x358}], 0x2}}], 0x2, 0x80) sendto$inet(r3, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) faccessat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x140, 0x1000) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) futimesat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', &(0x7f00000004c0)={{0x0, 0x7530}, {0x0, 0x2710}}) read(0xffffffffffffffff, 0x0, 0x0) 02:48:46 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) 02:48:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200001}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r2, 0x300, 0x70bd25, 0x25dfdbfc, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x4, @link='broadcast-link\x00'}}}, ["", ""]}, 0x68}}, 0x10) sendmmsg$inet(r1, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e31, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@cipso={0x86, 0xa, 0x8, [{0x0, 0x2}, {0x0, 0x2}]}]}}}], 0x20}}], 0x1, 0x0) 02:48:46 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) [ 622.394215] device eql entered promiscuous mode [ 622.491610] device eql left promiscuous mode 02:48:47 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x1100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x310) r5 = accept(r2, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80) fcntl$F_GET_RW_HINT(r5, 0x40b, &(0x7f0000000100)) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000fca000)={0x1100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff00000000]}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) close(r6) 02:48:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xcc93a2cc92445b75) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) fchdir(r0) creat(&(0x7f00000004c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000340)={0x3da}, 0xfffffffffffffd27) write$cgroup_int(r1, &(0x7f0000000180)=0x3, 0xffffffffffffff31) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000400)) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000380)=0x0) fcntl$lock(r0, 0x6, &(0x7f00000003c0)={0x0, 0x3, 0x80000000, 0x2, r5}) r6 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x44700) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) ioctl$EVIOCGPROP(r6, 0x80404509, &(0x7f0000000140)) open(&(0x7f0000000040)='./file1\x00', 0x12000, 0x0) lseek(r0, 0x1, 0x3) mkdir(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r7 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0) write$P9_RMKNOD(r1, &(0x7f0000000440)={0xfffffffffffffca6, 0x13, 0x2, {0x1, 0x2, 0x7}}, 0x14) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000640)='/selinux/commit_pending_bools\x00', 0x1, 0x0) mknodat(r8, &(0x7f0000000140)='./file0\x00', 0x8080, 0x10) renameat2(r7, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r7, &(0x7f0000000280)='./file0\x00', 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r14 = dup(r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) renameat2(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', r12, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1) r15 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x7, 0x2009, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r16, &(0x7f0000000000), &(0x7f0000000100)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r16}, 0x10) r17 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x7, 0x2009, 0x20000000000001, 0x0, 0x0}, 0x2c) r18 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x7, 0x2009, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r18, &(0x7f0000000000), &(0x7f0000000100)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r18}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0x1, &(0x7f0000000a40)="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", &(0x7f0000000940)="d15dd9d903cffe71185409c9d1212906589b5e7fbe717a0a18b4509cb38236abd0829c8e8fda9a64a69942a2b9a90199bf57c216000000000040000000000100000000006c636ebbaa43017d9a2a776f53f7c90493378bbbce9490b3dbdf9089962f37975c28ae7776d49570439154ef6fe5b608328e1c70b05edd0b8c7d65f15b06f041447fe6a5f69ae87dd60e1934e428116dfe6f287d44349fe80070a30a5fbed34081b22ebde28deda57c1ee3c961bf50be3dd244a8eb8cf7afb5c9443bf3023575c9d95d88afa2832ab3a424a3c181a876cbdc0b9153047c89adb0bb4980c9e86a3d7920e57137f1", 0x6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r17}, 0x10) fcntl$setstatus(r3, 0x4, 0x4000) ftruncate(r15, 0x108200) r19 = open(&(0x7f0000000000)='./bus\x00', 0x4000, 0x48) sendfile(r15, r19, 0x0, 0x8000fffffffe) sendfile(r15, r19, 0x0, 0xffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r21 = dup(r20) ioctl$PERF_EVENT_IOC_ENABLE(r21, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x6, 0x80000bee, 0x99c9, 0x41b, 0x10, 0xffffffffffffffff, 0x7, [], 0x0, r21, 0x2000002, 0x5}, 0x3c) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000500)='/proc/self\x00', 0x0, 0x0) 02:48:47 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x1000) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000140)=@fragment={0x14, 0x0, 0xe0, 0x1, 0x0, 0x3, 0x65}, 0x8) r2 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendfile(r1, r2, 0x0, 0x4000000000020009) r6 = socket$inet6(0xa, 0x400000000001, 0x0) close(r6) r7 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x200004) sendfile(r6, r7, 0x0, 0x80001d00c0d0) 02:48:48 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) 02:48:48 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'bpq0\x00', 0x420000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000200000000100000000a2a50000525fa7a78ce1651c505a2fe6a9a8c61d28ebc89c062dcf984b471d1e8de2c29c1af962d3413dbca713db79d1ef056bd7087af006ce222735d7a9c6ce0a97ae72e765bc1dab7db70a0e99c8361ad74d77e3358ca7c5c26fbe517847e32d1308753107d589be4a9f68b021170e04b4ccb9d7be77fff85012ff3eb177a93490f3d94add08920960b6006841b36ae73c7ff538d896e306900cf6f76718d3810c97075d19479b80c96989dbf9675e86a6f7186466e09d3f01da8d"], 0x28}}, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000180)='security.selinux\x00', 0x0, 0x0, 0x5) write$tun(r0, &(0x7f0000000340)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv6={0x0, 0x6, "314092", 0x44, 0x0, 0x0, @dev, @mcast2, {[], @icmpv6=@mld={0x0, 0x3, 0x0, 0x0, 0x0, @dev}}}}}, 0xff23) [ 623.390809] audit_printk_skb: 2046 callbacks suppressed [ 623.390818] audit: type=1400 audit(1574736528.193:14452): avc: denied { sys_admin } for pid=2097 comm="syz-executor.1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 02:48:48 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00H\xba4HU2\xfem\xe1\x7f\x84\xe1\x96\xa0[\xf2\x12\xb4.C\xf2){\x98\x01`4[\xb2\xc46=\xd7&\xfc\x88\xd2\xa9\x04K5B\xb7\x19\xec\xbe\xcbs\xc9\x10\xdb8L\xea#\x0e12\xa5F\xe4\x9d,\x84i0\xc9S\f\xa7\xe6\xa9=\xc1\xea\x99\xe6\x87\x16\xac\xae\xa3\xeb\x16T\xa5\x85\x9d\xbc|\xac\xf0\xb8\x16\x9b\xa7\xcd\xc0[>\xd1\xb0\x83W\xbab\x83\xcbsJ\xe9\x00\x00\x00\x00\x00\x00\x00\x02\xb3\xac\xf2\xb4k7\xd9\x9en\x03\xefI|\xfb\xdb\xf1\x97:\x0e\xb6AY\xf6z\x8f\xcf\xce\'\x8d\x00'/171, 0x200002, 0x0) fchdir(r0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x1000000, 0x12, r1, 0xa2ef1000) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000180)={0x7, 0x4d, 0x1}, 0x7) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff}) dup(r5) recvfrom(r5, 0x0, 0xfffffdb5, 0x0, 0x0, 0x0) fallocate(r2, 0x10, 0x8800, 0x107fff) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) r6 = gettid() ptrace$setopts(0x4206, r6, 0x1, 0x0) tkill(r6, 0x3c) r7 = gettid() ptrace$setopts(0x4206, r7, 0x0, 0x0) ptrace$cont(0x18, r7, 0x0, 0x0) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r7, 0x0, 0x0) ptrace$cont(0x18, r7, 0x10, 0x1000000) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r6, 0x0, 0x0) syz_open_procfs(r6, &(0x7f0000000100)='net/dev\x00') remap_file_pages(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x6, 0x7fff, 0x3) 02:48:48 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x22c, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$inet6(0xa, 0x2, 0x0) socket(0x11, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6}}, 0xe8) bind(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x200000, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(0xffffffffffffffff, 0x0, 0xffffffffffffff44) r1 = syz_open_procfs(0x0, 0x0) socket(0x0, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) shutdown(r0, 0x1) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f00000001c0)={'nat\x00'}, &(0x7f0000000040)=0x78) [ 623.429879] audit: type=1400 audit(1574736528.233:14453): avc: denied { net_admin } for pid=2100 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 623.437518] audit: type=1400 audit(1574736528.233:14454): avc: denied { sys_admin } for pid=2106 comm="syz-executor.4" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 623.439294] audit: type=1400 audit(1574736528.243:14455): avc: denied { net_admin } for pid=2100 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 02:48:48 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) sigaltstack(&(0x7f0000008000/0x4000)=nil, &(0x7f0000000340)) fchdir(r0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r1, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'sdx', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$describe(0x6, r2, &(0x7f0000000280)=""/125, 0x7d) keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f0000000180), &(0x7f0000000240)) r3 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r4, 0x2081fc) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) r7 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r7, 0x0) read(r5, &(0x7f0000000000)=""/250, 0xedf1d44) r8 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(r8, 0x4, 0x40400) write$FUSE_WRITE(r8, &(0x7f0000000080)={0xfffffffffffffd7f}, 0x18) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) fcntl$setstatus(r3, 0x4, 0x6100) fdatasync(r1) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0xf642e7e) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000200)={0x0, r1}) r9 = socket$netlink(0x10, 0x3, 0xc) writev(r9, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x22a}], 0x1) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000000480)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x9cX7\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\xad\xcb\x859\xca\x1d*e7\f=v \xb6\x990:\xa4\xc2R|\xb9ZOYf\r3\x8e\x01\xa3gl\x1b=\xde\xd9\xc4K\x00\xd6\x12\xd6\x17\xaf\x1f\x98\xd8\xab4V\xb4\xbb\x8b\x95o\xdd\xd8\x1b\t@A\xc4\xc5\xfc\xdeZc\xefK\xf9\xcb\xa0\xf8+\xd1\x99[\xfb\xd1/\x8e\xf1\xd4\xe0NzX\x1c\xc9\xd3\xbb\xd1\x86\xd9\aS\x10~\xf1\xe5@I\xc5\xf7\x86\xa4', 0x275a, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r11, 0x0) epoll_ctl$EPOLL_CTL_MOD(r11, 0x3, 0xffffffffffffffff, &(0x7f0000000300)={0x90000000}) ioctl$BINDER_THREAD_EXIT(r11, 0x40046208, 0x0) r12 = socket$inet6(0xa, 0x801, 0x0) r13 = dup(r12) bind$inet6(r13, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) fcntl$dupfd(r13, 0x0, 0xffffffffffffffff) r14 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r14, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r14, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r14, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1a) fallocate(r14, 0x3, 0x0, 0x8020003) lseek(r14, 0x0, 0x3) 02:48:48 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) [ 623.441555] audit: type=1400 audit(1574736528.243:14456): avc: denied { net_admin } for pid=2100 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 623.443472] audit: type=1400 audit(1574736528.243:14457): avc: denied { net_admin } for pid=2100 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 02:48:49 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod(&(0x7f0000000500)='./bus\x00', 0x244, 0x0) lsetxattr$security_selinux(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000240)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:mount_exec_t:s0\x00', 0x22, 0x0) clone(0x7fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000000)=0x4, 0x4) execve(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') 02:48:49 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = memfd_create(&(0x7f0000000380)='\x00', 0x0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x2010, r3, 0xffffd000) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r13) r14 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) mknodat(r14, &(0x7f0000000440)='\x00', 0x1011, 0x8) [ 623.445352] audit: type=1400 audit(1574736528.243:14458): avc: denied { net_admin } for pid=2100 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 02:48:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0x7}, 0x1c) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) listen(r0, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @rand_addr="000000000000000000000000000000ed"}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100) flistxattr(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f00000002c0)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f00000000c0)={'icmp6\x00'}, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) write(r1, &(0x7f0000000340), 0xffffffec) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) r3 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000004c0)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r4 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000003c0)="e42f976924877b2b96b1d41c051e2a0057f50b0540efa2a0082defe3ce3f7665f5795e43522c1eddcdc98ba7c206145c059e6298ffb722a09f299a6be474e4de6220e18ea522435567cbbe0118f871e42acfa036d297aac28cd304001934d98926654554c2da2f4bb8496840743240a39408f449fed7d870f4b6989d5e53825cf2cc52ec", 0x84, 0x4000, 0x0, 0x0) [ 623.447172] audit: type=1400 audit(1574736528.243:14459): avc: denied { net_admin } for pid=2100 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 623.466879] audit: type=1400 audit(1574736528.263:14461): avc: denied { net_admin } for pid=2106 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 623.466948] audit: type=1400 audit(1574736528.263:14460): avc: denied { dac_override } for pid=24944 comm="syz-executor.2" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 02:48:49 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) 02:48:50 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod(&(0x7f0000000500)='./bus\x00', 0x244, 0x0) lsetxattr$security_selinux(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000240)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:mount_exec_t:s0\x00', 0x22, 0x0) clone(0x7fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000000)=0x4, 0x4) execve(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') 02:48:50 executing program 3: accept$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, &(0x7f00000001c0)=0x6e) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x20) r2 = creat(&(0x7f0000001400)='./file0\x00', 0x126) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) r3 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000340)='./bus\x00', 0x0) ftruncate(r4, 0x2081fc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) r6 = open(&(0x7f0000000300)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r6, 0x0) r7 = epoll_create(0xffff) read(r7, &(0x7f0000000580)=""/251, 0x4b) close(r3) fdatasync(r2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2}) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/attr/keycreate\x00', 0x2, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty, 0x5}, 0x27) listen(r8, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00') preadv(r9, &(0x7f0000000480), 0x10000000000002a1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) bind$inet6(r11, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @mcast2}, 0xfffffffffffffc2b) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) creat(&(0x7f0000000440)='./bus\x00', 0x84) creat(&(0x7f0000000100)='./file0\x00', 0x0) 02:48:50 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) sigaltstack(&(0x7f0000008000/0x4000)=nil, &(0x7f0000000340)) fchdir(r0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r1, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'sdx', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$describe(0x6, r2, &(0x7f0000000280)=""/125, 0x7d) keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f0000000180), &(0x7f0000000240)) r3 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r4, 0x2081fc) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) r7 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r7, 0x0) read(r5, &(0x7f0000000000)=""/250, 0xedf1d44) r8 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(r8, 0x4, 0x40400) write$FUSE_WRITE(r8, &(0x7f0000000080)={0xfffffffffffffd7f}, 0x18) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) fcntl$setstatus(r3, 0x4, 0x6100) fdatasync(r1) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0xf642e7e) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000200)={0x0, r1}) r9 = socket$netlink(0x10, 0x3, 0xc) writev(r9, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x22a}], 0x1) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000000480)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x9cX7\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\xad\xcb\x859\xca\x1d*e7\f=v \xb6\x990:\xa4\xc2R|\xb9ZOYf\r3\x8e\x01\xa3gl\x1b=\xde\xd9\xc4K\x00\xd6\x12\xd6\x17\xaf\x1f\x98\xd8\xab4V\xb4\xbb\x8b\x95o\xdd\xd8\x1b\t@A\xc4\xc5\xfc\xdeZc\xefK\xf9\xcb\xa0\xf8+\xd1\x99[\xfb\xd1/\x8e\xf1\xd4\xe0NzX\x1c\xc9\xd3\xbb\xd1\x86\xd9\aS\x10~\xf1\xe5@I\xc5\xf7\x86\xa4', 0x275a, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r11, 0x0) epoll_ctl$EPOLL_CTL_MOD(r11, 0x3, 0xffffffffffffffff, &(0x7f0000000300)={0x90000000}) ioctl$BINDER_THREAD_EXIT(r11, 0x40046208, 0x0) r12 = socket$inet6(0xa, 0x801, 0x0) r13 = dup(r12) bind$inet6(r13, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) fcntl$dupfd(r13, 0x0, 0xffffffffffffffff) r14 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r14, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r14, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r14, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1a) fallocate(r14, 0x3, 0x0, 0x8020003) lseek(r14, 0x0, 0x3) [ 625.738127] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 625.928009] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 02:48:50 executing program 5: stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0xd432}) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000380)={0x7, 0x7f, 0x1}, 0x7) syz_open_dev$loop(0x0, 0x4, 0x51d00) write(0xffffffffffffffff, 0x0, 0x66467658f9365c94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r1) sendmsg(r1, 0x0, 0x0) setitimer(0x1, &(0x7f00000000c0)={{}, {0x0, 0x2710}}, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r4) setsockopt$sock_int(r4, 0x1, 0x79, &(0x7f00000001c0)=0x1, 0x4) pipe(&(0x7f00000003c0)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x20) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0xfffffffffffffd14, &(0x7f0000000040)=[{0x0, 0xde, 0x0, 0x7f}, {0x8, 0x75, 0xa2, 0xc}, {0x9, 0x9, 0xe5, 0x80}, {0x5, 0x5, 0x7, 0x8}, {0x3, 0x1, 0x9, 0x401}]}, 0x10) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) dup2(r5, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$inet_buf(r7, 0x0, 0x2c, &(0x7f0000000440)="db7abfb789978c3821dc1719cd2a0d74029389aebd81b89b73d2be4563bf09059f36d9a123220ca21217591b778c7dc7a462c6687ea62bc3cd9003542f6ab941c692d35bde019bf8137ca12a8b17141f9d9837e946e300b454d14f2c8e6817f9ee59aadf9ecba70e5ffa90b515df6c101ad02448821bbb27387879f7eeffa259babf2bc4ae56968fe9e654c6cd31d2b4b68a1b01479f8a9ff3d19ec977b9ecbd31af706bb934080b537d42b11795df16f1d4c3f12d62cbc2c21dc251caee953ff6840269dba0fc2cd0510e93b23cc71550403deb44521e127a67140bf198069e", 0xe0) socket$inet_icmp_raw(0x2, 0x3, 0x1) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) 02:48:50 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xedf, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) utimensat(r4, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x77359400}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000340)={{{@in=@empty, @in6=@mcast1}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000000)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0x5}}, 0xe8) sendmmsg(r0, &(0x7f0000000240), 0x40002b7, 0x0) 02:48:50 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, 0x0, &(0x7f0000000600)) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) 02:48:51 executing program 4: pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000140)="24000000210099f0003bf90000ed190e020008160004000000ba0080080002007f196be0", 0x24) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x600600, 0x0) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x5, 0xd81}, {0x6}]}) ioctl$sock_inet_SIOCRTMSG(r5, 0x890d, &(0x7f00000000c0)={0x0, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e21, @multicast2}, 0x80, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000080)='bcsf0\x00', 0x7fff, 0x4}) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 02:48:51 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) r4 = socket(0x400000000000010, 0x802, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r5) sendto$unix(r5, &(0x7f00000001c0)="d940cf2d142fe9419c3d2fb9fcfb092491c2cee6fb6f92bdc1e892d55a62bfe521e4ed9c86849a1bbfbdc512784f1f8dab81ef504cff97ba45adb6b8f4a44e93cc2494f27834509e555f796dbc10469a62723dca0193c5d6d51aaba58d5afd33a1abf6a781fae3453e69be1a543185a64440f88c8cf65689ea4501b1589a91ad79d1c282cc452beb5b80", 0x8a, 0x8c0ecc773e59a564, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$P9_RREADLINK(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="100000001703000700262f66696c6531"], 0x10) write(r4, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007b196be0", 0xd5) setsockopt$inet_mreqn(r3, 0x0, 0x2, &(0x7f0000000080)={@dev, @empty}, 0x3) r8 = open(&(0x7f0000000000)='./file0\x00', 0x105000, 0x10) r9 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/policy\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$TUNSETSTEERINGEBPF(r9, 0x800454e0, &(0x7f0000000300)=r11) ftruncate(r8, 0x1) 02:48:51 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, 0x0, &(0x7f0000000600)) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) [ 626.985500] selinux_nlmsg_perm: 23 callbacks suppressed [ 626.985513] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=25054 comm=syz-executor.4 [ 627.122211] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=25054 comm=syz-executor.4 [ 627.193887] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=25054 comm=syz-executor.4 [ 627.279056] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=25054 comm=syz-executor.4 [ 627.372400] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=25054 comm=syz-executor.4 [ 627.508890] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=25054 comm=syz-executor.4 [ 627.593474] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=25054 comm=syz-executor.4 02:48:52 executing program 3: socket$inet6(0x10, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x11) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000010c0)='net/tcp6\x00') read$FUSE(r2, &(0x7f0000000000), 0x1170) write$FUSE_NOTIFY_POLL(r2, 0x0, 0x15) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000080)=0x8) fchdir(0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x0, 0x2, 0xfffffffffffffffb, 0x6}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() clone(0x10000000, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000001740)='\x8e\xfa\x82\x18:\x8a\xb8\xd1\xc8\x0fS\x9bh,\x9d\xed\x89\xf7\x19\a\x02\xca6=\xa0\x95\xf7u\x8d\x04\x04\xa6\xc3[\xad\xb6\xb6h\x1c\xfdFZ`\xcd\xad`\x97\xbd[\x0fU7t\xab\x8d\xa4\x00\x02\x00\x00\x138\xd7\xf4\xf8\xc6*o\xd1\v(\x06\xad\xa5\x9f\x021q\xd1\xec\xd5\xe6`\x7f6\x18*\xedar6\xfa>\xfd7\xb9\x85\xff\xec\xd1\xaf\xee\x1c\x17!\xc8\xbf\xf4( \xad\x1bV1$q\xbc\xc2\xbf\x01\xd3]\xc5\xdd{\xea\xda!\x1e\xe2X\x89\xb9\xb8X[\x17<\xe9\x9d\x10\xac2\xd3\xe5\xac\xb5C\xb0z\xdaD\x1eR\x0eU\xb9wa\x86\xa9F\a\xf3\xd9\xa8\xfd\x14\x12\x8d\x11\xc9\xf3w9`\xeb\xedR\a\x80\xac@\xad\x93Y-S\x0e{\xb5\xfd\xe5\xa5\x12\x160 YTV\xeb\xc8*\x97\xfc6\xc2\x1c\xf1\xee\xd4Y3\xe6Y\xa4\x16{\xc5\xb0\xd6\xd3\x7f\x1a\x16y\x97\xaf\xaa\xb4\xd9\xd2\xe7Hd\xc2+y\xd6\xc7\xe2\x16`\xe9\xbd\xe2y]\xa2\xd7\xfc\x13M\xb4\xf4%\xfd(\xfc\xda\xc4\xd5#\x0f\xfcV\xa0\xa7\xb3j\xe8\"\xd2\xfa,\xea\xb8\xfc#\xa3\x96\xa0\xd5\xffa\xec\x00\xa0uo{\xba\xb5\xa7\x15\xd8\x9d4nv\x17\x0f\xef\xfb\xc6\xdd\xed^,\xa8\x9eO') r5 = dup3(0xffffffffffffffff, r4, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00\x00\x00v\x98\x91bS\xb3\x81\x99\x00', 0xb00}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x30a) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x0) r9 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r9, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r10, 0x0, r10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) accept4$inet6(0xffffffffffffffff, &(0x7f0000001040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, &(0x7f0000001100)=0x1c, 0x180000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = fcntl$dupfd(r12, 0x0, r11) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r15 = dup(r14) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r15, 0x29, 0x23, &(0x7f0000001180)={{{@in=@empty, @in6=@initdev}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000001140)=0xe8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001000)='pids.events\x00', 0x275a, 0x0) ptrace(0x10, r3) [ 627.680120] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=25054 comm=syz-executor.4 [ 627.749340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=25054 comm=syz-executor.4 02:48:52 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f00000001c0)={'bond0\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(0xffffffffffffffff) r5 = socket(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f00000034c0)={@local, @mcast2, @empty, 0x0, 0x40, 0x0, 0x100, 0x0, 0x206}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000640), &(0x7f0000000680)=0x8) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="300400000ff8dc3b0b1992623a02e942a7880c8258bfbb3842979088d7fe134455c1e8e45625205304410bb96ca08ddd01004dd1c1cde925561d99faf3e35f52836e72aaced47b97d0c2ff77e441f11851922e4aa4f2f1369cda928e0eef46d3dbd58399a04e15d5ade896cf2365fea1fb43c62c314e00"/128, @ANYRES16=r6, @ANYBLOB="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"], 0x3}}, 0xbd96b9f073d96152) sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="000028bd7000000000000a000000380005000800010075647000240002000800030053ff0000080001000c0000e9070003003f0000000800040000000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8800) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10006804}, 0xc, &(0x7f0000000400)={&(0x7f0000000e00)=ANY=[@ANYBLOB="f400bb893c95e481970000dbc65f2e53de2b10f293c7437ddb94ab74671bbcbddc1432740a20376aaefc73fd9179d016d05a7815256f5f164ecbb426ce82f0a0f2f12a48368fc462ead76002f85a8c72e73e4a6612a4e862cefd1fd5587a1951937d03a9019e90a2da8e6f05af1f2fe60b29bd84787759f82980e7fcd576b9d911", @ANYRES16=r6, @ANYBLOB="c24a28bd7000fddbdf2506000000100007000c00040001040000000000002000050008000100696200000c00020008000200000000000800010065746800280007000c0003004000000000000000080001000200000008000200070000000800010000000000240007000c000300090000000000000008000200ff0000000c000300ff0f0000000000002c00090008000200070000000800020004000000080002000000010008000200faffffff0800020006000000280006000400020008000100ff7f0000080001001f0000000400020008000100000000000400020010000600080001005d20000004000200"], 0xf4}, 0x1, 0x0, 0x0, 0x800}, 0x4018000) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r6, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfac}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000) fcntl$setpipe(r2, 0x407, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x800, 0x0) splice(r1, 0x0, r3, 0x0, 0x30005, 0x2) [ 627.834920] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=25054 comm=syz-executor.4 02:48:52 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, 0x0, &(0x7f0000000600)) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) 02:48:53 executing program 2: readv(0xffffffffffffffff, 0x0, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000001600)={0x5, 0x8000, 0x0, 0x101, 0x9}) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0xd432}) pipe(0x0) pipe(&(0x7f0000000000)) syz_open_dev$loop(0x0, 0x3, 0x51d00) write(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000001c0)) ftruncate(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) io_submit(0x0, 0x1, &(0x7f0000001500)=[0x0]) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) setitimer(0x1, &(0x7f00000000c0)={{}, {0x0, 0x2710}}, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e5e2) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) dup2(r4, r0) sendfile(r2, r3, 0x0, 0x80000001) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000380)=0x83, 0x1fb) open(&(0x7f0000001240)='./file0\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000011c0)='net/dev_mcast\x00') fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x0, r7}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r7}) r8 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) bind$packet(r8, &(0x7f0000000100)={0x11, 0x11, r7, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0xfffffffffffffffc) r9 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r9, r9, &(0x7f00000002c0)=0x202, 0xdd) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'sit0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x4, 0x0, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14) lseek(0xffffffffffffffff, 0x0, 0x2) r11 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r11, 0x4, 0x6100) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x202, 0xdd) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) lseek(r11, 0x2, 0x0) r12 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) r13 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r13, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r13, 0x0) ioctl$ASHMEM_SET_NAME(r13, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa5\x1c\xb8\xc5\xcaw\xc5\xab\xa3x\x90>\x86qW\xa8\xb7\xdb\xa1\xd6xS\xb2:\x87\x12\x03\xafV\x85\xc4\x0e~\x89\x18\x86\xd4\xd2\xc1\x00\xda\x9b.', 0x71, 0x2) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000780)=""/114) 02:48:53 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x04\xe2\x96\r\'%\x0eC\x8a\xe2\x12\xecg\xbd\xe1\xd6\t\x81\x89\xdf\xeaw\xe1\xbc|\x9a.\xb3\x87\xd9\x82\xa7\xd9U?\xdc\xbdZ\xf9\xe4\x94\x90r\x86-z8\xb9\x88$\x92\xff\x01&\xf2!\xbc\xe6\xc1\x198HGe\r\xde\xac\xc4\xac\xb52\"\xc3\x81{\x12\xbf`x\x95\xb3%\x84\x99\xa7\xa9\xda\xac:\x95^\xa50x0, &(0x7f0000003200)) fchown(r4, r5, r6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0) fchdir(r7) r8 = getuid() getresgid(&(0x7f0000003180), &(0x7f00000031c0)=0x0, &(0x7f0000003200)) fchown(r7, r8, r9) r10 = getgid() r11 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x2) keyctl$chown(0x4, r11, 0x0, r12) r13 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x2) keyctl$chown(0x4, r13, 0x0, r14) getresgid(&(0x7f00000001c0), &(0x7f0000000280)=0x0, &(0x7f00000002c0)) fsetxattr$system_posix_acl(r3, &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r5}, {0x2, 0x1, r8}], {0x4, 0x1}, [{0x8, 0x2, r10}, {0x8, 0x0, r12}, {0x8, 0x2, r14}, {0x8, 0x4, r15}], {0x10, 0x2}}, 0x5c, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x2) keyctl$chown(0x4, r2, 0x0, r16) ioctl$TUNSETGROUP(r1, 0x400454ce, r16) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r19 = dup(r18) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) getsockopt$IP6T_SO_GET_INFO(r19, 0x29, 0x40, &(0x7f0000000040)={'raw\x00'}, &(0x7f0000000100)=0x54) r20 = dup(r17) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r20, 0x8000) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xc) clone(0xc44280, 0x0, 0x0, 0x0, 0x0) [ 628.412993] audit_printk_skb: 2016 callbacks suppressed [ 628.413002] audit: type=1400 audit(1574736533.193:15134): avc: denied { net_admin } for pid=2103 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 628.506752] audit: type=1400 audit(1574736533.303:15135): avc: denied { dac_override } for pid=25078 comm="syz-executor.4" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 02:48:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$selinux_create(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='system_u:object_r:cgtoup_t:s0 /usr/sbin/cupsd 000 0000000000000005\x00'], 0x43) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pread64(0xffffffffffffffff, &(0x7f0000001200)=""/103, 0x67, 0x2) keyctl$describe(0x6, 0x0, &(0x7f0000000200)=""/4096, 0x1000) r2 = socket$inet(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000000)) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="240000001a0007041dfffd946f610500020000e8fe02080100010800080004000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 628.542520] audit: type=1400 audit(1574736533.343:15136): avc: denied { dac_override } for pid=25074 comm="syz-executor.3" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 02:48:53 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, 0x0) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYRESOCT], 0x17}}, 0x20000008) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) [ 628.601255] audit: type=1400 audit(1574736533.403:15137): avc: denied { create } for pid=25074 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 628.602757] audit: type=1400 audit(1574736533.403:15138): avc: denied { write } for pid=25074 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1