bind$inet(r72, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r72, 0x0, 0x0, 0x400200007fd, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10)
recvmsg(r72, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x20013a5a}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
r73 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r73, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r73, 0x0, 0x0, 0x400200007fd, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10)
write$binfmt_elf64(r73, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0xffffff84)
recvmsg(r73, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x20013a5a}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
r74 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001e40)='/dev/ppp\x00', 0x8000, 0x0)
pipe(&(0x7f0000000180)={<r75=>0xffffffffffffffff})
read(r75, &(0x7f0000000200)=""/250, 0x50c7e3e3)
r76 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r76, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r76, 0x0, 0x0, 0x400200007fd, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10)
write$binfmt_elf64(r76, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0xffffff84)
recvmsg(r76, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100)
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r77=>0xffffffffffffffff})
write(r77, &(0x7f00000001c0), 0xfffffef3)
r78 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001e80)='/dev/urandom\x00', 0x10000, 0x0)
r79 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000004ac0)='/selinux/checkreqprot\x00', 0x4000, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r80=>0xffffffffffffffff})
r81 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
dup3(r80, r81, 0x0)
r82 = open(&(0x7f0000000080)='./bus\x00', 0x426980, 0x89)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000041c0)=[{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001480)=[{&(0x7f0000000300)="620edd271750c49344dfa2f957aa4434a2bfedfc140c17a23cad219e0b6188d1f01951f0c0bb6ae621ea98f59b04c314858dd5d31c874f3ab93e173fb2d1bbd10325c33ca7c957f20631e499adea31aba7f141559330dbcbea2caf13af5d22249040bb8a03b95ea7e179c94d0fd329eb4b2c85666e", 0x75}, {&(0x7f0000000380)="f09a854e6380fa0a02d3d26be3d70399c57cbfd52c1c0ae4e4e3ac92c047e7be88771f663b027f0ac3e305f1b40decd1aa140d758e2edc99bfed279368663c2a0286d8afeacf51fdb430d02477e8cddc3e48319ae47295dd7ce660482ea37e6dac1b791b1cc2a0f3aa3596cb48b8188edc08aeed9db91c7281210bae167402e92f6f3f1ed4d4049c3411a6ceefbf424853de8b42a29053b637c3413d24211b476252fee96bd90f952b93fb542f64456e4191af384b5c37d0b5a66dda1390e28d169edec3b859e28ca85ce969af58cd5ad53891798269f8e2", 0xd8}, {&(0x7f0000000480)="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", 0x1000}], 0x3, &(0x7f0000001500)=[@rights={{0x18, 0x1, 0x1, [r17, r18]}}, @cred={{0x1c, 0x1, 0x2, {r19, r20, r30}}}], 0x38, 0x400d0}, {&(0x7f0000001540)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001840)=[{&(0x7f00000015c0)="5b286cd6d8c4954fe57258a2932c1d878ae891b6731c693e685bec13231841d070fc3196c74b6868782edfc0770d7f1e22b5f47cfb79c70bec463045544369e4e2c5c150f900af831398aac1ce1a08b1f18a81bab453b45f4f", 0x59}, {&(0x7f0000001680)="0706", 0x2}, {&(0x7f00000016c0)="4b4c42b27cd763ab7a8578ce05a6a2f85cbec02018c205db3a7d2bae601d56c7a71fc2eff4aa10bfa6a03b8b45c8c8d18d94395910", 0x35}, {&(0x7f0000001700)="dd5b84d1880fd442b074048df9cb53f6d94c24d17a93914e644040f362a0a7334970be53bb71b47be5d14cbdab078c68f18e578545816157a44c3cc937cbac396b33896703bd23d7e74f0f4821e710e7380be257f04bbebed943c063772b", 0x5e}, {&(0x7f0000001780)="9286099b3ba541623e29815d17fe6040880b4dfac7bd03", 0x17}, {&(0x7f00000017c0)="6cf1f9dbdb6b2975f855e0c147d15f8b20d40b75902c0c493ea4a0dabfe6cc32ee439988501b58d95aba1ce14d3757ab99a59f502d60dcf95b2a1fbf629ede08f971d62945e758b5ace0defc1af328aa62d09f9ea26b925460fb1e052682f8e21eff671290c8670205e07d0307e7b0396f6c0544b45de2fc2c09274e517dfc64", 0x80}], 0x6, &(0x7f0000001b40)=[@cred={{0x1c, 0x1, 0x2, {r31, 0xee00, r34}}}, @cred={{0x1c, 0x1, 0x2, {r35, r36, r39}}}, @rights={{0x20, 0x1, 0x1, [r80, r76, r82, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r40]}}, @cred={{0x1c, 0x1, 0x2, {r41, 0xffffffffffffffff, r44}}}, @rights={{0x20, 0x1, 0x1, [r16, r45, r46, r16]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r48, r49, r52}}}], 0xe8}, {&(0x7f0000001c40)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000001cc0)="79554714b6c27e3fec2a46475d83a567b9f4173b0080f516b61ca84f77b0ba21975db8b2a7ab1f18c674fdf3428a5a067cd55c56eb628b6c7c31f0d0f55bdb2b133bcba0bb0eaa1927711b49ffef892f335e55065887a01d2b37b2a5b5277a4be355b29a11679b4d540f9490d9fa", 0x6e}, {&(0x7f0000001d40)="59bfd919fded71c62ee4a6ab60149304f8e9d0689b0c0fbbb24dcdc71942b9f9274cb8ac6b9af96a0bfec406948847f323dc2fceb831f753769b05b0cb7bfb1cee10c0d2398a03bb97064e2e0d0330ff23fdcbe5b94f5488e96f0184", 0x5c}], 0x2, &(0x7f0000001ec0)=[@cred={{0x1c, 0x1, 0x2, {r53, r63, r67}}}, @rights={{0x20, 0x1, 0x1, [r68, r16, r69, r70]}}, @rights={{0x38, 0x1, 0x1, [r71, r72, r73, r74, r75, r76, r77, r78, 0xffffffffffffffff, r79]}}], 0x78, 0xc00662f88551d6be}, {&(0x7f0000001f40)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000004140)=[{&(0x7f0000001fc0)="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", 0x1000}, {&(0x7f0000002fc0)="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", 0x1000}, {&(0x7f0000003fc0)="b2c7381a25f9d86141f98fc6b4133a00e9b4960249469390bb11d555cfbb50bba4c75fa4dc722d02b06b80a8f1d8b8a5f734abc483d2e71fababf1b16dc53e38257ebd09ccc570cf67e94ee0533b", 0x4e}, {&(0x7f0000004040)="3f167f7afb2ebf35ca32436c4cd8639a52fc15204f2f081866dad0003e672f3697d93d6baf7723cf277f744303667bced32cb972d42276fc84b573cfff13418699d8cbf6bebbb10a6c49827abdcf09786e0bec17bd87b16061ed1ef3a994b978a900ad67a13cc2a0ecf7c787f81fb5f4a590cb2f8b11c50316322a507eae0793403ead39774afc3306c81653149288c283c82b3d41f415e94bc76d912102bc108bb7be48182e7b635e3a36eb0a251f92e059ac8cdf361f0ebdc01e8f0f1f1f44364f45ef5dfed42e1d6af6505d854a557de5266468fb5bd8fc2a1d7e8cc97f", 0xdf}], 0x4, &(0x7f0000004180)=[@rights={{0x10}}], 0x10, 0x800}], 0x4, 0x10)
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000980)={0xa0, 0x19, 0x0, {0x2002, {0x0, 0x1}, 0x0, r20, r15, 0x2000000000442, 0xfffd, 0x0, 0x9, 0x0, 0x6, 0x7fff, 0x3, 0x0, 0x915, 0xffffffff, 0x0, 0x20000000000003}}, 0xa0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000380)={@loopback, @multicast2}, 0x0)
readv(r10, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000000a40)=""/4110, 0x100e}, {0x0}], 0x3)
read(r13, &(0x7f0000000700)=""/250, 0xffffffc9)
sendfile(r11, r12, 0x0, 0x180003)

12:51:41 executing program 2:
openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x323)
r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
r3 = getpid()
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000400))
sched_setscheduler(r3, 0x5, &(0x7f0000000180))
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r5 = socket(0x10, 0x80002, 0x0)
bind$netlink(r5, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r5, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0)
connect$netlink(r5, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc)
setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000002000000e000000200000000000000000000f100"/144], 0x90)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCOUTQNSD(r7, 0x894b, 0x0)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000b4bffc), 0x4)
write$P9_RSTAT(r2, &(0x7f0000000940)=ANY=[@ANYBLOB="6c0000007e01010000550000000000000003030000000400000000000000000000001c000010002fc4656c696e75782f706f4a2f3596d3d069637975782f706f6c6963794e00000000000000000000000000725f285ec7feeb0e125a59007b8145b2717d86e9b443eea7e22eb0cda1ea1033f835d8d3c37973b193995b26942849f538377b0e8e1e98a9c1ec55dfdeb977b33c305a579f8199e40953175a5d981ec35e6b7e2d0b4d67585da894e152361a7adc74b667119f89931eb312a8dc79097d734d3fe1db73fc3961b10590ca5740b0bb311b279b5f00bda211d5f3177f6e643000a6db77af0592200ed5f1dab0bd"], 0x4d)
sendto(r5, &(0x7f0000000340), 0xac, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000500)='TIPC\x00')
ioctl(r0, 0x8, &(0x7f0000000580))
write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(r5, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0)
write$binfmt_misc(r4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b520000006000000e0517f08000000a72ed763cff694bd7f4ecab21e4a9ddec7483eee198c4f6efe09c408b6e91abe2e58ee53ab99de20f7d97f877e5c0f5604417042409a3f28e040eeb799c98c7ae4c1311a57724b2bcbb637e994a89d4610df8321088bf93a7b7c4c3b7bb156c1d51b26a96ea9e8c6d0268b83"], 0x79)
clone(0x0, &(0x7f0000000640)="e1fea4c5bb0f699682fd37c5ad1a14d20afc2093db1a28cd359bd0ae7b53802fe27accc96526d718565c81ae3d4a901e0a1f01e37e5fcba72ad07c592309a4825b50a25a0884a172a71e035d3156888f8ae12bfbc4e837ba972d9a23cf4b56611f539eb172aa8978fc38a02b7b4349d39671579350b6d4969b18185ece417bc621f2043e734e95d87597df4e32c7", &(0x7f00000000c0), &(0x7f00000003c0), &(0x7f0000000700)="f1ea51d793d343ef785f269e27bc9b35c756a451c99cbdeb5d648ed9b1580c18f187e2995f273c52d3391c28b1683e5809aca445a286b013970945b55c23a3e82daa89d13cd66835e8ec0f39eb2e796f4ed003a859d79c2991ea0323ae2e822e5ec3110d58c4ca2294a4677dae26c6e4a9c7cdbca39458cd49ae1102a26bae5045287a8e69ece03c3462dca17c7e8a6e06e86b06d0db4e41b2c54c0cf3bef45b637fe0e4781bd864f9a72c51cafa76302a19aee7b4fc7aa00817dac545e7ed4e533b7058")
pipe(&(0x7f0000000100)={<r8=>0xffffffffffffffff})
write$cgroup_int(r8, &(0x7f0000000180)=0x3, 0xffffffffffffff31)
ioctl$TIOCGSID(r8, 0x5429, &(0x7f0000000380))
write$P9_RMKNOD(r8, &(0x7f0000000040)={0x14, 0x13, 0x0, {0x0, 0x2}}, 0xfd95)
ioctl$TCSETSW(r8, 0x5403, &(0x7f0000000440)={0xd, 0x1, 0x5, 0xfff, 0x11, 0x9, 0x8, 0xfb, 0x1, 0x68589d9d, 0xfffffffc, 0x3})
getxattr(&(0x7f0000000200)='./bus\x00', &(0x7f0000000a40)=ANY=[@ANYBLOB="7379fedd49ff36185e5de0589cc9fb169b199f03d5a66e55070491ee41fd5ec4fc860000000000000000dca85e8f0000000000008e42a559329fa85b744cbf2256a38a77537dbf63016e1e36c3d007b20a42eddbcd72b95308c82df821924b56b1c4bcd1da7e30979e800051a3686c74420b9143a34297905845ad89bd55414de38281b03a2a0511faf75abb4b55bab8f0a4f207c415a50b6f339a1d3f3e0f21c88a3e7a4f031b8391ff5f76c7bfa11da176f399b0dc553efc2f4d91e53b8dacb855be15eef1ac6c22ea9ee8697755c8db91701eeb1d83e4887a7a440866decb8072a62e04d865485646431a933b3cf8b0824c5201a79aff0b3790d7afecbc2898f980a24d3529fc5807b98bd8510ad81bcfddfcbb539cc36ee4acdffce46caf7c50d41c58"], &(0x7f0000000800)=""/159, 0x9f)
sendfile(r1, r4, &(0x7f0000000080), 0x9001)

12:51:41 executing program 4:
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r0, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000380)="02045d1d2db45c29d9", 0x9)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
futex(&(0x7f00000000c0), 0x5, 0x2, &(0x7f00000003c0)={0x0, 0x989680}, &(0x7f0000000400)=0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000840)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000007000000040000004804000000000000300100004802000060030000600300006003000004000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="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"], 0x498)
setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000300), &(0x7f0000000340)=0x4)
socket$inet6(0xa, 0x3, 0x8)
prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000440))
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x1000001d0)
sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x240, 0x0, 0xffffffffffffff37)
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x0, 0x0)
r4 = creat(&(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x5)
fcntl$setstatus(r4, 0x4, 0x44700)
sendto$inet(r4, &(0x7f0000000280)="f470e5143cc6b2dc12dfc117a7c3a01d6d7147dd19ba674dda753a87ef7abf11bf941a7cfe013d6fd3ed61a9e45eeaa3c8", 0x31, 0x40050, &(0x7f00000002c0)={0x2, 0x4e22, @loopback}, 0x10)
ioctl$BLKPG(r3, 0x1269, &(0x7f0000000080)={0x5, 0x3, 0x58, &(0x7f0000000140)="73629d72e344209bc2e6c550e8cf032dc1bf1b4bdb3dc1bdf10d7e904c54aeb19f490c5f66386e541424c955231d13cced05521427580aa87313963d82390f76c699a69ca3f0a9ff994582de5f20d638b2cce7155b7410bb"})

12:51:41 executing program 1:
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6)
r2 = pkey_alloc(0x0, 0x0)
pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, r2)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
sendto$inet(r1, &(0x7f0000000140)='f', 0xed6ced1c7ba8118c, 0x0, 0x0, 0x0)
splice(r1, 0x0, r0, 0x0, 0x1, 0x0)

12:51:41 executing program 0:
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x200000000038)
ptrace$cont(0x18, r1, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r1, 0x0, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001400)=ANY=[@ANYRES64=r1], 0x8}}, 0x0)
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff})
write$cgroup_int(r2, &(0x7f0000000180)=0x3, 0xffffffffffffff31)
ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000380))
write$P9_RMKNOD(r2, &(0x7f0000000040)={0x14, 0x13, 0x0, {0x0, 0x2}}, 0xfd95)
ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f00000002c0)={0x4, 0xcf8, 0x800, 0x3, 0x401})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e6c55c5d9eb82ee4510100010029a741a6f62095d6a6127173971ec63e3b371eafae231b4b6efc7ec7269a131bd8b5e31f305ec62d4b40cb525d790e9ca771f6cb2f3309799fad1d0851021e824e28bbd4134ae14f1850"], 0x0, 0x10}, 0x20)
tkill(r0, 0x39)
openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/Vroc/selent\x00', 0x2, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xfffffef3)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r4, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000028}, 0xa080)

12:51:41 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0)
umount2(&(0x7f0000000040)='./file0\x00', 0x4)
socket(0x0, 0x0, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000200)='security.capability\x00', 0x0, 0x0, 0x0)
creat(&(0x7f00000017c0)='./file1\x00', 0x0)
stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0)
lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
r3 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0)
fstat(r3, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x2, {0x40, {0x0, 0x1, 0x6}, 0x100010014, r2, r4, 0x442, 0x10000, 0x100000000, 0x9, 0x4, 0x6, 0x8, 0x4, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0)
lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
r6 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0)
fstat(r6, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x2, {0x40, {0x0, 0x1, 0x6}, 0x100010014, r5, r7, 0x442, 0x10000, 0x100000000, 0x9, 0x4, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0)
lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x2, {0x40, {0x0, 0x1, 0x6}, 0x100010014, r8, 0x0, 0x442, 0x10000, 0x0, 0x9, 0x4, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x50}}, 0x0)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000140)={0x0, <r10=>0x0}, &(0x7f00000001c0)=0xc)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f0000000200)=0xe8)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x5040, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000070000,user_id=', @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r7, @ANYBLOB="2c6d61785f726561643d3078303030303030303038303030303030302c6d61785f726561643d3078303030303030303030303030303030362c616c6c6f775f6f746211b6966469fc7c756c745f7065726d697373696f6e732c7569643c", @ANYRESDEC=r8, @ANYBLOB, @ANYRESDEC=r10, @ANYBLOB=',appraise,uid=', @ANYRESDEC, @ANYBLOB="2c6f626a5f747970653d65716c000000a95b002c7569643c", @ANYRESDEC=r11])
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuseblk\x00', 0x1120240, &(0x7f0000000440)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0xc00}}, {@max_read={'max_read', 0x3d, 0x2}}, {@allow_other='allow_other'}, {@max_read={'max_read'}}, {@default_permissions='default_permissions'}], [{@smackfshat={'smackfshat', 0x3d, '/dev/loop#\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@subj_user={'subj_user'}}, {@permit_directio='permit_directio'}, {@fsname={'fsname'}}, {@fsuuid={'fsuuid', 0x3d, {[0x1, 0x0, 0x37, 0x39, 0x64, 0x37, 0x64, 0x65], 0x2d, [0x34, 0x65, 0x61, 0x33], 0x2d, [0x36, 0x61, 0x38, 0x34], 0x2d, [0x39, 0x39, 0x32, 0x5de0f527938667e9], 0x2d, [0x998f358b3be9249d, 0x65, 0x66, 0x39, 0x35, 0x67, 0x34, 0x61]}}}, {@dont_measure='dont_measure'}]}})
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r12 = gettid()
tkill(r12, 0x0)
r13 = socket$netlink(0x10, 0x3, 0x0)
writev(r13, &(0x7f00000001c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1)
r14 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc)
keyctl$chown(0x4, 0x0, 0x0, 0x0)
syz_open_dev$loop(&(0x7f0000006980)='/dev/loop#\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000069c0)='net/tcp6\x00')
umount2(&(0x7f00000000c0)='./file0\x00', 0xc)

12:51:41 executing program 5:
eventfd2(0x0, 0x2000000000000002)
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0)
ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7)
ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0))
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PPPIOCDISCONN(r2, 0x7439)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6)
write(r2, &(0x7f00000001c0), 0xfffffef3)
setsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f00000003c0)=0x5, 0x4)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f00000002c0)=0xe8)
r4 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r4, &(0x7f0000000080)=""/36, 0x24)
r5 = open(0x0, 0x400, 0x0)
ioctl$TCSBRKP(r5, 0x5425, 0x7f)
openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0)
pipe(&(0x7f0000000100)={<r6=>0xffffffffffffffff})
write$cgroup_int(r6, &(0x7f0000000180)=0x3, 0xffffffffffffff31)
ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000380))
write$P9_RMKNOD(r6, &(0x7f0000000040)={0x14, 0x13, 0x0, {0x0, 0x2}}, 0xfd95)
r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x4)
getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000980)={{{@in=@empty, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in=@dev}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000004180), 0x11f, 0x40000)
setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0)
r8 = dup(r3)
open(&(0x7f0000000240)='./bus\x00', 0x1400, 0x90)
syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0)
r9 = creat(&(0x7f0000000340)='./file0\x00', 0x0)
fsetxattr(r9, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0)
fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x3ba, 0x0)
r10 = creat(&(0x7f0000000340)='./file0\x00', 0x0)
fsetxattr(r10, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000600)='-{vmnet1[cpuset\'wlan0${system$\x00\xca\xa4\xce\xf0\xf2a\xc51\xc0Cl\xfep\x84\xf1\x8a\xf4\x1b\xc3~{2\x01g\x11\x80R\x80\xbb\x03\xac \xda\x817\x88\x01Y^>\x1c\xb8\xc5\xcaw\xc5\xab\xa3x\x90>\x86qW\xa8\xb7\xdb\xa1\xd6xS\xb2:\x87\x12\x03\xafV\x85\xc4\x0e~\x89\x18\x86\xd4\xd2\xc1\x00\xda\x9b.', 0x71, 0x2)
ioctl$EVIOCGABS0(r10, 0x80184540, &(0x7f0000000780)=""/114)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, 0x0, 0x0)
fcntl$dupfd(r2, 0x203, r11)
r12 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$inet6_tcp_int(r12, 0x6, 0x8, &(0x7f00000005c0)=0xfffffffffffffffe, 0xfffffffffffffe6d)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
accept(0xffffffffffffffff, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x12, &(0x7f0000000380)=0x83, 0x1fb)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10)
r13 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0)
ftruncate(r13, 0x2007fff)
sendfile(r8, r13, 0x0, 0x8000fffffffe)

12:51:41 executing program 3:
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000001600)={0x5, 0x0, 0x0, 0x101, 0x9})
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0xd432})
pipe(0x0)
syz_open_dev$loop(0x0, 0x3, 0x51d00)
write(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000001180))
ftruncate(0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="962c85e043d8"}, 0x14)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x2b)
io_submit(0x0, 0x1, &(0x7f0000001500)=[&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000001400)="70b5b9a4f6fe8eb1a832413ffa4254a19acfadb588c557c43e66f2610bb66a84514748c74b14dad908ff451a91b7c3ee7b420f7582559783c6a4ad20589781f812ca27e37981f8301493520b58c60e0e0e0d647acf9e7c3265236ed5ea57a85f9540ab731684ca4d1749414724a4f5d6d280b9fb8561f3b5b2d112474528817c", 0x80, 0x3ff}])
fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000013c0)='TRUE', 0x4, 0x2)
setitimer(0x1, &(0x7f00000000c0)={{}, {0x0, 0x2710}}, 0x0)
pipe(&(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xfffffef3)
read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2)
gettid()
ptrace(0x10, 0x0)
r4 = gettid()
ptrace(0x10, r4)
r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0)
dup2(r5, r1)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001)
r6 = socket$inet6(0xa, 0x400000000001, 0x0)
dup(r6)
syz_open_procfs(0x0, &(0x7f00000011c0)='net/ip_vs_stats\x00')
memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
r7 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x20)
r9 = syz_open_procfs(0x0, 0x0)
getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
read$FUSE(0xffffffffffffffff, &(0x7f00000000c0), 0x1000)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f00000001c0))
openat$pfkey(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/self/net/pfkey\x00', 0x840040, 0x0)
r11 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r11, 0x4, 0x6100)
ftruncate(r11, 0x108200)
r12 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r11, r12, 0x0, 0x8000fffffffe)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast2}}, {{@in6=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000005c0)=0xe8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r10})
lseek(r7, 0x200000000000, 0x2)
sendfile(r7, r8, 0x0, 0xfffffffffffffffc)
r13 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r13, r13, &(0x7f00000002c0)=0x202, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50})
bind$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @dev={[], 0x27}}, 0x14)
lseek(0xffffffffffffffff, 0x0, 0x2)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r14 = creat(0x0, 0x0)
fcntl$setstatus(r14, 0x4, 0x0)
r15 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r16 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r16, r16, 0x0, 0xdd)
getpeername$packet(r16, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0xffffffffffffff24)
lseek(r14, 0x0, 0x2)
ioctl$LOOP_CLR_FD(r15, 0x4c01)
openat$zero(0xffffffffffffff9c, &(0x7f0000001200)='/dev/zero\x00', 0x400000, 0x0)
ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000780)=""/114)

12:51:41 executing program 0:
r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/enforce\x00', 0x502, 0x0)
ioctl$PPPIOCSNPMODE(r0, 0x4008744b, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x2, 0x0)
r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, <r2=>0x0}, &(0x7f0000000240)=0x2)
keyctl$chown(0x4, r1, 0x0, r2)
keyctl$setperm(0x5, r1, 0x2)
dup(0xffffffffffffffff)
pipe(&(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x1420000a77, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r5 = socket$netlink(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket(0x10, 0x803, 0x0)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0xfffffffffffffeee, &(0x7f0000000180)={0x0}}, 0x0)
r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x1b1000, 0x0)
flistxattr(r7, 0x0, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000380)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000007000000040000008004000080020000800200008002000098030000980300009803000004000000", @ANYPTR=&(0x7f0000000300)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb"], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c65000000000000000000000000000000000000000000000000aaaaaaaaaabb0000000000000000000000000000000000000000000000000000ffffffffe000000100000000feffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c65000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000010f00000000000000e0000001ac14141aced20ca8ffffff0000000000000000000000000000000000000000000000000001007f00ffff00000000000000000000aaaaaaaaaa1f00000000000000000000000000000000000000000000feff00000000000000000000000011b0000700061000052f697036677265746170300000000098007465616d30000000000000000000000000000000000000000000fe0000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000200000000000000000000000f000180100000000000000000000000000000000000000000000000000002800434c41535349465900000000000000000000000000000000000000000000ff030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x4d0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_REMOTE={0x8, 0x5, @dev}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000011000104000000001f00000002200000", @ANYRES32=r8], 0x2}}, 0x0)
ftruncate(0xffffffffffffffff, 0x4)
getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000140)=0x8)

[  189.452565] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  189.458928] qtaguid: iface_stat: create6(lo): no inet dev
[  189.470938] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  189.480346] qtaguid: iface_stat: create6(lo): no inet dev
12:51:41 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000002c0)={0x1, &(0x7f0000000080)=[{0x4000006}]})
creat(&(0x7f0000000080)='./bus\x00', 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
pipe(&(0x7f0000000100)={<r3=>0xffffffffffffffff})
write$cgroup_int(r3, &(0x7f0000000180)=0x3, 0xffffffffffffff31)
ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000380))
write$P9_RMKNOD(r3, &(0x7f0000000040)={0x14, 0x13, 0x0, {0x0, 0x2}}, 0xfd95)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'team_slave_1\x00', 0x200})

[  189.539036] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  189.545816] qtaguid: iface_stat: create6(lo): no inet dev
12:51:41 executing program 5:
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00')
fchdir(0xffffffffffffffff)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x5998797748e92786, 0x0)
ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000040)={0x6, 0x43, 0x8, 0x819, 0x80000000})
read(r0, &(0x7f0000000200)=""/250, 0x50c7e5e2)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x81, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
ioctl$int_in(0xffffffffffffffff, 0x0, 0x0)
munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
socket(0x9, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

12:51:42 executing program 3:
pipe(&(0x7f0000000840)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000700)=0x14)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
connect$inet6(r1, &(0x7f0000000380)={0xa, 0x0, 0x1f, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1c)
r3 = creat(&(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x5)
fcntl$setstatus(r3, 0x4, 0x44700)
sendmmsg(r3, &(0x7f0000004e00)=[{{&(0x7f00000002c0)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x200}}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000500)="6bac4c4fdb7fb01213322f0950fed762e47c530ace4145d2aa9709659938ed57694a94c3e2d9de66740f10b53b50d0909459059b89aa32ad897c59bfd5409deab2bc446fa96ec203853ca7ff9dea5553ee73a018d4a2516d1473a54ec3b1f43a9e661489a4556dcdb291f823902551ec7ceeecaef83a9bc4530a2430522e2ff92b754a04", 0x84}, {&(0x7f00000005c0)="81857fbfbeb172f0f3ee543747fa579b7c1d80a24e938dbf83cec4891d8cdf2d2ceaf2aca28503c61f5a60afc52fccd137a0165a8182946d45f87fbd1479577f30131ee77a8977d4ed400cc61bed48e6f51632e22eb456295292e296213b5438", 0x60}, {&(0x7f0000000640)="031a538291cb6cfb050db8c44412dcc3c6d24e2f23b4068b6e899afc14a9c46e078eb513b2661bdc731911a82fee6f04f90a3e4acae68f9288c96e3a9d25c112d94c0ea6de4f9e76375f9a59c10472f17f1f4a62383ea01e6b", 0x59}, {&(0x7f0000000780)="3d0c863cd7896160c821af88757be66d8c3a4b63909c1bcd53790bc0595ff43a0524bd0c0a85670e43e9f185fd725bf3f580a0ff886316d8589a8c3fe35f79c93fc94583247202ed", 0x48}, {&(0x7f0000000900)="f770ac07c87e627d3731a14d2dbeb18e916ea272152466435617fefc25780d6813d7f6c30103d06b66dda286a1bebbbde48a15c5affff7f791e81551c633b04d2530288110193a72a808af62096f5c5aee9c792612bf6c0f6feea3763deb2a9c53f8a5a3d380d47a9fab33570aa56d00f5710072991930168317669b06c4d2b467010d5e6ddf31d52b44f0e4a1ed5093a07e687e15a8b156a42b312ebad50ee015a6d06b7ff5d0ce6b4babefa53f19c700fa77f066d54c8a292156986c7d3dd843b6ab865aaa2e8aec7609e0b1e533cefcd750fb9780a06d7a6de09af33037f55f", 0xe1}, {&(0x7f0000000a00)="3a0dafbbc771a3be5466ac338548e04b39596a8fb0b5c4b4e669edf391da6c09ac76c8459f42f9b29fd8f9d626661a1bcacb039f2436ce8ba380ac252fa94344c38339d9e9a5dbaff06017737d9c7b4b31cfb561638a6ec8d88e3ba9a9938250617452021bc13b4381c05f25982a9615e1929eba3167b92252fc5eb0923596d1c28fddecb1bd823035c0baee26708484d0006bc6274230371e2900cdb0bba0cc43", 0xa1}, {&(0x7f0000000ac0)="710599fb084cbd52727c7b65dd9df250bda5ce68b98e2e5c59bc6bb0650abee338d3e088570d68f17736e125a3d23a2ad2859e2d8171ac14cd0eb23c3478b11051fb7086bc2084", 0x47}, {&(0x7f0000000b40)="51a79a046e9d917a2b1d921700104116e8f92a85efa46685ab2a64d9bfca7d2839613e5fcfc1951480499da404236be5e3390d3dcc5b0fcfff26ed25090c5e3ceab547b9fd051d29a45a7bc187814ba14d87a70416672fc0529bdf1c8c6d7e8e9e7e49e74045e36e0ce9f2da519c71eff76f41b26fb5eac7a04621721a7a8d090c4c902abad5268ec3288a9ba2569544325e93440fd6ebd3b5e6e0048bf01e34a8abf628d23403afb9a8a94229cdc51c348688a06bd1a3c9c8d2f6d9e6e458c6814fcb3bc84b2f8656602eb9", 0xcc}], 0x8}}, {{&(0x7f0000001d40)=@in={0x2, 0x4e22, @rand_addr=0x6}, 0x80, &(0x7f0000000180)=[{&(0x7f0000001dc0)="e27e70d1192dd2dc491d7382a9bbea1cdab5a6774ddad506dda8d3ee71a285cd804b56658f3527b896764a8fd5ebca542abe86cbd99ae1825ecd0be2aaa18eaa94fda1dbdb93cf98b3660073bad5704e93b9570f2e3b0d40032589b66b051de3d5490f59c8f67d65686ca32afe4cc20ac2455f7543e97b26095640af8f83599c9ce407477191d4105b45cb1611ec38a52fd98bf9a308b6872d614f9f0ed7e5513b31c9ab41206aae7b87af0e65ac54fa12b8c358705918204063008472c8bcaf5ffc2a97e3340dba5f59678d29ba9a62786c", 0xd2}], 0x1}}, {{&(0x7f0000001ec0)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0xfffffe4d, &(0x7f0000000200)=[{&(0x7f0000002e00)="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", 0x1000}], 0x1, &(0x7f0000001f40)=ANY=[@ANYBLOB="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"], 0x108}}, {{&(0x7f0000002080)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x10001, @loopback, 0x5}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000002100)="bdf3cc0b14197095fd373f31335d2b6ff7c23e8a58202963c0a296c67321fa72b654def2d224fe6b1858d63343af462a4f8c118f0c7a09432d655c380119f49acecbb4162eebadf7bda3d33e1a921821930db3fa717df13a83be147687a2ff96587e21ef5944ae30b19d9bdbd86c60afe1bc19667f2a267c27232f4324c20623a3094beed2f2b5d4638f4bd782ae3105dcec17e319ff444fc08a03dcea7b2903c56cb8bcc1b9de59630c151e72b9f3a321e6dd253ee12d6bf2bb143598ce541ae32f1c30f776302abab6ab6f303c4b37ab1fd883c07f9933632a5b", 0xdb}], 0x1, &(0x7f0000004f80)=ANY=[@ANYBLOB="a000000000000000e3010000ff0c000039f9b4942e9636347124550b81ece3867c808e248e84872de4934da6e86cb3263570a6d461a729a2b98ce3f4296af43b816f778ae9ef9f0a7cad307262c9afbf9c944e5809f599feb7cbb35b739ebad70248742a21170015a81cbc38f4da2b86111319dafe86234d5bc6f7e1551a327a4ac166a8163e04cd96bb25fc3de49100b800000000000000950200000180000031ca566ce62447a3b3b67a67124354006e4c50f278649b9ca41e1b9a5daee8070c2974884f06a9a5e9c84ca4289e24b92dd958f6c8c321f8dc6d7a031ce3a2f013302157e159f9e2f9362a9a6cf2cfa5d301c26dbdd3a2ccab9ab493bea577f6fd0aa5481d45dc2c783c37a9865b64ae8c30f86e93b8222bce423f3abfdeebfc38fecf6cfa21efcbbdfa3aa0668c11b154d516f3a5f0a123d815e1c1d3ae8aed52c4e80000000000e8000000000000000a010000732300001b0c13ec4a053bd14888472c4a52010aad7d418cc375bcabd4282798be6f8d0f50d53a88a55d7f426f0c6a5a479114048f47b4aadf4d1f809604b0a5e9b479199d93a2989aebc6842f1c23cdb509b7eed51797a753a479a9590229c7bd5468a0cd1947040870ffff45dab066b0ebe4047ed7bf82c3d89478fbf41bc50e75df0cde99a4a8054df5afb68a62022ecccf4f1b4bdd5c1c7cb8cee7c401285c4df5d2b8067f5f08a306135fd5cf101a4399b1428f2fd6ddade8e7d668386356764d9dfedbed1328180210e9fd135561768bb4c65769a166913ce8d3055a00"/579], 0x240}}, {{&(0x7f0000002440)=@rc={0x1f, {0xa9, 0x5, 0x1a, 0x81, 0x3, 0x8}, 0x7f}, 0x80, &(0x7f0000000480)=[{&(0x7f00000024c0)="bce8cd5952806c49a34a20bb2990ddc9752bb2c7d2902e3b01c9baa8080951812ba0b15dad1b734514d9589d380923ccc0443a39ffed1844abd3c13a22e7a4cf54a8b59a0c0a2d81898ad001dc4d952f7fb976876a66efb1493e786125b5843a5b0f40a3168d7126207015a76297e95a8b176b1692f19a8049fce2d4c2ecfc1b28a75a56a0ff4cbf4452c24671b05f40135db981666680bcd13cec2cf96a26a54f235275ead0d6cbeec84db6128c49782c87eeb2b0dc80c9561284847a8753feb42435", 0xc3}, {&(0x7f0000000400)="779b781f", 0x4}, {&(0x7f0000003e00)="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", 0x1000}], 0x3, &(0x7f00000025c0)=[{0xe0, 0x6, 0x7, "ae5d7ba92a1d20c4df121c2dca95173bc8e28ef48c832b984d360520e0b60389a37e2bf612cb5a0111e66eae1de10eba243cfae3c5a0766f6ec5f606d9964b53827d896861a3dc40ead5c5351bbf20b69a5e56c21b578a700339f5065e03b729a42fdc13d0dd58f7f75b70bb05106d12712e1239bae619cda739f1856c7aa344880631f07853affab15a1c0b9de14b7252a5cf93a084803bbd0e12c0c6495869e57996637f067c0fe1b761676dfdcbeb2514c0e9d708f3f31ec634b9adf55bbcece107ba9d1e0d2abfa557f24767"}, {0x88, 0x101, 0x2d, "eb5d432812ad1d99ad7dd9e2bbeedaf9654645fe2ac8fe36fe7a64a057a159f528f150900d21f01bd2a79490465a1798d0ecb6bb2fd0bd17f3a7b8c5c4b72d663f1104a33a032635498cf17208a18844faf93746f1895c6d341c2adce91b76b507f25c8c1d6de88215e5170e04ae237e82abf8fe"}, {0xf8, 0x10f, 0x8001, "92d3a9d3113ae501f5d070fba497b86d7a2261e6c32fcd37cba1d8010b852750bbbb95713b8f1b99014a96ecf8e8d0549ef532473613401758d96e0bc90f84c10ae54a488a2095e5aa7b7975ced93b8443619f4610115c0943c66cd9b05775218056edf6f74ccf23fb15b23f224b3254faf6d7c30c7f53e549d143a3ec435ef7fe87e9be12ac279977e5f68b12de01e2b5511eccfc3cae732071fc4c2532a82c814c76d2445fa023d6d7ce1ecadf832d45aa74e126cb6c15f64acd6b17649e570f3d94986c5da9c4ed83d99a4ba80894eb2322aa4addb636b3f5b19123e59bc63c6a908b"}, {0x98, 0x115, 0x69fc, "6ef502678e52e8e78f55150c317df152a65ecd16fc95144c97c778c3f575115c68c10fd91d74f581549b93f1cdbe8e5bd9646f67aef92dde6d32031c6c96ffd89da32c60cc167dc7ea0d5c67adc75b778c7e9ab991c980ba7d4b4cb3e54af625a56bfe247feca8c5d304e6d113318aa264576fb541381c13a3c4d0a8b2e5dd8666"}, {0x20, 0x0, 0x1, "c98423d966707a07958584d5"}, {0x78, 0x114, 0x849, "51f62d176a76c7d0ec13a37b9b7735e2b644d6a078795c07e90a93ef4941be6a74600daddfc111e8a6b8e6f39fcf9d13ac73d09369da95d709f64a57a4cd9dec7e1fcc41d05e53121df3f22e4b3458687763b38cd76c7ffede010d8169bb542944abc19b39"}, {0x28, 0x119, 0x2, "f38361f97c77d5af2da40269a70ed62e8a2def3dcc12"}, {0xd8, 0x10c, 0x7, "350f6600e7f45c3d1b36c8b8c6a2cbedccd4e21658ba574e79d273895c65bb1114e2e1fb95d6eebc7fe530725375f31db524b442266d612ea598771da0f9b6a5e42675bd18c1789b9e3f8e54ec8828863dec0ddaf515ae4af8f96da172f7a2ea24017c2cf3a3f4b4dd1d22190caea78e47adde5e44cded02225fa9604de4f355c64afb72a68d395003542f7442c2ab8991ebfa0b437928d0d1286a6181e5418e8e8d7076bfed020c433ca0aebeb6ac4ff1f8f6441437561ef4cf087e3315b779c486f605c2"}, {0x38, 0x182, 0x1000, "2a604d8354ad1bf44d1b838fb903f7213c701fa18a3847830879abc7e88f3a4e84b43ffe3f7a33d8"}, {0xc0, 0x104, 0x20, "c04a807b6cc25bb2781742d8e272324851cdd99b130a7bd6546f8c9bb42bf5f7516722a067cac88aeaebfbeefdd68219b243091a4b3800d9eee625231baad486620990c2591cf611b45469685dceea2e50f88f35371aeb482718cbb78ef9453f162402b63a7f431701005b62a47999a58a496120102d99db8f19a1e86c56ce06b8e317d5b2f3c145aa740b6334dfd1d9993160caca080dae074ad182b706f0c8dceea90971e927728bfa"}], 0x588}}, {{&(0x7f0000002b80)=@in6={0xa, 0x4e21, 0x2, @mcast2}, 0x80, &(0x7f0000000800)=[{&(0x7f0000002c00)="1ccbbbb30d703894b32968994ee0883029274bb1384d2835038932be5097c513178f555ac96351cbec9dd92363bf71284cf3f6d80d15a27e674444cf0be4cbdc67b2f81b5d43", 0x46}], 0x1}}], 0x6, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
connect$inet6(r4, &(0x7f0000000380)={0xa, 0x4e24, 0xfffffff9, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000740)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x35, r2})
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x800000, 0x0)
chdir(&(0x7f00000003c0)='./file0\x00')
r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0)
write$UHID_INPUT(r5, &(0x7f0000000c80)={0x8, "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", 0x1000}, 0x1006)
sendfile(r5, r5, &(0x7f0000000240), 0x2008000fffffffe)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0)
ioctl$RTC_VL_READ(r1, 0x80047013, 0x0)
socketpair(0x1, 0x0, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @random}, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000740)={@mcast2, 0x5f, r6})
getsockname(0xffffffffffffffff, &(0x7f0000002d80)=@can, &(0x7f0000000280)=0xfffffffffffffdd5)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
dup(r7)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f00000004c0)=0xb59)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
write(r8, &(0x7f00000001c0), 0xfffffef3)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
write(r9, &(0x7f00000001c0), 0xfffffef3)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000000080)={0x0, <r10=>0x0})
syz_open_procfs(r10, &(0x7f0000000140)='net/sockstat\x00')

12:51:42 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x80000000000003}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x8000, &(0x7f0000000040)={0xa, 0x200000004e21, 0x0, @ipv4={[], [], @initdev}}, 0x1c)
sendmmsg(r2, &(0x7f0000000240), 0x5c3, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000031c0)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f00000032c0)=0xe8)
prctl$PR_GET_SECCOMP(0x15)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800080}, 0xc, &(0x7f0000003640)={&(0x7f0000003300)=@newqdisc={0x310, 0x24, 0x4, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x2, 0xffe0}, {0x0, 0xfff2}, {0x12}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x337a}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x209}, @TCA_STAB={0x188, 0x8, [{{0x1c, 0x1, {0x6, 0x3, 0xfffe, 0x3, 0x3, 0x8000, 0x5, 0x5}}, {0x10, 0x2, [0xb9ed, 0x7, 0x101, 0x7, 0x3ff]}}, {{0x1c, 0x1, {0x20, 0x8, 0x27a, 0x44f, 0x2, 0xffffff81, 0x80000001, 0xa}}, {0x18, 0x2, [0x0, 0xffff, 0x8000, 0x9, 0x3, 0x9fad, 0x7fff, 0xffff, 0xf69, 0x6]}}, {{0x1c, 0x1, {0x1, 0x7, 0x1, 0x4000000, 0x2, 0x2, 0x2, 0x2}}, {0x8, 0x2, [0x1000, 0x101]}}, {{0x1c, 0x1, {0x20, 0x5, 0xc5b, 0x3, 0x2, 0x4, 0x400, 0x7}}, {0x14, 0x2, [0x8, 0xbfef, 0x3, 0x80, 0xa63, 0x2380, 0x8]}}, {{0x1c, 0x1, {0x7f, 0xe0, 0x6, 0x6, 0x2, 0x5, 0x1c160, 0x6}}, {0x10, 0x2, [0x4, 0x1ff, 0x7, 0x4, 0x7, 0x7f]}}, {{0x1c, 0x1, {0x40, 0x3, 0x8, 0x100, 0x0, 0x0, 0x9, 0x6}}, {0x10, 0x2, [0x6, 0x7, 0x8, 0x7, 0x6, 0x9]}}, {{0x1c, 0x1, {0x1, 0x7, 0x20, 0x3, 0x0, 0x1, 0x6, 0x6}}, {0x10, 0x2, [0x7, 0x20, 0x3, 0x1ccb, 0x66, 0xfe01]}}, {{0x1c, 0x1, {0x7f, 0x0, 0x33e, 0x4, 0x0, 0x0, 0x5, 0x1}}, {0x8, 0x2, [0x7fff]}}, {{0x1c, 0x1, {0x3, 0x7f, 0x9, 0x1ff, 0x2, 0x1ff, 0x3ff, 0x4}}, {0xc, 0x2, [0xa9, 0x9, 0x2, 0x7]}}]}, @TCA_STAB={0x28, 0x8, [{{0x1c, 0x1, {0x0, 0xf8, 0x2, 0x7fffffff, 0x0, 0x200, 0x2, 0x1}}, {0x8, 0x2, [0x200]}}]}, @qdisc_kind_options=@q_ingress={0xc, 0x1, 'ingress\x00'}, @qdisc_kind_options=@q_gred={{0xc, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "393fb2aed9baae598b348a571317ab31350d912205b8676f23760d7211a35a7aaa1b9b7ad5c348b06d90a6da70f15cf832091e36fdb9ec4434585927ca8cc37801773ebaf8c4e9d3b482c1c978af6676e84ad5b0ab70e96816a906a78e88fe4a1f1aa3b2e1ca81e6ce0ef87a727c8c3be1ec90f3af51d88e80e03dce2ad689e7e89c4c2251ff98aff729d37a5e79a38b55e9bb3320ebba57f6899d1000eb323180612755d099717a1a5305ff21260a9bbfb306776c877114c49b287ff561be8f54984b778a12bd8bc9243c1e2b11a448714fad8f9e21f7136e8ac91f6cc8c7940540bd3c98818c39a3ad2977ba59903964a582285bb210310d9f19814602239e"}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x310}, 0x1, 0x0, 0x0, 0x4040054}, 0x4008000)

12:51:42 executing program 2:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r4=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="c700000014000b0d00610021000000000a400000", @ANYRES32=r4, @ANYBLOB="140001000c0057c5c080d65c09f028b995000001080008000c03"], 0x3}}, 0x0)
pipe(&(0x7f0000000100)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
write$cgroup_int(r5, &(0x7f0000000180)=0x3, 0xffffffffffffff31)
ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000380))
write$P9_RMKNOD(r5, &(0x7f0000000040)={0x14, 0x13, 0x0, {0x0, 0x2}}, 0xfd95)
r7 = gettid()
ptrace$setopts(0x4206, r7, 0x0, 0x0)
tkill(r7, 0x200000000038)
setsockopt$IP_VS_SO_SET_EDITDEST(r6, 0x0, 0x489, &(0x7f0000000200)={{0x0, @multicast1, 0x4e24, 0x2, 'lblcr\x00', 0x0, 0x708, 0x13}, {@remote, 0x4e23, 0x2000, 0x372, 0x9, 0x7fff}}, 0x44)
ptrace$cont(0x18, r7, 0x0, 0x0)
ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r7, 0x0, 0x0)
r8 = getpgid(r7)
write$cgroup_pid(r5, &(0x7f0000000080)=r8, 0x12)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

12:51:42 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x46800)
listen(0xffffffffffffffff, 0x0)
mlock2(&(0x7f0000724000/0x2000)=nil, 0x2000, 0x1)
write$FUSE_INIT(r1, &(0x7f0000000000)={0x11c}, 0x10027)
ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0xffffffff)
clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x102, 0x9032, 0xffffffffffffffff, 0x0)
recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/218, 0xd7, 0x11, &(0x7f0000000240)={0xa, 0x6e1f, 0x3fb, @empty, 0x1200}, 0xffffffffffffff06)
socket$nl_xfrm(0x10, 0x3, 0x6)

12:51:42 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2)
r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
fstatfs(r0, &(0x7f0000000140)=""/4096)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, &(0x7f0000001640), 0x4)

12:51:42 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'bpq0\x00', 0x420000015001})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48feffff1000000400"/20, @ANYRES32=0x0, @ANYBLOB="03050000802c0400007c20697b43fc9a563c58a4bacbb3007ba781b2193be0e87613a305000000000000003da830d9a2bee94ce357a8a0b4b45b7882345b82a48a9f9506d15584281fa817825f8e2ccf0302d2a0bd328801208450ad484cf28558a9f4a79c0389a353ca8b52e41d51ab3f0f41793dd71d85107318cbf956a1ac7f0f99b15199e6bfad11340000000000"], 0x28}}, 0x0)
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff})
write$cgroup_int(r2, &(0x7f0000000180)=0x3, 0xffffffffffffff31)
ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000380))
write$P9_RMKNOD(r2, &(0x7f0000000040)={0x14, 0x13, 0x0, {0x0, 0x2}}, 0xfd95)
ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000040)={0x1, 0x3, [@empty, @broadcast, @broadcast]})
r3 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x20000)
ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000140)="3c9c1005ef12e44915e3fee44fde2ec6ac3d58aef980e8652bb79a6990461159300487adf1de88f80d9f2d5704297b0b760973c6f30b993c2b220db95572c850d5431169abc0fab8c2ed1e8f2fbd6814fd6080b519a6cd86b9433ae608d6d8aaf8f1275e4b362ea6c51dd7382d031d7f4ceddae458be236e69cc863ab82b30b779dddbdc80c51f6ebd28933b5f62dcede7ce05")
write$tun(r0, &(0x7f0000001880)={@void, @val={0x0, 0x0, 0x2}, @ipv6={0x0, 0x6, '=tg', 0xf98, 0x2f, 0x0, @rand_addr="2ceb79d676d5fc72a0adf849622d054a", @initdev={0xfe, 0x88, [], 0x0, 0x0}, {[@fragment, @routing={0x0, 0x4, 0x0, 0x0, 0x0, [@rand_addr="c9aaa320ce8700b77d07c1fcabbc18a2", @loopback]}, @hopopts={0x0, 0x1ad, [], [@enc_lim, @pad1, @pad1, @calipso={0x7, 0x20, {0x0, 0x6, 0x0, 0x0, [0x0, 0x0, 0x0]}}, @generic={0x0, 0xd3c, "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"}]}], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xfe, 0x0, [0x0], "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"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0, 0x0], "9c33693197bb170a70cfec811fc2dded2642c4f5a8d3bedf8dac21f48a123c41ff5c5072c00adf60a4747fd02f754484e8ca84c7f3bfb5836714afed794aa9173814c857cc86bec1d653f5f673cd3d92f12a2234a7edc2adaab4be0fec3c2f62ff4d681d28499c0548e0e0583690dfc50c67bb3c062fe2659227485e2a45e0b1bb6bf171dd8ba1e979e1483997245ff6394e63c4947339cc"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0, 0x0, 0x0], "79d3201c5d8c8554e62d"}}}}}, 0xfca)

12:51:42 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
getpeername$netlink(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
fgetxattr(r1, &(0x7f0000000300)=@known='system.sockprotoname\x00', &(0x7f0000002480)=""/4104, 0x1008)
readv(0xffffffffffffffff, &(0x7f0000000100), 0x0)
pipe(&(0x7f0000000040))
openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x40000, 0x0)
write(r0, &(0x7f00000001c0)="1f0000001e0007f1e9f5ff02000400000000000400ffffffff0003728d0417", 0x1f)
getsockopt$netlink(r0, 0x10e, 0x6, &(0x7f0000000200)=""/223, &(0x7f0000000080)=0xdf)

12:51:42 executing program 0:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x100800000000002, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x7ff, @dev, 0x6}, 0xffffffffffffffa3)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
sendfile(r1, r2, 0x0, 0x88008)
syz_genetlink_get_family_id$team(&(0x7f0000000800)='team\x00')
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000300)=0xc)
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x200000000038)
ptrace$cont(0x18, r3, 0x0, 0x0)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r3, 0x0, 0x0)
fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000240)=ANY=[@ANYRESOCT=r3], 0x1, 0x1)
r4 = socket$inet6(0xa, 0x100800000000002, 0x0)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
r5 = gettid()
ptrace$setopts(0x4206, r5, 0x0, 0x0)
tkill(r5, 0x200000000038)
ptrace$cont(0x18, r5, 0x0, 0x0)
ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r5, 0x0, 0x0)
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x200000000038)
ptrace$cont(0x18, r6, 0x0, 0x0)
ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r6, 0x0, 0x0)
r7 = syz_open_procfs(r6, &(0x7f0000000640)='net/rpc\x00')
sendfile(r4, r7, 0x0, 0x88008)
r8 = socket$inet6(0xa, 0x100800000000002, 0x6)
connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x2a3)
r9 = gettid()
syz_open_procfs(r9, &(0x7f0000000700)='smaps\x00')
recvmmsg(r0, &(0x7f0000000e40)=[{{&(0x7f0000000680)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/88, 0x58}, {}], 0x2, &(0x7f0000000480)=""/145, 0x91}, 0x4}, {{&(0x7f00000005c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r10=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000001240)=""/102400, 0x19000}, {&(0x7f0000001140)=""/228, 0xe4}, {&(0x7f0000000780)=""/72, 0x48}, {&(0x7f0000000840)=""/195, 0xc3}, {&(0x7f0000000940)=""/223, 0xdf}], 0x5, &(0x7f0000000ac0)=""/38, 0x3}, 0x4}, {{&(0x7f0000000b40)=@pppoe, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000bc0)=""/10, 0xa}, {&(0x7f0000000c00)=""/215, 0xffffffffffffffc7}, {&(0x7f0000000d00)=""/159, 0x9f}], 0x3, &(0x7f0000000e00)=""/50, 0x32}, 0x1ba}], 0x3, 0x3fb05f2ddf34c342, &(0x7f0000000f00)={0x77359400})
bind$inet6(r10, &(0x7f0000000f40)={0xa, 0x4e22, 0xfe3, @rand_addr="452ee7dede4ef53a9af20a6898143c8d", 0x81}, 0x1c)
r11 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
r12 = accept4(0xffffffffffffffff, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80400)
sendfile(r8, r12, 0x0, 0x1000000000000000)
socket$nl_route(0x10, 0x3, 0x0)
bind(0xffffffffffffffff, &(0x7f0000000080)=@l2={0x1f, 0x81, {0xa4, 0xd9, 0xef, 0x5, 0x74, 0xff}, 0x800, 0xcc}, 0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
r13 = socket$nl_route(0x10, 0x3, 0x0)
r14 = socket(0x11, 0x800000003, 0x0)
bind(r14, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r15=>0xffffffffffffffff})
write(r15, &(0x7f00000001c0), 0xfffffef3)
faccessat(r15, &(0x7f0000000000)='./file0\x00', 0x2, 0x1400)
sendmsg$nl_route(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f000001a440)=ANY=[]}}, 0x39f7272f5d37483d)

12:51:42 executing program 2:
socket$inet(0x2, 0x1, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10)
sendto$inet(r0, 0x0, 0x328, 0x20000ffa, &(0x7f0000000400)={0x2, 0x0, @local}, 0x10)
r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
dup3(r3, r0, 0x0)

12:51:42 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x924924924924c31, 0x0)
r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
poll(&(0x7f00000000c0)=[{r2, 0x80}], 0x1, 0x0)
close(r0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x221080, 0x0)
openat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)

[  190.264122] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'.
[  190.274902] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'.
[  190.289380] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'.
[  190.299397] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'.
12:51:42 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0c631d650000aa49257eb3399e3b4333acc8ac35085fdf46b95be623d82e3c2a7dec38ec9d78eea3c98bfb69313ecf82665892f3f3b13f91f27091c405dbef6bfd258e08a7c71e5ff9fe6ea1d4084b3ea16fddb9a7010495dbd8a3172d65b0d7b5eaa022a25b24204bf5a2d45744a2db0a574e8105229192f8540a1c0e3611b44e088002218620a414a7fb079df398d6a58d5ceeaeb43f1dc2fa6bc8c9f070fccc085bcf3e957464b35f8e536eead36fc287f79752b3"], 0x0, 0x0, 0x0})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x1c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440000000000e630c400000000000000000000000000f630c40"], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
rt_sigsuspend(&(0x7f0000000000)={0x20}, 0x8)

12:51:42 executing program 1:
prctl$PR_GET_THP_DISABLE(0x2a)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000140)=""/184, 0xb8)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000029c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002800)=[@cred={{0x1c}}], 0x20}], 0x265, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00')
preadv(r2, &(0x7f0000000480), 0x0, 0x100000001)

[  190.379074] binder: 8462:8465 unknown command 1696424716
[  190.392766] binder: 8462:8465 ioctl c0306201 20000100 returned -22
[  190.396706] binder: 8463:8464 BC_INCREFS_DONE u0000000000000000 no match
[  190.396713] binder: 8463:8464 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  190.396723] binder: 8463:8464 got transaction to invalid handle
[  190.396731] binder: 8463:8464 transaction failed 29201/-22, size 0-0 line 3013
[  190.401767] binder: 8463:8467 BC_INCREFS_DONE u0000000000000000 no match
[  190.401775] binder: 8463:8467 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  190.401785] binder: 8463:8467 got transaction to invalid handle
[  190.401793] binder: 8463:8467 transaction failed 29201/-22, size 0-0 line 3013
12:51:42 executing program 2:
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1420000a74, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4, 0xfd}]}, 0x30}}, 0x0)
ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010)
fstat(0xffffffffffffffff, &(0x7f0000000b00))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x80000, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read'}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x400}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@dont_hash='dont_hash'}, {@smackfstransmute={'smackfstransmute', 0x3d, '{vmnet0[selinux(wlan1cgroup\xf1(Rwlan0'}}, {@dont_appraise='dont_appraise'}, {@uid_gt={'uid>'}}, {@audit='audit'}]}})
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

12:51:42 executing program 1:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='#! ./'], 0x5)
prctl$PR_SET_PTRACER(0x59616d61, r0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0)
close(r1)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/member\x00', 0x2, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

12:51:42 executing program 5:
r0 = socket$inet(0x2, 0x3, 0x80)
setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000040)=0x9, 0x4)
bind(r0, &(0x7f0000000580)=@in={0x2, 0x4e60, @local}, 0x80)
write(0xffffffffffffffff, &(0x7f0000000100)="5843c7cfc820677f1d6667a6333bd71730405b5e88b6ef14d6bdcb73740034245aeb00c2c5dbc1064b7f3b533567da9f3ad6c03d10848de3ce41f59ce0759b73243a488cd2ce9e3aca2114b5973c527752fd3ed61d78dda3dd40607d5e8d4d14d4869868e26ebd48d3957ea498f3672a89a36c21b6ce24170a6ad565f29efb83c7632da3ec17d7f6bc619e743b9b6c55bb00e7d901fb0a1fd99f54fabbbea6d9e088b4f9663ddd989d68ced7235fc6c46b232265a8e7c6d2dc51", 0xba)
setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x7, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10)
recvmmsg(r0, &(0x7f00000018c0), 0x2, 0x140, 0x0)

12:51:42 executing program 3:
pipe(&(0x7f0000000840)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2)
ioctl$VT_ACTIVATE(r3, 0x5606, 0x8)
fcntl$lock(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000700)=0x14)
r4 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
connect$inet6(r4, &(0x7f0000000380)={0xa, 0x4e24, 0xfffffffc, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
connect$inet6(r5, 0x0, 0x0)
r6 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r6, 0x4, 0x6100)
ftruncate(r6, 0x108200)
r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x8000fffffffe)
sendmmsg(r7, &(0x7f00000092c0), 0x0, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, 0x0)
chdir(&(0x7f00000003c0)='./file0\x00')
r8 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0)
write$UHID_INPUT(r8, &(0x7f0000000c80)={0x8, "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", 0x1000}, 0x1006)
sendfile(0xffffffffffffffff, r8, &(0x7f0000000240), 0x0)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0)
mount(0x0, 0x0, 0x0, 0x18000, &(0x7f0000000480)='ramfs\x00')
socketpair(0x1, 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000740)={@mcast2, 0x2d})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005d00), 0x0, 0x2821)
dup(0xffffffffffffffff)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f00000004c0)=0xb59)

[  190.694236] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  190.703611] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
12:51:43 executing program 4:
pipe(&(0x7f0000000840)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
prctl$PR_GET_FP_MODE(0x2e)
write(r1, &(0x7f00000001c0), 0xfffffef3)
ioctl$LOOP_GET_STATUS64(r1, 0x4c05, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r2 = creat(0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000740)={@mcast2, 0x5f})
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f00000003c0)='./file0\x00')
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000c80)={0x8, "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", 0x1000}, 0x1006)
getpid()
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x6)
ioctl$RTC_VL_READ(r1, 0x80047013, 0x0)
mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000380)='./file0\x00', 0x0, 0x40, 0x0)
ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0)
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
socketpair(0x1, 0x0, 0x0, 0x0)
prctl$PR_GET_UNALIGN(0x5, &(0x7f00000000c0))
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0)
stat(0x0, &(0x7f0000000580))
write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000001300"}, 0x1c)
sendmmsg(r3, &(0x7f000000ac80), 0x800000000000273, 0x0)
dup(0xffffffffffffffff)
ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0)

12:51:43 executing program 5:
setxattr$security_smack_transmute(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='sK64TRcNSMUTE\x00', &(0x7f0000000200)='bfEE', 0xffffffffffffff53, 0x0)
pipe2(&(0x7f0000000900)={<r0=>0xffffffffffffffff}, 0x1)
accept4$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000004c0)=0xfffffffffffffe57, 0x800)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
r2 = socket$inet(0x2, 0x10000a, 0x40)
sendfile(r2, r1, &(0x7f0000000000), 0x1)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000080))
syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0xc000000000, 0x42)
r3 = getpid()
ptrace(0x10, r3)
ptrace$cont(0x420b, r3, 0x8, 0x20008000)
r4 = getpgrp(r3)
r5 = syz_open_procfs(r4, &(0x7f00000002c0)='mountinfo\x00')
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000380), &(0x7f0000000540)=0x10)
preadv(r5, &(0x7f0000000580)=[{&(0x7f0000000200)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0xffffffffffffffc9}, {&(0x7f00000005c0)=""/253, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x4, 0xff, 0x1}, 0x20)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f00000000c0)=0x1, 0x4)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x0, 0x0, 0x2, 0x1}, 0x20)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x5, @dev}, 0x1c)
ioctl(0xffffffffffffffff, 0x1, &(0x7f0000001480)="84899b970f4fdce7b293ef9c4aa8a3a241bcb865c6b9c0fab2c461d0fedd8d32cf84832fda53ea1e0f0fc012cc55e7b2beabef5f11c643c9a038f6a142de38e52a0da702e45973c48f44ed4e99f2417537579fbd3eb4a81afdd81e12710f02cabd0fb130cf6144ecd1e933ee2638133cef9ec90f306cffc560d0f0d110ce3b1cd49ee360e608cf6a01a478f73cf23497f6ef8a950a6eaf0252a23b0cbf10d3fc79b058a31d8fdde5774a7bc4383f9e23ca489c164ab9bde3e88a5dca215d7d48874a63a419842306f527a115d4a828b162b0524108754fcbddc6927e9a7056740d2e910bc26f344cea8c2ac48b63cd5f5f8a4d2531111e89e05474e7063c255161c38c93525e09c402c552745790a73fa2cdd4d1da24b03fb5253671660c21ca05e163b75ae3e3b9b9f4dc6dd8333f44caf73f167c65805a35f5423e2ae36f9a87fc8623965777e3c64414ea8aec92e1b27784e239a3ed7452789b99ed0b43719b947488d41b53e52ad14389635df09c06807b86721edb1a058e7505ba1a0e8fdbb87d36dabdb8a6141ea9ab330804575c11dc069cebe80289c41905358ea219a7adabc11aef678d70225a2f2356e17ea76ff7ca0c3ec2a53814887050da33d16eff2040a1b3ddcf35a3ed7773d4b29546190a73f3dfd405749a88bd4cafe6e5cf02bf94fba9c9c9c434563f3b0d7db55f6dc9a53b2713fda236379542240c97cfa69949c32806d2a56e03cc5deaac1637c7ac0cd7613bb86a6ad17efa4da6aa3b22d5995aa9e5a9a94be0f0511d0085249c648ee28523081de36f97b367accd8734ac49e0604c4d338376c5acfd3b4a9927c04156c6fa83dbae2b34dad98b176b4d0e9332158aa0084215e64290ae842d54f93a42941506aa8ca24167f090bf2189b055d95d3dea2ac5a0425aa1cccc3bca188ffc1e8759df0bc0eb8a6cee2f640314c06010af78477713b3f77603d970476aea75c20a64658f35cc3e26219e8d58a0c62b502a948e6b02aea864162370380e50ada0783e9f2675fd45aef18734297af17cc34ad5aaed91c4b08047ddd55998ca03abab1c6bff4015500f09f765b711e635190c8b471efb6fd5e048d7e06cbce402810cef5d03392429db3334609a6cc591fb6830df0c80a52623ff095a8e64de0fa974c26f3bca7a61a8920eb3b5a726fd16d10d9447a8fbfa80c70b57d459de5bfee92da2a76b7c01d14f9d0d26ba129f608afd492d2383c481182ee4401ee9b8e25440c53eb37bf2635ab366910c541e254dcefb86f97a74a7355ab760a02cba5ab772df6c03ca25ca3c54c9c1eeaee774014d9df4f54ad71d4ea0a6e8e64d644e8402f1e31100be3be79e6ee5cf3e05c9a83436a81898292fc2271e08df13e5076a30220371bdc8b7f3f1dbed6ee90e66478d5c49d2a8064a054d98103017dd65c6d49ac4f2c752529aee8a811ab2b96a381c3ec52f636b318db0665d821d24f8be459fcf8e4c4908b2b6d600ad5d97e05042924a7aacf8dc71794d6b0e60a56501ddca67cacc540c09ce0c1a226087d97238f7c57b0587de5df17b7d5be24d10147444ccddea20071896b1f01d1d0762d18f9ca574c967aee78664b9339274db18f5671aab1ed16b2b5351bada79929d8bfe8ca52f0599f3e97e4fca1feed9422d6ab26a1dace22174bc8e64aa808c07a8ebf55632afc86114d67b89034474e1f8dcfcc929cf236334b9eeb57c1862eeee8c4406c953916dc015f2672011d31acf52c1d9ea7f89b9eee3b1ce5eb97022f195f5c245cb5f95832ebcf37d6b0795bf27981d355d15f47a6a51acd191278ddd0e4bae77e93d552c0b35f46b9075c4cf9eab74916e898dcf1a090723ae6d4f8c4cb1a27e37b0602b22efe5515afe0f1ef0680748c05bea63a5a3c85d8b23f03aacca5c2b7a4d9be9df28a4e4260b33f5dd3837dacb1491d5c2a98d6390fb5a9b5b923f3bb2cb68def8036ed51f9e13522e93d5c99da49ae24821d17fc48ddd0bf801e7c0d141d07586e1b599e9220760fb3a562090ad2b019c34f7f01d04ab4fc2b25b66172da92dcb91e842067f76344a9361d3338117fe22fc369ca3a4fede410a1f4ced513c9219fa0d9f34fab72fb4cbf882bbb7ec2126a7ffbc3f3721e9cad8ba545f26be13a64452fa18142895d102f98d6b969bea4cf0aaa264df09e35d1c8e670d7a6394215237fa35dfac8fcff15cae362525f49af00533705a1df90547c40dbb9d4cb5ee23e91a09b5d87faf50225f46efa45106105dcf60c0469c7b3a3bb04e0b6137fcb6d3df3af0eac4d570bd237ecde78a746043569e91445034a3679b46fca1423c202baa8888b99f3b2b218b85ba7e1fb5f9b0cc6c00ef55e4790d82c279151430b3303125298fbad55fcbb415de4b9f81a0041521c2944057c0b55ca86f0a1d7d198fd93e2e181f938e8f45861e4540dfbcae054a685106d0f0072a3ae2689e63dc30c8107ebdf4465cb53d1e597d90e4d4d48631d286b5bb59fafd1bafa06a71f0c6ed9581658c9b35f56736809b7ba20aeed38720bc138b2834a955ccaa7166d6f3ee1746d7e6df26455d8a71af1d82d7cf505d24ce39d4d5bab040a3e53be7021017068a2970bade324496758c2f66bd81a28b2ba66d757296eebedc72d20efa8dc8d7f6806d35986f99c54385cb89a9886407c8cef81083e7a660d4f9f3c068cbd4cc6360e2fca835d524d4ccbc4c4443d918d8150651dea9593be5e6a00e9a4a0acb7c1edfbeecc1cedeacddbbb7f811bb5515643b84318b4601b0c82ac825852b2155b872788f9b81703945cdc70a7d1fd598c974b2d3ca4211eefc3e434d91cea35dba7f9aa6baa4ced5c4b0c0345cf456ed89b5f52e1d877feecf0372996dbda8383381f0117a8baa47b03d9f68e1e4f240d1273ef69b0d94e0ad670c8a4df552fe5507a6ecfb682a6dcacd6e9c729693162519f0ff7333afc703c9179076044b14538205cc5876682cc50be2e6bf4f4e2773f4497432916a55883274b9b89ab7b3c177706eff01845ac6bfc3b89df2a8e0d9dd89c3ff7d1429d8a71ec0a3bd44b4579de96d321dcb86c894e3c59b3b2eea5c652ac0b6f0727189bbe0365f4c8ef158c556733ef048df37edb16c69aacb1119991afa9d10d93fe4d9728ad84bac3fda39ab42550a13e93b3c8a0b7c24bc65a5ec15df2ae27d127c81edf2b406a88f38059fd35e50fd8f0eb137f41afece92b39ff9a8287d1ee4e9f564f066811ee5a85f14c1e23265ca8e50a476af8f803d788b42a56d22fab5652d572e421f120b6065b6ce3c222bda208d24bb8f975da30525f8ae16364a920c2da99e648314500a6b76a63c918d2c57e79eeb16a7d6d1ca0fdcffca7325099736fca9d354d1b4b30f293fdc691106d12b3d638c3fbb73c74c9fa41755cd2fcc2c96b7a7b4387fc7b903cf218aeec3465b7eee1100e213ee2c73a41e72c1b1c1b097f4dca2c6585a16445c044c65fea1ef7862d9eb78355fcd37ec61fdccbbb245e73f3540a04c7e4e32899363535f0b6d82faefe0137a38eabd92e8b6de0cdcfba556e049871c48a1954ab44fb64acfc9c631cccddebe9589e3482c9a36e3301c4c82fee57bed72728cbb76062afb9fa1ee75abbb9782202d91a007e4e32ef557762aa1d1e438aff11add27de5c3f822c38d44e18b8db7f123880114e11281964dab58a33f518239fccb252e40c0e43cc620593bb719e05ff99932dbb7f5c30c9810ca9bee00a52ba21568b75bbd646369edd8dc695a2dbf206c54c7049bf6dddb58a58df3e107b6d389b0c41c398fc3ac9084d3aca5d99b8b87602d051f18d5debf4f25c143696f3f8cb1a869e86bca39756442bca3a4ca38b76ed6fa2ee3115a930fc909e39adcf3b37eee557937a76fe8431dd217a2908123106a78c2b062a2e25b834946b182158efb0b43ca7a1c0c141910e33e48172624b3b27c03f05afff257e5abe3683ecfd2138747a6dd0e289b62ccaf694878c6c2acb50460ed5112bc6c157fb72bccc6fe6aa1ace1e6a7f63f34f5e368a25c4d045bfa5f1d8c1701eecdaf7a7f0e11fe697d00ede1fda5058f5b459c6a9b81c47f43071c9f504a7bcc887b1a019fd1ac17bc593860eacd540319b2afb599594608f79862a20049e64e1fc9fd1f60791c043e7774b694d91994522b6824336731b4ed156d4d0c6a6d92e8c628bd4c80f5ef4078ffda9d92b49019cc92ddf4573f3c33f409035bcb84c6aaa15df7d4976e267dfff7573196e783570b70365854d73528dbc1524bf112da539695de9332dd733bcf56bd38784183f269a4782978cc676617266fd5738b49ee357668dfac5cf6798a026612f7e11d810f6901d04bbd95e1e05302db3b821bef7cd1675e3b916ff8d1faf517c570c1ba6d4d2335d795f589c8827ab1a0fd5433cd77a7e2bbb0f859476efc0a188a1eabab9b53d7ac467123106f20f3c26d357da2f46381b45d7befb5a6d6896f21d68841f34c1468ebac860a8c27b652300e2027f63ab4ab072876dd5c5ad4c3c72b2f9b47b50093f12d291f9a064ce2847237917cfa6e302266e33de65179c28ab6ce9fd0191d461a38cb087eb2e725a37f3c07dd3809967c97e38fa17d66c5b96da3040b7bb70503b2ed829bfe351cff8d014aec87fd3bee880945154115e891a7be003c6f6a1eca4da040ee6f83072790a9c3ad1de759057e1fd00f823a1ee8ef8c9ad91b331863cbdd63b8f5776d8ae0e68af303dec3ff3c7447698aaa3b13d529b1947407ef6eb1da71a4bb67bab7dc44f3b40ea55b5680f0dd830c96bdb5167526fbbfcf18e074aad55b5f570a0ae1f4578f0392a77e6a087ac74c3f1c5ddff21d0c4cdc5876fa30e4169427ac2b9dec07f91f08eb57465e32ec72dfbc8164f403809896f1bf5322c5fad871d6b294da9a1a55c6fefd6e3e070187ab5261dfc7d3fc187c32af756e0fcd46abf59f1331e8a17feab95dd682036969803b38cd31dbbd66915faf64304621b1b75d03c92790237be4d309323a624930c74eb141b8697f2fef2ef0dbad668211bb738b7a6de6bd88f0600e0ab6901b7c0247a7315d4c91a1651695397218d36b5dcee59390ea92bdb2914ed1cbd4cafa8c5ef0d1fc66c15b68a60928083599a58bcd15776bcf9027b6d5529a71212eed23b93eba35f97bdd8771c2cca8173d68701207934bfb9fdb5c1c1f5a0ebd3b6e5738278be16d696f4f404d605a6b8d9287b1284d4cd3845a886db87fdc3bd93e59a86de60b393b3ee6aed0e11ed0bd9e13dd10c5226bab735447fa189a81c1f4f10be56e3075fde1f21d70208ead37f55a1887df72bc378dccd9be8f2b04d656b5cdcc27552524c5d8d665e3e11e2b2fcbb03958e538066211988826418ca0f6757e7833647f45240fe5f03251c46896134bc0f8e33553dd500195e40983c7fbd4363a5a0a3dffcacf1a98c9133552f2a1b5c6d3392a84ab47e1be78b913964a21072c88a7ac5659b2b6443c6457c300077bebf22cd8eebe97473e026d1d86af9e1d64c377a83efa36711302eb6f90a1e44b49e87de30763368cefd29ca7a967876901943e2516c2f3bfe7fccdb7a2a2dbd2291e06e46138334e7cb1a7c3e627ddab8651fed1578c49e71f82e180e740f90174b2e9bf37e09a4d3fd1be91dd445bc8e385ec2e1b6a9c44cca4edf5e1190f0bede9c5cf799099708788ab45e96701a7e889fc8f0913d633c3ef7341990df2d16ba83f4e442da1302cb416dd80fadc5d152d5c75c0ad63d0ebaafc3c6522dd380352dd7ec51c22fd442e39534c03e8851b8")
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/\xee\x00\x00\x00\x00\x00\x00d\x00', 0x0, 0x0)
r8 = dup3(r6, r7, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x4001ff)
ioctl$RTC_PLL_SET(r8, 0x40207012, &(0x7f0000000040)={0x81, 0x2, 0xfffffffffffffffc, 0x0, 0x5, 0x100})
clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
clock_gettime(0x0, &(0x7f0000000300)={<r9=>0x0, <r10=>0x0})
clock_settime(0x6, &(0x7f0000000340)={r9, r10+10000000})
setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000180), 0xf0)
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10)
gettid()
epoll_wait(r0, &(0x7f00000003c0)=[{}, {}, {}], 0x15555555555552aa, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10)
r11 = dup2(r1, r1)
sendmsg$NBD_CMD_RECONFIGURE(r11, &(0x7f0000000500)={0x0, 0x148, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYRESOCT=0x0], 0x1}}, 0x0)
write$cgroup_type(r11, &(0x7f00000006c0)='>\x00\xce\x00', 0x9)

12:51:43 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812})
io_setup(0x20000000002, &(0x7f0000000240)=<r2=>0x0)
io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff9a}])
r3 = dup3(r0, r1, 0x0)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r4, 0x4, 0x6100)
ftruncate(r4, 0x108200)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000000))
r6 = socket$netlink(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
io_submit(0x0, 0x2000000000000256, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x0, 0x0, r6, 0x0, 0x0, 0xffffffffffffffff}])
ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r7 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
ftruncate(r7, 0x108200)
r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r7, r8, 0x0, 0x8000fffffffe)
write$P9_RFLUSH(r7, &(0x7f0000000140)={0x7, 0x6d, 0x2}, 0x7)

12:51:43 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, 'eth0lo'}, {0x20, 'em0eth1'}, {0x20, 'beth0%wlan1'}], 0xa, "08615afcac2164abb4832a836945e42a189e977fd7cd894f6d8a5df6303ccce47958f34798a171a9e10cecbf01fc88ded60880046285870ca794ec3ea3b8a8aa0b882090fe23f49fbd6b3d84874e6ded93b268422d29f766e366c2824175f114c8c076f354b3a8413eb8f761708e5d2ce6da129d33cb511772c69e07b201a4c55f8d4f98feced61443c09ea85d2fe382683f512c6ce8f4fb1024c0a367c06a0cc05ebd7e3b863eb8fff6b6d59a3a8ac37691dcb329ff"}, 0xdc)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
ioctl$RTC_WIE_ON(r1, 0x700f)
sendmmsg(r0, &(0x7f0000007100)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000002c0)="0017fdeb685dee7bea4941b50c605a772af84c0538300133daa6684a5bd030cea791503e3fffa1927f004c70673295736ba4115faad6a3ca545daa7bc882f011ceddd5a8e2654a5af1d0902ae31f5b504c5a4662649d8b45140d9b7f556d0ed3", 0x60}, {&(0x7f0000000340)="ccc064d454bf8d14fbd303e83e7848cff718", 0x12}, {&(0x7f00000004c0)="0539b5003fb76cea7cac97c3b6f1d768a48ef9aaab8369919d3eda033eddcfe3e6839accea2f4c67997c58f04b66d61edba1ada5486844035170af2d4e0baff93ddc9394682a92c7ed441d149a10b5b92af22ed7234cbfad470058fba5f15b413be6d39dc6d4cbfa0879d3e3c0566f98d8a2e8ec203d7796ebed9742c5ee06b8a6c80f8d8c78641b99a6df62ee28c4e4a9d334f7c7c4e508d752cc0329163ce30db12de085f2e072dbfe287da56c814faba5ff80f944f42fbe980b5cb5f3bdb86a45f9f4c56838bbba5c36f51382d02b417848eb3cae27a580ff179edf14", 0xde}, {&(0x7f0000000380)="7b21b7cca8453f5ded1a5d4da04600a76b0d1759690e93d0b9b3279ba83c1b8800", 0x21}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000c40)="a4b4523de7fc7354cb7fae0c522c4182034991bb78c9fd4d2cd7e9c4c8ce3ce8a858a65d6e5b6cca94b92af406e437fe3e941125d3a211e7c137ec1624b781df9cf4a7571ac5c020d11615b347b8bd3c1280d83346fb133ccff206bb107225b99e31752fec3a71e8", 0x68}], 0x1}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000b00)="910b2945cc78686ecf55aaced5eb172d9dbb9f56d0c7df06497cc674", 0x1c}, {&(0x7f0000001f80)="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", 0x9a0}], 0x2}}], 0x3, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1da9, 0x4)
sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x1c3, 0x4000002, 0x0, 0x199)

12:51:43 executing program 5:
r0 = socket$key(0xf, 0x3, 0x2)
r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
r2 = dup2(r1, r0)
write$P9_RLCREATE(r2, &(0x7f00000000c0)={0x18, 0xf, 0x1, {{0x40, 0x3, 0x8}, 0x8000}}, 0x18)
sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000300)=ANY=[@ANYBLOB="02030000100000000000000000000000010014000000e4ff040006000000000000000000f3baad33c64c092d30f03247a5575ddcd000000000000000000000000000002d92b43a00010016000000000002164d9eb79ff91a8800010000000000000000005bf55171eff506ee3e3b0ec3b255390000000005000500000000000a000000000000"], 0x80}}, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
ftruncate(r3, 0x108200)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
ftruncate(r5, 0x108200)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
sendto$inet6(r6, &(0x7f0000000040)="a1cc4cd049a1ff65e29e2520ac7fbe2d755c82b3c6b4a6e083c2dc825997cd24072b53ddd7f3e6ee2a15f2541ab0867c271251967607bc6d5b85ecbc03d450682230d4a4aeba6db0735ce4879a92e1461fec851fb48cb7060114d0ded3bdef770d21795dbe2815919d", 0x69, 0x8006000, 0x0, 0x0)
write$P9_RWRITE(r3, &(0x7f0000000000)={0xb, 0x77, 0x2, 0xfffffe01}, 0xb)

12:51:43 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
ftruncate(r1, 0x108200)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
linkat(r2, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00', 0x400)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
r3 = dup2(0xffffffffffffffff, r0)
fstat(r3, &(0x7f0000000080))
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000580))
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0x705}, 0x20}}, 0x0)

[  191.178460] binder: undelivered death notification, 0000000000000000
12:51:43 executing program 3:
unshare(0x600)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
getdents(r0, &(0x7f0000000080)=""/125, 0x26d)
r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
ftruncate(r2, 0x108200)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
r4 = syz_genetlink_get_family_id$tipc(0x0)
r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x38, r4, 0xfa50877429e2ed56, 0x70bd29, 0x25dfdbfb, {{}, 0x0, 0x4101, 0x0, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'ip6_vti0\x00'}}}}, ["", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x401a100c}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0xa, 0xe4d6, @udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20044}, 0x800)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000000)={r0, 0x0, 0x0, 0x80000001, 0x100000001})
getdents(r0, 0x0, 0x0)

[  191.231982] binder: 8511:8513 BC_INCREFS_DONE u0000000000000000 no match
[  191.263685] binder: 8511:8513 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  191.264801] binder: 8514:8515 BC_INCREFS_DONE u0000000000000000 no match
12:51:43 executing program 2:
r0 = gettid()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x200000000038)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)
sched_getattr(r0, &(0x7f0000000180)={0x30}, 0x30, 0x0)
r1 = memfd_create(&(0x7f0000000000)='{!ysystemproc\x00', 0x0)
fcntl$lock(r1, 0x25, &(0x7f00000000c0))
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00')
sendfile(r2, r5, 0x0, 0x1000000000e6)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000040)={0x81, 0x401, 0x3, 0x7, 0x3, 0x6})
r6 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'\x00\x80\x00', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$KEYCTL_MOVE(0x1e, 0x0, r6, 0x0, 0x1)
r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0)
lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x2, {0x40, {0x0, 0x1, 0x6}, 0x100010014, r8, 0x0, 0x442, 0x10000, 0x100000000, 0x9, 0x4, 0x6, 0x8, 0x4, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0)
lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
r10 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0)
fstat(r10, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0})
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x2, {0x40, {0x0, 0x1, 0x6}, 0x100010014, r9, r11, 0x442, 0x10000, 0x100000000, 0x9, 0x4, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0)
lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x2, {0x40, {0x0, 0x1, 0x6}, 0x100010014, r12, 0x0, 0x442, 0x10000, 0x100000000, 0x9, 0x4, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0)
r13 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x50}}, 0x0)
getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000140)={0x0, <r14=>0x0}, &(0x7f00000001c0)=0xc)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f0000000200)=0xe8)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x5040, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000070000,user_id=', @ANYRESDEC=r8, @ANYBLOB=',group_id=', @ANYRESDEC=r11, @ANYBLOB="2c6d61785f726561643d3078303030303030303038303030303030302c6d61785f726561643d3078303030303030303030303030303030362c616c6c6f775f6f746211b6966469fc7c756c745f7065726d697373696f6e732c7569643c", @ANYRESDEC=r12, @ANYBLOB, @ANYRESDEC=r14, @ANYBLOB=',appraise,uid=', @ANYRESDEC, @ANYBLOB="2c6f626a5f747970653d65716c000000a95b002c7569643c", @ANYRESDEC=r15, @ANYBLOB=',\x00'])
keyctl$chown(0x4, r6, 0x0, r11)

[  191.264809] binder: 8514:8515 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  191.264819] binder: 8514:8515 got transaction to invalid handle
[  191.264828] binder: 8514:8515 transaction failed 29201/-22, size 0-0 line 3013
[  191.265020] capability: warning: `syz-executor.0' uses 32-bit capabilities (legacy support in use)
12:51:43 executing program 2:
fchdir(0xffffffffffffffff)
pipe(0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$mice(&(0x7f0000000040)='/def/input/mice\x00', 0x0, 0x2)
dup3(r0, r1, 0x0)
ioctl$UI_DEV_DESTROY(r1, 0x5502)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xfffffef3)
preadv(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x0)
write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0x0)
readahead(0xffffffffffffffff, 0x0, 0x210a)
read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c)
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x36, 0x0, 0x0)

[  191.349435] binder: 8516:8517 BC_INCREFS_DONE u0000000000000000 no match
[  191.356601] binder: 8516:8517 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  191.367063] binder: 8514:8515 BC_INCREFS_DONE u0000000000000000 no match
[  191.375275] binder: 8514:8515 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  191.384472] binder: 8516:8517 got transaction to invalid handle
[  191.390900] binder: 8514:8515 got transaction to invalid handle
12:51:43 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
timer_create(0x0, 0x0, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x195)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x8000000004e20}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x8000000000000004, &(0x7f0000000140)=0x3, 0x4)
rmdir(0x0)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3100, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$TCFLSH(r4, 0x540b, 0x9)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
setns(0xffffffffffffffff, 0xe000000)
r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
ioctl$GIO_FONT(r5, 0x4b60, &(0x7f0000000380)=""/234)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r5, 0xc0096616, &(0x7f0000000480)=ANY=[@ANYBLOB="040000000000000040000000e2e5edc167f9e90a7b80b9c5d06cbac1941f877b03000000f2afa7676886d2be114752ffffff7f0000000067a7222ef055aafceede3f594d8fd662eabb48cf9c4ed8ebceed4ce677ced3b09d64edfc7ecbc5ca287fc25f4fdca9c2c8741ebda16e1f35d5d4e1e8d3487bd573c4913474fb1d0600000000000800473137f450aca8164a7b1629080580db58f3cdcbd2a9d52c39f6dd70ab830384a9227be0219f4a4b051d5065ac8bbfc710d99a3159e0004b"])
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080)=@fragment, 0x8)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000000)=""/55)
r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
ioctl$GIO_FONT(r6, 0x4b60, &(0x7f0000000380)=""/234)
bind$unix(r6, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x7d)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x3fffffffffffff)
clock_nanosleep(0x0, 0x0, 0x0, 0x0)
ftruncate(r7, 0x7fff)
sendfile(r1, r7, 0x0, 0x8040fffffffd)

[  191.397720] binder: 8516:8517 transaction failed 29201/-22, size 0-0 line 3013
[  191.406324] binder: 8514:8515 transaction failed 29201/-22, size 0-0 line 3013
[  191.407672] input: syz1 as /devices/virtual/input/input30
12:51:43 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
write(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fcntl$dupfd(r6, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
close(r4)
r8 = socket(0x10, 0x3, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000cf7000000000000095000000000000007c41776586b2841fb71916411c22f945fb70fc5b4e982e61d68b61c1ba6e53657b8dc7c5bb72290946131bc6470051a39eab7f86e7fae8bc5e5c45d8cfc8c575b46ecea5a34655b9b5b14dc6de58bb048d2e9ec9b5d29ab9e06bdb414497312320fd387df6c51cc11505e90fbda60000000000"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48)
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000000)=r9, 0x4)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)='$\x00\x00\x00!\x00\a', 0x7}], 0x1}, 0x0)
write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0)
read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3)
r10 = socket$inet6(0xa, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100))
bind$inet6(r10, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000300)={0x0, <r11=>0x0})
ppoll(&(0x7f0000000000)=[{r10, 0x41a}], 0x1, &(0x7f0000000140)={0x0, r11+30000000}, 0x0, 0x0)
connect$inet6(r10, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
arch_prctl$ARCH_GET_FS(0x1003, 0x0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000340)={0xffffffff, 0x20, 0x1})
sendmmsg(r10, &(0x7f00000092c0), 0x4ff, 0x0)

12:51:43 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r4}]]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x82, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0)
r5 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, <r6=>0x0})
ptrace$cont(0x20, r6, 0x77c863c2, 0x8)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@initdev}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f00000000c0)=0xe8)

[  191.444900] binder: 8511:8513 got transaction to invalid handle
[  191.448877] binder: 8516:8519 BC_INCREFS_DONE u0000000000000000 no match
[  191.448906] binder: 8516:8519 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  191.448915] binder: 8516:8519 got transaction to invalid handle
[  191.448932] binder: 8516:8519 transaction failed 29201/-22, size 0-0 line 3013
[  191.526278] binder: 8538:8540 BC_INCREFS_DONE u0000000000000000 no match
[  191.534178] binder: 8538:8540 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  191.541762] binder: 8538:8540 got transaction to invalid handle
[  191.548403] binder: 8511:8513 transaction failed 29201/-22, size 0-0 line 3013
[  191.556319] binder: 8538:8540 transaction failed 29201/-22, size 0-0 line 3013
12:51:44 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x24}, [@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='G\x00', 0x0, 0xcc, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x17)
chmod(&(0x7f0000000080)='./file0\x00', 0x121)

12:51:44 executing program 5:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket(0x5, 0x802, 0x7c)
socket$nl_netfilter(0x10, 0x3, 0xc)
write(r0, &(0x7f0000000280)="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", 0xfffffffffffffe04)
sendmsg$nl_netfilter(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x50245e64a11477e0}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={0x1d8, 0x10, 0xf, 0x800, 0x70bd28, 0x25dfdbff, {0xa, 0x0, 0x7}, [@nested={0x1c4, 0x7b, [@typed={0x14, 0x5d, @ipv6=@mcast1}, @generic="a17d12eec9378def122c76e833d369a6788eb5b3dba7d189e2fe548cb734357743e0e226f5a138df45447a7a8a77dc57365f8d2f0b58f1ef830a803d38c71e2cb34ae8b38b4949eb9d54ea81a7a54bb8c9a92c4a45e8740c502498c160f516982977", @generic="f288c0ad8529bb373b520e3bd68f7e98f1241227a77bcc867f4f7f3cae9ef87fecb48195321486fd37cfdd78e0995b9186cf8d9f2b3b83d294df65aa721f86860beece9092305e98847b2dec19651fd6c4173d679e4f06a4dcaf96de777bb4ea12fb4f9e23694153cf861329049d354229f8d1bad8aa00691e5c73cf117547a616259b6ae45c88ff0ae01d86507507769f341cd372ea943954029dbe80cb69e6fdd7bb6ca21ea1f392ed80dc5f4cb20d049f2370758b4dd57f456f73", @typed={0xc, 0x26, @str='$wlan0\x00'}, @generic="9a227cace30bf846c061a2f246231558d744528a384bd3601f5d12ef3de0c47258a6cbee28c37367758c4a866e0d7737f44162eef2aed93c2a05302d463f2c80bf67991190f7755b001aa6b6e74dca02d32c3e601d3aea437e061b111cd68712752e131aa6eac3cac7c13cfbff6e2c9717ef832e6575e4fbb21f5d05c86aca"]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x2000e801}, 0x4000000)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x10009, 0x0)
fcntl$addseals(r0, 0x409, 0x1)

12:51:44 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
r4 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
ftruncate(r4, 0x8200)
r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x2, 0x0)
write$binfmt_misc(r6, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x800002, 0x11, r5, 0x0)
getresuid(&(0x7f00000004c0), &(0x7f0000003280), 0x0)
ftruncate(r3, 0x2081fc)
fcntl$setstatus(r1, 0x4, 0x44800)
r7 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
ftruncate(r7, 0x108200)
r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r7, r8, 0x0, 0x8000fffffffe)
setsockopt$inet6_tcp_int(r8, 0x6, 0x12, &(0x7f0000000040)=0x6, 0x4)
io_submit(r2, 0x20000000000001b7, &(0x7f0000000540))

[  191.736287] input: syz1 as /devices/virtual/input/input31
12:51:44 executing program 1:
getresuid(&(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100))
r0 = socket(0x14, 0x3, 0xc)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000200))
write(r0, &(0x7f0000000080)="1f0000000104e600fd4354604522f800f305010008000100010423dcffdfcf", 0x1f)

[  191.812682] binder: 8555:8558 BC_INCREFS_DONE u0000000000000000 no match
[  191.856688] binder: 8555:8558 BC_DEAD_BINDER_DONE 0000000000000000 not found
12:51:44 executing program 1:
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
r2 = creat(&(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x5)
fcntl$setstatus(r2, 0x4, 0x44700)
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000440)={'syz_tun\x00', 0x400})
ioctl$TCXONC(r2, 0x540a, 0x9)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a})
r3 = socket$inet6(0xa, 0x2, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000180)={0x0, <r4=>0x0})
pipe(&(0x7f0000000100)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
write$cgroup_int(r5, &(0x7f0000000180)=0x3, 0xffffffffffffff31)
write$P9_RCLUNK(r6, &(0x7f0000000340)={0x7, 0x79, 0x2}, 0x7)
write$P9_RMKNOD(r5, &(0x7f0000000040)={0x14, 0x13, 0x0, {0x0, 0x2}}, 0xfd95)
perf_event_open(&(0x7f0000000200)={0x6, 0x70, 0xfb, 0x40, 0x7, 0x6, 0x0, 0x7b81, 0x20000, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000000), 0x7}, 0x20, 0xbfc, 0x3, 0x5, 0x8baa, 0x800, 0x1ff}, r4, 0xffffffffffffffff, r5, 0x0)
r7 = creat(&(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x5)
fcntl$setstatus(r7, 0x4, 0x44700)
write$P9_RREMOVE(r2, &(0x7f00000004c0)={0x7, 0x7b, 0x1}, 0x7)
setsockopt$sock_int(r7, 0x1, 0x1, &(0x7f0000000080)=0xffeffbfe, 0x4)
r8 = socket$packet(0x11, 0x2, 0x300)
r9 = request_key(&(0x7f0000000040)='id_resolver\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000380)='/dev/loop#\x00', 0xfffffffffffffffc)
keyctl$dh_compute(0x17, &(0x7f00000003c0)={0x0, 0x0, r9}, &(0x7f0000000400)=""/48, 0x30, &(0x7f0000000480)={0x0})
request_key(&(0x7f0000000280)='logon\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000300)='/dev/net/tun\x00', r9)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'veth0\x00\x00\x00\f\x00', <r10=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={@rand_addr="489592572ca0aed6de1b4bc6da12572c", 0x0, r10})
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr="d214c0e12eb5e61c640e2d526900"}, 0x1c)
sendmmsg(r3, &(0x7f000000ac80), 0x800000000000226, 0x0)
dup3(r0, r1, 0x0)
r11 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r11, 0x800c6613, &(0x7f0000000500)=@v2={0x2, @adiantum, 0x40e25e208236f116, [], "6d426c0f6b3e53b4628133abec630754"})

12:51:44 executing program 2:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x4fff})
prctl$PR_SET_DUMPABLE(0x4, 0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = request_key(&(0x7f0000000040)='id_resolver\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000380)='/dev/loop#\x00', 0xfffffffffffffffc)
keyctl$dh_compute(0x17, &(0x7f00000003c0)={0x0, 0x0, r3}, &(0x7f0000000400)=""/48, 0x30, &(0x7f0000000480)={0x0})
socket$inet6(0xa, 0x80000, 0x7)
r4 = request_key(&(0x7f0000000040)='id_resolver\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000380)='/dev/loop#\x00', 0xfffffffffffffffc)
keyctl$dh_compute(0x17, &(0x7f00000003c0)={0x0, 0x0, r4}, &(0x7f0000000400)=""/48, 0x30, &(0x7f0000000480)={0x0})
keyctl$search(0xa, r3, &(0x7f0000000040)='.request_key_auth\x00', &(0x7f00000000c0)={'syz', 0x1}, r4)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[]}}, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x161442, 0x18)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x4fff})
ftruncate(r5, 0x2007fff)
r7 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
sendfile(r0, r7, 0x0, 0x8000fffffffe)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)

[  191.899029] binder: 8555:8558 got transaction to invalid handle
[  191.919491] binder: 8555:8558 transaction failed 29201/-22, size 0-0 line 3013
[  191.947825] binder: 8555:8558 BC_INCREFS_DONE u0000000000000000 no match
[  191.959547] binder: 8555:8558 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  191.970521] binder: 8555:8558 got transaction to invalid handle
[  191.971786] binder: 8570:8571 BC_INCREFS_DONE u0000000000000000 no match
[  191.971792] binder: 8570:8571 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  191.971799] binder: 8570:8571 got transaction to invalid handle
[  191.971807] binder: 8570:8571 transaction failed 29201/-22, size 0-0 line 3013
[  192.006026] binder: 8555:8558 transaction failed 29201/-22, size 0-0 line 3013
[  192.007846] binder: 8568:8575 BC_INCREFS_DONE u0000000000000000 no match
[  192.007853] binder: 8568:8575 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  192.007862] binder: 8568:8575 got transaction to invalid handle
[  192.007870] binder: 8568:8575 transaction failed 29201/-22, size 0-0 line 3013
[  192.008005] binder: 8568:8575 ioctl 800c6613 20000500 returned -22
12:51:44 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001480)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'ip\x8ei0\x00\x00@\x00\x00\x00\x04\x00', 0x8011})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001)
r1 = creat(&(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x5)
fcntl$setstatus(r1, 0x4, 0x44700)
r2 = syz_open_pts(r1, 0x4000)
ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000080))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x369, 0xa, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000008000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffef0, 0x0, 0x0}, 0x40)
r3 = socket$inet(0x2, 0xa, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x8955, &(0x7f0000000000)=0x2)

[  192.075225] binder: 8570:8576 BC_INCREFS_DONE u0000000000000000 no match
[  192.082347] binder: 8570:8576 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  192.089841] binder: 8570:8576 got transaction to invalid handle
[  192.096154] binder: 8570:8576 transaction failed 29201/-22, size 0-0 line 3013
12:51:44 executing program 2:
sendmsg(0xffffffffffffffff, 0x0, 0x0)
sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00')
socketpair$unix(0x1, 0x1, 0x0, 0x0)
dup2(0xffffffffffffffff, r1)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c0000002500000028bd7000ffdbdf250000000000000000", @ANYRES32=r2, @ANYBLOB="0a001c0002000400f3ffeeff2c0008001c000100038b080005000000010000000900000000000080030000000c000200580003000320000008000e0006000000"], 0x5c}}, 0x2050)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
close(r0)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x4fff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba0009008d2633568e00000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0)
pipe(&(0x7f00000001c0)={<r5=>0xffffffffffffffff})
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0)
setxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x3)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
dup2(r7, r6)
accept(r6, 0x0, 0x0)
r8 = open(&(0x7f0000002000)='./bus\x00', 0x504c2, 0x0)
ftruncate(r8, 0x2007fff)
pipe(&(0x7f0000000340)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = gettid()
ptrace$setopts(0x4206, r11, 0x0, 0x0)
tkill(r11, 0x200000000038)
ptrace$cont(0x18, r11, 0x0, 0x0)
ptrace$setregs(0xd, r11, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r11, 0x0, 0x0)
syz_open_procfs(r11, &(0x7f0000000040)='setgroups\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
dup2(r12, 0xffffffffffffffff)
write(r10, &(0x7f00000001c0), 0xfffffef3)
read(r9, &(0x7f0000000b80)=""/270, 0xb37af43)
sendfile(r0, r8, &(0x7f0000d83ff8), 0x8000fffffffe)
openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x15004, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

[  192.142624] binder: 8568:8575 BC_INCREFS_DONE u0000000000000000 no match
[  192.150015] binder: 8568:8575 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  192.158201] binder: 8568:8575 got transaction to invalid handle
[  192.164403] binder: 8568:8575 transaction failed 29201/-22, size 0-0 line 3013
[  192.173009] binder: 8568:8569 ioctl 800c6613 20000500 returned -22
12:51:44 executing program 1:
mlock(&(0x7f0000ff1000/0xd000)=nil, 0xd000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
mlock2(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x1)

[  192.195418] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  192.204041] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
12:51:44 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
open(0x0, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
sendfile(r2, r3, &(0x7f00000000c0)=0xfffffffffffffffb, 0x9)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
fallocate(r4, 0x20, 0x20000, 0x10000)

12:51:44 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
fcntl$setstatus(r3, 0x4, 0x0)
r4 = openat$cgroup_ro(r1, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r5, 0x0, 0x2)
sendfile(r1, r5, &(0x7f0000000040)=0x8, 0x8000fffffffe)

12:51:44 executing program 0:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\b', 0x2000003ffe})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$sock_ifreq(r0, 0x8922, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_map={0x1ff}})
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x428108ce4d77c47b, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000180)={0x3, 0x100000000, 0x2, 0x10001})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[]}}, 0x0)

12:51:44 executing program 2:
sendmsg(0xffffffffffffffff, 0x0, 0x0)
sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00')
socketpair$unix(0x1, 0x1, 0x0, 0x0)
dup2(0xffffffffffffffff, r1)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c0000002500000028bd7000ffdbdf250000000000000000", @ANYRES32=r2, @ANYBLOB="0a001c0002000400f3ffeeff2c0008001c000100038b080005000000010000000900000000000080030000000c000200580003000320000008000e0006000000"], 0x5c}}, 0x2050)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
close(r0)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x4fff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba0009008d2633568e00000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0)
pipe(&(0x7f00000001c0)={<r5=>0xffffffffffffffff})
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0)
setxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x3)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
dup2(r7, r6)
accept(r6, 0x0, 0x0)
r8 = open(&(0x7f0000002000)='./bus\x00', 0x504c2, 0x0)
ftruncate(r8, 0x2007fff)
pipe(&(0x7f0000000340)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = gettid()
ptrace$setopts(0x4206, r11, 0x0, 0x0)
tkill(r11, 0x200000000038)
ptrace$cont(0x18, r11, 0x0, 0x0)
ptrace$setregs(0xd, r11, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r11, 0x0, 0x0)
syz_open_procfs(r11, &(0x7f0000000040)='setgroups\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
dup2(r12, 0xffffffffffffffff)
write(r10, &(0x7f00000001c0), 0xfffffef3)
read(r9, &(0x7f0000000b80)=""/270, 0xb37af43)
sendfile(r0, r8, &(0x7f0000d83ff8), 0x8000fffffffe)
openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x15004, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

[  192.367922] binder: 8601:8603 BC_INCREFS_DONE u0000000000000000 no match
[  192.376831] binder: 8601:8603 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  192.384463] binder: 8595:8604 BC_INCREFS_DONE u0000000000000000 no match
[  192.391739] binder: 8595:8604 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  192.399321] binder: 8595:8604 got transaction to invalid handle
[  192.405971] binder: 8601:8603 got transaction to invalid handle
[  192.412667] binder: 8595:8604 transaction failed 29201/-22, size 0-0 line 3013
[  192.421051] binder: 8601:8603 transaction failed 29201/-22, size 0-0 line 3013
[  192.430008] binder: 8601:8603 BC_INCREFS_DONE u0000000000000000 no match
[  192.430016] binder: 8601:8603 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  192.430027] binder: 8601:8603 got transaction to invalid handle
[  192.430035] binder: 8601:8603 transaction failed 29201/-22, size 0-0 line 3013
[  192.436040] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  192.437447] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
12:51:44 executing program 5:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chroot(&(0x7f0000000080)='./file0\x00')
r0 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
renameat2(r0, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000280)='./file0\x00', 0x2)
renameat2(r0, 0x0, r0, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2)
write$P9_RSTAT(r0, &(0x7f0000000240)={0x4c, 0x7d, 0x1, {0x0, 0x45, 0x2, 0x7, {0x63, 0x0, 0x7}, 0x80000000, 0xff, 0xffffffe1, 0x20, 0x6, 'ramfs\x00', 0x6, 'ramfs\x00', 0x6, 'ramfs\x00'}}, 0x4c)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0)
mount(&(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='./file0\x00', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000300)=ANY=[@ANYBLOB='/'], &(0x7f00000002c0)='./file0\x00', 0x0, 0x5010, 0x0)
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

12:51:44 executing program 4:
pipe(&(0x7f0000000340)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000500)={'filter\x00', 0x4}, 0x68)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
syz_genetlink_get_family_id$tipc(0x0)
fchdir(r2)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r4, 0x4, 0x46800)
ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0)
prctl$PR_SET_PDEATHSIG(0x1, 0x4)
r5 = socket(0x11, 0x0, 0x6)
getsockname$packet(r5, 0x0, &(0x7f0000000140))
r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r6, 0x0, 0x0)
r7 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
ftruncate(r7, 0x108200)
r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r7, r8, 0x0, 0x8000fffffffe)
getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f0000000300)=0xe8)
write$FUSE_INIT(r3, &(0x7f0000000000)={0x50}, 0x50)
clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)
sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0)
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000380)={0x3ff, 0x0, 0x80000007, 0xfffffffffffff1a3, 0x833, "c954fa00951c0040838cea87aa78bfe09cdd0d", 0x3, 0xea4})
socket$nl_generic(0x10, 0x3, 0x10)
r9 = eventfd2(0x0, 0x0)
dup(r9)
r10 = open(&(0x7f0000000100)='./file1\x00', 0x20141042, 0x0)
write$selinux_attr(r10, &(0x7f0000000180)='system_u:object_r:hugetlbfs_t:s0\x00', 0x5571)
r11 = dup(0xffffffffffffffff)
r12 = open(&(0x7f0000000100)='./file1\x00', 0x20141042, 0x0)
write$selinux_attr(0xffffffffffffffff, &(0x7f0000000180)='system_u:object_r:hugetlbfs_t:s0\x00', 0x5571)
sendfile(r11, r12, &(0x7f0000000080), 0x2008000fffffffe)
fremovexattr(r12, &(0x7f00000001c0)=ANY=[@ANYRES64])
r13 = syz_open_procfs(0x0, &(0x7f0000000440)='net/psc\xcced\x00\x10\x8f-\xe9K\xfe\xe4\b\xa1~F&P\xb5\xe1\v\x95\xa9\x84d\xaf~-zq{\xb84\x99c\x97S\xbcrW\x1a\x8a/\xca+\x9dW\xd6\x01\x00\v\xb7\xee\"<:\xc0\xa7=R\x1d\xcd\xe5\n\xf9\x9b\xfc\xa1\xaf\xba\xa7\x16j\x9a\xe6\xae{}M\x99\xe5\xfdl\xfbY\xa4\xd9\x82I\xb91\xdcU\xb0;2\xe2\x914\t\x82\x0f\x95\xa5V.\xc8U^\xf4N\x96l\xe8\xe7\x84E\xa0h\xd7\xe4\a\x87\xb1\x84*\xf6r\xd3\xbe\xa8\xbc\x8eq\x83\xb0\xcb\x102I\x00'/162)
readv(r13, 0x0, 0x0)
ioctl$VT_RESIZEX(r13, 0x560a, &(0x7f0000001600)={0x5, 0x8000, 0x5, 0x101, 0x9, 0x31aa})

12:51:44 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
fcntl$setstatus(r3, 0x4, 0x0)
r4 = openat$cgroup_ro(r1, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r5, 0x0, 0x2)
sendfile(r1, r5, &(0x7f0000000040)=0x8, 0x8000fffffffe)

12:51:44 executing program 2:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f00000000c0))
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'all\x00\x19\x00\x00!C\x19\xb2d\xb4\xa0\xb4v', 0x420000015001})
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', @ifru_flags})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xfffffef3)
write$P9_RMKDIR(r3, &(0x7f0000000040)={0x14, 0x49, 0x1, {0x2, 0x3, 0x6}}, 0x14)
exit_group(0x0)
prctl$PR_SET_PDEATHSIG(0x1, 0x37)

12:51:44 executing program 3:
pwritev(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x81003)
r0 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$loop(0x0, 0x0, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c)
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0)
dup2(r0, r1)

[  192.589258] audit: type=1400 audit(1574513504.893:69): avc:  denied  { sys_chroot } for  pid=8614 comm="syz-executor.5" capability=18  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
12:51:44 executing program 2:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
clock_gettime(0x0, &(0x7f0000000100)={0x0, <r0=>0x0})
clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, r0+30000000}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x200000000038)
ptrace$cont(0x18, r1, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r1, 0x0, 0x0)
timer_create(0x5, &(0x7f0000000340)={0x0, 0x12, 0x3, @tid=0xffffffffffffffff}, &(0x7f0000000040)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup3(r3, r4, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)

12:51:45 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000004c0)=[@register_looper], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ppoll(&(0x7f0000000440)=[{r0}], 0x1, 0x0, 0x0, 0x0)
r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd770}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9f3}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4004004)
r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000096a5772fee065fc2abc777d0f5f62604000000000058205d234c161fb539d3b40520919f80570c000000020000000000000000000000000000000000000b9120bfb69b6e8cfaf12846ac682712cd63cdb362d814de3e6f7dfef768"], 0x0, 0x0, 0x0})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
dup(r3)
r4 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0)
mknodat(r4, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
renameat2(r4, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f0000000280)='./file0\x00', 0x2)
renameat2(r4, 0x0, r4, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2ba, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)='N'})

[  192.634340] binder: 8611:8616 BC_INCREFS_DONE u0000000000000000 no match
12:51:45 executing program 1:
r0 = creat(&(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x5)
fcntl$setstatus(r0, 0x4, 0x44700)
ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000140))
io_submit(0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x1}, &(0x7f0000000200))
fchdir(0xffffffffffffffff)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x323)
write$binfmt_misc(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[], 0x0)
clock_gettime(0x0, &(0x7f00000002c0)={0x0, <r1=>0x0})
ppoll(0x0, 0x0, &(0x7f0000000300)={0x0, r1+30000000}, &(0x7f0000000340), 0x8)
r2 = creat(&(0x7f00000004c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
truncate(&(0x7f00000000c0)='./bus\x00', 0x1000)
r3 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r3, 0x0, 0x4000000000020009)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
close(r4)
r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
sendfile(r4, r5, 0x0, 0x80001d00c0d0)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0)

12:51:45 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0xfd1, 0x4)
bind$inet(r1, &(0x7f0000001440)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x2200cf7d, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x7843c471)
r2 = socket(0x4fcefadb5b473cc9, 0x80000, 0x9)
getsockopt$packet_int(r2, 0x107, 0xb, &(0x7f00000000c0), &(0x7f0000000180)=0x4)
write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup3(r3, r4, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000040)={0x1, 0x0, [0x0]})
recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0x1fa0}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)

[  192.634348] binder: 8611:8616 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  192.634358] binder: 8611:8616 got transaction to invalid handle
[  192.634366] binder: 8611:8616 transaction failed 29201/-22, size 0-0 line 3013
[  192.635014] binder: 8611:8616 BC_INCREFS_DONE u0000000000000000 no match
12:51:45 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x11, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x27, &(0x7f0000000000)=0x1, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, 0x0, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000440)=ANY=[@ANYBLOB="c3aa0a1dc9295820022388718c79e3b33a5d9fb08f58056155b6d510f319f6d746de127167d408a8e05b5613a27adeca55825b32eadb0468249536eb3f1eddd8b7882b9a85f5b9254e1343909da7fad6f8e8e83e35d2c362e81e192948c619c7d38bee34533ed7ea97bd9ce6d600bfaa88783ac3d43ae20ce72a34bf534a5d4a"], 0x1)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
shutdown(r2, 0x0)
pipe(&(0x7f0000000400))
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0)
r3 = open(&(0x7f00000002c0)='./bus\x00', 0x40000141041, 0x402)
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0x323)
mlockall(0x0)
r4 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x5, &(0x7f0000000040))
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
getsockopt$SO_COOKIE(r6, 0x1, 0x39, 0x0, &(0x7f00000000c0))
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
write$FUSE_POLL(r3, &(0x7f0000000540)={0xffffffffffffffc0, 0xfffffffffffffffe, 0x1}, 0x18)
r7 = socket(0x10, 0x80002, 0x0)
timer_create(0x1, &(0x7f0000000340)={0x0, 0x34, 0x0, @thr={0x0, &(0x7f0000000300)="5dd1fe141a30375709aa184e1f1d"}}, &(0x7f00000003c0))
epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r4)
bind$netlink(r7, &(0x7f0000177ff4)={0x10, 0x0, 0x1, 0x8001002}, 0xc)
connect$netlink(r7, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x800000}, 0xc)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fuse\x00', 0x2, 0x0)
write(r7, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
times(0x0)
connect$netlink(r7, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000b4bffc)=0x7, 0x4)
sendto(r7, &(0x7f0000000340), 0xac, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f0000000780), 0x2bb1f36c7597d46, 0x2, 0x0)
sendfile(r3, r6, &(0x7f0000000140), 0x8fff)

[  192.635021] binder: 8611:8616 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  192.635028] binder: 8611:8616 got transaction to invalid handle
[  192.635035] binder: 8611:8616 transaction failed 29201/-22, size 0-0 line 3013
[  192.678903] input: syz1 as /devices/virtual/input/input32
12:51:45 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0xf0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
memfd_create(0x0, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r1, 0x0, 0xfffffffffffffff7, 0x20000481, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
splice(r1, 0x0, r0, 0x0, 0x1000000000000003, 0x0)
r2 = gettid()
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
futex(&(0x7f0000000080)=0x2, 0x0, 0x0, 0x0, 0x0, 0x1)
r5 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
ioctl$int_in(r5, 0x5452, &(0x7f00000002c0)=0xfffffffffffffff9)
getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0xfffffffffffffffe, 0x0)
fcntl$setsig(r3, 0xa, 0x12)
fcntl$setownex(r3, 0xf, &(0x7f0000000040)={0x0, r2})
r6 = add_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
pkey_alloc(0x0, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r7, r7)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r8, r8)
connect$inet6(r8, 0x0, 0x0)
syz_genetlink_get_family_id$nbd(0x0)
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x0)
r9 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r6)
keyctl$set_timeout(0xf, r9, 0x0)
recvmsg(r4, &(0x7f0000000240)={0x0, 0x98, 0x0, 0x0, 0x0, 0xfffffd17}, 0x0)
dup2(r3, r4)
ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000380)=r0)
socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f00000003c0)=r2)
r10 = gettid()
rename(0x0, 0x0)
tkill(r10, 0x16)
sendto$packet(0xffffffffffffffff, &(0x7f0000000480)="0600f8fffff7ffff00bcbcfc52f1bc6d26d05ada337d18d58ca41d36d7c4a3e0978267f2ecf1a834bcc925784164b3a220ffb563edff8f4a32d6982b635fe6196bcc4ebd9fb2c39bfc46b5000000000000000000", 0x193, 0x36ea24e3c8b4b0be, 0x0, 0xfd32)

[  192.737057] binder: 8631:8632 ERROR: BC_REGISTER_LOOPER called without request
[  192.739775] input: syz1 as /devices/virtual/input/input33
[  192.808757] binder: 8631:8642 transaction failed 29201/-28, size 6341068275337659430-4158264011573648672 line 3136
[  192.810782] binder: 8631:8642 ioctl c0306201 20000200 returned -14
12:51:45 executing program 5:
r0 = socket$unix(0x1, 0x5, 0x0)
syz_genetlink_get_family_id$tipc(0x0)
ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0))
setuid(0x0)
wait4(0x0, &(0x7f00000000c0), 0x6000000a, 0x0)
pipe(&(0x7f0000000540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4)
bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
ioctl(r0, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x2a)
sendfile(r5, 0xffffffffffffffff, &(0x7f0000000080), 0x9001)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'nr0\x00'})
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8000001b, &(0x7f0000002400)={@local}, &(0x7f0000002440)=0xf)
getpeername$packet(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000027c0)={@remote, @broadcast}, &(0x7f0000002800)=0xc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002980)={'ip6gretap0\x00'})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002a80)={'rose0\x00'})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000002b40)={@loopback}, &(0x7f0000002b80)=0x14)
r6 = openat$null(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$nl_netfilter(r6, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, 0x0, &(0x7f0000000300))
accept4$packet(r2, 0x0, &(0x7f0000002e00), 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000bc0)={{{@in=@empty}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000000240)=0xfffffffffffffcae)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000003000)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000280)=0xe8)
syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@multicast1, @in=@remote}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f00000002c0)=0xe8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
open(&(0x7f00000007c0)='./file0\x00', 0x0, 0x0)
accept4$packet(r2, 0x0, &(0x7f00000045c0), 0x800)
ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c)
sendto$inet(r3, 0x0, 0x47, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_script(r3, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x3d2)
setsockopt$sock_int(r3, 0x1, 0x1000000000008, &(0x7f0000000000)=0xda9, 0x4)
write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)

12:51:45 executing program 4:
r0 = socket$inet(0x2, 0x2, 0x2200000088)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x1004e20, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x8084, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000000c00)=0x1, 0x4)
r1 = timerfd_create(0x0, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x5}}, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
timerfd_gettime(r2, &(0x7f00000000c0))
sendto$inet(r0, &(0x7f00000000c0)="da", 0x1, 0x0, 0x0, 0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
recvfrom$inet(r0, 0x0, 0x0, 0x1013, 0x0, 0x0)

[  192.893110] selinux_nlmsg_perm: 4248 callbacks suppressed
[  192.893119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8646 comm=syz-executor.2
[  192.959923] binder: 8652:8656 BC_INCREFS_DONE u0000000000000000 no match
[  192.979886] binder: 8652:8656 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  192.988570] binder: 8652:8656 got transaction to invalid handle
[  192.995611] binder: 8652:8656 transaction failed 29201/-22, size 0-0 line 3013
12:51:45 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = memfd_create(&(0x7f0000000380)='\x00', 0x0)
ftruncate(r2, 0x1000000)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r4 = openat$cgroup_subtree(r3, &(0x7f0000001540)='cgroup.subtree_control\x00', 0x2, 0x0)
sendfile(r4, r2, 0x0, 0xfffffdef)
pipe(&(0x7f0000000100)={<r5=>0xffffffffffffffff})
write$cgroup_int(r5, &(0x7f0000000180)=0x3, 0xffffffffffffff31)
ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000380))
write$P9_RMKNOD(r5, &(0x7f0000000040)={0x14, 0x13, 0x0, {0x0, 0x2}}, 0xfd95)
ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000040)=<r6=>0x0)
fcntl$lock(r1, 0x24, &(0x7f0000000080)={0x0, 0x2, 0x6c6f, 0xcea3, r6})

12:51:45 executing program 4:
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfb120eb7)
read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="140001006c538c3194b82ecade9858dc7924f4689901591cba82f02a0f6a56b4f43d1b9a9f00560000000000000055dab88b000000150000a56bfb5500"/73], 0x1}}, 0x0)
fsetxattr$security_ima(r2, &(0x7f00000003c0)='security.ima\x00', &(0x7f0000000440)=@sha1={0x1, "f6c22f460365f9360c48948b1b0b911ab5185102"}, 0x15, 0x2)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4)
ioctl$FIBMAP(r1, 0x1, &(0x7f00000004c0)=0x2)
bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23}, 0x10)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
setitimer(0x0, &(0x7f0000000340)={{0x0, 0x7530}}, 0x0)
mmap$binder(&(0x7f0000ff3000/0xb000)=nil, 0xb000, 0x1, 0x11, 0xffffffffffffffff, 0x10001)
ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000140))
r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f0000000380)={0xad, 0x80000001, 0x5, 0x1, 0x12, 0x2, 0x81, 0x7, 0x91, 0x1, 0x0, 0x8})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(r3, &(0x7f0000004b00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)="9033877ace25a0cd47de5752f2fe725302f5297240df794a3f9e8efd1c159b2bb4cfdc71f2cd4ccab950100494", 0x2d}, {0x0}, {&(0x7f00000002c0)="f7fc370763ed7a4dbfaf549cd1dc94c047d2bfd2da573ebddcf5db435637f045346375f1b75c21a0106605fa2c283aaa0014062099dc4b58d700b3a07dbc83010c24cb730b30aee0103d81b75a4f6ce90dd0237bd4b22d66e95966a0ad75b3f8338268b29e2dd7c90b5b33722b010ce947eab220e38600", 0x77}, {0x0, 0xfffffffffffffef1}], 0x4}}, {{0x0, 0x30, &(0x7f0000001f40)=[{&(0x7f0000000080)="4326b5be4c72829e48001bfdce33d9a34689f07e340cec408be4e862cc21d93ea75e6e79c33cb2966b5a3e0a60677b6dbbb84bd6946d811304b2269c4dfbf4b532516ea09b4413681d63ea", 0x4b}, {&(0x7f0000000b40)}, {0x0, 0xfffffffffffffd84}, {&(0x7f0000000f40)="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", 0x358}], 0x10000000000000c1}}], 0x2, 0x80)
sendto$inet(r3, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27)
read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e5e2)
r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
ftruncate(r5, 0x108200)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40042409, 0x0)

[  193.511420] binder: undelivered TRANSACTION_ERROR: 29201
[  193.511775] binder: 8631:8642 ERROR: BC_REGISTER_LOOPER called without request
[  193.515806] binder: BINDER_SET_CONTEXT_MGR already set
[  193.515816] binder: 8631:8642 ioctl 40046207 0 returned -16
12:51:45 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
restart_syscall()
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
sendmmsg$inet6(r1, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@hopopts_2292={{0x38, 0x29, 0x36, {0x5c, 0x3, [], [@generic={0x4, 0x17, "ad9a5263298fec4882ed6266dd522fcec363a57de33d5c"}]}}}], 0x38}}], 0x2, 0x0)

[  193.568134] binder_alloc: 8631: binder_alloc_buf, no vma
[  193.568160] binder: 8631:8679 transaction failed 29189/-3, size 6341068275337659430-4158264011573648672 line 3136
[  193.569580] binder: 8631:8679 ioctl c0306201 20000200 returned -14
[  193.678683] binder: undelivered TRANSACTION_ERROR: 29189
12:51:46 executing program 1:
eventfd2(0x0, 0x0)
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0)
ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7)
ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0))
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(r1, 0x0, 0x0, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
ioctl$RTC_VL_READ(r2, 0x80047013, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
r4 = dup(r3)
setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f00000005c0)=0xff, 0x4)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYRES32], 0x4}}, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x1b, &(0x7f00000002c0)=0x80, 0x4)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='_tun\x00\xff\xff\xff\xff\xff\xff\xff\xdf\x00\x00l', 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
lseek(0xffffffffffffffff, 0x0, 0x2)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0)
ftruncate(r7, 0x2007fff)
sendfile(r4, r7, 0x0, 0x8000fffffffe)

12:51:46 executing program 4:
eventfd2(0x0, 0x0)
pipe(&(0x7f0000000200))
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
dup(r0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000240))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
getpid()

12:51:46 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
preadv(r0, &(0x7f00000017c0)=[{&(0x7f0000000440)=""/165, 0xa5}, {&(0x7f0000000500)=""/194, 0xc2}, {&(0x7f0000000600)=""/18, 0x12}, {&(0x7f0000000640)=""/133, 0x85}, {&(0x7f0000000740)=""/18, 0x12}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x6, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x1)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x366, &(0x7f0000001900)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000018c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r6}]]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001940)=ANY=[@ANYBLOB="2000000014000100000000000000000002000082", @ANYRES32=r6, @ANYBLOB="fee63397a608381556d6a5982f71734980bbd795a5e98159bd000200e00000026a53"], 0x20}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001400010000004f2fd7f0cfef6c7800005a997e845de53dec0baae3c871b8590e9425a046db22b3891fab9550108c1c", @ANYRES32=r6, @ANYBLOB="08000200e0000001"], 0x20}}, 0x0)
r7 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
r8 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r8, 0x4, 0x6100)
ftruncate(r8, 0x108200)
r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r8, r9, 0x0, 0x8000fffffffe)
ioctl$RTC_WKALM_RD(r8, 0x80287010, &(0x7f0000001840))
fcntl$setstatus(r7, 0x4, 0x6100)
ftruncate(r7, 0x108200)
r10 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r7, r10, 0x0, 0x8000fffffffe)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x12, 0xb, &(0x7f0000001980)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0xffffffff, 0x36, &(0x7f0000000100)=""/54, 0x41000, 0x4, [], r6, 0x1, r10, 0x8, &(0x7f0000000140)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0xa, 0x80000000, 0x3}, 0x10}, 0x70)
setsockopt$inet6_int(r0, 0x29, 0x5, 0x0, 0x0)
r11 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0xd2dcee0801976a79, 0x0)
unlinkat(r11, &(0x7f0000000300)='./bus\x00', 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x1e)
wait4(0x0, 0x0, 0x0, 0x0)

12:51:46 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
ftruncate(r4, 0x8200)
r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x2, 0x0)
write$binfmt_misc(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="608e1602"], 0x1)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x800002, 0x11, r5, 0x0)
getresuid(&(0x7f00000004c0), &(0x7f0000003280), 0x0)
ftruncate(r3, 0x2081fc)
fcntl$setstatus(r1, 0x4, 0x44800)
r7 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x481, 0xffffffffffffffff, &(0x7f0000000000), 0xfffffffffffffebc, 0x1, 0x0, 0x1}])

[  194.034308] binder: 8712:8713 BC_INCREFS_DONE u0000000000000000 no match
[  194.042494] binder: 8712:8713 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  194.042585] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  194.059445] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8706 comm=syz-executor.1
[  194.075759] binder: 8712:8713 got transaction to invalid handle
[  194.084499] binder: 8712:8713 transaction failed 29201/-22, size 0-0 line 3013
[  194.103389] binder: 8712:8713 BC_INCREFS_DONE u0000000000000000 no match
[  194.111007] binder: 8712:8713 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  194.119029] binder: 8712:8713 got transaction to invalid handle
[  194.125613] binder: 8712:8713 transaction failed 29201/-22, size 0-0 line 3013
12:51:46 executing program 0:
r0 = gettid()
clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0)
fcntl$setlease(r1, 0x400, 0x1)
fcntl$setown(r1, 0x8, 0x0)
execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000)
execve(0x0, 0x0, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x45c)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000140))
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0xb)
ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0)
pipe(&(0x7f0000000100)={<r3=>0xffffffffffffffff})
write$cgroup_int(r3, &(0x7f0000000180)=0x3, 0xffffffffffffff31)
ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000380))
write$P9_RMKNOD(r3, &(0x7f0000000040)={0x14, 0x13, 0x0, {0x0, 0x2}}, 0xfd95)
ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0xe)
write(r2, &(0x7f0000000200)="fbf4e5a34eb6f5e23eecdf800b5bed2b05dd810339976ffe8567f233e7769617e693bd0b65dfa3dd4b7bb848e44d01d6468cd8", 0x33)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
lsetxattr$smack_xattr_label(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='security.SMACK64IPOUT\x00', &(0x7f0000000900)={'\x00'}, 0x2, 0x0)
execveat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000240)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', &(0x7f0000000180)='\x00'], &(0x7f00000003c0)=[&(0x7f0000000380)='syz1\x00'], 0x1200)
tkill(r0, 0x1000000000016)

12:51:46 executing program 2:
r0 = socket$unix(0x1, 0x2, 0x0)
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080), &(0x7f0000000180)=0x4)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
read(r1, &(0x7f0000000200)=""/250, 0x50c7e70e)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r3)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)=<r5=>0x0)
sched_setparam(r5, &(0x7f0000000140))
r6 = creat(&(0x7f0000000700)='./bus\x00', 0x11)
fcntl$setstatus(r6, 0x4, 0x6100)
set_tid_address(&(0x7f0000000040))
write$FUSE_INIT(r4, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50)
clone(0x2142001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x11000490)
write$cgroup_type(r6, &(0x7f0000000380)='threaded\x00', 0x9)
socket(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./control\x00', 0x8)
r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$FIDEDUPERANGE(r7, 0xc0189436, &(0x7f0000000440)=ANY=[@ANYBLOB="000000000000d7000000000000000000000000000000000000a1493343ccb69cc535c5f28a31b409df160f5bafe41612bfdfc235a6abe4b5354ec328132ba8addfd0f7d6d19dc7d347a52ec8b68b75c4d95471d63bcddff1bbfca41134759ee094bf67040fa165727014efcbc787bdaf3ae69d9a769eac7e8ce74ea0353b0c46b0f74a2e61aec711e5dea2d0d278f235a2f73f89f941bfe566753b6b863d013a84be215082e365b817493ca0"])
ioctl$RNDGETENTCNT(r7, 0x80045200, &(0x7f0000000340))
r8 = gettid()
r9 = syz_open_procfs(r8, &(0x7f00000001c0)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f')
write$selinux_context(r9, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b)
accept4$unix(r9, 0x0, &(0x7f0000000000), 0x800)
write$smack_current(r9, &(0x7f0000000500)=ANY=[@ANYBLOB="ea8d5d7659d4ad55e5a60da1a5a19dcd826a706c4d4df54b4418279f16c54f72d4f21058d9e51c9496771015bae0ff2c03071800580f495cdf922eb06225d95f96a520bd7a092215e0e3af74248f4cd3d736238e13311d7fed0dfcccf7545ce6c89d626d60ba9ba3f5385f7e3c422f8018fb854cfae498f32348dae1a1e9c2281e3fae2366cea5209a6de0cdaf85b4a81ae0a512d2551192ab765b3a953b56c580b762775192cd22aca3dbef0fa2ed06d3318a8450f3b0ae7015a84893b137b3177bede3a129722ecffc09c2107411eeb8d92574e98c4046dff0"], 0x2b)
r10 = open(&(0x7f0000022ff6)='./control\x00', 0x20000, 0x0)
mkdirat(r10, &(0x7f0000000100)='./control\x00', 0x0)
rmdir(&(0x7f0000000040)='./control\x00')

[  194.536799] input: syz1 as /devices/virtual/input/input34
[  195.286029] input: syz1 as /devices/virtual/input/input35
12:51:48 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
socket$unix(0x1, 0x2, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000000c0)={0x2})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f00000001c0)=0x1)
bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10)
sendto$inet(r3, &(0x7f0000000280)="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", 0x16b, 0x20008803, 0x0, 0x0)
ppoll(&(0x7f0000000180)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x989680}, 0x0, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r9}]]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x82, r9}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r9}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7, r9})

12:51:48 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000180)='attr/keycreate\x00')
recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f0000000040)=@ipx, 0xfffffffffffffe44, &(0x7f0000000440)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000400)=""/28, 0x1c}], 0x5}}], 0x400000000000126, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0)
clone(0x7f8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
socket$inet(0x2, 0x2, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x266, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="40342bbbf83f212014520f34"], 0xc}}, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x40)
pipe2(&(0x7f0000000140), 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3})
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r2, 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x83, &(0x7f00000003c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812})
io_setup(0x20000000002, &(0x7f0000000240)=<r6=>0x0)
io_submit(r6, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}])
dup3(r4, r5, 0x0)
ioctl$sock_ifreq(r4, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))

12:51:48 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000002dff8)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
writev(r1, &(0x7f0000001340)=[{&(0x7f0000001240)="1d", 0x1}], 0x1)
clock_gettime(0x0, &(0x7f0000000040))
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000), 0x10)
r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
write$binfmt_elf32(r2, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x86, 0x1c, 0x3f, 0x1, 0x7, 0x3e, 0xca4, 0x69, 0x38, 0x258, 0x80000000, 0x59, 0x20, 0x1, 0x4, 0x8, 0x6b8}, [{0x6474e551, 0x2, 0x5, 0x7fff, 0x80000000, 0x7, 0xfffffffd}, {0x1, 0x9, 0x4, 0x0, 0x9, 0x2, 0x52e70576, 0x7ae9c89}], "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", [[]]}, 0x1178)
recvmmsg(r0, &(0x7f000000a780)=[{{0x0, 0x0, &(0x7f000000a6c0)=[{&(0x7f0000008240)=""/100, 0x64}], 0x1}}], 0x1, 0x200000000100, 0x0)

12:51:48 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x200000000038)
ptrace$cont(0x18, r1, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r1, 0x0, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x14)
fcntl$setstatus(r2, 0x4, 0x6100)
ftruncate(r2, 0x108200)
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x200000000038)
ptrace$cont(0x18, r3, 0x0, 0x0)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r3, 0x0, 0x0)
ioprio_get$pid(0x2, r3)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r2, r4, 0x0, 0x8000fffffffe)
r5 = gettid()
ptrace$setopts(0x4206, r5, 0x0, 0x0)
tkill(r5, 0x200000000038)
ptrace$cont(0x18, r5, 0x0, 0x0)
ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r5, 0x0, 0x0)
write$cgroup_pid(r2, &(0x7f0000000100)=r5, 0x12)
r6 = syz_open_procfs(r1, &(0x7f0000000080)='net/netlink\x00')
setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000180)={0x77359400}, 0x10)
ioctl$BLKROSET(r6, 0x125d, &(0x7f00000000c0)=0x7f)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812})
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0xffe)

12:51:48 executing program 0:
socketpair(0x4, 0xa, 0xc5, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000000800010006081000418e00000004fcff", 0x58}], 0x1)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a})
bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)={&(0x7f00000002c0)='./file0\x00', 0x0, 0x14}, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00')
add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
add_key$user(0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x26080, 0x0)
setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000200)=@fragment={0x1d, 0x0, 0x1, 0x1, 0x0, 0x9, 0x64}, 0x8)
keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000140)=0x73, 0x4)
unshare(0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000030, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
sendto$inet6(r1, &(0x7f0000000180)='\\AhHI', 0x2, 0xc8c0, 0x0, 0xfffffffffffffccb)
close(r1)

12:51:48 executing program 3:
clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = getpid()
r1 = gettid()
r2 = getpid()
rt_sigqueueinfo(r1, 0x10, &(0x7f0000000000)={0x1b, 0x3, 0x8})
rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000100))
ptrace(0x10, r2)
ptrace$pokeuser(0x6, r2, 0x388, 0xffffffffffffffff)
ptrace$pokeuser(0x6, r2, 0x388, 0x0)
ptrace$pokeuser(0x6, r0, 0x388, 0x0)

12:51:48 executing program 3:
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc001084}, 0xc, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[]}, 0x1, 0x0, 0x0, 0x84}, 0x8004)
fchdir(0xffffffffffffffff)
creat(0x0, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
read(r0, &(0x7f0000000200)=""/250, 0x50c7e5e2)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4)
r3 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0)
mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
renameat2(r3, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f0000000280)='./file0\x00', 0x2)
renameat2(r3, 0x0, r3, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2)
ioctl$KDSETLED(r3, 0x4b32, 0x4)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0x200)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='TIPCv2\x00')
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

12:51:48 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0xff, 0x1}, 0xa)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @empty}, 0x1c)

[  195.905886] binder: 8745:8749 BC_INCREFS_DONE u0000000000000000 no match
[  195.917112] binder: 8745:8749 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  195.942617] binder: 8745:8749 got transaction to invalid handle
[  195.974881] binder: 8745:8749 transaction failed 29201/-22, size 0-0 line 3013
12:51:49 executing program 1:
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x4}, {0x80000006}]}, 0x10)
r3 = socket$inet6(0xa, 0x4, 0x2f)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0)

12:51:49 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setstatus(r2, 0x4, 0x42000)
r4 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
splice(r4, 0x0, r3, 0x0, 0x9, 0x0)
dup3(r0, r2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000100)=0x20)
write$P9_RWSTAT(r1, &(0x7f00000000c0)={0x7}, 0x7)

12:51:49 executing program 3:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
r4 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800)
r5 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r6 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x0, 0x8}, @fd}, &(0x7f00000000c0)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0})

12:51:49 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000000)='fusectl\x00', 0x0, 0x0)
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff})
write$cgroup_int(r0, &(0x7f0000000180)=0x3, 0xffffffffffffff31)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000380))
write$P9_RMKNOD(r0, &(0x7f0000000040)={0x14, 0x13, 0x0, {0x0, 0x2}}, 0xfd95)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x14, 0x4)

12:51:49 executing program 0:
r0 = socket$inet6(0x10, 0x108000000003, 0x0)
sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5500000019007faf37c0f2b2a4a280930a00001000a843dc90052369390009002f000000000000001900050000000000000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r5}]]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x82, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@local, @dev={0xfe, 0x80, [], 0xd}, @loopback, 0x0, 0x3, 0x7f, 0x0, 0x0, 0x8084, r5})
openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x400000, 0x0)

[  196.973909] binder: 8787:8789 BC_INCREFS_DONE u0000000000000000 no match
[  196.987403] binder: 8787:8789 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  196.995981] binder: 8787:8789 got transaction to invalid handle
[  197.006856] binder: 8787:8789 transaction failed 29201/-22, size 0-0 line 3013
[  197.019096] binder: 8786:8800 BC_INCREFS_DONE u0000000000000000 no match
[  197.027779] binder: 8786:8800 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  197.037470] binder: 8786:8800 got transaction to invalid handle
[  197.043770] binder: 8786:8800 transaction failed 29201/-22, size 0-0 line 3013
[  197.052588] binder: 8786:8800 BC_INCREFS_DONE u0000000000000000 no match
[  197.060089] binder: 8786:8800 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  197.068191] binder: 8786:8800 got transaction to invalid handle
[  197.074500] binder: 8786:8800 transaction failed 29201/-22, size 0-0 line 3013
[  197.083641] binder: 8786:8800 BC_INCREFS_DONE u0000000000000000 no match
[  197.090533] binder: 8786:8800 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  197.098390] binder: 8786:8800 got transaction to invalid handle
[  197.104861] binder: 8786:8800 transaction failed 29201/-22, size 0-0 line 3013
[  197.113923] binder: 8786:8800 BC_INCREFS_DONE u0000000000000000 no match
[  197.121465] binder: 8786:8800 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  197.129016] binder: 8786:8800 got transaction to invalid handle
[  197.135267] binder: 8786:8800 transaction failed 29201/-22, size 0-0 line 3013
[  197.144229] binder: 8786:8800 BC_INCREFS_DONE u0000000000000000 no match
[  197.151197] binder: 8786:8800 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  197.158957] binder: 8786:8800 got transaction to invalid handle
[  197.165258] binder: 8786:8800 transaction failed 29201/-22, size 0-0 line 3013
[  197.174249] binder_alloc: 8786: binder_alloc_buf, no vma
[  197.180390] binder: 8786:8800 transaction failed 29189/-3, size 96-24 line 3136
[  197.189106] binder: undelivered TRANSACTION_ERROR: 29189
[  197.195370] binder: 8786:8800 unknown command 1818587951
[  197.196644] binder: 8786:8810 BC_INCREFS_DONE u0000000000000000 no match
[  197.196652] binder: 8786:8810 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  197.196663] binder: 8786:8810 got transaction to invalid handle
[  197.196672] binder: 8786:8810 transaction failed 29201/-22, size 0-0 line 3013
[  197.196802] binder: 8786:8810 BC_INCREFS_DONE u0000000000000000 no match
[  197.196808] binder: 8786:8810 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  197.196813] binder: 8786:8810 got transaction to invalid handle
[  197.196820] binder: 8786:8810 transaction failed 29201/-22, size 0-0 line 3013
[  197.196935] binder: 8786:8810 BC_INCREFS_DONE u0000000000000000 no match
[  197.196941] binder: 8786:8810 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  197.196946] binder: 8786:8810 got transaction to invalid handle
[  197.196952] binder: 8786:8810 transaction failed 29201/-22, size 0-0 line 3013
[  197.197140] binder: 8786:8809 BC_INCREFS_DONE u0000000000000000 no match
[  197.197144] binder: 8786:8809 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  197.197148] binder: 8786:8809 got transaction to invalid handle
[  197.197155] binder: 8786:8809 transaction failed 29201/-22, size 0-0 line 3013
[  197.197439] binder_alloc: 8786: binder_alloc_buf, no vma
[  197.197455] binder: 8786:8810 transaction failed 29189/-3, size 96-24 line 3136
[  197.197712] binder: undelivered TRANSACTION_ERROR: 29189
[  197.337045] binder: 8786:8800 ioctl c0306201 200002c0 returned -22
12:51:51 executing program 5:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x21a}}], 0x1, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@empty}, 0x257)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000140)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00')
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
ftruncate(r2, 0x108200)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x840c0}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r4, 0x2, 0x70bd25, 0x25dfdbfd, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x401}}, ["", "", "", "", "", "", ""]}, 0x24}}, 0x42)
preadv(r1, &(0x7f00000017c0), 0x3a8, 0x0)

12:51:51 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = dup2(r4, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000080))
dup3(r1, r2, 0x0)
pipe(&(0x7f0000000100)={<r6=>0xffffffffffffffff})
write$cgroup_int(r6, &(0x7f0000000180)=0x3, 0xffffffffffffff31)
ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000380))
write$P9_RMKNOD(r6, &(0x7f0000000040)={0x14, 0x13, 0x0, {0x0, 0x2}}, 0xfd95)
r7 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
fchdir(r7)
r8 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240)='nbd\x00')
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000440)=""/46, &(0x7f0000000480)=0x2e)
sendmsg$NBD_CMD_STATUS(r8, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xb, &(0x7f0000000380)={&(0x7f0000000340)={0xfffffffffffffd4c, r9, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x3f0}, 0x1, 0x0, 0x0, 0x4020000}, 0x0)
sendmsg$NBD_CMD_CONNECT(r7, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c68a1b0291775eca1e1ad5e09ba3805ea43e568c52c5438ada29f041ffdff07474e9538dc3b848d19444b63dae61e4b7e4fd3b6bb", @ANYRES16=r9, @ANYBLOB="000427bd7000fddbdf25010000000c00050004000000000000000c0003000100000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r9, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x108}]}, 0x20}, 0x1, 0x0, 0x0, 0x6084}, 0x101)
r10 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r10, 0x4, 0x6100)
ftruncate(r10, 0x108200)
r11 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r10, r11, 0x0, 0x8000fffffffe)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x11c9bd873a674b78}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x49ad648eababfaa1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x80000000000000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xc8}]}, 0x38}}, 0x4014000)

12:51:51 executing program 0:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xb, 0x8}, {0xb0}]}, 0x119e07dca43d7bb6)
r1 = socket$inet6(0xa, 0x1200000002, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000180)={0xa, 0x4e30, 0x0, @empty}, 0x1c)

12:51:51 executing program 2:
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x1000000000000000)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$SEG6(0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
pipe2(0x0, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x2, 0x0, @rand_addr, 0x6}, 0x1c)
splice(r1, 0x0, r0, 0x0, 0x1000000000000003, 0x0)
socket(0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80800)
getsockopt$inet_int(r2, 0x0, 0xf, 0x0, 0x0)
socket(0x0, 0x800, 0x6)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000040)={0x7, 0x7f, 0x3}, 0xc)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
socket(0x5, 0x0, 0x1)
socket(0x0, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x0)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0)
sendto$packet(r1, &(0x7f00000000c0), 0xfffffffffffffd4d, 0x1, 0x0, 0x44)

12:51:51 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xc50, 0x61, 0x10, 0x18}, [@ldst={0x4, 0x0, 0x0, 0x9}]}, &(0x7f0000003ff6)='G\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)

12:51:51 executing program 1:
pipe(&(0x7f00000013c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r2)
r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
truncate(&(0x7f00000000c0)='./bus\x00', 0xa00)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket(0x200000100000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', <r6=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @random="962c85e043d8"}, 0x14)
r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r8 = socket$inet6(0xa, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r9, r9, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r10})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r10})
bind$packet(r7, &(0x7f00000003c0)={0x11, 0x4, r10, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r3, 0x0, 0x2)
sendfile(r3, r7, 0x0, 0xfffffffffffffffc)
sendfile(r3, r7, 0x0, 0x8000fffffffe)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8005)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'})
fstat(r4, &(0x7f00000008c0))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket(0x200000100000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000000c0)={'nr0\x00', <r14=>0x0})
bind$packet(r13, &(0x7f0000000100)={0x11, 0x0, r14, 0x1, 0x0, 0x6, @random="962c85e043d8"}, 0x14)
r15 = accept4$packet(r13, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000004c0)=0x14, 0x140000)
r16 = dup3(r15, r2, 0x0)
ioctl$EVIOCGNAME(r16, 0x80404506, &(0x7f0000001800)=""/151)
syz_genetlink_get_family_id$ipvs(&(0x7f0000001380)='IPVS\x00')
r17 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fallocate(r17, 0x0, 0x0, 0x8020003)
sendmsg$IPVS_CMD_NEW_SERVICE(r17, &(0x7f0000001440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x26009020}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x200080d0}, 0x20004800)
sendto(r16, 0x0, 0x0, 0x4000000, 0x0, 0x0)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
pipe(&(0x7f0000000200)={<r18=>0xffffffffffffffff})
r19 = socket$inet_udp(0x2, 0x2, 0x0)
close(r19)
splice(r18, 0x0, r19, 0x0, 0x2, 0x0)
ioctl$PPPIOCGNPMODE(r18, 0xc008744c, &(0x7f0000000380)={0x2b})
ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000180)=""/72)
ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000300))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r1, 0x0)

12:51:51 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24)
r1 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
ftruncate(r2, 0x108200)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
write$P9_RREMOVE(r3, &(0x7f0000000080)={0x7, 0x7b, 0x2}, 0x7)
write$binfmt_script(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="302120266ecb9f04d4f936cd0fb54e76"], 0x10)
fchdir(0xffffffffffffffff)
setxattr$smack_xattr_label(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='security.SMACK64MMAP\x00', &(0x7f0000000140)={'\x00'}, 0x2, 0x6)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

12:51:51 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x27e}, 0x48)
r2 = getpid()
ptrace(0x10, r2)
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xfffffef3)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r3, 0xc0, &(0x7f00000007c0)={0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0xc314, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x1, 0xf, 0x7fff, 0x4}, &(0x7f0000000440)=0x7f, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x9}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000140)='[lo\x00', r4}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001a40)={r2, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000001a00)='vmnet1\x00', r4}, 0x30)
r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r4}, 0xc)
fsetxattr$security_smack_transmute(r5, &(0x7f00000001c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000240)='TRUE', 0x4, 0x1)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r1, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = dup3(r7, r6, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r9, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000000100)=0x32, 0x4)
connect$inet(r9, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r9, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

12:51:51 executing program 5:
symlink(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='./file1\x00')
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='devpts\x00E\xe6\xcb\xf6~\x11mS,!\xd7\xc5_\x96j\xc3\xcb\xe8@\x8a\xd7\x0f\xbc\\\xbe\x9b2\xc4\x8cp\xe8\xe2\xdf\xdf\xb6\xc6}\xde\x0e9\xd9\x8b\xf6e\x04g7T:-*w\xf7I>#htW\xeac_\xf5\x0e\xd7\xab\x15\b\x02 \xcdu\xbf\xfaho>\xd7U\xfc\x97L\xe0\'\xf4\x8e\xd0\x00'/124, 0x801, 0x0)
umount2(&(0x7f0000000080)='./file1\x00', 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8000, 0xd0ba333439136580)

[  198.926125] input: syz1 as /devices/virtual/input/input36
12:51:51 executing program 5:
r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x100)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40200, 0x0)
ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000040)=r3)
ftruncate(r1, 0x2081fc)
r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x1800007, 0x11, r4, 0x0)
madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2)
write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
creat(&(0x7f0000000140)='./bus\x00', 0x0)

12:51:51 executing program 0:
pipe(&(0x7f0000000840)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000700))
r2 = socket(0x80000000000000a, 0x2, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x2000, 0x0)
getsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB="00ce00"/16], 0x3}}, 0x0)

12:51:51 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
listen(r0, 0x80)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$sock_proto_private(0xffffffffffffffff, 0x89e6, &(0x7f0000000140)="1ea9b48fec0ec55e7168d989bac463e347db323bc436901180d0e04c08b709d8124ead04056215f705d31936f076da9653810987fcf090ba1387c78f807c6e3a00660851423780932c31c481cd")
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x4b5)
sendto$inet6(r2, &(0x7f0000000080)='F', 0x387aa3, 0x20000013, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c)

12:51:51 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}})
r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x100000001, 0x0, 0x101, 0x0, 0xfffffffe}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
dup3(r0, r1, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)

12:51:51 executing program 1:
r0 = eventfd2(0x87, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, <r1=>0x0})
fcntl$getown(r0, 0x9)
r2 = getpgid(r1)
r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00')
readv(0xffffffffffffffff, &(0x7f0000002340), 0x100000000000003a)
readv(r3, &(0x7f0000000580), 0x25b)
r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000004c0)='\x00\x00\x00\x00\x00\x00\x01\x01\x00\x00\x00\x80\x00', 0x0, 0x0)
r5 = socket$inet(0x2, 0x80000, 0x6)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6_udplite(0xa, 0x2, 0x88)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000100)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ')
sendmmsg$inet6(r6, &(0x7f0000002ac0), 0x0, 0x4008)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0xffffffe, @remote, 0x6}, 0x1c, 0x0}}], 0x1, 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0)
r8 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r8, &(0x7f0000002ac0), 0x0, 0x0)
syncfs(0xffffffffffffffff)
setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000000c0)=0x80000000021, 0x4)
r9 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r9, 0x4, 0x6100)
ftruncate(r9, 0x108200)
r10 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r9, r10, 0x0, 0x8000fffffffe)
setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000480)=0x7d, 0x102)
r11 = syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x5c001)
openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0)
clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x8, 0x4, 0x1800000000009)
r12 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0)
close(r12)
r13 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082)
r14 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0)
pwritev(r14, &(0x7f0000000440)=[{&(0x7f00000003c0)="03006f", 0x3}], 0x1, 0x81003)
ioctl$LOOP_CHANGE_FD(r13, 0x4c00, r14)
write$binfmt_elf32(r4, &(0x7f0000001ec0)=ANY=[@ANYBLOB="37d6dd1a2b7dceb447fbe16e1d906c97e339012c36ada06b9f161f37328eeb938f5c7f321f93ee749f07fc12133f4cc6b160fdc792e3f901c9430763ccb2af3152ffa280daacd7cb7b92a34de0f1df9e264cab160113bc9bec9e017a8db58546be8d0b2d2dcd58de75ca6183eca5a3aafd143504bce992529286880939149b2a63875c708980ef15202c0e7082ec43c7f5a9038f647b4674225c02a98990453ac7c82dca444c882ee9fa0fbb952fba7f15d68a936c567c6fbc0c9bfb9f74fd28d94a1f7584b3256a2d7b96c8464da8d272cbd44df2d71b4b8268222af8f90eaf0b1f474f89e92ab5064cb9a4a122a7bc0ee482c38a22d661a58bf6549c09000000000000003dbb30ef7a2dcb616f13e1583c68739402ba2487ab7252140400000098ea9cbb24810bcfc21b2b3100000000000000000000000000000000000000000000e4770000000000000000000000004a4c16c5ce0773473b88c752388b5ad2bd96eb7cd8e4605046fc09ae6ae313d7cdaa32cbd74545b070d4880000000000000000000000d8dd1ee848549f7e7ce9a770ac388e8569c73dc41c129560761c719560e8bbde5a1bfea4e611c24480c256448337e7bd2f55c2c1fe160c99701e9c34c864fdfbc25b3ba3dde0cc577395d548575c8ebd561823101c84a91891934cdfa2c265ebc8274cff5997a11518321e63e06b7102eeb2cc2a227ef014d5233663b2ef68ee5581062fddcb9807d95f603cbe1b82c5b184b6671c75f0e614eeded1dbf49a3e5aed0dcf953372da3bc37006b9d361a16f330d83e18cb3c5a68403eb720daae4092256933142849d93f400000000"], 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r15 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r15, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
r16 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r16, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
fcntl$setstatus(r16, 0x4, 0x40800)
pipe(&(0x7f0000000600)={<r17=>0xffffffffffffffff, <r18=>0xffffffffffffffff})
write(r18, &(0x7f00000001c0), 0x526987c9)
lstat(&(0x7f0000000040)='./bus\x00', 0x0)
openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0)
eventfd(0x8)
fstat(r11, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, <r19=>0x0})
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000980)={0xa0, 0x19, 0x0, {0x3720, {0x2, 0x1}, 0x0, 0x0, r19, 0x2000000000445, 0x8, 0x100000000, 0xc, 0x0, 0x10000, 0x7fff, 0x5, 0x0, 0x915, 0xac46, 0x0, 0x20000000000003, 0x0, 0xfffffffffffffffc}}, 0xa0)
readv(r12, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000000a40)=""/4110, 0x100e}, {0x0}], 0x3)
read(r17, &(0x7f0000000700)=""/250, 0xffffffc9)
sendfile(r13, r14, 0x0, 0x180003)

[  199.631188] binder: 8878:8878 BC_INCREFS_DONE u0000000000000000 no match
[  199.638860] binder: 8878:8878 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  199.646471] binder: 8878:8878 got transaction to invalid handle
[  199.653125] binder: 8878:8878 transaction failed 29201/-22, size 0-0 line 3013
[  199.661140] binder: 8878:8878 BC_INCREFS_DONE u0000000000000000 no match
[  199.668416] binder: 8878:8878 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  199.676273] binder: 8878:8878 got transaction to invalid handle
[  199.682779] binder: 8878:8878 transaction failed 29201/-22, size 0-0 line 3013
[  199.762794] input: syz1 as /devices/virtual/input/input37
12:51:52 executing program 5:
r0 = socket$inet6(0xa, 0x100800000000002, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000300)=ANY=[@ANYBLOB="18010006000010001800000400ff01808cb6e9b81e8eae0080007204000000"], 0x18)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
sendfile(r0, r1, 0x0, 0x88001)
sendmmsg(r0, &(0x7f0000005780), 0x4000000000000d2, 0x0)

12:51:52 executing program 2:
syz_genetlink_get_family_id$tipc(0x0)
ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0))
setuid(0x0)
wait4(0x0, &(0x7f00000000c0), 0x6000000a, 0x0)
pipe(&(0x7f0000000540)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4)
bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="cc000000190000000000000000000000ac1e0001000000000000000000000000fe88000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="07000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f680000000000000000000000c70000000000000000000000000000000000e7ff00000000000000000000000000000000000000005c482fa4853f126304000000000014000d0000000000000000"], 0xcc}, 0x8}, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x4000, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'nr0\x00'})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000027c0)={@remote, @broadcast}, &(0x7f0000002800)=0xc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002a80)={'rose0\x00'})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @link_local}, 0x0)
r5 = openat$null(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r6 = syz_open_procfs(0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000002bc0)={{{@in=@initdev, @in6=@mcast2}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000300)=0xe8)
r7 = socket(0x10, 0x80002, 0x0)
getsockopt$netlink(r7, 0x10e, 0x9, 0x0, &(0x7f0000000280))
r8 = socket(0x10, 0x80002, 0x0)
getsockopt$netlink(r8, 0x10e, 0x9, 0x0, &(0x7f0000000280))
r9 = socket(0x10, 0x80002, 0x0)
getsockopt$netlink(r9, 0x10e, 0x9, 0x0, &(0x7f0000000280))
getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000580)={{{@in=@empty}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000002f40)=0xe8)
r10 = syz_open_dev$mice(0x0, 0x0, 0xa4bcd6ca7f9c8017)
r11 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
mkdirat(r11, &(0x7f0000000040)='./file0\x00', 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f0000000340)=0x132)
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, 0x0, &(0x7f00000033c0))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
getpeername$packet(r1, &(0x7f0000003840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000003880)=0x14)
open(&(0x7f00000007c0)='./file0\x00', 0xc580, 0x0)
accept4$packet(r1, 0x0, 0x0, 0x0)
ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c)
sendto$inet(r2, 0x0, 0x47, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_script(r2, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x3e1)
setsockopt$sock_int(r2, 0x1, 0x1000000000008, &(0x7f0000000000)=0xda9, 0x4)
r13 = gettid()
ptrace$setopts(0x4206, r13, 0x0, 0x0)
tkill(r13, 0x200000000038)
ptrace$cont(0x18, r13, 0x0, 0x0)
ptrace$setregs(0xd, r13, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r13, 0x0, 0x0)
r14 = gettid()
ptrace$setopts(0x4206, r14, 0x0, 0x0)
tkill(r14, 0x200000000038)
ptrace$cont(0x18, r14, 0x0, 0x0)
ptrace$setregs(0xd, r14, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r14, 0x0, 0x0)
r15 = gettid()
ptrace$setopts(0x4206, r15, 0x0, 0x0)
tkill(r15, 0x200000000038)
ptrace$cont(0x18, r15, 0x0, 0x0)
ptrace$setregs(0xd, r15, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r15, 0x0, 0x0)
r16 = gettid()
ptrace$setopts(0x4206, r16, 0x0, 0x0)
tkill(r16, 0x200000000038)
ptrace$cont(0x18, r16, 0x0, 0x0)
ptrace$setregs(0xd, r16, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r16, 0x0, 0x0)
r17 = gettid()
ptrace$setopts(0x4206, r17, 0x0, 0x0)
tkill(r17, 0x200000000038)
ptrace$cont(0x18, r17, 0x0, 0x0)
ptrace$setregs(0xd, r17, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r17, 0x0, 0x0)
r18 = gettid()
ptrace$setopts(0x4206, r18, 0x0, 0x0)
tkill(r18, 0x200000000038)
ptrace$cont(0x18, r18, 0x0, 0x0)
ptrace$setregs(0xd, r18, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r18, 0x0, 0x0)
r19 = gettid()
ptrace$setopts(0x4206, r19, 0x0, 0x0)
tkill(r19, 0x200000000038)
ptrace$cont(0x18, r19, 0x0, 0x0)
ptrace$setregs(0xd, r19, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r19, 0x0, 0x0)
r20 = gettid()
ptrace$setopts(0x4206, r20, 0x0, 0x0)
tkill(r20, 0x200000000038)
ptrace$cont(0x18, r20, 0x0, 0x0)
ptrace$setregs(0xd, r20, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r20, 0x0, 0x0)
r21 = gettid()
ptrace$setopts(0x4206, r21, 0x0, 0x0)
tkill(r21, 0x200000000038)
ptrace$cont(0x18, r21, 0x0, 0x0)
ptrace$setregs(0xd, r21, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r21, 0x0, 0x0)
r22 = gettid()
ptrace$setopts(0x4206, r22, 0x0, 0x0)
tkill(r22, 0x200000000038)
ptrace$cont(0x18, r22, 0x0, 0x0)
ptrace$setregs(0xd, r22, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r22, 0x0, 0x0)
r23 = gettid()
ptrace$setopts(0x4206, r23, 0x0, 0x0)
tkill(r23, 0x200000000038)
ptrace$cont(0x18, r23, 0xfffffffffffffffc, 0x74bf)
ptrace$setregs(0xd, r23, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r23, 0x0, 0x0)
r24 = gettid()
ptrace$setopts(0x4206, r24, 0x0, 0x0)
tkill(r24, 0x200000000038)
ptrace$cont(0x18, r24, 0x0, 0x0)
ptrace$setregs(0xd, r24, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r24, 0x0, 0x0)
r25 = gettid()
ptrace$setopts(0x4206, r25, 0x0, 0x0)
tkill(r25, 0x200000000038)
ptrace$cont(0x18, r25, 0x0, 0x0)
ptrace$setregs(0xd, r25, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r25, 0x0, 0x0)
r26 = gettid()
ptrace$setopts(0x4206, r26, 0x0, 0x0)
tkill(r26, 0x200000000038)
ptrace$cont(0x18, r26, 0x0, 0x0)
ptrace$setregs(0xd, r26, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r26, 0x0, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000700)=ANY=[@ANYRESDEC, @ANYRES64=r3, @ANYRES16, @ANYPTR64=&(0x7f0000000840)=ANY=[@ANYPTR=&(0x7f0000000800)=ANY=[@ANYPTR64, @ANYBLOB="b157df0dc376425846eefd44669fdfb81436b87b1b751a5ed920f0aba53f142f", @ANYRES64=r10], @ANYRESHEX=r7, @ANYPTR64=&(0x7f0000000bc0)=ANY=[@ANYPTR=&(0x7f00000008c0)=ANY=[@ANYRES32=r9, @ANYRES32=r19, @ANYRESDEC=r20, @ANYRESHEX=r21], @ANYRES64=r0, @ANYPTR=&(0x7f0000000900)=ANY=[@ANYRESOCT=r9, @ANYRESDEC, @ANYPTR, @ANYPTR, @ANYRESHEX=r22, @ANYRES16=r12, @ANYRESDEC=r4], @ANYRES64=r23, @ANYPTR64=&(0x7f0000000c00)=ANY=[@ANYBLOB="d364e937ef2190f990016c567bda6c9667989d4a151db62a6738c0eb645e9e3e192807f32524dcf950d72e49bf2e56", @ANYRES16=r24, @ANYRES64=r25, @ANYPTR64, @ANYBLOB="99f4d8448bf42f8a551d76009a56076523329cabaf308691e33197512b9f51142b5d72da89bb25628ae38e16733d7bea901983b2a2068f188c3532dde60137a12f14017810cbaffcf0d62fe761e44cc2d08d5c415efe90393d6d5508b56d2ad25240a42a36091b4c8c9c9fca6ff971f6d0bc86558b57afbd6adb9f793edf44d2bd1b05a144df346c3d617221592f32332aee41ec34afe338bcd0ecd448c964dd3a43c6ae53f7f7513adb122265620988bd03cc3ce3c72f0197c7788c1bfd176b7d48fff7a1c69ab05a7f80956ab1482465f383d9c1c4c4c5", @ANYRESHEX=r1, @ANYRES64=0x0], @ANYRES64=r26], @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT=r17, @ANYRESDEC=r18, @ANYRESOCT]], 0x1a)

12:51:52 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0xde5}, 0x1c)
r1 = dup2(r0, r0)
connect$inet6(r1, &(0x7f0000000340)={0xa, 0x4e24, 0xfffffffb, @loopback, 0x659}, 0x1c)
setsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000240), 0x8)
listen(r0, 0x80)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x20000, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x28af62c25667baf1, &(0x7f0000000280)=0x10000, 0x4)
flistxattr(r2, &(0x7f0000000540)=""/108, 0x6c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f00000002c0)={0xa, 0x4e22}, 0x1c)
setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000080), 0x4)
getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000640)={'icmp6\x00'}, &(0x7f0000000680)=0x1e)
openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='\xbcd\x03\x00', 0x0, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
linkat(r7, &(0x7f00000003c0)='./file0\x00', r3, &(0x7f0000000400)='./file0\x00', 0x1000)
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f00000000c0)=0x2)
write(r5, &(0x7f0000000340), 0xffffffec)
recvfrom$inet6(r5, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000000)={'lo\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff})
r9 = accept4(r0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r10=>0xffffffffffffffff})
vmsplice(r10, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet6(r9, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

12:51:52 executing program 1:
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, &(0x7f00000001c0)}})
tkill(r0, 0x6)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="dfd2cd80"], 0x4}}, 0x0)
r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0)
getsockname(r1, &(0x7f0000000500)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f0000000580)=0x80)
waitid(0xe23f842595911129, r0, &(0x7f0000000140), 0x8, &(0x7f00000001c0))
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x200000000038)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r2, 0x0, 0x0)
setpriority(0x2, r2, 0x3)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="eabe9f303b222957ee38ec24877c82838273804212b18d7c4ca85e87a64820546a1e9ed56adb1b30410bd88518f20851587978e30359f8cf068dc3cbc3d5013ed6063b91e7f1ffd7e5ab56ad8e3980902561a0bf7a301ffe8db02ab2156da58a5d1a1eaa2106b78a746768788f5967ec43b5f96b463c8a8423daa99d488fa9e6dd14911183a48410c9c6981e", @ANYBLOB="e6c55c3df4e86601000000010000009b2861343d72748d52864e01000000002ee70a67757310554a9ca66864eef1c8c72be40825f38b6c78f0bebc3176300000000400000000000000bc31810c25a2fc4d0253e55bc2fdfd711337bf1a3014f87159f469c30ae6b94f07fefb66764d49d14ae837f703000000acb50755821f9e16dfd1338029707d454e3132d8f04ca925b973fac1aa073d84803f64ca1aadc41265c7ea6a2c28cc883a83a9e8f56309733a60a6a34f5869e70930be77ff38878b3920b9268f3106095fefea61f09c721a983f052d8df3816f3155469a4a06157c6582d037707203bd3d"], 0x0, 0x14c}, 0x20)
tkill(r0, 0x3b)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

12:51:52 executing program 4:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd)
clone(0x102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000010000001000feff0000000020000000000000003e9117edb8b4841d9e1095bb19d3aed13287e6b3aeebbcb12ea8d07e9147191d11144a5c20e7c47862cc00351dcc900f3b027285f17f3dcc24ee67d9abddc278c5dfff866f6058dac0aaf690a7b75e88bf8c7034332dd8b1a5ba6d698091cac2d827ec0a4b757864cfc77b802f23eb368e029aa5472ebed6c6c6ed67a13f39365bf2be69ef519901347195a7cba65f9ebd56d00ee5ca06e43228afa5407b0f67e02d15be35536b6cdb31da47"], 0x24, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x6)
ftruncate(r0, 0x0)

12:51:52 executing program 2:
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6100)
ftruncate(r0, 0x108200)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8000fffffffe)
setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e22, 0x8, @remote}, {0xa, 0x4e24, 0xcd, @remote, 0x4}, 0x5, [0x3, 0x3, 0x40, 0x82, 0x3, 0xc4, 0x3a62, 0x4]}, 0x5c)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_procfs(0x0, &(0x7f0000000580)='net/icmp\x00')
r4 = dup3(r2, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="240000001a0007041dfffd946f6105000a0000001f00e2ffffff08000800040035000000", 0x24}], 0x1}, 0x0)
ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000001c0)={0x1ff, 0xffffffffffffffc1, 0x1, 0x3, 0x3, [{0x0, 0x0, 0x5, 0x0, 0x0, 0x400}, {0x6b7, 0x8, 0x3, 0x0, 0x0, 0x301}, {0x2bc6fa33, 0x276, 0xd8f1, 0x0, 0x0, 0x900}]})
r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/zero\x00', 0x939d8f30fb9b5582, 0x0)
setsockopt$inet_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000003200)='tls\x00', 0x4)

12:51:52 executing program 0:
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x3})
r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0x9)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x4100, 0x0)
ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0xed, 0x0, 0x4, 0x4, 0x3488})
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000140))
r4 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)="b427d45efae370f8d65b2bda3bae5ec2c37ca4dca3eb8a4aafa11a53d1c8086655af7f95d194baf69d3dc9a2df05dfa4733aae8c9366d09217c3f106c81670f5fdc786ac0a52d6a2cf58315bd64019c3e83ac343f331ca7f45ad0fcbb37e5a1912f9b1f45def4c18272900aa10d4dd798d58e9c1f2c0ce8d309af19924f6deb6d6679d821c87d156928607a0e7656421ac", 0x91, 0xffffffffffffffff)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000002c0)={r4, 0x97, 0xb5}, &(0x7f0000000300)={'enc=', 'oaep', ' hash=', {'sha256-ce\x00'}}, &(0x7f0000000380)="aec51dac8e36b91c32914d042f67b46c248949e2c14b0c5310f381d7f048eba95b99f07d9778904dd8cb844258a12a45052546636cdf613e8cd40a1c4ed9c17e0b7e8c5511c1b99884e83c5b8f38e892ee0586d0c046091c2380cd35544e7ea5c4d3fab5607c187ba0c18b46d997984a07a88af409d9c3f435fb96f7173350bc9907dd5e6048521baed6c030b5663052503615f5814d83", &(0x7f0000000440)="67e85e436bc46c1f82aa7880e5ccd3990b3b86e10d58080bce0daadb1fb3511e908dd2ee1b622ace8cbd519914c667e4b16e42d6280ea01e9f1e0afc742600cd361beca90dd0cd20f6bcd350026533604398a55b6af7f5fb17e588a38c9e05d8671834840ed53c18bfb14762ff9f0fdc2d871eeed0f4d273fbaebe0e079a683b4857dd41b5627129eb5edac71e268a016a5b6d44c9f43058898037ab0058dc5947f27c58073396475dc6f6981026c05aecedffc74b")
fsetxattr$security_ima(r3, &(0x7f0000000500)='security.ima\x00', &(0x7f0000000540)=@ng={0x4, 0x13, "9effc5"}, 0x5, 0x5)
ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000580))
r5 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
write$apparmor_current(r5, &(0x7f0000000600)=@profile={'changeprofile ', 'syz'}, 0x11)
pipe2(&(0x7f0000000640)={<r6=>0xffffffffffffffff}, 0x18c000)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000680)=""/90)
pipe2$9p(&(0x7f0000000700), 0x100400)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000740)='/dev/full\x00', 0x1af283, 0x0)
write(r7, &(0x7f0000000780)="f76c4999800cf17cc6a8adafdb8face13800c9a6c7d1ebfad736309b124b1d3557cf0e4c321cac2d68f7b9172425603a231a", 0x32)
r8 = socket(0xa, 0x4, 0xc0)
r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000800)='IPVS\x00')
sendmsg$IPVS_CMD_GET_INFO(r8, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1100010}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x20, r9, 0xb24, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x8040)
r10 = syz_open_dev$mice(&(0x7f0000000900)='/dev/input/mice\x00', 0x0, 0x6de763891d133cbe)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000940)={<r11=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r10, 0x80082102, &(0x7f00000009c0)=r11)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000a00)={@dev, <r12=>0x0}, &(0x7f0000000a40)=0x14)
ioctl$TUNSETIFINDEX(r10, 0x400454da, &(0x7f0000000a80)=r12)
r13 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000ac0)='cgroup.type\x00', 0x2, 0x0)
fcntl$notify(r13, 0x402, 0x1f)

12:51:52 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0xde5}, 0x1c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00\x1e\xa7\xd4\xea.G\x1c\x99\xa6\xb45\xfd\xbe\x80l(i\xe0\xda\x1e\xb5\x94\xf1y\xc8.\xe2c\xb8\xa0\xe8\xe2\xa2(\\y<;\xc1$<\x8c5B?1\xe3\xba\x96Z/\xf5\xce0\xc5\x86\xcf\xad\'v\xbe\xfb\xb6\x8e\xb7>\xd6#\xe1^\xa5\xfb\xfe\x03\xf8\vH\x92<~y\xc5o\xb7\'V\xc8\\fP\xc6\x12\vd\xf1\xf4N\xd6\x13\x8b\xf6I\x17p\x91\"!\x80\xa8=\xa1\xa0\xda\xbb\xae\xf4\x96\xfb\xaf\xdf\x06\xf4\x93\t3\x97\x17\x97\xa6\x0f\x9a\fT\x8e\x81`\xdd\xb3+\x17g\xcb\xcc\xd76H\xc9\xfa\x97\xe7\xe6\xa7)\x10\x17+\xc6\xb5\xb7\xe6\xe4P\x04*v=\x7f,\x1fB\x96?\xf0\\sE\xa8k\xfe\xef\xd0F\xdc\xbf,\xb2\x90\xc0\x86\x86WZ.\x02\xc2\xb4\xa6\xf31\xcc\xc1\xd9\rH\x93\x1a\xa7\xf1\xe4*\x9cl\x06\xff\x91!\b\x7f\xe4\xc6\xacWX\x95h\x94:6\x90r\x93_\xef(\x8f\ni\xb4\a\xa7\x15xF\xbb\xfasFo6~\xcc\x9ej\xa1\xb2X\x8e)?\xf5\xe8\xf2)\xb6\xc4P\x1f\xbc\xf1-4\x81\xf7\xaf\x02\x83\x05\"\xe7b\xc1\x15\xab\xa2\xc7\x8ei<\xde8\xe9MH:\xe9\xce\xe4\xa7l]\x9a\f\xef\x8a\xa8\x1e\xda\xf4\x92\\}d\xffnh%\xcf8\xf3\x84\x19\xbc\xcex\x13\xaa\xc2\xa6]\x1ck\bd\b\x15%\xb7\x107ra?\x8bI\xf4\xd7\xe6\xf5\xa8\x90\xab\xc9{[\xcc\xbe\x03Mi\x13\x03\x84,\x9d\xca\xcc\x85\xb1\xbf\x8b', 0x200002, 0x0)
openat$cgroup_procs(r2, &(0x7f0000000580)='cgroup.procs\x00\x10\xb9\x04\x00&K\x8d\x91\xd35\x00\x00\x00\x87<\xf5\x9b\xe7\xbf\xc8\xc6\x99\x01EtO\xcb\xf5\x8fm\v\xab\to\x1fw\"\x04\xac\x93\"\xa55C6g\x0f\xe5\xfdl >3\b\x93\x13\xbf\x11]\xe6\b\xf4\x8f\xdf\xfa\xbfW\xb3\xc4\x02\x14\xfc\x9e$\xcfS\"\x06\xee\xc1\xb8\xd6:\t\x97\x03\xa7.\xf9\xae\x06\"\a\xf7\xb0\xc0W\xb7\x10\x97\xba\xdd\x94\xfc\\\xe3\x15\x00\x10\x00\x007>\x1c\xf0\"Q\xe8n\xc9#~\x92KH\x1f!\xa6\x15\xb1/\x97\xe8\n\x0e\x11u\x89^\x03\xd4\xc0y7\xd1\xc4\xfbG\xe0b\x9e\t\x00\x00\x00\x00\x00\x00\xc6\x06\aPl\xef\x9c-U[\xd5\xe11n N\xbc\xcf\x175cbR\xc8a\xe5\xde\x9ey\xf8T\xf6\x88\xe7\vG\xf6\x8a\b$?\x90X:a\xcb\x94\x19\xdbqT\xfe.\x01\xb9N\xb0\x96\xc0\xa7\xddko\x9d/\x82\xcfp\x96|\x01\xebb\xfes\xe0\x97\x8f\xfe\x1f\xa4R\x87\\g;\xcc&\n\'v\x04\xbc6E\xfe\xa2\xb8k~j\xd1\x13\x1c\x03e\x90\x04\xc3Utck\x9e\x13;\x1a\x19\x97\xcb_\x92\x89.^\x81u\'Pd\xff!W\x12\xfac6*z\x82\xf1\x12#\xc2\xc6\xa5\x8a[\xf3\x96\x00\x87#\x01\xe6h\xf8\xa8$\x87)\x02\xb0\xbe\x832\x10\xdb]\xbc\x8b\x8ct\x06q\x0f\xe4c\x19/\xae%(<!\x82\xd1\xc2\xd2C\xb6*>6\x86\xa4\x14\x01\xba\x14\x82kQ\xb3\x95\x11\xdb\xa8\xa39(\x8e\xf6\xfeB\x89\x00\x00\x00\x00\x00\x00\x00\x16\x8e\xb1\xa4\x0f\xc6>\xcd\xee\x80K\xd5~\x02`\x11\xed\xa6\xf0\xff\xa1#\xf4\x9f\xcb\xc6\x9a\xc3\x13\xda%\xc1\b\xa4\xcb)t\xbd\xfe\xe8\xbbK^GqB(\xd8C\xf8\x1e\x9a\x06\xd2\xfd\\\x87\xd3\xd0\xcd\x93\xc1$\xcb\xfe\x1ftO\x14\x9fZ\x96&\n\xc5\xa47\xb5\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00&\xfc&d\xd3\x00\x00\x00\x00\x00\x13\xce\xee\x96\xf7\xeff\xa9\xdb\xe7\xe7aCb\\\xf7TA\xd3z\xa7u\xa8\xac\x98\xa2\xe3\xe6\xc1\x82\xa3u\xfcx\xf1\x19\a@\xb2\xdd<\x04\xc7\xdb\x1e\xbb/\xee\x89E5r\xd9cy\xb8\x1cK;\xc8\x95w\xa2\xfdO\xf2\xab\x19\xd2<\f\xdeO\x1d`C\xc9\x97\x8f}\xa1\x05+\xca\xc1/\x0fl\xc0\xe9]\x03<\xb6\x00_\xff\xe0\x1f\x87|G\"\x8e\xe6\x1a\xe2\xd3\x1b\x059\"\x18\t\xeb\xaeL\x0e3\x1a\xe2Rz\xc2\xd0\xdc\xach\xceV\bh\x8aG=\x1e\xa8\xc4R\xc4\xd6\x11;\xa9\xc4\x14?fi\xf8\"|<k\xfe7y\xb0O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00}K\\&D\x82\xbb0\xe2\xa1;\xb4\x1bu\xfet_z\xb1\xc1\x98\xe18\x7f\xcaF2\x03r\xcbf\x1c\xae\t0\x98\x91\xc0\x19\xceq\xfc\x89G\x8a[*\x19\x84\xe0#\xde\x12\xa0:5\xe6\x89\xd7\xe9\xf1r\x83\x885\xd04\xc6\xee\xb2\xda&yHD6\xf9\x9etG\x80\x1dn\xd1G\xc7\x89+\xb5\xf2\xec9\x96\xcfko\x91r\x94\xf6P\x87\x95z[\xfb\xc3\xeb\t\xc4\xc0f\x83\x14\x14]\x16\xaf\x1f\f\x8ag&\xb0x\x01?\xa2\x14\\\xba\x85B\'=\xbddi\x94\x00\xfa\xb0\xf1z@', 0x2, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00\x1e\xa7\xd4\xea.G\x1c\x99\xa6\xb45\xfd\xbe\x80l(i\xe0\xda\x1e\xb5\x94\xf1y\xc8.\xe2c\xb8\xa0\xe8\xe2\xa2(\\y<;\xc1$<\x8c5B?1\xe3\xba\x96Z/\xf5\xce0\xc5\x86\xcf\xad\'v\xbe\xfb\xb6\x8e\xb7>\xd6#\xe1^\xa5\xfb\xfe\x03\xf8\vH\x92<~y\xc5o\xb7\'V\xc8\\fP\xc6\x12\vd\xf1\xf4N\xd6\x13\x8b\xf6I\x17p\x91\"!\x80\xa8=\xa1\xa0\xda\xbb\xae\xf4\x96\xfb\xaf\xdf\x06\xf4\x93\t3\x97\x17\x97\xa6\x0f\x9a\fT\x8e\x81`\xdd\xb3+\x17g\xcb\xcc\xd76H\xc9\xfa\x97\xe7\xe6\xa7)\x10\x17+\xc6\xb5\xb7\xe6\xe4P\x04*v=\x7f,\x1fB\x96?\xf0\\sE\xa8k\xfe\xef\xd0F\xdc\xbf,\xb2\x90\xc0\x86\x86WZ.\x02\xc2\xb4\xa6\xf31\xcc\xc1\xd9\rH\x93\x1a\xa7\xf1\xe4*\x9cl\x06\xff\x91!\b\x7f\xe4\xc6\xacWX\x95h\x94:6\x90r\x93_\xef(\x8f\ni\xb4\a\xa7\x15xF\xbb\xfasFo6~\xcc\x9ej\xa1\xb2X\x8e)?\xf5\xe8\xf2)\xb6\xc4P\x1f\xbc\xf1-4\x81\xf7\xaf\x02\x83\x05\"\xe7b\xc1\x15\xab\xa2\xc7\x8ei<\xde8\xe9MH:\xe9\xce\xe4\xa7l]\x9a\f\xef\x8a\xa8\x1e\xda\xf4\x92\\}d\xffnh%\xcf8\xf3\x84\x19\xbc\xcex\x13\xaa\xc2\xa6]\x1ck\bd\b\x15%\xb7\x107ra?\x8bI\xf4\xd7\xe6\xf5\xa8\x90\xab\xc9{[\xcc\xbe\x03Mi\x13\x03\x84,\x9d\xca\xcc\x85\xb1\xbf\x8b', 0x200002, 0x0)
openat$cgroup_procs(r3, &(0x7f0000000580)='cgroup.procs\x00\x10\xb9\x04\x00&K\x8d\x91\xd35\x00\x00\x00\x87<\xf5\x9b\xe7\xbf\xc8\xc6\x99\x01EtO\xcb\xf5\x8fm\v\xab\to\x1fw\"\x04\xac\x93\"\xa55C6g\x0f\xe5\xfdl >3\b\x93\x13\xbf\x11]\xe6\b\xf4\x8f\xdf\xfa\xbfW\xb3\xc4\x02\x14\xfc\x9e$\xcfS\"\x06\xee\xc1\xb8\xd6:\t\x97\x03\xa7.\xf9\xae\x06\"\a\xf7\xb0\xc0W\xb7\x10\x97\xba\xdd\x94\xfc\\\xe3\x15\x00\x10\x00\x007>\x1c\xf0\"Q\xe8n\xc9#~\x92KH\x1f!\xa6\x15\xb1/\x97\xe8\n\x0e\x11u\x89^\x03\xd4\xc0y7\xd1\xc4\xfbG\xe0b\x9e\t\x00\x00\x00\x00\x00\x00\xc6\x06\aPl\xef\x9c-U[\xd5\xe11n N\xbc\xcf\x175cbR\xc8a\xe5\xde\x9ey\xf8T\xf6\x88\xe7\vG\xf6\x8a\b$?\x90X:a\xcb\x94\x19\xdbqT\xfe.\x01\xb9N\xb0\x96\xc0\xa7\xddko\x9d/\x82\xcfp\x96|\x01\xebb\xfes\xe0\x97\x8f\xfe\x1f\xa4R\x87\\g;\xcc&\n\'v\x04\xbc6E\xfe\xa2\xb8k~j\xd1\x13\x1c\x03e\x90\x04\xc3Utck\x9e\x13;\x1a\x19\x97\xcb_\x92\x89.^\x81u\'Pd\xff!W\x12\xfac6*z\x82\xf1\x12#\xc2\xc6\xa5\x8a[\xf3\x96\x00\x87#\x01\xe6h\xf8\xa8$\x87)\x02\xb0\xbe\x832\x10\xdb]\xbc\x8b\x8ct\x06q\x0f\xe4c\x19/\xae%(<!\x82\xd1\xc2\xd2C\xb6*>6\x86\xa4\x14\x01\xba\x14\x82kQ\xb3\x95\x11\xdb\xa8\xa39(\x8e\xf6\xfeB\x89\x00\x00\x00\x00\x00\x00\x00\x16\x8e\xb1\xa4\x0f\xc6>\xcd\xee\x80K\xd5~\x02`\x11\xed\xa6\xf0\xff\xa1#\xf4\x9f\xcb\xc6\x9a\xc3\x13\xda%\xc1\b\xa4\xcb)t\xbd\xfe\xe8\xbbK^GqB(\xd8C\xf8\x1e\x9a\x06\xd2\xfd\\\x87\xd3\xd0\xcd\x93\xc1$\xcb\xfe\x1ftO\x14\x9fZ\x96&\n\xc5\xa47\xb5\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00&\xfc&d\xd3\x00\x00\x00\x00\x00\x13\xce\xee\x96\xf7\xeff\xa9\xdb\xe7\xe7aCb\\\xf7TA\xd3z\xa7u\xa8\xac\x98\xa2\xe3\xe6\xc1\x82\xa3u\xfcx\xf1\x19\a@\xb2\xdd<\x04\xc7\xdb\x1e\xbb/\xee\x89E5r\xd9cy\xb8\x1cK;\xc8\x95w\xa2\xfdO\xf2\xab\x19\xd2<\f\xdeO\x1d`C\xc9\x97\x8f}\xa1\x05+\xca\xc1/\x0fl\xc0\xe9]\x03<\xb6\x00_\xff\xe0\x1f\x87|G\"\x8e\xe6\x1a\xe2\xd3\x1b\x059\"\x18\t\xeb\xaeL\x0e3\x1a\xe2Rz\xc2\xd0\xdc\xach\xceV\bh\x8aG=\x1e\xa8\xc4R\xc4\xd6\x11;\xa9\xc4\x14?fi\xf8\"|<k\xfe7y\xb0O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00}K\\&D\x82\xbb0\xe2\xa1;\xb4\x1bu\xfet_z\xb1\xc1\x98\xe18\x7f\xcaF2\x03r\xcbf\x1c\xae\t0\x98\x91\xc0\x19\xceq\xfc\x89G\x8a[*\x19\x84\xe0#\xde\x12\xa0:5\xe6\x89\xd7\xe9\xf1r\x83\x885\xd04\xc6\xee\xb2\xda&yHD6\xf9\x9etG\x80\x1dn\xd1G\xc7\x89+\xb5\xf2\xec9\x96\xcfko\x91r\x94\xf6P\x87\x95z[\xfb\xc3\xeb\t\xc4\xc0f\x83\x14\x14]\x16\xaf\x1f\f\x8ag&\xb0x\x01?\xa2\x14\\\xba\x85B\'=\xbddi\x94\x00\xfa\xb0\xf1z@', 0x2, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00\x1e\xa7\xd4\xea.G\x1c\x99\xa6\xb45\xfd\xbe\x80l(i\xe0\xda\x1e\xb5\x94\xf1y\xc8.\xe2c\xb8\xa0\xe8\xe2\xa2(\\y<;\xc1$<\x8c5B?1\xe3\xba\x96Z/\xf5\xce0\xc5\x86\xcf\xad\'v\xbe\xfb\xb6\x8e\xb7>\xd6#\xe1^\xa5\xfb\xfe\x03\xf8\vH\x92<~y\xc5o\xb7\'V\xc8\\fP\xc6\x12\vd\xf1\xf4N\xd6\x13\x8b\xf6I\x17p\x91\"!\x80\xa8=\xa1\xa0\xda\xbb\xae\xf4\x96\xfb\xaf\xdf\x06\xf4\x93\t3\x97\x17\x97\xa6\x0f\x9a\fT\x8e\x81`\xdd\xb3+\x17g\xcb\xcc\xd76H\xc9\xfa\x97\xe7\xe6\xa7)\x10\x17+\xc6\xb5\xb7\xe6\xe4P\x04*v=\x7f,\x1fB\x96?\xf0\\sE\xa8k\xfe\xef\xd0F\xdc\xbf,\xb2\x90\xc0\x86\x86WZ.\x02\xc2\xb4\xa6\xf31\xcc\xc1\xd9\rH\x93\x1a\xa7\xf1\xe4*\x9cl\x06\xff\x91!\b\x7f\xe4\xc6\xacWX\x95h\x94:6\x90r\x93_\xef(\x8f\ni\xb4\a\xa7\x15xF\xbb\xfasFo6~\xcc\x9ej\xa1\xb2X\x8e)?\xf5\xe8\xf2)\xb6\xc4P\x1f\xbc\xf1-4\x81\xf7\xaf\x02\x83\x05\"\xe7b\xc1\x15\xab\xa2\xc7\x8ei<\xde8\xe9MH:\xe9\xce\xe4\xa7l]\x9a\f\xef\x8a\xa8\x1e\xda\xf4\x92\\}d\xffnh%\xcf8\xf3\x84\x19\xbc\xcex\x13\xaa\xc2\xa6]\x1ck\bd\b\x15%\xb7\x107ra?\x8bI\xf4\xd7\xe6\xf5\xa8\x90\xab\xc9{[\xcc\xbe\x03Mi\x13\x03\x84,\x9d\xca\xcc\x85\xb1\xbf\x8b', 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000580)='cgroup.procs\x00\x10\xb9\x04\x00&K\x8d\x91\xd35\x00\x00\x00\x87<\xf5\x9b\xe7\xbf\xc8\xc6\x99\x01EtO\xcb\xf5\x8fm\v\xab\to\x1fw\"\x04\xac\x93\"\xa55C6g\x0f\xe5\xfdl >3\b\x93\x13\xbf\x11]\xe6\b\xf4\x8f\xdf\xfa\xbfW\xb3\xc4\x02\x14\xfc\x9e$\xcfS\"\x06\xee\xc1\xb8\xd6:\t\x97\x03\xa7.\xf9\xae\x06\"\a\xf7\xb0\xc0W\xb7\x10\x97\xba\xdd\x94\xfc\\\xe3\x15\x00\x10\x00\x007>\x1c\xf0\"Q\xe8n\xc9#~\x92KH\x1f!\xa6\x15\xb1/\x97\xe8\n\x0e\x11u\x89^\x03\xd4\xc0y7\xd1\xc4\xfbG\xe0b\x9e\t\x00\x00\x00\x00\x00\x00\xc6\x06\aPl\xef\x9c-U[\xd5\xe11n N\xbc\xcf\x175cbR\xc8a\xe5\xde\x9ey\xf8T\xf6\x88\xe7\vG\xf6\x8a\b$?\x90X:a\xcb\x94\x19\xdbqT\xfe.\x01\xb9N\xb0\x96\xc0\xa7\xddko\x9d/\x82\xcfp\x96|\x01\xebb\xfes\xe0\x97\x8f\xfe\x1f\xa4R\x87\\g;\xcc&\n\'v\x04\xbc6E\xfe\xa2\xb8k~j\xd1\x13\x1c\x03e\x90\x04\xc3Utck\x9e\x13;\x1a\x19\x97\xcb_\x92\x89.^\x81u\'Pd\xff!W\x12\xfac6*z\x82\xf1\x12#\xc2\xc6\xa5\x8a[\xf3\x96\x00\x87#\x01\xe6h\xf8\xa8$\x87)\x02\xb0\xbe\x832\x10\xdb]\xbc\x8b\x8ct\x06q\x0f\xe4c\x19/\xae%(<!\x82\xd1\xc2\xd2C\xb6*>6\x86\xa4\x14\x01\xba\x14\x82kQ\xb3\x95\x11\xdb\xa8\xa39(\x8e\xf6\xfeB\x89\x00\x00\x00\x00\x00\x00\x00\x16\x8e\xb1\xa4\x0f\xc6>\xcd\xee\x80K\xd5~\x02`\x11\xed\xa6\xf0\xff\xa1#\xf4\x9f\xcb\xc6\x9a\xc3\x13\xda%\xc1\b\xa4\xcb)t\xbd\xfe\xe8\xbbK^GqB(\xd8C\xf8\x1e\x9a\x06\xd2\xfd\\\x87\xd3\xd0\xcd\x93\xc1$\xcb\xfe\x1ftO\x14\x9fZ\x96&\n\xc5\xa47\xb5\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00&\xfc&d\xd3\x00\x00\x00\x00\x00\x13\xce\xee\x96\xf7\xeff\xa9\xdb\xe7\xe7aCb\\\xf7TA\xd3z\xa7u\xa8\xac\x98\xa2\xe3\xe6\xc1\x82\xa3u\xfcx\xf1\x19\a@\xb2\xdd<\x04\xc7\xdb\x1e\xbb/\xee\x89E5r\xd9cy\xb8\x1cK;\xc8\x95w\xa2\xfdO\xf2\xab\x19\xd2<\f\xdeO\x1d`C\xc9\x97\x8f}\xa1\x05+\xca\xc1/\x0fl\xc0\xe9]\x03<\xb6\x00_\xff\xe0\x1f\x87|G\"\x8e\xe6\x1a\xe2\xd3\x1b\x059\"\x18\t\xeb\xaeL\x0e3\x1a\xe2Rz\xc2\xd0\xdc\xach\xceV\bh\x8aG=\x1e\xa8\xc4R\xc4\xd6\x11;\xa9\xc4\x14?fi\xf8\"|<k\xfe7y\xb0O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00}K\\&D\x82\xbb0\xe2\xa1;\xb4\x1bu\xfet_z\xb1\xc1\x98\xe18\x7f\xcaF2\x03r\xcbf\x1c\xae\t0\x98\x91\xc0\x19\xceq\xfc\x89G\x8a[*\x19\x84\xe0#\xde\x12\xa0:5\xe6\x89\xd7\xe9\xf1r\x83\x885\xd04\xc6\xee\xb2\xda&yHD6\xf9\x9etG\x80\x1dn\xd1G\xc7\x89+\xb5\xf2\xec9\x96\xcfko\x91r\x94\xf6P\x87\x95z[\xfb\xc3\xeb\t\xc4\xc0f\x83\x14\x14]\x16\xaf\x1f\f\x8ag&\xb0x\x01?\xa2\x14\\\xba\x85B\'=\xbddi\x94\x00\xfa\xb0\xf1z@', 0x2, 0x0)
sendfile(r5, r5, &(0x7f0000000040)=0xfffc, 0xff)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000340)=ANY=[@ANYRES64]})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="4100000000000000004bf0741abd4d2600"/51]})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="3200000073c9e134ffff00000000082e615799000000a6cfa5c2742c863bf059e43fc000000080000000000000000000004763b1aa3dd4a6ed"]})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = fcntl$dupfd(r9, 0x0, r8)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
r11 = accept4$inet(r10, &(0x7f00000000c0)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10, 0x800)
dup2(r0, r11)
r12 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r12, 0x40087703, 0x0)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087707, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x1)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r13=>0xffffffffffffffff})
write(r13, &(0x7f00000001c0), 0xfffffef3)
setsockopt$sock_timeval(r13, 0x1, 0x0, 0x0, 0x5f)
listen(r0, 0x80)
r14 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
flistxattr(r14, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5)
r15 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r15, 0x0, 0x0, 0x20000004, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @rand_addr='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00q', 0x7}, 0x1c)
setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080), 0x4)
socket$inet(0x2, 0x800, 0x7)
getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0)
r16 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0)
mknodat(r16, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
renameat2(r16, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r16, &(0x7f0000000280)='./file0\x00', 0x2)
renameat2(r16, 0x0, r16, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2)
pipe(&(0x7f0000000100))
r17 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0)
mknodat(r17, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
renameat2(r17, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r17, &(0x7f0000000280)='./file0\x00', 0x2)
renameat2(r17, 0x0, r17, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2)
r18 = syz_open_pts(r17, 0xa1c65b2d416dcbb3)
write(r18, &(0x7f00000001c0), 0x0)
r19 = creat(&(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x5)
fcntl$setstatus(r19, 0x4, 0x44700)
r20 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0)
mknodat(r20, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
renameat2(r20, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r20, &(0x7f0000000280)='./file0\x00', 0x2)
renameat2(r20, 0x0, r20, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2)
setsockopt$packet_rx_ring(r20, 0x107, 0x5, 0x0, 0xfffffffffffffd64)
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0)
write(r15, &(0x7f0000000340), 0xffffffec)
recvfrom$inet6(r15, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r21 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x8914, &(0x7f0000000000)={'lo\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff})
accept4(r0, 0x0, 0x0, 0x0)

12:51:52 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x100, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'ip_vti0\x00', 0x1000})
write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="0501fab506000900ffff60371bd900814103fe8000000000000000000000000000bb00000000000000000000ffffe00000024e234e2104b190788463c76ccaa69584914ebb28661d0c0fd0d857028d1445d138f520fa20ac4dfceb777ea8a47ba1c719bd7b5bf9c17d60ba6e38e98902516c15ad7112eb72798a66c3c40474d1a221aa0395ab71a3b900db12d765125149860db2c2a652e185d12a722c666239a9cb337d5f681e19cccff09c0cc3f314623bf2"], 0xb3)
r1 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0)
mknodat(r1, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
renameat2(r1, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000280)='./file0\x00', 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000240)='/dev/net/tun\x00', r1}, 0x10)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'bpq0\x00', 0x7adc1835deb5d590})
renameat2(r1, 0x0, r1, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2)
ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000002c0)={0x1, &(0x7f0000000080)=[{0x4000006}]})
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x400002, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000004c0)={'veth1\x00', 0x43732e539841c53b})

12:51:52 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r2)
setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)=0x1, 0x4)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x0)
sendfile(r2, r3, 0x0, 0x80001d00c0d0)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)

12:51:52 executing program 1:
r0 = socket$inet6(0xa, 0x802, 0x88)
setsockopt$inet6_udp_int(r0, 0x11, 0x100000000a, &(0x7f00000003c0), 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x8800, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff})
write$cgroup_int(r1, &(0x7f0000000180)=0x3, 0xffffffffffffff31)
ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000380))
write$P9_RMKNOD(r1, &(0x7f0000000040)={0x14, 0x13, 0x0, {0x0, 0x2}}, 0xfd95)
ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f00000000c0)=""/132)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x6, @mcast1, 0x1}, 0x1c)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080)={0x0, 0x7fe00000}, 0xc)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

12:51:53 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000004c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
truncate(&(0x7f00000000c0)='./bus\x00', 0x1000)
r4 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0)
lseek(r1, 0x0, 0x2)
sendfile(r1, r4, 0x0, 0x4000000000020009)
r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
write$P9_RREMOVE(r5, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f)
r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
fdatasync(r5)
ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000200)={0x0, r5})

12:51:53 executing program 1:
r0 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
write(r0, &(0x7f0000000240)="b1", 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0)
r1 = socket(0xa, 0x2, 0x0)
setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000040), 0x4)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
ftruncate(r2, 0x108200)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
ioctl$PPPIOCSMRRU(r2, 0x4004743b, &(0x7f0000000000)=0x7fffffff)

12:51:53 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48)
r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
r1 = syz_genetlink_get_family_id$tipc(0x0)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
rt_sigtimedwait(&(0x7f0000000300)={0x2}, 0x0, &(0x7f0000000340), 0x8)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="380005000e84801b991f2631c4db297164aa09d987b24b8cf4a131cd6d4917bb10f310a7aa23d3b7b4f7efbcca998b1f85", @ANYRES16=r1, @ANYBLOB="56ed29bd7000fbdbdf25010000000000000001410000001c001700000000000000006574683a6970365f7674693000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)
rt_sigprocmask(0x1, &(0x7f0000000040)={0x1}, &(0x7f00000000c0), 0x8)
sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800084}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r1, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x800, @link='broadcast-link\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x1)

12:51:53 executing program 1:
io_setup(0x8, &(0x7f0000000100))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write(r0, &(0x7f00000001c0), 0xfffffef3)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e24, @multicast1}, 0x10)
getrandom(&(0x7f0000000080)=""/44, 0xfffffffffffffd94, 0x0)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0)
r2 = dup(r1)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execveat(r2, &(0x7f00000000c0)='\x00', &(0x7f0000000140), 0x0, 0x1000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
sync_file_range(r3, 0x2, 0x5, 0x2)
r4 = open(&(0x7f0000000200)='./file0\x00', 0x40000, 0x4d)
getdents64(r4, &(0x7f0000000300)=""/166, 0x21)
getdents(r4, &(0x7f0000000100)=""/217, 0xd9)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='loginuid\x00')
write$cgroup_subtree(r5, &(0x7f00000002c0)={[{0x2b, 'pids'}, {0x16, 'rdma'}, {0x2d, 'rTO[$\x17j_\x8d\t\xcb\tJ\xc1\x10\xfe\xde=\xad\xd3^\x88zJdma'}, {0x2d, 'rdma'}]}, 0x2f)

12:51:53 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', <r2=>0x0})
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000000)={@ipv4={[], [], @local}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21c00082, r2})
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c)

12:51:53 executing program 4:
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0xc00)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x200800, 0x0)
r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="08631040000000000000000000000000000000001063084000000000000000000063404002000000000000000000000000000000000000000000001000"/100], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
write(r3, &(0x7f00000001c0), 0x0)
ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0)
read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/24, @ANYRES32=0x0, @ANYBLOB="000000000002000000000000"]}}, 0x0)
r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
write$cgroup_type(r5, 0x0, 0x0)
syz_open_pts(r5, 0xb91280)
fsetxattr$security_ima(r4, &(0x7f00000003c0)='security.ima\x00', &(0x7f0000000440)=@sha1={0x1, "f6c22f460365f9360c48948b1b0b911ab5185102"}, 0x15, 0x2)
open(&(0x7f0000000380)='./bus\x00', 0x6015fe683ab85867, 0x0)
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x3e)
ptrace$cont(0x18, r6, 0x0, 0x0)
ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r6, 0x0, 0x0)
syz_open_procfs(r6, &(0x7f00000000c0)='timers\x00')
r7 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4)
fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000140)='security.evm\x00', &(0x7f0000000340)=@md5={0x1, "86ee741e65596c5d12183d4e4a409aa4"}, 0x11, 0x2)
ioctl$FIBMAP(r1, 0x1, 0x0)
eventfd2(0x6, 0x0)
bind$inet(r7, &(0x7f0000000280)={0x2, 0x4e23, @rand_addr=0x5}, 0x10)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(r7, &(0x7f0000004b00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)="9033877ace25a0cd47de5752f2fe725302f5297240df794a3f9e8efd1c159b2bb4cfdc71f2cd4ccab950100494", 0x2d}, {0x0}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000b40)}, {0x0}, {&(0x7f0000000f40)="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", 0x358}], 0x3}}], 0x2, 0x80)
sendto$inet(r7, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x13)
read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e5e2)

12:51:53 executing program 5:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
connect(r2, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43)
connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
r3 = gettid()
timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff})
r5 = dup2(r4, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0)
tkill(r3, 0x1000000000013)
listen(r1, 0x5)

[  200.956803] binder: 8977:8978 BC_INCREFS_DONE u0000000000000000 no match
[  200.975404] binder: 8977:8978 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  200.991241] binder: 8977:8978 got transaction to invalid handle
[  201.003384] binder: 8977:8983 BC_INCREFS_DONE u0000000000000000 no match
[  201.009604] binder: 8977:8978 transaction failed 29201/-22, size 0-0 line 3013
[  201.019545] binder: 8977:8983 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  201.027653] binder: 8977:8983 got transaction to invalid handle
[  201.034112] binder: 8977:8983 transaction failed 29201/-22, size 0-0 line 3013
12:51:53 executing program 5:
socket$packet(0x11, 0x2, 0x300)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00')
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2cb84368b9fce6f1cd80"], 0xa}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x4)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
eventfd2(0x7b5, 0x100001)
io_submit(0x0, 0x40, &(0x7f0000000640))
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r0})
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

[  201.158402] binder: 8974:8989 BC_INCREFS_DONE u0000000000000000 no match
[  201.170464] binder: 8974:8989 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  201.189424] binder: 8974:8989 got transaction to invalid handle
[  201.206864] binder: 8974:8989 transaction failed 29201/-22, size 0-0 line 3013
12:51:53 executing program 4:
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = socket$packet(0x11, 0x2, 0x300)
dup(r0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0))
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x200000000038)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r2, 0x0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xfffffef3)
r4 = getpid()
ptrace(0x10, r4)
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r5, 0xc0, &(0x7f00000007c0)={0x0, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0xc314, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x1, 0xf, 0x7fff, 0x4}, &(0x7f0000000440)=0x7f, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x9}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000140)='[lo\x00', r6}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001a40)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000001a00)='vmnet1\x00', r6}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={<r7=>r2, r3, 0x0, 0x15, &(0x7f0000000100)='/proc/self/net/pfkey\x00', r6}, 0x30)
prlimit64(r7, 0xb, &(0x7f00000001c0)={0x1000, 0x3}, 0x0)
sendmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)="a8d7147246a9768c297387c5e6cda243774c83ca6c0bd8ee057b75fd129058d90bcd1ba34bd772ba5f8c19adcf27d5086be2bd6a0995ca8c0a3b1c55f40254d54c76206659fd13ab987440175742d3240c475af759eda0484614d8a1504b818e6a4b847f6aa01b70bbcd3855a1e4edcb57270730c76fdd2c1a22ab17", 0x7c}], 0x1, &(0x7f0000000880)=[{0x58, 0x116, 0x9d, "83cab2c9d3f5ee0f2605f3096fcb72a2a698e78e0bd2873ded53a6ace706f297eefe78140f0175de3d487ca9dd5c7bfa02722db9f19cba796550e02e01eba11058065013f64c5f"}, {0xf8, 0x10a, 0x2, "e98dfc4a34d8a0ac2a314faa902f8aedcdaa37a9cc7f28ca52547dd114dc9050f4f367c23b26f261b62050701b282dd51abf6c0a31ad80b0fc89b91b7ba425ff939375bc57aa1fd5b160277fa69f69519ce49770b6a415b176a14eb9eba3c50ef35924bde76476354b7e6c3585c95c0bbcd30fdafc321ed9f8bff732a70d96be0abe5aa69a820daea6b7fb9ff024b2940ed7f1aa3a8664141d2b12504130e2c70222991fcfbaebe509c1f44bd6b373da4dcb2431c3e872f977972cc508f401b9509564ce9c7c16fd2621a1f170d76fa06312e428fa59eb98d195ee8366573c357d57bf"}, {0x40, 0xff, 0x9b8, "11c78e71a895650ec2ab32c2e636d7d1a29a7624c6e05a23affb6353d3bddb0f52b1ee4fcbf5b54a87ced034"}, {0x10, 0x10e, 0x1}], 0x1a0}, 0x4)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
r8 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/checkreqprot\x00', 0x8000, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a})
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DEST(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="79008da9", @ANYRES16=r10, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$IPVS_CMD_FLUSH(r8, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0xa00120}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)={0x7c, r10, 0x4, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffff32}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xec02}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xd8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7f}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x44000}, 0x4044800)
pipe(0x0)

12:51:53 executing program 3:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
r1 = creat(&(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x5)
fcntl$setstatus(r1, 0x4, 0x44700)
ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000000)={0x7, 0x2})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0xf)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x2, 0xa5, 0xffffffffffffffff})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

12:51:53 executing program 1:
pipe(&(0x7f00000013c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r2)
r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
truncate(&(0x7f00000000c0)='./bus\x00', 0xa00)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300))
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8)
r5 = openat$full(0xffffffffffffff9c, 0x0, 0xf630652407c83dd8, 0x0)
getpeername$packet(r5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
socket(0x1, 0x2, 0x0)
r6 = dup3(0xffffffffffffffff, r2, 0x0)
ioctl$EVIOCGNAME(r6, 0x80404506, &(0x7f0000001800)=""/151)
syz_genetlink_get_family_id$ipvs(&(0x7f0000001380)='IPVS\x00')
r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fallocate(r7, 0x0, 0x0, 0x8020003)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0x7, 0x0, 0x1, 0x0, 0x0, 0x88021}, 0x100)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x4000000, 0x0, 0x0)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x88000, 0x0)
pipe(&(0x7f0000000200))
r8 = socket$inet_udp(0x2, 0x2, 0x0)
close(r8)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x42, 0x0)

12:51:53 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001000090468fe07002b00edfffffffe0701000000450001070000001419001a00120002000e00010009000300"/57, 0x39}], 0x1)
r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
ftruncate(r2, 0x108200)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x3, 0x80, 0x7ff, 0x400, 0x18, 0x40, 0x20, 0x9, 0x32, 0x9, 0x7, 0x9})
r4 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
syz_open_dev$binderN(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x804)
r5 = fcntl$dupfd(r1, 0x0, r4)
ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000080)={0xffd, 0x2, 0x9, 0xe77, 0xd, 0x58, 0xfd, 0x9, 0xd0, 0x1, 0xfffffffc, 0x2})

[  201.423606] binder: 9006:9007 BC_INCREFS_DONE u0000000000000000 no match
[  201.431140] binder: 9006:9007 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  201.439036] binder: 9006:9007 got transaction to invalid handle
[  201.445926] binder: 9006:9007 transaction failed 29201/-22, size 0-0 line 3013
[  201.471536] binder: 9006:9007 BC_INCREFS_DONE u0000000000000000 no match
[  201.479292] binder: 9006:9007 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  201.487477] binder: 9006:9007 got transaction to invalid handle
[  201.494344] binder: 9006:9007 transaction failed 29201/-22, size 0-0 line 3013
[  201.512860] binder: 9006:9007 ioctl 5403 20000080 returned -22
[  201.521043] binder: 9006:9007 BC_INCREFS_DONE u0000000000000000 no match
[  201.532855] binder: 9006:9007 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  201.540832] binder: 9006:9007 got transaction to invalid handle
[  201.547732] binder: 9006:9007 transaction failed 29201/-22, size 0-0 line 3013
[  201.555960] binder: 9006:9013 BC_INCREFS_DONE u0000000000000000 no match
[  201.555967] binder: 9006:9013 BC_DEAD_BINDER_DONE 0000000000000000 not found
12:51:53 executing program 4:
clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = getpid()
r1 = getpid()
rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000))
ptrace(0x10, r1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
r5 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xcc93a2cc92445b75)
lseek(r5, 0x0, 0x3)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_RESET_STATS(r5, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x13c, r6, 0xc, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f3b}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd0c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40000000}]}, @TIPC_NLA_NET={0x28, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x400}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x567}]}, @TIPC_NLA_BEARER={0xb4, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x7fffffff}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x6, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x86}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x858}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4000}, 0x2008)
r7 = memfd_create(&(0x7f0000000440)='\xb3', 0x0)
write$FUSE_DIRENT(r7, &(0x7f0000000080)=ANY=[], 0x29)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r7, 0x0)
ptrace$setregset(0x4205, r0, 0x0, &(0x7f00000000c0)={0x0})
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000100)={0x0})

12:51:53 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
sendfile(r1, r2, 0x0, 0x800000000024)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0)
lseek(r3, 0x800002, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0x0)
fallocate(r3, 0x0, 0x0, 0x8020003)
lseek(r3, 0x0, 0x3)

12:51:53 executing program 2:
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340), 0x0)
ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000001600)={0x5, 0x8000, 0x0, 0x101, 0x9, 0x31aa})
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0xd432})
pipe(0x0)
read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3)
pipe(0x0)
syz_open_dev$loop(0x0, 0x3, 0x51d00)
write(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f00000001c0))
ftruncate(0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', <r1=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="962c85e043d8"}, 0x14)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x2a)
io_submit(0x0, 0x1, &(0x7f0000001500)=[&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, &(0x7f0000001400)="70b5b9a4f6fe8eb1a832413ffa4254a19acfadb588c557c43e66f2610bb66a84514748c74b14dad908ff451a91b7c3ee7b420f7582559783c6a4ad20589781f812ca27e37981f8301493520b58c60e0e0e0d647acf9e7c3265236ed5ea57a85f9540ab731684ca4d1749414724a4f5d6d280b9fb8561f3b5b2d112474528817ce13bc33be43762f2c2c7d7120646785a24e50a48e54b794b7a61210ac869d67a6f89b23a7057", 0xa6, 0x3ff}])
fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f0000001640)='security.SMACK64TRANSMUTE\x00', &(0x7f00000013c0)='TRUE', 0xfffffffffffffee3, 0x3)
setitimer(0x1, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xfffffef3)
read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0)
dup2(r5, r0)
sendfile(r3, r4, 0x0, 0x80000001)
r6 = socket$inet6(0xa, 0x400000000001, 0x0)
r7 = dup(r6)
setsockopt$inet6_tcp_int(r7, 0x6, 0x12, &(0x7f0000000380)=0x83, 0x1fb)
r8 = open(&(0x7f0000001240)='./file0\x00', 0x0, 0x0)
ftruncate(r8, 0x2007fff)
syz_open_procfs(0x0, &(0x7f00000011c0)='net/ip_vs_stats\x00')
r9 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r9, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x81805)
r10 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r10, 0x4, 0x6100)
r11 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r12 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r12, 0xffffffffffffffff, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r12, &(0x7f0000000000)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @local}, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x0, r13})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bind$packet(r11, &(0x7f0000000140)={0x11, 0x4, r13, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r10, 0x0, 0x2)
sendfile(r10, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc)
sendfile(r10, r11, &(0x7f0000000040), 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100)
r14 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r14, r14, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r14, &(0x7f0000000000)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
r16 = socket$inet6(0xa, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r16, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x102, 0x1, 0x0, 0x0, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r16, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400400}, 0x20)
r17 = syz_open_procfs(0x0, 0x0)
getpeername$packet(r17, &(0x7f0000000000)={0x11, 0x0, <r18=>0x0, 0x1, 0x0, 0x6, @local}, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r16, 0x8916, &(0x7f00000000c0)={@mcast2, 0x10, r18})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r18})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r15})
bind$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x4, r15, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(0xffffffffffffffff, 0x0, 0x2)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x0)
r19 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r19, 0x4, 0x0)
r20 = open(0x0, 0x0, 0x0)
r21 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r21, r21, &(0x7f00000002c0)=0x202, 0x0)
getpeername$packet(r21, &(0x7f0000000000)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r22})
lseek(r19, 0x0, 0x2)
sendfile(r19, r20, 0x0, 0x0)
sendfile(r19, r20, &(0x7f0000000040), 0x8000fffffffe)
ioctl$LOOP_CLR_FD(r20, 0x4c01)
openat$zero(0xffffffffffffff9c, &(0x7f0000001200)='/dev/zero\x00', 0x400000, 0x0)
fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000600)='-{vmnet1[cpuset\'wlan0${system$\x00\xca\xa4\xce\xf0\xf2a\xc51\xc0Cl\xfep\x84\xf1\x8a\xf4\x1b\xc3~{2\x01g\x11\x80R\x80\xbb\x03\xac \xda\x817\x88\x01Y^>\x1c\xb8\xc5\xcaw\xc5\xab\xa3x\x90>\x86qW\xa8\xb7\xdb\xa1\xd6xS\xb2:\x87\x12\x03\xafV\x85\xc4\x0e~\x89\x18\x86\xd4\xd2\xc1\x00\xda\x9b.', 0x71, 0x2)
ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000780)=""/114)
syz_open_procfs(0x0, &(0x7f0000000100)='net/icmp\x00')

12:51:53 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x5)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto(r0, &(0x7f0000000000)="efeedc18c4c35a9c72091d6ddf6d2acec04ba07ff0df829a48aebef9a02a3578b3e96d24fdf7eedc80e73e364646e5", 0x2f, 0x800, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000140), 0x4)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000040)=0x8, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)

[  201.555976] binder: 9006:9013 got transaction to invalid handle
[  201.555984] binder: 9006:9013 transaction failed 29201/-22, size 0-0 line 3013
[  201.652554] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9029 comm=syz-executor.4
12:51:54 executing program 0:
r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x8101, 0x0)
write$eventfd(r0, &(0x7f0000000140)=0x20000100000001, 0x8)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(0xffffffffffffffff, 0x0, 0x0)
write$eventfd(r0, &(0x7f0000000140)=0x20000100000001, 0x8)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xfffffef3)
r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00')
sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4040000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x58, r4, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e22}, @FOU_ATTR_AF={0x8, 0x2, 0x16}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e21}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr="4b0811f2258f8199152eed3e92af2a94"}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
write(r2, &(0x7f0000000200)="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", 0x1000)

12:51:54 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000004c0)='./bus\x00', 0x0)
truncate(&(0x7f00000000c0)='./bus\x00', 0x1000)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x40, 0x0)
lseek(r1, 0x0, 0x2)
sendfile(r1, r2, 0x0, 0x4000000000020009)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
close(r3)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
sendfile(r3, r4, 0x0, 0x80001d00c0d0)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0)
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='threaded\x00', 0x9)
close(0xffffffffffffffff)

12:51:54 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x1c0, &(0x7f0000000000), 0x1}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x18)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xca})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x0, 0x0)

[  201.861552] keychord: using input dev AT Translated Set 2 keyboard for fevent
[  201.962296] keychord: using input dev AT Translated Set 2 keyboard for fevent
12:51:56 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000001600)='./bus\x00', 0x0)
ftruncate(r2, 0x12081ff)
r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
r4 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a})
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="79008da9", @ANYRES16=r6, @ANYBLOB="080029bd7000fedbdf25080000005c00010008000900270000000800080004be0000080006006e710000080008000400000008000600a530b6739ad06cdae05595bd9ffb2acc8664d67de2e96d652247ac5302b134bb51b0d900c74bb24d4329d8f33da9af4d6988000000c0000000003848f64e65fae286f75c8a33c3b93c3319197da86755fb71cb7fdaf5f2cb736f7fe8acda829ac3d184d3ed26d7c7dcb07255d218000070030300ac14140f0000000000000000000000000c0007000800000040000000080005000300000008000800000080000800050004000000080004000700000000000600000000000400010038000100000007002400000020000000080005000200000010000600068f40a10f5a777272000000080005000200000008000600030000000c00030008000600ad2a00"], 0x3}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x7c, r6, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe1c}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x5c}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x19}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @remote}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xfff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x2008048)
r7 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
r8 = socket(0x8, 0xa, 0x20)
fcntl$setstatus(r8, 0x4, 0x800)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
r9 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r10 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
pipe(&(0x7f0000000180)={<r11=>0xffffffffffffffff})
connect$inet(r11, &(0x7f00000001c0)={0x2, 0x4e20, @local}, 0x10)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4003fe)
ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f0000000100)={0x0, r10, 0x40})
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/status\x00', 0x0, 0x0)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r12=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r12})
ioctl$VT_OPENQRY(r9, 0x5600, &(0x7f0000000240))
setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)=@known='trusted.overlay.opaque\x00', &(0x7f0000000340)='threaded\x00', 0x9, 0x2)
r13 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r13)
r14 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x1ee)
sendfile(r13, r14, 0x0, 0x8000fffffffe)

12:51:56 executing program 1:
r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x3, 0x1, 0x1, 0x1, 0x401, 0x1}, 0x20)
link(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14, 0x80000)
shutdown(r1, 0x1)
r2 = socket(0x11, 0x4, 0x5)
r3 = syz_open_dev$mice(&(0x7f0000002640)='/dev/input/mice\x00', 0x0, 0x10b000)
setsockopt$inet6_udp_int(r3, 0x11, 0x66, &(0x7f0000002680)=0x4, 0x4)
prctl$PR_CAPBSET_READ(0x17, 0x1)
getpeername(r2, &(0x7f00000026c0)=@un=@abs, &(0x7f0000002740)=0x80)
r4 = syz_genetlink_get_family_id$net_dm(&(0x7f00000027c0)='NET_DM\x00')
sendmsg$NET_DM_CMD_START(r3, &(0x7f0000002880)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002840)={&(0x7f0000002800)={0x14, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
connect(r1, &(0x7f00000028c0)=@nfc={0x27, 0x0, 0x2, 0x4}, 0x80)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000002940)={0x0, <r5=>0x0})
r6 = creat(&(0x7f0000002980)='./file0\x00', 0x33)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002a00)={r5, r6, 0x0, 0x1b, &(0x7f00000029c0)=':bdev*user}GPL)em0security\x00'}, 0x30)
r7 = getpgrp(0xffffffffffffffff)
ptrace$getregs(0xe, r7, 0x1, &(0x7f0000002a40)=""/165)
r8 = syz_open_dev$mice(&(0x7f0000002b00)='/dev/input/mice\x00', 0x0, 0x4000)
ioctl$TIOCGDEV(r8, 0x80045432, &(0x7f0000002b40))
r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000002bc0)='nbd\x00')
pipe(&(0x7f0000002c00)={<r10=>0xffffffffffffffff})
sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000002d00)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x1610b88}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c40)={0x7c, r9, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r2}, {0x8, 0x1, r10}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r0}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffe01}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x40080)
munlockall()
r11 = getuid()
quotactl(0x1, &(0x7f0000002d40)='./file0\x00', r11, &(0x7f0000002d80)="72c3eb23943a0782b312c4ef83d0")
r12 = fcntl$dupfd(r10, 0x605, 0xffffffffffffffff)
r13 = syz_genetlink_get_family_id$net_dm(&(0x7f0000006d40)='NET_DM\x00')
sendmsg$NET_DM_CMD_STOP(r12, &(0x7f0000006e00)={&(0x7f0000006d00)={0x10, 0x0, 0x0, 0x480}, 0xc, &(0x7f0000006dc0)={&(0x7f0000006d80)={0x14, r13, 0x200, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x404c0c1)
r14 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000006e40)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
shutdown(r14, 0x0)

12:51:56 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xfffffef3)
pipe(&(0x7f0000000100)={<r4=>0xffffffffffffffff})
r5 = socket$netlink(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x422000a7b, 0x0)
write$P9_RWSTAT(r4, &(0x7f0000000240)={0x7, 0x7f, 0x2}, 0x7)
r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
write$binfmt_elf64(r7, &(0x7f0000000000)=ANY=[], 0xfffffd88)
ioctl$sock_inet_tcp_SIOCATMARK(r7, 0x8905, &(0x7f00000003c0))
r8 = creat(&(0x7f0000000440)='./bus/file0\x00', 0xc0)
pipe(&(0x7f0000000100)={<r9=>0xffffffffffffffff})
r10 = socket$netlink(0x10, 0x3, 0x0)
splice(r9, 0x0, r10, 0x0, 0x422000a7b, 0x0)
lseek(0xffffffffffffffff, 0x800002, 0x1)
pipe(&(0x7f0000000100)={<r11=>0xffffffffffffffff})
r12 = socket$netlink(0x10, 0x3, 0x0)
splice(r11, 0x0, r12, 0x0, 0x422000a7b, 0x0)
setsockopt$SO_TIMESTAMP(r11, 0x1, 0x3f, &(0x7f0000000340)=0x81, 0x4)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f00000001c0))
writev(r8, &(0x7f0000000380)=[{&(0x7f0000000200)="e5", 0x1}], 0x1)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r6, 0x0)
read(r2, &(0x7f0000000000)=""/250, 0xedf1d44)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x1, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r13=>0xffffffffffffffff})
write$binfmt_elf64(r13, &(0x7f0000000000)=ANY=[], 0xfffffd88)
fcntl$setstatus(r13, 0x4, 0x66400)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
removexattr(&(0x7f0000000400)='./bus/file0\x00', &(0x7f00000002c0)=@known='usar.syz\x00')

12:51:56 executing program 4:
io_setup(0x1, &(0x7f0000000000)=<r0=>0x0)
write$eventfd(0xffffffffffffffff, &(0x7f0000000100)=0x20000000000080, 0x8)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000feff)
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x4, 0x12, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
ftruncate(r1, 0x108200)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x6)
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0)
io_cancel(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)

12:51:56 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0)
mknodat(r4, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
renameat2(r4, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f0000000280)='./file0\x00', 0x2)
renameat2(r4, 0x0, r4, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2)
ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f0000000040))
write$uinput_user_dev(r1, &(0x7f0000000300)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40, 0x0, 0x40, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2cd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe58a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x40, 0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f], [0x80000001, 0x2000000, 0x1000, 0x100, 0x7, 0x3f, 0x9, 0x530, 0x9, 0x1, 0x0, 0x4, 0x6, 0x1, 0x81, 0x400, 0x9, 0x28, 0x4a0c892d, 0x5, 0x9, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6f7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4e, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff]}, 0x45c)

12:51:56 executing program 5:
socket$packet(0x11, 0x3, 0x300)
r0 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
renameat2(r0, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000280)='./file0\x00', 0x2)
renameat2(r0, 0x0, r0, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x800006, 0x0, 0x0, 0xbef}]}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x440001, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6(0xa, 0x2, 0x0)
r5 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0)
mknodat(r5, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
renameat2(r5, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r5, &(0x7f0000000280)='./file0\x00', 0x2)
renameat2(r5, 0x0, r5, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2)
connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x1001, @mcast1, 0x2}, 0x1c)
sendto$inet6(r4, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)

[  204.165920] binder: 9071:9082 BC_INCREFS_DONE u0000000000000000 no match
[  204.173826] binder: 9071:9082 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  204.183306] binder: 9071:9082 got transaction to invalid handle
[  204.193105] binder: 9071:9082 transaction failed 29201/-22, size 0-0 line 3013
[  204.207411] binder: 9071:9082 BC_INCREFS_DONE u0000000000000000 no match
12:51:56 executing program 3:
timer_create(0x0, &(0x7f0000000000)={0x0, 0x23, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000040)=<r0=>0x0)
timer_delete(r0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0)
ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000000c0)=0x1)
r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0)
fcntl$setflags(r2, 0x2, 0x508c7d00dd174f01)
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140)="0b25cbd5ab8a30a9d835f7599e6cdaa2b7c4c1528ab227fee5b31df09520e22aa3257baf544801153e46816171378e3cdda9bfb5d1ecfec630f452d592b3c36be1bde940ee6c45", 0x47, r3}, 0x68)
r4 = dup(r1)
ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x31)
ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000280)={0x0, <r5=>0x0})
ptrace$peekuser(0x3, r5, 0x9)
fcntl$getownex(r2, 0x10, &(0x7f0000000300)={0x0, <r6=>0x0})
getpriority(0x1, r6)
r7 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100)
ioctl$TCGETX(r7, 0x5432, &(0x7f0000000340))
flistxattr(r2, &(0x7f0000000380)=""/81, 0x51)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x80, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r8, 0x40806685, &(0x7f00000004c0)={0x1, 0x2, 0x1000, 0x6, &(0x7f0000000440)='cMXJ6.', 0x0, 0x0, &(0x7f0000000480)})
getsockname$packet(r3, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f00000005c0))
r9 = open(&(0x7f0000000600)='./file0\x00', 0x80002, 0x29)
setsockopt$inet_mreqsrc(r9, 0x0, 0x28, &(0x7f0000000640)={@broadcast, @multicast2, @loopback}, 0xc)
r10 = syz_open_dev$mice(&(0x7f0000000680)='/dev/input/mice\x00', 0x0, 0x8400)
write$tun(r10, &(0x7f00000006c0)={@void, @val={0x2, 0x1, 0xc67, 0x4, 0xb36, 0x401}, @arp=@generic={0x10e, 0x4d02f5fe3808105e, 0x6, 0x3, 0x67edf8e000549772, @empty, "8526eb", @empty, "cbbadc0bb5f07bba654da8e4452e7591"}}, 0x31)
r11 = creat(&(0x7f0000000700)='./file0\x00', 0x125)
stat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
fsetxattr$security_capability(r11, &(0x7f0000000740)='security.capability\x00', &(0x7f0000000840)=@v3={0x3000000, [{0x2, 0x9}, {0x6bd1, 0x400}], r12}, 0x18, 0x6)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000880)='/dev/vga_arbiter\x00', 0x40, 0x0)

[  204.216089] binder: 9071:9082 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  204.226284] binder: 9071:9082 got transaction to invalid handle
[  204.233121] binder: 9071:9082 transaction failed 29201/-22, size 0-0 line 3013
12:51:56 executing program 4:
r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x100)
ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000080)=""/94)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00001dcf48)={0x2, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x50}}, 0x0)

12:51:56 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x75)
r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000380)='/dev/keychord\x00', 0x300, 0x0)
ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000400))
pipe(&(0x7f0000000100)={<r3=>0xffffffffffffffff})
write$cgroup_int(r3, &(0x7f0000000180)=0x3, 0xffffffffffffff31)
ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000380))
write$P9_RMKNOD(r3, &(0x7f0000000040)={0xffffffffffffff70, 0x13, 0x0, {0x0, 0x1000002}}, 0x14)
write$FUSE_INTERRUPT(r3, &(0x7f00000004c0)={0x10, 0x0, 0x1}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x30, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3, 0x20000}, [@IFLA_LINKINFO={0x10, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x4}}}]}, 0x30}}, 0x0)
socketpair(0x1c, 0x2, 0x3, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00')
ioctl$TUNSETLINK(r2, 0x400454cd, 0x200)
socketpair(0x6, 0x5, 0xcb, &(0x7f0000000440)={<r6=>0xffffffffffffffff})
r7 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
r8 = signalfd4(r7, &(0x7f0000000480)={0x9}, 0x8, 0x800)
dup2(r6, r8)
sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0xac, r5, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x48, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x50, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1a6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3c6080000000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8}]}]}, 0xac}, 0x1, 0x0, 0x0, 0xc000}, 0x8000)

[  204.256557] binder: 9071:9082 BC_INCREFS_DONE u0000000000000000 no match
[  204.265175] binder: 9071:9082 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  204.295096] binder: 9071:9082 got transaction to invalid handle
12:51:56 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
pipe(&(0x7f0000000840)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000700)=0x14)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000740)={@mcast2, 0x5f, r2})
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x800000, 0x0)
chdir(&(0x7f00000003c0)='./file0\x00')
r3 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0)
write$UHID_INPUT(r3, &(0x7f0000000c80)={0x8, "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", 0x1000}, 0x1006)
sendfile(r3, r3, &(0x7f0000000240), 0x2008000fffffffe)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0)
ioctl$RTC_VL_READ(r1, 0x80047013, 0x0)
ptrace(0xffffffffffffffff, 0x0)
mount(&(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='./file0\x00', 0x0, 0x18000, &(0x7f0000000480)='ramfs\x00')
ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0)
socketpair(0x1, 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0)
write$FUSE_CREATE_OPEN(r3, &(0x7f0000000600)={0xa0, 0x0, 0x8, {{0x0, 0x1, 0xc08a, 0x5, 0x6, 0x20ddbcfd, {0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x21e7, 0x0, 0xffffffff, 0xfff, 0xfffffffffffeffff, 0x0, 0x0, 0x10001}}, {0x0, 0x8}}}, 0xa0)
r4 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
dup(r4)
ppoll(0x0, 0x0, &(0x7f0000000280), &(0x7f00000002c0), 0x8)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400201)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r6}, 0x10)
r7 = socket$inet(0x2, 0x1, 0x0)
sendto$inet(r7, 0x0, 0x0, 0x20000804, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)

[  204.321166] binder: 9071:9082 transaction failed 29201/-22, size 0-0 line 3013
[  204.351373] binder: 9104:9105 BC_INCREFS_DONE u0000000000000000 no match
[  204.360512] binder: 9104:9105 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  204.369016] binder: 9104:9105 got transaction to invalid handle
[  204.380118] binder: 9104:9105 transaction failed 29201/-22, size 0-0 line 3013
[  204.402059] binder: 9104:9118 BC_INCREFS_DONE u0000000000000000 no match
[  204.410906] binder: 9104:9118 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  204.420493] binder: 9104:9118 got transaction to invalid handle
[  204.428230] audit: type=1400 audit(1574513516.733:70): avc:  denied  { shutdown } for  pid=9073 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
12:51:56 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4)
bind$netlink(r0, &(0x7f0000000040), 0xc)
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
fchdir(r0)
r3 = creat(&(0x7f00000007c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80)
write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000340)={0x3da}, 0xfffffffffffffd27)
write$cgroup_int(r1, &(0x7f0000000180)=0x3, 0xffffffffffffff31)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000400))
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r4)
ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000380)=<r5=>0x0)
fcntl$lock(r0, 0x6, &(0x7f00000003c0)={0x0, 0x3, 0x80000000, 0x2, r5})
r6 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r6, 0x4, 0x44700)
truncate(&(0x7f0000000600)='./bus\x00', 0x9)
ioctl$EVIOCGPROP(r6, 0x80404509, &(0x7f0000000140))
open(&(0x7f0000000740)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x220240, 0xd8)
lseek(r0, 0x1, 0x3)
r7 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0)
write$P9_RMKNOD(r1, &(0x7f0000000440)={0x14, 0x13, 0x2, {0x1, 0x1, 0x5}}, 0x14)
mknodat(r7, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
renameat2(r7, &(0x7f00000000c0)='./file0\x00', r3, &(0x7f0000000580)='./bus\x00', 0x2)
renameat2(r7, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r7, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2)
r8 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r8, 0x4, 0x6100)
ftruncate(r8, 0x108200)
r9 = open(&(0x7f0000000000)='./bus\x00', 0x4000, 0x48)
sendfile(r8, r9, 0x0, 0x8000fffffffe)
sendfile(r8, r9, 0x0, 0xffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x6, 0xbee, 0x99c9, 0x41b, 0x10, 0xffffffffffffffff, 0x7, [], 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x3c)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000500)='/proc/self\x00', 0x0, 0x0)

12:51:56 executing program 5:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x8000000a, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c9243fbf0322168078aba9d7ae45b0052772a9567bb821942ce72590f1bf41d20d4c000000279bd612811df1fcaa94", 0x65}], 0x27f, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x200000000038)
ptrace$cont(0x18, r3, 0x0, 0x0)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r3, 0x0, 0x0)
waitid(0x2, r3, &(0x7f0000000140), 0x1, &(0x7f0000001280))
read$FUSE(r2, &(0x7f0000000280), 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x3c)
r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0)
lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x2, {0x40, {0x0, 0x1, 0x6}, 0x100010014, r5, 0x0, 0x442, 0x10000, 0x100000000, 0x9, 0x4, 0x6, 0x8, 0x4, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0)
lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
r7 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0)
fstat(r7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x2, {0x40, {0x0, 0x1, 0x6}, 0x100010014, r6, r8, 0x442, 0x10000, 0x100000000, 0x9, 0x4, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0)
lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x2, {0x40, {0x0, 0x1, 0x6}, 0x100010014, r9, 0x0, 0x442, 0x10000, 0x100000000, 0x9, 0x4, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0)
r10 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="020f00acbb236b575c19def568136a849d000a0000000000f851a3ac08a07c5795f2b2b55ffe1500000000000005000600000000000a00000000000000ff020000000000000000000000000001000000000000000003000500000000000252bdda37d3a3f5b534a0a1982f1d0879e526a39ab0e0cb3a533af2633172f579c0f315d1e705b03c88fa54bac999d4c187c25f52af3cb231bc3fbe053eefc969847dc6bbc2e6343a906bd44c64e47e3a750b0d4695ddf28b161674bf7748377b33b6fd0953d194a96ecdb1aa5dba9e75ebbe2b2c4fd1b77f2f0f2f008106b6186899ead037205f38387c20e165ad133baf594e814f3b61fcfdf304d7318e4073a71f7a0deb9683d13e5e9bb31cadb898a2b27d3e627d544f3b6c95f023ca"], 0x50}}, 0x0)
getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000140)={0x0, <r11=>0x0}, &(0x7f00000001c0)=0xc)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f0000000200)=0xe8)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x5040, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000070000,user_id=', @ANYRESDEC=r5, @ANYBLOB=',group_id=', @ANYRESDEC=r8, @ANYBLOB="2c6d61785f726561643d3078303030303030303038303030303030302c6d61785f726561643d3078303030303030303030303030303030362c616c6c6f775f6f746211b6966469fc7c756c745f7065726d697373696f6e732c7569643c", @ANYRESDEC=r9, @ANYBLOB, @ANYRESDEC=r11, @ANYBLOB=',appraise,uid=', @ANYRESDEC, @ANYBLOB="2c6f626a5f747970653d65716c000000a95b002c7569643c", @ANYRESDEC=r12, @ANYBLOB=',\x00'])
setfsuid(r5)
prctl$PR_GET_THP_DISABLE(0x2a)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r13 = gettid()
ptrace$setopts(0x4206, r13, 0x0, 0x0)
tkill(r13, 0x200000000038)
ptrace$cont(0x18, r13, 0x0, 0x0)
ptrace$setregs(0xd, r13, 0x200000, &(0x7f0000000080))
ptrace$cont(0x9, r13, 0x0, 0x0)
ptrace$cont(0x18, r13, 0x5da9, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffcf4, 0x0, 0x0, 0x0, 0xfffffffffffffd4a}, 0x410)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ioctl$PPPIOCSMRRU(r2, 0x4004743b, &(0x7f0000000040))
r14 = dup(0xffffffffffffffff)
ioctl$TIOCGISO7816(r14, 0x80285442, &(0x7f0000000000))
r15 = gettid()
tkill(r15, 0x40)

[  204.460214] binder: 9104:9118 transaction failed 29201/-22, size 738734374912-0 line 3013
[  205.053272] binder: 9071:9125 BC_INCREFS_DONE u0000000000000000 no match
[  205.061783] binder: 9071:9125 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  205.069215] binder: 9071:9125 got transaction to invalid handle
[  205.075574] binder: 9071:9125 transaction failed 29201/-22, size 0-0 line 3013
12:51:57 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000380)='./file1\x00', 0x0)
r2 = creat(&(0x7f0000001600)='./bus\x00', 0x0)
ftruncate(r2, 0x12081ff)
fcntl$setstatus(r1, 0x4, 0x6100)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0xc8)
r5 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
pipe(&(0x7f0000000180)={<r6=>0xffffffffffffffff})
connect$inet(r6, &(0x7f00000001c0)={0x2, 0xce20, @loopback}, 0xfffffffffffffef6)
fallocate(r5, 0x0, 0x0, 0x4003fe)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4, 0x40})
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/status\x00', 0x0, 0x0)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r7})
ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000240))
setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)=@known='trusted.overlay.opaque\x00', &(0x7f0000000340)='threaded\x00', 0x9, 0x2)
r8 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r8)
r9 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x1ee)
sendfile(r8, r9, 0x0, 0x8000fffffffe)

12:51:57 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
io_setup(0x20000000002, &(0x7f0000000240)=<r3=>0x0)
r4 = socket(0x4, 0x0, 0x0)
sendto(r4, &(0x7f0000000000)="120000001a00e5ff007b00000000008000a1", 0x12, 0x0, 0x0, 0x0)
io_setup(0x3, &(0x7f00000000c0)=<r5=>0x0)
io_getevents(r5, 0x2, 0x2, &(0x7f0000d83f60)=[{}, {}], 0x0)
r6 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0)='nbd\x00')
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r7, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6c}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x403}]}, 0x38}, 0x1, 0x0, 0x0, 0xfb8b0df656d1bc5a}, 0x10000000)
fcntl$setstatus(r6, 0x4, 0x6100)
ftruncate(r6, 0x108200)
r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r6, r8, 0x0, 0x8000fffffffe)
r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00')
sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x1c, r9, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000000}, 0x1)
mkdirat(r8, &(0x7f0000000040)='./file0\x00', 0x4)
r10 = memfd_create(&(0x7f0000000140)='sec]ritynodev:ppp1bdev\x00', 0x0)
io_submit(r5, 0xd8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0}])
io_destroy(r5)
io_destroy(r5)
io_submit(r3, 0x2, &(0x7f0000000140)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x25}])

12:51:57 executing program 3:
eventfd2(0x0, 0x2000000000000002)
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0)
ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7)
ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0))
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PPPIOCDISCONN(r2, 0x7439)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6)
write(r2, &(0x7f00000001c0), 0xfffffef3)
setsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f00000003c0)=0x5, 0x4)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r4, 0x4, 0x6100)
ftruncate(r4, 0x108200)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f00000002c0)=0xe8)
r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r6, &(0x7f0000000080)=""/36, 0x24)
r7 = open(0x0, 0x400, 0x0)
ioctl$TCSBRKP(r7, 0x5425, 0x7f)
openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0)
r8 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
r9 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done={0x40106308, 0x2}, @exit_looper, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffdb, 0x0, 0x0, 0x0}}], 0x43, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
r10 = dup2(r8, r9)
getsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000000680)={{{@in=@empty, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in=@dev}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000004180), 0x11f, 0x40000)
setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0)
r11 = dup(r3)
open(&(0x7f0000000240)='./bus\x00', 0x1400, 0x90)
syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0)
r12 = creat(&(0x7f0000000340)='./file0\x00', 0x0)
fsetxattr(r12, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0)
fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x3ba, 0x0)
r13 = creat(&(0x7f0000000340)='./file0\x00', 0x0)
fsetxattr(r13, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000600)='-{vmnet1[cpuset\'wlan0${system$\x00\xca\xa4\xce\xf0\xf2a\xc51\xc0Cl\xfep\x84\xf1\x8a\xf4\x1b\xc3~{2\x01g\x11\x80R\x80\xbb\x03\xac \xda\x817\x88\x01Y^>\x1c\xb8\xc5\xcaw\xc5\xab\xa3x\x90>\x86qW\xa8\xb7\xdb\xa1\xd6xS\xb2:\x87\x12\x03\xafV\x85\xc4\x0e~\x89\x18\x86\xd4\xd2\xc1\x00\xda\x9b.', 0x71, 0x2)
ioctl$EVIOCGABS0(r13, 0x80184540, &(0x7f0000000780)=""/114)
r14 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r14, 0x0, 0x0)
fcntl$dupfd(r2, 0x203, r14)
r15 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$inet6_tcp_int(r15, 0x6, 0x8, &(0x7f00000005c0)=0xfffffffffffffffe, 0xfffffffffffffe6d)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
accept(0xffffffffffffffff, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0)
setsockopt$inet6_tcp_int(r11, 0x6, 0x12, &(0x7f0000000380)=0x83, 0x1fb)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10)
r16 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0)
ftruncate(r16, 0x2007fff)
sendfile(r11, r16, 0x0, 0x8000fffffffe)

12:51:57 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000040))
lseek(r1, 0x800002, 0x0)
write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00'], 0x1)
r2 = socket$inet6(0xa, 0x2, 0x0)
close(r2)
r3 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
fallocate(r1, 0x3, 0x0, 0x8020003)

12:51:57 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000600)=0x207, 0x2)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)=0x1, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, 0x0, 0x0)
setsockopt$inet6_opts(r2, 0x29, 0x0, 0x0, 0x0)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
shutdown(r2, 0x0)
pipe(&(0x7f0000000400))
r3 = dup2(r1, 0xffffffffffffffff)
ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000180)=0x10001)
r4 = open(&(0x7f00000002c0)='./bus\x00', 0x40000141041, 0x402)
write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0x323)
mlockall(0x14)
syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00')
r5 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
r6 = getpid()
sched_setscheduler(r6, 0x5, &(0x7f0000000040))
r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x41)
getsockopt$SO_COOKIE(r7, 0x1, 0x39, &(0x7f0000000080), 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
write$FUSE_POLL(r4, &(0x7f0000000540)={0x18, 0xfffffffffffffffe, 0x1, {0x3298}}, 0x18)
r8 = socket(0x10, 0x80002, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r5)
bind$netlink(r8, &(0x7f0000177ff4)={0x10, 0x0, 0x1, 0x8001002}, 0xc)
connect$netlink(r8, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x800000}, 0xc)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r8, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
times(&(0x7f0000000440))
connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000b4bffc)=0x7, 0x4)
ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f0000000580)={'bcsh0\x00'})
sendto(r8, &(0x7f0000000340), 0xac, 0x0, 0x0, 0x0)
recvmmsg(r8, &(0x7f0000000780), 0x2bb1f36c7597d46, 0x2, 0x0)
sendfile(r4, r7, &(0x7f0000000140), 0x8fff)

12:51:57 executing program 2:
r0 = socket$unix(0x1, 0x2, 0x0)
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080), &(0x7f0000000180)=0x4)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
read(r1, &(0x7f0000000200)=""/250, 0x50c7e70e)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r3)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)=<r5=>0x0)
sched_setparam(r5, &(0x7f0000000140))
r6 = creat(&(0x7f0000000700)='./bus\x00', 0x11)
fcntl$setstatus(r6, 0x4, 0x6100)
set_tid_address(&(0x7f0000000040))
write$FUSE_INIT(r4, &(0x7f0000000180)={0x50, 0xfffffffffffffffe}, 0x50)
clone(0x2142001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d9189)
socket(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
r7 = gettid()
r8 = syz_open_procfs(r7, &(0x7f00000001c0)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f')
r9 = request_key(&(0x7f0000000040)='id_resolver\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000380)='/dev/loop#\x00', 0xfffffffffffffffc)
keyctl$dh_compute(0x17, &(0x7f00000003c0)={0x0, 0x0, r9}, &(0x7f0000000400)=""/48, 0x30, &(0x7f0000000480)={0x0})
r10 = request_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)='ppp1,trustedwlan1\x00', 0xfffffffffffffffa)
keyctl$negate(0xd, r9, 0x4, r10)
write$selinux_context(r8, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b)
r11 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0)
mknodat(r11, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
renameat2(r11, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r11, &(0x7f0000000280)='./file0\x00', 0x2)
renameat2(r11, 0x0, r11, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2)
accept4$unix(r11, 0x0, &(0x7f0000000000), 0x800)
r12 = open(&(0x7f0000022ff6)='./control\x00', 0x20000, 0x0)
mkdirat(r12, &(0x7f0000000100)='./control\x00', 0x0)

[  205.257824] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9158 comm=syz-executor.4
[  205.354380] binder: 9151:9170 BC_INCREFS_DONE u0000000000000000 no match
[  205.379448] binder: 9151:9170 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  205.405107] binder: 9151:9170 got transaction to invalid handle
[  205.411581] binder: 9151:9174 BC_INCREFS_DONE u0000000000000002 no match
[  205.433128] binder: 9151:9170 transaction failed 29201/-22, size 0-0 line 3013
[  205.498371] binder: 9151:9174 unknown command 16777216
[  205.507213] binder: 9151:9174 ioctl c0306201 200002c0 returned -22
12:51:57 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x200000000038)
ptrace$cont(0x18, r1, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r1, 0x0, 0x0)
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x200000000038)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r2, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="3800000010000507000000e5ff00010000000000", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYBLOB="00000000000000001800120008000100767469000c00020008000100", @ANYRESHEX], 0x4}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)

12:51:58 executing program 1:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xcc93a2cc92445b75)
lseek(r0, 0x0, 0x3)
r1 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0)
mknodat(r1, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
renameat2(r1, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000280)='./file0\x00', 0x2)
renameat2(r1, 0x0, r1, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
ftruncate(r2, 0x108200)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
pipe(&(0x7f0000000100)={<r4=>0xffffffffffffffff})
write$cgroup_int(r4, &(0x7f0000000180)=0x3, 0xffffffffffffff31)
ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000380))
write$P9_RMKNOD(r4, &(0x7f0000000040)={0x14, 0x13, 0x0, {0x0, 0x2}}, 0xfd95)
r5 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0)
mknodat(r5, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
renameat2(r5, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r5, &(0x7f0000000280)='./file0\x00', 0x2)
renameat2(r5, 0x0, r5, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xcc93a2cc92445b75)
lseek(r6, 0x0, 0x3)
r7 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
ftruncate(r7, 0x108200)
r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r7, r8, 0x0, 0x8000fffffffe)
r9 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0x3ddca8810c5b4f58)
lseek(r9, 0x0, 0x3)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
write(r10, &(0x7f00000001c0), 0xfffffef3)
r11 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r11, 0x4, 0x6100)
ftruncate(r11, 0x108200)
r12 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r11, r12, 0x0, 0x8000fffffffe)
ioctl$sock_FIOGETOWN(r11, 0x8903, &(0x7f0000000080))
r13 = getpid()
wait4(r13, 0x0, 0x80000000, 0x0)
clone(0x3102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
unshare(0x40000000)
r14 = syz_open_procfs(0x0, &(0x7f0000000140)='coredump_filter\x00')
r15 = socket$inet(0x2, 0x4000000000000001, 0x0)
writev(r15, &(0x7f0000000040)=[{&(0x7f0000000180)="e6", 0x1}], 0x1)
r16 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00')
sendfile(r16, r14, 0x0, 0xedc0)

12:51:58 executing program 0:
pipe(&(0x7f00000013c0)={<r0=>0xffffffffffffffff})
read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
truncate(&(0x7f00000000c0)='./bus\x00', 0xa00)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r4 = socket$inet6(0xa, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x102, 0x1, 0x0, 0x0, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0)
bind$packet(r3, &(0x7f00000003c0)={0x11, 0x4, 0x0, 0x1, 0x6, 0x6, @dev}, 0x14)
lseek(r2, 0x0, 0x2)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8005)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580))
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', <r5=>0x0})
fstat(0xffffffffffffffff, &(0x7f00000004c0))
socket(0x0, 0x2, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000fbff1200080001007369740004000200"], 0x30}}, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@dev, @in6=@empty}}, {{@in6=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8)
r7 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f00000006c0)={'team0\x00', r5})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', r5})
ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000001380)='IPVS\x00')
r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fallocate(r8, 0x0, 0x0, 0x8020003)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x4000000, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r9=>0xffffffffffffffff})
splice(r9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000180)=""/72)

12:51:58 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000380)='trusted.overlay.nlink\x00', &(0x7f00000003c0)={'L+', 0x6}, 0x28, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x6}, {}, 0x0, 0xffffffff, 0x1, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x1}}, 0xe8)
r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
r3 = dup3(r2, r0, 0x80000)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x300, 0x70bd27, 0x25dfdbfb, {{}, 0x0, 0x800b, 0x0, {0x8}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000340)={0x9, 0x1000})
sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@in={0x2, 0x4e21, @remote}, 0x80, 0x0}}], 0x2, 0x0)

[  206.148450] binder: 9211:9213 BC_INCREFS_DONE u0000000000000000 no match
[  206.162267] binder: 9211:9213 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  206.180739] binder: 9211:9213 got transaction to invalid handle
12:51:58 executing program 3:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000180)={0x6, 0x5, 0x35cb8d1d})
mkdir(&(0x7f0000000080)='./file1\x00', 0x0)
symlink(&(0x7f0000000300)='./file1/file0\x00', &(0x7f0000000340)='./file1/file0\x00')
ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000100)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x4e23, @local}, {0x2, 0x4e24, @broadcast}, 0xa, 0x0, 0x0, 0x0, 0x24, &(0x7f0000000000)='syzkaller1\x00', 0x2, 0xffff, 0xfffc})
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc494)
link(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file1/file0\x00')
rename(&(0x7f00000002c0)='./file1/file0\x00', &(0x7f0000000280)='./file2\x00')
r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
fcntl$dupfd(r2, 0x203, r3)

[  206.202167] binder: 9211:9213 transaction failed 29201/-22, size 0-0 line 3013
[  206.204431] binder: 9211:9215 BC_INCREFS_DONE u0000000000000000 no match
[  206.204438] binder: 9211:9215 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  206.204448] binder: 9211:9215 got transaction to invalid handle
[  206.204456] binder: 9211:9215 transaction failed 29201/-22, size 0-0 line 3013
[  206.223628] binder: 9211:9215 ioctl 4b4d 20000340 returned -22
[  206.241726] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[  206.272013] binder: 9218:9219 BC_INCREFS_DONE u0000000000000000 no match
[  206.272022] binder: 9218:9219 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  206.272033] binder: 9218:9219 got transaction to invalid handle
[  206.272041] binder: 9218:9219 transaction failed 29201/-22, size 0-0 line 3013
[  206.274651] binder: 9218:9219 ioctl c0185879 20000180 returned -22
12:51:58 executing program 5:
socket$inet6(0x10, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
pipe(&(0x7f0000000540)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
read(r0, &(0x7f0000001080)=""/250, 0x1a5d2646)
socket$inet(0x10, 0x3, 0x0)
socket$inet(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000080), 0x4)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001280))
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
ftruncate(r2, 0x108200)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r4 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
r5 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
sendfile(r5, r3, 0x0, 0xffffffff)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001240)={<r6=>0x0}, &(0x7f0000001300)=0xc)
r7 = syz_open_procfs(r6, &(0x7f0000001340)='net/softnet\x05\x00\x00\x00t\x00')
read$FUSE(r7, &(0x7f0000000000), 0x1170)
write$FUSE_NOTIFY_POLL(r7, 0x0, 0x15)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000380))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000080)=0x8)
fchdir(0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r8 = gettid()
clone(0x40000000, 0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
socketpair(0x8, 0x5, 0x0, &(0x7f0000000000))
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x14040, 0x0)
pipe(&(0x7f0000000100)={<r9=>0xffffffffffffffff})
write$cgroup_int(r9, &(0x7f0000000180)=0x3, 0xffffffffffffff31)
ioctl$TIOCGSID(r9, 0x5429, &(0x7f0000000380))
write$P9_RMKNOD(r9, &(0x7f0000000040)={0x14, 0x13, 0x0, {0x0, 0x2}}, 0xfd95)
pipe2(&(0x7f0000001040), 0x183800)
r10 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="d156108a3f6581848f02ce000900000000000000404002000d40000000b031dd47192bb613a9e2000000000000cb308d7b2878d0a68584e1ef44e7ae6d1fa395d094463b1b607a1a34ae70f0aa9d96000000000000000000e2ff00000000000000945466457a10733f000000000000000000000000009a360000ce72a698060cbb693bf3bb46b675e2bbc99fbd195dd9"], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
r11 = dup(r10)
ioctl$TUNSETLINK(r11, 0x400454cd, 0x30f)
r12 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$BLKROTATIONAL(r12, 0x127e, 0x0)
ioctl$FS_IOC_GETFLAGS(r12, 0x80086601, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
r15 = fcntl$dupfd(r13, 0x0, r14)
ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200)
getpeername$packet(r0, &(0x7f0000003bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0)
r16 = openat$cgroup_ro(r12, &(0x7f0000001000)='pids.events\x00', 0x275a, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r16, 0x0, 0x0)
arch_prctl$ARCH_SET_CPUID(0x1012, 0x0)
pread64(r0, &(0x7f0000000040)=""/49, 0x31, 0x0)
ptrace(0x10, r8)
wait4(r8, 0x0, 0x41000002, 0x0)

12:51:58 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast1, @in6=@loopback, 0xffff}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@lifetime_val={0x24}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x15c}}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x428822, 0x1)
r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
fsetxattr$security_selinux(r2, &(0x7f0000000400)='security.selinux\x00', &(0x7f0000000440)='system_u:object_r:ld_so_t:s0\x00', 0x1d, 0x2)
r3 = syz_genetlink_get_family_id$tipc(0x0)
pipe(&(0x7f0000000100)={<r4=>0xffffffffffffffff})
write$cgroup_int(r4, &(0x7f0000000180)=0x3, 0xffffffffffffff31)
ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000380))
write$P9_RMKNOD(r4, &(0x7f0000000040)={0x14, 0x13, 0x0, {0x0, 0x2}}, 0xfd95)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3)
r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x38, r3, 0xfa50877429e2ed56, 0x70bd29, 0x25dfdbfb, {{}, 0x0, 0x4101, 0x0, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'ip6_vti0\x00'}}}}, ["", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)
ioctl$SNDRV_TIMER_IOCTL_STATUS(r1, 0x80605414, &(0x7f0000000300)=""/119)
sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x100, 0x70bd28, 0x25dfdbfc}, 0x1c}}, 0x90)

[  206.363693] binder: 9218:9226 BC_INCREFS_DONE u0000000000000000 no match
[  206.378707] binder: 9218:9226 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  206.382551] binder: 9229:9230 BC_INCREFS_DONE u0000000000000000 no match
[  206.382558] binder: 9229:9230 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  206.382567] binder: 9229:9230 got transaction to invalid handle
[  206.382575] binder: 9229:9230 transaction failed 29201/-22, size 0-0 line 3013
[  206.384075] audit: type=1400 audit(1574513518.683:71): avc:  denied  { associate } for  pid=9229 comm="syz-executor.2" name="binder2" dev="devtmpfs" ino=1104 scontext=system_u:object_r:ld_so_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1
[  206.441788] binder: 9218:9219 BC_INCREFS_DONE u0000000000000000 no match
[  206.450401] binder: 9229:9232 BC_INCREFS_DONE u0000000000000000 no match
12:51:58 executing program 2:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(&(0x7f0000000380)=ANY=[@ANYBLOB="2e2f66696c6530f87d3653a3329ec6f69bb97655808631352b4c9fff5382fcf55191bf5cb1a9b8fabaeb2c602e71931e6bf5d18af4f2b901fdcadfdf8e62b3e707c03961c65782f73754c37c5d3647c3bd3211984c18ae075a6df5546e4acf65cdd53ff2591965f3f5a1252aaa902e77556321bff316b17df247fa9b22b2ce26e7e011c7865f8c96597e139e796687493963321722a250a9ea7930ec928fcec48de9628ba9ae4356ef9281147dfa8d6d4eaa0736d0b186b79a1d459c533249ff76d13492c25e0a9e13a86f2e81139eca57"], &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0)
write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xc05eb68)
clone(0x2000000000003ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
unlink(&(0x7f0000000680)='./file0\x00')
mknod(&(0x7f0000000000)='./file0\x00', 0x20, 0x1)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3a)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xb)
creat(&(0x7f0000000180)='./file0\x00', 0x0)

[  206.450410] binder: 9229:9232 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  206.450420] binder: 9229:9232 got transaction to invalid handle
[  206.450429] binder: 9229:9232 transaction failed 29201/-22, size 0-0 line 3013
12:51:58 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00f\x82}r2\xf2\xf0|<\x14\x85H\x1c\xba\xb6\x06A\x92\xf9\xcc\x84\x8f\xd2~\x8c\x84r\xed\xca\xea\x159\xf0{\xa9\xc65\xd0\xad\xad\x18\x84\xed\"\f\xe5\x02k\xcdk\x1fNcr\x8d\xfd\x1bi\xb6\xaf*L\x9a_w\"\x8d?D\x8f[0\xd9\xb8\xbe^\x89\x9f\xf8\xed\xa1\xe7\xe1\x94J\xfd-\x84\x85\xd9\xa4\x15\xcf\xadP~N\xb3\x91\x8f:\x91\xe5\xbb\x8d\x142\x94}e\x98*H/BC\xdd,lm\xbd\x88\xf5\x85u\xc7C#&t\t\xa9(X:6\x95\xf4\xcd\x8fwX\x8f\xd3\xdeU\xfd\x9aJ,\xdb\x15\xaad\xb3LR\x8aXn\x13U\x93B\xd88\xd5\xf0\xc0$o\xec\x9az\x84\xa13\xe1\xabs\xe5\x9b\x17\xfaJ\x00\xacc\xae7@\xe1\x02\x85h\xab\xa3\x00\r\xce\xf4I]\xc6\xa4\xa9\xdd\xe91v\xc5\xdc:L[\xc8\t*\xbbe\xa1\xfav\xfe\x0e\xb9A\x01*\xe4\xeb\xe1`\xfal\x8e')
fstat(r0, &(0x7f0000000080))
ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000))
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
ftruncate(r1, 0x108200)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x200000000038)
ptrace$cont(0x18, r3, 0x0, 0x0)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r3, 0x0, 0x0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={[], 0x400, 0x5, 0x8, 0x9, 0x5, r3})
r4 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00f\x82}r2\xf2\xf0|<\x14\x85H\x1c\xba\xb6\x06A\x92\xf9\xcc\x84\x8f\xd2~\x8c\x84r\xed\xca\xea\x159\xf0{\xa9\xc65\xd0\xad\xad\x18\x84\xed\"\f\xe5\x02k\xcdk\x1fNcr\x8d\xfd\x1bi\xb6\xaf*L\x9a_w\"\x8d?D\x8f[0\xd9\xb8\xbe^\x89\x9f\xf8\xed\xa1\xe7\xe1\x94J\xfd-\x84\x85\xd9\xa4\x15\xcf\xadP~N\xb3\x91\x8f:\x91\xe5\xbb\x8d\x142\x94}e\x98*H/BC\xdd,lm\xbd\x88\xf5\x85u\xc7C#&t\t\xa9(X:6\x95\xf4\xcd\x8fwX\x8f\xd3\xdeU\xfd\x9aJ,\xdb\x15\xaad\xb3LR\x8aXn\x13U\x93B\xd88\xd5\xf0\xc0$o\xec\x9az\x84\xa13\xe1\xabs\xe5\x9b\x17\xfaJ\x00\xacc\xae7@\xe1\x02\x85h\xab\xa3\x00\r\xce\xf4I]\xc6\xa4\xa9\xdd\xe91v\xc5\xdc:L[\xc8\t*\xbbe\xa1\xfav\xfe\x0e\xb9A\x01*\xe4\xeb\xe1`\xfal\x8e')
fstat(r4, &(0x7f0000000080))
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
pipe(&(0x7f0000000040))
r5 = socket(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f00000034c0)={@local, @mcast2, @empty, 0x0, 0x40, 0x0, 0x100, 0x0, 0x206})

[  206.451798] binder: 9218:9226 got transaction to invalid handle
[  206.451806] binder: 9218:9226 transaction failed 29201/-22, size 0-0 line 3013
[  206.477577] binder: 9227:9235 BC_INCREFS_DONE u0000000000000000 no match
12:51:58 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff})
write$cgroup_int(r2, &(0x7f0000000180)=0x3, 0xffffffffffffff31)
ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000380))
ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000240))
write$P9_RMKNOD(r2, &(0x7f0000000040)={0x14, 0x13, 0x0, {0x8, 0xfffffffe}}, 0x7)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x1400, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f00000004c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000d40000006d2257aadfeccbc1cefa1511e39ac8154373409e521bea4597b93519249ab84552818275f923a385f0de48045e0579bc162236fedaa4986f9898e82c30a3d36df261f64810d0eab5d255afcc690773291c0cc4eac7b33ec63dcd84f1ccfcdfc15495c18038d0f298609b71e0468747fcef0285db36051f5505462a054d6ec103a09d45d915121f55577df4bc2ba0d110c7e17cb0abbd083a4e8dab768f5882a8920ffe427210c9fee3080e48abad4de69a4642fa27b7d9cd5a4358bf9c7d34704f486dc12cd811f0b6c022f44d9786b9fededfad"], &(0x7f00000002c0)=0xf8)
ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f0000000200))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r1, 0x0, 0x2)
sendfile(r1, r4, 0x0, 0x8000fffffffe)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
ioctl$UI_SET_PROPBIT(r5, 0x4004556e, 0x10)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="962c85e043d8"}, 0xc)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='autogroup\x00')
ioctl$BLKSECTGET(r6, 0x1267, &(0x7f0000000140))
r7 = socket(0x3, 0xa, 0x80)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000180)={{0xa, 0x4e20, 0x1f, @rand_addr="94954af56712e46d277913f60f69c1c8"}, {0xa, 0x4e21, 0x614, @ipv4={[], [], @remote}, 0x200}, 0x1, [0x1, 0x4, 0x401, 0x64f5, 0x2f, 0x80000001, 0x6, 0xffff]}, 0x5c)

[  206.477588] binder: 9227:9235 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  206.477598] binder: 9227:9235 got transaction to invalid handle
[  206.477610] binder: 9227:9235 transaction failed 29201/-22, size 0-0 line 3013
[  206.477833] binder: 9227:9235 BC_INCREFS_DONE u0000000000000000 no match
[  206.477840] binder: 9227:9235 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  206.477846] binder: 9227:9235 got transaction to invalid handle
[  206.477852] binder: 9227:9235 transaction failed 29201/-22, size 0-0 line 3013
[  206.528336] binder: 9237:9237 unknown command -1978640687
[  206.528345] binder: 9237:9237 ioctl c0306201 200002c0 returned -22
[  206.528466] binder: 9237:9237 ioctl 400454cd 30f returned -22
[  206.661917] binder: 9218:9219 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  206.670284] binder: 9218:9219 got transaction to invalid handle
[  206.677520] binder: 9218:9219 transaction failed 29201/-22, size 0-0 line 3013
[  206.714474] binder: 9218:9226 ioctl c0185879 20000180 returned -22
[  206.726187] binder: 9218:9253 BC_INCREFS_DONE u0000000000000000 no match
[  206.727301] binder: 9218:9226 BC_INCREFS_DONE u0000000000000000 no match
[  206.727309] binder: 9218:9226 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  206.727319] binder: 9218:9226 got transaction to invalid handle
[  206.727327] binder: 9218:9226 transaction failed 29201/-22, size 0-0 line 3013
[  206.765868] binder: 9218:9253 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  206.773220] binder: 9218:9253 got transaction to invalid handle
[  206.779694] binder: 9218:9253 transaction failed 29201/-22, size 0-0 line 3013
[  206.854093] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
12:51:59 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r1, 0x800002, 0x0)
write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1)
r2 = socket$inet6(0xa, 0x2, 0x0)
close(r2)
r3 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
fallocate(r1, 0x40, 0x0, 0x8020003)

12:51:59 executing program 3:
eventfd2(0x0, 0x0)
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0)
ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7)
ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0))
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6)
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68)
socket$inet6(0xa, 0x400000000001, 0x0)
r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = accept$inet(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, 0x0, 0x12c)
dup(r0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e20, 0x1, @remote, 0x5}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4)
r6 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
pipe(&(0x7f0000000300)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = gettid()
ptrace$setopts(0x4206, r9, 0x0, 0x0)
tkill(r9, 0x200000000038)
ptrace$cont(0x18, r9, 0x0, 0x0)
ptrace$setregs(0xd, r9, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r9, 0x0, 0x0)
r10 = gettid()
ptrace$setopts(0x4206, r10, 0x0, 0x0)
tkill(r10, 0x200000000038)
ptrace$cont(0x18, r10, 0x0, 0x0)
ptrace$setregs(0xd, r10, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r10, 0x0, 0x0)
write$binfmt_misc(r8, &(0x7f0000000440)=ANY=[@ANYPTR=&(0x7f0000000040)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYRES16, @ANYRESHEX=r3, @ANYPTR=&(0x7f0000000640)=ANY=[@ANYBLOB="c33b1b00494ab29327cb05ae2e251363f8ee0f63049cd357f765a6bb3ea39461c5d7106e25bb2034cc12663f58f80a21766e2a28d7d169cb307d3ab627cc5af952bf6b0ababadb76c4bea376d420bfa4d2551249f464ab06257b0e0b6891568c6c8c31fe18bf1755beb791916d4ff2f2aefdf40f102603a0a4ccc3a19adae35e071b2aa3bd0000000000", @ANYRES16=r10, @ANYPTR=&(0x7f0000000600)=ANY=[@ANYBLOB="c43bbe20bdc884cff1ee5b", @ANYRESHEX=r6, @ANYRESOCT=0x0]], @ANYRES16=r7, @ANYRES16=r5]], @ANYBLOB="a934b40e265574e045a53c05f73ebdfbbe18282e2a8814c76b2ebbefc9019cddc4cfc53192e9a0347382c82ce27d856dbf04c125b0353a8a2582a01426d369da2223854293694755429bc5a85c7c43cb5dee9b7a35d95bf0d64277a69ab048688a69bfbe08b4640151956f9a7a47390441eb656b856e37c2e14db3f52b287daf4cbe281cff4cc09caf701e365233d48163bc6b82e9a3ce90596b647d0290485977e59e3ff5f19eb8e5fc784cfc43fc770ad30c80f7a9c4cebaa40509efe0cbc2c03bdcb365bbb0b9218f10c1a0aab25621eff8de308ec70382ddb2b8f36b04c95e2c9e03de31c5ded9", @ANYRESDEC=r9], 0xfeff)
r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x42840222}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, r11, 0x800, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0xffffffc0, @media='udp\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x10004881}, 0x200c8891)
write(0xffffffffffffffff, &(0x7f0000000080)="24e8eb65f83abe9dcdc88fb9908ec0b909db5dd94de9d22d398dedf6a519ed357576466b07d258bc1baa5b1ea9ee899742f7c945868169907405d0930d291eb3be1f1a1a4ea3a15a706dcbec9d8ed6d49a762c7fe2b0f73e4760426f317cabb9d85fe25ea79c48aa7b8296e62634a9b218ac2d772a8a59f85e47deea", 0x55234523)

12:51:59 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x3d}, {0x80000006}]}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x20}, 0x10)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

12:51:59 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='wlan1\\'}, 0x10)
write$binfmt_script(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f627573206d643573756d2920ffffff7f00f808f5ff0020dc637075736574295c63707533657420637075736574f3656d307070703129766265786e657431202e2f6367726f75702e637075000a779c94418c1bc2ad397aba94f6437d8b553b806f0f27d1131fd77381f137301a082d46aef88fbdd4fbfb450861e7"], 0x6f)
r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
r3 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r4, 0x2081fc)
pipe(&(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
write(r6, &(0x7f00000001c0), 0xfffffef3)
r7 = open(&(0x7f000000fffa)='./bus\x00', 0x541042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r7, 0x0)
read(r5, &(0x7f0000000000)=""/246, 0xf6)
r8 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
fcntl$setstatus(r8, 0x4, 0x40400)
r9 = creat(&(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x5)
fcntl$setstatus(r9, 0x4, 0x44700)
accept$packet(r9, 0x0, &(0x7f0000000380))
r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='\xff\xff\xff\x7f\x00\xf8\b\xf5\xff\x00', 0x404, 0x0)
write$FUSE_WRITE(r10, &(0x7f0000000080)={0x18, 0x0, 0x3, {0xffffffff}}, 0x18)
madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
fdatasync(r2)
getrusage(0x0, &(0x7f0000000680))
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0xd8}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000280)={0x800, 0x1f, 0x80000000, 0x81, 0x7})
r11 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r11, &(0x7f0000000180), 0x400006a, 0x0)

12:51:59 executing program 1:
r0 = socket(0x10, 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xcc93a2cc92445b75)
lseek(r1, 0x0, 0x3)
getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000080)=0x40)
write(r0, &(0x7f0000000040)="260000001000f5680300c10100000016c455ca3801000000000000000000f13a050003006a4f", 0x26)

12:51:59 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0\x00\x00\x00\f\x00', <r3=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@rand_addr="489592572ca0aed6de1b4bc6da12572c", 0x0, r3})
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr="d214c0e12eb5e6ea076cca63e0537907"}, 0x1c)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000180)=0x4, 0x4)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40000, 0x0)
setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4)
sendmmsg(r0, &(0x7f000000ac80), 0x800000000000226, 0x0)

12:51:59 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x84, &(0x7f00000003c0)=<r5=>0x0)
r6 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fallocate(r6, 0x0, 0x0, 0x108000)
r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
r8 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
write$FUSE_INIT(r8, &(0x7f0000000000)={0x50}, 0x50)
ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000180)={0x67c1, 0xfffffc00, 0xab6, 0x2e22, 0x9})
write$P9_RREMOVE(r7, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f)
r9 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
fdatasync(r7)
ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f0000000200)={0x0, r7})
fcntl$setstatus(r4, 0x4, 0x44800)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])

12:52:01 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x16, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000fcffffff611189c4d20144140000000000450000000000000095000095b12225c0e7d2e0db3b1da86195a2568d7bca2d97630dac6b7e70490d4cdb5d7dbfcbc2812abe0c01536a69a0c7252c442268b73b3ffc276dd634cb42e0773d8c830397e95ae812c91480bc44129628e511a5c32bf4c565b3b9aa1b2d82c2dccea4fde311d7beb2fa28ab6e5b3deb5c4d96b34a39c3b66e66b1b988b0c5d83c783192956ebc592e8b453c9681d8d150"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffc}, 0x10}, 0x70)

12:52:01 executing program 1:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800003, 0x8031, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x2, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0)
mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x200000a, 0x4032, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000140)=""/40)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x0, 0x1a84da2eae89c057)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x2a}, @dev={0xac, 0x14, 0x14, 0x26}, @multicast2}, 0xc)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c)
fcntl$setstatus(r1, 0x4, 0x0)
exit(0x0)

12:52:01 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f13000)={0xa, 0xce22}, 0x1c)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000))

12:52:01 executing program 2:
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x0, 0x10, 0x1, <r0=>0xffffffffffffffff})
ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040))
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x155060, 0x0)
ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0))
r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/user\x00', 0x2, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000140)={{0x3, 0x0, @descriptor="140a4e129886b8ef"}})
r3 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x94002, 0x0)
r4 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x20)
inotify_rm_watch(r3, r4)
r5 = dup(0xffffffffffffffff)
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uinput\x00', 0x802, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xe8)
sendmsg$nl_netfilter(r5, &(0x7f00000019c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000022}, 0xc, &(0x7f0000001980)={&(0x7f00000003c0)={0x158c, 0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {0x1, 0x0, 0x5}, [@nested={0xf4, 0x7e, [@typed={0xd4, 0x8e, @binary="5e89f7e8479c33d292c9bb2dedd986a4177764869a122928f8ee1861491499f9fe944b4f3643e3e4f26ae5fb1e9980404fc4564a2daf9a438b70356750fa955542f51df1e774987e049203cc84129d3e25cf7d6dc0a2f7ff845babb24a08c08123f6af076e1f8f26dd78d9e5f86dd7b6e522b23597c2fb43825aa4d5f5da1c496dcc41fccf178a60cf99c9bbe43b6378304adf95e95466c0835de1b27cbe1d36fc59a667db05cbe0ce89093446b396950086ad8648a71c449b606cce7c1e5b494119b95185d857cd3029ac69d862"}, @typed={0x8, 0x1e, @pid=0xffffffffffffffff}, @typed={0x8, 0x10, @fd=r6}, @typed={0xc, 0x6d, @u64}]}, @nested={0x12f0, 0xd, [@typed={0x8, 0x21, @uid=r7}, @generic="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", @generic="f8162ff2a29de126be2f924398bd39259e35221d777047f7fd57", @generic="374ec0ca3aab5444", @generic="ae3e470469ec006adc13775f6484ac786bafa6cd8ce17f4b09c2d569530617570918bb68b5e00d6669cf0dde2881b44281e3f223eaa8f84df43d29bfb5c80b31340ae6665c78b84e9bdcaff7738dab777fc9aeba9b4ee9e6e498247d212ca9b3a1f18feb6aab8181e94db7af103b19f4c4f2bd5baaa749ce1aae77c57820d65273963bfce5a0bee480e16d24c80328735329cce73d8bb8427b4283a109f7d32609f3a568012a8480d055391d03103b820840af45ae9797ec387db7e5143a9173a4df027b8d308a0c4e615950f7a3f4fcc1d722b1f6f0", @generic="97d7af7120fca74d1082d0be361d74e12c198b3b320497705e4fcec77c6823461c64d0bc148cf876a7ba3933df8f9ae34a5f39a8ee80201f12b5dca87bea224857d1920cc6e0451c71715d4952a4f2e1b52481f3693d5d7ed63fec19b3f5aa137f8164ba66398702849b1cef677d72232e59cfbcf31534c54dc27e70014af0e647b9253086f24e1edd9c04b499c1870d499c80fae4eff3842df319dc6021f0e29cc677510e523d5ba1f0b4abccd16e182e4e81b745d46e36057243e3f5c65a52df99e81aa0c1729cffb86db6d15c8cba69fd63a37e6cf95a6fcbb2c3a34df84e1460283b8adc6100ebc09e9e1ab8", @typed={0xfc, 0x5d, @binary="2bae7fa0564953901d584f97c6347f0c9da7c334f935d173842ee56762d9c924c4256f68dc75233f7e9c2494a9b87e3ddfe2cb9c4f67dbbb9895af99440c75a42a23aa3f1b2b61d119b2ee78144d00f3ff15b9ced81c358929ce9ed2860bfb5e681fe86d9c0910a8c71ed490fb8c111ad8a953d894df359df8d4015e37dfcd45a3543d2848adce839da614c9c3730d512c6b706b26035da71eaadcff5efec5aa29e533e5ca4ae2b2f086123bf90b3f96a8f9eac68bc0f07aeef90650d4204ec5db5da31ac6ab42ed0349c37608791c6bcebb9c44613702d70d75c617403b4bba54bc9fb84124dee61f8f4d320debea5a365e452436"}]}, @generic="7163547fa054be466b45e7e8d3408cbc7dd163d17ee38111dbcc6c632138b777592080c2ebf000674a286005b03bb8737d7b020b71557f3125efa9f03931ae41428fd8a69cea67c4ec777ab8d5cd1fc0cfd226233d230ef0315baeb78e7d84b1c8bca7ea39ec70b2e9ef649abd70f4e4fa4aca461f978dcb1d9f3c5d4fc9239ce4fa236b005adcdfe15512761fb04306590c61fad4de99067983e3d80b920c072c8c2634e9d528e9faa85593b37ed5f0b4e48b211bd06f22f47b8926c67f6f64a55ac4", @generic="4b2baf5cef94d90b41543555338d5358bb6ab442da163df40411aaf75ff73b563c9bdbcf068c2aa9f12807946814361ed84f6eed7d27c58ac15fe1037e40b63bdf0337967f3507d30b7d157fb692da424472f238175501018f0e73c2a6d2078455c4f5d092c7b600d29f91f9e2f35eeba86e1d1b85ecc019391b17fce8fc66e02131f5c93ca13e4d92d77ccd6b3aa788aa056207300bcdcbd1d04e4edd73685319399fb1fb0400e10da20918546d1fb9f90d5aad245dcf8fe47812dfb12d20e8bb52f08d0819d27208a139088ecc23"]}, 0x158c}, 0x1, 0x0, 0x0, 0x20001000}, 0x2000010)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001a00)='oom_score\x00')
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001a80)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_SET(r8, &(0x7f0000001d80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x80008}, 0xc, &(0x7f0000001d40)={&(0x7f0000001ac0)={0x280, r9, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb0d5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3f}]}, @TIPC_NLA_LINK={0x5c, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x449d}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_BEARER={0xb4, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffb}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff3aba}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}]}]}, 0x280}, 0x1, 0x0, 0x0, 0x24000041}, 0x4000)
rt_sigprocmask(0x2, &(0x7f0000001dc0), &(0x7f0000001e00), 0x8)
ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000001e40)=0x7fffffff)
r10 = inotify_init1(0x0)
fcntl$setlease(r10, 0x400, 0x3)
r11 = syz_open_procfs(0x0, &(0x7f0000001e80)='attr/sockcreate\x00')
r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000001f00)='nbd\x00')
sendmsg$NBD_CMD_RECONFIGURE(r11, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x10800}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x2c, r12, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20000021)
r13 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000020c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
fsync(r13)
r14 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000002100)='/selinux/policy\x00', 0x0, 0x0)
read(r14, &(0x7f0000002140)=""/4096, 0x1000)
pipe(&(0x7f0000003140)={0xffffffffffffffff, <r15=>0xffffffffffffffff})
fremovexattr(r15, &(0x7f0000003180)=@random={'user.', 'nbd\x00'})
r16 = syz_genetlink_get_family_id$tipc(&(0x7f0000003200)='TIPC\x00')
sendmsg$TIPC_CMD_SET_NODE_ADDR(r15, &(0x7f00000032c0)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8080000}, 0xc, &(0x7f0000003280)={&(0x7f0000003240)={0x24, r16, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x7fffffff}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x28000}, 0x10)

12:52:01 executing program 5:
clone(0x40507fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = dup2(r2, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {}, {0x10}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, &(0x7f00000001c0)}})
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="dfd2cd80"], 0x4}}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r4, 0x4, 0x6100)
ftruncate(r4, 0x108200)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
accept4(r5, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x80, 0x800)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="eabe9f303b222957eecbce24877c82838273804212b18d7c4ca85e87a64820546a1e9ed56adb1b30410bd88518f20851587978e30359f8cf068dc3cbc3d5013ed6063b91e7f1ffd7e4ab56ad8e3980900b61a0bf7a301ffe8db02ab2156da58a5d1a000000000000000000005dae3ae984ad0f24a256c61c2578", @ANYBLOB="e6c55c3df4e86601000000010000009b2861343d72748d52864e01000000002ee70a67757310554a9ca66864f7f1c8c72be40825f38b6c78f0bebc3176300000000400000000000000bc31810c25a2fc4d1153e55bc2fdfd711337bf1a3014f87159f469c30ae6b94f07fefb66764d49d14ae837f703000000acb50755821f9e16dfd1338029707d454eaa67f3817296f8d873fac1aa073d84803f64ca1aadc41265c7ea6a2c28cc883a83a9e8f56309733a60a6a34f5869e70930be77ff38878b3920b9268f3106095fefea61f09c721a983f052d8df3816f3155469a4a06157c6582d037707203bd3d"], 0x0, 0x164}, 0x20)
tkill(r0, 0x3b)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)=<r6=>0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2040}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=@expire={0xf8, 0x18, 0x8, 0x7d2, 0x25dfdbfc, {{{@in=@local, @in6=@mcast2, 0x4e23, 0x2, 0x4e24, 0x67, 0x2, 0x0, 0x0, 0x5e, 0x0, r6}, {@in6=@dev={0xfe, 0x80, [], 0xd}, 0x4d5, 0x2b}, @in=@empty, {0x7f, 0x3032, 0x4, 0x6, 0x8, 0xffffffffffffff7f, 0x54, 0x215ea7db}, {0x5, 0xfff, 0x100000001, 0x2}, {0x2, 0x6b0, 0xffff}, 0x70bd2a, 0x3504, 0x2, 0x4, 0x4, 0x22}, 0x9}}, 0xf8}, 0x1, 0x0, 0x0, 0x8002}, 0x8)
ptrace$cont(0x7, r0, 0x0, 0x0)

12:52:01 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
write$binfmt_elf64(r1, &(0x7f0000000700)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x4}, [], "", [[], [], [], [], [], []]}, 0x640)

12:52:01 executing program 0:
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000100)={<r3=>0xffffffffffffffff})
write$cgroup_int(r3, &(0x7f0000000180)=0x3, 0xffffffffffffff31)
ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000380))
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
ioctl$KDSIGACCEPT(r4, 0x4b4e, 0x2)
write$P9_RMKNOD(r3, &(0x7f0000000040)={0x14, 0x13, 0x0, {0x0, 0x2}}, 0xfd95)
ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f00000000c0))
splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff})
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES64, @ANYPTR64, @ANYRES64=0x0, @ANYRESDEC=r5]]], 0x8)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001100090468fe0700000000000700ff3f03000000450001070000001419001a000400021007", 0x29}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

12:52:01 executing program 3:
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0)
openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)
fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000000)={0x0, 0x0, 0x6})
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000000)={0x19e6})
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8012, r2, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000080)={'broute\x00'}, &(0x7f0000000140)=0x78)
prctl$PR_GET_SECCOMP(0x15)
pipe(0x0)
write(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket(0x0, 0x3, 0x0)
clone(0x2102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0))
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4)

12:52:01 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x4)
r1 = socket$inet(0x10, 0x3, 0x0)
r2 = dup(r1)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00', {0x8, 0x401, 0x5, 0x40}, 0x35, [0x5, 0x6, 0x7, 0x10001, 0x0, 0x7, 0x4, 0x80000001, 0x4, 0x0, 0x0, 0x6abe, 0x8, 0x0, 0x6, 0x4, 0x21, 0xffffffff, 0x200, 0x219678d6, 0x0, 0x7, 0x3, 0x0, 0xfffff801, 0x80000001, 0x6, 0x355, 0xb1, 0x0, 0x5, 0x800, 0x2, 0x1ff, 0x8, 0x5, 0x49e0, 0x1, 0x8, 0xb8, 0x4, 0x8, 0x6, 0x1, 0x1, 0x4, 0x4, 0x5, 0x1f, 0x9, 0x2, 0x7, 0x7fffffff, 0x7fff, 0x4, 0x0, 0x3, 0x7ff, 0x8001, 0x80000001, 0x1, 0x2, 0xc7], [0x3, 0xfff, 0x1, 0x1, 0xfffffffa, 0x7fff, 0xd35, 0x33, 0x7fff, 0x2, 0x36c5, 0x5, 0x0, 0x7, 0x10001, 0x1, 0x1ff, 0x100, 0xffffffff, 0x40, 0x100, 0x3, 0x9, 0x9, 0x3f, 0x8, 0x4, 0x80000000, 0x7fffffff, 0x8, 0x1, 0x5, 0x6, 0x81, 0xb059, 0x7, 0x6, 0x3880, 0x1a, 0x4, 0x2, 0x5, 0x6, 0x600000, 0x2, 0x9, 0x5, 0x800, 0x7ff, 0x7f, 0x20, 0x3, 0x1ff, 0x1, 0x6, 0x0, 0x0, 0x67, 0x3, 0x7, 0x0, 0x10000, 0x101, 0x5], [0x9, 0x7, 0x8, 0x1fd9, 0x7fff, 0x8, 0xc9, 0x3, 0x80000001, 0x6, 0x0, 0x7, 0x8, 0xaab, 0xa16, 0x5, 0x8, 0x2c, 0x1, 0x0, 0x5, 0x4b, 0xbc, 0x200, 0x7dc, 0x0, 0x3, 0x2000, 0x1, 0x973b, 0x8, 0x0, 0x6, 0x40, 0x2e9b843c, 0x9, 0xb58, 0x6, 0x3f, 0x8, 0x20, 0x81, 0x0, 0x1, 0x8, 0x3, 0x5, 0x101, 0x9, 0x80000001, 0x118f, 0x1, 0xf51, 0x7ff, 0x16, 0xffff8000, 0x1, 0x3, 0x3, 0x1000, 0x2dd46f37, 0x5, 0x9, 0x3], [0x3, 0x10000, 0x6, 0x20, 0x7, 0x4, 0x3, 0x9, 0x7, 0x4, 0xa7, 0x4, 0x20, 0x0, 0x2, 0x5, 0x6, 0x0, 0xfffffff9, 0x8, 0x2, 0x7, 0x0, 0x5, 0x3, 0x8, 0x81, 0x1, 0x100, 0x40, 0x7, 0x7, 0x40, 0x2, 0x6, 0x1, 0x4, 0x5, 0x4, 0x6, 0x78a43b62, 0x6, 0x1f, 0xffffff80, 0x6b65, 0x7fffffff, 0xffff0001, 0x8001, 0x5, 0x1, 0xab0, 0x3, 0x1, 0x7ff, 0x3, 0xffff0001, 0x7, 0x5, 0x29ba0e28, 0x3, 0x0, 0x986, 0x1]}, 0x45c)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
fstat(r3, &(0x7f0000000000))
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

12:52:01 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
ftruncate(r2, 0x3)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x112)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
open(&(0x7f0000000080)='./bus\x00', 0x22000, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r5)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
write(r7, &(0x7f0000000340), 0x41395527)
pipe(&(0x7f0000000100)={<r8=>0xffffffffffffffff})
write$cgroup_int(r8, &(0x7f0000000180)=0x3, 0xffffffffffffff31)
ioctl$TIOCGSID(r8, 0x5429, &(0x7f0000000380))
write$P9_RMKNOD(r8, &(0x7f0000000040)={0x14, 0x13, 0x0, {0x0, 0x2}}, 0xfd95)
pipe(&(0x7f0000000100)={<r9=>0xffffffffffffffff})
write$cgroup_int(r9, &(0x7f0000000180)=0x3, 0xffffffffffffff31)
ioctl$TIOCGSID(r9, 0x5429, &(0x7f0000000380))
write$P9_RMKNOD(r9, &(0x7f0000000040)={0x14, 0x13, 0x0, {0x0, 0x2}}, 0xfd95)
ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000580)=""/240)
bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r6, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c)
ioctl$sock_SIOCSPGRP(r6, 0x8902, &(0x7f0000000100)=0xffffffffffffffff)
sendto$packet(r6, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0)
close(r6)

12:52:01 executing program 5:
ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000000)={0x66b4, 0x8, 0x0, [{0xb4, 0x1000, 0xfff, 0xb5, 0x7, 0x29, 0x2}, {0x80, 0xffffffff, 0x9, 0x5, 0x3, 0xff, 0x5}, {0x401, 0x2, 0x8000, 0x20, 0x5, 0x9, 0x4}, {0xefde, 0x4, 0x3, 0xaa, 0x6, 0x9, 0x3}, {0x5, 0x7ff, 0x20, 0x0, 0x7f, 0x7, 0x9d}, {0x1, 0x0, 0x6b, 0xf7, 0x3, 0x7f, 0x3f}, {0x80000000, 0x2, 0xbc1, 0x80, 0x2, 0x5}, {0x1ab, 0x4, 0x8, 0x9, 0x81, 0xc0, 0x2}]})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000240)="4c26389842ea692b65c7259f06df504a9d3b38b4a2dbbf8a1dd5981dd81b677fb308e455e67655d3d4ba0f47e99568c38e02bab5a63b5a1df058c707b7acc42f583e94b88bb21b1c264fda6cc63eea4568fb9e8ab15bd7bbe2ed130ca6873a951e4a8e260188e9b0f8a2efdbf9649671b394b356aa481e2b5033552148a469bbe6751e3979a92aba35eb5243e48f5999e562f4e4db7513561d3daade2ab5fc30a72242ea5e1438849809ba1952434786c9685c92f89ed9a9170664476faee13ba44f2fa0c9", 0xc5}, 0x68)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f00000003c0)={0x3f, 0x67, 0x8, 0x0, 0x2})
r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xa18dbbbea372dde4)
ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000400)=""/227)
pipe2(&(0x7f0000000500)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x84800)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x26cd, 0x2, 0x12, 0x8, "eac4acdb440e89ded3a90b9940e36600f7a52f81296055c0a08358fc15d66b2d0411db79c050cd41f59f661e6bea7efc9794b63a0a0fee45acb25d8b8ef214aa", "8d3dc2eeb6a8bfab84d34d708ab868b12b48a428447fdef26307a75ee4a770c0", [0x1f, 0xffffffff]})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000600)={0x0, <r3=>0x0}, &(0x7f0000000640)=0xc)
setreuid(r3, 0xee01)
setsockopt$inet6_opts(r1, 0x29, 0xdffc312e71037681, &(0x7f0000000680)=@srh={0x2e, 0x2, 0x4, 0x1, 0x8, 0x0, 0x2, [@mcast1]}, 0x18)
r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000006c0)='/selinux/status\x00', 0x0, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000700)=<r5=>0x0)
fcntl$setownex(r4, 0xf, &(0x7f0000000740)={0x0, r5})
r6 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000780)='/dev/keychord\x00', 0x2, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r6, 0x4)
write$P9_RXATTRWALK(r6, &(0x7f00000007c0)={0xf, 0x1f, 0x2, 0xd9}, 0xf)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000900)={r4, &(0x7f0000000800)="153e8bbbf6198543bf21b16c9dc7b5e8525707099d79227902556eb3ef197c57315a7874be95647bc209995bf415b37ecaa795c948a4234e6fad176e3c4141e6efd32145e9045aa49f21d8561fd30fa22cc661133111937248fa213386f1484c0ad84c108239868d0316c61286a18310abdff0440d4aa19b60ea96c28de79f2b12d36bc15e08692716d425c56ae3946bcb6e0eaf3a8c83023340e8e8fd954f5cf7f8acd1870bace2e1abcf59837d21438ca4548cc2ff262c5fc0f592f2c11f75a4e4b21d"}, 0x20)
r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000940)={{0x7, 0x8, 0x32da, 0x3}, 'syz1\x00', 0x43})
write$P9_RWALK(0xffffffffffffffff, &(0x7f00000009c0)={0x23, 0x6f, 0x2, {0x2, [{0x0, 0x2, 0x5}, {0x0, 0x3, 0x5}]}}, 0x23)
r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000a00)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
write$uinput_user_dev(r8, &(0x7f0000000a40)={'syz1\x00', {0x1f, 0x1, 0x6, 0x3}, 0x32, [0x0, 0x40, 0x1000, 0x6, 0x26a9d1f9, 0xfffff001, 0x5, 0x2, 0xffffffff, 0x6, 0x80, 0x1, 0x3, 0xfffffff9, 0xffff, 0x7ff, 0x5, 0x3, 0x7, 0x6b0, 0x6, 0x7, 0x5, 0x8, 0x8001, 0x9, 0x15, 0x6, 0x2, 0x6, 0x3, 0x3ff, 0x800, 0x2, 0x6, 0x7, 0xffffcf74, 0x69, 0x2, 0x9, 0x9, 0x1, 0x1f, 0x1, 0xf002, 0x1, 0x1, 0x7fffffff, 0x9, 0x80, 0x9, 0x6, 0x8, 0xfffffffb, 0x4, 0x20, 0x8, 0x4, 0x81, 0x82, 0x81, 0x2, 0x3a, 0x4c468e45], [0x3, 0x7, 0x5, 0x9, 0x4, 0x2, 0x9, 0x7ff, 0x1, 0x200, 0x8, 0x28ae9806, 0x3, 0x0, 0x8, 0x8001, 0x9, 0x1000, 0x5d, 0x3f, 0x9, 0xffff069a, 0xfff, 0x2, 0x7ff, 0x1, 0x1, 0x6, 0x0, 0x2, 0xd89, 0x7, 0x0, 0x9, 0x4, 0x2, 0x1, 0x5, 0x6, 0x2, 0x80000001, 0x6, 0x40, 0x3, 0x8000, 0x1, 0x101, 0x1000, 0xc2, 0x80, 0x8001, 0x400, 0x3, 0x5233, 0x0, 0x2, 0x7f, 0xffffffc1, 0x9, 0x7, 0x8, 0x2, 0xb040, 0x8], [0x6, 0x3, 0x0, 0x0, 0x3, 0x2, 0xffff, 0x0, 0x0, 0x8, 0x4, 0x5, 0x7, 0x6, 0x9, 0x5, 0xff, 0x2, 0x7, 0xfffffffa, 0x80, 0xc98, 0x9, 0x4, 0xffffffc1, 0x1ff, 0x1, 0x55b, 0x7fffffff, 0x5, 0x8, 0x80000001, 0x0, 0x1, 0x8, 0x0, 0x15d, 0x1ff000, 0x97, 0x60, 0x0, 0x5, 0xfffffffa, 0xff, 0x60, 0x4, 0xfff, 0x0, 0x0, 0x4, 0x5, 0x8d47, 0x7, 0x40, 0x80000000, 0x8000, 0x779b, 0x1000, 0x6, 0x8, 0xa2f9, 0x7, 0x5, 0x80000001], [0x401, 0x8, 0x6, 0x8, 0x5, 0xfffff801, 0x80000001, 0x3f, 0x81ad, 0x7, 0x1, 0x559, 0x4, 0x5, 0x1, 0x6, 0x2, 0x8, 0xe4f, 0x7fffffff, 0x4, 0x3f, 0x5, 0xdd9, 0x5, 0xffffffff, 0x3, 0x3, 0x401, 0x8, 0x8, 0x6805, 0x9, 0x4, 0x1f, 0x8, 0xff, 0x4, 0x5, 0x9, 0x552370f2, 0x6, 0x9, 0xffffffff, 0xfff, 0x6, 0x0, 0x3, 0x7fffffff, 0x81, 0x8c41, 0x3ff, 0xfffffff6, 0x100, 0x1, 0x101, 0x1000, 0x4bb7, 0x1f, 0x2, 0xfffffffe, 0x0, 0x3, 0x401]}, 0x45c)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000ec0)={0x3ff, 0x14, 0x1, <r9=>0xffffffffffffffff})
fcntl$F_SET_RW_HINT(r9, 0x40c, &(0x7f0000000f00)=0x5)
chmod(&(0x7f0000000f40)='./file0\x00', 0x10)
r10 = syz_open_dev$loop(&(0x7f0000000f80)='/dev/loop#\x00', 0x0, 0x10040)
write(r10, &(0x7f0000000fc0)="607477ce10cd97570c25f1fc9a6a02955419ba155385c46f55563662bb0d0746a2e3ff7148e52b9a91f2acefb2c2dc7dc3ccda48869e9353065d1c879546237d50faff88ef4eb5f7ea6996a8cde08bfa36365986ab6fc52e7f8e8ce13452f12e72fa60b7746e78c903f5d7715ee455b54d45c69f3e1bfec4c58fcb056dec9cc80fe2a71f225d5a32d30bd30c3dc8275f4df27f6868949a6b71d32d90b8ff6caa6e46932edef0b9aa0e6835e41b464cecf88ccf211fa32342d35f6c597bd2d7cdebedd29d88acb7440e9a352480e7acd862883a935af3c99b2dd60b1bf71557e2dd23fa9417", 0xe5)
r11 = syz_open_dev$mice(&(0x7f00000010c0)='/dev/input/mice\x00', 0x0, 0x1)
r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001140)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r11, &(0x7f0000001300)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001180)={0x108, r12, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0xc}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x5e}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc2ab}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x15}, @IPVS_CMD_ATTR_DAEMON={0x7c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x24}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="cb07bdd91a7759b6d6dab4c978f816a8"}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x844}, 0x40)

[  209.517184] keychord: Insufficient bytes present for keycount 9
[  209.523085] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9323 comm=syz-executor.0
[  209.523172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9323 comm=syz-executor.0
[  209.523222] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9323 comm=syz-executor.0
[  209.523272] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9323 comm=syz-executor.0
[  209.523322] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9323 comm=syz-executor.0
[  209.523370] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9323 comm=syz-executor.0
[  209.523417] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9323 comm=syz-executor.0
[  209.523468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9323 comm=syz-executor.0
[  209.523520] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9323 comm=syz-executor.0
[  209.523569] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9323 comm=syz-executor.0
12:52:02 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x0, 0x0)
fgetxattr(r2, &(0x7f0000000100)=@known='security.selinux\x00', &(0x7f0000000380)=""/217, 0xd9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\b\x80\x00\x00\x00\x00*', 0x8002})
ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f00000000c0))
r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
ftruncate(r5, 0x108200)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r11}]]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x82, r11}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r11}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000480)={'syz_tun\x00', r11})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={<r12=>0xffffffffffffffff})
r13 = open(&(0x7f0000000140)='./file0\x00', 0x101001, 0x24)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000003c0)={'ip6erspan0\x00', 0x1000})
ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000000380))
r14 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_SET(r13, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xb4, r14, 0x601, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffc00}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9aa2}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4066}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x500000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0xf3917cf7932c3aaa)
ioctl$sock_ifreq(r12, 0x8922, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_map={0x1ff}})
ioctl$sock_ifreq(r3, 0x8923, &(0x7f0000000040)={'bridge0\x00', @ifru_map={0x7, 0xffffffffffff1dfc, 0x1, 0x5, 0x7}})

12:52:02 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', <r2=>0x0})
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000000)={@ipv4={[], [], @local}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21c00082, r2})
setitimer(0x0, &(0x7f00000000c0)={{0x0, 0x2710}, {0x77359400}}, &(0x7f0000000100))
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c)

[  209.833208] keychord: Insufficient bytes present for keycount 9
12:52:02 executing program 1:
r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x80000, 0x0)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
getsockopt$packet_int(r0, 0x107, 0x25, &(0x7f0000000440), &(0x7f00000004c0)=0x4)
r1 = socket(0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xfb120eb7)
ioctl$PIO_FONT(r1, 0x4b61, 0x0)
read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00')
getdents(r5, &(0x7f0000000040)=""/253, 0xfd)
r6 = syz_open_dev$mice(&(0x7f0000000980)='/dev/input/mice\x00', 0x0, 0x624000)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00')
sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000800}, 0xfe47, &(0x7f0000000300)={&(0x7f00000009c0)=ANY=[@ANYBLOB="7f00000000000700", @ANYRES16=r7], 0x2}, 0x1, 0x0, 0x0, 0x30000000}, 0x801)
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000007c0))
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4)
bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(r4, &(0x7f0000004b00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)="9033877ace25a0cd47de5752f2fe725302f5297240df794a3f9e8efd1c159b2bb4cfdc71f2cd4ccab950100494a6edc071a5b8facd4080eb02bd8342acfb2c0241fa15a8f3b27755b25c65f4ab48338111ffa1fe393a425c0ba2c13067100170698a151664c4152a8824af1cb68d98f0259494c6d057", 0x76}, {&(0x7f0000001c40)="b03e2e48783b8582415ce86a7743d604df2b69b6fd9abdd925bdfba510ca05650a2e02e055478b69776dc114eb3a27d3a3d589710f2aafda3a453fe3770255d56a43a3e27e3fe045e5bd482c81660aa0caa7625bf9dcf80569541a0019dba3b36e53f753c03a8f530a2392f87754d16e1eb02a3075ce111a9a4172cb6bebd607bfc82a8f5086ff43d355b7209f31230649fd10b930e461dfe37ed688cb8e4564ad7777e6d18872ef4e41c8d201f8dc68f6c61dc88b939b738e43fd8d86387ba54fe9a3689bbde86d7d52ffcbd30f8491a007d231212ec410337cd1b12721cf7c06f25620c7dc12752d7355fb70a53309d7f39ffa3a781b10", 0xf8}, {&(0x7f00000002c0)="f7fc370763ed7a4dbfaf549cd1dc94c047d2bfd2da573ebddcf5db435637f045346375f1b75c21a0106605fa2c283aaa0014062099dc4b58d700b3a07dbc83010c24cb730b30aee0103d81b75a4f6ce90dd0237bd4b22d66e95966a0ad75b3f8338268b29e2dd7c90b5b33722b01", 0x6e}], 0x3}}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000080)="4326b5be4c72829e48001bfdce33d9a34689f07e340cec408be4e862cc21d93ea75e6e79c33cb2966b5a3e0a60677b6dbbb84bd6946d811304b2269c4dfbf4b532", 0x41}, {&(0x7f0000000b40)="70799d7f93aecd5740609238367b30d5bd2da4a8a782f1e2bfe6e09ea5587d2488139bce0b6720aa3beec624a66fba665935593f143410e814194574d6c5caa5a0a643a77a6837f10a97664379ac508c2c604e84b914cca11d7c13c7516775c47b89811abd1b86bdc06b4c2df598cc7f7707a1c0400e52e98972dcc961b5a697d45539c7b8f018ed83ff9a7e106143298689be64290c67", 0x97}, {&(0x7f0000000f40)}], 0x3}}], 0x2, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0x1da9, 0x4)
sendto$inet(r4, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27)
setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000140)={{0x10, @dev={0xac, 0x14, 0x14, 0x2a}, 0x4e22, 0x2, 'wlc\x00', 0x4b, 0x8, 0x61}, {@rand_addr=0x40, 0x4e22, 0x2000, 0x863, 0xfffffffe, 0x8}}, 0x44)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000001)
add_key$keyring(&(0x7f0000001580)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0)

12:52:02 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = creat(&(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x5)
fcntl$setstatus(r2, 0x4, 0x44700)
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x200000000038)
ptrace$cont(0x18, r3, 0x0, 0x0)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r3, 0x0, 0x0)
ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000340)=r3)
r4 = dup(r1)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000380)={0xad, 0x100, 0x5, 0x7, 0x7, [{0xfffffffffffffffd, 0x3692, 0x800, 0x0, 0x0, 0x400}, {0x5d8d, 0x2, 0x2, 0x0, 0x0, 0x4}, {0x1f, 0x200000000, 0x1, 0x0, 0x0, 0x400}, {0x9, 0x1000, 0x9, 0x0, 0x0, 0x2a84d4300ccc286e}, {0x9, 0x800, 0x1000, 0x0, 0x0, 0x1200}, {0x1, 0xff, 0xfffffffffffffffd, 0x0, 0x0, 0x800}, {0x21c017f3, 0x6, 0x80000001, 0x0, 0x0, 0xa04}]})
write(r5, &(0x7f00000001c0), 0xfffffef3)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f00000002c0)={0x3, 0x0, [0x0, 0x0, 0x0]})
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r6 = socket(0x10, 0x2, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000080)='statm\x00')
sendfile(r6, r7, 0x0, 0x80000002)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48010000", @ANYRES16=r8, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x40000}, 0x3020)

12:52:02 executing program 2:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0xfffffffffffffd32, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x3ec)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
ftruncate(r2, 0x108200)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0x9)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x0)
r5 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
write$eventfd(r5, &(0x7f00000001c0), 0xffffff7f)
sendfile(r0, r4, 0x0, 0x8000fffffffe)

12:52:02 executing program 0:
ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0))
pipe(&(0x7f0000000540)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4)
socket$inet_udplite(0x2, 0x2, 0x88)
r3 = creat(0x0, 0x200)
r4 = dup(0xffffffffffffffff)
ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0)
ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000000240)=""/37)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@dev, @multicast1}, 0x8)
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000280)={{{@in=@initdev, @in6}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f00000003c0)=0xffffffffffffffdc)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000400)={@loopback, @broadcast}, 0xc)
r5 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xcc93a2cc92445b75)
lseek(r5, 0x0, 0x3)
ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f0000000380))
bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
ioctl(0xffffffffffffffff, 0x0, 0x0)
r6 = open(&(0x7f0000000500)='./file0\x00', 0x18000, 0x48)
getdents64(r6, &(0x7f0000000180)=""/166, 0xa6)
r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x61, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000003280))
sendto$inet(r2, 0x0, 0x47, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0)='NET_DM\x00')
write$binfmt_script(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x3d2)
setsockopt$sock_int(r2, 0x1, 0x1000000000008, &(0x7f0000000000)=0xda9, 0x4)
write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)

12:52:02 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
ftruncate(r2, 0x3)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x112)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
open(&(0x7f0000000080)='./bus\x00', 0x22000, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r5)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
write(r7, &(0x7f0000000340), 0x41395527)
pipe(&(0x7f0000000100)={<r8=>0xffffffffffffffff})
write$cgroup_int(r8, &(0x7f0000000180)=0x3, 0xffffffffffffff31)
ioctl$TIOCGSID(r8, 0x5429, &(0x7f0000000380))
write$P9_RMKNOD(r8, &(0x7f0000000040)={0x14, 0x13, 0x0, {0x0, 0x2}}, 0xfd95)
pipe(&(0x7f0000000100)={<r9=>0xffffffffffffffff})
write$cgroup_int(r9, &(0x7f0000000180)=0x3, 0xffffffffffffff31)
ioctl$TIOCGSID(r9, 0x5429, &(0x7f0000000380))
write$P9_RMKNOD(r9, &(0x7f0000000040)={0x14, 0x13, 0x0, {0x0, 0x2}}, 0xfd95)
ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000580)=""/240)
bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r6, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c)
ioctl$sock_SIOCSPGRP(r6, 0x8902, &(0x7f0000000100)=0xffffffffffffffff)
sendto$packet(r6, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0)
close(r6)

12:52:02 executing program 5:
write(0xffffffffffffffff, 0x0, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000001300"}, 0x1c)
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000300)={'security\x00', 0xe7, "82fdb5b14b58cf917aa5b5e990cedb123ec177749ef737bbdf9e78c5a626dd01e7215451da0bc8d15920cf0afc5cf8e8d656de31b4751831e3bd987709113a6bcafebe6c096869c2581a54e3b7ee99524c6889b449a5a08197bbae0be08cc07e581f3d47ca9027c9f0246812ec82719ec67a8c801da59987ada1b7064155ea60b49501ec0b92217204c158aacecacbc43e1e1589381a0f4c64ec8c4d74edb86c00b0db51c9df929adca2d9724eb01f4df6d3fb9146aa6df39e36958f920b9c3a5b0fd5bffb5d254b1a55e07eff5989c481972d519cd24b0b6e6324d07543195f775b32c0552b9e"}, &(0x7f00000000c0)=0x10b)
sendmmsg(r2, &(0x7f000000ac80), 0x36ba93379a8264a, 0x8000)
r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
ioctl$FIBMAP(r3, 0x1, &(0x7f0000000000)=0x3)

[  210.401513] binder: 9379:9385 ioctl 1 20000000 returned -22
12:52:02 executing program 1:
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$packet(0x11, 0x2, 0x300)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bind(r2, &(0x7f0000001080)=@un=@abs={0x1, 0x0, 0xfffffffc}, 0x80)
bind(r2, &(0x7f00000005c0)=@tipc=@name={0x1e, 0x2, 0x1, {{0x2, 0x3}, 0x2}}, 0x80)
write(r1, &(0x7f00000001c0), 0xfffffef3)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x80000, 0x0)
write$cgroup_int(r0, &(0x7f00000000c0)=0x7, 0x12)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
getrlimit(0x2, &(0x7f0000000240))
dup(r3)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x415}}, 0x1)
r5 = socket$inet6(0xa, 0x2, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="190000"]})
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet6_int(r5, 0x29, 0x1000000000000019, &(0x7f0000548000)=0x3ffe, 0x4)
sendto$inet6(r5, 0x0, 0xffffffffffffffad, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @rand_addr="ffd6f1b9201348544de96b337da295b8"}, 0x1c)
recvmmsg(r5, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0)
ioctl$SIOCGSTAMPNS(r5, 0x8907, &(0x7f0000000000))
r9 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r9, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1c)
recvmmsg(r9, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0)
ioctl$SIOCGSTAMPNS(r9, 0x8907, &(0x7f0000000000))

12:52:02 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x1e)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xcc93a2cc92445b75)
write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3)
read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000004c0)='./file0\x00', 0x0)
write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000340)={0x3da}, 0xfffffffffffffd27)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x3, 0xffffffffffffff31)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000400))
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000380)=<r2=>0x0)
fcntl$lock(r0, 0x6, &(0x7f00000003c0)={0x0, 0x3, 0x80000000, 0x2, r2})
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44700)
truncate(&(0x7f00000000c0)='./bus\x00', 0xa00)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000140))
open(&(0x7f0000000000)='./bus\x00', 0x100, 0x0)
lseek(r0, 0x1, 0x3)
mkdir(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r3 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0)
write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000440)={0x14, 0x13, 0x2, {0x1, 0x2, 0x5}}, 0x2e3)
mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
renameat2(r3, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f0000000280)='./file0\x00', 0x2)
renameat2(r3, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x1a)
fcntl$setstatus(r4, 0x4, 0x6100)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8924, &(0x7f0000000080)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8924, &(0x7f0000000080)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8924, &(0x7f0000000080)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
ftruncate(r7, 0x108200)
r8 = open(&(0x7f0000000740)='./file0\x00', 0x4000, 0x48)
sendfile(r4, r8, 0x0, 0x8000fffffffe)
sendfile(r4, r8, 0x0, 0xffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = fcntl$dupfd(r9, 0x0, r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r11)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
r13 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0)
mknodat(r13, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
renameat2(r13, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r13, &(0x7f0000000280)='./file0\x00', 0x2)
renameat2(r13, 0x0, r13, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2)
pipe(&(0x7f0000000480)={0xffffffffffffffff, <r14=>0xffffffffffffffff})
getsockopt$inet_IP_IPSEC_POLICY(r14, 0x0, 0x10, &(0x7f0000000780)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000580)=0xe8)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x6, 0xbee, 0xffff, 0x6, 0x80, r10, 0x8000, [], r15, r12, 0x2, 0x5}, 0x3c)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000500)='/proc/self\x00', 0x0, 0x0)

12:52:03 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6}]}, 0x10)
sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f0000000380)={0xa, 0x2000, 0x80, @empty}, 0x1c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_genetlink_get_family_id$tipc(0x0)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x38, r3, 0xfa50877429e2ed56, 0x70bd29, 0x25dfdbfb, {{}, 0x0, 0x4101, 0x0, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'ip6_vti0\x00'}}}}, ["", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1801404}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r3, 0x2, 0x70bd29, 0x25dfdbfd, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008040}, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000180)={0x1, 0x8}, 0x294)
close(r0)

12:52:03 executing program 3:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f0000000240)="580000001400add427323b470c458c560a06", 0x12}], 0x1)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
r5 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x8, 0x400083)
splice(r2, &(0x7f0000000040)=0x10000, r5, &(0x7f00000000c0), 0x80000001, 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

12:52:03 executing program 1:
r0 = gettid()
accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480))
sched_rr_get_interval(r0, &(0x7f0000001500))
perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400)
r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f)
fchdir(r1)
sched_rr_get_interval(r0, &(0x7f0000000040))
ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0))
r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2)
mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd)
r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800)
recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93)
socket$inet6(0xa, 0x5, 0x406)
connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14)
fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0})
clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff})
capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401})
ioctl$RTC_VL_CLR(r4, 0x7014)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x800)
getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8)
r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0)
inotify_init1(0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
ioctl$UI_END_FF_ERASE(r6, 0x400c55cb, &(0x7f0000000080)={0x1, 0x3, 0x10001})
fchmod(r2, 0x33)
ftruncate(r3, 0x401)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6)

12:52:03 executing program 1:
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="0400cd80"], 0x4}}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="ea0000008000000000cbc624877c8252c28f5e87a64820546a1ebe1f6adb3b91e7f1ffd7e4ab569f8eb9808e0b61a0bf7a301ffe8dac0773d9e5411f2b25f3fbc7cf9482c1f0d81a590ed76f2c4af37bd3d331de23d61ca62ef8d48f42ffd913acf060c10300000082fc399eaab8787f0dd1510490b0f420326bcc4e2b65e7c68bacee7877a6274d908e5a5d512b87ed3eb24d00020160d1f3f3c0da4b0638b1d331edbedf8a03a722ffa87cc2dfec4758b087c23cc9c5e726fea942494855d4", @ANYRES16=0x0, @ANYRESDEC, @ANYRESHEX=0x0, @ANYRESOCT, @ANYBLOB="e6c55c5d9eb82ee4510100010029a741efca44f937d0492482ba837296d961244e2e0c734057548c402cc43b3897cc275fd87f333c960d2bc40dd887fc8dc4872bf5b65c87e940b30eecd4f9ad03000000df", @ANYRESDEC], 0x0, 0x165}, 0x20)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x39)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x200000000038)
ptrace$cont(0x18, r3, 0x0, 0x0)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r3, 0x0, 0x0)
ptrace$cont(0x9, r3, 0x9, 0x5)
ptrace$cont(0x7, r0, 0x0, 0x0)

12:52:03 executing program 1:
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = socket$netlink(0x10, 0x3, 0x2)
connect$netlink(r3, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x254)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r4)
ioctl$TIOCLINUX3(0xffffffffffffffff, 0x541c, &(0x7f0000000000))
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)}, 0x20000010)
sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="79008da9", @ANYRES16=r5, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r6 = socket(0x0, 0x800000003, 0x0)
getsockname$packet(r6, 0x0, 0x0)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000340)={0x0, 0x1, 0x6, @broadcast}, 0xff)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xff2e)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0)
r7 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0863104000000000000000000000000000000000106308400000000000000000006340400200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000022d52c330f11ed164c68ebfaea9a919d2c73a9eb7f5d7dcd87bc175c779b9f941a236b48153f553a0043fca4199cc9dfc1a56c1e1c06976ff4193ea6d333d599bf49865cef4305c92c506f1e10123c6b412acbebbe195c843eea"], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
dup3(r7, 0xffffffffffffffff, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r8, 0x6, 0x10000000013, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
close(r8)
write$P9_RWALK(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="1022011ed46a07032e10b1e7f68d04bbc6167a46f0ac756188d458a8169a0a896e79b523189b69e7a6268359de427033cf172d075904ab279b2bea463e468482d3b4c269765f2c0035324ed32f98edc8fa6aa773b22c7c445064878324ae0b4acc91d8800e3efa732f894360cc4744f483e52bf3a8094d679416b454c1"], 0x7d)
dup3(r0, r1, 0x0)

12:52:03 executing program 4:
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000140)=0x1, 0x4)
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x80)
r1 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0)
mknodat(r1, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
renameat2(r1, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000280)='./file0\x00', 0x2)
renameat2(r1, 0x0, r1, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2)
r2 = accept4$inet(r1, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f00000000c0)=0x10, 0x800)
mmap(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x1000000, 0x10, r2, 0x470e9000)
ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x8)

[  211.060888] binder: 9422:9423 BC_INCREFS_DONE u0000000000000000 no match
[  211.068656] binder: 9422:9423 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  211.077031] binder: 9422:9423 got transaction to invalid handle
[  211.083742] binder: 9422:9423 transaction failed 29201/-22, size 0-0 line 3013
12:52:03 executing program 2:
r0 = socket(0x200000000000011, 0x3, 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip_vti0\x00', <r1=>0x0})
r2 = creat(&(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x5)
fcntl$setstatus(r2, 0x4, 0x44700)
bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x3f}, 0x14)
write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x2f03, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)
r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0)
connect$unix(r3, &(0x7f0000000140)=@abs={0x3, 0x0, 0x4e24}, 0x6e)

12:52:03 executing program 5:
r0 = eventfd2(0x87, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, <r1=>0x0})
fcntl$getown(r0, 0x9)
r2 = getpgid(r1)
r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00')
readv(0xffffffffffffffff, &(0x7f0000002340), 0x100000000000003a)
readv(r3, &(0x7f0000000580), 0x25b)
r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000004c0)='\x00\x00\x00\x00\x00\x00\x01\x01\x00\x00\x00\x80\x00', 0x0, 0x0)
r5 = socket$inet(0x2, 0x80000, 0x6)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r6, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x404, 0x0, @loopback}, 0xffffff97, 0x0, 0x0, 0x0, 0xfffffec0}}], 0x400000000000037, 0x40008)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0xffffffe, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}, 0x6}, 0x1c, 0x0}}], 0x1, 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0x400, 0x0)
r8 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r8, &(0x7f0000002ac0), 0x0, 0x0)
syncfs(0xffffffffffffffff)
setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000000c0)=0x80000000021, 0x4)
setsockopt$sock_int(r5, 0x1, 0x3f, &(0x7f0000000480)=0x7f, 0x4)
r9 = syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x5c001)
openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0)
clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x8, 0x4, 0x1800000000009)
r10 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0)
close(r10)
r11 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082)
r12 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0)
pwritev(r12, &(0x7f0000000440)=[{&(0x7f00000003c0)="03006f", 0x3}], 0x1, 0x81003)
ioctl$LOOP_CHANGE_FD(r11, 0x4c00, r12)
write$binfmt_elf32(r4, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], 0xd9)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x411, r10, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
fcntl$setstatus(r10, 0x4, 0x0)
pipe(&(0x7f0000000600)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
write(r14, &(0x7f00000001c0), 0x526987c9)
lstat(&(0x7f0000000040)='./bus\x00', 0x0)
openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x600e0, 0x0)
eventfd(0x8)
fstat(r9, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0})
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000980)={0xa0, 0x19, 0xfffc, {0x2002, {0x0, 0x1}, 0x8, 0x0, r15, 0x2000000000442, 0xfffd, 0x100000000, 0x9, 0x0, 0x6, 0x7fff, 0x3, 0x0, 0x915, 0xac46, 0x5, 0x5}}, 0xa0)
readv(r10, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000000a40)=""/4110, 0x100e}, {0x0}], 0x3)
read(r13, &(0x7f0000000700)=""/250, 0xffffffc9)
sendfile(r11, r12, 0x0, 0x180003)

12:52:03 executing program 4:
clone(0x4300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = getpid()
r1 = gettid()
tkill(r1, 0x14)
ptrace(0x10, r0)
waitid(0x0, 0x0, &(0x7f0000002ff9), 0x100000b, 0x0)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)

12:52:03 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="086310400000000000000000000000000000000010630840000014000000000000634040020000000000000000000000000500000000000000009dd3f80319d4f63900"/100], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
r2 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x4f, 0x10000)
sendfile(r1, r2, &(0x7f0000000080)=0x7fff, 0xfffffffffffffff7)
r3 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
getsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f00000000c0), &(0x7f0000000040)=0xfffffffffffffc81)
clone(0x20986100, 0x0, 0x0, 0x0, &(0x7f0000000100)="d353ff072d68b2e4dc14aa5fa8b3d94c22")

12:52:03 executing program 2:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
r0 = inotify_init()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r2, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x14)
r4 = socket(0x10, 0x3, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00')
r6 = accept4$inet6(r4, &(0x7f0000000000), &(0x7f0000000080)=0x1c, 0x41000)
getpeername$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000140)=0x1c)
sendfile(r4, r5, 0x0, 0x1000000000e6)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)

[  211.279813] binder: 9450:9452 BC_INCREFS_DONE u0000000000000000 no match
[  211.292021] binder: 9450:9452 BC_DEAD_BINDER_DONE 0000000000140000 not found
[  211.299416] binder: 9450:9452 got transaction to invalid handle
[  211.306557] binder: 9450:9452 transaction failed 29201/-22, size 0-0 line 3013
12:52:03 executing program 2:
prctl$PR_SET_SECUREBITS(0x1c, 0x21)
open(&(0x7f00000000c0)='./file0\x00', 0x439b81, 0x152)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
getrandom(&(0x7f0000000140)=""/207, 0xcf, 0x5)

12:52:03 executing program 2:
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000001600)={0x5, 0x8000, 0x0, 0x101, 0x9, 0x31aa})
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0xd432})
pipe(0x0)
read(0xffffffffffffffff, &(0x7f0000001680)=""/254, 0xffffffffffffff88)
pipe(0x0)
syz_open_dev$loop(0x0, 0x3, 0x51d00)
write(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f00000001c0))
ftruncate(0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', <r1=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x60, r1, 0x1, 0x0, 0x6, @random="962c85e043d8"}, 0x14)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001500)=[&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0xffff, 0xffffffffffffffff, &(0x7f0000001400)="70b5b9a4f6fe8eb1a832413ffa4254a19acfadb588c557c43e66f2610bb66a84514748c74b14dad908ff451a91b7c3ee7b420f7582559783c6a4ad20589781f812ca27e37981f8301493520b58c60e0e0e0d647acf9e7c3265236ed5ea57a85f9540ab731684ca4d1749414724a4f5d6d280b9fb8561f3b5b2d112474528817ce13bc33be43762f2c2c7d7120646785a24e50a48e54b794b7a61210ac869d67a6f89b23a7057121d3a235ef4ed1f733fe142bf2f522155c433fec1cb0d", 0xbd, 0x402}])
fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f0000001640)='security.SMACK64TRANSMUTE\x00', &(0x7f00000013c0)='TRUE', 0xfffffffffffffee3, 0x3)
setitimer(0x1, &(0x7f00000000c0)={{}, {0x0, 0x2710}}, 0x0)
pipe(&(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xfffffef3)
read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, <r4=>0x0})
r5 = syz_open_procfs(r4, &(0x7f0000000040)='smaps\x00')
r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0)
dup2(r6, r0)
sendfile(r3, r5, 0x0, 0x80000001)
r7 = socket$inet6(0xa, 0x400000000001, 0x0)
r8 = dup(r7)
setsockopt$inet6_tcp_int(r8, 0x6, 0x8, &(0x7f0000001240)=0x83, 0x4)
r9 = open(&(0x7f0000001300)='./bus/file0\x00', 0x0, 0x0)
ftruncate(r9, 0x2007fff)
r10 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ip_vs_stats\x00')
r11 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r11, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x81805)
r12 = creat(&(0x7f0000001280)='./bus\x00', 0x16)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r14, 0xffffffffffffffff, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r14, &(0x7f0000000000)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @local}, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x0, r15})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bind$packet(r13, &(0x7f00000003c0)={0x11, 0x4, r15, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r12, 0x0, 0xeaa892816481953e)
sendfile(r12, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc)
sendfile(r12, r13, &(0x7f0000000040), 0x0)
r16 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r16, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb)
connect$unix(r16, &(0x7f0000000080)=@abs, 0x6e)
bind$inet(r16, &(0x7f00000002c0)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r16, &(0x7f0000000240)={0x2, 0x4e21}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r16, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80400001}, 0x14)
shutdown(r16, 0x1)
fcntl$setstatus(r16, 0x4, 0x6100)
r17 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r17, r17, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r17, &(0x7f00000012c0)={0x11, 0x0, <r18=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r18})
bind$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, r18, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x0)
r19 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r19, 0x4, 0x0)
r20 = open(0x0, 0x0, 0x0)
r21 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r10, 0xffffffffffffffff, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r21, &(0x7f0000000000)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r22})
lseek(r19, 0x0, 0x2)
sendfile(r19, r20, 0x0, 0x0)
sendfile(r19, r20, &(0x7f0000000040), 0x8000fffffffe)
ioctl$LOOP_CLR_FD(r20, 0x4c01)
openat$zero(0xffffffffffffff9c, &(0x7f0000001200)='/dev/zero\x00', 0x400000, 0x0)
fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000600)='-{vmnet1[cpuset\'wlan0${system$\x00\xca\xa4\xce\xf0\xf2a\xc51\xc0Cl\xfep\x84\xf1\x8a\xf4\x1b\xc3~{2\x01g\x11\x80R\x80\xbb\x03\xac \xda\x817\x88\x01Y^>\x1c\xb8\xc5\xcaw\xc5\xab\xa3x\x90>\x86qW\xa8\xb7\xdb\xa1\xd6xS\xb2:\x87\x12\x03\xafV\x85\xc4\x0e~\x89\x18\x86\xd4\xd2\xc1\x00\xda\x9b.', 0x71, 0x2)
ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000780)=""/114)
syz_open_procfs(0x0, &(0x7f0000000100)='net/icmp\x00')

12:52:03 executing program 3:
socket$inet6(0xa, 0x802, 0x88)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe2(&(0x7f0000000000), 0x184000)
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff})
write$cgroup_int(r2, &(0x7f0000000180)=0x3, 0xffffffffffffff31)
ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000380))
write$P9_RMKNOD(r2, &(0x7f0000000040)={0x14, 0x13, 0x0, {0x0, 0x2}}, 0xfd95)
sendmmsg$inet6(r2, &(0x7f0000007400)=[{{&(0x7f0000003740)={0xa, 0x4e02, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f00000038c0)={0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0}}], 0x2, 0x48000)

12:52:03 executing program 5:
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write(r0, &(0x7f00000001c0), 0xfb120eb7)
ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0)
read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0xfa)
fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000003c0)='security.ima\x00', 0x0, 0x0, 0x2)
r1 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, 0x0, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000380), 0x0)
fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000140)='security.evm\x00', 0x0, 0x0, 0x2)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r2)
r3 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r4, 0x2081fc)
r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0)
r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
fcntl$setstatus(r6, 0x4, 0x40400)
write$FUSE_WRITE(r6, &(0x7f0000000080)={0xfffffffffffffd7f}, 0xfffffd46)
madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9)
fcntl$setstatus(r3, 0x4, 0x6100)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
preadv(r7, &(0x7f0000000100)=[{&(0x7f0000002480)=""/4096, 0x1000}], 0x1, 0x0)

[  211.580792] binder: 9481:9483 BC_INCREFS_DONE u0000000000000000 no match
[  211.588938] binder: 9481:9483 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  211.599894] binder: 9481:9483 got transaction to invalid handle
[  211.606150] binder: 9481:9483 transaction failed 29201/-22, size 0-0 line 3013
[  211.615410] binder: 9481:9483 ioctl 8912 400200 returned -22
12:52:03 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
ftruncate(r3, 0xfffffffffffffff8)
sendmmsg$inet6(r0, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0)

[  211.624107] binder: 9481:9483 BC_INCREFS_DONE u0000000000000000 no match
[  211.624321] binder: 9481:9486 ioctl 8912 400200 returned -22
[  211.638181] binder: 9481:9483 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  211.645808] binder: 9481:9483 got transaction to invalid handle
[  211.652116] binder: 9481:9483 transaction failed 29201/-22, size 0-0 line 3013
[  211.931031] binder: 9422:9497 BC_INCREFS_DONE u0000000000000000 no match
[  211.938147] binder: 9422:9497 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  211.945742] binder: 9422:9497 got transaction to invalid handle
[  211.952030] binder: 9422:9497 transaction failed 29201/-22, size 0-0 line 3013
12:52:04 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000540)=@generic={0x3})
read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[0xe0ffffff, 0x3], [], @local}}, 0x1c)
dup2(r2, r2)
r3 = getpid()
rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100))
ptrace(0x10, r3)
ptrace$pokeuser(0x6, r3, 0x0, 0x0)
r4 = getpid()
rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100))
ptrace(0x10, r4)
ptrace$pokeuser(0x6, r4, 0x0, 0x0)
setpgid(r3, r4)
pread64(r2, &(0x7f0000001940)=""/4096, 0x1000, 0x1200000000000000)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x10040, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180))
r6 = socket$inet6(0xa, 0x2, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
ioctl$FS_IOC_SETVERSION(r5, 0x40087602, &(0x7f0000000040)=0x80)
dup2(r6, r6)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000000301ffff808fc201000000000000101ba1ad062e9eab80cc3321f24b5548de49ba95685bbe09bcd3768d4929c15da7a0fdde107fe5dfd1fe0d579716aec342db43f69da4c089cea582ff01000000000000affbad56ffbfdc7b686055b9bb245ea4b2b57191d13df8298ff323554dcaf63454e1a5355cb88b2dd2417c5d98941c1082d3f3099a5513f4bd651edca0afb4b43bcbafb291e992d7db98f5ebdd030708870ac5d37fa5feffffffff00000000a309d2a73c7bc5f78cd3df6f2960b9277e0372710f84a983e27dfb2a6d781c93e5ebd4995597edadcbce8877eba8772175e4000000004d58a8f3c3a6cdff46be6f50c6022a64b28f0b435023152d0787cf7872ced3e6d0a4b49e343a6d9b2ad96404bfd3b88be36679b5e7277202e6600d7a091424f74c75e1720f90faa1baec410cdcda95004a9e0100000000000000393137ffab41f994e8989a4237d163850ae6aeb829f2fa5624dab179bde5b2b1a94638b997c05b1ae1750f4b4271546b1d972e00ee30325087d7f8ffffffffffffff573cb33db6c63f0329beac75f98174f392dfa0fdd7781a35f93fd317c57056d4dd2e20814ef00adba9d432b60aea8dff47a06ff58179e35978c704306bddc3a18318458bf6372631abad07bccc69e99df12b2ae8e986b774bb569418c52be04ac3f819eec4463c9fbc0f8642a7db4b79cdf2e015c6f638f049598d9fbf04beb63fa6ff942d9e959b5680c464b9b2ec833f0170338c38339aa97805069832c0edbd75a39fb376fc2971c5c1d5cf870bf34693c949d9f5de37e916d3598626108b520fadd41f2496c856046a5f4445b1674f7afb0039942eda41ce1b387f4733af8a45bc76c18d4b70a2b4dee692cd2660a50b6c34d390b5f839930fbf830b95e1cbf3361c7a57ad9eb4a2875c4bf8bbfee2528d28c9000091830c34538f0df08412716e41a91f27550547da0334365fe7af000000000000000000000000f31f5f5b6a808c85eb2783c418d2edfd7e2a48948937dd0ef026d827938d4f1367712e7a9f18ef02c63f05ae652944a7aec1c9adc2f4490cc417f16d9f381d9a4e259fbaff341b2e15efcd356b8fa29cb19702b9faddcb27dec5a6c4d3aa528426475755db946dec5df4124f6749d427e851c0fb82063e66511257b0851f6fe9a1e0dbf9d4eeb1d155f69930c97ec1c31c7964920e211efda1561fc6e8b188621ba604dec47ef062041e1628c6015caf114acef4987e5393a42b3a517b8e87dceb744ae0d6bef889dd8a5d09d3cd579b4945771e3cf1d9942a7b20df281ed0f842b12ae46a30e58ab4fd6ea7e682240d870c1a"], 0x29d}}, 0x0)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0)
recvmmsg(r7, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400})

12:52:04 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@remote}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000140)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00')
preadv(r1, &(0x7f0000000000), 0x0, 0x100000000)
r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabf08000091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="2501dd2a48cc1edc237aea40fd9c6d2f4efb36cd8d685a3c36b875b4a6accef9462cc0f852eb0bdcb69ef98a1b8ddfb2eed261d9a556c8921ce329939d279e3dbde403eff6213af49401f2cf0ff9c3aff444b0682384f15a68165d3a7e439adf22f57f7dcc148940cfba0704202a5d2f31647816f95cfd7472aafa53f1edc0266897c5bc33002167e005a05d77c4582b70ed25ca5e79d8810321768cae70ca5f727d814a7f3957868bdb2f2f76846b8ce32b08fc5b30162a228644788945461042e7fd766b2f6aa8b981a9a9ab49f703ea717ac8dc898edf57f7d3b976", 0xdd}, {&(0x7f00000000c0)="bcb07d4f11a8fa3c5fa04eb2f646661605b7ebaac63d2a9a56790f6239afd277db0645e7f2ed5e37ae7874eb783a51262782f39d30943f6ce13a576f49c1b2be44fe5bce4c11779e624b6fe406c9c1b9f5b74648", 0x54}], 0x3, 0x9)

12:52:04 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_all\x00', 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@security={'security\x00', 0xe, 0x4, 0x438, 0x0, 0x258, 0x0, 0x0, 0x0, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x4, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x108, 0x168, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x40, 0x6}}, @common=@unspec=@connlimit={0x40, 'connlimit\x00', 0x1, {[0xff, 0xff000000, 0xff, 0xffffffff], 0x100, 0x0, 0x4}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x9, [0x5, 0x5, 0x8, 0x9, 0xfffffff9, 0x81], 0x1, 0x4}, {0x8, [0xe5, 0x400, 0x6, 0x100, 0x7, 0x5], 0x81, 0x9}}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x8, 0x8, 0x1}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x20, 0x3}}}, {{@ip={@rand_addr=0x5, @multicast2, 0xffffff00, 0x7894e63d9d28c530, 'eql\x00', 'syzkaller1\x00', {0xff}, {}, 0xf4, 0x7a49f0b21d41b331, 0x1}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz1\x00', 0x6, 0x4, 0x0, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x0, 0x6, 0x80000000, 0x2cc66464, 0xbb1, 0xfffffe01], 0x1, 0x3f}, {0x9, [0x650, 0x4000, 0x7ff, 0x7, 0x3ff, 0xffffff52], 0x3, 0x1}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x498)
mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000903000)='./file0\x00', 0x0, 0x100000, 0x0)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB="3dcfd15443c60ace3fceb5f992944ad22470"], &(0x7f00000000c0)='.', 0x0, 0x3080, 0x0)
unshare(0x8000000)
mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x80800, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
preadv(r1, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)

12:52:04 executing program 1:
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6100)
ftruncate(r0, 0x108200)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8000fffffffe)
write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="29000000040100000000000000004a9c0100"], 0x29)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0)
lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x2, {0x40, {0x0, 0x1, 0x6}, 0x100010014, r4, 0x0, 0x442, 0x10000, 0x100000000, 0x9, 0x4, 0x6, 0x8, 0x4, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0)
lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
r6 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0)
fstat(r6, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x2, {0x40, {0x0, 0x1, 0x6}, 0x100010014, r5, r7, 0x442, 0x10000, 0x100000000, 0x9, 0x4, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0)
lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x2, {0x40, {0x0, 0x1, 0x6}, 0x100010014, r8, 0x0, 0x442, 0x10000, 0x100000000, 0x9, 0x4, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="020f00acbb236b575c19def568136a849d000a0000000000f851a3ac08a07c5795f2b2b55ffe1500000000000005000600000000000a00000000000000ff020000000000000000000000000001000000000000000003000500000000000252bdda37d3a3f5b534a0a1982f1d0879e526a39ab0e0cb3a533af2633172f579c0f315d1e705b03c88fa54bac999d4c187c25f52af3cb231bc3fbe053eefc969847dc6bbc2e6343a906bd44c64e47e3a750b0d4695ddf28b161674bf7748377b33b6fd0953d194a96ecdb1aa5dba9e75ebbe2b2c4fd1b77f2f0f2f008106b6186899ead037205f38387c20e165ad133baf594e814f3b61fcfdf304d7318e4073a71f7a0deb9683d13e5e9bb31cadb898a2b27d3e627d544f3b6c95f023ca"], 0x50}}, 0x0)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000140)={0x0, <r10=>0x0}, &(0x7f00000001c0)=0xc)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f0000000200)=0xe8)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x5040, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000070000,user_id=', @ANYRESDEC=r4, @ANYBLOB=',group_id=', @ANYRESDEC=r7, @ANYBLOB="2c6d61785f726561643d3078303030303030303038303030303030302c6d61785f726561643d3078303030303030303030303030303030362c616c6c6f775f6f746211b6966469fc7c756c745f7065726d697373696f6e732c7569643c", @ANYRESDEC=r8, @ANYBLOB, @ANYRESDEC=r10, @ANYBLOB=',appraise,uid=', @ANYRESDEC, @ANYBLOB="2c6f626a5f747970653d65716c000000a95b002c7569643c", @ANYRESDEC=r11, @ANYBLOB=',\x00'])
r12 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0)
mknodat(r12, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
renameat2(r12, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r12, &(0x7f0000000280)='./file0\x00', 0x2)
renameat2(r12, 0x0, r12, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2)
getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r13=>0x0}, &(0x7f0000000140)=0xc)
chown(&(0x7f0000000080)='./bus/file0\x00', r10, r13)
r14 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200)
r15 = socket$inet6(0xa, 0x80003, 0x0)
connect$inet6(r15, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)

[  212.158255] binder: 9503:9506 BC_INCREFS_DONE u0000000000000000 no match
[  212.166705] binder: 9503:9506 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  212.174722] binder: 9503:9506 got transaction to invalid handle
[  212.181952] binder: 9503:9506 transaction failed 29201/-22, size 0-0 line 3013
[  212.193519] binder: 9503:9512 BC_INCREFS_DONE u0000000000000000 no match
[  212.200951] binder: 9503:9512 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  212.214848] binder: 9503:9512 got transaction to invalid handle
[  212.221241] binder: 9503:9512 transaction failed 29201/-22, size 0-0 line 3013
[  212.311376] audit: type=1400 audit(1574513524.613:72): avc:  denied  { read } for  pid=9502 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1
12:52:06 executing program 4:
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$packet(0x11, 0x2, 0x300)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
bind(r3, &(0x7f0000001080)=@pptp={0x18, 0x2, {0x1, @empty}}, 0x80)
bind(r3, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x2, 0x2, 0x2, 0x3, {0xa, 0x4e23, 0x2, @loopback, 0x8}}}, 0x80)
write(r1, &(0x7f00000001c0), 0xfffffef3)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
write$cgroup_int(r0, &(0x7f0000000180)=0x7, 0x396)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
getrlimit(0x3, &(0x7f0000000240))
r5 = dup(r4)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000500), &(0x7f0000000540)=0x14)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="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"], 0x30e}}, 0x1)
ioctl$FS_IOC_SETFLAGS(r5, 0x40046602, &(0x7f0000000640)=0x1)
r7 = inotify_init()
lseek(r7, 0x4, 0x4)
ioctl$UI_SET_SNDBIT(r5, 0x4004556a, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x581, 0x4)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x7, @loopback}, 0x1c)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x100000031, &(0x7f0000000140)=0x8, 0xfd73)
recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe14, 0x0, 0x0, &(0x7f0000000040)=""/36, 0x24}, 0x2002)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3})
fcntl$dupfd(0xffffffffffffffff, 0x0, r8)
r9 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$TCSETSW(r9, 0x5403, &(0x7f0000000340)={0x3f, 0x0, 0x0, 0x1, 0x16, 0x1, 0x0, 0x0, 0x8000, 0xbb4, 0x2})
getsockname(r9, &(0x7f00000001c0)=@rc, &(0x7f0000000580)=0xfffffffffffffefb)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r10, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4)
r11 = socket$inet6(0xa, 0x1000000000002, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = dup2(r12, r11)
sendmsg$netlink(r13, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[@ANYPTR], 0x1}], 0x1}, 0x0)
r14 = socket$inet6(0xa, 0x1000000000002, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r15=>0xffffffffffffffff})
r16 = dup2(r15, r14)
sendmsg$netlink(r16, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[@ANYRES64=0x0], 0x1}], 0x1, &(0x7f0000000100)=ANY=[], 0x0, 0x80}, 0x0)
setsockopt$inet_tcp_int(r16, 0x6, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000380)=0x83, 0x9)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback, 0x200}, 0x1c)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10)
r17 = open(&(0x7f0000000480)='./bus\x00', 0x101042, 0x1)
ftruncate(r17, 0x2007fff)
sendfile(r5, r17, 0x0, 0x8000fffffffe)

12:52:06 executing program 0:
r0 = socket(0x200000000000011, 0x3, 0x8)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000180)=0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x6}, 0x14)
sysinfo(&(0x7f00000000c0)=""/177)
write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c4600000000032f0000000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000fdff00000000000005000000000000000000000000000000000000000000002b00000000000000000000000000000000000000000000000004000000"], 0x78)

12:52:06 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000000)={0x18, 0x0, 0x15, 0x17, 0x1, 0x5, 0x6, 0x7d, 0xffffffffffffffff})
writev(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(0x0)
sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000000d01010200000000"], 0x14}}, 0x0)
write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r2, 0x0, r4, 0x0, 0x80000000, 0x0)

12:52:06 executing program 1:
r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x7d)
r1 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0)
mknodat(r1, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
renameat2(r1, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000280)='./file0\x00', 0x2)
renameat2(r1, 0x0, r1, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x1, 0x10, "68ff421c734e4181ae4f45b483bc7df0b6131b5f0eea8dd8dbc7fccc568f4ef3b1ee6b1eb29ce0658d5f40a2e750d77e5f3dd10226868b1bb7cae681b562f7ba", "11f754bc985348048f4ec1f63bdda259282fe46eeede16ff731dd0d7056444bc", [0x5, 0x7ff]})
r2 = request_key(&(0x7f0000000040)='id_resolver\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000380)='/dev/loop#\x00', 0xfffffffffffffffc)
keyctl$dh_compute(0x17, &(0x7f00000003c0)={0x0, 0x0, r2}, &(0x7f0000000400)=""/48, 0x30, &(0x7f0000000480)={0x0})
r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000580)="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", 0x1000, r2)
keyctl$revoke(0x3, r3)
mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1, 0x2000000000071, r0, 0x0)
ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000))

12:52:06 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000100)='net/icmp\x00')
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0xd432})
pipe(0x0)
write(0xffffffffffffffff, &(0x7f0000000300)="0b7263fb6bed2789cc8f02884e09dedfef6ee9b10e87731c2bde26ae671fd38adf17305f7dcbd26db3ec45ed4f34338c32aafb34429d19a3453f242e53b8cfff28466195e6c7ea309665e1fce7175c259254cd956daa00a349d1a2bb4766e42663f204273e779600310b72392e428eb86f4efad0ecaa4aa7e1f970c33140114484e243d48c629359e3e0b2c0e6789c06bbd16f891eec387b394d0b493309a2aab664b781e762bba84208dc34128e9f95adc08c04df2037480e", 0xb9)
setitimer(0x1, &(0x7f00000000c0)={{}, {0x0, 0x2710}}, 0x0)
pipe(&(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
read(r1, &(0x7f0000000200)=""/250, 0x50c7e5e2)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x21, 0x0)
writev(r3, &(0x7f00000023c0), 0x1000000000000252)
fsetxattr$trusted_overlay_upper(r3, &(0x7f00000004c0)='trusted.overlay.upper\x00', &(0x7f0000000580)={0x0, 0xfb, 0xd1, 0x4, 0x3, "2b82cfc77e2ab55742bf8cd70fb5b1e7", "d39fb4bb150bf9e126c82b4490d776c8a00afb429b17504b7444cee6ebaab8c4e865facac83aceb99b71faea4404a3fd8a15823bee331ba6a3d076a48ee30cbccb39b1d0f0191095f2f341ba27342b5b92374abe05fa6935f88380589dd8e366991acd775368fc3315ed7a1c913d9f93c8ee560306bfef4bcfe886bd66d7114a31bb6023fc388a94503b71d543ade57ff573b8f4d22c0cacc2b3105c60a89d51b47278e6aa67874d7c706c1a0b5fbb4c6db929bce00da17318623c4b"}, 0xd1, 0x2)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r6}]]}}}]}, 0x38}}, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0xfffffcbc}])
getsockname(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0)
getitimer(0x2, &(0x7f0000000080))
writev(r7, &(0x7f00000023c0), 0x1000000000000252)
fchdir(r7)

12:52:06 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
dup2(r3, r3)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r4, 0x4, 0x6100)
ftruncate(r4, 0x108200)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0xdc)
mknodat(r6, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
pipe(&(0x7f0000000240))
r7 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0)
mknodat(r7, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
r8 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/mls\x00', 0x0, 0x0)
renameat2(r8, &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r7, &(0x7f00000003c0)='./file1\x00', 0xd)
renameat2(r7, 0x0, r7, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2)
r9 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0)
mknodat(r9, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
renameat2(r9, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r9, &(0x7f0000000280)='./file0\x00', 0x2)
renameat2(r9, 0x0, r9, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2)
renameat2(r5, &(0x7f0000000440)='./file0\x00', r9, &(0x7f0000000480)='./bus\x00', 0x1)
renameat2(r6, 0x0, r6, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2)
r10 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0)
mknodat(r10, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
renameat2(r10, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r10, &(0x7f0000000280)='./file0\x00', 0x2)
renameat2(r10, 0x0, r10, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2)
perf_event_open$cgroup(&(0x7f00000000c0)={0x5, 0x70, 0x5, 0x7, 0x2, 0x20, 0x0, 0x400, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x141, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x2231d, 0x106, 0x8, 0x2, 0x5, 0x1, 0x714}, r6, 0x2, r10, 0x2)
r11 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x208602, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
splice(r0, 0x0, r2, 0x0, 0x10005, 0x0)
ioctl$RTC_PIE_ON(r0, 0x7005)

12:52:06 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
r4 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)="e1d9f1405fd3bad930ed8933f4ac53c2526ae2ae9b31534b76cbfca868786a4b50d566e4724f0d0ac1a3ac0d782c43b67fecc382d78e14860310e1fac41d313336043fcf0ef641fdfbc858a0cbddc1c91281e90fc0dd8303f53cc9a9d6a87494e7fa65bea04c5c56ed0fed03508d9ac78a5da03826ac3c7c2d3c1f364254f991adc4f60540206af80bffe2f91a58a88233bf514cee8ae90e72eee6bb9005cfc1db934cc71aa33340abf9fc58f44ee2c78800894522baca7ce44e04b70846accb5f831830bd492704b63e3cf2a4c7228f4b4850923e2a61222758edcda1b78c49455b95dca69df31bce5e3e784addda3efc", 0xf1, 0xffffffffffffffff)
r5 = request_key(&(0x7f0000000040)='id_resolver\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000380)='/dev/loop#\x00', 0xfffffffffffffffc)
keyctl$dh_compute(0x17, &(0x7f00000003c0)={0x0, 0x0, r5}, &(0x7f0000000400)=""/48, 0x30, &(0x7f0000000480)={0x0})
keyctl$unlink(0x9, r4, r5)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812})
io_setup(0x20000000002, &(0x7f0000000240))
io_setup(0x20, &(0x7f0000000140))
io_setup(0x3, &(0x7f00000000c0)=<r6=>0x0)
io_getevents(r6, 0x2, 0x2, &(0x7f0000d83f60)=[{}, {}], 0x0)
r7 = memfd_create(&(0x7f00000004c0)='\x00', 0xa)
io_submit(r6, 0xd8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0}])
io_destroy(r6)
io_submit(r6, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f00000001c0)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}])
dup3(r2, r3, 0x0)
ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1})
socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
r10 = dup3(r8, r9, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])

12:52:06 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x5)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
close(r0)
r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000040)={0x6, 0x0, 0xfffffe00, 0x1000, 0x59})

[  214.334564] binder: 9549:9551 BC_INCREFS_DONE u0000000000000000 no match
[  214.342300] binder: 9549:9551 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  214.369065] binder: 9549:9551 got transaction to invalid handle
12:52:06 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0x7}, 0x1c)
r1 = dup2(r0, 0xffffffffffffffff)
connect$inet6(r1, &(0x7f0000000340)={0xa, 0x4e24, 0xfffffffb, @loopback, 0x659}, 0x1c)
setsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000240), 0x8)
listen(r0, 0x80)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet(0x2, 0xdbf7797fc0ef3556, 0x7c)
r4 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
r5 = fcntl$dupfd(r4, 0x0, r3)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x20000, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x28af62c25667baf1, &(0x7f0000000280)=0x10000, 0x4)
r7 = socket$inet6(0xa, 0x2, 0x88)
bind$inet6(r7, &(0x7f0000000340)={0xa, 0x14e24}, 0x1c)
connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0)
sendfile(r7, r5, 0x0, 0x100)
flistxattr(r2, &(0x7f0000000180)=""/114, 0x331c1bb82241ea86)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r8, 0x0, 0x0, 0x20000004, &(0x7f00000002c0)={0xa, 0x4e22}, 0x1c)
setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080), 0x4)
getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000640)={'icmp6\x00'}, &(0x7f0000000680)=0x1e)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
write(r8, &(0x7f0000000340), 0xffffffec)
recvfrom$inet6(r8, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000000)={'lo\x00'})
r10 = socket$inet6(0xa, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f00000004c0)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff})
r11 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r11, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

[  214.391954] binder: 9549:9551 transaction failed 29201/-22, size 0-0 line 3013
[  214.393141] binder: 9549:9555 ioctl 801c581f 20000040 returned -22
[  214.448421] binder: 9557:9558 BC_INCREFS_DONE u0000000000000000 no match
[  214.454446] binder: 9549:9559 BC_INCREFS_DONE u0000000000000000 no match
[  214.454455] binder: 9549:9559 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  214.454466] binder: 9549:9559 got transaction to invalid handle
[  214.454475] binder: 9549:9559 transaction failed 29201/-22, size 0-0 line 3013
[  214.546268] binder: 9557:9558 BC_DEAD_BINDER_DONE 0000000000000000 not found
12:52:06 executing program 3:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0)='TIPCv2\x00')
sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000140)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4002}, 0xc, &(0x7f0000000a80)={&(0x7f0000000600)={0x168, r2, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_LINK={0xa0, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_LINK={0x80, 0x4, [@TIPC_NLA_LINK_PROP, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x22}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5430}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x343}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x0, 0x7, [@TIPC_NLA_PROP_MTU={0x0, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x0, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x0, 0x3, 0x788}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0x9}]}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5004000d}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x800, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000080)
setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x18)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c)

[  214.565015] binder: 9557:9558 got transaction to invalid handle
[  214.579087] binder: 9557:9558 transaction failed 29201/-22, size 0-0 line 3013
12:52:06 executing program 3:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
pipe(0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
ftruncate(r1, 0x108200)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000180), &(0x7f0000000200)=0xc)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0)
setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000040), 0x0)
close(r0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x4fff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$TUNSETVNETLE(r5, 0x400454dc, &(0x7f0000000140))
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba0009008d2633568e00000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0)
pipe(0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r7 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
ftruncate(r7, 0x2007fff)
pipe(&(0x7f0000000340)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
pipe(&(0x7f0000000300)={<r10=>0xffffffffffffffff})
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setpipe(r4, 0x407, 0x0)
splice(r10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
write(r9, &(0x7f00000001c0), 0xfffffef3)
read(r8, &(0x7f0000000b80)=""/270, 0xb37af43)
sendfile(r0, r6, &(0x7f0000d83ff8), 0x8000fffffffe)
dup(0xffffffffffffffff)

12:52:06 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
memfd_create(0x0, 0x0)
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x37)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x10, 0xffffffffffffffff})
r1 = gettid()
ptrace$setregs(0x9, r1, 0xffff, &(0x7f0000000140)="eb66cd49c814de082ebeddb690090000002ab375f1aa6ef63b05ee03a40e4a5b39dc72a0ddb5987f9162c125234046bb9396601236e220f5fb1e5ba47c25599554bf83903b")
ptrace$cont(0x9, r0, 0x0, 0x0)

[  214.691537] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  214.713301] binder: 9571:9573 BC_INCREFS_DONE u0000000000000000 no match
[  214.720191] binder: 9571:9573 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  214.728170] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  214.733016] binder: 9571:9573 got transaction to invalid handle
[  214.733026] binder: 9571:9573 transaction failed 29201/-22, size 0-0 line 3013
[  214.749132] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  215.056730] binder: 9571:9573 BC_INCREFS_DONE u0000000000000000 no match
[  215.063802] binder: 9571:9573 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  215.070986] binder: 9571:9573 got transaction to invalid handle
[  215.077082] binder: 9571:9573 transaction failed 29201/-22, size 0-0 line 3013
12:52:07 executing program 4:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0), 0x4)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
write(0xffffffffffffffff, &(0x7f0000000340)="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", 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x24082, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r6, 0x40806685, &(0x7f0000000240)={0x1, 0x2, 0x1000, 0x93, &(0x7f0000000100)="4335c1954606e01356b23e97cd3bedec54aa0369c7174ced933aa1276442c57da91eb76acf90aca20fe040b3cc83eabbd9da88a4b5a1a7271d5b7f811be77dd51de3860355eab9c654e442adb68a2fe0a9f004515a1741f88102d48acb8d676467ce83c0b156d7a888e3203ee2b8d070c139bac75285b5904572d5f5829a37c2e6eb5af714da53da391176e6e9b433a4971c53", 0x51, 0x0, &(0x7f00000001c0)="58a8b7616a99e3b6411e319e6ec4092dc5f87182b450e81cdf7d23f1923a8afcec7e383d9586ee94d3a88643a9cd8de374228806353fe5df79b2717b59e68184ecd7dd8c746ff0c5334fce3fc2ba7f222c"})
bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
splice(r0, 0x0, r3, 0x0, 0x30005, 0x0)

12:52:07 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c)
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000000)=0x2)
r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00')
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r8}]]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x82, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x0)
r12 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r13}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r13}]]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x82, r13}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r13}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0)
r14 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r14, 0x4, 0x6100)
ftruncate(r14, 0x108200)
r15 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r14, r15, 0x0, 0x8000fffffffe)
accept$packet(r14, &(0x7f0000000200)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14)
accept$packet(0xffffffffffffffff, &(0x7f00000019c0)={0x11, 0x0, <r17=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001a00)=0x14)
r18 = socket$nl_route(0x10, 0x3, 0x0)
r19 = socket$nl_route(0x10, 0x3, 0x0)
r20 = socket$netlink(0x10, 0x3, 0x0)
r21 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r22}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r22}]]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r19, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x82, r22}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0)
sendmsg$nl_route(r18, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r22}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000001a40)={0x11, 0x0, <r23=>0x0}, &(0x7f0000001a80)=0x14)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000001ac0)={@rand_addr, @local, <r24=>0x0}, &(0x7f0000001b00)=0xc)
r25 = socket$nl_route(0x10, 0x3, 0x0)
r26 = socket$nl_route(0x10, 0x3, 0x0)
r27 = socket$netlink(0x10, 0x3, 0x0)
r28 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r28, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r28, &(0x7f0000000100)={0x11, 0x0, <r29=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r27, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000100005070000290789d563a25d5080b400"/30, @ANYRES32=r29, @ANYBLOB="00000000000000001800120008000100767469000c00020008000100", @ANYRES32=r29], 0x38}}, 0x0)
sendmsg$nl_route(r26, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x82, r29}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0)
sendmsg$nl_route(r25, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r29}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0)
r30 = socket$nl_route(0x10, 0x3, 0x0)
r31 = socket$nl_route(0x10, 0x3, 0x0)
r32 = socket$netlink(0x10, 0x3, 0x0)
r33 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r33, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r33, &(0x7f0000000100)={0x11, 0x0, <r34=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r32, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r34}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r34}]]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r31, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x82, r34}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0)
sendmsg$nl_route(r30, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r34}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0)
clock_gettime(0x0, &(0x7f00000036c0)={<r35=>0x0, <r36=>0x0})
recvmmsg(r1, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000001b40), 0x0, &(0x7f0000001b80)=""/198, 0xc6}, 0xfff}, {{&(0x7f0000001c80)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001d00)=""/94, 0x5e}, {&(0x7f0000001d80)=""/115, 0x73}, {&(0x7f0000001e00)=""/102, 0x66}, {&(0x7f0000001e80)=""/237, 0xed}, {&(0x7f0000001f80)=""/183, 0xb7}, {&(0x7f0000002040)=""/96, 0x60}], 0x6, &(0x7f0000002140)=""/61, 0x3d}, 0x3}, {{&(0x7f0000002180)=@nl=@proc, 0x80, &(0x7f0000002480)=[{&(0x7f0000002200)=""/65, 0x41}, {&(0x7f0000002280)=""/53, 0x35}, {&(0x7f00000022c0)=""/232, 0xe8}, {&(0x7f00000023c0)=""/138, 0x8a}], 0x4, &(0x7f00000024c0)=""/4096, 0x1000}, 0x9}, {{&(0x7f00000034c0)=@ll={0x11, 0x0, <r37=>0x0}, 0x80, &(0x7f0000003580)=[{&(0x7f0000003540)=""/15, 0xf}], 0x1}, 0xfff}], 0x4, 0x40, &(0x7f0000003700)={r35, r36+10000000})
r38 = socket$nl_route(0x10, 0x3, 0x0)
r39 = socket$nl_route(0x10, 0x3, 0x0)
r40 = socket$netlink(0x10, 0x3, 0x0)
r41 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r41, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r41, &(0x7f0000000100)={0x11, 0x0, <r42=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r40, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r42, @ANYBLOB="7e894f0000000000000000180011ffee000100767469000c00020008000100", @ANYRES32=r42], 0x38}}, 0x0)
sendmsg$nl_route(r39, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x82, r42}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0)
sendmsg$nl_route(r38, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r42}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000003740)={{{@in=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r43=>0x0}}, {{@in6=@loopback}, 0x0, @in=@empty}}, &(0x7f0000003840)=0xe8)
r44 = socket$nl_route(0x10, 0x3, 0x0)
r45 = socket$nl_route(0x10, 0x3, 0x0)
r46 = socket$netlink(0x10, 0x3, 0x0)
r47 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r47, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r47, &(0x7f0000000100)={0x11, 0x0, <r48=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r46, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r48}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r48}]]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r45, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x82, r48}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0)
sendmsg$nl_route(r44, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r48}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000003880)={'sit0\x00', <r49=>0x0})
getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000038c0)={@remote, <r50=>0x0}, &(0x7f0000003900)=0x14)
r51 = creat(&(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x5)
fcntl$setstatus(r51, 0x4, 0x44700)
getsockname$packet(r51, &(0x7f0000003a00)={0x11, 0x0, <r52=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003a40)=0x14)
r53 = socket$nl_route(0x10, 0x3, 0x0)
r54 = socket$nl_route(0x10, 0x3, 0x0)
r55 = socket$netlink(0x10, 0x3, 0x0)
r56 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r56, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r56, &(0x7f0000000100)={0x11, 0x0, <r57=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r55, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r57}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r57}]]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r54, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x82, r57}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0)
sendmsg$nl_route(r53, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r57}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0)
getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000003ac0)={@multicast2, @multicast2, <r58=>0x0}, &(0x7f0000003b00)=0xc)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r59=>0xffffffffffffffff})
write(r59, &(0x7f00000001c0), 0xfffffef3)
r60 = socket$nl_route(0x10, 0x3, 0x0)
r61 = socket$nl_route(0x10, 0x3, 0x0)
r62 = socket$netlink(0x10, 0x3, 0x0)
r63 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r63, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r63, &(0x7f0000000100)={0x11, 0x0, <r64=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r62, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r64}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r64}]]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r61, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x82, r64}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0)
sendmsg$nl_route(r60, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r64}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r59, 0x8933, &(0x7f0000003c00)={'team0\x00', <r65=>r64})
getpeername$packet(r1, &(0x7f0000003d00)={0x11, 0x0, <r66=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000003d40)=0x14)
r67 = socket$nl_route(0x10, 0x3, 0x0)
r68 = socket$nl_route(0x10, 0x3, 0x0)
r69 = socket$netlink(0x10, 0x3, 0x0)
r70 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r70, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r70, &(0x7f0000000100)={0x11, 0x0, <r71=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r69, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r71}, [@IFLA_LINKINFO={0x1f9, 0x12, @vti={{0x4, 0x1, 'vti\x00'}, {0xb, 0x2, [@IFLA_VTI_LOCAL={0x0, 0x4, @rand_addr=0x400}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r68, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x82, r71}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0)
sendmsg$nl_route(r67, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r71}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000045c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000004580)={&(0x7f0000003d80)={0x7fc, r3, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r8}, {0x168, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r13}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r16}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x401}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1d1}}}]}}, {{0x8, 0x1, r22}, {0x100, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r23}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r24}, {0x174, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r29}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r34}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r37}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xec7}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r42}, {0x268, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r43}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r48}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x8a0}}, {0x8, 0x6, r49}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x7ff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x9b7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r50}}, {0x8, 0x7, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r52}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r57}, {0xf4, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x3, 0x4, 0x40}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r58}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x100}}, {0x8, 0x6, r65}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r66}}}]}}, {{0x8, 0x1, r71}, {0x80, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}]}, 0x7fc}, 0x1, 0x0, 0x0, 0x3367ad1dc2f4fd27}, 0x40080092)
r72 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00')
sendfile(r0, r72, 0x0, 0xedc0)

12:52:07 executing program 1:
pipe(&(0x7f0000000840)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000700))
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c)
sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
connect$inet6(r2, &(0x7f0000000380)={0xa, 0x4e24, 0xfffffffc, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x1c)
sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0)
r3 = eventfd2(0x2, 0x0)
fcntl$getownex(r3, 0x10, &(0x7f0000000000))
r4 = fcntl$getown(r3, 0x9)
r5 = syz_open_procfs(r4, &(0x7f0000000480)='\x1e6\xd9')
readv(r5, &(0x7f0000002340), 0x100000000000003a)
readv(r5, &(0x7f0000000580), 0x25b)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r6, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @ipv4={[], [], @multicast1}, 0x9}, 0x1c, 0x0, 0x0, 0x0, 0xffffffffffffff76}}], 0x1, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000100005070000050000000000000000fd000002000082657c2ce39bca0a431547fb19474a9432ac7348574d1d9605f2f26cdd84dcfbd3dbc9be0735750f2692b7233688a5482f230877f2db1962fa3bb15d69649c7bb512e2c044c606dae0f1b06a26e2dc2dc47a0d6a2e8561fd7423faa7c43c112c59bd79ea55665a0d89976f8d37aa3a5437d8de5eae9682d03439689294ae0f30e6ad1cc96f0a1e870fb5a384aef29a2affb77c62bb77551aea227411336dc0d5a3d6", @ANYRES32=0x0, @ANYPTR64=&(0x7f0000000d00)=ANY=[@ANYRESOCT=r6, @ANYRESOCT, @ANYRESOCT, @ANYRES16=r5, @ANYPTR64, @ANYRES64=0x0], @ANYRES32=r9], 0x4}, 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan1\x00', <r10=>r9})
ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000200)={@rand_addr="924376a1d62a642d8fa39b6757662f28", 0xc, r10})
ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000740)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x35})
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x800000, 0x0)
chdir(&(0x7f00000003c0)='./file0\x00')
r11 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0)
write$UHID_INPUT(r11, &(0x7f0000000c80)={0x8, "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", 0x1000}, 0x1006)
sendfile(r11, r11, &(0x7f0000000240), 0x2008000fffffffe)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0)
ioctl$RTC_VL_READ(r1, 0x80047013, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000740)={@mcast2, 0x5f})
getsockname(0xffffffffffffffff, &(0x7f0000002d80)=@can, &(0x7f0000000280)=0xfffffffffffffdd5)
r12 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
dup(r12)

12:52:07 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48)
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

12:52:07 executing program 3:
ioperm(0x0, 0x100, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
clone(0x60000000, 0x0, 0x0, 0x0, 0x0)
r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x202400, 0x0)
getitimer(0x6, &(0x7f00000001c0))
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1408020}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r2, 0x20, 0x70bd26, 0x25dfdbfe, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x20, @media='eth\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x44004000)
nanosleep(&(0x7f0000000200), &(0x7f0000000240))
prlimit64(r0, 0x99e8a6551a18cae, &(0x7f0000000280)={0x7fff, 0x7}, &(0x7f00000002c0))
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x0, 0x0)

[  215.237314] binder: 9557:9581 BC_INCREFS_DONE u0000000000000000 no match
[  215.252030] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  215.258884] binder: 9557:9581 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  215.268885] binder: 9557:9581 got transaction to invalid handle
[  215.275232] binder: 9557:9581 transaction failed 29201/-22, size 0-0 line 3013
[  215.342090] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
12:52:07 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a})
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'veth0\x00\x00\x00\f\x00', <r5=>0x0})
r6 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r6, 0x4, 0x6100)
ftruncate(r6, 0x108200)
r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x8000fffffffe)
r8 = syz_genetlink_get_family_id$tipc(0x0)
r9 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x38, r8, 0xfa50877429e2ed56, 0x70bd29, 0x25dfdbfb, {{}, 0x0, 0x4101, 0x0, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'ip6_vti0\x00'}}}}, ["", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)
sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2080000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x68, r8, 0x10, 0x70bd25, 0x25dfdbfc, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x6, @link='broadcast-link\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x8)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={@rand_addr="489592572ca0aed6de1b4bc6da12572c", 0x0, r5})
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr="d214c0e12eb5e61c640e2d526900"}, 0x1c)
sendmmsg(r3, &(0x7f000000ac80), 0x800000000000226, 0x0)

[  215.438322] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[  215.493695] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[  215.627920] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
12:52:08 executing program 1:
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6100)
ftruncate(r0, 0x108200)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x200040, 0x0)
r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001400)={0x98, 0x0, &(0x7f00000012c0)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x5, 0x1, 0x8}, @ptr={0x70742a85, 0x1, &(0x7f0000000080)=""/26, 0x1a, 0x1, 0x2b}}, &(0x7f00000011c0)={0x0, 0x18, 0x38}}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001200)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x6, 0x1, 0x39}, @fda={0x66646185, 0x4, 0x0, 0x11}}, &(0x7f0000001280)={0x0, 0x18, 0x38}}, 0x800}, @decrefs], 0x45, 0x0, &(0x7f0000001380)="62d08fb1004a3f4f1214905156c0d5a9cf4bf072f100f0086d92b26b8bf13dac9ec1d62142b2b749cb07edcfcd7bf2ee881bccd4c71fa439b12118a780f8d2bd8d1c2488c1"})
sendfile(r0, r1, 0x0, 0x8000fffffffe)
read$FUSE(r1, &(0x7f00000001c0), 0x1000)
r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
r6 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
close(r6)
sendfile(r4, r5, 0x0, 0x80000000)

12:52:08 executing program 2:
recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001600)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x1142, 0x4)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1c)
sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0)

12:52:08 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
ftruncate(r2, 0x3)
r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00')
sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800020}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x0, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8001)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
sendfile(r2, r4, 0x0, 0x8000fffffffe)
open(&(0x7f0000000080)='./bus\x00', 0x22000, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$inet6(0xa, 0x1, 0x0)
fcntl$dupfd(r5, 0x0, r6)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
write(r8, &(0x7f0000000340), 0x41395527)
ioctl$EVIOCGBITSND(r8, 0x80404532, &(0x7f0000000240)=""/237)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r7, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c)
ioctl$sock_SIOCSPGRP(r7, 0x8902, &(0x7f0000000100)=0xffffffffffffffff)
sendto$packet(r7, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0)
close(r7)

[  215.832527] binder: 9626:9627 BC_INCREFS_DONE u0000000000000000 no match
[  215.846356] binder: 9626:9627 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  215.869919] binder: 9626:9627 got transaction to invalid handle
[  215.891773] binder: 9626:9627 transaction failed 29201/-22, size 0-0 line 3013
[  215.900606] binder: 9626:9632 BC_INCREFS_DONE u0000000000000000 no match
[  215.900614] binder: 9626:9632 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  215.900624] binder: 9626:9632 got transaction to invalid handle
[  215.900632] binder: 9626:9632 transaction failed 29201/-22, size 0-0 line 3013
[  216.001973] binder: 9626:9632 BC_INCREFS_DONE u0000000000000000 no match
[  216.008877] binder: 9626:9632 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  216.020287] binder: 9626:9632 got transaction to invalid handle
[  216.026424] binder: 9626:9632 transaction failed 29201/-22, size 0-0 line 3013
[  216.038011] binder: 9626:9627 BC_INCREFS_DONE u0000000000000000 no match
12:52:08 executing program 1:
r0 = socket$inet(0x2, 0x4000020000000001, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="41fb14c5f1c204", 0x1)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x1000001d0)
sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x3e8, 0x0, 0xffffffffffffff37)

[  216.045893] binder: 9626:9627 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  216.053454] binder: 9626:9627 got transaction to invalid handle
[  216.059570] binder: 9626:9627 transaction failed 29201/-22, size 0-0 line 3013
12:52:08 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$netlink(0x10, 0x3, 0x0)
recvmmsg(r2, &(0x7f0000002d80), 0x4000000000006b9, 0x1a002, &(0x7f0000000180)={0x77359400})
sendmsg$nl_generic(r2, &(0x7f0000000580)={0x0, 0xffffffffffffff5b, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x100}, 0x0)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80400, 0x0)
write$P9_RRENAMEAT(r3, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7)

12:52:08 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000080011000000000008001b000000000000"], 0x30}}, 0x0)
getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180))
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x18c00, 0x0)
write$FUSE_GETXATTR(r1, &(0x7f0000000080)={0x18, 0x0, 0x8}, 0x18)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
write$FUSE_OPEN(r2, &(0x7f00000001c0)={0x20, 0xffffffffffffffda, 0x5, {0x0, 0x1a}}, 0x20)

12:52:08 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @timestamp, @mss, @window={0x3, 0x4185, 0x3}, @window={0x3, 0x1d48, 0x1}, @timestamp], 0x6)
r1 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0)
mknodat(r1, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
renameat2(r1, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000280)='./file0\x00', 0x2)
renameat2(r1, 0x0, r1, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0)
write$cgroup_int(r2, &(0x7f0000000240)=0x80000000, 0x12)
ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000080)=0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000600)="76fd0ba8a34e00000000009801dc4953d4d37807e705ebe1d64024b2ad6616a7b8a155f8d83f8c3c8d2d418f72fa4811a6d1bc46a84c54827af1f35d0500143160fc7397e6d939ddcde6ad4104db8c5f894881cbedadd86ab4e3c611e9c32c69594c742d3979ad3800a09535d1a3e430e6fcf5a366369f71e42e316231008b59e5dcf1afecf6cbd1d07b762bfee646167262ffd7e3c1301889cd8d5943011be3b2deed26364d6e0acd631853668e89d85658c75cec70719b4f236b5de225da78930a22d2f09744fdda2faf632b2ef10e476fe1ed109cc2af17bc2ac9ea0ce1d35d47e9fc874851baed47ca7d0957a4e6cf28cf0045c113fec20209b78aa0cf8839c2d4a9c89d6ed79ac9ac145e1207ee2ba38dcecc6bcc3780f60e5f412ca012011ea928dd8f9acfc4617b9feabfbed80f2e96841811275bee4df6d39b5479a8d3f3ae85bf3c8ba21c5214caec3c435a89cf5241acee4f43d5d434ebdf652b1b7501cb29239bb19b24927f7688138c1589f43917316f04a9b74b52ad871d3c07741a06b41dff488a37e6820e06ca885354e749541563ba8cfda312ed42626ada76e2defa665b5d062c8e8fb9d575c042a04b990f8a809a971711b5f2b10522baf6", 0xfdaa, 0x80, 0x0, 0xffffff9a)
listen(r1, 0x1ff)

[  216.146318] syz-executor.5 (9620) used greatest stack depth: 22552 bytes left
12:52:08 executing program 5:
r0 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0)
setuid(0xee01)
r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0)
lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x2, {0x40, {0x0, 0x1, 0x6}, 0x100010014, r2, 0x0, 0x442, 0x10000, 0x100000000, 0x9, 0x4, 0x6, 0x8, 0x4, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0)
lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
r4 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0)
fstat(r4, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x2, {0x40, {0x0, 0x1, 0x6}, 0x100010014, r3, r5, 0x442, 0x10000, 0x100000000, 0x9, 0x4, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0)
lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x2, {0x40, {0x0, 0x1, 0x6}, 0x100010014, r6, 0x0, 0x442, 0x10000, 0x100000000, 0x9, 0x4, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x50}}, 0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000140)={0x0, <r8=>0x0}, &(0x7f00000001c0)=0xc)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f0000000200)=0xe8)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x5040, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000070000,user_id=', @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="2c6d61785f726561643d3078303030303030303038303030303030302c6d61785f726561643d3078303030303030303030303030303030362c616c6c6f775f6f746211b6966469fc7c756c745f7065726d697373696f6e732c7569643c", @ANYRESDEC=r6, @ANYBLOB, @ANYRESDEC=r8, @ANYBLOB=',appraise,uid=', @ANYRESDEC, @ANYBLOB="2c6f626a5f747970653d65716c000000a95b002c7569643c", @ANYRESDEC=r9, @ANYBLOB=',\x00'])
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
write(r10, &(0x7f00000001c0), 0xfffffef3)
getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in6=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000200)=0xe8)
getresuid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)=<r12=>0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x80001, &(0x7f0000000380)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0xfffffffffffffff9}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x300}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3}}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@allow_other='allow_other'}], [{@obj_role={'obj_role'}}, {@fowner_lt={'fowner<', r11}}, {@fowner_eq={'fowner', 0x3d, r12}}]}})
recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0xfffffecd, &(0x7f0000000240), 0x0, 0x0, 0x26085d6cce6967cc}}], 0x4000056, 0x0, &(0x7f00000001c0)={0x77359400})

[  216.207263] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
12:52:08 executing program 1:
r0 = socket$inet(0x2, 0x1, 0x0)
pipe2(&(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x0)
getsockname$netlink(r1, &(0x7f0000000100), &(0x7f0000000180)=0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
r3 = dup3(r2, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
fsetxattr$security_selinux(r0, &(0x7f0000000240)='security.selinux\x00', &(0x7f00000002c0)='unconfined_u:system_r:insmod_t:s0-s0:c0,c1023\x00', 0x2e, 0x46f9585e82271984)
r4 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'\x00\x80\x00', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$KEYCTL_MOVE(0x1e, 0x0, r4, 0x0, 0x1)
r5 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'\x00\x80\x00', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r6 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r6, 0x4, 0x6100)
ftruncate(r6, 0x108200)
r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x8000fffffffe)
r8 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0)
mknodat(r8, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
renameat2(r8, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r8, &(0x7f0000000280)='./file0\x00', 0x2)
renameat2(r8, 0x0, r8, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2)
r9 = openat(r8, &(0x7f0000000400)='./bus\x00', 0x800, 0x109)
ioctl$EVIOCGPROP(r9, 0x80404509, &(0x7f0000000380)=""/91)
keyctl$KEYCTL_MOVE(0x1e, 0x0, r5, 0x0, 0x1)
add_key(&(0x7f00000001c0)='logon\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000300)="f29da9c66f0a24f95cbd059c7a6e5a69e2f97ac128dd32fb451758af7c312914e6abfcb748d35248e76c074c5a1dd08ce82dee4fc7fbaf1c65699a50cfcff61d6c5b35fbcba647d135c7ecaff3e90febc7445879a7f06a6d6e6f0a447fa275bfcd329aff5742225237f1101edc086a6d1a", 0x71, r5)
r10 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'\x00\x80\x00', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$KEYCTL_MOVE(0x1e, 0x0, r10, 0x0, 0x1)
add_key$user(0x0, 0x0, 0xfffffffffffffffd, 0x42f, 0xfffffffffffffff8)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
pipe2(&(0x7f0000000140), 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0))
r11 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r11, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r11, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000030307031dfffd946ff20c0020200a0009000300021d8568021baba20400ff7e", 0x24}], 0x14}, 0x0)
pipe2(&(0x7f0000000140), 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0))
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0)

[  216.264413] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[  216.287432] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
12:52:08 executing program 1:
eventfd2(0x0, 0x0)
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0)
ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7)
ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0))
pipe(&(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6)
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x8b31a7208d5d55be, 0x0)
ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f0000000240))
r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x10000, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, &(0x7f00000001c0))
ioctl$RTC_VL_READ(r2, 0x80047013, 0x0)
sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000)
ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502)
setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0)
r6 = dup(r3)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10)
r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0)
ftruncate(r7, 0x2007fff)
sendfile(r6, r7, 0x0, 0x8000fffffffe)

[  216.337176] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  216.359079] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  216.368593] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[  216.395329] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
12:52:10 executing program 1:
sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000580)}], 0x3}, 0x0)
clone(0x800007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="75402bfddb1252f840b7ca04004d991700ea8560954566329d2584a6ca112297df48c07ad1ad768010a4ebcb08cf90d200deaafb2b0f1689c5a0320025bf1724a7169f938393e27331c78384d5eb0caacecd93889af2444a2f48"], 0x4}}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0cda366f0001aeac44b8055fadbfac2a7dfe5d4965c1dcbe2544be6077bf0925f49126b4bd2dcbf0c45ceecc872b5607000000", @ANYBLOB="8a796407301fbb0facae334bdf1bb087b6cc15ad94e2e63c2eea1708af90fbfe212efdbd29af9d5df99dc35989964969e85505f865e51308b6d89b88076297cafb849fb0376cd304e79dbf91c555d0bf6b6be5ccc7ab11ea5bc8a23d6c7c626ab8ded6cf7ddf5e29fbd798a7c22c29bc129e7b2479728c7565c8b9"], 0x0, 0xae}, 0x20)
tkill(r0, 0x3b)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

12:52:10 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xa8}]}, 0x10)
sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)
r1 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fcntl$setpipe(r1, 0x407, 0x1)
syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00')
r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff6000/0x8000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000001340)="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", 0x1000, r2}, 0x68)
preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff})
r5 = dup2(r4, r3)
r6 = socket$inet6(0xa, 0x400000000001, 0x0)
r7 = dup(r6)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000500), &(0x7f0000000540)=0x14)
ioctl$FS_IOC_SETFLAGS(r7, 0x40046602, &(0x7f0000000640)=0x1)
ioctl$UI_SET_SNDBIT(r7, 0x4004556a, 0x0)
r8 = open(&(0x7f0000000480)='./bus\x00', 0x101042, 0x1)
ftruncate(r8, 0x2007fff)
sendfile(r7, r8, 0x0, 0x8000fffffffe)
r9 = socket$inet6(0xa, 0x400000000001, 0x0)
r10 = dup(r9)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f0000000500), &(0x7f0000000540)=0x14)
ioctl$FS_IOC_SETFLAGS(r10, 0x40046602, &(0x7f0000000640)=0x1)
ioctl$UI_SET_SNDBIT(r10, 0x4004556a, 0x0)
r11 = open(&(0x7f0000000480)='./bus\x00', 0x101042, 0x1)
ftruncate(r11, 0x2007fff)
sendfile(r10, r11, 0x0, 0x8000fffffffe)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r11, 0xc0502100, &(0x7f00000000c0)={<r12=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r8, 0xc0182101, &(0x7f0000000140)={r12, 0x400, 0x2})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x80082102, &(0x7f0000000240)=r12)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
munlockall()
recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, 0x0, 0xfffffdcf}, 0xfffffffd}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000004340)=""/4096, 0x1000}], 0x1, 0x0, 0xfffffffffffffee4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=""/109, 0x6d}}], 0x3, 0x20000180, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4)
sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)

12:52:10 executing program 2:
pipe(&(0x7f00000013c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r2)
r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
truncate(&(0x7f00000000c0)='./bus\x00', 0xa00)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r5 = socket$inet6(0xa, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x1000000000000, 0x102, 0x1, 0x0, 0x0, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400}, 0x20)
r6 = syz_open_procfs(0x0, 0x0)
getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r7})
bind$packet(r4, 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8005)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580))
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'})
fstat(0xffffffffffffffff, &(0x7f00000004c0))
socket(0x200000100000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'})
r9 = dup3(0xffffffffffffffff, r2, 0x0)
ioctl$EVIOCGNAME(r9, 0x80404506, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000001380)='IPVS\x00')
r10 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fallocate(r10, 0x0, 0x0, 0x8020003)
sendto(r9, 0x0, 0x0, 0x4000000, 0x0, 0x0)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
pipe(&(0x7f0000000200)={<r11=>0xffffffffffffffff})
close(0xffffffffffffffff)
splice(r11, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$PPPIOCGNPMODE(r11, 0xc008744c, &(0x7f0000000380)={0x2b})
ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000180)=""/72)
ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0)

12:52:10 executing program 4:
r0 = socket(0x10, 0x3, 0x56)
write(r0, &(0x7f0000000000), 0x0)
socket$inet6(0xa, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, 0x0, 0x0)
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
sendto$inet(r1, 0x0, 0xfffffffffffffe0c, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
sendto$inet(r1, &(0x7f0000000240), 0x1192aca8268c939b, 0x3, 0x0, 0xffffffffffffff06)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000180), 0x4)

12:52:10 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000004c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f00000001c0)={0x1, 0x0, 0x1000, 0x0, &(0x7f0000000280)})
r3 = open(&(0x7f0000000480)='./bus\x00', 0x101042, 0x0)
ftruncate(r3, 0x2007fff)
r4 = getpgid(0x0)
r5 = gettid()
ptrace$setopts(0x4206, r5, 0x0, 0x0)
tkill(r5, 0x200000000038)
ptrace$cont(0x18, r5, 0x0, 0x0)
r6 = fcntl$getown(r0, 0x9)
ptrace$setregs(0xd, r6, 0x7, &(0x7f0000000280)="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")
ptrace$cont(0x9, r5, 0x0, 0x0)
rt_tgsigqueueinfo(r4, r5, 0x13, &(0x7f0000000000)={0x21, 0xf4, 0x3})
ioctl$LOOP_SET_FD(r2, 0x4c00, r1)

12:52:10 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r3}]]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@ipv4_newaddr={0xfffffffffffffe35, 0x14, 0x1, 0x70bd29, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_CACHEINFO={0xfc, 0x6, {0x65, 0x7}}]}, 0xffffff23}}, 0x0)

12:52:10 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2012})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x8000, 0x0, @loopback, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
r4 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
r5 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
r6 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
dup2(r6, 0xffffffffffffffff)
r7 = eventfd2(0x56, 0x80000)
dup(r7)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0)
r8 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x88, 0x0, &(0x7f0000000380)=[@acquire_done={0x40106309, 0x1}, @register_looper, @increfs_done={0x40106308, 0x3}, @register_looper, @increfs_done={0x40106308, 0x1}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@fd, @fd={0x66642a85, 0x0, r8}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}], 0x62, 0x0, &(0x7f0000000440)="450ae117548b87a369a0625992b13a5fe59803e3f0071cc39b0ae63b32b79fb21fef0efae4002be47fff081b5e15a26a046970c313de5967212b4d748554d8876418bcad12b304862c94364ef8d7d73cf21b5177d0380e52ac3a93fd922ced1ead42"})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a)
r9 = socket$nl_route(0x10, 0x3, 0x0)
dup3(r9, r0, 0x0)

12:52:10 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x4000000000000002, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
ftruncate(r2, 0x108200)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
accept4$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000100)=0x1c, 0x3b6dab0fa91ea968)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c)
sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e24, @multicast2=0xe0000501}, 0x80, 0x0}}], 0x26, 0x0)
r4 = fcntl$getown(0xffffffffffffffff, 0x9)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f00000001c0)={'nat\x00', 0x2c6, [{}, {}, {}, {}, {}]}, 0x1e)
setpriority(0x1, r4, 0x7)

[  218.307587] binder: 9670:9674 BC_INCREFS_DONE u0000000000000000 no match
[  218.316135] binder: 9670:9674 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  218.324055] binder: 9670:9674 got transaction to invalid handle
12:52:10 executing program 4:
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
pread64(r1, &(0x7f0000000180)=""/69, 0x45, 0x1)
fcntl$setpipe(r0, 0x8, 0x80000000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x118)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100004, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="02d85e527216400b2b8cbffffd086f144b89333299c7becc69ac5a7ad50786bb8c212a1660cdba716fa0ce74f013e1950d87f2fa5ecac9a5d5d907ff6ac583609249c02b7e97d3d1922e9395c135e1d2e69bdf236ed98d4cf821d19bd73640dd88abd3acda2401d22a304eadd86d570a11b7e6e1e444eee01c7431abd4fab477db7e3ca0"], &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0)
mount(&(0x7f0000000680)=ANY=[@ANYBLOB="5709c7e9c40fe1a58e0753d0a2c16d371b011c8fac7de1a78101f5c7be752963b3155a5ba3bfbed8722b93307ba10292e0d83fbc49d5eda7b8d7e582222cd504bc364620715b0c71663e44fdeff9f937a1d702fc1218a9f8317a93d5a44ef79aee05d96405a4e817cb42e3ba13e8fe65d88afcf597081288dfc15be61d1a35e011eccd30d5263e9ed461bb8ac332264a755ec095c827502ee6970536ad791068c34220afefca2651130e"], &(0x7f0000000380)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2a2c163dea6789fb15d48403a50597fdc9d26eba6384ac33d96c28a1f2470000010000000000b499bb8e94f88bce4acd268377e7e05079b1d84c1fb3d1448d6d9cded7c9c7216466bd7d"], &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
pipe(&(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r6)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x4000040000002, 0x1, 0x1}, 0x14}}, 0x0)
write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r4, 0x0, r6, 0x0, 0x80000000, 0xa)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
r8 = creat(&(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x5)
fcntl$setstatus(r8, 0x4, 0x44700)
r9 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/mls\x00', 0x0, 0x0)
write$P9_RREMOVE(r9, &(0x7f0000000540)={0x7, 0x7b, 0x2}, 0x7)
getsockopt$IP_VS_SO_GET_DAEMON(r8, 0x0, 0x487, &(0x7f00000002c0), &(0x7f0000000300)=0x30)
preadv(r7, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000240)='./file0\x00', &(0x7f0000000480)='trusted.overlay.origin\x00', &(0x7f00000004c0)='y\x00', 0x2, 0x1)

12:52:10 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000040)=@v1={0x1000000, [{0xffffffc1, 0x4}]}, 0xc, 0x1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x68, 0x0, &(0x7f0000000240)=[@acquire_done, @decrefs, @increfs, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  218.356693] binder: 9670:9674 transaction failed 29201/-22, size 0-0 line 3013
12:52:10 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
r4 = creat(&(0x7f0000000440)='./bus\x00', 0x0)
ftruncate(r4, 0xe3ca)
fcntl$setstatus(r3, 0x4, 0x6100)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup2(r5, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
write$cgroup_type(r3, &(0x7f00000001c0)='threaded\x00', 0x9)
r7 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r7, 0x0)
getsockopt$ARPT_SO_GET_INFO(r6, 0x0, 0x60, &(0x7f0000000240)={'filter\x00'}, &(0x7f0000000140)=0x44)
read(r1, &(0x7f0000000000)=""/250, 0x128b9372)
madvise(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x9)
madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9)

[  218.417774] binder: 9689:9701 BC_INCREFS_DONE u0000000000000000 no match
[  218.430742] binder: 9698:9700 BC_ACQUIRE_DONE u0000000000000000 no match
[  218.430756] binder: 9698:9700 DecRefs 0 refcount change on invalid ref 0 ret -22
[  218.430770] binder: 9698:9700 IncRefs 0 refcount change on invalid ref 0 ret -22
[  218.430778] binder: 9698:9700 got transaction to invalid handle
12:52:10 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=ANY=[@ANYBLOB="58010000100013070000180000000000fe800000000000000000000000000000ff020000000000000000000000000001000000000000000000000000000000006a2d4e24de7e6282596d11c35b6aabb8f5c31eb34979de84810c7fe5e5b55af435a802d50c25a0f0b709e1dd007893b3cd6c0cfb78b60c5fa63e3f70db7a3d72187cb66817c91abb9b44fd5adceb0000000000000000000000007efe", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x158}}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000080))
ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000580)=""/4096)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0xe8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x0, 0x308, 0x70bd27, 0x25dfdbff, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}}, 0x404d984)
sendmmsg(r1, &(0x7f0000000240), 0x40002b7, 0x0)

[  218.430788] binder: 9698:9700 transaction failed 29201/-22, size 0-0 line 3013
[  218.431149] binder: undelivered TRANSACTION_ERROR: 29201
[  218.436247] binder: 9698:9705 BC_ACQUIRE_DONE u0000000000000000 no match
[  218.436328] binder: 9698:9705 DecRefs 0 refcount change on invalid ref 0 ret -22
[  218.436342] binder: 9698:9705 IncRefs 0 refcount change on invalid ref 0 ret -22
[  218.436349] binder: 9698:9705 got transaction to invalid handle
[  218.436359] binder: 9698:9705 transaction failed 29201/-22, size 0-0 line 3013
[  218.436860] binder: undelivered TRANSACTION_ERROR: 29201
[  218.467086] binder: 9689:9710 BC_INCREFS_DONE u0000000000000000 no match
[  218.467094] binder: 9689:9710 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  218.467108] binder: 9689:9710 got transaction to invalid handle
[  218.467120] binder: 9689:9710 transaction failed 29201/-22, size 0-0 line 3013
[  218.467332] binder: 9689:9710 BC_INCREFS_DONE u0000000000000000 no match
[  218.467338] binder: 9689:9710 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  218.467344] binder: 9689:9710 got transaction to invalid handle
[  218.467351] binder: 9689:9710 transaction failed 29201/-22, size 0-0 line 3013
[  218.469379] binder: 9689:9710 BC_INCREFS_DONE u0000000000000000 no match
[  218.469387] binder: 9689:9710 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  218.469395] binder: 9689:9710 got transaction to invalid handle
[  218.469405] binder: 9689:9710 transaction failed 29201/-22, size 0-0 line 3013
[  218.800153] binder: 9689:9701 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  218.808380] binder: 9689:9701 got transaction to invalid handle
[  218.814658] binder: 9689:9701 transaction failed 29201/-22, size 0-0 line 3013
[  218.837320] binder: 9689:9710 BC_INCREFS_DONE u0000000000000000 no match
[  218.844573] binder: 9689:9701 BC_INCREFS_DONE u0000000000000000 no match
[  218.844582] binder: 9689:9701 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  218.844593] binder: 9689:9701 got transaction to invalid handle
[  218.844602] binder: 9689:9701 transaction failed 29201/-22, size 0-0 line 3013
[  218.857844] binder: 9689:9701 BC_INCREFS_DONE u0000000000000000 no match
[  218.857853] binder: 9689:9701 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  218.857862] binder: 9689:9701 got transaction to invalid handle
[  218.857871] binder: 9689:9701 transaction failed 29201/-22, size 0-0 line 3013
[  218.875035] binder: 9689:9701 BC_INCREFS_DONE u0000000000000000 no match
[  218.875046] binder: 9689:9701 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  218.875057] binder: 9689:9701 got transaction to invalid handle
[  218.875066] binder: 9689:9701 transaction failed 29201/-22, size 0-0 line 3013
[  218.997323] binder: 9689:9710 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  219.004705] binder: 9689:9710 got transaction to invalid handle
[  219.011388] binder: 9689:9710 transaction failed 29201/-22, size 0-0 line 3013
[  219.172035] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  219.732063] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
12:52:13 executing program 1:
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
listen(r0, 0x80000000000000bd)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
recvmmsg(r1, &(0x7f00000018c0), 0x4000000000002ed, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r2, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket(0x10, 0x3, 0xc)
close(r5)
accept4(r0, 0x0, 0x0, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000003400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80820}, 0xc, &(0x7f00000033c0)={&(0x7f0000001940)=ANY=[@ANYBLOB="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"], 0x1790}}, 0x0)

12:52:13 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040))
r1 = syz_open_pts(r0, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
ftruncate(r2, 0x108200)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
r4 = dup3(r1, r0, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000140))

12:52:13 executing program 0:
r0 = socket$inet(0x2, 0x2, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
setsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f00000000c0)={@multicast2, @loopback, @rand_addr=0x101}, 0xfde7)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpe\x02\x00_percpu_sys\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
r4 = creat(&(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x5)
fcntl$setstatus(r4, 0x4, 0x44700)
ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000200))
r5 = request_key(&(0x7f0000000040)='id_resolver\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000380)='/dev/loop#\x00', 0xfffffffffffffffc)
keyctl$dh_compute(0x17, &(0x7f00000003c0)={0x0, 0x0, r5}, &(0x7f0000000400)=""/48, 0x30, &(0x7f0000000480)={0x0})
r6 = request_key(&(0x7f0000000240)='.dead\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)='/em1em0\x1a\x00', r5)
keyctl$get_keyring_id(0x0, r6, 0x9)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000300)={r6, 0xc4, 0xbe}, &(0x7f00000004c0)={'enc=', 'oaep', ' hash=', {'sha3-512-generic\x00'}}, &(0x7f0000000740)="9aa8c9f1f22de66bd9ad0ed6e77a15c1370ebb5c03500047edc3fd3e05b25b55852ff4adef0e85935fe94aae974ecf3c6744ba0814823b423819beb74d5068ea087c4f666fc12b6e1f5ef6e2a21a751d2140ef2adb15a9d14d10d7ee1d404f87574df92766968c1dde20e381040a6c1c9883723782b47129bbe0812746159e4a9d7c4ac598830329d385341d7c7e3385594a73def45a6252ab5e506f50b3a009db9c3f88176fa7eb9a2c948480815761780d603c91b308b06214088793dac8dd1b4fc893", &(0x7f0000000540)=""/190)
ftruncate(r3, 0x108200)
r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r3, r7, 0x0, 0x8000fffffffe)
mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000008, 0x110, r7, 0x8)
setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000000)={@multicast2, @multicast1, @multicast1}, 0xc)
r8 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8)
keyctl$restrict_keyring(0x1d, r8, &(0x7f0000000180)='trusted\x00', &(0x7f00000001c0)='/em1em0\x1a\x00')

12:52:13 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6(0x10, 0x8000000100000003, 0x0)
r2 = dup2(r0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet(0x2, 0x4000020000000001, 0x0)
bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10)
r4 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0)
r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
r6 = open(0x0, 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x20008088)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
ioctl$EXT4_IOC_MIGRATE(r5, 0x6609)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00')
sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800080}, 0xc, &(0x7f0000000100)={&(0x7f0000000880)={0xd4, r7, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x44061}, 0x44000)
sendmsg$DEVLINK_CMD_PORT_SET(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0xcc, r7, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0x4, 0xffff}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0x4, 0x3}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x4, 0x20d7}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x4, 0x3}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0x2800c0c1)
mknodat(r4, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
renameat2(r4, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f0000000280)='./file0\x00', 0x2)
renameat2(r4, 0x0, r4, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2)
ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x24e, 0x9}]})
sendto$inet(r3, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="a504", 0x2)
setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x1000001d0)
sendto$inet(r3, &(0x7f0000000000), 0xfffffffffffffccf, 0x3e8, 0x0, 0xffffffffffffff37)

12:52:13 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a})
close(r0)

12:52:13 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x84647, 0x0)
read$FUSE(r1, &(0x7f0000000200), 0x1000)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x881})
ioctl$TUNGETFILTER(r0, 0x801054db, 0x0)

12:52:13 executing program 2:
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000001780)=[{{&(0x7f0000000340)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000440)=""/74, 0x4a}, 0x66c2}, {{&(0x7f0000000640)=@isdn, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/23, 0x17}, {&(0x7f0000000740)=""/168, 0xa8}, {&(0x7f00000006c0)=""/6, 0x6}, {&(0x7f0000000800)=""/58, 0x3a}, {&(0x7f0000000840)=""/100, 0x64}, {&(0x7f00000008c0)=""/231, 0xe7}], 0x6, &(0x7f0000000a40)=""/27, 0x1b}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000a80)=""/247, 0xf7}, {&(0x7f0000000bc0)=""/105, 0x69}], 0x2, &(0x7f0000000d40)}}, {{&(0x7f0000000d80)=@x25, 0x80, &(0x7f0000001000)=[{&(0x7f0000000e00)=""/65, 0x41}, {&(0x7f0000000e80)=""/193, 0xc1}, {0x0}, {&(0x7f0000001c00)=""/4096, 0x1000}], 0x4, &(0x7f0000002c00)=""/4096, 0x1000}}, {{&(0x7f0000001040)=@un=@abs, 0x80, &(0x7f0000001380)=[{&(0x7f00000011c0)=""/56, 0x38}, {&(0x7f0000001200)=""/184, 0xb8}, {&(0x7f00000012c0)=""/179, 0xb3}], 0x3, &(0x7f00000013c0)=""/221, 0xdd}, 0x4}, {{&(0x7f00000014c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000001640)=[{&(0x7f0000001540)=""/226, 0xe2}], 0x1, &(0x7f0000001680)=""/254, 0xfe}, 0x1f}], 0x6, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0)
rmdir(&(0x7f0000000140)='./bus\x00')
sched_setattr(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040))
r4 = socket$unix(0x1, 0x1, 0x0)
connect(r4, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x80)
r5 = socket$inet(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000200), 0x10)
connect$inet(r5, 0x0, 0x0)
sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0)
accept(r1, &(0x7f0000001b80)=@xdp, &(0x7f00000001c0)=0x80)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r6, 0x4, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000))
io_setup(0x8, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0xc2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])

12:52:13 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(0x0, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x40, 0x0)
execve(0x0, 0x0, 0x0)
chdir(&(0x7f0000000300)='./file0\x00')
r0 = open(&(0x7f0000000100)='./file1\x00', 0x10000000080040, 0x0)
r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
ftruncate(r1, 0x2081ff)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x184)
ftruncate(r0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x2)
sendfile(r1, r2, 0x0, 0x8000fffffffe)

12:52:13 executing program 4:
r0 = socket$inet6(0xa, 0x80003, 0xff)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071")
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r2, &(0x7f0000008900)=[{{0x0, 0x0, &(0x7f0000003600)=[{0x0}], 0x1}}], 0x1, 0x0)

12:52:13 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781500000000f601000800000007000000402c11000000000009000007000000000000000000000000385a580000000000000900000000000000010000000000000000000000ffffffff00000000000009593c88ff3ed359b6b342a5b31b628ee1bdff739b75074dc6a56b02e8864fe848c3040b8fe9058ea0150f5eedef22701042f06294212113a6e87c4ec8a30c6f553b606f1924da2ae7188a0128aaa01f9cd143f86ce937ef47acf189830bf6267accf14631e3f252ce20e35481223e952072de05debead9febde60b4e996e07fced76b0b1d32e6fd7d647529b9bbafef5ae615999a6b8361eace52f4be6e4867e61d51e3b7dfa25fee5f16f35e63fa9d41d1932cc8f94368890372975d6432d8e12ad6921b935a4e671c0f5963bb6039b5dec1f69a4d5d69f80065a24793637e3423c8597501fc32edb597da5cfcd1dd00"/351], 0x15f)

12:52:13 executing program 3:
creat(&(0x7f0000000300)='./file0\x00', 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00')
r0 = gettid()
tkill(r0, 0x3c)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
r4 = open(0x0, 0x0, 0x0)
sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x20, 0x0, 0x8, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x88}, 0x4004000)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x360, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00')
preadv(r6, &(0x7f0000000680)=[{&(0x7f0000000540)=""/222, 0xde}, {&(0x7f00000022c0)=""/4096, 0x1000}], 0x2, 0x400000000000)
openat$cgroup_subtree(r6, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0)

12:52:13 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
r1 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={<r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r0, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = memfd_create(&(0x7f00000001c0)='\vem1\xc1\xf8\xa6\x8cN\xc0\xa3\\\xe2\xcb\xa2\xba\xa5\x19\x97\xac#:\xff\xcf\x11.O\x90:\x1e9}\xfd\x1a@s\x81k\x92\x10\x04P,\xcf\xeaJ\x86Q\x9b=\'\xfaP\\\xf1<~(\x9bk\x86u\x0e%\xc5\xf0`\x1c\\\xf8\xfd>|\xfar\nv\xa3\x06\xd8<N,\x8et\xab\xf7\xa7I\xa5\xca\xf6\xf8\xeaz)\xd3\xfe\xefr\x93F\xfb-l\x04\xe5d\xec\xa4\xf4\xe3*\x87\xb4\\L;\x00'/129, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r4, 0x0)
sendfile(r1, r0, 0x0, 0x7fffffff)

[  221.521245] SELinux: mls: truncated level
[  221.536882] SELinux: mls: truncated level
[  221.538575] devpts: called with bogus options
12:52:13 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/351], 0x15f)

[  221.571001] selinux_nlmsg_perm: 4167 callbacks suppressed
[  221.571015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12336 sclass=netlink_route_socket pig=9784 comm=syz-executor.3
[  221.595136] SELinux: mls: truncated level
[  221.648478] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12337 sclass=netlink_route_socket pig=9784 comm=syz-executor.3
[  221.676742] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket pig=9784 comm=syz-executor.3
[  221.705253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24888 sclass=netlink_route_socket pig=9784 comm=syz-executor.3
[  221.732136] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket pig=9784 comm=syz-executor.3
[  221.757842] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket pig=9784 comm=syz-executor.3
[  221.785625] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25400 sclass=netlink_route_socket pig=9784 comm=syz-executor.3
[  221.812613] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29289 sclass=netlink_route_socket pig=9784 comm=syz-executor.3
[  221.832089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31337 sclass=netlink_route_socket pig=9784 comm=syz-executor.3
12:52:14 executing program 5:
socket$inet6(0xa, 0x400000000001, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
r5 = dup3(r3, r4, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r6, &(0x7f0000000040)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @mcast1, 0x3}, 0x1c, 0x0}}], 0x1, 0x0)
r7 = dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x100000059)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
dup(0xffffffffffffffff)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_GET_TID_ADDRESS(0x28, 0x0)
socket$inet6(0xa, 0x0, 0xfc)
close(0xffffffffffffffff)
ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000080))
r8 = open(&(0x7f0000002000)='./bus\x00', 0x504c2, 0x0)
ftruncate(r8, 0x2007fff)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000001)
socket$nl_netfilter(0x10, 0x3, 0xc)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

12:52:14 executing program 4:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[]}}, 0x0)
fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r3 = dup(r0)
bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$SEG6(0x0)
sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0)
r4 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x80)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4)
ftruncate(r4, 0x80003)
sendfile(r0, r4, 0x0, 0x8000fffffffe)
pipe(&(0x7f0000000100)={<r5=>0xffffffffffffffff})
write$cgroup_int(r5, &(0x7f0000000180)=0x3, 0xffffffffffffff31)
ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000380)=<r6=>0x0)
r7 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
fcntl$setownex(r7, 0xf, &(0x7f0000000140)={0x0, r6})
write$P9_RMKNOD(r5, &(0x7f0000000040)={0x14, 0x13, 0x0, {0x0, 0x2}}, 0x14d)
recvfrom$inet6(r5, &(0x7f0000000200)=""/219, 0xdb, 0x6043, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x350}, 0x1c)
recvmmsg(r1, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f00000017c0), 0x71, &(0x7f0000000300)=""/175, 0xaa}, 0x2}], 0x2, 0x2000, 0x0)

12:52:14 executing program 5:
pipe(&(0x7f00000013c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r2)
r3 = creat(&(0x7f0000000140)='./bus\x00', 0x178)
fcntl$setstatus(r3, 0x4, 0x6100)
truncate(&(0x7f00000000c0)='./bus\x00', 0xa00)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300))
socket(0x200000100000011, 0x2, 0x0)
r4 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r4, 0x4, 0x6100)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
bind$packet(r5, 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x0)
sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe)
getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000780)={{{@in6=@remote, @in=@dev}}, {{@in6=@empty}, 0x0, @in6=@loopback}}, &(0x7f00000004c0)=0x234)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r6)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r7)
openat$cgroup_procs(r7, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0)
r8 = accept4$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x140000)
r9 = dup3(r8, r6, 0x0)
ioctl$EVIOCGNAME(r9, 0x80404506, &(0x7f0000001800)=""/151)
r10 = socket(0x200000100000011, 0x2, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
bind$packet(r10, &(0x7f0000000100)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @random="962c85e043d8"}, 0xc)
open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
pipe(&(0x7f00000013c0)={<r12=>0xffffffffffffffff})
read(r12, &(0x7f0000000200)=""/250, 0x50c7e3e3)
sendmsg$IPVS_CMD_NEW_SERVICE(r12, &(0x7f0000001440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xfffffffffffffefe, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000000c0)={'ip6gre0\x00', r11})
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r13 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r14 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r14, r14, &(0x7f00000002c0)=0x400000000202, 0xdd)

12:52:14 executing program 0:
pipe(&(0x7f0000000840)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000700)=0x14)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c)
sendmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
connect$inet6(r3, &(0x7f0000000380)={0xa, 0x4e24, 0xfffffffc, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r4, 0x4, 0x6100)
ftruncate(r4, 0x108200)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000740)={@dev={0xfe, 0x80, [], 0x2b}, 0x35, r2})
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x800000, 0x0)
chdir(&(0x7f00000003c0)='./file0\x00')
r6 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0)
write$UHID_INPUT(r6, &(0x7f0000000c80)={0x8, "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", 0x1000}, 0x1006)
sendfile(r6, r6, &(0x7f0000000240), 0x2008000fffffffe)
ioctl$TCSBRKP(r0, 0x5425, 0x6)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0)
ioctl$RTC_VL_READ(r1, 0x80047013, 0x0)
socketpair(0x1, 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @random}, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000740)={@mcast2, 0x5f, r7})
getsockname(0xffffffffffffffff, &(0x7f0000002d80)=@can, &(0x7f0000000280)=0xfffffffffffffdd5)
r8 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
dup(r8)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f00000004c0)=0xb59)

12:52:14 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/351], 0x15f)

12:52:14 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x5)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x20)
r2 = creat(&(0x7f0000001400)='./file0\x00', 0x126)
write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b)
r3 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
r4 = creat(&(0x7f0000000340)='./bus\x00', 0x0)
ftruncate(r4, 0x2081fc)
pipe(&(0x7f0000000180)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
write(r6, &(0x7f00000001c0), 0xfffffef3)
r7 = open(&(0x7f0000000300)='./bus\x00', 0x141042, 0x0)
r8 = gettid()
ptrace(0x10, r8)
r9 = gettid()
ptrace(0x10, r9)
ptrace$getregs(0xe, r9, 0x5, &(0x7f0000000380)=""/59)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r7, 0x0)
read(r5, &(0x7f0000000000)=""/250, 0x128b9372)
close(r3)
fdatasync(r2)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
r11 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000480)={0x7b274b6899653028, 0x5e, "3f3ddee47d15b3f3f35eb96f7e7d41796866d35d1cc6fb0ffc891e16aaef4bf6c77ac1b08a3c3173c98116f080c0c145c3044457c774a4bf880feb994291f4647fa4199d9e3358966c615190485a430d6c6b130a9d2a0f7158e1bcdf0462"})
fsetxattr$trusted_overlay_nlink(r11, &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f00000001c0)={'L-', 0x40}, 0x28, 0x0)
sendmsg$nl_xfrm(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@dev}}, [@sec_ctx={0xc, 0x8, {0xffffffffffffffe2}}]}, 0x5c}}, 0x0)
fallocate(r10, 0x40, 0x1f, 0x4)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2})
creat(&(0x7f0000000440)='./bus\x00', 0x84)

12:52:14 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/351], 0x15f)

[  222.181215] binder: 9802:9803 BC_INCREFS_DONE u0000000000000000 no match
[  222.190805] SELinux: mls: truncated level
[  222.206176] binder: 9802:9803 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  222.224655] binder: 9802:9803 got transaction to invalid handle
[  222.238707] SELinux: mls: truncated level
[  222.238964] binder: 9802:9803 transaction failed 29201/-22, size 0-0 line 3013
12:52:14 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$selinux_load(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/351], 0x15f)

12:52:14 executing program 4:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[]}}, 0x0)
fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r3 = dup(r0)
bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$SEG6(0x0)
sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0)
r4 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x80)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4)
ftruncate(r4, 0x80003)
sendfile(r0, r4, 0x0, 0x8000fffffffe)
pipe(&(0x7f0000000100)={<r5=>0xffffffffffffffff})
write$cgroup_int(r5, &(0x7f0000000180)=0x3, 0xffffffffffffff31)
ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000380)=<r6=>0x0)
r7 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
fcntl$setownex(r7, 0xf, &(0x7f0000000140)={0x0, r6})
write$P9_RMKNOD(r5, &(0x7f0000000040)={0x14, 0x13, 0x0, {0x0, 0x2}}, 0x14d)
recvfrom$inet6(r5, &(0x7f0000000200)=""/219, 0xdb, 0x6043, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x350}, 0x1c)
recvmmsg(r1, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f00000017c0), 0x71, &(0x7f0000000300)=""/175, 0xaa}, 0x2}], 0x2, 0x2000, 0x0)

12:52:14 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$selinux_load(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/351], 0x15f)

12:52:14 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$selinux_load(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/351], 0x15f)

[  222.350846] binder: 9811:9828 BC_INCREFS_DONE u0000000000000000 no match
[  222.386706] binder: 9811:9828 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  222.430971] binder: 9811:9828 got transaction to invalid handle
[  222.465061] binder: 9811:9828 transaction failed 29201/-22, size 0-0 line 3013
12:52:14 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/351], 0x15f)

12:52:14 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/351], 0x15f)

[  222.506688] binder: 9830:9834 BC_INCREFS_DONE u0000000000000000 no match
[  222.535853] SELinux: mls: truncated level
12:52:14 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0)
mknodat(r2, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
renameat2(r2, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000280)='./file0\x00', 0x2)
renameat2(r2, 0x0, r2, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000000)={{0x2, 0x1, 0x8, 0x0, 0x200}, 0x8, 0x9c})
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r3, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @local}}, 0xffbe, 0x0, 0x106, &(0x7f0000000100)=ANY=[@ANYBLOB="181000000000007fb1856f9a00000000"], 0x18}}], 0x0, 0x80)
pipe(&(0x7f0000000080))
pipe(&(0x7f0000000100)={<r4=>0xffffffffffffffff})
write$cgroup_int(r4, &(0x7f0000000180)=0x3, 0xffffffffffffff31)
ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000380))
write$P9_RMKNOD(r4, &(0x7f0000000040)={0x14, 0x13, 0x0, {0x0, 0x2}}, 0xfd95)
ioctl$BLKFLSBUF(r4, 0x1261, &(0x7f0000000140)=0x42a8)

[  222.557597] binder: 9830:9834 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  222.578848] SELinux: mls: truncated level
[  222.596283] binder: 9830:9834 got transaction to invalid handle
[  222.596301] binder: 9830:9834 transaction failed 29201/-22, size 0-0 line 3013
[  222.769221] binder: 9811:9812 BC_INCREFS_DONE u0000000000000000 no match
[  222.784942] binder: 9811:9812 unknown command 1074266219
[  222.803834] binder: 9811:9812 ioctl c0306201 200002c0 returned -22
12:52:15 executing program 0:
pipe(&(0x7f0000000540)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r2 = socket$inet(0x2, 0x4000000000000801, 0x0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r3, 0x200, 0x70bd27, 0x25dfdbfe, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x7}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040010}, 0x40000)
sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r4})
sendmsg$nl_route(r4, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x14}, 0x1, 0x0, 0x0, 0x80c0}, 0x40008)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r5=>0x0})
recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r5+30000000})
socket$nl_xfrm(0x10, 0x3, 0x6)
close(0xffffffffffffffff)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
accept$inet6(0xffffffffffffffff, 0x0, 0x0)
lstat(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
getresgid(&(0x7f0000000140), &(0x7f0000000180)=<r7=>0x0, &(0x7f00000001c0))
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x7)
keyctl$chown(0x4, 0x0, r6, r7)
arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x80)
r8 = socket$inet6(0xa, 0x0, 0x0)
setsockopt$sock_int(r8, 0x1, 0x2c, &(0x7f0000000000)=0x1, 0x4)
fcntl$dupfd(r8, 0x0, 0xffffffffffffffff)
getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0)

12:52:15 executing program 4:
openat$uhid(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uhid\x00', 0x2, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10)
memfd_create(&(0x7f0000000240)='/dev/uhid\x00', 0x0)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="bf16000000002789da0b2c19446b027817c00000b70700000100f0ff50700000000000001f70000000000000950000800000000099e99031ba4c0af84cfca176fb423520d2afbd6bf4aa35339f443783829e2b04df65d128160f57bffa7663ae28d4ff07abd93e71db7156e5fe1a1196b3deeddc3ff6f4da006c85e4de81d82839c38fd55255d1c4ee21dd49801cb1c9e61f312414082eea6a5fc09741c8c15031aa6bd44e29d6edcd1be9f1ea881bcd2e290ede4786df11fedc7d4a01fb2c5cefc3f88e148d51f91bfcbe145f19f3b82a3b47f49a756b205bde0500000092837545fa5110fde972184d3962237ab4229a509b071fb13bbbcac2a1c85511b026b86de5e8efda07ea3f4d72b45b920f4df5717fcd0dea8cb22d8e07ebcbd2a69302d485fa052419e2612ebdb1bd2d5f9457720cafc33c7de9ba4a887520337c586cc6d0fd97ba089a03c59b33eb205b73a0313f51387690bca470372583a79b0e550362622aa100cf0451a599415c4df5d07f534bd455d05e6d8f45be557d8ab5e03730b219106b0e688911584c1203f20d445ae87bec8db0f4ee406c519e7fbf610facb824cecb9d2d693e6981665741fef005329ab690000000000000"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

12:52:15 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/351], 0x15f)

12:52:15 executing program 3:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = request_key(&(0x7f0000000040)='id_resolver\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000380)='/dev/loop#\x00', 0xfffffffffffffffc)
recvmmsg(0xffffffffffffffff, &(0x7f0000002f80)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002000)=""/166, 0xa6}], 0x1}}], 0x1, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00')
preadv(r4, &(0x7f0000000480), 0x10000000000002a1, 0x10400003)
r5 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="086310400000000000000000000000050000000010630840000000000000000000634040020000000000000000000000000000000000001100000000007a9b12d3dcfba2f178bf101f887d6678000000006825b03300"/116], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
ioctl$int_in(r5, 0xd3dd62be67cd4244, &(0x7f00000001c0)=0x81)
keyctl$dh_compute(0x17, &(0x7f00000003c0)={0x0, 0x0, r3}, &(0x7f0000000400)=""/48, 0x30, &(0x7f0000000480)={0x0})
r6 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000180)={'s6z', 0x1}, 0x0, 0x0, r3)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r6)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000014c0)={0x14, 0x0, &(0x7f0000000400)=[@increfs_done={0x40106308, 0x0, 0x2}], 0x0, 0x0, 0x0})

12:52:15 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x88009, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x420000015001})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010005fbabeea00fcffffff0000000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0)
r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000100)={0x1, 0x3, [@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @broadcast]})
write$tun(r0, &(0x7f00000013c0)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv6={0x0, 0x6, "314092", 0xf98, 0x0, 0x0, @dev, @mcast2, {[@hopopts={0x89, 0x7, [], [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra, @calipso={0x7, 0x28, {0x0, 0x8, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}}]}, @hopopts={0x0, 0x18, [], [@calipso={0x7, 0x30, {0x0, 0xa, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, @ra, @calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x0, [0x0, 0x0]}}, @ra, @hao={0xc9, 0x10, @remote}, @calipso={0x7, 0x38, {0x0, 0xc, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0x15, "baeb346b1a6bde7e726266578c09b87cbc10252af8"}]}, @hopopts={0x0, 0x1cb, [], [@pad1, @generic={0x0, 0xe54, "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"}]}], @icmpv6=@mld={0x0, 0x3, 0x0, 0x0, 0x0, @dev}}}}}, 0xfca)

12:52:15 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/351], 0x15f)

[  223.237665] SELinux: mls: truncated level
12:52:15 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/351], 0x15f)

[  223.263891] SELinux: mls: truncated level
12:52:15 executing program 3:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/Syz1\x00', 0x1ff)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
ftruncate(r3, 0x108200)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r2], 0x1}, 0x1, 0x0, 0x0, 0x24008000}, 0x0)
ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

[  223.297015] SELinux: mls: truncated level
12:52:15 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/351], 0x15f)

[  223.385447] SELinux: mls: truncated level
12:52:15 executing program 1:
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/351], 0x15f)

12:52:15 executing program 4:
openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0x80000001}, {0x80000006}]}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x4, &(0x7f0000000200)=[{0x7, 0x7f, 0x19, 0x6}, {0xff66, 0x40, 0x8, 0xffff7fff}, {0xe3b, 0x4, 0x40, 0x7}, {0x6, 0x81, 0x1, 0x9}]}, 0x10)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0, <r2=>0x0}, &(0x7f0000000400)=0xc)
setuid(r2)
sendmmsg(r1, &(0x7f00000092c0), 0x0, 0x20040000)
setsockopt$inet6_int(r1, 0x29, 0x23, &(0x7f0000000000)=0x1f, 0x4)
r3 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'\x00\x80\x00', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$KEYCTL_MOVE(0x1e, 0x0, r3, 0x0, 0x1)
r4 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r3)
keyctl$describe(0x6, r4, &(0x7f0000000300)=""/155, 0x9b)
setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000140)={0x3, {{0xa, 0x4e22, 0xdb, @ipv4={[], [], @rand_addr=0x8}}}}, 0x48)

[  223.413689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=115 sclass=netlink_route_socket pig=9871 comm=syz-executor.3
[  223.460184] SELinux: mls: truncated level
12:52:15 executing program 1:
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/351], 0x15f)

[  223.519904] SELinux: mls: truncated level
12:52:16 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001900310e087b234cd872450ac255a7454b5dfe038b00000000000000ac1e0001000000000000000000000000fe80000000000000000000000000000100000000000000000a0022121c0a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0xb8}, 0x8}, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, <r4=>0x0}, &(0x7f0000000240)=0xc)
keyctl$chown(0x4, r2, 0x0, r4)
setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, r1, r4}, 0xc)

12:52:16 executing program 1:
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/351], 0x15f)

12:52:16 executing program 0:
sysinfo(&(0x7f0000000040)=""/22)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x318}, 0x0)
r0 = socket$inet(0x10, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00\x14\xea:\x01\x00\x00\x01', @ifru_flags=0x2})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x0, 0x0)
socket$unix(0x1, 0x2, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0)
fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x3691b56591ab163d)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x20032600)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000001c0))
syz_open_dev$evdev(0x0, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r3=>0xffffffffffffffff})
write$cgroup_int(r3, &(0x7f0000000180)=0x3, 0xffffffffffffff31)
ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000380))
write$P9_RMKNOD(r3, &(0x7f0000000040)={0x14, 0x13, 0x0, {0x0, 0x2}}, 0xfd95)
ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0)

12:52:16 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x5, 0x3, 0x2, 0x5}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0x1003d, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff})
write$cgroup_int(r0, &(0x7f0000000180)=0x3, 0xffffffffffffff31)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000380))
write$P9_RMKNOD(r0, &(0x7f0000000040)={0x14, 0x13, 0x0, {0x0, 0x2}}, 0xfd95)
recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/116, 0x74}, {&(0x7f0000000280)=""/12, 0xc}, {&(0x7f00000002c0)=""/58, 0x3a}, {&(0x7f0000000300)=""/10, 0xa}, {&(0x7f0000000340)=""/243, 0xf3}, {&(0x7f0000000440)=""/97, 0x61}], 0x7, &(0x7f0000000540)=""/113, 0x71}, 0x2041)
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000440)='fou\x00')
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in6, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8)
sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, r3, 0x4, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x67}, @FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20002010}, 0x10000004)
sendmsg$FOU_CMD_DEL(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, r3, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_PEER_V6={0x14, 0x9, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x50)

12:52:16 executing program 5:
eventfd2(0x0, 0x2000000000000002)
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0)
ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7)
ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0))
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PPPIOCDISCONN(r2, 0x7439)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6)
write(r2, &(0x7f00000001c0), 0xfffffef3)
setsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f00000003c0)=0x5, 0x4)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f00000002c0)=0xe8)
r4 = open(&(0x7f0000000140)='.\x00', 0x0, 0x4)
getdents(r4, &(0x7f0000000080)=""/36, 0x24)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags=0x6ac9e49cda8ac011})
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags=0x6ac9e49cda8ac011})
r7 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r7, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags=0x6ac9e49cda8ac011})
pipe(&(0x7f0000000100)={<r8=>0xffffffffffffffff})
write$cgroup_int(r8, &(0x7f0000000180)=0x3, 0xffffffffffffff31)
ioctl$TIOCGSID(r8, 0x5429, &(0x7f0000000380))
write$P9_RMKNOD(r8, &(0x7f0000000040)={0x14, 0x13, 0x0, {0x0, 0x2}}, 0xfd95)
r9 = accept4$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, &(0x7f0000000300)=0x10, 0x9cab1868894bf740)
getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@empty, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in=@dev}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000004180), 0x11f, 0x40000)
setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0)
r10 = dup(r3)
open(&(0x7f0000000240)='./bus\x00', 0x80000, 0xa)
syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0)
r11 = creat(&(0x7f0000000340)='./file0\x00', 0x0)
fsetxattr(r11, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0)
fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r12 = creat(&(0x7f0000000340)='./file0\x00', 0x0)
fsetxattr(r12, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2)
ioctl$EVIOCGABS0(r12, 0x80184540, &(0x7f0000000780)=""/114)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, 0x0, 0x0)
fcntl$dupfd(r2, 0x203, r13)
r14 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$inet6_tcp_int(r14, 0x6, 0x8, &(0x7f00000005c0)=0xfffffffffffffffe, 0xfffffffffffffe6d)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
accept(0xffffffffffffffff, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0)
setsockopt$inet6_tcp_int(r10, 0x6, 0x12, &(0x7f0000000380)=0x83, 0x1fb)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10)
r15 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0)
ftruncate(r15, 0x2007fff)
sendfile(r10, r15, 0x0, 0x8000fffffffe)

12:52:16 executing program 4:
pipe(&(0x7f00000013c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r2)
r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
truncate(&(0x7f00000000c0)='./bus\x00', 0xa00)
r4 = socket(0x200000100000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', <r5=>0x0})
bind$packet(r4, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @random="962c85e043d8"}, 0x14)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x0, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r3, 0x0, 0x2)
sendfile(r3, r6, 0x0, 0xfffffffffffffffc)
sendfile(r3, r6, 0x0, 0x8000fffffffe)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8005)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580))
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'})
r11 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
fstat(r11, &(0x7f0000000500))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket(0x200000100000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', <r14=>0x0})
bind$packet(r13, &(0x7f0000000100)={0x11, 0x0, r14, 0x1, 0x0, 0x6, @random="962c85e043d8"}, 0x14)
r15 = accept4$packet(r13, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000004c0)=0x14, 0x140000)
r16 = dup3(r15, r2, 0x0)
ioctl$EVIOCGNAME(r16, 0x80404506, &(0x7f0000001800)=""/151)
syz_genetlink_get_family_id$ipvs(&(0x7f0000001380)='IPVS\x00')
r17 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fallocate(r17, 0x0, 0x0, 0x8020003)
sendto(r16, 0x0, 0x0, 0x4000000, 0x0, 0x0)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
pipe(&(0x7f0000000200)={<r18=>0xffffffffffffffff})
r19 = socket$inet_udp(0x2, 0x2, 0x0)
close(r19)
splice(r18, 0x0, r19, 0x0, 0x2, 0x0)
ioctl$PPPIOCGNPMODE(r18, 0xc008744c, &(0x7f0000000380)={0x2b})
ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000180)=""/72)
ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000300))

12:52:16 executing program 1:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/351], 0x15f)

[  223.713554] SELinux: mls: truncated level
[  223.759951] SELinux: mls: truncated level
12:52:16 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0)
fchdir(r0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x810, 0xffffffffffffffff, 0xde72c000)
open(&(0x7f0000000040)='./file0\x00', 0x4490a0, 0x8601648d46422a7f)
flock(r1, 0x4)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x400040, 0x0)
symlinkat(&(0x7f0000000080)='./file2\x00', r2, &(0x7f00000000c0)='./file0\x00')
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
renameat(r3, &(0x7f0000000340)='./file0\x00', r3, &(0x7f00000003c0)='./file1\x00')

12:52:16 executing program 2:
pipe(&(0x7f0000000400)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0x8d, 0x4000000000000800, 0x1}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000040), &(0x7f00000001c0)}, 0x20)
vmsplice(r2, &(0x7f00000001c0), 0x3, 0xe)
read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r4 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x4003fe)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000040), &(0x7f00000001c0)}, 0x20)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5)
fchdir(r3)
r6 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100))
r7 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100)
io_setup(0x800, &(0x7f00000001c0)=<r8=>0x0)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
fchdir(r9)
io_cancel(r8, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x8, 0x3ff, r9, &(0x7f0000000600)="be6ce12496608bb8726747fc0246f5a93342d0dad3fca6660111758f176640f6603ab9113287837760ea23a50b6b5ebb1a752b266102842b634db387336c30fce4007ee80d7be7ed2c7174f466421ee0fbd2ee8afa936d50eac3a72a7952331020bd57912949269918b87cb29ea8ac19b358639722acf00488dcc54f3914b3b4d3bb981d4ed2818b3c993aa33ea8522178205809b42789c699ad66d94b0c7416670fd41f05817b0079465a17b590834e7aee936dbf6ff0664e98bf42431f3cfc78a00fbe3ac397f1273b", 0xca, 0x7}, &(0x7f0000000440))
write$FUSE_INIT(r6, &(0x7f0000000000)={0x50}, 0x50)
clone(0x2142001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
write$cgroup_type(r7, &(0x7f0000000200)='threaded\x00', 0x175d9189)
socket(0x0, 0x0, 0x0)
pwrite64(r7, &(0x7f0000000500)="8f2d0b68f901b970c304881a7c0f467deff28699261da94e9957dad1060779f40d1e3467fd794bd2c5cf3ecc8e4420c793a17a7765aa22b3095e1c46fd66e58902d4df88541abfb4e779ca0dbbe2fc73a7534fae7b5bb18856c761e6778b30f7cfdb4029adf3aefb013bfde2a6e3790147250f9a388b1a3104152bcaa5b78257bd6c31793a51178b8ee4e87cc3d6c0c450b8c5bbe8ca12fb4fa7a6029f95bdd9fe26ceea89b8fc2d6a849ff182267e4d4d510aebeacd16c5435783cccb6d288342325685bc2ee2d44c6e16c946", 0xcd, 0x0)

12:52:16 executing program 1:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/351], 0x15f)

12:52:16 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f0000000100)='wlan1\x00', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r2, 0x0)
r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
fdatasync(r3)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000280))
syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00*\x0e\xc3=.\x13\xcbx\x95*\xeeX\x9fcy\xa49\xf6\x8f\x82^\x19\xa9\xcd+\b\x9f\xc6,\xa0\xf0\xff\x9dO\x06\xc9\x15\xda\xa4\x7fh\xd4\xe8C\xdeKUrR\xf4\x9c\x87\xee\xd2\xfb\xdfs\xd0G\x91\x02\x15Z\xa8\x1ad\xadY\x13\x14mg\xc9\x00\x16\xa4\xc48\x06u\x1e:\xd4Y?\xd8P\xe8reP\xffv\xd6\x12\x85N1\n\f\xb0\x1e\xe7\xffD\x1aS\xbf0\x80\xff\xff7V\xcc5\x96W\x14J\xe2\x93\xe3\xc6A7\xd8\xec\xb2m\xf5\x16-\x1b\xbd\x11\x1aYg\xe0\xa7\xd19\a')
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')

[  223.965109] binder: 9905:9920 BC_INCREFS_DONE u0000000000000000 no match
[  223.975125] binder: 9905:9920 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  223.990183] binder: 9905:9920 got transaction to invalid handle
[  223.997131] binder: 9905:9920 transaction failed 29201/-22, size 0-0 line 3013
12:52:16 executing program 5:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x3d}, {0x80000006}]}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0xfffffdaf)
r2 = creat(&(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x5)
pipe(&(0x7f0000000100)={<r3=>0xffffffffffffffff})
write$cgroup_int(r3, &(0x7f0000000180)=0x3, 0xffffffffffffff31)
ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000380))
write$P9_RMKNOD(r3, &(0x7f0000000040)={0x14, 0x13, 0x0, {0x0, 0x2}}, 0xfd95)
setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f0000000100), 0x4)
fcntl$setstatus(r2, 0x4, 0x44700)
write$FUSE_LSEEK(r2, &(0x7f00000000c0)={0x18, 0x0, 0x3, {0x4}}, 0x18)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

12:52:16 executing program 1:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/351], 0x15f)

12:52:16 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x8, 0x80000, 0xfd)
setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000600)=0x209, 0xfffffffffffffdae)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x27, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = eventfd2(0x0, 0x0)
fcntl$dupfd(r3, 0x0, r4)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000140)=ANY=[], 0x0)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x10, 0x0, @loopback}, 0x1c)
shutdown(r2, 0x0)
r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
ftruncate(r5, 0x108200)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x480800, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
setsockopt$inet_mreqsrc(r5, 0x0, 0x25, 0x0, 0x328)
r7 = open(&(0x7f00000002c0)='./bus\x00', 0x40000141041, 0x402)
write$binfmt_misc(r7, &(0x7f0000000000)=ANY=[], 0x323)
syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00')
r8 = creat(&(0x7f0000000380)='./bus\x00', 0x159)
r9 = getpid()
sched_setscheduler(r9, 0x5, &(0x7f0000000040)=0xffff8001)
r10 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x7)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, 0x0, &(0x7f00000000c0))
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
write$FUSE_POLL(r7, &(0x7f0000000540)={0xffffffffffffffc0, 0x0, 0x1}, 0x18)
r11 = socket(0xb, 0x80002, 0xfc)
r12 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r12, 0x4, 0x6100)
ftruncate(r12, 0x108200)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r12, r13, 0x0, 0x8000fffffffe)
ioctl$sock_FIOGETOWN(r12, 0x8903, &(0x7f0000000100)=<r14=>0x0)
timer_create(0x1, &(0x7f0000000340)={0x0, 0x0, 0x0, @tid=r14}, &(0x7f00000003c0))
epoll_ctl$EPOLL_CTL_DEL(r8, 0x2, 0xffffffffffffffff)
bind$netlink(r11, &(0x7f0000177ff4)={0x10, 0x0, 0x1, 0x8001002}, 0xc)
connect$netlink(r11, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbff, 0xc84020}, 0xffffffffffffff8b)
write(r11, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
times(0x0)
connect$netlink(r11, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_int(r11, 0x1, 0x8, &(0x7f0000b4bffc), 0x4)
sendto(r11, &(0x7f0000000340), 0xfc, 0x800, 0x0, 0x66ec5a9e7b9e7dda)
recvmmsg(r11, &(0x7f0000000780), 0x2bb1f36c7597d46, 0x2, 0x0)
sendfile(r7, r10, &(0x7f0000000140), 0x8fff)

[  224.058501] SELinux: mls: truncated level
[  224.078105] SELinux: mls: truncated level
12:52:16 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140), 0xffffffaa}], 0x3}, 0x0)
clone(0x800007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="13d50f34"], 0x4}}, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYBLOB="27fb1299e4fd33090c7c495a519f5cbbc5b9c6fa040f000000000000f8cf9d024714eb9fc0ba87957bcd81c014c6187e5fc0f88a047fd5372ba53a646744b97095675a601c9c684a78bdca0e197f27a4a232e4218e53a4c1e08d34420f97a361e81f9fa352"], 0x0, 0x164}, 0x20)
tkill(r2, 0x3b)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r2, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
sendmmsg(r3, &(0x7f0000000880), 0x4000224, 0x0)

12:52:16 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/351], 0x15f)

12:52:16 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0\x00\x00\x00\f\x00', <r3=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@rand_addr="489592572ca0aed6de1b4bc6da12572c", 0x0, r3})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@IFLA_IPTUN_PROTO={0x8}]}}}]}, 0x38}}, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000940)=0x6)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000080035806b66d3f8be601b0000000000"], 0x28}}, 0x0)

[  224.557887] SELinux: mls: truncated level
[  224.742467] binder: 9905:9915 BC_INCREFS_DONE u0000000000000000 no match
[  224.751749] binder: 9905:9915 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  224.767125] binder: 9905:9915 got transaction to invalid handle
[  224.774354] binder: 9905:9915 transaction failed 29201/-22, size 13-0 line 3013
12:52:17 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/351], 0x15f)

12:52:17 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8)
r1 = socket$inet6(0xa, 0x2, 0x2)
r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
ioctl$FIGETBSZ(r2, 0x2, &(0x7f00000000c0))
setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000000)={0x7fffffff, {{0xa, 0x4e24, 0x0, @local, 0x67}}}, 0x88)
sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0)

12:52:17 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00'})
r1 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2fffffffe}, 0xc)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'veti1_do_veam\x11\x00', 0x6f36e38e7e09e0d2})
pipe(&(0x7f0000000100)={<r4=>0xffffffffffffffff})
write$cgroup_int(r4, &(0x7f0000000180)=0x3, 0xffffffffffffff31)
setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000240)={0x0, 0x1, 0x6, @broadcast}, 0x10)
r5 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="086310400000000000000000000000000000000010630840000000000000000000634040020000000000000000000000000000000000000000000000000000000800"/100], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
fadvise64(r5, 0xfffffffffffff000, 0x9, 0x2)
ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000380))
write$P9_RMKNOD(r4, &(0x7f0000000040)={0x14, 0x13, 0x0, {0x0, 0x2}}, 0xfd95)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x92dfdf4d62a3d285, 0x0)
r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7)
ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7)
ioctl$LOOP_CTL_ADD(r4, 0x4c80, r7)

[  224.960624] SELinux: mls: truncated level
[  224.980435] binder: 9980:9986 BC_INCREFS_DONE u0000000000000000 no match
[  224.988343] binder: 9980:9986 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  224.996052] binder: 9980:9986 got transaction to invalid handle
[  225.002656] binder: 9980:9986 transaction failed 29201/-22, size 0-0 line 3013
[  225.014914] binder: 9980:9990 BC_INCREFS_DONE u0000000000000000 no match
[  225.022575] binder: 9980:9990 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  225.030644] binder: 9980:9990 got transaction to invalid handle
[  225.038601] binder: 9980:9990 transaction failed 29201/-22, size 0-0 line 3013
12:52:17 executing program 4:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
writev(r3, &(0x7f0000000200)=[{&(0x7f0000000240)="580000001400add427323b470c458c560a06", 0x12}], 0x1)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_RX_RING(r4, 0x10e, 0x6, &(0x7f0000000040)={0x7, 0x8001, 0xfffffff7, 0x4}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

12:52:17 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000500))
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x200000000038)
ptrace$cont(0x18, r1, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r1, 0x0, 0x0)
r2 = syz_open_procfs(r1, &(0x7f0000000580)='o\x00M\xd5\xb4\x13@\x06ldX\x15\x00\x00\x00\x00\x00\x00\x00')
readv(r2, 0x0, 0x0)
ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0xd432})
pipe(0x0)
r4 = accept$unix(r2, &(0x7f0000000440), &(0x7f00000003c0)=0x6e)
read(r4, &(0x7f0000000200)=""/250, 0x50c7e49e)
pipe(0x0)
syz_open_dev$loop(0x0, 0x0, 0x51d00)
write(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f00000001c0))
r5 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="086310400000000000000000000000000000000010630840000000000000000000634040020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a9520048b757ba1ac4b03705512a1d7d453a4ac44bf58e8b52798fefa04a905d16b476e04493e60c02ff37a1017b56ddee8c2b53"], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
fstat(r5, &(0x7f0000000300))
sendmsg(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000640)="24000000210007021dfdfd946f61", 0xe}], 0x1}, 0x0)
setitimer(0x1, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
write(r7, &(0x7f00000001c0), 0xfffffef3)
read(r6, &(0x7f0000000200)=""/250, 0x50c7e5e2)
r8 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
r9 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0)
dup2(r9, r3)
sendfile(r7, r8, 0x0, 0x80000001)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='net/icmp\x00')
r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x185000, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000380)={@local, 0x1b527a84, 0x2, 0xff, 0x19, 0x9, 0x9}, 0x20)

12:52:17 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev}, 0x1c)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001440)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000000)={0x7}, 0x4)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
r4 = geteuid()
r5 = geteuid()
sendmsg$nl_generic(r3, &(0x7f0000001400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000013c0)={&(0x7f00000001c0)={0x11d8, 0x22, 0x2, 0x70bd27, 0x25dfdbff, {0x15}, [@nested={0x198, 0x22, [@generic="d3504a9addc46c5d935decb29780ef86df0d2ad78ff6c40e60b11bc861af95ed1594d98c8657f21760172e59e14e5d6cfaffecf8326972734b56a35db6d3e3d41f6718cd8f6e412ba352c6970d55ce2fa2f99a245a26417fe72508542ddbb9cd0b6afbcf1468de178405485d52ab4f43b3b6740fa1c3e1e359689b06878b42fd8cce1d2e470fd81f56bdc6c86f5773b8f8cabf725371ed07f03402266ec7ac54879828d933f8", @typed={0x8, 0x2d, @u32=0xbbd0}, @typed={0x8, 0x5b, @uid=r4}, @generic="68fbbbb39d4ab9ff82d88442b683d9a35e14c6b98133d7b45772dd0455813b8a5d8055aba427c92051fe2a67e0f12871cc607826408877f0d3643f1509cc07da384a9d97a56a6ad36f6b2479579f4cfb3bc1133d7dfc2ec036b7faa579f409f2c6a07ac8e05893d89ed6828da36512447b123d3046aed94f4e2f0153681baee78141eb9b2908b10aede3edb649aefdf07a807150708f667a0d62480ac113ac785edc69ae5f839fda81d6b927c49819039b98fc6c8aa3d04a71428a8b3d3c7f80c2f76c41005c81b909e25c478824d7e308b0978b21be7b1129d3bb"]}, @nested={0x102c, 0x63, [@typed={0x8, 0x6d, @ipv4=@rand_addr=0x2}, @generic="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", @typed={0x4, 0x47}, @typed={0x8, 0x1f, @u32=0x9}, @typed={0xc, 0x84, @str='^md5sum\x00'}, @typed={0x8, 0x6f, @uid=r5}]}]}, 0x11d8}, 0x1, 0x0, 0x0, 0x10}, 0x1)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0)
pipe2(&(0x7f0000000180), 0x800)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet(0x2, 0x2, 0x0)
creat(0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_genetlink_get_family_id$team(&(0x7f0000000240)='team\x00')
r7 = open(&(0x7f0000000400)='./bus\x00', 0x40, 0x40)
getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r8})
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000080)={@mcast2, r8}, 0x14)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@local, @loopback, r8}, 0xc)
r9 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r9, r9, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r10})
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000080)={@mcast2, r10}, 0x14)
setsockopt$inet_mreqn(r7, 0x0, 0x24, &(0x7f0000000040)={@multicast2, @multicast2, r10}, 0xc)
sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x17100010}, 0xc, &(0x7f0000000340)={&(0x7f0000001480)=ANY=[@ANYBLOB="c0020000", @ANYRESHEX, @ANYBLOB="000128bd7000fedbdf250200000008000100", @ANYRES32, @ANYBLOB="9000020040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000100004006c6f616462616c616e6365004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000001c000400ff7f0102020000000500000700000000abed021f0000000008000100", @ANYRES32, @ANYBLOB="4400020040000100240001006d6f646500000000000000000000000000000000000000000000000000000000080003000500000010000400726f756e64726f62696e000008000100", @ANYRES32=r8, @ANYBLOB="b800020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040004000000080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004005b4800003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYBLOB="12", @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="000102004000017bc20001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000100004006c6f616462716c010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004002bdb000008000600"/128, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000000000044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000001400040080000202008000000600070601000080"], 0xe}, 0x1, 0x0, 0x0, 0x40}, 0x8000)
getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000200)={{{@in=@loopback, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000300)=0xe8)
pipe2(&(0x7f0000000140), 0x0)

12:52:17 executing program 2:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0x20, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2}, 0x1c)
r2 = fcntl$dupfd(r0, 0x406, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0)
r4 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0863104000000000000000000000000000000000100000002c257c224883dea9d027bc19000000db638af5fdffffffffff0000f6000000dfe3964bfd6cebbc000000000000000000000000001e0000000000020000000000000800000000000000000000050000000000005492fa453382c8c3f4cebf7dfae507019636e878974eda97d63ae386e1b67caabe31e4a2efb99725c343b42acad7a620719a0db7d90e4e44063d9203fd777e8cb15400862e268159"], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
dup2(0xffffffffffffffff, r4)
socket$inet6_udplite(0xa, 0x2, 0x88)
fchdir(r3)
open(&(0x7f00000000c0)='./bus\x00', 0x81, 0x48)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x20000)
fremovexattr(r3, &(0x7f0000000180)=@known='user.syz\x00')
fstat(r1, &(0x7f0000000100))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

12:52:17 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781500000000f601000800000007000000402c11000000000009000007000000000000000000000000385a580000000000000900000000000000010000000000000000000000ffffffff00000000000009593c88ff3ed359b6b342a5b31b628ee1bdff739b75074dc6a56b02e8864fe848c3040b8fe9058ea0150f5eedef22701042f06294212113a6e87c4ec8a30c6f553b606f1924da2ae7188a0128aaa01f9cd143f86ce937ef47acf189830bf6267accf14631e3f252ce20e35481223e952072de05debead9febde60b4e996e07fced76b0b1d32e6fd7d647529b9bbafef5ae615999a6b8361eace52f4be6e4867e61d51e3b7dfa25fee5f16f35e63fa9d41d1932cc8f94368890372975d6432d8e12ad6921b935a4e671c0f5963bb6039b5dec1f69a4d5d69f80065a24793637e3423c8597501fc32edb597da5cfcd1dd00"/351], 0x15f)

12:52:17 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812})
io_setup(0x20000000002, &(0x7f0000000240)=<r4=>0x0)
io_submit(r4, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}])
dup3(r2, r3, 0x0)
ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000140)={0x806f, 0x2})
ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
r7 = dup3(r5, r6, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}])

12:52:17 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/351], 0x15f)

12:52:17 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
write$P9_RWALK(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='\t'], 0x1)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000740)={{0x108, 0x4, 0xff, 0x233, 0x3db, 0x6, 0x2d3, 0x4}, "658ab67c9f8acfa82f4f33f82440b82da50e8a084f3f87e1ec79b37c386e8f10f8948be532e1d5aef1930087949ed5a1d83bf8b79034ddb45496cef52ea65e455aa153a489a020ebcc92d6801a50ffe0e05b6fcb646846f4da5ee71165b9d6f9f9da3b3f39e12e470d35032e5634fe0000b746c31d97965f57bf08af5be8bb8cafc342ae04954f3ef30c7ed5ff320c3c7f9ebbf6a7272b8de2e1be42fe8fdd2aeaf569b0857cba9e8433a1b8ea47603d806dfea7809faf37dbe405e84ca963e19f68fedaa2304549caeb543684106ccca7304bda89f843e851bb65d83a185048ad36b3021f37d19ab24cb936f24e", [[], [], [], [], [], []]}, 0x70e)
ioprio_set$pid(0x1, 0x0, 0x800004000)
syncfs(r1)

[  225.179860] binder: 9998:10006 BC_INCREFS_DONE u0000000000000000 no match
[  225.180292] SELinux: mls: truncated level
[  225.218283] binder: 9998:10006 BC_DEAD_BINDER_DONE 0000000000000000 not found
12:52:17 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/351], 0x15f)

12:52:17 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f00000001c0)={0x0, 0xfb, 0xfffffe65, 0x2, 0xf, "115b0e00000000006a7300", "668e24526ed99a4f82235d872988f85c7463a062b7c972919ddaed4e6284dab437cc196862181b5dff77516eda65177800"}, 0x46, 0x7)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ioctl$RTC_UIE_OFF(r1, 0x7004)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x323)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r2, &(0x7f0000000140), 0x8fff)
lseek(r1, 0x800002, 0x0)
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x200000000038)
ptrace$cont(0x18, r3, 0x0, 0x0)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r3, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000400)=ANY=[@ANYRES16=r3, @ANYRES16, @ANYPTR=&(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYBLOB="f450c3b0b353b74c7ec61ef8e7e00ce6a19e2644ab7638bb27a91ec4b8bcd2cb82c97edb84dfc2c07dc088063266dd0585992a93aaa6a11d4e9befd6eac941b9f083d959da5b8b23d71574f92c4795335b5721dbecd529cc3a1ca5bf5ce922b681216ac865796282959c0f6f1e8a6759481a1bc923323924710906099afa473cfc70b50a9f7585b0358ccb81d6d685e6948e3e324962df00a809dbd0db2392b6109c00ed5bf92406d66acf8eea544a4bed43672a74bf9325"], @ANYRES64=0x0, @ANYRESOCT], 0x2b)
r4 = open(&(0x7f00000000c0)='./bus\x00', 0x14102e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x180000f, 0x11, r4, 0x0)
r5 = open(&(0x7f0000000080)='./bus\x00', 0x200, 0x10)
fsetxattr$smack_xattr_label(r5, &(0x7f0000000100)='security.SMACK64MMAP\x00', &(0x7f0000000280)={'trusted.overlay.upper\x00'}, 0x17, 0x2)

[  225.226246] SELinux: mls: truncated level
12:52:17 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x84102, 0x0)
ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f00000000c0))
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0)
dup(0xffffffffffffffff)
mknodat(r5, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
ioctl$sock_ifreq(r2, 0x8937, &(0x7f0000000340)={'bcsh0\x00', @ifru_addrs=@nfc={0x27, 0x1, 0x2, 0x5}})
renameat2(r5, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r5, &(0x7f0000000280)='./file0\x00', 0x2)
renameat2(r5, 0x0, r5, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2)
ioctl$sock_SIOCBRDELBR(r5, 0x89a1, &(0x7f0000000240)='irlan0\x00')
fcntl$dupfd(r3, 0x0, r4)
r6 = creat(&(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x5)
fcntl$setstatus(r6, 0x4, 0x44700)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f0000000380)={{0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, [], 0x15}, 0x4}, {0xa, 0x4e21, 0xd7f, @mcast1}, 0x5, [0x9, 0xfffffff7, 0x3, 0x3ff, 0x400, 0xff, 0x8d, 0x8]}, 0x5c)
r7 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
sync_file_range(r7, 0x8, 0x6, 0x2)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0/file0\x00', 0x0, 0x10}, 0x10)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x2, r8}]]}}}]}, 0x40}}, 0x0)

12:52:17 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x7fffffff, 0x4)
bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
recvmmsg(r0, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r1 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0)
mknodat(r1, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
renameat2(r1, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000280)='./file0\x00', 0x2)
renameat2(r1, 0x0, r1, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2)
r2 = creat(&(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x5)
fcntl$setstatus(r2, 0x4, 0x44700)
sendmmsg(r2, &(0x7f0000000ac0)=[{{&(0x7f00000004c0)=@in6={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8001}, 0x80, &(0x7f0000000580)=[{&(0x7f00000003c0)="ee460104d851093c8f998a88ed9b5d2c458d85a8dd13c1acc26a8f80e4ea65a4aa2286822d6f39695bd6", 0x2a}], 0x1, &(0x7f0000000740), 0x6c}}, {{&(0x7f0000000800)=@in={0x2, 0x4e20, @multicast2}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000880)=[{0x10, 0x84, 0x1ff}, {0x108, 0x113, 0x6, "e7355f2511cc6bdea8ff0f6f001d0f2d4bb05e24c8f2d20a97789963f1ae3c20be6fbfd15bbb14ab52870bf86db32960eb291dd307aa460ff59c8b5971ba20bbacac48cde3c2ba3da760c018b7b088f80c7eeafd53c3ddb753507b19bc8ad5a20a135e2eeee609ce585e5ad8519e55e30bd1df68af32f1c403c5b0662f38ae0812c02b724a566a8c484420b168f11cc30b7a2f2dc6020b8a4e83f7b22c8ee9cd59fc0f5505e4aa5f6fa9cbffeab1f3154fdf0159601f90ff19ca77ad77b3ec151dfca5ad49a75e906adf2964a0772896c049f88134a145b0af3d2197281c5e00337fe20c6d4df0ed35a82d3832b5cd60fb"}, {0xf8, 0x0, 0x98, "07237a37041dd767d8d2470d680c3100c3c8f351bbb50a29f55647223791fa6d02e268d2068d0e412d1422492701852e8e300c83dc3d130957aa9d6a9b63c6e858ffc06a61e8212b20d5bb9b269fb8cc12862013b74a6837a3fc13ecb61698060062973af6072eb8977ffe9225b91b645a56f4f1e93d4c74f0ebe21f619ae972dc27437f69fe24f534dbced7c47272d1beb893f37865d595d0d998fb82ae7c879b8da8b83c26a17a04c09bbbd57ed9ec175ac61d8d5fbda89555d7d9bc57c8aabaa8237903e9338268fc566db65d75fd807ff8952081d330b70aeb4c74b66d38ffff86b25322"}], 0x210}}], 0x2, 0x50)
ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000080)={'bpq0\x00', 0x7fff})
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r5 = creat(&(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x5)
fcntl$setstatus(r5, 0x4, 0x44700)
sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="20000000220000002abd7000fddbdf250a00140287001c0001ef000002000000fce84390c8b5e2c79196ffe00693c012ab29a1f35642e8f08ad33b5f752c9e4cd05eaf9d64bb9687d39305001bcb8d7ac0d4746084269ff4e575ca7b238b127a6ab545f4bd54de63397a6828fa5216fd5faf817341f50664ba5c922f9934ce7dad4d6e87238e4bd47ed9f3a55173344a1376bcc33bd54fef120f880c46efbcc00f40dc8b205ed5bc0b"], 0x20}}, 0x80)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000100005070085ce5decde054feb000000", @ANYRES32=0x0, @ANYBLOB="000000000000000018001200080001007674690002000200"], 0x38}}, 0x0)

[  225.256944] binder: 9998:10006 got transaction to invalid handle
[  225.268271] SELinux: mls: truncated level
[  225.291401] audit: type=1400 audit(1574513537.593:73): avc:  denied  { setopt } for  pid=9998 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
[  225.307846] binder: 9999:10009 BC_INCREFS_DONE u0000000000000000 no match
[  225.307853] binder: 9999:10009 unknown command 16
[  225.307861] binder: 9999:10009 ioctl c0306201 200002c0 returned -22
[  225.325171] binder: 9998:10006 transaction failed 29201/-22, size 0-0 line 3013
[  225.333492] audit: type=1400 audit(1574513537.643:74): avc:  denied  { net_broadcast } for  pid=10033 comm="syz-executor.5" capability=11  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[  225.358122] binder: 10029:10035 BC_INCREFS_DONE u0000000000000000 no match
[  225.358131] binder: 10029:10035 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  225.358141] binder: 10029:10035 got transaction to invalid handle
[  225.358152] binder: 10029:10035 transaction failed 29201/-22, size 0-0 line 3013
[  225.473677] nla_parse: 5 callbacks suppressed
[  225.473690] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
[  225.482073] binder: 10029:10035 BC_INCREFS_DONE u0000000000000000 no match
[  225.482081] binder: 10029:10035 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  225.482091] binder: 10029:10035 got transaction to invalid handle
[  225.482100] binder: 10029:10035 transaction failed 29201/-22, size 0-0 line 3013
12:52:18 executing program 0:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit(0x0)
r0 = getpid()
rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000001c0))
ptrace(0x10, r0)
ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000280)={&(0x7f0000004540)=""/4096, 0x1000})
r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
sendfile(r1, r2, 0x0, 0x8)
ptrace$getregs(0xe, r0, 0x0, &(0x7f0000000000)=""/3)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2c2)
ioctl$RTC_UIE_OFF(r3, 0x7004)

12:52:18 executing program 2:
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
setns(r0, 0x2040000)
fchdir(r2)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0)
ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000800)={0x2, 0x0, {0x0, 0x2d, 0x0, 0x1f, 0xb, 0x64, 0x2}})
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x4000080)
openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/attr/exec\x00', 0x2, 0x0)
r4 = open(&(0x7f0000000480)='./bus\x00', 0x141046, 0x10)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00E8\xddV\x82li\x1d/y6\xa2\xea\xff7\xcaz\xb1\x04\xa5\x14[\x1d+5B\\q.\x11\x91Y\xe0\xcb\xc5.$\x13h\xac\x89\xca\x86\x11\x03\x1c\x9d\x06KB\x05,\x84>\x84i\x10\x96\xf1BC\xb31\x7f\x96\x7f\x82\"2\x00\x00\x00\x00\x00')
r6 = socket(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000780)=ANY=[@ANYBLOB="d2218924a99e6430837f5f192e1e925fceabafc841cb9635568f21bf63eea80b840c96334bfc51cc3818a02278976feacab9cda285c9c22474fc9cf7d440bfedc9ccfb32b1f836e5aab53a096da1a36810dfd7d8364d666676fd"]})
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000004c0)={'netdevsim0\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="680000000008000006000000ff014011067f05018000000040000000ff07016400080000305b8000050000009426249c2628c26c8d4968dd289eda"]})
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101})
linkat(r5, &(0x7f0000000080)='./bus\x00', r1, &(0x7f0000000300)='./bus\x00', 0x400)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000940))
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000580))
ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000300)=ANY=[])
sendmsg$TIPC_NL_BEARER_ADD(r4, 0x0, 0x24000894)
sched_setparam(0x0, &(0x7f0000000500)=0xfffd)
stat(&(0x7f0000000880)='./bus/../file0\x00', &(0x7f0000000680))
lsetxattr$security_capability(&(0x7f00000005c0)='./bus\x00', &(0x7f0000000600)='security.capability\x00', &(0x7f0000000740)=@v2={0x2000000, [{0x2, 0x4}, {0x6, 0x21}]}, 0x14, 0x0)
r7 = socket(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_gstrings={0x1b, 0x5}})
getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000a80)={{{@in=@broadcast, @in=@multicast1}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000700)=0xe8)
r8 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r8, 0x4, 0x6100)
r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
write$FUSE_INIT(r9, &(0x7f00000003c0)={0x50, 0xfffffffffffffffe, 0xb, {0x7, 0x1f, 0x0, 0x40404, 0x1a27, 0x0, 0x8, 0x4}}, 0x50)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
write$cgroup_type(r8, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$TIOCGSID(r8, 0x5429, &(0x7f0000000540))
ptrace$cont(0x18, 0x0, 0x0, 0x0)

12:52:18 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/351], 0x15f)

12:52:18 executing program 3:
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0xc00)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfb120eb7)
ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0)
read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
write$cgroup_type(r2, 0x0, 0x0)
syz_open_pts(r2, 0xb91280)
r3 = creat(&(0x7f0000000080)='./bus\x00', 0x20)
getpeername$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000003c0)='security.ima\x00', &(0x7f0000000440)=@sha1={0x1, "f6c22f460365f9360c48948b1b0b911ab5185102"}, 0x15, 0x2)
open(&(0x7f0000000380)='./bus\x00', 0x6015fe683ab85867, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4)
ioctl$FIBMAP(r1, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @rand_addr=0x5}, 0x10)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(r4, &(0x7f0000004b00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)="9033877ace25a0cd47de5752f2fe725302f5297240df794a3f9e8efd1c159b2bb4cfdc71f2cd4ccab950100494", 0x2d}, {&(0x7f0000001c40)}, {&(0x7f00000002c0)="f7fc370763ed7a4dbfaf549cd1dc94c047d2bfd2da573ebddcf5db435637f045346375f1b75c21a0106605fa2c283aaa0014062099dc4b58d700b3a07dbc83010c24cb730b30aee0103d81b75a4f6ce90dd0237bd4b22d66e959", 0x5a}, {0x0}], 0x4}}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000b40)}, {0x0}, {&(0x7f0000000f40)="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", 0x358}], 0x3}}], 0x2, 0x80)
sendto$inet(r4, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x13)
read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e5e2)

12:52:18 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)="f4"})
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0xe54, 0x3, 0x9, 0x3ff, 0x7})
tkill(r0, 0x1000000000013)
execveat(0xffffffffffffffff, &(0x7f00000000c0)='\x00', 0x0, 0x0, 0x1000)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$sock(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="81e3228fc7dbbe9c6a5a1135f05b7ddfff5ee1b90a6cbb19fdd5f2ab42dfd6b362d2f339332f276dbfafc0f995d3e24ee2b06dc4440197c47ca53bf481c994b811c17ff971a4372414681bbd3aa4835153e9621e25b1e10a9428308ae98fb592703baaae499990b5bcde7692549343f0bcd0274bc395b3a267f8f552145e0e0a9738f2ed4a64d86aa7555bf87a391c5c2a3c7750be51b4da9dd02cabf2e843411ddab2f856cc0c7179170feac477c042c7d099aaa8c437707249c8e5a4bcb56ec8acd1bde1ffadd5fd0d39477858528fca56d45a", 0xd4}], 0x1, &(0x7f0000000100)=[@mark={{0x14, 0x1, 0x24, 0x8}}], 0x18}, 0x8000)

12:52:18 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781500000000f601000800000007000000402c11000000000009000007000000000000000000000000385a580000000000000900000000000000010000000000000000000000ffffffff00000000000009593c88ff3ed359b6b342a5b31b628ee1bdff739b75074dc6a56b02e8864fe848c3040b8fe9058ea0150f5eedef22701042f06294212113a6e87c4ec8a30c6f553b606f1924da2ae7188a0128aaa01f9cd143f86ce937ef47acf189830bf6267accf14631e3f252ce20e35481223e952072de05debead9febde60b4e996e07fced76b0b1d32e6fd7d647529b9bbafef5ae615999a6b8361eace52f4be6e4867e61d51e3b7dfa25fee5f16f35e63fa9d41d1932cc8f94368890372975d6432d8e12ad6921b935a4e671c0f5963bb6039b5dec1f69a4d5d69f80065a24793637e3423c8597501fc32edb597da5cfcd1dd00"/351], 0x15f)

12:52:18 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/351], 0x15f)

12:52:18 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781500000000f601000800000007000000402c11000000000009000007000000000000000000000000385a580000000000000900000000000000010000000000000000000000ffffffff00000000000009593c88ff3ed359b6b342a5b31b628ee1bdff739b75074dc6a56b02e8864fe848c3040b8fe9058ea0150f5eedef22701042f06294212113a6e87c4ec8a30c6f553b606f1924da2ae7188a0128aaa01f9cd143f86ce937ef47acf189830bf6267accf14631e3f252ce20e35481223e952072de05debead9febde60b4e996e07fced76b0b1d32e6fd7d647529b9bbafef5ae615999a6b8361eace52f4be6e4867e61d51e3b7dfa25fee5f16f35e63fa9d41d1932cc8f94368890372975d6432d8e12ad6921b935a4e671c0f5963bb6039b5dec1f69a4d5d69f80065a24793637e3423c8597501fc32edb597da5cfcd1dd00"/351], 0x15f)

[  225.998622] SELinux: mls: truncated level
[  226.003525] binder: 10049:10051 ioctl 40046205 0 returned -22
[  226.018802] SELinux: mls: truncated level
[  226.031162] SELinux: mls: truncated level
12:52:18 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781500000000f601000800000007000000402c11000000000009000007000000000000000000000000385a580000000000000900000000000000010000000000000000000000ffffffff00000000000009593c88ff3ed359b6b342a5b31b628ee1bdff739b75074dc6a56b02e8864fe848c3040b8fe9058ea0150f5eedef22701042f06294212113a6e87c4ec8a30c6f553b606f1924da2ae7188a0128aaa01f9cd143f86ce937ef47acf189830bf6267accf14631e3f252ce20e35481223e952072de05debead9febde60b4e996e07fced76b0b1d32e6fd7d647529b9bbafef5ae615999a6b8361eace52f4be6e4867e61d51e3b7dfa25fee5f16f35e63fa9d41d1932cc8f94368890372975d6432d8e12ad6921b935a4e671c0f5963bb6039b5dec1f69a4d5d69f80065a24793637e3423c8597501fc32edb597da5cfcd1dd00"/351], 0x15f)

[  226.046576] SELinux: mls: truncated level
[  226.056243] binder: 10042:10061 BC_INCREFS_DONE u0000000000000000 no match
[  226.072552] binder: 10042:10061 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  226.081833] binder: 10049:10062 ioctl 40046205 0 returned -22
[  226.089719] SELinux: mls: truncated level
12:52:18 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781500000000f601000800000007000000402c11000000000009000007000000000000000000000000385a580000000000000900000000000000010000000000000000000000ffffffff00000000000009593c88ff3ed359b6b342a5b31b628ee1bdff739b75074dc6a56b02e8864fe848c3040b8fe9058ea0150f5eedef22701042f06294212113a6e87c4ec8a30c6f553b606f1924da2ae7188a0128aaa01f9cd143f86ce937ef47acf189830bf6267accf14631e3f252ce20e35481223e952072de05debead9febde60b4e996e07fced76b0b1d32e6fd7d647529b9bbafef5ae615999a6b8361eace52f4be6e4867e61d51e3b7dfa25fee5f16f35e63fa9d41d1932cc8f94368890372975d6432d8e12ad6921b935a4e671c0f5963bb6039b5dec1f69a4d5d69f80065a24793637e3423c8597501fc32edb597da5cfcd1dd00"/351], 0x15f)

12:52:18 executing program 4:
eventfd2(0x0, 0x2000000000000002)
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000740)='licy\x00', 0x0, 0x0)
ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7)
ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0))
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PPPIOCDISCONN(r2, 0x7439)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6)
write(r2, &(0x7f00000001c0), 0xfffffef3)
setsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f00000003c0)=0x5, 0x4)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f00000001c0)=0xfffffffffffffd72)
open(&(0x7f0000000140)='.\x00', 0x0, 0x4)
socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x8943, &(0x7f0000000080)={'sit0\x00', @ifru_flags=0x400})
ioctl$sock_ifreq(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags=0x6ac9e49cda8ac011})
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r4, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags=0x6ac9e49cda8ac011})
getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000880)={{{@in=@empty, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in=@dev}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000004180), 0x11f, 0x40000)
setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0)
r5 = dup(r3)
open(&(0x7f0000000240)='./bus\x00', 0x80000, 0xa)
syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0)
r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0)
fsetxattr(r6, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0)
fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0)
fsetxattr(r7, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2)
ioctl$EVIOCGABS0(r7, 0x80184540, &(0x7f0000000780)=""/114)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, 0x0, 0x0)
fcntl$dupfd(r2, 0x203, r8)
r9 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$inet6_tcp_int(r9, 0x6, 0x8, &(0x7f00000005c0)=0xfffffffffffffffe, 0xfffffffffffffe6d)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
accept(0xffffffffffffffff, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[]}}, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000380)=0x83, 0x1fb)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10)
r10 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0)
ftruncate(r10, 0x2007fff)
sendfile(r5, r10, 0x0, 0x8000fffffffe)

[  226.099606] binder: 10042:10061 got transaction to invalid handle
[  226.109522] binder: 10042:10068 BC_INCREFS_DONE u0000000000000000 no match
12:52:18 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000500)='\x00\xaeC\xae\xc4\x05\xa9\xbd~\xfb\xd3\x81\xff\x9c\xf1\xcc\xfe:4\x01\x01\x01\x00w\xa7\x04~\\\xd4Y\x04\xaf^\xc6\xf2\x98\"\xa0\xa1\x04\xaf\x81\x00ov<ie\xf3x\xfe[\x90\xe0\xaft\xaf\xc6\x06\x13\x1c(\x052\x9c\x15G\xf9@i\xd9\xb2\x96ef\x98XL\xe5\xb0\xc6\xac\xcb\x19\xf2\xba25v\xb2-\xc7g\tM\x04_R\x93\x1be\x8f\xacGxWc\xee[\xc0\xe6\xdc\xcc\x8dT[\x85\xb4\xa4@\t\xb3\x1f\b\x9c\xf9\x8d\x9d\x92YJ$\x89\xaa\xcfQ[\xe3\"\xf3\xd1\xd8\xbe\x9c#Hpc\xdc@7N\xf4\xee\xfdQ\x1b\xd5\x15\xda\xa4\xfcJ\x7fKC\xa1[\xe4\xc8f|\xe9\xef|\x1b\xf0d\xf0\x89\x1aM\x8b\xc3I&)\xc1\x8a\xc6\x11\x84&3\x02\x88g\xb7\xe3[E\x90\x95=\x8e7\x90\xa8,\x16~\x9c\xa1m\xf4F\xfb\x05\x82\x05\'1Q\xe5s\x8f\x13\xfe\xd3Zw\xf4e\xb9*\xcdgBY\xac\x83\xf8\xf9\xf0\xcc\"\xb4\xf4\xa7\'\x98\x1fg@\xbe|\xa72\xbf\vb\xc8y\x9b{\xfc?\x87\x9e\x16\'\'\xbe\xe6B\x9c\x01k\xe1\xa8\\\n\xcd.\xc14O\n\xbb\x14,\xc5\xa1\x1e\x9a\x03jUr\xca\xdb')
openat$cgroup_ro(r0, &(0x7f0000000000)='mem\x00\x01y/\x06\xea\xe847G\xa8\xff\xff\x15\xd4B\xab\xe3\xfa', 0x0, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
preadv(r1, &(0x7f0000000080), 0x0, 0x2000107c)
clone(0x20986100, 0x0, 0x0, 0x0, &(0x7f0000000100)="d353ff072d68b2e4dc14aa5fa8b3d94c22")
r2 = creat(&(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x5)
r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x54, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="076304400100000001634040000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000680)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f0000000300)=ANY=[@ANYBLOB='\x00'/90], @ANYBLOB="5a0000000000000001000000000000003f20000000000000852a747001000000", @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000000000000009243cf23e9e2df216a26887e15e907b5920274aa118b74d51bf2165343210391f7ccd16a69f7378f3ea12482144896991e441a1f3163"], @ANYBLOB="000000000000000000000000000000003c00000000000000852a646600000000", @ANYRES32=r3, @ANYBLOB='\x00'/12], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000002800000000000000bffeffffffffffff"], @ANYBLOB="05630440000000000d630000"], 0x125, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
ioctl(r3, 0xd3c, &(0x7f00000000c0)="6b8a04019ffb43e4bd512e40255363a3f370c9f11ab92a62151d710b2d0677ee2dd69a222b14")
fcntl$setstatus(r2, 0x4, 0x44700)
ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000040))

[  226.131390] SELinux: mls: truncated level
[  226.134398] binder: 10042:10061 transaction failed 29201/-22, size 0-0 line 3013
[  226.158638] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
[  226.213923] binder: 10079:10081 BC_INCREFS_DONE u0000000000000000 no match
[  226.213931] binder: 10079:10081 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  226.213941] binder: 10079:10081 got transaction to invalid handle
[  226.213950] binder: 10079:10081 transaction failed 29201/-22, size 0-0 line 3013
[  226.268486] binder: 10079:10084 DecRefs 0 refcount change on invalid ref 1 ret -22
[  226.268495] binder: 10079:10084 got reply transaction with no transaction stack
[  226.268503] binder: 10079:10084 transaction failed 29201/-71, size 96-24 line 2921
[  226.269147] binder: 10079:10084 ioctl d3c 200000c0 returned -22
[  226.428070] binder: 10042:10068 unknown command 0
[  226.433977] binder: 10042:10068 ioctl c0306201 200002c0 returned -22
12:52:19 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/351], 0x15f)

12:52:19 executing program 2:
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000001600)={0x0, 0x8000, 0x0, 0x101, 0x9, 0x31aa})
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0xd432})
pipe(0x0)
read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3)
pipe(0x0)
syz_open_dev$loop(0x0, 0x3, 0x51d00)
pipe(&(0x7f00000001c0))
ftruncate(0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', <r1=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001500)=[&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, &(0x7f0000001400)="70b5b9a4f6fe8eb1a832413ffa4254a19acfadb588c557c43e66f2610bb66a84514748c74b14dad908ff451a91b7c3ee7b420f7582559783c6a4ad20589781f812ca27e37981f8301493520b58c60e0e0e0d647acf9e7c3265236ed5ea57a85f9540ab731684ca4d1749414724a4f5d6d280b9fb8561f3b5b2d112474528817ce13bc33be43762f2c2c7d7120646", 0x8e, 0x3ff}])
fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f0000001640)='security.SMACK64TRANSMUTE\x00', &(0x7f00000013c0)='TRUE', 0x4, 0x0)
setitimer(0x1, &(0x7f00000000c0)={{}, {0x0, 0x2710}}, 0x0)
pipe(&(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xfffffef3)
read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, <r4=>0x0})
r5 = syz_open_procfs(r4, &(0x7f0000000040)='smaps\x00')
r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0)
dup2(r6, r0)
sendfile(r3, r5, 0x0, 0x80000001)
r7 = socket$inet6(0xa, 0x400000000001, 0x0)
r8 = dup(r7)
setsockopt$inet6_tcp_int(r8, 0x6, 0x12, &(0x7f0000000380)=0x83, 0x1fb)
open(&(0x7f0000001300)='./bus/file0\x00', 0x0, 0x0)
r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001380)='/dev/rtc0\x00', 0x10000, 0x0)
ftruncate(r9, 0x1000000000006)
r10 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ip_vs_stats\x00')
r11 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r11, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x81805)
r12 = creat(0x0, 0x16)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r14, 0xffffffffffffffff, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @local}, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x0, r15})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bind$packet(r13, &(0x7f00000003c0)={0x11, 0x4, r15, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r12, 0x2, 0xeaa892816481953e)
sendfile(r12, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc)
sendfile(r12, r13, &(0x7f0000000040), 0x0)
r16 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r16, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb)
connect$unix(r16, &(0x7f0000000080)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e)
bind$inet(r16, &(0x7f00000002c0)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r16, &(0x7f0000000240)={0x2, 0x4e21}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r16, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80400001}, 0x14)
shutdown(r16, 0x1)
fcntl$setstatus(r16, 0x4, 0x6100)
r17 = syz_open_procfs(r4, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r17, r17, 0x0, 0xdd)
getpeername$packet(r17, &(0x7f00000012c0)={0x11, 0x0, <r18=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r18})
bind$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x16, r18, 0x1, 0x6}, 0x14)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc)
r19 = creat(0x0, 0x0)
fcntl$setstatus(r19, 0x4, 0x0)
r20 = open(0x0, 0x0, 0x0)
r21 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r10, 0xffffffffffffffff, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r21, &(0x7f0000000000)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r22})
lseek(r19, 0x0, 0x2)
sendfile(0xffffffffffffffff, r20, 0x0, 0x0)
sendfile(r19, r20, &(0x7f0000000040), 0x0)
ioctl$LOOP_CLR_FD(r20, 0x4c01)
openat$zero(0xffffffffffffff9c, &(0x7f0000001200)='/dev/zero\x00', 0x400000, 0x0)
fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000600)='user.syz\x00', 0x9, 0x2)

12:52:19 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
r4 = creat(&(0x7f0000000440)='./bus\x00', 0x0)
ftruncate(r4, 0xe3ca)
fcntl$setstatus(r3, 0x4, 0x6100)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
write$P9_RXATTRCREATE(r5, &(0x7f0000000040)={0x3ba}, 0x7)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
write$binfmt_misc(r1, &(0x7f0000000240)={'syz0', "8a4e76b7d0935163a868b0f28032b42e0871614401ee558cae3a52537bdf78f52715c6bf50ff4bdea0a5eb8b53b272379cb48dd858cc768dc43059858eedaec21a2e9067d70a0882b15ea42c69cc3b4cc9b9bd2585c5c1f52afd43cc8113a31dd13f0e"}, 0x67)
r6 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r6, 0x0)
getsockopt$ARPT_SO_GET_INFO(r6, 0x0, 0x60, &(0x7f0000000100)={'filter\x00'}, &(0x7f00000001c0)=0x44)
read(r1, &(0x7f0000000000)=""/250, 0x128b9372)

12:52:19 executing program 0:
pipe(&(0x7f00000013c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r2)
r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
truncate(&(0x7f00000000c0)='./bus\x00', 0xa00)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300))
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x131802, 0x0)
getpeername$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
socket(0x0, 0x2, 0x0)
r5 = dup3(0xffffffffffffffff, r2, 0x0)
ioctl$EVIOCGNAME(r5, 0x80404506, &(0x7f0000001800)=""/151)
syz_genetlink_get_family_id$ipvs(&(0x7f0000001380)='IPVS\x00')
r6 = creat(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x14)
fallocate(r6, 0x0, 0x0, 0x8020003)
r7 = creat(&(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x5)
fcntl$setstatus(r7, 0x4, 0x44700)
sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000001440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008094}, 0x20000000)
sendto(r5, 0x0, 0x0, 0x4000000, 0x0, 0x0)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x1, 0x0)
pipe(0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
close(r8)
r9 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r9, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
sendto$inet6(r9, 0x0, 0xfffffffffffffe2e, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c)
sendmmsg(r9, &(0x7f00000092c0), 0x4ff, 0x0)

12:52:19 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$selinux_load(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/351], 0x15f)

12:52:19 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$selinux_load(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/351], 0x15f)

12:52:19 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$selinux_load(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/351], 0x15f)

[  226.794906] binder: 10042:10068 BC_INCREFS_DONE u0000000000000000 no match
[  226.802255] binder: 10042:10068 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  226.809632] binder: 10042:10068 got transaction to invalid handle
[  226.816164] binder: 10042:10068 transaction failed 29201/-22, size 0-0 line 3013
[  226.836689] SELinux: mls: truncated level
12:52:19 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/351], 0x15f)

12:52:19 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781500000000f601000800000007000000402c11000000000009000007000000000000000000000000385a580000000000000900000000000000010000000000000000000000ffffffff00000000000009593c88ff3ed359b6b342a5b31b628ee1bdff739b75074dc6a56b02e8864fe848c3040b8fe9058ea0150f5eedef22701042f06294212113a6e87c4ec8a30c6f553b606f1924da2ae7188a0128aaa01f9cd143f86ce937ef47acf189830bf6267accf14631e3f252ce20e35481223e952072de05debead9febde60b4e996e07fced76b0b1d32e6fd7d647529b9bbafef5ae615999a6b8361eace52f4be6e4867e61d51e3b7dfa25fee5f16f35e63fa9d41d1932cc8f94368890372975d6432d8e12ad6921b935a4e671c0f5963bb6039b5dec1f69a4d5d69f80065a24793637e3423c8597501fc32edb597da5cfcd1dd00"/351], 0x15f)

12:52:19 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/351], 0x15f)

[  227.016332] binder: 10079:10084 BC_INCREFS_DONE u0000000000000000 no match
[  227.027032] binder: 10079:10084 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  227.047169] binder: 10079:10084 got transaction to invalid handle
12:52:19 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r2, 0x0, 0x0)

[  227.070181] binder: 10079:10084 transaction failed 29201/-22, size 0-0 line 3013
12:52:19 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
creat(0x0, 0x0)
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x200000000038)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r2, 0x0, 0x0)
get_robust_list(r2, &(0x7f0000000200)=&(0x7f00000001c0)={&(0x7f00000000c0)={&(0x7f0000000080)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, &(0x7f0000000240)=0x18)
open(0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x20000000000001a, 0x4000000000080002, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r8}]]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x82, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0)
bind$packet(r3, &(0x7f0000000040)={0x11, 0xaf28701d02d57c3f, r8, 0x1, 0x0, 0x6, @remote}, 0x14)
sendmmsg(r3, &(0x7f0000000d00), 0x1bdd307, 0x0)

[  227.115494] syz-executor.1: vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM)
[  227.189840] CPU: 0 PID: 10132 Comm: syz-executor.1 Not tainted 4.9.141+ #1
[  227.196895]  ffff8801c81bf8a0 ffffffff81b42e79 1ffff10039037f16 ffff8801ce2f17c0
[  227.204983]  ffffffff82aa8c00 0000000000000001 0000000000400000 ffff8801c81bf9e8
[  227.213065]  ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0
[  227.222264] Call Trace:
[  227.224871]  [<ffffffff81b42e79>] dump_stack+0xc1/0x128
[  227.230241]  [<ffffffff814fc7c8>] warn_alloc.cold.31+0x7f/0x9c
[  227.236216]  [<ffffffff81427db0>] ? zone_watermark_ok_safe+0x250/0x250
[  227.242887]  [<ffffffff81ba7d7b>] ? check_preemption_disabled+0x3b/0x200
[  227.249741]  [<ffffffff819eda5e>] ? avc_has_perm+0x9e/0x3a0
[  227.255543]  [<ffffffff814c9f8e>] __vmalloc_node_range+0x35e/0x600
[  227.261879]  [<ffffffff81ba7d7b>] ? check_preemption_disabled+0x3b/0x200
[  227.268732]  [<ffffffff81ba7d7b>] ? check_preemption_disabled+0x3b/0x200
[  227.275667]  [<ffffffff81a0e2b0>] ? task_has_security+0x130/0x270
[  227.281925]  [<ffffffff814ca71b>] vmalloc+0x5b/0x70
[  227.287381]  [<ffffffff81a122d5>] ? sel_write_load+0x135/0xfa0
[  227.293356]  [<ffffffff81a122d5>] sel_write_load+0x135/0xfa0
[  227.299158]  [<ffffffff81a121a0>] ? sel_read_bool+0x240/0x240
[  227.305047]  [<ffffffff812073b0>] ? trace_hardirqs_on+0x10/0x10
[  227.311112]  [<ffffffff812073b0>] ? trace_hardirqs_on+0x10/0x10
[  227.317173]  [<ffffffff81508085>] __vfs_write+0x115/0x580
[  227.322721]  [<ffffffff81a121a0>] ? sel_read_bool+0x240/0x240
[  227.328607]  [<ffffffff81507f70>] ? __vfs_read+0x560/0x560
[  227.334243]  [<ffffffff81ba7d7b>] ? check_preemption_disabled+0x3b/0x200
[  227.341107]  [<ffffffff81243e83>] ? rcu_read_lock_sched_held+0x103/0x120
[  227.347989]  [<ffffffff812445a3>] ? rcu_sync_lockdep_assert+0x73/0xb0
[  227.354586]  [<ffffffff815123d1>] ? __sb_start_write+0x161/0x300
[  227.360742]  [<ffffffff8150ab97>] vfs_write+0x187/0x520
[  227.366112]  [<ffffffff8150e9c9>] SyS_write+0xd9/0x1c0
[  227.371396]  [<ffffffff8150e8f0>] ? SyS_read+0x1c0/0x1c0
[  227.376864]  [<ffffffff81005598>] ? do_syscall_64+0x48/0x550
[  227.382765]  [<ffffffff8150e8f0>] ? SyS_read+0x1c0/0x1c0
[  227.388311]  [<ffffffff810056ef>] do_syscall_64+0x19f/0x550
[  227.394037]  [<ffffffff82817893>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb
[  227.439063] Mem-Info:
[  227.447974] active_anon:160086 inactive_anon:8899 isolated_anon:0
[  227.447974]  active_file:4702 inactive_file:17458 isolated_file:0
[  227.447974]  unevictable:0 dirty:218 writeback:0 unstable:0
[  227.447974]  slab_reclaimable:7047 slab_unreclaimable:60297
[  227.447974]  mapped:61319 shmem:12183 pagetables:3636 bounce:0
[  227.447974]  free:1323221 free_pcp:472 free_cma:0
[  227.485873] Node 0 active_anon:640344kB inactive_anon:35596kB active_file:18808kB inactive_file:69832kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:245176kB dirty:872kB writeback:0kB shmem:48732kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no
[  227.531013] DMA32 free:3019464kB min:4696kB low:7712kB high:10728kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:668kB local_pcp:0kB free_cma:0kB
[  227.574496] lowmem_reserve[]: 0 3505 3505
[  227.579335] Normal free:2290320kB min:5580kB low:9168kB high:12756kB active_anon:623844kB inactive_anon:35596kB active_file:18808kB inactive_file:69932kB unevictable:0kB writepending:872kB present:4718592kB managed:3589312kB mlocked:0kB slab_reclaimable:28188kB slab_unreclaimable:241100kB kernel_stack:8096kB pagetables:14396kB bounce:0kB free_pcp:1360kB local_pcp:704kB free_cma:0kB
[  227.613814] lowmem_reserve[]: 0 0 0
[  227.618515] DMA32: 4*4kB (UM) 3*8kB (M) 2*16kB (M) 4*32kB (UM) 4*64kB (UM) 4*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 2*2048kB (UM) 735*4096kB (M) = 3019464kB
12:52:20 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$unix(0x1, 0x3, 0x0)
dup2(r0, r1)
bind$unix(r1, &(0x7f00000006c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000140)="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")
connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

12:52:20 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r2, 0x0, 0x0)

12:52:20 executing program 4:
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x200000, 0x0)
r1 = creat(&(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x5)
fcntl$setstatus(r1, 0x4, 0x44700)
r2 = creat(&(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x5)
fcntl$setstatus(r2, 0x4, 0x44700)
r3 = creat(&(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x5)
fcntl$setstatus(r3, 0x4, 0x44700)
r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0)
r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r5)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='.dev/loop-control\x00', 0x400000, 0x0)
r7 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7)
ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7)
r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r9)
ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9)
r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11)
ioctl$LOOP_CTL_ADD(r10, 0x4c80, r11)
ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11)
r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
r13 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13)

[  227.640196] Normal: 602*4kB (UM) 491*8kB (UME) 1066*16kB (UM) 441*32kB (UME) 412*64kB (UME) 134*128kB (UM) 60*256kB (UME) 13*512kB (UM) 6*1024kB (UM) 3*2048kB (M) 531*4096kB (M) = 2290304kB
34291 total pagecache pages
[  227.703152] 0 pages in swap cache
[  227.706611] Swap cache stats: add 0, delete 0, find 0/0
[  227.712626] Free swap  = 0kB
[  227.715645] Total swap = 0kB
[  227.718664] 1965979 pages RAM
[  227.721766] 0 pages HighMem/MovableOnly
[  227.726037] 313618 pages reserved
12:52:20 executing program 3:
r0 = socket$unix(0x1, 0x2, 0x0)
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080), &(0x7f0000000180)=0x4)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x1132})
ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x15)
write(r2, &(0x7f00000008c0)="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", 0x55db45d9e26ebe)
read(r1, &(0x7f0000000200)=""/250, 0x50c7e70e)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r3)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100))
r5 = creat(&(0x7f0000000700)='./bus\x00', 0x11)
fcntl$setstatus(r5, 0x4, 0x6100)
set_tid_address(&(0x7f0000000040))
write$FUSE_INIT(r4, &(0x7f0000000180)={0x50, 0xfffffffffffffffe}, 0x50)
clone(0x2142001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x11000490)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d9189)
socket(0x10, 0x80000, 0x40)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"])
ioctl$RNDGETENTCNT(r6, 0x80045200, &(0x7f0000000340))
r7 = gettid()
r8 = syz_open_procfs(r7, &(0x7f00000001c0)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f')
write$selinux_context(r8, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b)
accept4$unix(r8, 0x0, &(0x7f0000000000), 0x800)
write$smack_current(r8, &(0x7f0000000240), 0x2b)
r9 = open(&(0x7f0000022ff6)='./control\x00', 0x20000, 0x0)
mkdirat(r9, &(0x7f0000000400)='./control/file0\x00', 0x0)
getdents64(r9, &(0x7f0000fc4fbe)=""/80, 0x50)
unlinkat(r9, &(0x7f0000000140)='./bus\x00', 0x0)
rmdir(&(0x7f0000000040)='./control\x00')

12:52:20 executing program 2:
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000001600)={0x0, 0x8000, 0x0, 0x101, 0x9, 0x31aa})
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0xd432})
pipe(0x0)
read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3)
pipe(0x0)
syz_open_dev$loop(0x0, 0x3, 0x51d00)
pipe(&(0x7f00000001c0))
ftruncate(0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', <r1=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001500)=[&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, &(0x7f0000001400)="70b5b9a4f6fe8eb1a832413ffa4254a19acfadb588c557c43e66f2610bb66a84514748c74b14dad908ff451a91b7c3ee7b420f7582559783c6a4ad20589781f812ca27e37981f8301493520b58c60e0e0e0d647acf9e7c3265236ed5ea57a85f9540ab731684ca4d1749414724a4f5d6d280b9fb8561f3b5b2d112474528817ce13bc33be43762f2c2c7d7120646", 0x8e, 0x3ff}])
fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f0000001640)='security.SMACK64TRANSMUTE\x00', &(0x7f00000013c0)='TRUE', 0x4, 0x0)
setitimer(0x1, &(0x7f00000000c0)={{}, {0x0, 0x2710}}, 0x0)
pipe(&(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xfffffef3)
read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, <r4=>0x0})
r5 = syz_open_procfs(r4, &(0x7f0000000040)='smaps\x00')
r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0)
dup2(r6, r0)
sendfile(r3, r5, 0x0, 0x80000001)
r7 = socket$inet6(0xa, 0x400000000001, 0x0)
r8 = dup(r7)
setsockopt$inet6_tcp_int(r8, 0x6, 0x12, &(0x7f0000000380)=0x83, 0x1fb)
open(&(0x7f0000001300)='./bus/file0\x00', 0x0, 0x0)
r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001380)='/dev/rtc0\x00', 0x10000, 0x0)
ftruncate(r9, 0x1000000000006)
r10 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ip_vs_stats\x00')
r11 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r11, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x81805)
r12 = creat(0x0, 0x16)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r14, 0xffffffffffffffff, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @local}, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x0, r15})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bind$packet(r13, &(0x7f00000003c0)={0x11, 0x4, r15, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r12, 0x2, 0xeaa892816481953e)
sendfile(r12, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc)
sendfile(r12, r13, &(0x7f0000000040), 0x0)
r16 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r16, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb)
connect$unix(r16, &(0x7f0000000080)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e)
bind$inet(r16, &(0x7f00000002c0)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r16, &(0x7f0000000240)={0x2, 0x4e21}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r16, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80400001}, 0x14)
shutdown(r16, 0x1)
fcntl$setstatus(r16, 0x4, 0x6100)
r17 = syz_open_procfs(r4, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r17, r17, 0x0, 0xdd)
getpeername$packet(r17, &(0x7f00000012c0)={0x11, 0x0, <r18=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r18})
bind$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x16, r18, 0x1, 0x6}, 0x14)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc)
r19 = creat(0x0, 0x0)
fcntl$setstatus(r19, 0x4, 0x0)
r20 = open(0x0, 0x0, 0x0)
r21 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r10, 0xffffffffffffffff, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r21, &(0x7f0000000000)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r22})
lseek(r19, 0x0, 0x2)
sendfile(0xffffffffffffffff, r20, 0x0, 0x0)
sendfile(r19, r20, &(0x7f0000000040), 0x0)
ioctl$LOOP_CLR_FD(r20, 0x4c01)
openat$zero(0xffffffffffffff9c, &(0x7f0000001200)='/dev/zero\x00', 0x400000, 0x0)
fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000600)='user.syz\x00', 0x9, 0x2)

12:52:20 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000600)=0x209, 0xfffffffffffffdae)
r3 = socket$inet6(0xa, 0xedb94b6dfea2d8dc, 0x0)
setsockopt$sock_int(r2, 0x1, 0x27, &(0x7f0000000000)=0x1, 0x4)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000300)={0x0, 0x0}, 0x10)
setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000140)=ANY=[@ANYBLOB="1700260000000000000000080000000000004b28f21144b86eb2eb1d480d7fbd278d8c018f2eeab187ab42536b79a49bde3219bd7c63bf0ce4e7d519cbf9b300a5aa0a8b670fc103aa492f3bb9f3cab63b884d8ffc0fcdac45168f678ee136df6585df3fb34b8479ea9bf6508cfb136641fe6442485663c0d5e8b01cc0292452c0a91cac3b4c9a37283345f59e8f55398cd1bce5d41268e4a34b50a4080000000000000dddf2f902a6a2c4d88cf88c4543fd8c6d423f1c8abb1b77c1faba2f3902e35551e6fdbe7b4fc8f9b7333ce181ffe6dffceded7f46bd3e20010001000000000000000993b88935e7a3afa6d0f3320e682e26559f5c97473dfcdb15b3e6000000f9000000000000000000000062893c4bd8aae1ca8c77fe8a3ed7369a75c60af2948be5f189aab8b5602086125bdf1dd6263847ac00ae00000069016d31a2199ae8b75ce57d5d9c5a5fdf926346e1dcac9984a2171a1f28ce017dba0ab09daeda470a1a56003c8407753a39ed0969b1b46b17b8f2805b11fdc85420967681babdec364d46b983210e99d980e2dacb14611062270dd9f8b2dde445bae9fd6581fa2fbed1358aef78f413c5afc7"], 0x8)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
shutdown(r3, 0x0)
pipe(&(0x7f0000000400))
r4 = dup2(r1, r1)
ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000180)=0x10001)
r5 = open(&(0x7f00000002c0)='./bus\x00', 0x40000141041, 0x402)
write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0x323)
mlockall(0x14)
syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00')
r6 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
sched_setscheduler(0x0, 0x5, 0x0)
r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
write$FUSE_POLL(r5, &(0x7f0000000540)={0x18, 0x0, 0x1, {0x3298}}, 0x18)
r8 = socket(0x10, 0x80002, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r6)
bind$netlink(r8, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r8, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
times(&(0x7f0000000440))
connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000b4bffc)=0x7, 0x4)
ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f0000000580)={'bcsh0\x00', 0x67})
sendto(r8, &(0x7f0000000480)="c2ae3d83803928060ed1fda9de05da3dfcdccfbde2b96e9245e802000000000000001d02984bcdd65e4bbe511089109d13e3e2b69e8527b0614d5d3ce81ed67444b370f05b7c677add85cc820c498aeeebc9521add80b9ee98ee8f04ccc32c8d97d699e52bacd8b25dc9d168e67c97b1b1124e2c7e721fd18774af8207ea2f8024b07e920a", 0x85, 0x0, 0x0, 0x0)
recvmmsg(r8, &(0x7f00000010c0)=[{{&(0x7f0000000080)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f00000006c0)=""/101, 0x65}, {&(0x7f0000000740)=""/119, 0x77}, {&(0x7f0000000340)=""/8, 0x8}, {&(0x7f00000007c0)=""/90, 0x5a}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000000840)=""/147, 0x93}], 0x7, &(0x7f0000000980)=""/159, 0x9f}, 0x9}, {{&(0x7f0000000a40)=@un=@abs, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000ac0)=""/157, 0x9d}, {&(0x7f0000000b80)=""/222, 0xde}, {&(0x7f00000003c0)=""/42, 0x2a}, {&(0x7f0000000c80)=""/151, 0x97}, {&(0x7f00000005c0)}, {&(0x7f0000000d40)=""/170, 0xfee1}, {&(0x7f0000001140)=""/234, 0xea}, {&(0x7f0000000f00)=""/72, 0x48}], 0x8, &(0x7f0000001000)=""/144, 0x90}, 0x6}], 0x2, 0x2, 0x0)
sendfile(r5, r7, &(0x7f0000000140), 0x8fff)

[  227.791165] syz-executor.1: [  227.795641] binder: 10142:10148 BC_INCREFS_DONE u0000000000000000 no match
[  227.795648] binder: 10142:10148 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  227.795657] binder: 10142:10148 got transaction to invalid handle
[  227.795666] binder: 10142:10148 transaction failed 29201/-22, size 0-0 line 3013
[  227.795748] binder: 10142:10148 ioctl 41009432 20000140 returned -22
[  227.800217] binder: 10142:10150 ioctl 41009432 20000140 returned -22
[  227.880519] selinux_nlmsg_perm: 4175 callbacks suppressed
[  227.880528] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14720 sclass=netlink_route_socket pig=10154 comm=syz-executor.0
12:52:20 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./bus\x00', 0x1e1)
fcntl$setstatus(r1, 0x4, 0x6100)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r1, 0x0, 0x2)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
sendfile(r1, r2, 0x0, 0xa5cc554)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r3, 0x208200)
r4 = socket(0x0, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r5, 0x0, 0x0)
bind$packet(r4, 0x0, 0x0)

[  228.028607] vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM)
12:52:20 executing program 3:
recvmmsg(0xffffffffffffffff, &(0x7f00000032c0)=[{{&(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = epoll_create(0x8)
signalfd(r0, &(0x7f0000000080)={0x69}, 0x8)
r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0)
r3 = dup2(r1, r2)
ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f00000002c0)={0x2f, 0x7f, 0x1ff, 0x2, 0x2, 0x2})
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000040}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r4, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x9}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20044004}, 0x40)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup(r5)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x28, 0x1a, 0xc, 0x2, 0x1, 0x0, 0x6, 0x29}})
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
writev(r2, &(0x7f00000023c0), 0x1000000000000252)

[  228.052059] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  228.116259] CPU: 0 PID: 10146 Comm: syz-executor.1 Not tainted 4.9.141+ #1
[  228.123320]  ffff8801caac78a0 ffffffff81b42e79 1ffff10039558f16 ffff8801a588df00
[  228.131392]  ffffffff82aa8c00 0000000000000001 0000000000400000 ffff8801caac79e8
[  228.139456]  ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0
[  228.147541] Call Trace:
[  228.150135]  [<ffffffff81b42e79>] dump_stack+0xc1/0x128
[  228.155508]  [<ffffffff814fc7c8>] warn_alloc.cold.31+0x7f/0x9c
[  228.161493]  [<ffffffff81427db0>] ? zone_watermark_ok_safe+0x250/0x250
[  228.168167]  [<ffffffff81ba7d7b>] ? check_preemption_disabled+0x3b/0x200
[  228.175027]  [<ffffffff819eda5e>] ? avc_has_perm+0x9e/0x3a0
[  228.180838]  [<ffffffff814c9f8e>] __vmalloc_node_range+0x35e/0x600
[  228.187174]  [<ffffffff81ba7d7b>] ? check_preemption_disabled+0x3b/0x200
[  228.194038]  [<ffffffff81ba7d7b>] ? check_preemption_disabled+0x3b/0x200
[  228.200889]  [<ffffffff81a0e2b0>] ? task_has_security+0x130/0x270
[  228.207272]  [<ffffffff814ca71b>] vmalloc+0x5b/0x70
[  228.212428]  [<ffffffff81a122d5>] ? sel_write_load+0x135/0xfa0
[  228.218408]  [<ffffffff81a122d5>] sel_write_load+0x135/0xfa0
[  228.224212]  [<ffffffff81a121a0>] ? sel_read_bool+0x240/0x240
[  228.230101]  [<ffffffff812073b0>] ? trace_hardirqs_on+0x10/0x10
[  228.236159]  [<ffffffff812073b0>] ? trace_hardirqs_on+0x10/0x10
[  228.242312]  [<ffffffff81508085>] __vfs_write+0x115/0x580
[  228.247864]  [<ffffffff81a121a0>] ? sel_read_bool+0x240/0x240
[  228.253758]  [<ffffffff81507f70>] ? __vfs_read+0x560/0x560
[  228.259393]  [<ffffffff81ba7d7b>] ? check_preemption_disabled+0x3b/0x200
[  228.266263]  [<ffffffff81243e83>] ? rcu_read_lock_sched_held+0x103/0x120
[  228.273487]  [<ffffffff812445a3>] ? rcu_sync_lockdep_assert+0x73/0xb0
[  228.280090]  [<ffffffff815123d1>] ? __sb_start_write+0x161/0x300
[  228.286246]  [<ffffffff8150ab97>] vfs_write+0x187/0x520
[  228.291615]  [<ffffffff8150e9c9>] SyS_write+0xd9/0x1c0
[  228.296898]  [<ffffffff8150e8f0>] ? SyS_read+0x1c0/0x1c0
[  228.302352]  [<ffffffff81005598>] ? do_syscall_64+0x48/0x550
[  228.308157]  [<ffffffff8150e8f0>] ? SyS_read+0x1c0/0x1c0
[  228.313614]  [<ffffffff810056ef>] do_syscall_64+0x19f/0x550
[  228.319349]  [<ffffffff82817893>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb
[  228.330009] Mem-Info:
[  228.332967] active_anon:151923 inactive_anon:8883 isolated_anon:0
[  228.332967]  active_file:4704 inactive_file:17401 isolated_file:0
12:52:20 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netstat\x00')
r1 = open(&(0x7f0000000300)='./bus/file0\x00', 0x40000, 0x24)
sendfile(r1, r0, &(0x7f0000000040)=0x59, 0x8001)
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x9, 0x0, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x1, 0x0)
r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp\x00')
preadv(r4, &(0x7f00000017c0), 0x315, 0x0)
r5 = socket$inet(0x2, 0x4, 0x9)
r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp\x00')
preadv(r6, &(0x7f00000017c0), 0x315, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'veth1\x00', 0x100})
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r10, 0x1, 0x11, 0x0, &(0x7f0000000040))
ioctl$TUNSETOWNER(r9, 0x400454cc, 0x0)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00D\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a})
r12 = socket$packet(0x11, 0x3, 0x300)
getsockopt$sock_cred(r12, 0x1, 0x11, 0x0, &(0x7f0000000180))
ioctl$TUNSETGROUP(r11, 0x400454ce, 0x0)
ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000000340)=<r13=>0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0xff, 0x1, 0x0, 0x7f, 0x0, 0xcd71, 0x1000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x98f865c8d69f9d35, @perf_bp={&(0x7f00000002c0)}, 0x11000, 0x6, 0x3, 0x9, 0x8, 0x8, 0x6}, r13, 0x4, 0xffffffffffffffff, 0x1)
socket$inet6_udplite(0xa, 0x2, 0x88)
gettid()
stat(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r14=>0x0})
sendmsg$netlink(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="ffffff715dcb47f88c563797aabafbbc080000000014", @ANYRES32=r3, @ANYRES32=r4, @ANYRESOCT=r9, @ANYRES32=r5, @ANYBLOB="1c0000000000b7000100000001000000", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="000000001c000000000000000100000002000000d62e19f35781000002aaac427d471a7eebb615cc7cec203f671743debf549f812bcd13a20577a24fbee384e94b735f22f32f791cfcc327b0598793037c8ad7e911910e2edb1c5eb4fa0f83081600000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r14, @ANYRES32=0xee00, @ANYBLOB="ba"], 0xe0, 0x40014}, 0x8000)
r15 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp\x00')
preadv(r15, &(0x7f00000017c0), 0x315, 0x0)

12:52:20 executing program 2:
unshare(0x40600)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x1040, 0x0)
ioctl$TCFLSH(r0, 0x540b, 0x7)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/r\x8doc/sclf/\x00\x00\x00\x00\x00\xd4\x00\x06y\x00', 0x101800, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a})
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="79008da9", @ANYRES16=r3, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40010000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x9c, r3, 0x107, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x81}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2d}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe19}]}, 0x9c}}, 0x4008090)
r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000280))
timerfd_settime(r4, 0x0, &(0x7f0000000040), 0x0)
eventfd2(0x0, 0x1c80c96ae5786953)

[  228.332967]  unevictable:0 dirty:234 writeback:0 unstable:0
[  228.332967]  slab_reclaimable:7048 slab_unreclaimable:60357
[  228.332967]  mapped:61309 shmem:12183 pagetables:3624 bounce:0
[  228.332967]  free:1331460 free_pcp:380 free_cma:0
[  228.368150] Node 0 active_anon:607692kB inactive_anon:35532kB active_file:18816kB inactive_file:69604kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:245236kB dirty:936kB writeback:0kB shmem:48732kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no
[  228.448443] DMA32 free:3019464kB min:4696kB low:7712kB high:10728kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:668kB local_pcp:668kB free_cma:0kB
[  228.479710] lowmem_reserve[]: 0 3505 3505
[  228.484856] Normal free:2305120kB min:5580kB low:9168kB high:12756kB active_anon:607992kB inactive_anon:35532kB active_file:18816kB inactive_file:69804kB unevictable:0kB writepending:936kB present:4718592kB managed:3589312kB mlocked:0kB slab_reclaimable:28192kB slab_unreclaimable:241180kB kernel_stack:8320kB pagetables:14792kB bounce:0kB free_pcp:1240kB local_pcp:640kB free_cma:0kB
[  228.519284] lowmem_reserve[]: 0 0 0
[  228.523954] DMA32: 4*4kB (UM) 3*8kB (M) 2*16kB (M) 4*32kB (UM) 4*64kB (UM) 4*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 2*2048kB (UM) 735*4096kB (M) = 3019464kB
[  228.547845] Normal: 652*4kB (UM) 561*8kB (UM) 1015*16kB (UME) 309*32kB (UM) 455*64kB (UM) 182*128kB (UME) 67*256kB (UME) 20*512kB (UM) 9*1024kB (UM) 2*2048kB (M) 532*4096kB (M) = 2305416kB
34360 total pagecache pages
[  228.577670] 0 pages in swap cache
[  228.581677] Swap cache stats: add 0, delete 0, find 0/0
[  228.589945] Free swap  = 0kB
[  228.593511] Total swap = 0kB
12:52:20 executing program 2:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff})
write$cgroup_int(r0, &(0x7f0000000180)=0x3, 0xffffffffffffff31)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000380))
write$P9_RMKNOD(r0, &(0x7f0000000040)={0x14, 0x13, 0x0, {0x0, 0x5, 0x4}}, 0x14)
ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f0000000080))
r1 = syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0xb7, 0x400)
ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0)
mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
renameat2(r3, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f0000000280)='./file0\x00', 0x2)
renameat2(r3, 0x0, r3, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f00000000c0))
fsetxattr$security_selinux(r2, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:var_spool_t:s0:\x00\x009\xd5\x87\xdb\' \x11\xb2p\x8a_\xcc\xc3\x86N\x18e\xa3\x13K$1\x97\f?\xba9\xc8\x05\xad\x1c\xf3J\\\'\xfc\xf6\x0f\x1a', 0x4a, 0x0)

12:52:20 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r2, 0x0, 0x0)

[  228.597064] 1965979 pages RAM
[  228.600890] 0 pages HighMem/MovableOnly
[  228.606576] 313618 pages reserved
12:52:20 executing program 2:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x1}})
r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1}})
pipe2(&(0x7f0000000000)={<r2=>0xffffffffffffffff}, 0x84000)
write$FUSE_STATFS(r2, &(0x7f0000000140)={0x60, 0xffffffffffffffda, 0x4, {{0xffffffffffff8dd2, 0x5, 0x3, 0x4, 0x200, 0x0, 0x2289, 0xf2}}}, 0x60)

[  228.622630] syz-executor.1: vmalloc: allocation failure: 0 bytes[  228.632538] audit: type=1401 audit(1574513540.943:75): op=setxattr invalid_context=73797374656D5F753A6F626A6563745F723A7661725F73706F6F6C5F743A73303A000039D587DB272011B2708A5FCCC3864E1865A3134B2431970C3FBA39C805AD1CF34A5C27FCF60F1A
[  228.655674] , mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM)
[  228.662282] audit: type=1401 audit(1574513540.973:76): op=setxattr invalid_context=73797374656D5F753A6F626A6563745F723A7661725F73706F6F6C5F743A73303A000039D587DB272011B2708A5FCCC3864E1865A3134B2431970C3FBA39C805AD1CF34A5C27FCF60F1A
[  228.690967] CPU: 0 PID: 10200 Comm: syz-executor.1 Not tainted 4.9.141+ #1
[  228.698005]  ffff8801a22bf8a0 ffffffff81b42e79 1ffff10034457f16 ffff8801c60c8000
[  228.706102]  ffffffff82aa8c00 0000000000000001 0000000000400000 ffff8801a22bf9e8
[  228.714307]  ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0
[  228.722397] Call Trace:
[  228.724989]  [<ffffffff81b42e79>] dump_stack+0xc1/0x128
[  228.730360]  [<ffffffff814fc7c8>] warn_alloc.cold.31+0x7f/0x9c
[  228.736345]  [<ffffffff81427db0>] ? zone_watermark_ok_safe+0x250/0x250
[  228.743023]  [<ffffffff81ba7d7b>] ? check_preemption_disabled+0x3b/0x200
[  228.749876]  [<ffffffff819eda5e>] ? avc_has_perm+0x9e/0x3a0
[  228.755606]  [<ffffffff814c9f8e>] __vmalloc_node_range+0x35e/0x600
[  228.761936]  [<ffffffff81ba7d7b>] ? check_preemption_disabled+0x3b/0x200
[  228.768793]  [<ffffffff81ba7d7b>] ? check_preemption_disabled+0x3b/0x200
[  228.775656]  [<ffffffff81a0e2b0>] ? task_has_security+0x130/0x270
[  228.781900]  [<ffffffff814ca71b>] vmalloc+0x5b/0x70
[  228.786928]  [<ffffffff81a122d5>] ? sel_write_load+0x135/0xfa0
[  228.792952]  [<ffffffff81a122d5>] sel_write_load+0x135/0xfa0
[  228.798794]  [<ffffffff81a121a0>] ? sel_read_bool+0x240/0x240
[  228.804704]  [<ffffffff812073b0>] ? trace_hardirqs_on+0x10/0x10
[  228.810778]  [<ffffffff812073b0>] ? trace_hardirqs_on+0x10/0x10
[  228.816857]  [<ffffffff81508085>] __vfs_write+0x115/0x580
[  228.822409]  [<ffffffff81a121a0>] ? sel_read_bool+0x240/0x240
[  228.828308]  [<ffffffff81507f70>] ? __vfs_read+0x560/0x560
[  228.833949]  [<ffffffff81ba7d7b>] ? check_preemption_disabled+0x3b/0x200
[  228.840806]  [<ffffffff81243e83>] ? rcu_read_lock_sched_held+0x103/0x120
[  228.847748]  [<ffffffff812445a3>] ? rcu_sync_lockdep_assert+0x73/0xb0
[  228.854344]  [<ffffffff815123d1>] ? __sb_start_write+0x161/0x300
[  228.860501]  [<ffffffff8150ab97>] vfs_write+0x187/0x520
[  228.865885]  [<ffffffff8150e9c9>] SyS_write+0xd9/0x1c0
[  228.871175]  [<ffffffff8150e8f0>] ? SyS_read+0x1c0/0x1c0
[  228.876640]  [<ffffffff81005598>] ? do_syscall_64+0x48/0x550
[  228.882475]  [<ffffffff8150e8f0>] ? SyS_read+0x1c0/0x1c0
[  228.887947]  [<ffffffff810056ef>] do_syscall_64+0x19f/0x550
[  228.893735]  [<ffffffff82817893>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb
[  228.901831] Mem-Info:
[  228.905440] active_anon:151983 inactive_anon:8881 isolated_anon:0
[  228.905440]  active_file:4705 inactive_file:17424 isolated_file:0
[  228.905440]  unevictable:0 dirty:244 writeback:0 unstable:0
[  228.905440]  slab_reclaimable:6998 slab_unreclaimable:60356
[  228.905440]  mapped:61300 shmem:12183 pagetables:3694 bounce:0
[  228.905440]  free:1331213 free_pcp:438 free_cma:0
[  228.944068] Node 0 active_anon:607832kB inactive_anon:35524kB active_file:18820kB inactive_file:69696kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:245200kB dirty:976kB writeback:0kB shmem:48732kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no
12:52:21 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="24f90000f6ffffff0800930000007266b06ad6857c0bb08bafef78f4ff0a000800", @ANYRES32=0x0], 0x24}}, 0x0)

12:52:21 executing program 2:
r0 = dup(0xffffffffffffffff)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10)
r2 = socket$inet(0x2, 0x4000000000000001, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0xfd1, 0x4)
bind$inet(r2, &(0x7f0000001440)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x2200cf7d, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0xffffffffffffff22)
write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0)
r4 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
fadvise64(r4, 0x2, 0xffffffff, 0x3)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a})
close(r3)
recvmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/94, 0x5e}, {&(0x7f0000000240)=""/98, 0x48}, {&(0x7f00000002c0)=""/116, 0x74}, {&(0x7f00000000c0)=""/37, 0x25}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x5}, 0x100)
r5 = epoll_create1(0x80000)
sendfile(r1, r5, 0x0, 0x400)
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000040), 0x4)

12:52:21 executing program 3:
sendmsg(0xffffffffffffffff, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/42, 0xfec8}, {&(0x7f0000000200)=""/197}, {&(0x7f0000000300)=""/142, 0xffffffffffffffc2}], 0x17f, 0x8)
sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
close(r0)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x4fff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba0009008d2633568e00000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
setxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x3)
accept4(r0, 0x0, 0x0, 0x0)
accept(r0, 0x0, 0x0)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0)
ftruncate(r3, 0x2007fff)
pipe(0x0)
write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3)
read(0xffffffffffffffff, &(0x7f0000000b80)=""/270, 0xb37af43)
sendfile(r0, r3, &(0x7f0000d83ff8), 0x8000fffffffe)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x4fff})
ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000500)={<r6=>0xffffffffffffffff})
write$binfmt_misc(r6, &(0x7f00000000c0)=ANY=[], 0x7fffffff)
dup2(0xffffffffffffffff, r6)
dup2(0xffffffffffffffff, r5)
dup2(0xffffffffffffffff, 0xffffffffffffffff)

[  228.981369] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14720 sclass=netlink_route_socket pig=10212 comm=syz-executor.0
[  229.012565] DMA32 free:3019464kB min:4696kB low:7712kB high:10728kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:668kB local_pcp:668kB free_cma:0kB
12:52:21 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
pipe2(&(0x7f00000001c0), 0x4000)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000001, &(0x7f0000000200)=0x5, 0x59dec6f5544d6dbe)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10)
r1 = dup(r0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'})
socket$key(0xf, 0x3, 0x2)
sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYRES32], 0x1}}, 0x30004081)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup2(r5, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff})
ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000180))
sendto$inet(r0, &(0x7f00000000c0)="e0", 0xffd4, 0x0, 0x0, 0x0)
r7 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
ftruncate(r7, 0x108200)
r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r7, r8, 0x0, 0x8000fffffffe)
ioctl$SIOCGIFHWADDR(r7, 0x8927, &(0x7f0000000280))

[  229.066056] lowmem_reserve[]: 0 3505 3505
[  229.071079] Normal free:2306216kB min:5580kB low:9168kB high:12756kB active_anon:607732kB inactive_anon:35524kB active_file:18820kB inactive_file:69696kB unevictable:0kB writepending:976kB present:4718592kB managed:3589312kB mlocked:0kB slab_reclaimable:26392kB slab_unreclaimable:242996kB kernel_stack:8160kB pagetables:14628kB bounce:0kB free_pcp:1124kB local_pcp:668kB free_cma:0kB
[  229.116093] binder: 10221:10226 BC_INCREFS_DONE u0000000000000000 no match
[  229.116100] binder: 10221:10226 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  229.116108] binder: 10221:10226 got transaction to invalid handle
[  229.116115] binder: 10221:10226 transaction failed 29201/-22, size 0-0 line 3013
[  229.152218] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  229.290956] lowmem_reserve[]: 0 0 0
[  229.308413] DMA32: 4*4kB (UM) 3*8kB (M) 2*16kB (M) 4*32kB (UM) 4*64kB [  229.339520] binder: 10221:10230 BC_INCREFS_DONE u0000000000000000 no match
[  229.339527] binder: 10221:10230 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  229.339554] binder: 10221:10230 got transaction to invalid handle
[  229.339563] binder: 10221:10230 transaction failed 29201/-22, size 0-0 line 3013
[  229.441806] (UM) 4*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 2*2048kB (UM) 735*4096kB (M) = 3019464kB
[  229.501306] Normal: 855*4kB (UME) 628*8kB (UME) 861*16kB (UME) 115*32kB (UME) 164*64kB [  229.532066] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
12:52:21 executing program 2:
socket$unix(0x1, 0x5, 0x0)
syz_genetlink_get_family_id$tipc(0x0)
ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0))
wait4(0x0, &(0x7f00000000c0), 0x6000000a, 0x0)
pipe(&(0x7f0000000540)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4)
bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="d80000001900310e0000000000000000ac1e0001000000000000000000000000000100000000000000000a00"/63, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000008f2e3d86a1ae00000000000000000000000000000000000000000000000000000000000000000000001d55942398f1db218ba07a"], 0x4}, 0x8}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'nr0\x00'})
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8000001b, &(0x7f0000002400)={@local}, &(0x7f0000002440)=0xf)
getpeername$packet(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002800))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002980)={'ip6gretap0\x00'})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002a80)={'rose0\x00'})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000002b40)={@loopback}, &(0x7f0000002b80)=0x14)
r4 = openat$null(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$nl_netfilter(r4, 0x0, 0x40000)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000002bc0)={{{@in=@initdev, @in6=@mcast2}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000240)=0xde)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000ac0)={{{@in=@empty}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000002f40)=0x2d2)
syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000cc0)={{{@in=@multicast1, @in=@remote}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f0000003280)=0x237)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
open(&(0x7f0000000340)='./bus\x00', 0x250403, 0x0)
ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c)
sendto$inet(r2, 0x0, 0x47, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_script(r2, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x3d2)
setsockopt$sock_int(r2, 0x1, 0x1000000000008, &(0x7f0000000000)=0xda9, 0x4)
write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)

[  229.549901] (UME) 186*128kB (UME) 67*256kB (UME) 22*512kB (UM) 9*1024kB (UM) 2*2048kB (M) 532*4096kB (M) = 2281004kB
37985 total pagecache pages
[  229.586733] 0 pages in swap cache
[  229.593673] Swap cache stats: add 0, delete 0, find 0/0
[  229.604793] Free swap  = 0kB
[  229.619998] Total swap = 0kB
[  229.632311] 1965979 pages RAM
[  229.641795] 0 pages HighMem/MovableOnly
12:52:21 executing program 4:
io_setup(0x5, &(0x7f0000000100)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
r4 = dup2(r3, r2)
r5 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
r6 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x45c)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x28, 0x0, &(0x7f0000000240)=[@increfs_done, @free_buffer={0x40086303, r6}, @release={0x40046306, 0x3}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
r7 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
fcntl$setstatus(r7, 0x4, 0x2000)
ftruncate(r2, 0x108200)
r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r2, r8, 0x0, 0x8000fffffffe)
r9 = openat$cgroup_ro(r8, &(0x7f0000000080)='io.stat\x00', 0x0, 0x0)
readahead(r2, 0x4600, 0x9478)
ioctl$RTC_VL_READ(r9, 0x80047013, &(0x7f00000000c0))
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'gretap0\x00\x00\x00\x00\x01\x00', 0x1801})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b, 0xfffffffc}]}, 0x28}}, 0x0)
io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, 0x0, 0x521b395}])

12:52:21 executing program 0:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*', 0x1})
ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000000)=0x3)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x715403, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0)='TIPCv2\x00')
sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000000ac0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4002}, 0xc, &(0x7f0000000a80)={&(0x7f00000004c0)={0x1b0, r4, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x48, 0x4, [@TIPC_NLA_LINK_NAME={0x0, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_NET={0x14, 0x7, [@TIPC_NLA_NET_ADDR={0x0, 0x2, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6a3}]}, @TIPC_NLA_LINK={0xa0, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x0, 0x7, [@TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x14}, @TIPC_NLA_PROP_WIN]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 's\x02\\#\n'}, @TIPC_NLA_LINK_PROP={0x0, 0x7, [@TIPC_NLA_PROP_WIN={0x0, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x0, 0x3, 0xa2d}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x46ee}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x800017}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x14}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xdb}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x36}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}]}, @TIPC_NLA_LINK={0x80, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x0, 0x3, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5430}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x0, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x90000001}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r4, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000000000000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x9b3cd4a2dc6aeea8)
socketpair(0x5, 0x2, 0x7f, &(0x7f0000000280))
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1})

[  229.656207] 313618 pages reserved
12:52:22 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r2, &(0x7f00000004c0)=ANY=[], 0x0)

[  229.694273] binder: 10249:10251 BC_INCREFS_DONE u0000000000000000 no match
[  229.718666] binder: 10249:10251 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  229.732918] syz-executor.1: vmalloc: allocation failure: 0 bytes[  229.749117] binder: 10249:10258 BC_INCREFS_DONE u0000000000000000 no match
[  229.749123] binder: 10249:10258 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  229.749132] binder: 10249:10258 got transaction to invalid handle
[  229.749141] binder: 10249:10258 transaction failed 29201/-22, size 0-0 line 3013
[  229.749274] binder: 10249:10258 BC_INCREFS_DONE u0000000000000000 no match
[  229.749282] binder: 10249:10258 BC_FREE_BUFFER u0000000000000000 no match
[  229.749291] binder: 10249:10258 Release 1 refcount change on invalid ref 3 ret -22
[  229.749469] binder: 10249:10258 BC_INCREFS_DONE u0000000000000000 no match
[  229.749476] binder: 10249:10258 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  229.749482] binder: 10249:10258 got transaction to invalid handle
[  229.749489] binder: 10249:10258 transaction failed 29201/-22, size 0-0 line 3013
[  229.758051] binder: 10249:10251 got transaction to invalid handle
[  229.758063] binder: 10249:10251 transaction failed 29201/-22, size 0-0 line 3013
[  229.961780] binder: 10249:10251 BC_INCREFS_DONE u0000000000000000 no match
[  229.961787] binder: 10249:10251 BC_DEAD_BINDER_DONE 0000000000000000 not found
12:52:22 executing program 2:
r0 = socket$unix(0x1, 0x2, 0x0)
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080), &(0x7f0000000180)=0x4)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
read(r1, &(0x7f0000000200)=""/250, 0x50c7e70e)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r3)
r4 = open(&(0x7f0000000380)='./control\x00', 0x14b202, 0x88)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)=<r5=>0x0)
sched_setparam(r5, &(0x7f00000003c0)=0x4)
r6 = creat(&(0x7f0000000700)='./bus\x00', 0x11)
fcntl$setstatus(r6, 0x4, 0x6100)
set_tid_address(&(0x7f0000000040))
write$FUSE_INIT(r4, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50)
clone(0x2142001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x11000490)
write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d9189)
socket(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./control\x00', 0x8)
r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$FIDEDUPERANGE(r7, 0xc0189436, &(0x7f0000000440)=ANY=[@ANYBLOB="000000000000d7000000000000000000000000000000000000a1493343ccb69cc535c5f28a31b409df160f5bafe41612bfdfc235a6abe4b5354ec328132ba8addfd0f7d6d19dc7d347a52ec8b68b75c4d95471d63bcddff1bbfca41134759ee094bf67040fa165727014efcbc787bdaf3ae69d9a769eac7e8ce74ea0353b0c46b0f74a2e61aec711e5dea2d0d278f235a2f73f89f941bfe566753b6b863d013a84be215082e365b817493ca0"])
ioctl$RNDGETENTCNT(r7, 0x80045200, &(0x7f0000000340))
r8 = gettid()
r9 = syz_open_procfs(r8, &(0x7f00000001c0)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f')
write$selinux_context(r9, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b)
accept4$unix(r9, 0x0, &(0x7f0000000000), 0x800)
write$smack_current(r9, &(0x7f0000000240), 0x2b)
r10 = open(&(0x7f0000022ff6)='./control\x00', 0x20000, 0x0)
mkdirat(r10, &(0x7f0000000100)='./control\x00', 0x0)
rmdir(&(0x7f0000000040)='./control\x00')

[  229.961797] binder: 10249:10251 got transaction to invalid handle
[  229.961807] binder: 10249:10251 transaction failed 29201/-22, size 0-0 line 3013
[  229.962048] binder: 10249:10258 BC_INCREFS_DONE u0000000000000000 no match
[  229.962056] binder: 10249:10258 BC_FREE_BUFFER u0000000000000000 no match
[  229.962065] binder: 10249:10258 Release 1 refcount change on invalid ref 3 ret -22
[  229.992170] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  230.213293] , mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM)
[  230.225789] CPU: 1 PID: 10255 Comm: syz-executor.1 Not tainted 4.9.141+ #1
[  230.232836]  ffff88019a1a78a0 ffffffff81b42e79 1ffff10033434f16 ffff8801cbbeaf80
[  230.240941]  ffffffff82aa8c00 0000000000000001 0000000000400000 ffff88019a1a79e8
[  230.249069]  ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0
[  230.257163] Call Trace:
[  230.259753]  [<ffffffff81b42e79>] dump_stack+0xc1/0x128
[  230.265122]  [<ffffffff814fc7c8>] warn_alloc.cold.31+0x7f/0x9c
[  230.271102]  [<ffffffff81427db0>] ? zone_watermark_ok_safe+0x250/0x250
[  230.277857]  [<ffffffff81ba7d7b>] ? check_preemption_disabled+0x3b/0x200
[  230.284705]  [<ffffffff819eda5e>] ? avc_has_perm+0x9e/0x3a0
[  230.290422]  [<ffffffff814c9f8e>] __vmalloc_node_range+0x35e/0x600
[  230.296745]  [<ffffffff81ba7d7b>] ? check_preemption_disabled+0x3b/0x200
[  230.303966]  [<ffffffff81ba7d7b>] ? check_preemption_disabled+0x3b/0x200
12:52:22 executing program 5:
r0 = socket(0x200000000000011, 0x4000000000080002, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip6_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0)
r2 = creat(&(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x5)
fcntl$setstatus(r2, 0x4, 0x44700)
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000440)='fou\x00')
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in6, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8)
sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="040025bd7000ffdbdf25010000000800030067000000918b080002000200000008000800e00000030800952639154c0b4b00c9f20952c4d065dd12a6af5c60a87f55a1bd576c224c", @ANYRES32=r5], 0x34}, 0x1, 0x0, 0x0, 0x20002010}, 0x10000004)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}]]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x82, r10}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r10}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0)
sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r4, 0x302, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x8}, @FOU_ATTR_IFINDEX={0x8, 0xb, r10}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, [], 0x1f}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e24}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x64900)

[  230.310836]  [<ffffffff81a0e2b0>] ? task_has_security+0x130/0x270
[  230.317071]  [<ffffffff814ca71b>] vmalloc+0x5b/0x70
[  230.322110]  [<ffffffff81a122d5>] ? sel_write_load+0x135/0xfa0
[  230.328216]  [<ffffffff81a122d5>] sel_write_load+0x135/0xfa0
[  230.334025]  [<ffffffff81a121a0>] ? sel_read_bool+0x240/0x240
[  230.340243]  [<ffffffff812073b0>] ? trace_hardirqs_on+0x10/0x10
[  230.346298]  [<ffffffff812073b0>] ? trace_hardirqs_on+0x10/0x10
[  230.352351]  [<ffffffff81508085>] __vfs_write+0x115/0x580
[  230.357879]  [<ffffffff81a121a0>] ? sel_read_bool+0x240/0x240
[  230.363845]  [<ffffffff81507f70>] ? __vfs_read+0x560/0x560
[  230.369604]  [<ffffffff81ba7d7b>] ? check_preemption_disabled+0x3b/0x200
[  230.376457]  [<ffffffff81243e83>] ? rcu_read_lock_sched_held+0x103/0x120
[  230.383316]  [<ffffffff812445a3>] ? rcu_sync_lockdep_assert+0x73/0xb0
[  230.389910]  [<ffffffff815123d1>] ? __sb_start_write+0x161/0x300
[  230.396063]  [<ffffffff8150ab97>] vfs_write+0x187/0x520
[  230.401442]  [<ffffffff8150e9c9>] SyS_write+0xd9/0x1c0
[  230.406728]  [<ffffffff8150e8f0>] ? SyS_read+0x1c0/0x1c0
12:52:22 executing program 4:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00'})
setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x1)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'vet\x00\x00\x00_b\x1f\x1cC\xa5e\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
close(0xffffffffffffffff)

[  230.412184]  [<ffffffff81005598>] ? do_syscall_64+0x48/0x550
[  230.417989]  [<ffffffff8150e8f0>] ? SyS_read+0x1c0/0x1c0
[  230.424837]  [<ffffffff810056ef>] do_syscall_64+0x19f/0x550
[  230.430587]  [<ffffffff82817893>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb
[  230.437849] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  230.449693] Mem-Info:
[  230.452272] active_anon:157031 inactive_anon:15768 isolated_anon:0
[  230.452272]  active_file:4707 inactive_file:19290 isolated_file:0
[  230.452272]  unevictable:0 dirty:2137 writeback:0 unstable:0
[  230.452272]  slab_reclaimable:5478 slab_unreclaimable:70534
[  230.452272]  mapped:61300 shmem:20024 pagetables:3680 bounce:0
[  230.452272]  free:1308768 free_pcp:382 free_cma:0
[  230.490244] Node 0 active_anon:628124kB inactive_anon:63072kB active_file:18828kB inactive_file:77160kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:245200kB dirty:8548kB writeback:0kB shmem:80096kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no
12:52:22 executing program 3:
socket$inet6_udplite(0xa, 0x2, 0x88)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40000, 0x0)
write$P9_RWSTAT(r0, &(0x7f0000000080)={0x7, 0x7f, 0x1}, 0x7)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
ftruncate(r1, 0x108200)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
r3 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0)
mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
renameat2(r3, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f0000000280)='./file0\x00', 0x2)
renameat2(r3, 0x0, r3, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2)
sendmmsg$inet6(r3, &(0x7f00000005c0)=[{{&(0x7f0000000040)={0xa, 0x4, 0x3, @ipv4={[], [], @local}, 0x9}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000000c0)="3f8adc28e0961c1ff23197536878df59e46ee64018f5775055b3304e5c1ecfad7f55ff9564d9645f5943a72529c689bfe126ff30c8c1075252a9921fae876066f42e58423f1fedca319c2de42e105fdf27d0e4b664eeb32cdbaad43728348f6a7bc6c3f8250074cc74217b894b260391cf867c466ec7ebccd1c2a5d2725992aedd16f31beadb61bfdfa48c79fd0ad5d94402b1fd2346743c6dfdf2be6fc763a273613fd135889e53904f7d77bbddd601", 0xb0}, {&(0x7f0000000180)="9d92d6cc2e129e48a00ca33b3d36d61b956b541754243696fb8153ed0a7fe8bd58354b7576a4a77c848aa6f27a2986747c3eb3977b1de07b03f4e9779a904c99cf1c2b1353762bf825025053ef33131b7fdfd1204213ca58e38ab17bf0ccfeedcaf7948dd72bb875918d9b1b17886c103a58e1b95e9cc9dbcce54c505e2e946d2d9700bc0cd096398a2e8d2e62f344050e14a4082daab5d09f86f1284402ba3e0adf0d37264a3118297363a91328e2e6e8cdd1b4119071702623a9b6e9f103f2c248161d136e2b08318ec3fb525751da0d48323f4ca8348a", 0xfffffd39}, {&(0x7f0000000280)="430f61f0bd93489c3a3fc707b7a503da03fbcc346704a907057cd46fed270c42b2344fecded65e4a808cd95a650cd495a86edb19f921b13b510bc01b6dbc9138b97a3d42ed61cb3905dc45768b79cc2475cf6e57cd41575e9e7eb9", 0x5b}, {&(0x7f0000000600)="2b01841f8d9db3e0efeaa369bbc22333c3ac22920de6ce2e96b10359a2c8ef6d79390825c847cf6726b25836cce8b0f27c37aa2585192a46b8fd2610ebccd50c9d05abd7a4d8f8d9ef77b2ccc56ec8ffcb9578699be153b78898955fe920cbca7ce2681c7619e498cb66851df16226ecf9aca268cedfe21ea1fb2d2957e18481a253bd8d820f23ffdd442109c5c1bfcc44f356353ff098569cad757657165131f81783dd785782a2ce508592f53b533836d0c1373eb933fcb336666cdcf4ebe6b663ba2bccb0eacbf35c33e127a8", 0xce}, {&(0x7f0000000400)="9cad2dfb12e403d7d316f4ad55e3b032d82778f5585f68e99d0823ce66eee01524e79791315dd83c2cf8e580d2ef8984a2feb9d12054f087cc9a0b7babc7d1968fa3f880cc6fe9688d3e33b93839df109aae9ffae684610562df16f8", 0x5c}], 0x40, &(0x7f0000000500)=[@dstopts={{0x28, 0x29, 0x37, {0x73, 0x1, [], [@ra={0x5, 0x2, 0x8000}, @padn={0x1, 0x1, [0x0]}, @pad1]}}}, @rthdr={{0x78, 0x29, 0x39, {0x3b, 0xc, 0x0, 0x0, 0x0, [@local, @local, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev={0xfe, 0x80, [], 0x1d}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @loopback]}}}], 0xa0}}], 0x1, 0x44024)

[  230.516808] DMA32 free:3019464kB min:4696kB low:7712kB high:10728kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:668kB local_pcp:0kB free_cma:0kB
[  230.598176] lowmem_reserve[]: 0 3505 3505
[  230.603395] Normal free:2235508kB min:5580kB low:9168kB high:12756kB active_anon:624924kB inactive_anon:44672kB active_file:18828kB inactive_file:80160kB unevictable:0kB writepending:11508kB present:4718592kB managed:3589312kB mlocked:0kB slab_reclaimable:21912kB slab_unreclaimable:280580kB kernel_stack:8288kB pagetables:14720kB bounce:0kB free_pcp:1140kB local_pcp:440kB free_cma:0kB
12:52:23 executing program 4:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
close(r1)
open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0)
read(r1, &(0x7f0000000780)=""/229, 0xe5)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffff4)
r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000100)=[@increfs_done, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f00000001c0)="47d69844cd47a1c674eabfd1ba0091e1bd6ddd1ebed7478a350456d133ba46e9bd4a3d5503066c757b120fddb08e75c8e3cf1b7cd8cbe01069e3c831b5084a937da4c6bcb1f5dbd5"})
r3 = dup2(0xffffffffffffffff, r2)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3)

[  230.656497] lowmem_reserve[]: 0 0 0
12:52:23 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f00000000c0)={'IDLETIMER\x00'}, &(0x7f0000000100)=0x1e)
r3 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@dev}, 0x20)
tkill(r3, 0xb)
ptrace$setopts(0x4206, r3, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0), 0x0)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r4, 0x4, 0x6100)
ftruncate(r4, 0x108200)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x202000, 0x2)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf0}, 0x9}, 0x1c)

[  230.660737] DMA32: 4*4kB (UM) 3*8kB (M) 2*16kB (M) 4*32kB (UM) 4*64kB (UM) 4*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 2*2048kB (UM) 735*4096kB (M) = 3019464kB
[  230.737503] Normal: 1494*4kB (UME) 1430*8kB (UME) 1262*16kB (UME) 345*32kB (UME) 101*64kB (UME) 14*128kB (UME) 6*256kB (UME) 12*512kB (UM) 5*1024kB (UM) 0*2048kB 530*4096kB (M) = 2240584kB
38382 total pagecache pages
[  230.779616] 0 pages in swap cache
12:52:23 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r2, &(0x7f00000004c0)=ANY=[], 0x0)

12:52:23 executing program 5:
r0 = socket$unix(0x1, 0x2, 0x0)
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080), &(0x7f0000000180)=0x4)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
read(r1, &(0x7f0000000200)=""/250, 0x50c7e70e)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r3)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)=<r5=>0x0)
sched_setparam(r5, &(0x7f0000000140))
r6 = creat(&(0x7f0000000700)='./bus\x00', 0x11)
fcntl$setstatus(r6, 0x4, 0x6100)
set_tid_address(&(0x7f0000000040))
write$FUSE_INIT(r4, &(0x7f0000000180)={0x50, 0xfffffffffffffffe}, 0x50)
clone(0x2142001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x11000490)
write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d9189)
socket(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$FIDEDUPERANGE(r7, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000010000000000b86a20d4e0ad965982f933da811de94466862853ac3f4f0c92e8de7eb6764fbb37e1d1887f4161912e62f704bc9c8023a5053d022c7a9b99c8526b0090a15789125b0ef2c4768445002477d65bb3e6d53fea6618e63138cce08ff7ec2de81754d44891de7032647bc08320fdcc08a530a5f7e010d75dc50ba88c167bd078c5bf6ff938c787c59756e151579687a45f3da44fe005560edc3f755b00000000000000000000000000000000b533a145557b"])
ioctl$RNDGETENTCNT(r7, 0x80045200, &(0x7f0000000340))
r8 = gettid()
r9 = syz_open_procfs(r8, &(0x7f00000001c0)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f')
write$selinux_context(r9, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b)
accept4$unix(r9, 0x0, &(0x7f0000000000), 0x800)
write$smack_current(r9, &(0x7f0000000380)=ANY=[@ANYBLOB="1037f4f3b3a40313b1f23ec20fc88b6033e35027825a2add99fe5fca5d0a496dab8f75aefb044d4e710c9f3e4e98bad4de584a13"], 0x2b)
r10 = open(&(0x7f0000022ff6)='./control\x00', 0x20000, 0x0)
mkdirat(r10, &(0x7f0000000100)='./control\x00', 0x0)
getdents64(r10, &(0x7f0000fc4fbe)=""/80, 0x50)
unlinkat(r10, &(0x7f0000000140)='./control\x00', 0x0)
rmdir(&(0x7f0000000040)='./control\x00')

[  230.783319] Swap cache stats: add 0, delete 0, find 0/0
[  230.788903] Free swap  = 0kB
[  230.792008] Total swap = 0kB
[  230.795314] 1965979 pages RAM
[  230.798516] 0 pages HighMem/MovableOnly
[  230.802566] 313618 pages reserved
[  230.819203] binder: 10284:10287 BC_INCREFS_DONE u0000000000000000 no match
12:52:23 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r2, &(0x7f00000004c0)=ANY=[], 0x0)

12:52:23 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0)

[  230.840082] syz-executor.1: vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM)
[  230.840092] CPU: 1 PID: 10299 Comm: syz-executor.1 Not tainted 4.9.141+ #1
12:52:23 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0)

[  230.840107]  ffff8801a001f8a0 ffffffff81b42e79 1ffff10034003f16 ffff8801d636af80
[  230.840118]  ffffffff82aa8c00 0000000000000001 0000000000400000 ffff8801a001f9e8
[  230.840131]  ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0
[  230.840133] Call Trace:
[  230.840151]  [<ffffffff81b42e79>] dump_stack+0xc1/0x128
12:52:23 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0)

[  230.840164]  [<ffffffff814fc7c8>] warn_alloc.cold.31+0x7f/0x9c
[  230.840179]  [<ffffffff81427db0>] ? zone_watermark_ok_safe+0x250/0x250
[  230.840190]  [<ffffffff81ba7d7b>] ? check_preemption_disabled+0x3b/0x200
[  230.840200]  [<ffffffff819eda5e>] ? avc_has_perm+0x9e/0x3a0
[  230.840209]  [<ffffffff814c9f8e>] __vmalloc_node_range+0x35e/0x600
[  230.840216]  [<ffffffff81ba7d7b>] ? check_preemption_disabled+0x3b/0x200
[  230.840223]  [<ffffffff81ba7d7b>] ? check_preemption_disabled+0x3b/0x200
[  230.840232]  [<ffffffff81a0e2b0>] ? task_has_security+0x130/0x270
[  230.840238]  [<ffffffff814ca71b>] vmalloc+0x5b/0x70
[  230.840246]  [<ffffffff81a122d5>] ? sel_write_load+0x135/0xfa0
[  230.840254]  [<ffffffff81a122d5>] sel_write_load+0x135/0xfa0
[  230.840262]  [<ffffffff81a121a0>] ? sel_read_bool+0x240/0x240
[  230.840271]  [<ffffffff812073b0>] ? trace_hardirqs_on+0x10/0x10
[  230.840279]  [<ffffffff812073b0>] ? trace_hardirqs_on+0x10/0x10
[  230.840286]  [<ffffffff81508085>] __vfs_write+0x115/0x580
[  230.840294]  [<ffffffff81a121a0>] ? sel_read_bool+0x240/0x240
[  230.840301]  [<ffffffff81507f70>] ? __vfs_read+0x560/0x560
[  230.840309]  [<ffffffff81ba7d7b>] ? check_preemption_disabled+0x3b/0x200
[  230.840318]  [<ffffffff81243e83>] ? rcu_read_lock_sched_held+0x103/0x120
[  230.840325]  [<ffffffff812445a3>] ? rcu_sync_lockdep_assert+0x73/0xb0
[  230.840335]  [<ffffffff815123d1>] ? __sb_start_write+0x161/0x300
[  230.840342]  [<ffffffff8150ab97>] vfs_write+0x187/0x520
[  230.840349]  [<ffffffff8150e9c9>] SyS_write+0xd9/0x1c0
[  230.840356]  [<ffffffff8150e8f0>] ? SyS_read+0x1c0/0x1c0
[  230.840365]  [<ffffffff81005598>] ? do_syscall_64+0x48/0x550
[  230.840373]  [<ffffffff8150e8f0>] ? SyS_read+0x1c0/0x1c0
[  230.840379]  [<ffffffff810056ef>] do_syscall_64+0x19f/0x550
[  230.840389]  [<ffffffff82817893>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb
[  230.840393] Mem-Info:
[  230.840415] active_anon:156044 inactive_anon:8881 isolated_anon:0
[  230.840415]  active_file:4705 inactive_file:21515 isolated_file:0
[  230.840415]  unevictable:0 dirty:2315 writeback:999 unstable:0
[  230.840415]  slab_reclaimable:5556 slab_unreclaimable:69805
[  230.840415]  mapped:61300 shmem:12168 pagetables:3693 bounce:0
[  230.840415]  free:1315178 free_pcp:307 free_cma:0
[  230.840435] Node 0 active_anon:624176kB inactive_anon:35524kB active_file:18820kB inactive_file:86060kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:245200kB dirty:9260kB writeback:3996kB shmem:48672kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no
[  230.840455] DMA32 free:3019464kB min:4696kB low:7712kB high:10728kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:668kB local_pcp:0kB free_cma:0kB
lowmem_reserve[]: 0 3505 3505
[  230.840526] Normal free:2241248kB min:5580kB low:9168kB high:12756kB active_anon:624176kB inactive_anon:35524kB active_file:18820kB inactive_file:86060kB unevictable:0kB writepending:13256kB present:4718592kB managed:3589312kB mlocked:0kB slab_reclaimable:22224kB slab_unreclaimable:279220kB kernel_stack:8320kB pagetables:14772kB bounce:0kB free_pcp:560kB local_pcp:164kB free_cma:0kB
lowmem_reserve[]: 0 0 0
[  230.840827] DMA32: 4*4kB (UM) 3*8kB (M) 2*16kB (M) 4*32kB (UM) 4*64kB (UM) 4*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 2*2048kB (UM) 735*4096kB (M) = 3019464kB
12:52:23 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080))
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r2, 0x2081fd)
fcntl$setstatus(r1, 0x4, 0x6100)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
r3 = open(&(0x7f0000000140)='./bus\x00', 0x2, 0x0)
r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
r5 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
r6 = socket$inet(0x2, 0x4, 0x6d)
getsockopt$EBT_SO_GET_INIT_INFO(r6, 0x0, 0x82, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000180)=0x78)
fallocate(r5, 0x0, 0x0, 0x4003fe)
truncate(&(0x7f00000001c0)='./bus\x00', 0x557)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4})

12:52:23 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781500000000f601000800000007000000402c11000000000009000007000000000000000000000000385a580000000000000900000000000000010000000000000000000000ffffffff00000000000009593c88ff3ed359b6b342a5b31b628ee1bdff739b75074dc6a56b02e8864fe848c3040b8fe9058ea0150f5eedef22701042f06294212113a6e87c4ec8a30c6f553b606f1924da2ae7188a0128aaa01f9c"], 0xb0)

12:52:23 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000004c0)='./bus\x00', 0x0)
openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/validatetrans\x00', 0x1, 0x0)
r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./bus\x00', 0x0, 0x10}, 0x10)
fcntl$setstatus(r2, 0x4, 0x0)
truncate(&(0x7f00000000c0)='./bus\x00', 0x1000)
r3 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0)
lseek(r1, 0x0, 0x2)
sendfile(r1, r3, 0x0, 0x4000000000020009)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
pipe(0x0)
r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r6)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6)
r7 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r7)
r8 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
sendfile(r7, r8, 0x0, 0x80001d00c0d0)

12:52:23 executing program 0:
pipe(&(0x7f0000000400)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0x8d, 0x4000000000000800, 0x1}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000040), &(0x7f00000001c0)}, 0x20)
vmsplice(r2, &(0x7f00000001c0), 0x3ca, 0xe)
read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0x0, 0x4000000000000800, 0x1}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000040), &(0x7f00000001c0)}, 0x20)
fchdir(r3)
r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100))
r6 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r6, 0x4, 0x6100)
r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r7, &(0x7f00000000c0)='./file0\x00')
mkdirat(r7, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r8 = open(&(0x7f0000000080)='./bus\x00', 0x141046, 0x0)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ADD(r8, &(0x7f0000000740)={&(0x7f0000000040), 0xc, &(0x7f0000000700)={&(0x7f00000009c0)=ANY=[@ANYBLOB="64000000f501e2a7334f450b53a86b544fc9aa77dbab2c18af528bece978ebad1256ea000000808b76cc0aaf77a8e29f6bec87cad295bd816add1beb86d6deb4ad1a016029f75d028fbfa39bc2dab32e517a54d7b426a20f8d5e8e1b104e270fffc1f92a51df347765d916c6db", @ANYRES16=r9, @ANYBLOB="10002cbd7000fcdbdf2515000000440009080800020000000000080001000065d900000008000200e55d0000080002009104000008000200a800000008000100f7ffffff080002009801040008000200040000000c00060008000100090000ffc2ac1490be9197db688dfbdc4ca526c241932f2c30fc10233b32ec2696651487e0045ef38571ca0ae3cdd41cfc3e69463f8d2d8d72a6ac53cc9e6f7c7669c858b10956f4feab4e7e38ed61b9b52367e62e93a24412d644a8a3e72095ad4bca66e7e6620254"], 0x3}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000894)
sendmsg$TIPC_NL_BEARER_SET(r7, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000740)={0x208, r9, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x5c, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x24c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1e8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0xac, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffbcb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8d7}]}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x200000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}]}, @TIPC_NLA_NET={0x14, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x944}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3d8ca60e}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x96}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x20000000}, 0x400)
write$FUSE_INIT(r5, &(0x7f0000000000)={0xe}, 0x50)
clone(0x2142001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d9189)
socket(0x4, 0x2, 0x1e)
r10 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r10, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r10, 0xc0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x2, 0x0, <r11=>0x0, 0x0, &(0x7f0000000040)={0x0, 0x3}, 0x0, 0x0, &(0x7f0000000080)={0x3, 0x7, 0x5, 0x80000000}, &(0x7f00000000c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0x24}}, 0x10)
r12 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r12, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r12, 0xc0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x2, 0x0, <r13=>0x0, 0x0, &(0x7f0000000040)={0x0, 0x3}, 0x0, 0x0, &(0x7f0000000080)={0x3, 0x7, 0x5, 0x80000000}, &(0x7f00000000c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0x24}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=r13, 0x4)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r13, 0x4)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=r13, 0x4)
r14 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r11, 0x4)
fcntl$F_GET_RW_HINT(r14, 0x40b, &(0x7f0000000340))
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101})
write$input_event(r1, &(0x7f00000001c0)={{0x77359400}, 0x5, 0xfff8, 0x8}, 0x18)
readahead(0xffffffffffffffff, 0x6, 0x100000000)
pwrite64(r6, &(0x7f0000000500)="8f2d0b68f901b970c304881a7c0f467deff28699261da94e9957dad1060779f40d1e3467fd794bd2c5cf3ecc8e4420c793a17a7765aa22b3095e1c46fd66e58902d4df88541abfb4e779ca0dbbe2fc73a7534fae7b5bb18856c761e6778b30f7cfdb4029adf3aefb013bfde2a6e3790147250f9a388b1a3104152bcaa5b78257bd6c31793a51178b8ee4e87cc3d6c0c450b8c5bbe8ca12fb4fa7a6029f95bdd9fe26ceea89b8fc2d6a849ff182267e4d4d510aebeacd16c5435783cccb6d288342325685bc2ee2d44c6e16c946", 0xcd, 0x0)

Normal: 1590*4kB (UM) 1447*8kB (UME) 1269*16kB (UME) 343*32kB (UME) 101*64kB (UME) 14*128kB (UME) 6*256kB (UME) 12*512kB (UM) 5*1024kB (UM) 0*2048kB 530*4096kB (M) = 2241152kB
38387 total pagecache pages
[  230.840895] 0 pages in swap cache
[  230.840899] Swap cache stats: add 0, delete 0, find 0/0
[  230.840901] Free swap  = 0kB
[  230.840903] Total swap = 0kB
[  230.840906] 1965979 pages RAM
[  230.840908] 0 pages HighMem/MovableOnly
[  230.840910] 313618 pages reserved
[  230.867316] syz-executor.1: vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM)
[  230.867326] CPU: 1 PID: 10302 Comm: syz-executor.1 Not tainted 4.9.141+ #1
[  230.867342]  ffff8801ca9af8a0 ffffffff81b42e79 1ffff10039535f16 ffff8801a65817c0
[  230.867353]  ffffffff82aa8c00 0000000000000001 0000000000400000 ffff8801ca9af9e8
[  230.867364]  ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0
[  230.867366] Call Trace:
[  230.867385]  [<ffffffff81b42e79>] dump_stack+0xc1/0x128
[  230.867397]  [<ffffffff814fc7c8>] warn_alloc.cold.31+0x7f/0x9c
[  230.867408]  [<ffffffff81427db0>] ? zone_watermark_ok_safe+0x250/0x250
[  230.867423]  [<ffffffff81ba7d7b>] ? check_preemption_disabled+0x3b/0x200
[  230.867435]  [<ffffffff819eda5e>] ? avc_has_perm+0x9e/0x3a0
[  230.867444]  [<ffffffff814c9f8e>] __vmalloc_node_range+0x35e/0x600
[  230.867453]  [<ffffffff81ba7d7b>] ? check_preemption_disabled+0x3b/0x200
[  230.867461]  [<ffffffff81ba7d7b>] ? check_preemption_disabled+0x3b/0x200
[  230.867470]  [<ffffffff81a0e2b0>] ? task_has_security+0x130/0x270
[  230.867487]  [<ffffffff814ca71b>] vmalloc+0x5b/0x70
[  230.867500]  [<ffffffff81a122d5>] ? sel_write_load+0x135/0xfa0
[  230.867510]  [<ffffffff81a122d5>] sel_write_load+0x135/0xfa0
[  230.867521]  [<ffffffff81a121a0>] ? sel_read_bool+0x240/0x240
[  230.867534]  [<ffffffff812073b0>] ? trace_hardirqs_on+0x10/0x10
[  230.867545]  [<ffffffff812073b0>] ? trace_hardirqs_on+0x10/0x10
[  230.867555]  [<ffffffff81508085>] __vfs_write+0x115/0x580
[  230.867565]  [<ffffffff81a121a0>] ? sel_read_bool+0x240/0x240
[  230.867572]  [<ffffffff81507f70>] ? __vfs_read+0x560/0x560
[  230.867582]  [<ffffffff81ba7d7b>] ? check_preemption_disabled+0x3b/0x200
[  230.867591]  [<ffffffff81243e83>] ? rcu_read_lock_sched_held+0x103/0x120
[  230.867599]  [<ffffffff812445a3>] ? rcu_sync_lockdep_assert+0x73/0xb0
[  230.867608]  [<ffffffff815123d1>] ? __sb_start_write+0x161/0x300
[  230.867615]  [<ffffffff8150ab97>] vfs_write+0x187/0x520
[  230.867623]  [<ffffffff8150e9c9>] SyS_write+0xd9/0x1c0
[  230.867630]  [<ffffffff8150e8f0>] ? SyS_read+0x1c0/0x1c0
[  230.867639]  [<ffffffff81005598>] ? do_syscall_64+0x48/0x550
[  230.867646]  [<ffffffff8150e8f0>] ? SyS_read+0x1c0/0x1c0
[  230.867653]  [<ffffffff810056ef>] do_syscall_64+0x19f/0x550
[  230.867663]  [<ffffffff82817893>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb
[  230.867667] Mem-Info:
[  230.867687] active_anon:156069 inactive_anon:8881 isolated_anon:0
[  230.867687]  active_file:4705 inactive_file:21515 isolated_file:0
[  230.867687]  unevictable:0 dirty:1094 writeback:2257 unstable:0
[  230.867687]  slab_reclaimable:5556 slab_unreclaimable:69869
[  230.867687]  mapped:61300 shmem:12168 pagetables:3693 bounce:0
[  230.867687]  free:1315059 free_pcp:358 free_cma:0
[  230.867702] Node 0 active_anon:624276kB inactive_anon:35524kB active_file:18820kB inactive_file:86060kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:245200kB dirty:4376kB writeback:9028kB shmem:48672kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no
[  230.867723] DMA32 free:3019464kB min:4696kB low:7712kB high:10728kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:668kB local_pcp:0kB free_cma:0kB
lowmem_reserve[]: 0 3505 3505
[  230.867751] Normal free:2240772kB min:5580kB low:9168kB high:12756kB active_anon:624276kB inactive_anon:35524kB active_file:18820kB inactive_file:86060kB unevictable:0kB writepending:13256kB present:4718592kB managed:3589312kB mlocked:0kB slab_reclaimable:22224kB slab_unreclaimable:279476kB kernel_stack:8384kB pagetables:14772kB bounce:0kB free_pcp:764kB local_pcp:376kB free_cma:0kB
lowmem_reserve[]: 0 0 0
[  230.868172] DMA32: 4*4kB (UM) 3*8kB (M) 2*16kB (M) 4*32kB (UM) 4*64kB (UM) 4*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 2*2048kB (UM) 735*4096kB (M) = 3019464kB
Normal: 1559*4kB (UM) 1447*8kB (UME) 1269*16kB (UME) 333*32kB (UME) 101*64kB (UME) 14*128kB (UME) 6*256kB (UME) 12*512kB (UM) 5*1024kB (UM) 0*2048kB 530*4096kB (M) = 2240708kB
38387 total pagecache pages
[  230.868233] 0 pages in swap cache
[  230.868238] Swap cache stats: add 0, delete 0, find 0/0
[  230.868240] Free swap  = 0kB
[  230.868242] Total swap = 0kB
[  230.868245] 1965979 pages RAM
[  230.868247] 0 pages HighMem/MovableOnly
[  230.868249] 313618 pages reserved
[  230.933834] syz-executor.1: vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM)
[  230.933845] CPU: 1 PID: 10307 Comm: syz-executor.1 Not tainted 4.9.141+ #1
[  230.933860]  ffff8801cf9978a0 ffffffff81b42e79 1ffff10039f32f16 ffff8801d3910000
[  230.933872]  ffffffff82aa8c00 0000000000000001 0000000000400000 ffff8801cf9979e8
[  230.933884]  ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0
[  230.933886] Call Trace:
[  230.933904]  [<ffffffff81b42e79>] dump_stack+0xc1/0x128
[  230.933917]  [<ffffffff814fc7c8>] warn_alloc.cold.31+0x7f/0x9c
[  230.933927]  [<ffffffff81427db0>] ? zone_watermark_ok_safe+0x250/0x250
[  230.933937]  [<ffffffff81ba7d7b>] ? check_preemption_disabled+0x3b/0x200
[  230.933947]  [<ffffffff819eda5e>] ? avc_has_perm+0x9e/0x3a0
[  230.933956]  [<ffffffff814c9f8e>] __vmalloc_node_range+0x35e/0x600
[  230.933963]  [<ffffffff81ba7d7b>] ? check_preemption_disabled+0x3b/0x200
[  230.933971]  [<ffffffff81ba7d7b>] ? check_preemption_disabled+0x3b/0x200
[  230.933979]  [<ffffffff81a0e2b0>] ? task_has_security+0x130/0x270
[  230.933985]  [<ffffffff814ca71b>] vmalloc+0x5b/0x70
[  230.933992]  [<ffffffff81a122d5>] ? sel_write_load+0x135/0xfa0
[  230.934010]  [<ffffffff81a122d5>] sel_write_load+0x135/0xfa0
[  230.934020]  [<ffffffff81a121a0>] ? sel_read_bool+0x240/0x240
[  230.934034]  [<ffffffff812073b0>] ? trace_hardirqs_on+0x10/0x10
[  230.934044]  [<ffffffff812073b0>] ? trace_hardirqs_on+0x10/0x10
[  230.934051]  [<ffffffff81508085>] __vfs_write+0x115/0x580
[  230.934058]  [<ffffffff81a121a0>] ? sel_read_bool+0x240/0x240
[  230.934064]  [<ffffffff81507f70>] ? __vfs_read+0x560/0x560
[  230.934071]  [<ffffffff81ba7d7b>] ? check_preemption_disabled+0x3b/0x200
[  230.934080]  [<ffffffff81243e83>] ? rcu_read_lock_sched_held+0x103/0x120
[  230.934087]  [<ffffffff812445a3>] ? rcu_sync_lockdep_assert+0x73/0xb0
[  230.934095]  [<ffffffff815123d1>] ? __sb_start_write+0x161/0x300
[  230.934102]  [<ffffffff8150ab97>] vfs_write+0x187/0x520
[  230.934108]  [<ffffffff8150e9c9>] SyS_write+0xd9/0x1c0
[  230.934115]  [<ffffffff8150e8f0>] ? SyS_read+0x1c0/0x1c0
[  230.934122]  [<ffffffff81005598>] ? do_syscall_64+0x48/0x550
[  230.934129]  [<ffffffff8150e8f0>] ? SyS_read+0x1c0/0x1c0
[  230.934136]  [<ffffffff810056ef>] do_syscall_64+0x19f/0x550
[  230.934146]  [<ffffffff82817893>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb
[  230.934149] Mem-Info:
[  230.934170] active_anon:156619 inactive_anon:8881 isolated_anon:0
[  230.934170]  active_file:4705 inactive_file:20665 isolated_file:0
[  230.934170]  unevictable:0 dirty:243 writeback:37 unstable:0
[  230.934170]  slab_reclaimable:5556 slab_unreclaimable:69840
[  230.934170]  mapped:61300 shmem:12168 pagetables:3656 bounce:0
[  230.934170]  free:1315277 free_pcp:394 free_cma:0
[  230.934190] Node 0 active_anon:626476kB inactive_anon:35524kB active_file:18820kB inactive_file:82660kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:245200kB dirty:972kB writeback:148kB shmem:48672kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no
[  230.934211] DMA32 free:3019464kB min:4696kB low:7712kB high:10728kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:668kB local_pcp:0kB free_cma:0kB
lowmem_reserve[]: 0 3505 3505
[  230.934239] Normal free:2241644kB min:5580kB low:9168kB high:12756kB active_anon:626476kB inactive_anon:35524kB active_file:18820kB inactive_file:82660kB unevictable:0kB writepending:1120kB present:4718592kB managed:3589312kB mlocked:0kB slab_reclaimable:22224kB slab_unreclaimable:279360kB kernel_stack:8480kB pagetables:14624kB bounce:0kB free_pcp:908kB local_pcp:564kB free_cma:0kB
lowmem_reserve[]: 0 0 0
[  230.934300] DMA32: 4*4kB (UM) 3*8kB (M) 2*16kB (M) 4*32kB (UM) 4*64kB (UM) 4*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 2*2048kB (UM) 735*4096kB (M) = 3019464kB
Normal: 1501*4kB (UM) 1460*8kB (UME) 1276*16kB (UME) 336*32kB (UME) 103*64kB (UME) 14*128kB (UME) 7*256kB (UME) 13*512kB (UM) 5*1024kB (UM) 0*2048kB 530*4096kB (M) = 2241684kB
37562 total pagecache pages
[  230.934365] 0 pages in swap cache
[  230.934369] Swap cache stats: add 0, delete 0, find 0/0
[  230.934372] Free swap  = 0kB
[  230.934374] Total swap = 0kB
[  230.934376] 1965979 pages RAM
[  230.934378] 0 pages HighMem/MovableOnly
[  230.934381] 313618 pages reserved
[  230.998473] syz-executor.1: vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM)
[  230.998482] CPU: 1 PID: 10311 Comm: syz-executor.1 Not tainted 4.9.141+ #1
[  230.998498]  ffff8801a0aff8a0 ffffffff81b42e79 1ffff1003415ff16 ffff8801a06197c0
[  230.998510]  ffffffff82aa8c00 0000000000000001 0000000000400000 ffff8801a0aff9e8
[  230.998520]  ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0
[  230.998521] Call Trace:
[  230.998539]  [<ffffffff81b42e79>] dump_stack+0xc1/0x128
[  230.998555]  [<ffffffff814fc7c8>] warn_alloc.cold.31+0x7f/0x9c
[  230.998567]  [<ffffffff81427db0>] ? zone_watermark_ok_safe+0x250/0x250
[  230.998576]  [<ffffffff81ba7d7b>] ? check_preemption_disabled+0x3b/0x200
[  230.998586]  [<ffffffff819eda5e>] ? avc_has_perm+0x9e/0x3a0
[  230.998595]  [<ffffffff814c9f8e>] __vmalloc_node_range+0x35e/0x600
[  230.998603]  [<ffffffff81ba7d7b>] ? check_preemption_disabled+0x3b/0x200
[  230.998611]  [<ffffffff81ba7d7b>] ? check_preemption_disabled+0x3b/0x200
[  230.998620]  [<ffffffff81a0e2b0>] ? task_has_security+0x130/0x270
[  230.998626]  [<ffffffff814ca71b>] vmalloc+0x5b/0x70
[  230.998633]  [<ffffffff81a122d5>] ? sel_write_load+0x135/0xfa0
[  230.998641]  [<ffffffff81a122d5>] sel_write_load+0x135/0xfa0
[  230.998649]  [<ffffffff81a121a0>] ? sel_read_bool+0x240/0x240
[  230.998659]  [<ffffffff812073b0>] ? trace_hardirqs_on+0x10/0x10
[  230.998668]  [<ffffffff812073b0>] ? trace_hardirqs_on+0x10/0x10
[  230.998674]  [<ffffffff81508085>] __vfs_write+0x115/0x580
[  230.998681]  [<ffffffff81a121a0>] ? sel_read_bool+0x240/0x240
[  230.998688]  [<ffffffff81507f70>] ? __vfs_read+0x560/0x560
[  230.998695]  [<ffffffff81ba7d7b>] ? check_preemption_disabled+0x3b/0x200
[  230.998704]  [<ffffffff81243e83>] ? rcu_read_lock_sched_held+0x103/0x120
[  230.998712]  [<ffffffff812445a3>] ? rcu_sync_lockdep_assert+0x73/0xb0
[  230.998720]  [<ffffffff815123d1>] ? __sb_start_write+0x161/0x300
[  230.998734]  [<ffffffff8150ab97>] vfs_write+0x187/0x520
[  230.998744]  [<ffffffff8150e9c9>] SyS_write+0xd9/0x1c0
[  230.998752]  [<ffffffff8150e8f0>] ? SyS_read+0x1c0/0x1c0
[  230.998764]  [<ffffffff81005598>] ? do_syscall_64+0x48/0x550
[  230.998772]  [<ffffffff8150e8f0>] ? SyS_read+0x1c0/0x1c0
[  230.998782]  [<ffffffff810056ef>] do_syscall_64+0x19f/0x550
[  230.998794]  [<ffffffff82817893>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb
[  231.002298] Mem-Info:
[  231.002324] active_anon:157069 inactive_anon:8881 isolated_anon:0
[  231.002324]  active_file:4705 inactive_file:20040 isolated_file:0
[  231.002324]  unevictable:0 dirty:243 writeback:37 unstable:0
[  231.002324]  slab_reclaimable:5556 slab_unreclaimable:69840
[  231.002324]  mapped:61300 shmem:12168 pagetables:3656 bounce:0
[  231.002324]  free:1315422 free_pcp:450 free_cma:0
[  231.002343] Node 0 active_anon:628276kB inactive_anon:35524kB active_file:18820kB inactive_file:80160kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:245200kB dirty:972kB writeback:148kB shmem:48672kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no
[  231.002369] DMA32 free:3019464kB min:4696kB low:7712kB high:10728kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:668kB local_pcp:0kB free_cma:0kB
lowmem_reserve[]: 0 3505 3505
[  231.002399] Normal free:2242224kB min:5580kB low:9168kB high:12756kB active_anon:628276kB inactive_anon:35524kB active_file:18820kB inactive_file:80160kB unevictable:0kB writepending:1120kB present:4718592kB managed:3589312kB mlocked:0kB slab_reclaimable:22224kB slab_unreclaimable:279360kB kernel_stack:8512kB pagetables:14624kB bounce:0kB free_pcp:1132kB local_pcp:720kB free_cma:0kB
lowmem_reserve[]: 0 0 0
[  231.002455] DMA32: 4*4kB (UM) 3*8kB (M) 2*16kB (M) 4*32kB (UM) 4*64kB (UM) 4*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 2*2048kB (UM) 735*4096kB (M) = 3019464kB
Normal: 1490*4kB (UM) 1483*8kB (UME) 1294*16kB (UME) 341*32kB (UME) 103*64kB (UME) 14*128kB (UME) 7*256kB (UME) 13*512kB (UM) 5*1024kB (UM) 0*2048kB 530*4096kB (M) = 2242272kB
36912 total pagecache pages
[  231.002509] 0 pages in swap cache
[  231.002513] Swap cache stats: add 0, delete 0, find 0/0
[  231.002516] Free swap  = 0kB
[  231.002518] Total swap = 0kB
[  231.002520] 1965979 pages RAM
[  231.002522] 0 pages HighMem/MovableOnly
[  231.002524] 313618 pages reserved
[  231.057611] syz-executor.1: vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM)
[  231.057619] CPU: 1 PID: 10318 Comm: syz-executor.1 Not tainted 4.9.141+ #1
[  231.057640]  ffff8801d7d7f8a0 ffffffff81b42e79 1ffff1003afaff16 ffff8801c60caf80
[  231.057650]  ffffffff82aa8c00 0000000000000001 0000000000400000 ffff8801d7d7f9e8
[  231.057661]  ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0
[  231.057663] Call Trace:
[  231.057680]  [<ffffffff81b42e79>] dump_stack+0xc1/0x128
[  231.057694]  [<ffffffff814fc7c8>] warn_alloc.cold.31+0x7f/0x9c
[  231.057703]  [<ffffffff81427db0>] ? zone_watermark_ok_safe+0x250/0x250
[  231.057712]  [<ffffffff81ba7d7b>] ? check_preemption_disabled+0x3b/0x200
[  231.057722]  [<ffffffff819eda5e>] ? avc_has_perm+0x9e/0x3a0
[  231.057731]  [<ffffffff814c9f8e>] __vmalloc_node_range+0x35e/0x600
[  231.057738]  [<ffffffff81ba7d7b>] ? check_preemption_disabled+0x3b/0x200
[  231.057745]  [<ffffffff81ba7d7b>] ? check_preemption_disabled+0x3b/0x200
[  231.057751]  [<ffffffff81a0e2b0>] ? task_has_security+0x130/0x270
[  231.057758]  [<ffffffff814ca71b>] vmalloc+0x5b/0x70
[  231.057772]  [<ffffffff81a122d5>] ? sel_write_load+0x135/0xfa0
[  231.057778]  [<ffffffff81a122d5>] sel_write_load+0x135/0xfa0
[  231.057786]  [<ffffffff81a121a0>] ? sel_read_bool+0x240/0x240
[  231.057795]  [<ffffffff812073b0>] ? trace_hardirqs_on+0x10/0x10
[  231.057803]  [<ffffffff812073b0>] ? trace_hardirqs_on+0x10/0x10
[  231.057809]  [<ffffffff81508085>] __vfs_write+0x115/0x580
[  231.057816]  [<ffffffff81a121a0>] ? sel_read_bool+0x240/0x240
[  231.057823]  [<ffffffff81507f70>] ? __vfs_read+0x560/0x560
[  231.057831]  [<ffffffff81ba7d7b>] ? check_preemption_disabled+0x3b/0x200
[  231.057841]  [<ffffffff81243e83>] ? rcu_read_lock_sched_held+0x103/0x120
[  231.057848]  [<ffffffff812445a3>] ? rcu_sync_lockdep_assert+0x73/0xb0
[  231.057856]  [<ffffffff815123d1>] ? __sb_start_write+0x161/0x300
[  231.057864]  [<ffffffff8150ab97>] vfs_write+0x187/0x520
[  231.057870]  [<ffffffff8150e9c9>] SyS_write+0xd9/0x1c0
[  231.057876]  [<ffffffff8150e8f0>] ? SyS_read+0x1c0/0x1c0
[  231.057885]  [<ffffffff81005598>] ? do_syscall_64+0x48/0x550
[  231.057892]  [<ffffffff8150e8f0>] ? SyS_read+0x1c0/0x1c0
[  231.057898]  [<ffffffff810056ef>] do_syscall_64+0x19f/0x550
[  231.057907]  [<ffffffff82817893>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb
[  231.061128] Mem-Info:
[  231.061154] active_anon:157544 inactive_anon:8881 isolated_anon:0
[  231.061154]  active_file:4705 inactive_file:19415 isolated_file:0
[  231.061154]  unevictable:0 dirty:243 writeback:37 unstable:0
[  231.061154]  slab_reclaimable:5556 slab_unreclaimable:69652
[  231.061154]  mapped:61300 shmem:12168 pagetables:3693 bounce:0
[  231.061154]  free:1315704 free_pcp:468 free_cma:0
[  231.061174] Node 0 active_anon:630176kB inactive_anon:35524kB active_file:18820kB inactive_file:77660kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:245200kB dirty:972kB writeback:148kB shmem:48672kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no
[  231.061198] DMA32 free:3019464kB min:4696kB low:7712kB high:10728kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:668kB local_pcp:0kB free_cma:0kB
lowmem_reserve[]: 0 3505 3505
[  231.061231] Normal free:2243352kB min:5580kB low:9168kB high:12756kB active_anon:630176kB inactive_anon:35524kB active_file:18820kB inactive_file:77660kB unevictable:0kB writepending:1120kB present:4718592kB managed:3589312kB mlocked:0kB slab_reclaimable:22224kB slab_unreclaimable:278608kB kernel_stack:8640kB pagetables:14772kB bounce:0kB free_pcp:1204kB local_pcp:620kB free_cma:0kB
lowmem_reserve[]: 0 0 0
[  231.062251] DMA32: 4*4kB (UM) 3*8kB (M) 2*16kB (M) 4*32kB (UM) 4*64kB (UM) 4*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 2*2048kB (UM) 735*4096kB (M) = 3019464kB
Normal: 1504*4kB (UM) 1521*8kB (UME) 1313*16kB (UME) 355*32kB (UME) 104*64kB (UME) 14*128kB (UME) 7*256kB (UME) 13*512kB (UM) 5*1024kB (UM) 0*2048kB 530*4096kB (M) = 2243448kB
36287 total pagecache pages
[  231.062314] 0 pages in swap cache
[  231.062319] Swap cache stats: add 0, delete 0, find 0/0
[  231.062321] Free swap  = 0kB
[  231.062323] Total swap = 0kB
[  231.062326] 1965979 pages RAM
[  231.062328] 0 pages HighMem/MovableOnly
[  231.062330] 313618 pages reserved
[  231.623400] binder: 10284:10325 BC_INCREFS_DONE u0000000000000000 no match
[  231.623408] binder: 10284:10325 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  231.623418] binder: 10284:10325 got transaction to invalid handle
[  231.623427] binder: 10284:10325 transaction failed 29201/-22, size 0-0 line 3013
[  231.665688] kasan: CONFIG_KASAN_INLINE enabled
[  231.665692] kasan: GPF could be caused by NULL-ptr deref or user memory access
[  231.665706] general protection fault: 0000 [#1] PREEMPT SMP KASAN
[  231.665713] Modules linked in:
[  231.665724] CPU: 0 PID: 10334 Comm: syz-executor.1 Not tainted 4.9.141+ #1
[  231.665731] task: ffff8801d71c17c0 task.stack: ffff8801cbd58000
[  231.665755] RIP: 0010:[<ffffffff81a17f12>]  [<ffffffff81a17f12>] ebitmap_destroy+0x32/0x100
[  231.665761] RSP: 0018:ffff8801cbd5f3e8  EFLAGS: 00010202
[  231.665768] RAX: dffffc0000000000 RBX: ffff8801c486e6c0 RCX: ffffc9000273e000
[  231.665772] RDX: 0000000000000001 RSI: ffffffff81a17f01 RDI: 0000000000000008
[  231.665776] RBP: ffff8801cbd5f408 R08: ffff8801d71c20e0 R09: 0000000000000000
[  231.665781] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801cc5ce280
[  231.665785] R13: 1ffff100397abe89 R14: 0000000000000008 R15: ffff8801cbd5f4a8
[  231.665792] FS:  00007f343a9f2700(0000) GS:ffff8801db600000(0000) knlGS:0000000000000000
[  231.665797] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  231.665801] CR2: 0000000000400200 CR3: 00000001c918a000 CR4: 00000000001606b0
[  231.665809] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  231.665813] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
[  231.665814] Stack:
[  231.665826]  ffff8801c486e6c0 ffff8801cc5ce280 1ffff100397abe89 00000000ffffffea
[  231.665835]  ffff8801cbd5f428 ffffffff81a20997 ffff8801cbd5f908 ffff8801c486e6c0
[  231.665844]  ffff8801cbd5f4d0 ffffffff81a2124e ffff8801ce64a690 0000000000000058
[  231.665846] Call Trace:
[  231.665856]  [<ffffffff81a20997>] sens_destroy+0x47/0x90
[  231.665864]  [<ffffffff81a2124e>] sens_read+0x1de/0x360
[  231.665873]  [<ffffffff81a21070>] ? cat_read+0x340/0x340
[  231.665881]  [<ffffffff81a21070>] ? cat_read+0x340/0x340
[  231.665889]  [<ffffffff81a2b1ea>] policydb_read+0xdba/0x2390
[  231.665901]  [<ffffffff81077b8d>] ? __save_stack_trace+0x7d/0xf0
[  231.665909]  [<ffffffff81a2a430>] ? string_to_av_perm+0x90/0x90
[  231.665920]  [<ffffffff814ed84a>] ? ___slab_alloc.constprop.33+0x1ba/0x470
[  231.665929]  [<ffffffff814edf67>] ? kmem_cache_alloc_trace+0x117/0x2e0
[  231.665937]  [<ffffffff81a3b957>] ? security_load_policy+0x137/0x9b0
[  231.665946]  [<ffffffff81206da7>] ? mark_held_locks+0xc7/0x130
[  231.665957]  [<ffffffff81ba7d7b>] ? check_preemption_disabled+0x3b/0x200
[  231.665964]  [<ffffffff814f2095>] ? kasan_unpoison_shadow+0x35/0x50
[  231.665971]  [<ffffffff814f230f>] ? kasan_kmalloc+0xaf/0xc0
[  231.665981]  [<ffffffff814edf67>] ? kmem_cache_alloc_trace+0x117/0x2e0
[  231.665989]  [<ffffffff81a3b957>] ? security_load_policy+0x137/0x9b0
[  231.665997]  [<ffffffff81a3ba84>] security_load_policy+0x264/0x9b0
[  231.666005]  [<ffffffff81a3b820>] ? security_get_bools+0x690/0x690
[  231.666014]  [<ffffffff81243e83>] ? rcu_read_lock_sched_held+0x103/0x120
[  231.666025]  [<ffffffff8142925f>] ? __alloc_pages_nodemask+0x11df/0x1bd0
[  231.666032]  [<ffffffff812073b0>] ? trace_hardirqs_on+0x10/0x10
[  231.666041]  [<ffffffff81215575>] ? do_raw_spin_unlock+0x135/0x210
[  231.666050]  [<ffffffff81428080>] ? gfp_pfmemalloc_allowed+0x110/0x110
[  231.666060]  [<ffffffff814c79c2>] ? vmap_page_range_noflush+0x512/0x770
[  231.666068]  [<ffffffff814c74b0>] ? alloc_vmap_area.isra.8+0x8d0/0x8d0
[  231.666074]  [<ffffffff814f2095>] ? kasan_unpoison_shadow+0x35/0x50
[  231.666082]  [<ffffffff81243c87>] ? debug_lockdep_rcu_enabled+0x77/0x90
[  231.666091]  [<ffffffff814fae90>] ? check_stack_object+0x110/0x150
[  231.666100]  [<ffffffff814fb118>] ? __check_object_size+0x248/0x38e
[  231.666108]  [<ffffffff81a1233b>] sel_write_load+0x19b/0xfa0
[  231.666116]  [<ffffffff81a121a0>] ? sel_read_bool+0x240/0x240
[  231.666124]  [<ffffffff812073b0>] ? trace_hardirqs_on+0x10/0x10
[  231.666132]  [<ffffffff812073b0>] ? trace_hardirqs_on+0x10/0x10
[  231.666140]  [<ffffffff81508085>] __vfs_write+0x115/0x580
[  231.666147]  [<ffffffff81a121a0>] ? sel_read_bool+0x240/0x240
[  231.666154]  [<ffffffff81507f70>] ? __vfs_read+0x560/0x560
[  231.666163]  [<ffffffff81ba7d7b>] ? check_preemption_disabled+0x3b/0x200
[  231.666172]  [<ffffffff81243e83>] ? rcu_read_lock_sched_held+0x103/0x120
[  231.666179]  [<ffffffff812445a3>] ? rcu_sync_lockdep_assert+0x73/0xb0
[  231.666188]  [<ffffffff815123d1>] ? __sb_start_write+0x161/0x300
[  231.666195]  [<ffffffff8150ab97>] vfs_write+0x187/0x520
[  231.666202]  [<ffffffff8150e9c9>] SyS_write+0xd9/0x1c0
[  231.666209]  [<ffffffff8150e8f0>] ? SyS_read+0x1c0/0x1c0
[  231.666216]  [<ffffffff81005598>] ? do_syscall_64+0x48/0x550
[  231.666222]  [<ffffffff8150e8f0>] ? SyS_read+0x1c0/0x1c0
[  231.666228]  [<ffffffff810056ef>] do_syscall_64+0x19f/0x550
[  231.666238]  [<ffffffff82817893>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb
[  231.666356] Code: 89 fe 41 55 41 54 53 e8 6d 3b 90 ff 4d 85 f6 0f 84 a6 00 00 00 e8 5f 3b 90 ff 4c 89 f2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 a5 00 00 00 49 8b 1e 48 85 db 74 32 49 bd 00 
[  231.666366] RIP  [<ffffffff81a17f12>] ebitmap_destroy+0x32/0x100
[  231.666368]  RSP <ffff8801cbd5f3e8>
[  231.666375] ---[ end trace db09ed31a8e97e11 ]---
[  231.666381] Kernel panic - not syncing: Fatal exception
[  231.667205] Kernel Offset: disabled
[  233.821951] Rebooting in 86400 seconds..