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", 0x1000}, {&(0x7f0000001e00)="2ca9ad621bbe14babc78d25b004b29c69d57911cd90f5c21f027caf250dba4eab56f6a56c6dfb05018ab00073d2e4937c99108c7fb5100d05e68ba1c68b7189a944de42a8a9de820646fecef226e661184ee3ca1eb857e1eb3d0ff3df40bc6f2bd05af6190dc0e4bab643c889e779460a7d49c6ff5e91d35dab45888b4ec76d0904f5529", 0x84}, {&(0x7f0000001ec0)="9be654c443d39c2a61950a28b8740468632e1e7216082e2497f9f1ce66ab99f2436255a0898eae1a4287a5cca45389445802df1a9f23a01b6cd6a1f9d029b85bec968393fd7840f68fe242c69ec947d251d59a6634448bb0876a16bd9facc871df51165014b36ceff7d5880a9b4fbfccd3769bcdbf42a2e89a0cd19930bd463ed640f3ff78d76216c5decb5a8d2db96696c577628f52af9a3aa5b149d7bf1969805ab73851550f2b93f1a3dc8e5828f0d3cf9f646d30d9a57992bb0f05b9c58dc396c6f611cfc1cb72196348d86f6c7096c196bd27c66df5870812b24c82bad45b4174fa74dabd242e3438979e2057806267004f117f05", 0xf7}, {&(0x7f0000001fc0)="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", 0xfd}, {&(0x7f00000020c0)="9e8f5d7dd0a8980d68078c3fc83c9272069328b3cd245f115dcad9eb91b0e3912d85979823eaa2fc8e002f8c51665d6bfb30e4e57c2cedaccbccbe0619b237e6a3b4bfc68d97125d37f76ffbbc1a61d090da587ce63561cb0919bd7c01b53e479f9302a7fdf0758740ae5691c86b5ded5df730bfa56893c0b3f11a893bed5d33a1b0523aa4cc32f9be0710a7678ee12440374d731ccc00ca296722eae0", 0x9d}, {&(0x7f0000002180)="1cd707e159eadeb6399f46ea5de9a360c9f25b10806491f3149a5ecfeb22d4552477a2ae5180ce937d329f5b0000fd39e25d23850d4e7ccf9ccd1e363e45238d10e3d844d68cd892b46b1f6e30de24c37654f31dfd1aeca47024446d0e2ada442871eea5c55f367cbb5dbb5a7a129a7d792ce8866da4773871d63766e442ce4e810b4ded4190bb26086e999bb604c947d906f40309b9ac38", 0x98}], 0x9}, 0xffffffff80000001}, {{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000002300)="6e61a740a67c2b47e7707e41d51646efff12ac487674c49d182dfcf2a7ad7d8fd80f3c3e92d3cb46fe99549bcecce58a9285945f9aab6a4529ece6bdf53df981352189ae44da021de1b0618c2e9ea09dc7a1ca422fca6162824d88d3004df9337d91d3b8f30799d9e8ceb683de5c708c664a392f3e50b2401ee31b8430607522a46c056fb2b4332cf61efbc5292a7ef49e4d15767febb67f749132cc359683f75d44cee79250c435682b6b38e0d68c09327a5f5ed279304ee17955400206d957c852bfb45fdfd74c90b2390e519022428c5468aa6ec583", 0xd7}, {&(0x7f0000002400)="51406e628ca0738514052be27da0b982697fa30285df45ae6e1488b3e1af1f900e3d9d782a36c7412a7729b6d114b8089fa9a3917a7e5b7ac8f28f252405e585ffdcbea5bedffd671a39873fb1570f1ec025a675d1dda136d91629", 0x5b}], 0x2, &(0x7f00000024c0)=[{0x30, 0x1ff, 0x7, "cba2716ae62e01ed47b55d8d3a0384642053bc36b2fbfe98393debe5"}, {0x70, 0x118, 0x1, "ff87ab9035f5bdd7218762b82adc4ce513a7f990c106bb102d7bdb4b44d5c908e2585d1ff8eea1905f98ce4effcef7b0ed5c54251ee67a98a3b5c9803f516383c286acf1d273ef28cd8403721a39c16bc06c19a5492f63d4afaa"}, {0x98, 0x10b, 0x2, "4a02aba2b529dcbca210f1d6098608066ec58064cdb974c67bb109701052323b6a28a12ec96542c3798e5e71fa198d83b891067396e5015a9b9216db38656fe438e0ac59e0798d4f68f0b1fa17d8844d0a38be835eb2e7622c4a35176f3d529f6c8180a5902a0e12e8058c03a9a473b2e0284df6b13214ef3dab63c040d84c626ec58037"}], 0x138}, 0xfff}], 0x5, 0x4000080) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000041, 0x0) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000001c0)) [ 1072.613037] binder: undelivered TRANSACTION_ERROR: 29189 [ 1072.644669] binder_alloc: 16388: binder_alloc_buf, no vma [ 1072.654977] binder: 16388:16389 transaction failed 29189/-3, size 0-0 line 3135 [ 1072.701515] binder: undelivered TRANSACTION_ERROR: 29189 [ 1072.707180] binder: send failed reply for transaction 1722 to 16388:16389 [ 1072.724405] binder: undelivered TRANSACTION_COMPLETE [ 1072.755322] binder: undelivered TRANSACTION_ERROR: 29189 16:50:21 executing program 3: prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='\"h\x13\xa1H\xa8]Lc\x01\x04\x80{\x80[\"\x9d\xe8\xdc\xbf\x99\r\xff\xcf>') seccomp(0x1, 0x3, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x8000000010006, 0x0, 0x0, 0x50000}]}) pipe2(0x0, 0x0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000080)={@local}, &(0x7f00000000c0)=0x14) 16:50:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)=[@increfs_done={0x40106308, r3, 0x4}], 0xc3, 0x0, &(0x7f0000000440)="6776cedac87f391505c46226710ea05239c5928ee974c6270f82e69c7786134e7b1a01849121d3c66c6700adbfd8797d0e17d50b1d68ff901018b0321a34b1f16505e24a90d1f14b2e18f30a18f57cf31fccfcb39559dce6adfd2cc24f653ef82b96e00093bd380b238e84746f6b892ffafa56ad0f3b48cc31821029363000b825782721bd75d37b9efbe93758d3b97107f4e922c01e33b325de8112df09db67775a29772d56fae7d23eb917cd734f2b8081c4bdf0e55e02d682de0a2e2197b5aa1b3c"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1073.208763] audit: type=1326 audit(1547398221.111:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=16414 comm=226813A148A85D4C630104807B805B exe="/root/syz-executor3" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0x50000 [ 1073.249192] binder: 16415:16417 BC_INCREFS_DONE u0000000000000000 node 1726 cookie mismatch 0000000000000004 != 0000000000000000 [ 1073.265401] audit: type=1326 audit(1547398221.141:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=16414 comm=226813A148A85D4C630104807B805B exe="/root/syz-executor3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457ec9 code=0x50000 [ 1073.296107] audit: type=1326 audit(1547398221.141:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=16414 comm=226813A148A85D4C630104807B805B exe="/root/syz-executor3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457ec9 code=0x50000 [ 1073.300368] binder_alloc: 16415: binder_alloc_buf, no vma [ 1073.323036] audit: type=1326 audit(1547398221.141:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=16414 comm=226813A148A85D4C630104807B805B exe="/root/syz-executor3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457ec9 code=0x50000 [ 1073.327502] binder: 16415:16418 transaction failed 29189/-3, size 0-0 line 3135 [ 1073.352851] audit: type=1326 audit(1547398221.141:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=16414 comm=226813A148A85D4C630104807B805B exe="/root/syz-executor3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457ec9 code=0x50000 [ 1073.386837] audit: type=1326 audit(1547398221.141:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=16414 comm=226813A148A85D4C630104807B805B exe="/root/syz-executor3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457ec9 code=0x50000 [ 1073.412490] audit: type=1326 audit(1547398221.141:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=16414 comm=226813A148A85D4C630104807B805B exe="/root/syz-executor3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457ec9 code=0x50000 [ 1073.438123] audit: type=1326 audit(1547398221.151:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=16414 comm=226813A148A85D4C630104807B805B exe="/root/syz-executor3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457ec9 code=0x50000 [ 1073.463812] audit: type=1326 audit(1547398221.151:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=16414 comm=226813A148A85D4C630104807B805B exe="/root/syz-executor3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457ec9 code=0x50000 [ 1074.028785] binder: undelivered TRANSACTION_ERROR: 29189 [ 1074.034718] binder: send failed reply for transaction 1727 to 16415:16417 [ 1074.059021] binder: undelivered TRANSACTION_COMPLETE [ 1074.072922] binder: undelivered TRANSACTION_ERROR: 29189 16:50:23 executing program 0: r0 = socket$inet(0x2, 0x4080000000000001, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) 16:50:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x100, 0x1, 0x1, r3}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r4, 0x8200) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000041, 0x0) 16:50:23 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x4000, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/108, 0x6c}, {&(0x7f0000000100)=""/25, 0x19}, {&(0x7f0000000140)}, {&(0x7f0000000200)=""/4096, 0x1000}], 0x4) r1 = socket$inet(0x2, 0x7, 0x100000001) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000040)="071f080000000000970600c6fe76cff3e26def23000200000811000013", 0x1d) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000001240)='/dev/full\x00', 0x40, 0x0) ioctl$TIOCSCTTY(r2, 0x540e, 0x8) getsockopt$inet_opts(r1, 0x0, 0x4, 0x0, &(0x7f00000001c0)) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup(r3, &(0x7f0000001200)='syz1\x00', 0x200002, 0x0) 16:50:23 executing program 4: mkdir(&(0x7f0000000500)='./control/file1\x00', 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff}) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000580)={@dev={0xac, 0x14, 0x14, 0x25}, @loopback, 0x1, 0x3, [@local, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, 0x1c) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)='ramfs\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) epoll_create1(0x7fffd) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fcntl$dupfd(r2, 0x1, r2) stat(&(0x7f0000002c40)='./file0\x00', 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f00000000c0)='./file0\x00'}, 0x10) r6 = syz_open_dev$loop(0x0, 0x0, 0x4082) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000380)=0xffffffffffffff17, 0x80800) r7 = memfd_create(&(0x7f0000000100)='/dev/loop#\x00', 0x0) pwritev(r7, &(0x7f0000000480)=[{&(0x7f00000004c0)="2bd83b0010947db9141978d2d9c93f59a4f3ec7e1e3f0981", 0x18}], 0x1, 0x81806) ioctl$TIOCLINUX5(r3, 0x541c, &(0x7f0000000340)={0x5, 0x0, 0x6, 0x0, 0x8cf}) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f00000001c0)=0x7fff) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r8 = getpgid(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r3, 0x50, &(0x7f0000000280)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={r8, r5, 0x0, 0x6, &(0x7f0000000200)='ramfs\x00', r9}, 0x30) sendfile(r3, r6, &(0x7f0000000300), 0x2000006) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x400000000000064, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) r10 = open(&(0x7f0000000380)='./control\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./control/file1\x00', r10, 0x0) 16:50:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RSETATTR(r2, &(0x7f0000000100)={0x7, 0x1b, 0x2}, 0x7) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) [ 1075.372534] binder: 16423:16426 unknown command 0 16:50:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000000)={0x7, 0x6, {0x52, 0x7fff, 0xc71, {0x1000, 0xffff}, {0x5, 0xffff}, @ramp={0x3ff, 0x10000, {0x2, 0x4, 0x2, 0x7f}}}, {0x57, 0x100, 0x1, {0x1f, 0x2}, {0x0, 0x1ff}, @const={0xffffffff80000000, {0x0, 0x1, 0x8, 0x100}}}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r3, 0x8200) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000041, 0x0) [ 1075.401152] binder: 16423:16426 ioctl c0306201 20000040 returned -22 16:50:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x400) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)='\x00'}, 0x30) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x100000001) getsockopt(r1, 0x7, 0x200, &(0x7f0000000380)=""/141, &(0x7f00000000c0)=0x8d) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:50:23 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000580)) fstatfs(r0, &(0x7f0000000000)) clock_settime(0x7, &(0x7f0000000000)={0x0, 0x989680}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@filter={'filter\x00', 0xe, 0x3, 0x450, [0x0, 0x20000080, 0x200001b0, 0x200004a0], 0x0, &(0x7f0000000040), &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x34, 0x9200, 'bridge_slave_1\x00', 'team0\x00', 'tunl0\x00', 'erspan0\x00', @broadcast, [0xff, 0xff, 0xff, 0x0, 0xff], @local, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], 0xd0, 0xd0, 0x100, [@arp={'arp\x00', 0x38, {{0x110, 0xf9ff, 0x9, @local, 0xffffff00, @broadcast, 0xffffffff, @empty, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0x54, 0x20}}}]}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x2, [{{{0x9, 0x39, 0xfbff, 'tunl0\x00', 'bcsh0\x00', 'ip6_vti0\x00', 'veth1_to_team\x00', @dev={[], 0x13}, [0xff, 0x0, 0x0, 0x0, 0xff], @empty, [0x0, 0xff, 0xff, 0x0, 0xff, 0xa34cdb72928dfdbc], 0x198, 0x1d0, 0x220, [@comment={'comment\x00', 0x100}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffc}}}]}, @common=@log={'log\x00', 0x28, {{0x6, "5ae3ecbd7a3424732495822c5d78278af02b6af3d260754916bbf81b2e51", 0x5}}}}, {{{0x11, 0x10, 0xfbff, 'veth0_to_bridge\x00', 'batadv0\x00', 'tunl0\x00', 'bridge_slave_0\x00', @remote, [0x0, 0xff], @remote, [0xff, 0xff, 0xff, 0x0, 0xff], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff}]}, 0x4c8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0xfffffffffffffffc, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3b6) [ 1075.469327] binder: send failed reply for transaction 1732 to 16423:16426 [ 1075.502685] binder: undelivered TRANSACTION_COMPLETE 16:50:23 executing program 5: getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000001c0), 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000400)=""/4096, &(0x7f0000000080)=0x1000) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x20000000000002, 0x70, 0xee6a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000040), 0x0) clone(0x2902001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000015c0)='./file0/file0\x00', 0x13) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000180)) getpid() pipe2$9p(0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x3, 0x182) r3 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) fsetxattr$security_smack_entry(r3, &(0x7f0000000240)='security.SMACK64EXEC\x00', &(0x7f0000000200)='syz', 0x3, 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81805) io_setup(0x8000, &(0x7f0000000140)=0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000280)) io_destroy(r4) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f00000000c0)=0xcfad) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$LOOP_CLR_FD(r2, 0x4c01) socket(0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x31, 0xffffffffffffffff, 0x0) [ 1075.537416] binder: undelivered TRANSACTION_ERROR: 29189 [ 1075.553781] binder_alloc: 16447: binder_alloc_buf, no vma 16:50:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x8200) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000041, 0x0) [ 1075.596830] binder: 16447:16453 transaction failed 29189/-3, size 0-0 line 3135 [ 1075.649363] binder_alloc: binder_alloc_mmap_handler: 16447 20001000-20004000 already mapped failed -16 [ 1075.681741] binder: BINDER_SET_CONTEXT_MGR already set [ 1075.687037] binder: 16447:16453 ioctl 40046207 0 returned -16 [ 1075.718602] binder_alloc: 16447: binder_alloc_buf, no vma [ 1075.724655] binder: 16447:16468 transaction failed 29189/-3, size 24-8 line 3135 [ 1075.751681] binder: 16447:16468 got transaction to invalid handle [ 1075.776263] binder: 16447:16468 transaction failed 29201/-22, size 0-0 line 3012 [ 1075.798144] binder: undelivered TRANSACTION_ERROR: 29189 [ 1075.803855] binder: undelivered TRANSACTION_ERROR: 29189 [ 1075.822902] binder: send failed reply for transaction 1736 to 16447:16453 [ 1075.854478] binder: undelivered TRANSACTION_ERROR: 29201 [ 1075.866061] binder: undelivered TRANSACTION_COMPLETE [ 1075.883092] binder: undelivered TRANSACTION_ERROR: 29189 16:50:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000041, 0x0) 16:50:24 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) 16:50:24 executing program 4: r0 = memfd_create(&(0x7f0000000540)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00O\x04\x1e\xb9\a5\xaeP\xdfP\x0e\x01\xe7\xbc\x02\bQ\xc0\xd8\xac\xaf\x7f\x01\x1bo\xc3JtVo(\x93u\x9f\x95\xadg\xd7\xb2n\xba[%\xc8;\rS~;\xb7\xd0v\x16\xfeeW\x06q\x14@\xa7+`\xe3|k\xf5\xe0/L\x15\xd9~\xe3[\xea\xe8\xdby\xf3\xea3\x1b\x94\x97Y%+\xeel\x01\xa2\xc5m\x93\xfa\xa1\xa4\x93Q\xd3\xd4\x03B\xae', 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) preadv(r2, &(0x7f0000000440)=[{&(0x7f0000000000)=""/133}, {&(0x7f00000000c0)=""/27}, {&(0x7f00000004c0)=""/91}, {&(0x7f0000000200)=""/84}, {&(0x7f00000005c0)=""/4096}, {&(0x7f0000000380)=""/177}], 0xfffffffffffffba, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000280), &(0x7f00000002c0)=0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0x90000000}) 16:50:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x0, 0x0) getsockname(r2, &(0x7f0000000280)=@isdn, &(0x7f0000000200)=0x80) prctl$PR_SET_SECUREBITS(0x1c, 0x8) lstat(&(0x7f00000006c0)='./file1\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000780)=0x0, &(0x7f00000007c0), &(0x7f0000000800)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getresuid(&(0x7f00000008c0)=0x0, &(0x7f0000000900), &(0x7f0000000940)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000980)={{{@in, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@initdev}}, &(0x7f0000000a80)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000ac0)={{{@in6=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000000bc0)=0xe8) stat(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)=0x0) getgroups(0xa, &(0x7f0000000d80)=[0x0, 0xee01, 0x0, 0xee01, 0xffffffffffffffff, 0x0, 0xee00, 0xee01, 0x0, 0xee01]) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, &(0x7f0000000e00)=0xc) stat(&(0x7f0000000e40)='./file0\x00', &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='system.posix_acl_access\x00', &(0x7f0000000f00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x1, r4}, {0x2, 0x1, r5}, {0x2, 0x2, r6}, {0x2, 0x4, r7}, {0x2, 0x6, r8}], {}, [{0x8, 0x5, r9}, {0x8, 0x1, r10}, {0x8, 0x4, r11}, {0x8, 0x3, r12}, {0x8, 0x1, r13}], {0x10, 0x4}, {0x20, 0x1}}, 0x7c, 0x3) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="67d0bca3004000000004"], @ANYPTR=&(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000cf4c23572557b9fb2b7c"]], 0x0, 0x0, 0x0}) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000380)=0x9) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f00000004c0)=""/150) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)) lsetxattr$security_smack_entry(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='security.SMACK64\x00', &(0x7f0000000600)='*ppp0\x00', 0x6, 0x2) fadvise64(r1, 0x0, 0x8, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) fcntl$notify(r14, 0x402, 0x20) write$P9_RRENAME(r16, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) 16:50:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000680)='/dev/vga_arbiter\x00', 0x80100, 0x0) pipe(&(0x7f0000000800)) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000e80)='/selinux/status\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xffffffffffffffff) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="00ffffffff"]) set_thread_area(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0xc0c0583b, 0x20000001) r4 = syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@initdev}}, &(0x7f0000000400)=0xe8) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000440)={@empty, 0x0}, &(0x7f0000000480)=0x14) getsockname$packet(r2, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000500)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@mcast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000640)=0xe8) accept$packet(r3, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000740)=0x14) recvmsg(r2, &(0x7f0000000ac0)={&(0x7f0000000780)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)}, {&(0x7f0000000840)=""/206, 0xce}, {&(0x7f0000000940)=""/28, 0x1c}, {&(0x7f0000000980)=""/57, 0x39}, {&(0x7f00000009c0)=""/17, 0x11}, {&(0x7f0000000a00)=""/46, 0x2e}], 0x6}, 0x41) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000b00)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000c00)=0xe8) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000c40)={@rand_addr, @rand_addr, 0x0}, &(0x7f0000000c80)=0xc) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000cc0)={@loopback, @initdev, 0x0}, &(0x7f0000000d00)=0xc) accept(r1, &(0x7f0000000d40)=@hci={0x1f, 0x0}, &(0x7f0000000dc0)=0x80) accept4$packet(r3, &(0x7f0000000e00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000e40)=0x14, 0x80000) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001100)={{{@in6=@mcast1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local}}, &(0x7f0000001200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001240)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000004c80)={{{@in6=@ipv4={[], [], @loopback}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000004d80)=0xe8) accept$packet(0xffffffffffffffff, &(0x7f0000004dc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000004e00)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000004e40)={'veth0_to_bridge\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000004e80)={'gretap0\x00', 0x0}) accept4$packet(r2, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000004f00)=0x14, 0x80800) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000004f40)={0x0, @broadcast, @dev}, &(0x7f0000004f80)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000005140)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f0000005240)=0xe8) getsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f0000005280)={@mcast1, 0x0}, &(0x7f00000052c0)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000005300)={'vcan0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000005340)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000005440)=0xe8) accept4$packet(r2, &(0x7f00000055c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000005600)=0x14, 0x80000) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000005640)={@empty, @dev, 0x0}, &(0x7f0000005680)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000006000)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000005fc0)={&(0x7f0000001280)=ANY=[@ANYBLOB="c8080000", @ANYRES16=r4, @ANYBLOB="000026bd7000ffdbdf250300000008000100", @ANYRES32=r5, @ANYBLOB="3c00020038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000200000008000100", @ANYRES32=r6, @ANYBLOB="780102003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004003f00000008000600", @ANYRES32=r8, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000001000040062726f6164636173740000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="400001002400010071756575655f6964000000000000000000000000000000000000000000000000080003000300000008000400b108000008000600", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="3c00020038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400a404000008000100", @ANYRES32=r13, @ANYBLOB="7800020038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400070000003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000008000100", @ANYRES32=r14, @ANYBLOB="f40002003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r15, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004002000000008000700000000003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c00040068617368000000003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000000c0004007f0002000600000008000100", @ANYRES32=r16, @ANYBLOB="f001020040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r17, @ANYBLOB="080007000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400020000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r18, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400aa3e000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000000008008000600", @ANYRES32=r19, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400aa0000004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000001c0004000002092506000000080001000600000008000000060000003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000008000100", @ANYRES32=r20, @ANYBLOB="740102003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r21, @ANYBLOB="4000010024e54e00010071756575656a69640000002300000000000000000000000000b0b00770af5e28960003000300400008000400050000080006001035174b88a7e92a1509575c360247ca0b7425c4b57b8db44e2b500f3c9f233e3c431d29f54ff446b9d0186ccd0fa8e5a164d7d0acd4a78ee0e7d92aad", @ANYRES32=r22, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r23, @ANYBLOB="080007000000000044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b000000140004002e0a080805000000f9ff0007070000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r24, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000104000008000100", @ANYRES32=r25, @ANYBLOB="b40102003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r26, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r27, @ANYBLOB="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", @ANYRES32=r28, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r29], 0x8c8}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) fstat(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) write$P9_RGETATTR(r3, &(0x7f00000001c0)={0xa0, 0x19, 0x2, {0x801, {0x44, 0x1, 0x1}, 0x101, r30, r31, 0x4, 0x2, 0x7, 0x2, 0xfffffffeffffffff, 0x3, 0x0, 0x100, 0x0, 0x34, 0x9, 0x9, 0x9, 0xffffffffffff77cd, 0x1}}, 0xa0) 16:50:24 executing program 3: prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffc000/0x4000)=nil) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x9, 0x9, 0x7a63, 0xfffffffffffffff9, 0x2ac, 0x6, 0x9}, 0x1c) r1 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@nl=@proc, &(0x7f0000000080)=0x80, 0x80800) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000ac0)=@nat={'nat\x00', 0x19, 0x1, 0x9a8, [0x20000100, 0x0, 0x0, 0x20000130, 0x20000a78], 0x0, &(0x7f00000000c0), &(0x7f0000000c40)=ANY=[@ANYBLOB="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"]}, 0xab0) setsockopt$inet_buf(r1, 0x0, 0x0, &(0x7f0000000340)="6036f02baeeb4f68f2335a9975b44ee9f6d30c8c771937faa5ee748987ea27da29c0a4941e6e2807cc84b32babb97485f5a949125813c57df632e08a12984a8393055d8e196b2614e4e2c90b82fad1845b1578bec1d94ca5cfe6329c54a708c3af4b868dc2bffed01805a732d1c2433b9d86ffff000079b35438eb641b5addf7952d0b4c47cc65e5a19d5bd2d34e0c743f7766a8f0c5dbd1f23997a5d7a51d1298cbe7e96f091b84c7d2db6f5f9e80caaea8d8da6a694c7302b295895868149b137134409527e323c532a4fbc5dd750d140d0c44373c0a58faab6440307e32a0cfbba2ba9ac657966fefaeb8d4014779d79de5ba2eebce45420c7bc58d23779937c03dfbf24bf29ced8deffbd9097d1ab25ad5bba1bc26151eaf9355c1ae1bd50d82859b4991564ba82b7b6f3d30c6fca7ef87de62c47dc310c640bdbb5bee80226b0ff376edb0e0f926b82cdd448eb9234ead07b45e2834937b55069ce98c4b06c020bf04816bb4ea1f36634b92c1312bfd3c836434fd0944c9ccd2de479d7017eddd27de0abda1d14a8838971b48be72383d1b8baed7ce81348b31d61e159fbb5b165678b8ef5370604d8754246df3e5a50b3840fd1fefb2f65be7fb2f8ca3ffd2f76f94e7285641e9f4524c2b9197e1fc71efd63e7351adef8644e8ceb2e3e5baf632db4114c0b6b9", 0x1ea) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$describe(0x6, r2, &(0x7f0000001680)=""/4096, 0x1000) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4) 16:50:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000001c0)=@security={'security\x00', 0xe, 0x4, 0x438, 0x248, 0x248, 0x158, 0x0, 0x158, 0x368, 0x368, 0x368, 0x368, 0x368, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@frag={0x30, 'frag\x00', 0x0, {0x9, 0x8000000000, 0x0, 0x4}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, [0xffffffff, 0xffffffff, 0x0, 0xff000000], 0x4e23, 0x4e21, 0x4e24, 0x4e20, 0x8, 0x7fffffff, 0x10000000100000, 0x4, 0x51a5}}}, {{@uncond, 0x0, 0xc8, 0xf0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x401}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@ipcomp={0x30, 'ipcomp\x00', 0x0, {0x4d5, 0x4d2, 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x8, 0x6, 0x400}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000041, 0x0) getpeername$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) lstat(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000740)={{{@in=@broadcast, @in6=@ipv4={[], [], @local}, 0x4e24, 0x0, 0x4e20, 0x0, 0x2, 0x20, 0x0, 0x21, r4, r5}, {0x9, 0x401, 0xfffffffffffffffd, 0x7ff, 0x81, 0x2, 0x7, 0x8000}, {0x7, 0x3, 0x1ff, 0x200}, 0x5, 0x6e6bb9, 0x3, 0x1, 0x2}, {{@in=@local, 0x4d4, 0x6c}, 0xa, @in6=@ipv4={[], [], @empty}, 0x3507, 0x3, 0x3, 0x5, 0x6, 0x616f, 0x261}}, 0xe8) 16:50:24 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$TIOCGPTPEER(r1, 0x5441, 0xa5f) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000040)) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000100)={0x80000000, 0x4, 0xff, 0x28}, 0x10) 16:50:24 executing program 3: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ff2000/0x2000)=nil, 0x2000, 0x0, 0x22110, r0, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x0, 0x6, 0x5, 0x400}, {0x1000, 0x5, 0x3, 0x6}, {0x100, 0x8001, 0x1ff, 0x9}, {0x0, 0x1, 0x5, 0x3}, {0xb0d3, 0x8, 0x22e, 0x80}, {0x3, 0x4, 0x80000000, 0x6}]}, 0x10) futex(&(0x7f0000000100), 0x1, 0x2000000000000, 0x0, 0x0, 0x0) [ 1076.237479] binder: 16479:16484 ioctl 40086610 20000380 returned -22 [ 1076.255067] binder: 16479:16484 ioctl 80087601 20000240 returned -22 [ 1076.275334] binder_alloc: 16479: binder_alloc_buf, no vma 16:50:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x5) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000080)) ftruncate(r2, 0x8200) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000041, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) 16:50:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) syz_read_part_table(0x4000000005245, 0x1, &(0x7f0000000200)=[{&(0x7f0000000000)="0200eeffffff01000000ff07000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055aa4546492050415254000001005c0000001f1454de000000000100000000000000ff070000000000002200000000000000de07000000000000354806cdf2678c44bbb1c108b899363902000000000000008000000080000000980e897f", 0x9c, 0x1c0}]) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) syz_open_procfs(r0, &(0x7f0000000040)='fdinfo/4\x00') [ 1076.300512] binder: 16479:16484 transaction failed 29189/-3, size 0-0 line 3135 [ 1076.337328] binder: undelivered TRANSACTION_ERROR: 29189 16:50:24 executing program 3: time(0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000005d00), 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x20000, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f00000001c0)={0x2, 0x9, 0xb6, &(0x7f0000000100)="24ee61da3b20c0fcb5cc0eaa4a7a63787ecd6a7fc34b675d05f4fee097acea5dbf89ca92f1634c75765eb59ae4c5fa3d119bc9b3cef893b73b6a52b67ce4509aae7fa50f06f0ef5906548d4e0a9ee7dd8449cb9da8fbc4c687e134d48d8aaa69049f543e740721226e8c0264d6fb13984b2d5c958de5bde64fd9ece09626c75d32cac4959fa4c1813c7573be3652367deb6f9c8181658fd81c667611c7b04f0c19a7226671858f7f5ddbab2e4c42b6cdfadeeec98bf4"}) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) accept4$inet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000001100)=0xff5b, 0x0) 16:50:24 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_buf(r0, 0x0, 0x34, &(0x7f0000000080)="8c949e02fd5a37e1db90af5b42b9e2a3b5694b1b8219ae414fd63a9c43ce3f47f178c5f5e9e52d48212f366e4f43bf913e0c670e04869da1225e12e9659901d1d0a22df34a8241cd9946f844b7a7a6ec87c5939df41b8e49bc2c5e62e29634240ba3388b7c527684aa8c32fb73e95a02992fd15020913abbc0d6", 0x7a) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000040)=0x4) 16:50:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00c@a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) [ 1076.358266] binder: send failed reply for transaction 1743 to 16479:16484 [ 1076.386286] binder: undelivered TRANSACTION_COMPLETE [ 1076.415466] binder: undelivered TRANSACTION_ERROR: 29189 [ 1076.435470] binder: 16519:16524 unknown command 1631609600 [ 1076.446848] binder: 16519:16524 ioctl c0306201 200000c0 returned -22 16:50:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="0082de896b8447d813caac8fff48000000000000008578423111b85de34f2e7938b5b0a7472d6ed2f895719d4780861a43"]], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:50:24 executing program 2: dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl(0xffffffffffffffff, 0xfff, &(0x7f0000000000)) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x400000000000041, 0x0) [ 1076.464268] binder: send failed reply for transaction 1748 to 16519:16524 [ 1076.475084] binder: undelivered TRANSACTION_COMPLETE [ 1076.497876] binder: undelivered TRANSACTION_ERROR: 29189 16:50:24 executing program 5: r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/access\x00', 0x2, 0x0) write$selinux_access(r0, &(0x7f0000000040)={'system_u:object_r:ld_so_cache_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023'}, 0x66) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f00000000c0)=""/167, &(0x7f0000000180)=0xa7) 16:50:24 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) alarm(0x7) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) [ 1076.528060] binder: 16531:16535 got transaction with invalid offset (-2862173440761232896, min 0 max 24) or object. [ 1076.559684] binder: 16531:16535 transaction failed 29201/-22, size 24-8 line 3197 16:50:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) write$UHID_SET_REPORT_REPLY(r2, &(0x7f0000000000)={0xe, 0x1, 0x10000, 0xd2, 0x7b, "a7a2229011a595d54ed913a72ad7f175a8ff2f7b2d4ffc6ef779282e8787d762b17a48c9515738a748b7a2f2482ede7716aa772f4e70f7151fd21fc726a91faa29e9d39ac1f966be97eaacfcc88401715ddbc9b11dfe74d288ea357ea47ccfd934373f496201c37c459f40ab8e4c55d8e2025ce2232d45de0d8fc2"}, 0x87) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000041, 0x0) 16:50:24 executing program 5: socketpair(0x0, 0x802, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000140)=0x78) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28320, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) 16:50:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) sendmmsg(r0, &(0x7f0000007e00), 0x24d008300ffda24, 0x0) write$selinux_context(r2, &(0x7f0000000000)='system_u:object_r:devpts_t:s0\x00', 0x1e) [ 1076.583303] binder: 16531:16542 got transaction to invalid handle [ 1076.609678] binder: 16531:16542 transaction failed 29201/-22, size 0-0 line 3012 16:50:24 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, {0x1, @local}, 0x8, {0x2, 0x4e20, @broadcast}, 'veth0_to_hsr\x00'}) fremovexattr(r0, &(0x7f0000000080)=@known='com.apple.system.Security\x00') socket$inet(0x2, 0x6, 0x6e4ff78) 16:50:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) syz_read_part_table(0x4000000005245, 0x1, &(0x7f0000000200)=[{&(0x7f0000000000)="0200eeffffff01000000ff07000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055aa4546492050415254000001005c0000001f1454de000000000100000000000000ff070000000000002200000000000000de07000000000000354806cdf2678c44bbb1c108b899363902000000000000008000000080000000980e897f", 0x9c, 0x1c0}]) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) syz_open_procfs(r0, &(0x7f0000000040)='fdinfo/4\x00') [ 1076.683177] binder: undelivered TRANSACTION_ERROR: 29201 [ 1076.691885] binder: undelivered TRANSACTION_ERROR: 29201 [ 1078.230372] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! 16:50:26 executing program 3: ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000040)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000700)='/selinux/commit_pending_bools\x00', 0x1, 0x0) rt_sigtimedwait(&(0x7f00005a1000), &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) r1 = open(&(0x7f0000000140)='./file0\x00', 0x4, 0x0) futex(0x0, 0xb, 0x2, &(0x7f0000000a00), &(0x7f00000000c0), 0x0) exit(0x4) r2 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xffffffffffffffad) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000380)=0x5) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x2, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl(r0, 0x3ff, &(0x7f0000000540)="cf1258a0f1491ba6fcec96f20a56e59521c410059da2caa43f992a0f6a5d6908f7389a4de5cad9a6da313322c2675ebdf65db19911b6b580158d7a9c5d43a0d9f822e59e3f00b7352553ba1c97a192d08e3b7b1a61") mlockall(0x2) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000002c0)={0x0, 0x0}) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000300), &(0x7f0000000200)=0x68) creat(&(0x7f00000001c0)='./file0\x00', 0x82) prlimit64(r4, 0x6, 0x0, &(0x7f0000000100)) fcntl$setstatus(r2, 0x4, 0x44000) r5 = creat(&(0x7f0000000080)='./file0\x00', 0xffffffffffffffff) write$binfmt_aout(r0, 0x0, 0xfffffffffffffc86) write$binfmt_elf64(r5, &(0x7f0000000080)=ANY=[], 0x1da) fallocate(r5, 0x0, 0x0, 0x4003ff) keyctl$get_persistent(0x16, 0x0, 0x0) write$cgroup_type(r5, &(0x7f0000000240)='threaded\x00', 0xf96d) fallocate(r5, 0x3, 0x5e89, 0xfff9) write$P9_RREADLINK(r5, &(0x7f0000000ac0)=ANY=[], 0xffffffffffffff0c) unshare(0x48000000) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f00000005c0)={{0x2, 0x4e20, @rand_addr=0x100000000}, {0x1, @local}, 0x4, {0x2, 0x4e24, @remote}, 'nr0\x00'}) 16:50:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000380)='/dev/binder#\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000002c0)={0x0, r0, 0x9, 0x67a, 0x1f, 0x5}) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x2000, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000440)={'nat\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}]}, 0x88) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000280)="98fedee333b4bd1c73a007571dca57dd854e4c74019e02733c0aaacf9a35f09a4d0fbd9ff36f", 0x26) 16:50:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000040)='\x00', 0x4) ftruncate(r2, 0x8200) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000000)={0x57, 0xfffffffffffffffa, 0x100000001000, {0x7334, 0x4}, {0x5ec5872e, 0x2000000000000}, @const={0x9d1, {0x0, 0x0, 0x2, 0x1}}}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000041, 0x0) 16:50:26 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=0x0) r2 = getuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) fsetxattr(r0, &(0x7f0000000180)=@known='trusted.overlay.upper\x00', &(0x7f00000001c0)='/selinux/avc/cache_stats\x00', 0x19, 0x3) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$VT_WAITACTIVE(r4, 0x5607) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={r1, r2, r3}, 0xc) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) bind$inet(r5, &(0x7f0000000140)={0x2, 0x4e24, @multicast2}, 0x10) 16:50:26 executing program 5: mkdir(&(0x7f0000dda000)='./file0\x00', 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0/bus\x00') 16:50:26 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x88802, 0x0) write$9p(r0, &(0x7f0000000280)="c2bbe4817d4c0a1ef6b8de2113f764c3d2a729b5e8ee89c7bb61ba0219555e98fbce29ac548a7e84909e70f2bba42cbe01506a816dde0048712d01a9180693a7", 0x40) 16:50:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) statx(r2, &(0x7f0000000000)='./bus\x00', 0x0, 0x18, &(0x7f0000000040)) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000041, 0x0) 16:50:26 executing program 4: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='attr\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) pipe(0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x1000000004e23, @local}, 0x10) write$selinux_validatetrans(0xffffffffffffffff, &(0x7f0000000dc0)=ANY=[], 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000280)) sendto$inet(r1, &(0x7f0000000b40)="762d013abf428f831f537d10987f3f009e134c11cb6b5d479d61fac22b7c399e31904cab65dc1f2efc95ac1348db76ab634cf0fbde36acede0e45438773d28036919fd3c82e3622eb6f09975594f6bda43d29d0021a06e309383d903c1c4fd79f21eb35886e667dbe7", 0x69, 0x4008000, 0x0, 0x0) recvmsg(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/199, 0xc7}], 0x1}, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000140)=0xda7, 0x4) recvmsg(r2, &(0x7f0000000240)={&(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000080)=""/10, 0xa}, {&(0x7f00000002c0)=""/203, 0xcb}, {&(0x7f00000003c0)=""/148, 0x94}, {&(0x7f0000000480)=""/230, 0xe6}, {&(0x7f0000000580)=""/242, 0xf2}, {&(0x7f0000000840)=""/253, 0xfd}, {&(0x7f0000000680)=""/133, 0x85}, {&(0x7f0000000940)=""/108, 0x6c}, {&(0x7f0000000a40)=""/158, 0x9e}], 0x9, &(0x7f0000000c80)=""/182, 0xb6}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) [ 1078.437409] binder: 16583:16590 ioctl c028660f 200002c0 returned -22 [ 1078.464535] binder_alloc: 16583: binder_alloc_buf, no vma 16:50:26 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1008000, &(0x7f00000000c0)=ANY=[@ANYBLOB='errors=continue,showexec,nodots,nodots,errors=remount-ro,dots,nodots,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c7365636c6162656c2c636f6e746578743d73797361646d5f752c0092834837864a943e5749410c35f170640e5097d31b2a4b9f2de1b9e702af373d7724a36206641c1557b1eb3317d4c2f5167fe763949f5d9e943ac6ed37c15fe25fffe997f15db361932f06d659d47a59a143e77377de2c8e9a3d243bcac274938f695ef8aed7df2c3b8e326192b7c5e6a5e0fde27b96dbc2f21c3b4be45c80c382"]) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) getpeername(r0, &(0x7f00000001c0)=@hci, &(0x7f0000000240)=0x80) 16:50:26 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x200002, 0x0) write$nbd(r0, &(0x7f0000000080)={0x67446698, 0x0, 0x4, 0x1, 0x2, "4d19d91f18"}, 0x15) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x137f, 0x80000) [ 1078.483528] binder: 16583:16590 transaction failed 29189/-3, size 0-0 line 3135 16:50:26 executing program 4: clone(0x13102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3f) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, 0xffffffffffffff9c, 0x0, 0xa, &(0x7f0000000040)='vboxnet0*\x00', 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r0, r1, 0x0, 0x1b, &(0x7f0000000000)='selinuxlotposix_acl_access\x00', r3}, 0x30) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x2, 0x141}) fcntl$setownex(r4, 0xf, &(0x7f0000000180)={0x0, r2}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) getpriority(0x0, r0) 16:50:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) ioctl$RTC_VL_READ(r2, 0x80047013, &(0x7f0000000000)) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x80) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000041, 0x0) [ 1078.549090] binder: undelivered TRANSACTION_ERROR: 29189 [ 1078.555038] binder: send failed reply for transaction 1755 to 16583:16590 [ 1078.582333] binder: undelivered TRANSACTION_COMPLETE [ 1078.631686] binder: undelivered TRANSACTION_ERROR: 29189 16:50:27 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() clone(0x2e828903, 0x0, 0x0, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x5) ptrace$setopts(0x4206, r2, 0x0, 0x0) r3 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="0d5104", 0x3, 0xfffffffffffffffa) keyctl$setperm(0x5, r3, 0x8020000) fsetxattr(r1, &(0x7f0000000180)=@known='trusted.syz\x00', &(0x7f00000001c0)='syz', 0x3, 0x0) tkill(r2, 0x8000000000000014) r4 = dup3(r0, r1, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="5818000024c5654f7c0afb5fd5e214d3a8df22e8dcf74d09d4ae9517e6c9f247b1a497b5ea850375b8d51dff57d082c8b0a2d75b804405a32ec623568d7711e56c9a2dc6f5ca895862fdf00a02f62cee8f8904b58ba5cbb5", @ANYRES16=r5, @ANYBLOB="280027bd7000ffdbdf250d00000008000600080000000c0002000800070092000000280003000800030004000000080001000000000014000600ff020000000000000000000000000001080005001f000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) wait4(0x0, 0x0, 0x0, 0x0) fchdir(r1) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) 16:50:27 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x10002, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, [@call={0x85, 0x0, 0x0, 0xb}, @call={0x85, 0x0, 0x0, 0x2a}, @generic={0x4ec0, 0x2, 0x3, 0x9, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffff9}, @map={0x18, 0x0, 0x1, 0x0, r0}, @alu={0x7, 0x10000, 0xf, 0x3, 0x6, 0xffffffffffffffc0, 0x1}, @exit, @exit, @map={0x18, 0x5, 0x1, 0x0, r1}, @ldst={0x1, 0x3, 0x0, 0x7, 0x4, 0xfffffffffffffff4, 0x4}]}, 0x0, 0x1, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x1}, 0x48) 16:50:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000b0000000000008f0000f923910e6c50ffed05056c2440000000000000000000000000000000000000000018000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 16:50:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141043, 0x0) linkat(r3, &(0x7f0000000000)='./bus\x00', r3, &(0x7f0000000040)='./bus\x00', 0x1400) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f00000000c0)={0xfe, 0x100000001, 0x7, 0x1, 0x4, 0x8}) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000041, 0x0) poll(&(0x7f0000000080)=[{r0, 0x2040}], 0x1, 0x3) 16:50:27 executing program 4: getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0) r0 = openat$keychord(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='map_files\x00') fchdir(r1) getdents64(r1, &(0x7f0000000200)=""/116, 0x184) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000140)) setsockopt$packet_buf(r1, 0x107, 0x1f, &(0x7f0000000280)="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", 0x1000) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) 16:50:27 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r2, 0x1, 0x70bd28, 0x25dfdbff, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x5, @link='broadcast-link\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x4040) 16:50:27 executing program 5: clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x27) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0x57}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x88010021}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r2, 0x20, 0x70bd29, 0x25dfdbfc, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x401, 0x1ff, 0xec, 0x2}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20004000) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x40, 0x1, 0x3, 0x4, 0xc5, 0x8}, &(0x7f0000000080)=0x20) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) io_submit(r4, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xa7b, r3, &(0x7f00000001c0)="e3962732a1471f83222976631a5470e47d4a31804f968f13e3d737f2ac0a1fb722e1596c86071e755aa39e46619690f478b7a75176d54842cc28ad726689dc6b73bbb977fb61cd4eddeb84b73cbe42c871aa5bd0455971f38bf391a6b0ea1cdf67a628736e2c6e595f22ef4569b62db5dd25fa5b1f82b0f0beeac41e7304e2081978ff3f", 0x84, 0x86f, 0x0, 0x2, 0xffffffffffffff9c}]) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1079.316467] binder: 16634:16637 got transaction to invalid handle [ 1079.333814] binder: 16634:16637 transaction failed 29201/-22, size 0-103079215104 line 3012 16:50:27 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000001040), &(0x7f0000001080)=0x10, 0x80000) lstat(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000011c0)={0x0, 0x0}, &(0x7f0000001200)=0xc) lstat(&(0x7f0000001240)='./file0\x00', &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001300)='./file0\x00', &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001bc0)=@broute={'broute\x00', 0x20, 0x4, 0x7c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200013c0], 0x0, &(0x7f00000010c0), &(0x7f00000013c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x17, 0x1f, 0x1, '\x00', 'veth0_to_hsr\x00', 'nr0\x00', 'bridge_slave_0\x00', @empty, [0x0, 0x0, 0xff, 0x0, 0xff], @random="db1547ca97ed", [0xff, 0xff, 0x0, 0xff, 0xff], 0xd0, 0x120, 0x158, [@cpu={'cpu\x00', 0x8, {{0x100000000}}}, @m802_3={'802_3\x00', 0x8, {{0xfe, 0x81, 0x2, 0x2}}}]}, [@common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x9, 0x5}}}]}, @common=@mark={'mark\x00', 0x10, {{0xfffffff0, 0xfffffffffffffffe}}}}, {{{0x15, 0x12, 0x88a2, 'lo\x00', 'gre0\x00', 'vcan0\x00', 'yam0\x00', @local, [0xff, 0xff, 0xff, 0xff, 0xff], @broadcast, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], 0x198, 0x210, 0x240, [@comment={'comment\x00', 0x100}]}, [@common=@ERROR={'ERROR\x00', 0x20, {"00a7a5be61eaa8b4f9db54751f9b876bebc4d25007538658d92ed2aa1706"}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x9}}}]}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x7, 0x10, 0xfbff, 'ip6_vti0\x00', 'eql\x00', 'bcsh0\x00', 'hsr0\x00', @remote, [0x0, 0x0, 0xff, 0xff, 0xff], @broadcast, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], 0xf0, 0x168, 0x198, [@time={'time\x00', 0x18, {{0x0, 0xffffffffffffffff, 0x6918, 0x14978, 0x10000, 0x9df, 0x2}}}, @owner={'owner\x00', 0x18, {{r1, r2, r3, r4, 0x4}}}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0xe54, 0x0, 0x8}}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x8}}}]}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x2, 0x60, 'netdevsim0\x00', 'veth0_to_hsr\x00', 'syzkaller0\x00', 'bond0\x00', @random="ef9553f26d0c", [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], @local, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], 0x108, 0x188, 0x1d8, [@physdev={'physdev\x00', 0x70, {{'batadv0\x00', {}, 'ip_vti0\x00', {0xff}, 0x0, 0xe}}}]}, [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0xffffffffb7b4d255}}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0xe33, 0x4}}}]}, @common=@log={'log\x00', 0x28, {{0x9, "882fcab8a66625582173b80740a9117ee320f18050dc1aaed2c0a9af2fca", 0x4}}}}]}]}, 0x840) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x84800) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000001cc0)={0x4, &(0x7f0000000140)=[{0x8, 0x9, 0x4, 0x5}, {0x8, 0xd, 0xed, 0x5}, {0x1000, 0x0, 0x4, 0x40}, {0x8, 0x2, 0x7, 0x2}]}) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) recvfrom$inet(r6, &(0x7f0000000000)=""/164, 0xa4, 0x140, &(0x7f00000000c0)={0x2, 0x4e22, @rand_addr=0x9}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) r7 = accept$inet(r0, &(0x7f0000001c40)={0x2, 0x0, @local}, &(0x7f0000001c80)=0x3d4dad542cf71ad) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000fc0)=@filter={'filter\x00', 0xe, 0x4, 0xde8, [0x0, 0x200001c0, 0x20000530, 0x20000f78], 0x0, &(0x7f0000000180), &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xb, 0x10, 0x890d, 'gre0\x00', 'eql\x00', 'bcsh0\x00', 'syzkaller0\x00', @remote, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="e7952928bd3f", [0x0, 0x0, 0xff, 0xff, 0xff], 0xa0, 0x140, 0x170, [@pkttype={'pkttype\x00', 0x8, {{0x2, 0x1}}}]}, [@common=@log={'log\x00', 0x28, {{0x7, "af637fd5fb6460c204f799ea0df5ad6131db93f8393e0bf2f9a550a478b6", 0x8}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x6, 'syz1\x00', 0xfffffffffffffffb}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}, {{{0x5, 0x21, 0x805, 'vcan0\x00', 'team_slave_1\x00', 'bpq0\x00', 'team0\x00', @broadcast, [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], @local, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0xa0, 0xa0, 0x1d0, [@m802_3={'802_3\x00', 0x8, {{0xff, 0x2, 0x1, 0x7}}}]}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x14000000, 'system_u:object_r:ld_so_cache_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{{{0x3, 0x3, 0x0, 'ip6gretap0\x00', 'rose0\x00', 'ip6gretap0\x00', 'ip6gretap0\x00', @dev={[], 0x23}, [0xff, 0x0, 0xff, 0xff, 0xff], @dev={[], 0x27}, [0xff, 0xff, 0xff], 0x888, 0x8f0, 0x928, [@u32={'u32\x00', 0x7c0, {{[{[{0x7, 0x3}, {0xffffffff, 0x3}, {0x3}, {0x7bc3, 0x3}, {0x4}, {0xff, 0x3}, {0x3}, {0x6, 0x2}, {0x2, 0x2}, {0xcb56, 0x2}, {0x9, 0x3}], [{0x4, 0x7}, {0x3, 0x7}, {0x5, 0x7}, {0x8}, {0x0, 0xffff}, {0x7fff}, {0x4, 0x4}, {0x400, 0xff}, {0x9, 0x100}, {0x8, 0xffffffff00000001}, {0xf0f}], 0x1, 0x5}, {[{0x4, 0x2}, {0x101, 0x3}, {0xa4f4, 0x3}, {0x3d2b000000000, 0x3}, {0x4, 0x1}, {0x9, 0x3}, {0x1, 0x2}, {0x1, 0x3}, {0x800, 0x1}, {0xfffffffffffffff7, 0x1}, {0x5, 0x3}], [{0xa17, 0xc21b}, {0x3, 0x8}, {0x0, 0xb523}, {0x6, 0xa000000000000}, {0x6f, 0x685}, {0x8, 0x8f06}, {0x9, 0x101}, {0x7, 0x8000}, {0x3, 0xdf}, {0x400, 0x9}, {0x2a15a3b6, 0x99}], 0x3, 0x9}, {[{0x8}, {0x2be, 0x3}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x4ee, 0x1}, {0x81, 0x3}, {0x5, 0x2}, {0x8, 0x3}, {0x6, 0x1}, {0x3ff, 0x2}], [{0x2, 0xffffffff}, {0xd8d4, 0x60000}, {0x5}, {0x4, 0x1}, {0x7fff, 0x6}, {0x40, 0xffffffffffff293e}, {0x3, 0x3}, {0x401, 0x7}, {0x3, 0x7}, {0x7, 0xf698}, {0x3, 0x1400000000000}], 0x3, 0x7}, {[{0xffffffff, 0x3}, {0x3, 0x3}, {0x4, 0x3}, {0x80000001, 0x3}, {0x0, 0x1}, {0xfffffffffffffffa, 0x3}, {0x1f}, {0x5, 0x2}, {0x1000, 0x3}, {0xffffffff, 0x3}, {0x70a, 0x3}], [{0x3, 0x2}, {0x0, 0x611b}, {0x3f, 0x9}, {0x4}, {0x7f, 0x6}, {0x2, 0x80000001}, {0x6, 0xfffffffffffffffc}, {0x7, 0x1}, {0x4e, 0x6}, {0x793, 0xc46}, {0x522, 0x6}], 0x5, 0x4}, {[{0x100000001, 0x3}, {0x0, 0x3}, {0x401, 0x3}, {0x4, 0x2}, {0xb4, 0x1}, {0x200, 0x3}, {0x9, 0x3}, {0x100000000, 0x1}, {0x8, 0x2}, {0x800}, {0x1}], [{0x1, 0x8}, {0x3, 0x20}, {0x1c, 0x9}, {0x0, 0xfffffffffffffffc}, {0x0, 0xffffffffffffffff}, {0xc0, 0x14}, {0xf40, 0x5}, {0x1a, 0x2}, {0x101, 0x4c}, {0x2, 0x1}, {0x88a8, 0x8d}], 0x2, 0x6}, {[{0x1, 0x3}, {0x9}, {0x401, 0x3}, {0x1}, {0x7ff}, {0x2, 0x96e6c2bbf052939b}, {0x3d, 0x1}, {0xff, 0x3}, {0x3ff, 0x3}, {0x1ff}, {0x1, 0x3}], [{0x2, 0x9}, {0x2, 0x1}, {0x400, 0x10001}, {0x81, 0x2}, {0x2, 0x7}, {0x6, 0x4}, {0x101, 0x4}, {0x30f, 0x81}, {0x3, 0x1}, {0x6}, {0x733, 0x100}], 0xa, 0x9}, {[{0x10000, 0x3}, {0x2}, {0x1, 0x3}, {0x2, 0x1}, {0x80000001, 0x2}, {0x4, 0x3}, {0x401, 0x2}, {0x1}, {0x7f, 0x3}, {0xa56, 0x1}, {0x7d43, 0x3}], [{0x7, 0x5ef6}, {0xfffffffffffffffc, 0x2}, {0xfffffffffffff3f3, 0x7}, {0x3, 0x6}, {0x4000000000000000, 0x9}, {0x7, 0x3}, {0x4, 0x7}, {0x6, 0x3}, {0x1774, 0x1}, {0xffffffff, 0x5}, {0xfffffffffffff000}], 0x0, 0x1}, {[{}, {0x8}, {0x2, 0x3}, {0xee14}, {0x9, 0x3}, {0xff}, {0x3392f341, 0x3}, {0x5}, {0x4, 0x1}, {0x0, 0x2}, {0xffffffff}], [{0x5, 0x1ff}, {0xfff}, {0x9, 0x120}, {0x5, 0x8a2}, {0x5, 0xe85}, {0xfa58, 0xffff}, {0x20, 0x9}, {0xfff, 0x4}, {0x6, 0xffffffff80000000}, {0x7fffffff, 0x6}, {0x8000}], 0x5, 0x9}, {[{0x0, 0x3}, {0xff, 0x2}, {0x46e14562, 0x1}, {}, {0x101, 0x3}, {0x3}, {0x5, 0x3}, {0x0, 0x2}, {0xf01}, {0x5}, {0x1, 0x2}], [{0x0, 0x1d84b054}, {0x2, 0x74}, {0x3, 0xfff}, {0x263e, 0x5}, {0x5, 0x8}, {0x81, 0x934}, {0x2f0, 0x5bd}, {0x1000, 0x6}, {0xffffffffffffffc0, 0x6}, {0x6, 0x40}, {0x2, 0x8}], 0xb, 0x2}, {[{0x7c2}, {0x9, 0x3}, {0x100, 0x3}, {0x9}, {0x100000000}, {0x3}, {0x8, 0x2}, {0x0, 0x3}, {0x3}, {0x7, 0x1}, {0x5bb3, 0x1}], [{0x7f, 0x10000}, {0x8000, 0x80000001}, {0x3, 0x80}, {0x200}, {0x7}, {0x1, 0x3}, {0x1000, 0x2}, {0x10001, 0x9}, {0x0, 0x2}, {0x9, 0x5}, {0x9, 0x10001}], 0x1, 0xb}, {[{0x7}, {0x8, 0x3}, {0x40, 0x1}, {}, {0x0, 0x3}, {0x10000, 0x3}, {0x7f}, {0x81, 0x1}, {0x2, 0x2}, {0x7, 0x3}, {0x0, 0x1}], [{0x8000}, {0x400, 0x1f}, {0x8, 0x4}, {0x8001, 0x1}, {0x3ff}, {0x0, 0x2}, {0xfffffffffffffffd, 0x3ff}, {0x20, 0x1}, {0x64, 0x4}, {0xfffffffffffffffd}, {0x63b, 0x8}], 0x7, 0xa}], 0xa, 0x1}}}, @m802_3={'802_3\x00', 0x8, {{0xbc, 0xfffffffffffffff7, 0x1, 0x5}}}]}, [@common=@redirect={'redirect\x00', 0x8, {{0x2b9412cfd1321ae1}}}, @common=@mark={'mark\x00', 0x10, {{0xfffffff0, 0xfffffffffffffffd}}}]}, @common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffe}}}}, {{{0x11, 0x22, 0x88ff, 'dummy0\x00', 'bcsf0\x00', 'bcsf0\x00', 'teql0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], @empty, [0x0, 0x0, 0x0, 0xff, 0xff], 0x70, 0xa8, 0xf0}, [@common=@mark={'mark\x00', 0x10, {{0xffffffd0, 0xffffffffffffffff}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"e141935dde640616c2755422413222975721663064e76a1cbc5f06cd039f"}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0xe60) 16:50:27 executing program 2: r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/create\x00', 0x2, 0x0) ioctl(r0, 0x40, &(0x7f0000000740)="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") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x16, 0x20f, 0x2, 0x3, 0x10, r3, 0x7fffffff}, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r4, 0x8200) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f00000001c0)=""/194) ioctl$sock_proto_private(r5, 0x89e1, &(0x7f0000000000)="e75817f7cb2f26d1c79f7dbd26b938c14d2d6685c179b7cf383f861e46d9d47721316d25e74125665f2169bef21f006ec727a372fd6282d221dcb617940f5127c146f34c766ab3050e2287ddd6ae4abfc07759611e0874bfe37528b047c10fcb36a6b2a353075c6082bece2c277f47aee5e32a1ed0a4cbc44c81f94c6ccd9d139c7c6052495e49c328e8190001f2e3e1aa714506b0f06ba9eeba917224a12afc59d56a31dcd1471019cc32835b577ec6f82a72") sendmmsg(r1, &(0x7f0000007e00), 0x400000000000041, 0x0) [ 1079.369202] binder: 16634:16653 got transaction to invalid handle [ 1079.381862] binder: 16634:16653 transaction failed 29201/-22, size 0-0 line 3012 16:50:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000080)={0x0, @speck128, 0x1, "01311cd9716475bf"}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:50:27 executing program 4: sched_setaffinity(0x0, 0x7, &(0x7f0000000240)=0x8000009) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x329100, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='si\x820\x00\x00\x00\x00\x00\x00\x1d\x00', 0xfffffffffffffe55) sendto$inet(r1, &(0x7f0000000300)="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", 0x132, 0x0, 0x0, 0x0) [ 1079.446713] binder: undelivered TRANSACTION_ERROR: 29201 [ 1079.452783] binder: undelivered TRANSACTION_ERROR: 29201 16:50:27 executing program 5: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x4080, 0x0) open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x100) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.origin\x00', &(0x7f0000000340)='y\x00', 0x2, 0x1) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x10b) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80002}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x68, r2, 0x312, 0x70bd26, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x8, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x8800) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000000000000000060000000000000002000000000000000100000000000000000000000000000000000000959f3b62c8240000000000000000000000000000000000000000000000000000000000000000000000000001000000000000"]) [ 1079.501151] binder: BINDER_SET_CONTEXT_MGR already set [ 1079.506781] binder: 16672:16678 ioctl 40046207 0 returned -16 [ 1079.513734] binder: 16672:16678 ioctl 800c6613 20000080 returned -22 [ 1079.526494] binder_alloc: 16672: binder_alloc_buf, no vma [ 1079.548443] binder: 16672:16678 transaction failed 29189/-3, size 0-0 line 3135 [ 1079.563733] binder_alloc: binder_alloc_mmap_handler: 16672 20001000-20004000 already mapped failed -16 [ 1079.573965] binder: BINDER_SET_CONTEXT_MGR already set [ 1079.579346] binder: 16672:16678 ioctl 40046207 0 returned -16 [ 1079.585729] binder_alloc: 16672: binder_alloc_buf, no vma [ 1079.591616] binder: 16672:16687 transaction failed 29189/-3, size 24-8 line 3135 [ 1079.599261] binder: BINDER_SET_CONTEXT_MGR already set [ 1079.600933] binder: 16672:16687 ioctl 800c6613 20000080 returned -22 [ 1079.604869] binder: 16672:16678 ioctl 40046207 0 returned -16 [ 1079.611578] binder: 16672:16689 got transaction to invalid handle [ 1079.623634] binder: 16672:16689 transaction failed 29201/-22, size 0-0 line 3012 [ 1079.631865] binder: undelivered TRANSACTION_ERROR: 29201 [ 1079.637366] binder: undelivered TRANSACTION_ERROR: 29189 [ 1079.646544] binder: undelivered TRANSACTION_ERROR: 29189 [ 1079.652136] binder: send failed reply for transaction 1763 to 16672:16678 [ 1079.659158] binder: undelivered TRANSACTION_COMPLETE [ 1079.664328] binder: undelivered TRANSACTION_ERROR: 29189 16:50:30 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6}}, &(0x7f0000000140)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f0000000280)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f00000003c0)=0xe8) r4 = geteuid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6}}, &(0x7f0000000500)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000540)={{{@in=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6=@empty}}, &(0x7f0000000640)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) lstat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000007c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000008c0)=0xe8) r10 = geteuid() stat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getgid() r13 = getegid() fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000009c0)={{}, {0x1, 0x4}, [{0x2, 0x0, r1}, {0x2, 0x4, r2}, {0x2, 0x2, r3}, {0x2, 0x2, r4}, {0x2, 0x5, r5}, {0x2, 0x5, r6}, {0x2, 0x6, r7}, {0x2, 0x6, r8}, {0x2, 0x6, r9}, {0x2, 0x4, r10}], {0x4, 0x7}, [{0x8, 0x5, r11}, {0x8, 0x2, r12}, {0x8, 0x3, r13}], {0x10, 0x4}, {0x20, 0x6}}, 0x8c, 0x1) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) 16:50:30 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f00000002c0)={0x0, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e24, @multicast1}}}, 0x108) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000140)={'ifb0\x00', @local}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000001c0)) ftruncate(r2, 0x8200) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000000)={{{@in=@dev, @in6=@mcast1}}, {{}, 0x0, @in=@initdev}}, &(0x7f0000000100)=0xe8) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000200)="e821636261dab04fc3634aada0316bcaaa6cd78e5bf2baf4011de6917835f9b432b31ef3b8636b9ca579da8d42089a5cc17e37c3bfe432e2444cd049b6dc8794bfa0efada9eeb3a459c1d9667b31b97c0c720048e8cb3056a45916f6f81e7be19579d9ef7701377202a635f21f02d0ff06a52ce4a6b406270b0c12439514b427726378edc89ea98e21f9af34a8e7389e") ioctl$VT_RELDISP(r2, 0x5605) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000041, 0x0) 16:50:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xf4, r2, 0x0, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x48, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_NET={0x5c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4df3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6b70}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1c00000000000}]}, @TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x90000000000000}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) 16:50:30 executing program 4: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x1, 0x40012140, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, 0x0) preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0) 16:50:30 executing program 5: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000002c0), 0xc, &(0x7f0000000180)={&(0x7f0000000380)=@newpolicy={0xb8, 0x13, 0x1, 0x0, 0x0, {{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}}}, 0xb8}, 0x8}, 0x0) 16:50:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000002000000000000000000000000000000000000000000000000010018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) inotify_init1(0x800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x101040, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000100)={0x7, 0x7b, 0x2}, 0x7) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:50:30 executing program 5: openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x1000000000000a, 0x80000000001, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x93e, 0xf0ffffffffffff}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0x28}}, 0x0) [ 1082.338554] binder_alloc: 16691: binder_alloc_buf, no vma [ 1082.350621] binder: 16691:16695 transaction failed 29189/-3, size 0-0 line 3135 16:50:30 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet6_buf(r0, 0x29, 0x3a, &(0x7f0000c86000), &(0x7f0000000000)=0xfd66) 16:50:30 executing program 4: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, &(0x7f0000000240)) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./bus\x00', 0x6, 0x1) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$keychord(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) accept4$packet(r0, &(0x7f00000031c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000003200)=0x14, 0x80800) accept4$inet6(r0, 0x0, &(0x7f0000000140), 0x80000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003380)=ANY=[]}}, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) r2 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) mlockall(0x1) sendfile(r0, r2, &(0x7f0000d83ff8), 0x8000ffffffff) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000100)) fsync(r0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 16:50:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0000008e7263d800"]], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:50:30 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffc9, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @rand_addr=0x3}, 0xfffffffffffffdb0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) [ 1082.398291] binder: undelivered TRANSACTION_ERROR: 29189 [ 1082.404070] binder: send failed reply for transaction 1770 to 16691:16695 [ 1082.420422] syz_tun: FDB only supports static addresses [ 1082.441801] binder: undelivered TRANSACTION_COMPLETE 16:50:30 executing program 2: r0 = socket(0xa, 0x3, 0x401) getsockname$unix(r0, &(0x7f00000001c0), &(0x7f0000000240)=0x6e) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000000)={'ah\x00'}, &(0x7f00000000c0)=0x1e) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sync_file_range(r1, 0x3ff, 0xc6c, 0x2) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/policy\x00', 0x0, 0x0) ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f00000003c0)) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000400)) accept$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000440)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000600)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f0000000200)={0x0, 'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000140)=""/20, 0x14, 0x6}, 0x120) socket$inet6_tcp(0xa, 0x1, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='timers\x00') r5 = getpgrp(0x0) r6 = gettid() sched_setaffinity(r6, 0x8, &(0x7f0000000180)=0xfffffffffffffffe) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r5, r6, 0x4, &(0x7f0000000000)={0x0, 0x0, 0x100000001}) rt_sigtimedwait(0x0, &(0x7f0000f0aff0), &(0x7f0000fbcff0)={0xffffd, 0x989680}, 0x0) setsockopt(0xffffffffffffffff, 0x100000001, 0x9, &(0x7f00000000c0), 0x0) write$UHID_DESTROY(r3, &(0x7f0000000380), 0x4) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1, 0x64b3) write$UHID_DESTROY(r3, 0x0, 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x0, &(0x7f0000000540)={@multicast1, @loopback}, &(0x7f0000000580)=0xc) 16:50:30 executing program 5: socket$inet(0x2, 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000100)=0x0) sched_setattr(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='-&\x00', 0x0) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000040)={0xd49, 0x0, 0x154, 0x0, 0x10003}) mlockall(0x100000c1000005) prlimit64(0x0, 0x3, 0x0, &(0x7f0000000240)) r2 = creat(0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x7fff) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000540)='net\x00') ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) getpeername$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000140)=0x6e) getgid() fchdir(r3) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = dup2(r4, r4) ioctl$EVIOCGUNIQ(r5, 0x80404508, &(0x7f0000000180)) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mmap(&(0x7f00008da000/0x1000)=nil, 0x1000, 0x0, 0xb4972, 0xffffffffffffffff, 0x0) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x3) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f00000001c0)={'hwsim0\x00', {0x2, 0x4e21}}) r6 = creat(&(0x7f0000000340)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x44000) io_setup(0x4ed4, &(0x7f0000000100)) creat(&(0x7f0000000700)='./bus\x00', 0x0) [ 1082.461842] syz_tun: FDB only supports static addresses [ 1082.467799] binder: undelivered TRANSACTION_ERROR: 29189 [ 1082.482005] binder: 16716:16724 got transaction with invalid offset (60907938629287936, min 0 max 24) or object. 16:50:30 executing program 0: socketpair(0x19, 0x807, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000040)={'icmp\x00'}, &(0x7f0000000080)=0x1e) r1 = socket$inet(0x2, 0x4000000000000003, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) 16:50:30 executing program 3: prctl$PR_GET_FP_MODE(0x2e) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x400080, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) r4 = dup(r2) ioctl$TIOCCONS(r4, 0x541d) mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2, 0x100000002132, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) munlock(&(0x7f0000004000/0x1000)=nil, 0x1000) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r5, 0x0) pselect6(0x40, &(0x7f0000000040), &(0x7f0000000100), &(0x7f00000010c0), &(0x7f00000000c0), &(0x7f0000001180)={&(0x7f0000001140), 0xf3ac1980c974aa6b}) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000000), 0x4) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TIOCSCTTY(r0, 0x540e, 0x7e45d2fb) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000000080)=0x5, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={r3, 0x0, 0x1, 0x101, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}, 0x20) pause() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) renameat(r4, &(0x7f0000000140)='./bus\x00', r3, &(0x7f00000001c0)='./bus\x00') setsockopt$inet6_tcp_int(r4, 0x6, 0x19, &(0x7f0000000180)=0xa, 0x4) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) r6 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x7fff) sendfile(r4, r6, &(0x7f0000d83ff8), 0x8000fffffffe) [ 1082.531138] binder: 16716:16724 transaction failed 29201/-22, size 24-8 line 3197 [ 1082.563158] binder: 16716:16730 got transaction to invalid handle [ 1082.570955] binder: 16716:16730 transaction failed 29201/-22, size 0-0 line 3012 16:50:30 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000940)='/dev/ppp\x00', 0x280, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000440)=""/246) sched_setaffinity(0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000540)={{{@in6, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, &(0x7f00000001c0)=0xe8) getresuid(&(0x7f0000000380), &(0x7f00000003c0)=0x0, &(0x7f0000000400)) getgroups(0x3, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff, 0xee01]) stat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x9, &(0x7f0000000740)=[0x0, 0xee01, 0xee01, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff]) getgroups(0x3, &(0x7f0000000780)=[0x0, 0xee01, 0x0]) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f00000007c0)={{}, {0x1, 0x7}, [{0x2, 0x3, r2}, {0x2, 0x0, r3}, {0x2, 0x3, r4}], {0x4, 0x4}, [{0x8, 0x2, r5}, {0x8, 0x2, r6}, {0x8, 0x7, r7}, {0x8, 0x0, r8}], {0x10, 0x7}, {0x20, 0x7}}, 0x5c, 0x1) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000000c0)=0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x200000000002) r9 = gettid() write$P9_RGETLOCK(r0, &(0x7f0000000000)={0x22, 0x37, 0x1, {0x1, 0x664, 0x2, r9, 0x4, 'eth1'}}, 0x22) 16:50:30 executing program 5: futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000080), 0x13000000) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/user\x00', 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000140)={0x35c, 0x26, 0x300, 0x70bd2b, 0x25dfdbff, {0x3}, [@typed={0x10, 0x5d, @str='vmnet1em1\x00'}, @nested={0x19c, 0x6b, [@generic="5877ba77129d9efe987f1d931f3df9ba1f55a3d873cd9281ed4bf4ef3f52ec077dee3f3427d452d6074f36216548ebb15796cc9c8e542c65025068639ddf5ccd9d791713", @typed={0x5c, 0x40, @binary="53f6215ef2943676b216a0a9e39b3b4079853c81d2149c69f35d07588dadff2e9a0324e0c8ae3d9a96152737db70a0a8f16da187c998924a7aef4f06b0f3fc81bea23e5795a818e8418ed367699ae80b37531c04d7d69ee9"}, @generic="ee1a6daa8fa98a3f03a0dba72c63eeab987e8b41f32e60ebd1ac7e0532aa6fdd0497b006d9b4026cc82dd7337eb44fd8be039fe7604461f3d6d3724b04358272fb95746f50788ed4cca6e61c6e07641616cc12c503edaa52a9bf0348bbbc771dd4baa56783e4b3bb5e16ce3a896b9ca51c896acb9c6c27d1ce8067babe8a89c73d0c72a5578e023ac2d70b89032eaae8ddc25bb12d1ff478d076afb75ef314ce58e91f481079df2866d68ee73d2d7f2c2e510de0e2f1877799e8da8848f59c88a247c827d1e0b4e805a682cfdc37e76cdda4163475adfe1bb921f0dd6295dbf2c74d6aa2db39170ea6938500ded9cbc98d6192a5f673ca"]}, @generic="ccc807c858c2d47d6ee65b1768919fac", @generic="d33480ccaf061bbbc2ab3022385683929eb851bfc18b6e8c780d02bb77073d560a4276e16608c01818ea5253a69696bc57db0dfbad5c4841e114767c716059fc4b9e7af40984aabd0b3f27df688d2f3539d86877d22107641bfc77a83adc07ced0a981184919a63d8dcdb33be4bf4d8470792813383803336e0865df6243e4be0a32e79e7078c89af356c1479e50ede7efc1553a6019de743886700e2bafd633b725d268f05623e954d256e3dde82b853cc5fe4ac1714bda9d11dd1a715ba71bc9e2e77c91871b14d95da22839", @generic="b23e37a2ff095f20260595e855b0450ac8982b5a2bea4afea8d69025ba1540a9659d", @nested={0xc, 0x92, [@typed={0x8, 0xa, @fd=r1}]}, @generic="7bf62bda8c0e7aae34b5bfe78cf8d076f119a8c5f02c2f623460fa1a95cc530a52b745594827d5638a7fba5642e7fcbf7fd74a2a43769596678094fd184e5310499976428d9562b4", @generic="4a43c7bb0fb99323e471e602131535c407cd2427400fb13eaead18c850f25a40fa96e112173e01d349372cb32099479462de3852ae4819417c2d7c13dfc84029c723672dbabff44b"]}, 0x35c}, 0x1, 0x0, 0x0, 0x11}, 0x4) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xc0, r2, 0x4, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x30, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fcd}]}, @TIPC_NLA_LINK={0x7c, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffffff1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xee82}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7d5e4401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffff9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 16:50:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(0xffffffffffffff9c, r0) getsockopt$inet_tcp_buf(r2, 0x6, 0xe, &(0x7f00000000c0)=""/224, &(0x7f0000000280)=0xe0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x1003) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1082.638742] binder: undelivered TRANSACTION_ERROR: 29201 [ 1082.655241] binder: undelivered TRANSACTION_ERROR: 29201 16:50:30 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x1) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f00000000c0)=0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x9, 0x0, 0x0, 0x3ff}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x204121}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b0030000", @ANYRES16=r2, @ANYBLOB="000629bd7000fcdbdf250d000000240002000800090004000000080002004e230000080005000900000008000800800000002000010014000300fe80000000000000000000000000002808000900350000005400020008000b0002000000080008000000000008000300000000000800080000000000080002004e230000080009000300000008000800570b000008000700f30e000008000700040000000800070000800000080006001f00000008000400060200004c000100080002007f00000008000b0073697000080006006c630000080009000900000008000100020000000c0007002c00000024000000080004004e2400000c0006006c626c63000000006800030014000600ff02000000000000000000000000000108000700524548b31400020076657468315f746f5f7465616d000000080003000400000014000600a66184cd91a6c26ba284d0df5c8fb4ae080004000400000008000300040000000800010000000000"], 0x170}, 0x1, 0x0, 0x0, 0x40}, 0x10) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000040)={0xfdfdffff}) [ 1082.704166] binder_alloc: 16751: binder_alloc_buf, no vma [ 1082.716401] binder: 16751:16757 transaction failed 29189/-3, size 0-0 line 3135 [ 1082.742135] binder: BINDER_SET_CONTEXT_MGR already set 16:50:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) r1 = perf_event_open(&(0x7f0000000440)={0x6, 0x70, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x4, 0x723, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x995, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10, 0x8001}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = dup(r2) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0xfffffffffffffeff) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) preadv(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f00000003c0)=""/243, 0xf3}, {&(0x7f0000000200)=""/59, 0x3b}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/52, 0x34}], 0x5, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000240), 0x4) syz_open_procfs(0x0, 0x0) setsockopt$inet6_mtu(r3, 0x29, 0x17, 0x0, 0xfffffffffffffef5) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000000700)=0x8, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) getrlimit(0x0, 0x0) mmap$perf(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000280)='./file0\x00', 0x4000000020141042, 0x0) ftruncate(r4, 0x80080) sendfile(r3, r4, &(0x7f0000d83ff8), 0x2008000fffffffe) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) [ 1082.762985] binder: 16751:16757 ioctl 40046207 0 returned -16 [ 1082.768909] binder_alloc: 16751: binder_alloc_buf, no vma [ 1082.781290] binder: 16751:16764 transaction failed 29189/-3, size 24-8 line 3135 [ 1082.793766] binder: 16751:16757 got transaction to invalid handle [ 1082.801586] binder: undelivered TRANSACTION_ERROR: 29189 [ 1082.807433] binder: send failed reply for transaction 1778 to 16751:16757 [ 1082.815848] binder: 16751:16757 transaction failed 29201/-22, size 0-0 line 3012 [ 1082.828352] binder: undelivered TRANSACTION_ERROR: 29189 [ 1082.843353] binder: undelivered TRANSACTION_COMPLETE [ 1082.860623] binder: undelivered TRANSACTION_ERROR: 29189 [ 1082.874056] binder: undelivered TRANSACTION_ERROR: 29201 16:50:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000001ffc)=0x1, 0x4) getsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f000000bffc), &(0x7f0000000040)=0x4) 16:50:31 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="e963982af37fa5d3828e38990a687b8c", 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0x12a, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)={0x0, 0x2, [0x3de, 0x6c1, 0x71b, 0xcff]}) 16:50:31 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x8a100, 0x4) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)=0x8) 16:50:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x2001d, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x5, 0x0, &(0x7f0000000180)={r2, r3+10000000}, &(0x7f0000000280)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r5, 0x1, 0x3f, &(0x7f0000000440)=""/182, &(0x7f00000002c0)=0xb6) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(r4, &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'U+', 0x1}, 0x28, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:50:31 executing program 5: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) rt_sigqueueinfo(r0, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}) ptrace$cont(0x20, r0, 0x0, 0x0) rt_sigqueueinfo(r0, 0xd, &(0x7f0000000080)={0x15, 0x3, 0x4e76}) rt_sigqueueinfo(r0, 0x39, &(0x7f0000000180)={0x14, 0x6, 0x101}) ptrace$cont(0x20, r0, 0x0, 0x0) 16:50:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x110, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x0, &(0x7f0000000040)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r2 = getpid() r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000002e00)={{{@in6=@mcast2, @in=@remote}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f0000002f00)=0xe8) fstat(r3, &(0x7f0000002f40)) sendmmsg$unix(r3, &(0x7f0000004080)=[{&(0x7f0000001d00)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000002140)=[{&(0x7f0000002100)="1d37e48486af41ab646b871e047edc87231195e5025794900f1ab9a05d184c88b68ae1dac1de81b060028d9c9bf841b3", 0x30}], 0x1, 0x0, 0x0, 0x80}, {&(0x7f00000021c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000025c0)=[{&(0x7f00000024c0)="44c9c1a9307894abc08b3743a4b86accead81f84489abc7661a8cc1c52427b24c1a3c9038f3bd4fc01d604959196b82d23c8334948b4336063292396f37206bac841310e3fa30a64a00a338c3eac01661f39e7eba91b201d9adb7533b865add03006035b71581eaa85793742512f3e52d93992418a28eac3461e5c987c38d14c00ee181dfafde39d2c3d04ebb9dfdc7438fe9b310cc42ac8843b2e77daf29c707adf67dba20cc8749306dd9066202972aed93bfa5f893c65e9ea4e9ad5bd872fcf840b15feac8dbd057ba5e79798b7d97b672bf706606eb78201", 0xda}], 0x1, 0x0, 0x0, 0x804}, {&(0x7f0000002680)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002ac0)=[{&(0x7f0000002a80)="89b84c82ed462be37d850b5b52c5cf9d22a00a3ba337b9d27ffab188e2d66302d54a50a55c6cbf26435a432c9817e8740e4688a25aa1fbc78834e9da7f17", 0x3e}], 0x1, 0x0, 0x0, 0x90}, {&(0x7f0000002b80)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000002dc0)=[{&(0x7f0000002d40)="632cf637f3df729c8f416437790e7f8145d0aa2648498e81ec22d5b141ab82a629c498c288344b3e011e99cb4c37834b46b0bfb688d0712ac5da6b75e4c58a47c2011380e936f1edfdd047edd881d5a561a2a0a95a8f5f0279c6a7457e71f414", 0x60}], 0x1, 0x0, 0x0, 0x80}], 0x4, 0x40) sched_setscheduler(r2, 0x5, &(0x7f0000000000)) fcntl$addseals(r3, 0x409, 0xfffffffffffffff0) getpid() ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000400)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f00000007c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000540)="f587fe19062113e2a33c67032824d4662974e970062eb693d5d4a58f17e2429d3980a167f8ffbaf81b0479dd36e0e56efe00025db03b4fbb05766ab159ad12d8edbde8015cccbcd9"}) r4 = getegid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000004c0)=0xc) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r4, r5, r6) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000000780)={0x1ff, 0x1, 0x7, 0x10001, 0x12, 0x6}) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) utimes(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000740)={{r7, r8/1000+30000}, {0x0, 0x7530}}) r9 = syz_open_procfs(r2, &(0x7f00000000c0)='net/igmp6\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) preadv(r9, &(0x7f00000017c0), 0x1fe, 0x400000000000) 16:50:31 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x7000, 0x3, &(0x7f0000ff3000/0x7000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\'\x04\xf9(\x00\x00\x00\x00\x00\x00') ioctl$TIOCNOTTY(r0, 0x5422) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') 16:50:31 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x200, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) r1 = socket$inet(0x2, 0x3ffffffffffffffe, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @multicast2}, 0x10) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) [ 1083.473294] binder_alloc: 16782: binder_alloc_buf, no vma [ 1083.495076] binder: 16782:16787 transaction failed 29189/-3, size 24-8 line 3135 16:50:31 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0xffff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x80000001}, 0x10) [ 1083.524499] binder: 16782:16787 got transaction to invalid handle [ 1083.536686] binder: 16782:16787 transaction failed 29201/-22, size 0-0 line 3012 16:50:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0063404001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) ioctl$sock_ifreq(r2, 0x8919, &(0x7f00000000c0)={'ip6gre0\x00', @ifru_hwaddr=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) 16:50:31 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) getsockname$inet(r0, 0x0, &(0x7f00000001c0)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x8004, 0x0) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f00000000c0)=""/205) [ 1083.573211] binder: undelivered TRANSACTION_ERROR: 29201 [ 1083.579135] binder: undelivered TRANSACTION_ERROR: 29189 [ 1083.612952] binder_alloc: 16816: binder_alloc_buf, no vma 16:50:31 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipx\x00') ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000040)={0x8, 0xf46, 0x1000, 0xef}) [ 1083.622104] binder: 16816:16818 transaction failed 29189/-3, size 0-17592186044416 line 3135 [ 1083.652485] binder: undelivered TRANSACTION_ERROR: 29189 [ 1083.658159] binder: send failed reply for transaction 1788 to 16816:16818 [ 1083.666037] binder: undelivered TRANSACTION_COMPLETE 16:50:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:50:31 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x29, @multicast2, 0x4e24, 0x3, 'sh\x00', 0x8, 0xae12, 0x47}, 0x2c) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000080)) r1 = gettid() wait4(r1, &(0x7f00000000c0), 0x0, &(0x7f0000000100)) sendto$inet(r0, 0x0, 0xfffffffffffffe57, 0x200007fd, &(0x7f0000e68000)={0x2, 0x80000000, @local}, 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) 16:50:31 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="0000e1ffffff0000000000000000000000000000"]}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) socket$inet6(0xa, 0x2, 0x0) memfd_create(0x0, 0x0) lsetxattr$security_selinux(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:boot_t:s0\x00', 0x1c, 0x3) r0 = getpgid(0x0) r1 = syz_open_procfs(r0, &(0x7f00000001c0)='net/ptype\x00') ioctl$TIOCGPTPEER(r1, 0x5441, 0xfff) r2 = dup(0xffffffffffffffff) munlock(&(0x7f0000002000/0x3000)=nil, 0x3000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syncfs(r3) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x50}, {0x6}]}, 0x10) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000180)) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000380)={0xffffffffffff8000, 0x7fffffff, 0x8, 0x2, 0x8, 0x4}) sendmmsg(r3, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002240), 0x1ba, &(0x7f00000022c0)}}, {{0x0, 0x0, &(0x7f00000026c0), 0x0, &(0x7f0000002700)}}], 0x75a, 0x0) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f00000003c0)={0xe, 0x400, {0x57, 0xfe, 0x701f, {0xfff, 0x1}, {0x10000, 0x9}, @ramp={0x30ddf27f, 0x4, {0x100000000, 0x1ff, 0x10001, 0x4}}}, {0x56, 0x60e9, 0x2, {0xc000000000000, 0x3}, {0x7ff, 0x81}, @ramp={0x844, 0x0, {0x81, 0x200, 0x40, 0x81e9}}}}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/checkreqprot\x00', 0x400000, 0x0) ioctl$PPPIOCSACTIVE(r6, 0x40107446, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x2, 0x7, 0xffff, 0x1000}]}) [ 1083.672396] binder: undelivered TRANSACTION_ERROR: 29189 [ 1083.686400] binder_alloc: 16828: binder_alloc_buf, no vma [ 1083.706892] binder: 16828:16829 transaction failed 29189/-3, size 0-0 line 3135 16:50:31 executing program 4: recvmsg(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) keyctl$describe(0x6, 0x0, &(0x7f0000002040)=""/4096, 0x1000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0xefcb, 0x1f, 0x1, 0x6, 0x0, 0x9, 0x84040, 0x0, 0x400, 0x9, 0x5, 0x2, 0x2db, 0xe2, 0x6, 0x101, 0x2, 0xffffffffffffffff, 0x3ff, 0x0, 0x2, 0x6, 0x9, 0x4, 0x1, 0xfffffffffffffff8, 0x4, 0x400, 0xfffffffffffffffd, 0x9, 0x77, 0x3788339f, 0xffffffffffffffff, 0x6, 0x8000, 0xffffffffffff2af3, 0x0, 0x4, 0x4, @perf_config_ext={0xfff, 0x6}, 0x10000, 0x5, 0x9, 0x0, 0xfffffffffffff801, 0x22, 0x7}, r2, 0x6, 0xffffffffffffffff, 0xa) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000200)) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x8005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000980)='./file0\x00') setsockopt$inet_int(r1, 0x0, 0x18, &(0x7f0000000180)=0x1, 0x4) accept4$unix(r1, &(0x7f0000000240)=@abs, &(0x7f00000001c0)=0x6e, 0x800) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') gettid() clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000a00)={&(0x7f00000009c0)='./file0\x00'}, 0x10) removexattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)=@random={'security.', 'ramfs\x00'}) [ 1083.740711] binder: undelivered TRANSACTION_ERROR: 29189 [ 1083.746229] binder: send failed reply for transaction 1793 to 16828:16829 [ 1083.759285] binder: undelivered TRANSACTION_COMPLETE [ 1083.764464] binder: undelivered TRANSACTION_ERROR: 29189 [ 1083.796499] kauditd_printk_skb: 13230 callbacks suppressed [ 1083.796508] audit: type=1400 audit(1547398231.701:13485): avc: denied { ioctl } for pid=16838 comm="syz-executor4" path="socket:[231695]" dev="sockfs" ino=231695 ioctlcmd=0x8904 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 16:50:34 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x80000000, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000500)={0x7fffffff, 0xfffffffffffeffff, 0x7, 0x80000000}, 0x10) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100)) sched_setaffinity(0x0, 0x6, &(0x7f00000003c0)=0x4) renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000240), 0xfffffffffffffed3) fchown(r3, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000480)=@req3={0x0, 0x6, 0x14cbddd4, 0x0, 0x0, 0x0, 0x3}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[]}}, 0x0) write$P9_RWSTAT(r2, &(0x7f0000000200)={0x7, 0x7f, 0x1}, 0x7) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000880)='./file0\x00') ftruncate(r2, 0x208200) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000000)) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x25}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x3, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) 16:50:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400000000000000000000000001c000000000000000000000000000000000000001800000000000000080000000000000083d9203c77ae645d64d1e1c11b5d68944ddbd36974a9babaa8645391a28ea013b7428ff8bd1758db06b46c31fadd6f1ad1fe736e26adf57c1693ab6db6b74e42922c01d5ac45a7090c967eeb4204b2f55553dce311fe318833d6114d2f89008665fe2e81018ec40e16cf5586c5cec1927d91da33288ac1795124af591d365e1eea1c74ff3df48f1ec4409c667e121197aa8e9ea226893251db", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000000000000000000000000000000000000000000f8ffffffbe3b47c80000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 16:50:34 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='ns\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ptmx\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x50264402}, 0xc, &(0x7f00000004c0)={&(0x7f0000000580)={0x100, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bcsh0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1ff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x31}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x100}, 0x1, 0x0, 0x0, 0x4010}, 0x80d0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) ioctl$KIOCSOUND(r1, 0x4b2f, 0x1000) syz_open_pts(r1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000000240)) write(r4, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x4c, r6, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffffff8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lapb0\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) pselect6(0x1e9, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, &(0x7f0000000300)={&(0x7f0000000080), 0x8}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:50:34 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x820000801, &(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x4}, 0xfffffffffffffddf) 16:50:34 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x101840, 0x0) r3 = request_key(&(0x7f0000000140)='pkcs7_test\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0xfffffffffffffffb) add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000340)="738f889c8ae47da1254c83f5188383c2c628afb3fbb4f89099318b28ef54c1891db2eecdb150969bd421bfa6f378cc84d66614ca7cdb3f72679b00159f1a3e12931c6437d20ec6ebb0b853c61787afe17c05c7a54bc310302857999d5491334373d830fa7fee13d95627f812f2edf237624115d61e35fa22ca20fdffd74ecb2335a189e229cd962893e8", 0x8a, r3) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000080)) bind(r0, &(0x7f00000002c0)=@nl=@unspec, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) 16:50:34 executing program 2: clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000004c0)={0x891, 0x40000000000000, 0x3, 0x0, 0x5, [{0x6, 0x3, 0x3, 0x0, 0x0, 0x8}, {0x7, 0xf3c, 0x80000001, 0x0, 0x0, 0x88}, {0x800, 0xfffffffe00, 0xfffffffffffffffd, 0x0, 0x0, 0x1508}, {0xdc46, 0x2, 0x1, 0x0, 0x0, 0x2000}, {0x2, 0x3, 0x800000, 0x0, 0x0, 0x2}]}) accept$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x20000, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/policy\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b700000005ed0050bfa30000000000000703000028feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000012d400500000000005504000001ed00040000e50000002c460000000000006b0a00fe0000000085fdffff06000000b7000000000000009500000000000000414a4db888"], &(0x7f0000000100)='EPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, [], r1, 0xd}, 0x48) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_adj\x00') exit(0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000700)={'ip6tnl0\x00', &(0x7f00000006c0)=@ethtool_ts_info}) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={{0x0, 0x7530}}) ppoll(&(0x7f0000000200)=[{r3, 0x20}, {r4, 0x88}, {r3}], 0x3, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)={0x1e9}, 0x8) pipe2(&(0x7f0000000300), 0x80000) fcntl$getown(r2, 0x9) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/status\x00', 0x0, 0x0) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f00000001c0)={0x4, 0x3, 0x5, 0x0, 0x5, 0x7}) [ 1086.449705] binder: 16849:16851 got transaction with invalid data ptr [ 1086.462348] binder: 16849:16851 transaction failed 29201/-14, size 24-8 line 3153 [ 1086.479799] binder: 16849:16851 unknown command 1 16:50:34 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) r1 = open(&(0x7f0000000000)='./file0\x00', 0x60000, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, [], 0x28}, 0x9}, {0xa, 0x4e21, 0x629, @ipv4={[], [], @local}, 0x9}, 0x2, [0x9c, 0x3, 0x4, 0x7ff, 0xfff, 0x80000001, 0x2, 0x7fff]}, 0x5c) 16:50:34 executing program 4: perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x800100000003) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f00000008c0)=ANY=[@ANYBLOB="0500000000000000060000000000000002000000000000000600000000000000eeffffffffffffff06ff010100000000000000000008000000000000000000000000000000000000efffffff0000000007000000000000000600000000000000f8ffffffffffffff00834037000000000000000000000000000002000000000000000000000000000000000000000000ff7f0000000000000500000000000000070000000000000000030300000000000000000000000000000000000000000000000000000000000000000000000000080000000000000007000000000000000400000000000000f00209050000000000000000000000000000000000000000000000000000000000000000000000000900000000000000060000000000000020000000000000000700066a0000000000000000000000000000000000000000000000000000000000000000000000000500000000000000050000000000000000000000000000000803c6010000000000000000000000000000000000000000000000000000000000000000000000003e81a05dbefb00bc96bda91e4608"]) syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$clear(0x7, r2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000140)=0x80000000032, 0x4) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) getpeername$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000280)=0x1c) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000040)='\x00\x00\x00\x00\x80', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000100)=ANY=[@ANYBLOB='inode_readahead_blks=0x0000000000000200,\x00']) r3 = add_key$keyring(&(0x7f0000000840)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(0x0, &(0x7f0000000740)={'syz', 0x2}, 0x0, 0x0, r3) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f00000005c0)) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000005c0)=""/243, &(0x7f00000002c0)=0xf3) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000680)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) [ 1086.503270] binder: 16849:16851 ioctl c0306201 20000040 returned -22 [ 1086.526229] binder_alloc: binder_alloc_mmap_handler: 16849 20001000-20004000 already mapped failed -16 16:50:34 executing program 0: r0 = socket$inet(0x2, 0x805, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) [ 1086.564064] binder: BINDER_SET_CONTEXT_MGR already set [ 1086.569376] binder: 16849:16851 ioctl 40046207 0 returned -16 [ 1086.570313] binder_alloc: 16849: binder_alloc_buf, no vma [ 1086.612273] binder: 16849:16868 unknown command 1 [ 1086.617422] binder: 16849:16868 ioctl c0306201 20000040 returned -22 [ 1086.634279] binder: 16849:16875 transaction failed 29189/-3, size 24-8 line 3135 [ 1086.651104] binder: undelivered TRANSACTION_ERROR: 29201 16:50:34 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x8201, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) write(r1, &(0x7f0000000080)="ca60be812f05dec7101e5a05296588027fb611c1459a28c52cb35cf2d45013015213d860b81df91ef8910083aafc2e98e098154d5010e0c8efad2134b8207693cf8356e253f52507d7d8ae24fdcf8fc54eccef5e55eb16af5c8f639438541911d193e1d7aa6b70266ce6f582e085021d8ff1304b0709d52ed93f6c8f963b74a282046f6873f954e11e34de964da1cc694efa2d04c3f14e1a0e9cf03486b97c095c4e6199da8dc51f4674131695fb9ae5f5d4995f3a070dd5d0", 0xb9) dup2(r1, r0) 16:50:34 executing program 2: clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000004c0)={0x891, 0x40000000000000, 0x3, 0x0, 0x5, [{0x6, 0x3, 0x3, 0x0, 0x0, 0x8}, {0x7, 0xf3c, 0x80000001, 0x0, 0x0, 0x88}, {0x800, 0xfffffffe00, 0xfffffffffffffffd, 0x0, 0x0, 0x1508}, {0xdc46, 0x2, 0x1, 0x0, 0x0, 0x2000}, {0x2, 0x3, 0x800000, 0x0, 0x0, 0x2}]}) accept$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x20000, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/policy\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b700000005ed0050bfa30000000000000703000028feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000012d400500000000005504000001ed00040000e50000002c460000000000006b0a00fe0000000085fdffff06000000b7000000000000009500000000000000414a4db888"], &(0x7f0000000100)='EPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, [], r1, 0xd}, 0x48) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_adj\x00') exit(0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000700)={'ip6tnl0\x00', &(0x7f00000006c0)=@ethtool_ts_info}) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={{0x0, 0x7530}}) ppoll(&(0x7f0000000200)=[{r3, 0x20}, {r4, 0x88}, {r3}], 0x3, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)={0x1e9}, 0x8) pipe2(&(0x7f0000000300), 0x80000) fcntl$getown(r2, 0x9) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/status\x00', 0x0, 0x0) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f00000001c0)={0x4, 0x3, 0x5, 0x0, 0x5, 0x7}) 16:50:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000000c0)) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xfffffffffffffffc, 0x8810, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1086.668840] binder: undelivered TRANSACTION_ERROR: 29189 [ 1086.763678] binder_alloc: 16895: binder_alloc_buf, no vma [ 1086.797805] binder: 16895:16899 transaction failed 29189/-3, size 24-8 line 3135 [ 1086.816236] binder: 16895:16902 got transaction to invalid handle [ 1086.831440] binder: 16895:16902 transaction failed 29201/-22, size 0-0 line 3012 16:50:34 executing program 5: clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000004c0)={0x891, 0x40000000000000, 0x3, 0x0, 0x5, [{0x6, 0x3, 0x3, 0x0, 0x0, 0x8}, {0x7, 0xf3c, 0x80000001, 0x0, 0x0, 0x88}, {0x800, 0xfffffffe00, 0xfffffffffffffffd, 0x0, 0x0, 0x1508}, {0xdc46, 0x2, 0x1, 0x0, 0x0, 0x2000}, {0x2, 0x3, 0x800000, 0x0, 0x0, 0x2}]}) accept$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x20000, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/policy\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b700000005ed0050bfa30000000000000703000028feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000012d400500000000005504000001ed00040000e50000002c460000000000006b0a00fe0000000085fdffff06000000b7000000000000009500000000000000414a4db888"], &(0x7f0000000100)='EPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, [], r1, 0xd}, 0x48) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_adj\x00') exit(0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000700)={'ip6tnl0\x00', &(0x7f00000006c0)=@ethtool_ts_info}) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={{0x0, 0x7530}}) ppoll(&(0x7f0000000200)=[{r3, 0x20}, {r4, 0x88}, {r3}], 0x3, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)={0x1e9}, 0x8) pipe2(&(0x7f0000000300), 0x80000) fcntl$getown(r2, 0x9) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/status\x00', 0x0, 0x0) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f00000001c0)={0x4, 0x3, 0x5, 0x0, 0x5, 0x7}) 16:50:34 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x3) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) [ 1086.873710] binder: undelivered TRANSACTION_ERROR: 29201 [ 1086.879590] binder: undelivered TRANSACTION_ERROR: 29189 16:50:35 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='maps\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) mknodat(r0, &(0x7f0000000000)='./file0\x00', 0x100, 0x10001) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0) 16:50:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x802) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) sched_yield() ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x1a, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r1, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYRES16=r1], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) fcntl$dupfd(r2, 0x406, r2) 16:50:35 executing program 0: r0 = socket$inet(0x2, 0x9, 0x9) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x3) set_robust_list(&(0x7f0000000080)={&(0x7f0000000000), 0x40, &(0x7f0000000140)}, 0x18) fsetxattr$security_smack_transmute(r0, &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000100)='TRUE', 0x4, 0x1) prctl$PR_SVE_GET_VL(0x33, 0x77c7) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/protocols\x00') getpeername$netlink(r1, &(0x7f0000000200), &(0x7f0000000240)=0xc) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000280)=""/158) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', 0xffffffffffffffff}, 0x30) ioprio_set$pid(0x0, r2, 0x0) 16:50:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x400) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000cecffc), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000008340)={0x0, 0x0, &(0x7f0000008300)={&(0x7f0000000080)=ANY=[@ANYBLOB="ad3b57649dfe5fd1fd42818fff07f738c1", @ANYRES16=0x0, @ANYBLOB="2aa574bf2e88e560cf37dc86acca49b92f5d01e89340a9171d478083ed2c9790256e585225b1f05aff16f31691b56bfd14ec106e28bee14b5161baa8fc87feebcc70bbe9c2821a3857"], 0x14}}, 0x0) 16:50:35 executing program 5: clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000004c0)={0x891, 0x40000000000000, 0x3, 0x0, 0x5, [{0x6, 0x3, 0x3, 0x0, 0x0, 0x8}, {0x7, 0xf3c, 0x80000001, 0x0, 0x0, 0x88}, {0x800, 0xfffffffe00, 0xfffffffffffffffd, 0x0, 0x0, 0x1508}, {0xdc46, 0x2, 0x1, 0x0, 0x0, 0x2000}, {0x2, 0x3, 0x800000, 0x0, 0x0, 0x2}]}) accept$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x20000, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/policy\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b700000005ed0050bfa30000000000000703000028feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000012d400500000000005504000001ed00040000e50000002c460000000000006b0a00fe0000000085fdffff06000000b7000000000000009500000000000000414a4db888"], &(0x7f0000000100)='EPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, [], r1, 0xd}, 0x48) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_adj\x00') exit(0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000700)={'ip6tnl0\x00', &(0x7f00000006c0)=@ethtool_ts_info}) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={{0x0, 0x7530}}) ppoll(&(0x7f0000000200)=[{r3, 0x20}, {r4, 0x88}, {r3}], 0x3, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)={0x1e9}, 0x8) pipe2(&(0x7f0000000300), 0x80000) fcntl$getown(r2, 0x9) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/status\x00', 0x0, 0x0) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f00000001c0)={0x4, 0x3, 0x5, 0x0, 0x5, 0x7}) 16:50:35 executing program 3: sched_setaffinity(0x0, 0x228, &(0x7f0000000100)=0x800000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x9) r1 = socket$inet(0x2, 0x3, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r1, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={r2, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) r3 = socket$inet6(0xa, 0x8, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0xa, @in6, 0x0, 0x1, 0x0, 0x5}}, 0xe8) connect$inet6(r3, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r3, &(0x7f00000002c0), 0x4cc, 0x0) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x2, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8004000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r5, 0x600, 0x70bd2b, 0x25dfdbfe, {{}, 0x0, 0x4107, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'ip6gretap0\x00'}}}}, ["", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) [ 1087.376347] binder: 16923:16930 unknown command 808464432 [ 1087.395105] binder: 16923:16930 ioctl c0306201 20000000 returned -22 [ 1087.425297] binder: 16923:16930 got transaction to invalid handle [ 1087.439871] binder: 16923:16930 transaction failed 29201/-22, size 0-0 line 3012 16:50:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000180)) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) r3 = dup3(r2, r0, 0x80000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r3, 0x0, 0x2e, &(0x7f0000000280)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0xffffffffffffffff}, 0x30) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000380)=r4) write$selinux_validatetrans(r3, &(0x7f00000000c0)={'system_u:object_r:cgroup_t:s0', 0x20, 'system_u:object_r:ping_exec_t:s0', 0x20, 0x1, 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00'}, 0x82) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:50:35 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x90000020}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x70, r1, 0x808, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}]}, @TIPC_NLA_LINK={0x30, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000}, 0x0) sendmsg(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000001000000010000000300000004000000"], 0x18}, 0x0) [ 1087.492946] binder: undelivered TRANSACTION_ERROR: 29201 16:50:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x10000) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c40)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000c80)={{{@in6=@remote, @in6}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f0000000d80)=0xffffffffffffffdb) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20010020}, 0xc, &(0x7f0000000400)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x801}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x7b, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) getuid() sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000600)="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", 0x519}], 0x1, 0x0, 0x0, 0x800}, 0x44804) read(r1, &(0x7f0000000200)=""/225, 0xe1) shutdown(r1, 0x1) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) unlink(&(0x7f00000000c0)='./file0\x00') setresuid(0x0, 0xee01, 0x0) r2 = geteuid() setresuid(r2, 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000002900)=ANY=[@ANYBLOB="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"], 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x1, 0x3, 0x80000000, 0xe6b8, 0x5}, 0x14) wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340)) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) getpid() pipe(&(0x7f0000000340)) dup3(r3, r3, 0x80000) 16:50:35 executing program 0: r0 = socket$inet(0x2, 0x20003, 0x200) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) getpeername$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000040)=0x10) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x154, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x38, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xde3d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4406}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x4c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffffffffffb}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa2}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x64, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x207}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 16:50:35 executing program 3: sched_setaffinity(0x0, 0x228, &(0x7f0000000100)=0x800000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x9) r1 = socket$inet(0x2, 0x3, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r1, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={r2, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) r3 = socket$inet6(0xa, 0x8, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0xa, @in6, 0x0, 0x1, 0x0, 0x5}}, 0xe8) connect$inet6(r3, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r3, &(0x7f00000002c0), 0x4cc, 0x0) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x2, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8004000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r5, 0x600, 0x70bd2b, 0x25dfdbfe, {{}, 0x0, 0x4107, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'ip6gretap0\x00'}}}}, ["", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) [ 1087.558729] binder: 16947:16954 ioctl 80047013 20000180 returned -22 [ 1087.597173] binder: 16947:16954 ioctl 5410 20000380 returned -22 16:50:35 executing program 0: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) mlockall(0x2) [ 1087.606212] binder: 16947:16954 got transaction to context manager from process owning it [ 1087.622966] binder: 16947:16954 transaction failed 29201/-22, size 24-8 line 3003 16:50:35 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='maps\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) mknodat(r0, &(0x7f0000000000)='./file0\x00', 0x100, 0x10001) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0) 16:50:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) lookup_dcookie(0x1, &(0x7f00000000c0)=""/148, 0x94) 16:50:35 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000080)={{0x7f, @local, 0x4e21, 0x4, 'lblcr\x00', 0x12, 0x5, 0x9}, {@multicast1, 0x4e22, 0x2001, 0xff, 0xffffffff, 0x8a5a}}, 0x44) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) [ 1087.689893] binder: undelivered TRANSACTION_ERROR: 29201 16:50:35 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) keyctl$describe(0x6, 0x0, 0x0, 0x0) 16:50:35 executing program 3: sched_setaffinity(0x0, 0x228, &(0x7f0000000100)=0x800000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x9) r1 = socket$inet(0x2, 0x3, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r1, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={r2, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) r3 = socket$inet6(0xa, 0x8, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0xa, @in6, 0x0, 0x1, 0x0, 0x5}}, 0xe8) connect$inet6(r3, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r3, &(0x7f00000002c0), 0x4cc, 0x0) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x2, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8004000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r5, 0x600, 0x70bd2b, 0x25dfdbfe, {{}, 0x0, 0x4107, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'ip6gretap0\x00'}}}}, ["", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) 16:50:35 executing program 0: r0 = socket$inet(0x2, 0x4000010000000003, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) [ 1087.788669] binder_alloc: 16981: binder_alloc_buf, no vma [ 1087.814225] binder: 16981:16985 transaction failed 29189/-3, size 0-0 line 3135 16:50:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x10000) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c40)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000c80)={{{@in6=@remote, @in6}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f0000000d80)=0xffffffffffffffdb) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20010020}, 0xc, &(0x7f0000000400)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="000000e303000000000000008f37ca746e4935e4056c6b98eab0de6897dbab9a9aaa2407574d32cd69bc853f2b18a44a4e4e158cb2c2cfbae632e43bcf593b8dca0146b6d976706f1ef804b02cf18e48077db9638e8573772faf265a9d6f03bff740dea54f11e42e207a4bbd571af23aa02a841bc724f260cad88289144d135eb51b448ea125db7a9c4d3789530bdbc63237ffd4e1456fab94b5d34ce6b6159cbced900a2800a4c9b58a46fc76e45b1a5abcf88cce728881fe083bef50608b2b41cf7a1d622df6e897ceef4821d7b166919f28c05ee7b2df26ab36fdafb642941ceb3e7f232682736e35521abba52039eee053a31ffebc8c59c76bd734d25f9cd06d7296b441f0657c81022d59f89beed4dd0491ea8d9c1d0bfab91dd7c02834b5ead000000000ecf2177489fe1ef6ef2d8992effbd3ebb29ebadc2cc2a067bb8017ed32a9d68b257feee6a1f53922db2f86e0cc83ae072508b38ce476a6da2023aeb5deb97465d774eda68565cdffe57575814adab618ef25975e0efda102d31bf2d2c9b1dbb4094013b4220e3396bf02dd2962cd4a582c09d2e8b2dad564d8a048c83f0560a915af329f0f5f80b2f657db4aeb63fb867826db52428d750b59110a6ff0a9faee23a02485d7b140351f3781d814bb30ecff9f845c2102b33aca8ea87f3601733bfd5405654cf6650000000000000050d9471c9d39333f6ded673ad3fcdf4da1ebff68c14be68366fff1"], 0x1}, 0x1, 0x0, 0x0, 0x801}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x7b, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) getuid() sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000600)="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", 0x519}], 0x1, 0x0, 0x0, 0x800}, 0x44804) read(r1, &(0x7f0000000200)=""/225, 0xe1) shutdown(r1, 0x1) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) unlink(&(0x7f00000000c0)='./file0\x00') setresuid(0x0, 0xee01, 0x0) r2 = geteuid() setresuid(r2, 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000002900)=ANY=[@ANYBLOB="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"], 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x1, 0x3, 0x80000000, 0xe6b8, 0x5}, 0x14) wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340)) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) getpid() pipe(&(0x7f0000000340)) dup3(r3, r3, 0x80000) 16:50:35 executing program 0: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000040)={'raw\x00', 0x43, "496612ae42f7e0c630be00ea70a0b7306d9cdb19289a1bc78c78706026fb86b3022fecfb888b1b2a27cee4c3cface25889a3befe96d451a696b68f83592d91b73ecc77"}, &(0x7f00000000c0)=0x67) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) [ 1087.912556] binder: undelivered TRANSACTION_ERROR: 29189 [ 1087.927718] binder: send failed reply for transaction 1808 to 16981:16985 16:50:35 executing program 3: sched_setaffinity(0x0, 0x228, &(0x7f0000000100)=0x800000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x9) r1 = socket$inet(0x2, 0x3, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r1, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={r2, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) r3 = socket$inet6(0xa, 0x8, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0xa, @in6, 0x0, 0x1, 0x0, 0x5}}, 0xe8) connect$inet6(r3, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r3, &(0x7f00000002c0), 0x4cc, 0x0) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x2, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8004000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r5, 0x600, 0x70bd2b, 0x25dfdbfe, {{}, 0x0, 0x4107, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'ip6gretap0\x00'}}}}, ["", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) 16:50:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) close(r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x20) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x301002, 0x1) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000440)={0x3f, {{0x2, 0x4e21, @loopback}}, 0xffffffffffffffff, 0x2, [{{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e21, @broadcast}}]}, 0x190) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018400000000000000800000000000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="000010577f0000006bc5e558a2212a94bfb6ec01402f28233d37fb3a58e3191f0049dc8e1870ee7d843cd2ec70cafdb3327313c52abebaa2f9d472f9615fb84a54"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_extract_tcp_res$synack(&(0x7f0000000100)={0x41424344, 0x41424344}, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000140)={0x41424344, 0x41424344}, 0x1, 0x0) write$tun(r2, &(0x7f0000000600)={@val={0x0, 0x8914}, @val={0x1, 0x80, 0x6, 0x9, 0x1ca, 0x3}, @ipv4={{0x2a, 0x4, 0xffffffffffff8001, 0x40, 0xcd, 0x65, 0x7f, 0xa0, 0xff, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x17}, {[@generic={0x0, 0xc, "b9cd5785c2953cb0bef4"}, @timestamp={0x44, 0x8, 0x10000, 0x3, 0x3, [{[], 0x6}]}, @timestamp={0x44, 0x24, 0x7, 0x0, 0x7fffffff, [{[], 0x100}, {[@broadcast], 0x401}, {[@rand_addr=0x1], 0x2}, {[], 0x800}, {[@initdev={0xac, 0x1e, 0x0, 0x0}], 0x8}]}, @rr={0x7, 0x7, 0x9, [@dev={0xac, 0x14, 0x14, 0x29}]}, @ssrr={0x89, 0x1b, 0xc3c, [@remote, @empty, @rand_addr=0x18bb, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @local]}, @generic={0x1, 0x10, "f3788d09ed343a1d5a00b4cc976c"}, @generic={0x0, 0x9, "2e2a3fa41c1b07"}, @noop, @ssrr={0x89, 0x1f, 0xffffffffffff0000, [@remote, @multicast2, @multicast1, @loopback, @local, @broadcast, @local]}]}}, @tcp={{0x4e24, 0x4e24, r4, r5, 0x3, 0x0, 0x6, 0xa0, 0x100, 0x0, 0x29, {[@window={0x3, 0x3, 0x7ff}]}}, {"2309786e47461006b258f04efd"}}}}, 0xdb) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:50:35 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='\x00hed\x00\x00') r1 = dup(r0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) fchmodat(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/relabel\x00', 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e24, @rand_addr=0x6}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) shutdown(r2, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') [ 1087.977155] binder: undelivered TRANSACTION_COMPLETE 16:50:35 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000000)={0x7, {{0xa, 0x4e23, 0x4, @rand_addr="9a9a5fe77f9339cb2c0791822388ebf4", 0x5a3e}}}, 0x88) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x200, 0x4) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@initdev}}, &(0x7f0000000380)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, &(0x7f00000004c0)=0xe8) stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@broadcast}}, &(0x7f00000006c0)=0xe8) syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x6, 0x1, &(0x7f0000000240)=[{&(0x7f00000001c0)="93abac32d934da70d4ca5a87a36866636dfde373ef4832d176b8bdbff79875803381888aee96ed439d4222a6a783efd4586e87bf4728832679afc1c657931593df70299cf39efe2ddfd1c307ca9e290f4c6720d5de4e5d62679b36eb969c45d50b79e56b3c04cd3a46c3a26b2d94728d80c7a1", 0x73, 0x1}], 0x4003, &(0x7f0000000700)={[{@numtail='nonumtail=0'}, {@rodir='rodir'}, {@utf8no='utf8=0'}, {@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}], [{@fowner_gt={'fowner>', r2}}, {@subj_type={'subj_type', 0x3d, ','}}, {@subj_user={'subj_user', 0x3d, '/selinux/policy\x00'}}, {@euid_lt={'euid<', r3}}, {@obj_user={'obj_user', 0x3d, 'em0'}}, {@fowner_eq={'fowner', 0x3d, r4}}, {@subj_user={'subj_user'}}, {@audit='audit'}, {@fsmagic={'fsmagic', 0x3d, 0xdad}}, {@uid_gt={'uid>', r5}}]}) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) [ 1088.014762] binder: undelivered TRANSACTION_ERROR: 29189 [ 1088.048799] binder: 17017:17020 got transaction to invalid handle 16:50:35 executing program 2: openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(r0, 0x0, 0x100000a, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x4, 0x36}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 16:50:36 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b4000000000000003d199c000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x265, &(0x7f000000cf3d)=""/195}, 0x48) [ 1088.065093] binder: 17017:17020 transaction failed 29201/-22, size 0-0 line 3012 [ 1088.091492] FAT-fs (loop0): Unrecognized mount option "fowner>00000000000000000000" or missing value 16:50:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'gre0\x00', 0x2001}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1088.112268] binder: undelivered TRANSACTION_ERROR: 29201 16:50:36 executing program 5: io_setup(0x7, &(0x7f0000004680)=0x0) r1 = socket(0x2, 0x805, 0xff) close(r1) r2 = memfd_create(&(0x7f00000000c0)='system[selfloppp0/[cpusetsecurity\x00', 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009000)=[{{&(0x7f0000000240)=@pppol2tp, 0x80, &(0x7f0000000500)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, &(0x7f0000009140)) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x1000000000000008, 0x0, r1, &(0x7f0000000140), 0x8a, 0x0, 0x0, 0x0, r2}]) 16:50:36 executing program 3: sched_setaffinity(0x0, 0x228, &(0x7f0000000100)=0x800000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x9) r1 = socket$inet(0x2, 0x3, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r1, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={r2, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) r3 = socket$inet6(0xa, 0x8, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0xa, @in6, 0x0, 0x1, 0x0, 0x5}}, 0xe8) connect$inet6(r3, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r3, &(0x7f00000002c0), 0x4cc, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') 16:50:36 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000280)={0x7fff, 0x7, 0x7, 0x3f, 0x3a3, 0x1, 0x0, 0xd88}, &(0x7f00000002c0)={0x5, 0x1, 0x6, 0x6, 0x8, 0x20, 0xff, 0xff}, &(0x7f0000000300)={0x3, 0x97ff, 0x401, 0x8, 0x7fffffff, 0xdc61, 0x78cc, 0x4}, &(0x7f0000000400)={r2, r3+30000000}, &(0x7f0000000640)={&(0x7f0000000600)={0x255a}, 0x8}) r4 = socket(0x9, 0x2, 0x8) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x856415}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xac}, 0x1, 0x0, 0x0, 0x4044001}, 0x8804) write$binfmt_script(r1, &(0x7f0000000dc0)={'#! ', './file0', [{0x20, 'usereth0'}, {0x20, '/security}.posix_acl_accessmime_typeem0system'}, {0x20, '($mime_type'}, {0x20, '\''}, {0x20, 'system&em1selinuxmime_type!\xc7mime_type){:'}, {0x20, '-*:vboxnet0'}, {0x20, 'selinux{&&wlan0'}, {}, {}], 0xa, "327f000df1cb009923bac678f2adb0ab1e92625e313c920839e1b2fc6e477f68cb6d915bae2a1eb3e3164174041f8701d89b866dbffa2636e5b1af8a10e5c800014cecff4497cc7526de21930f491f931d240c777f24bcef226c79b0c2fd73ee17162ba4d4874b404e227588f70faa22504d7fe33375ae3ea18536d633e325ac3cd908e5e4c4c37d942c5925403df418c5b6b23f68016628cf48f2cf64e0a391a34d567562348385dc9f95c35a7fbc4ef32f6634cc2b7e73ef859a30daa67dda4fb69c0a03d7bcac9dc21fc13e982f165709e38403a6b23522b3c980f9a05d08b3f4ca84ca8b306ecfc2692e9bc30181370607877cb4"}, 0x18d) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) clock_gettime(0x3, &(0x7f0000000040)={0x0, 0x0}) accept$unix(r1, &(0x7f0000000d40)=@abs, &(0x7f00000001c0)=0x6e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$unix(r1, &(0x7f00000000c0)=@abs, &(0x7f0000000000)=0x6e) recvmmsg(r0, &(0x7f0000000200)=[{{&(0x7f0000000ac0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x35d, &(0x7f0000000a80)=[{&(0x7f00000006c0)=""/246}, {&(0x7f00000007c0)=""/240}, {&(0x7f00000008c0)=""/163}, {&(0x7f0000000980)=""/234}], 0x6b, &(0x7f0000000680)=""/31, 0xffffffffffffff80}}], 0x3f747b8cbf977b6, 0x0, &(0x7f0000000b40)={0x0, r5+10000000}) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"]) read$eventfd(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0x8001) r6 = fcntl$getown(r4, 0x9) ptrace$setopts(0x4200, r6, 0x8c3, 0x80000100000000) ptrace$cont(0x17, 0x0, 0x0, 0x0) 16:50:36 executing program 4: clone(0x2102003ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/load\x00', 0x2, 0x0) getgroups(0x1, &(0x7f0000000300)=[0x0]) r1 = socket$nl_route(0x10, 0x3, 0x0) gettid() sendmsg$nl_route(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x30, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x4}}}]}, 0x30}}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x2) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{0x9, 0x0, 0x0, 0x4}, 'syz1\x00', 0xff}) personality(0x100000f) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x8992, &(0x7f0000000380)={'syzkaller1\x00', @ifru_addrs=@isdn={0x22, 0x0, 0x0, 0x81}}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') renameat(r4, &(0x7f00000000c0)='./bus\x00', r0, &(0x7f0000000180)='./bus\x00') [ 1088.168859] FAT-fs (loop0): Unrecognized mount option "fowner>00000000000000000000" or missing value [ 1088.189163] binder_alloc: 17041: binder_alloc_buf, no vma [ 1088.198042] binder: 17041:17052 transaction failed 29189/-3, size 0-0 line 3135 16:50:36 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) r1 = accept(r0, 0x0, &(0x7f00000000c0)) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000100)={0x3f}, 0xfffffdee) [ 1088.275678] binder: undelivered TRANSACTION_ERROR: 29189 [ 1088.281571] binder: send failed reply for transaction 1815 to 17041:17043 16:50:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) faccessat(r2, &(0x7f0000000280)='./file0\x00', 0x80, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="00000000000000005f82eb0bc90d25b5ecc02ea1a1efc1dc8b9e4d396481ad14d4aff25e7b4c7197a8674be58fbb43facc017107ee4d69afcd8a05d7f5d5e302f7b7734fb10c8fd50a98d2b6b3d4b1172185514a0e95a8f140466a265e9ef6d92dde6ca51bf6c2e9b1a44a9570726e940b8225b8bd9ff4d6d137accd829e4cf4b9dfe1691d423bbade36ef3c5fa579cc451b169a33592ea0c97d60c1f8d74b70a9eaf4dbab97b2b713cdcaabc187f7dc8593139da7e8e362173c"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:50:36 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x0, 0x6, 0x7ff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0xfffffffffffffff8, 0x2) fcntl$notify(0xffffffffffffffff, 0x402, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f0000000680), &(0x7f0000000280), 0x8) r2 = dup(0xffffffffffffffff) unshare(0x40000000) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000340)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x3) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000002c0)) socket$inet_udp(0x2, 0x2, 0x0) rt_sigprocmask(0x1, &(0x7f0000000700), 0x0, 0x8) r3 = creat(&(0x7f0000000580)='./file0/file0\x00', 0x100) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000040)="9d8aa5fd61d12e19ff", 0x0}, 0x20) syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="000229bd7000fcdbdf2501000000000000000c410000000c0000"], 0x1}, 0x1, 0x0, 0x0, 0x8010}, 0x44001) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000006c0)) pipe(&(0x7f0000000100)) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc0\x00', 0x240, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x8) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"]) write$cgroup_subtree(r3, &(0x7f00000001c0)={[{0x2b, 'rdma'}, {0x2f, 'pids'}]}, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000380)={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, {0x306}, 0x60, {0x2, 0x4e20, @broadcast}, 'bcsf0\x00'}) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x181000, 0x0) fallocate(r0, 0x3, 0x0, 0x80ce66) [ 1088.326276] binder: undelivered TRANSACTION_COMPLETE 16:50:36 executing program 3: sched_setaffinity(0x0, 0x228, &(0x7f0000000100)=0x800000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x9) r1 = socket$inet(0x2, 0x3, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r1, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={r2, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) r3 = socket$inet6(0xa, 0x8, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0xa, @in6, 0x0, 0x1, 0x0, 0x5}}, 0xe8) connect$inet6(r3, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r3, &(0x7f00000002c0), 0x4cc, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x2, 0x0) 16:50:36 executing program 5: sched_setaffinity(0x0, 0x228, &(0x7f0000000100)=0x800000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x9) r1 = socket$inet(0x2, 0x3, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r1, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={r2, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) r3 = socket$inet6(0xa, 0x8, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0xa, @in6, 0x0, 0x1, 0x0, 0x5}}, 0xe8) connect$inet6(r3, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r3, &(0x7f00000002c0), 0x4cc, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') 16:50:36 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) socket$inet(0x2, 0x800, 0x4) [ 1088.364483] binder: undelivered TRANSACTION_ERROR: 29189 [ 1088.375216] binder_alloc: 17086: binder_alloc_buf, no vma [ 1088.402931] binder: 17086:17088 transaction failed 29189/-3, size 0-0 line 3135 16:50:36 executing program 4: clone(0x2102003ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/load\x00', 0x2, 0x0) getgroups(0x1, &(0x7f0000000300)=[0x0]) r1 = socket$nl_route(0x10, 0x3, 0x0) gettid() sendmsg$nl_route(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x30, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x4}}}]}, 0x30}}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x2) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{0x9, 0x0, 0x0, 0x4}, 'syz1\x00', 0xff}) personality(0x100000f) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x8992, &(0x7f0000000380)={'syzkaller1\x00', @ifru_addrs=@isdn={0x22, 0x0, 0x0, 0x81}}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') renameat(r4, &(0x7f00000000c0)='./bus\x00', r0, &(0x7f0000000180)='./bus\x00') [ 1088.461245] binder: undelivered TRANSACTION_ERROR: 29189 [ 1088.467619] binder: send failed reply for transaction 1820 to 17086:17088 [ 1088.474745] ip6_tunnel: 6tnl0 xmit: Local address not yet configured! 16:50:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a6273000000009efbf9ef7e4798ba96dba6592ff60d7fe78f1f1c9363ca38378e9953", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0}) write$P9_RRENAME(r1, &(0x7f0000000140)={0x7, 0x15, 0x1}, 0x7) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000180)) 16:50:36 executing program 3: sched_setaffinity(0x0, 0x228, &(0x7f0000000100)=0x800000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x9) r1 = socket$inet(0x2, 0x3, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r1, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={r2, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) r3 = socket$inet6(0xa, 0x8, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0xa, @in6, 0x0, 0x1, 0x0, 0x5}}, 0xe8) connect$inet6(r3, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r3, &(0x7f00000002c0), 0x4cc, 0x0) 16:50:36 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0x1) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000003000)={0x0, 0x0, 0x2}, 0x10) socketpair(0x5, 0x80000, 0x1, &(0x7f00000003c0)) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x9, 0x3, 0x310, 0x0, 0x158, 0x0, 0x0, 0x158, 0x240, 0x240, 0x240, 0x240, 0x240, 0x3, &(0x7f0000000480), {[{{@ipv6={@rand_addr="f1e3df2e5cce3241423aa5654996d449", @dev={0xfe, 0x80, [], 0x16}, [0x0, 0xffffffff, 0x0, 0xff0000ff], [0x0, 0xff, 0xffffffff, 0xff], 'vcan0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0xafeffa9260ad02a2, 0xba07, 0x0, 0x6e}, 0x0, 0xf0, 0x158, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x5, 0x2, 0xfffffffffffffffb, '\x00', 'syz0\x00', 0x8}}}, {{@ipv6={@mcast2, @rand_addr="4ed09b5e3c95c0a11d55de5d41865cf9", [0x0, 0xffffffff, 0xffffffff, 0xffffffff], [0x0, 0xffffff00, 0xffffffff, 0xffffffff], 'veth1_to_team\x00', 'bcsf0\x00', {0xff}, {0xff}, 0x2c, 0xfffffffffffffffb, 0x1, 0x9}, 0x0, 0xc8, 0xe8}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) sendmmsg(r3, &(0x7f00000002c0), 0x400000000000166, 0x10) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) nanosleep(&(0x7f0000000440)={r4, r5+10000000}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x23, &(0x7f0000003000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x23, &(0x7f0000003000)={{{@in=@multicast1=0xe0000014, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast2}}}, 0x90) r6 = dup3(r1, r0, 0x80000) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x14, &(0x7f0000000080)={@ipv4={[], [], @initdev}, 0x0}, &(0x7f00000000c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x150, 0x28, 0x108, 0x70bd2b, 0x25dfdbfb, {0x0, r7, {0xd, 0xe}, {0xe, 0xffff}, {0xfff2, 0x10}}, [@tclass_kind_options=@c_hfsc={{0xc, 0x1, 'hfsc\x00'}, {0x24, 0x2, [@TCA_HFSC_RSC={0x10, 0x1, {0x2, 0xf2fa, 0x4}}, @TCA_HFSC_USC={0x10, 0x3, {0x4, 0x6}}]}}, @tclass_kind_options=@c_htb={{0x8, 0x1, 'htb\x00'}, {0x40, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x7858ef2d, 0x3, 0x8, 0x4, 0x4}, {0x0, 0x2, 0x9, 0x3, 0x101, 0x80}, 0x9, 0x7180000000000, 0x8, 0x5, 0x100000001}}, @TCA_HTB_CEIL64={0xc, 0x7, 0x1}]}}, @tclass_kind_options=@c_cbq={{0x8, 0x1, 'cbq\x00'}, {0x94, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0xfce, 0x3, 0x3, 0x1, 0x80000000, 0x400000000}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x9, 0x2, 0x3f, 0x1f, 0x1a3b, 0x4}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x38, 0x3, 0xf, 0x2, 0x6, 0x0, 0x2, 0xfffffffffffffff9}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x0, 0x1, 0x1c, 0x3, 0x1, 0x7ff}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x1a, 0x5}, 0x6b6, 0x9}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x80, 0x8, 0x6, 0x9, 0x10000, 0x3}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xffff, 0x7, 0x7, 0x1, 0x9, 0x3}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x8, 0x7, 0xffff, 0xdf, 0x3dda1a000000000, 0x8001}}]}}, @TCA_RATE={0x8, 0x5, {0x6, 0x400}}, @TCA_RATE={0x8, 0x5, {0xa, 0x1ff}}, @TCA_RATE={0x8, 0x5, {0x0, 0x20}}]}, 0x150}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) [ 1088.525282] binder: undelivered TRANSACTION_COMPLETE 16:50:36 executing program 0: r0 = socket$inet(0x2, 0x6, 0x6) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80a00) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x280800}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0c192cbd7000fddbdf2506000000080005000300000008000504400000000800060000000000080005000100000024000200080008000008000008000900090000000800050001000000080007000101000008000600000000000800060002000000"], 0x3}}, 0x800) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000240)="289c05b6824cfce6ba8e4412cf04f533", 0x10) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f00000001c0), &(0x7f0000000200)=0x40) [ 1088.556290] binder: undelivered TRANSACTION_ERROR: 29189 [ 1088.573097] binder: 17119:17123 transaction failed 29189/-22, size 24-8 line 3012 16:50:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:50:36 executing program 4: r0 = open(&(0x7f0000000080)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000000300)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd(0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='pagemap\x00') sendfile(r1, r2, 0x0, 0xffffffff) r3 = open(&(0x7f0000000040)='./file1\x00', 0x802, 0x2) pipe(&(0x7f0000000240)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f00000000c0)=""/134) [ 1088.635493] binder: undelivered TRANSACTION_ERROR: 29189 16:50:36 executing program 3: sched_setaffinity(0x0, 0x228, &(0x7f0000000100)=0x800000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x9) r1 = socket$inet(0x2, 0x3, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r1, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={r2, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) r3 = socket$inet6(0xa, 0x8, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0xa, @in6, 0x0, 0x1, 0x0, 0x5}}, 0xe8) connect$inet6(r3, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) [ 1088.693136] binder_alloc: 17139: binder_alloc_buf, no vma [ 1088.706283] binder: 17139:17143 transaction failed 29189/-3, size 0-0 line 3135 [ 1088.746252] binder: undelivered TRANSACTION_ERROR: 29189 [ 1088.752563] binder: send failed reply for transaction 1826 to 17139:17143 [ 1088.782478] binder: undelivered TRANSACTION_COMPLETE [ 1088.793568] binder: undelivered TRANSACTION_ERROR: 29189 16:50:37 executing program 2: sched_setaffinity(0x0, 0x228, &(0x7f0000000100)=0x800000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x9) r1 = socket$inet(0x2, 0x3, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r1, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={r2, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) r3 = socket$inet6(0xa, 0x8, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0xa, @in6, 0x0, 0x1, 0x0, 0x5}}, 0xe8) connect$inet6(r3, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) 16:50:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:50:37 executing program 0: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000040)=""/224) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) 16:50:37 executing program 3: sched_setaffinity(0x0, 0x228, &(0x7f0000000100)=0x800000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x9) r1 = socket$inet(0x2, 0x3, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r1, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={r2, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) r3 = socket$inet6(0xa, 0x8, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0xa, @in6, 0x0, 0x1, 0x0, 0x5}}, 0xe8) 16:50:37 executing program 0: r0 = socket$inet(0x2, 0x4000004000000001, 0x100000000) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f00000000c0)={0x80000000, 0x4, 0x6bccd70a, 0x4, 0x1}) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/73, &(0x7f0000000080)=0x49) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) [ 1089.312309] binder: 17167:17174 got transaction to invalid handle [ 1089.318869] binder: 17167:17174 transaction failed 29201/-22, size 0-0 line 3012 16:50:37 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e21, @local}, 0x10) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$KDSKBLED(r1, 0x4b65, 0x8) 16:50:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000000c0)=0x6e, 0x80000) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000500), &(0x7f0000000580)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_void(r2, 0x1, 0x24, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000140)={@loopback, 0x0}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=@ipv4_getaddr={0x60, 0x16, 0x800, 0x70bd28, 0x25dfdbfd, {0x2, 0x1f, 0xc0, 0xc8, r5}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0xc9}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x10}}, @IFA_FLAGS={0x8, 0x8, 0x2}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0x4861, 0x8, 0x8000, 0x8}}, @IFA_LABEL={0x14, 0x3, 'vlan0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10) [ 1089.362920] binder: send failed reply for transaction 1831 to 17167:17174 [ 1089.379799] binder: undelivered TRANSACTION_COMPLETE [ 1089.385667] binder: undelivered TRANSACTION_ERROR: 29201 [ 1089.409563] binder: undelivered TRANSACTION_ERROR: 29189 [ 1089.425675] binder_alloc: 17189: binder_alloc_buf, no vma [ 1089.434897] binder: 17189:17191 transaction failed 29189/-3, size 0-0 line 3135 [ 1089.452660] binder: undelivered TRANSACTION_ERROR: 29189 16:50:37 executing program 5: sched_setaffinity(0x0, 0x228, &(0x7f0000000100)=0x800000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x9) r1 = socket$inet(0x2, 0x3, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r1, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={r2, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) r3 = socket$inet6(0xa, 0x8, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0xa, @in6, 0x0, 0x1, 0x0, 0x5}}, 0xe8) 16:50:37 executing program 3: sched_setaffinity(0x0, 0x228, &(0x7f0000000100)=0x800000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x9) r1 = socket$inet(0x2, 0x3, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r1, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={r2, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) r3 = socket$inet6(0xa, 0x8, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) 16:50:37 executing program 0: r0 = socket$inet(0x2, 0x6, 0x8000000000000101) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) [ 1089.458527] binder: send failed reply for transaction 1836 to 17189:17191 [ 1089.474430] binder: undelivered TRANSACTION_COMPLETE [ 1089.479583] binder: undelivered TRANSACTION_ERROR: 29189 16:50:37 executing program 4: socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0xfffffffffffffffc, @ipv4={[], [], @multicast1}}, 0x1c) socket$inet(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup2(r1, r0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000000), 0x8) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x8000000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_opts(r3, 0x29, 0x39, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f00000000c0)={0x6, 0x800, 0x2b, 0x2, 0xe37}, 0x14) 16:50:37 executing program 2: sched_setaffinity(0x0, 0x228, &(0x7f0000000100)=0x800000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x9) r1 = socket$inet(0x2, 0x3, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r1, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={r2, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) r3 = socket$inet6(0xa, 0x8, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0xa, @in6, 0x0, 0x1, 0x0, 0x5}}, 0xe8) connect$inet6(r3, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) 16:50:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00634040010000000000000000000000000000000000000000f4c3a8387bc04a4f0000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) fchdir(r2) 16:50:37 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/user\x00', 0x2, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)=0x1) fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, 0x0}) ptrace$peek(0x1, r1, &(0x7f00000001c0)) fgetxattr(r0, &(0x7f0000000240)=@random={'os2.', '\\wlan0\x00'}, &(0x7f0000000280)=""/126, 0x7e) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) recvfrom$inet(r0, &(0x7f0000000340)=""/241, 0xf1, 0x100, &(0x7f0000000440)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000300)) accept4$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000100)=0x10, 0x800) sendto$inet(r0, &(0x7f0000000140)="168409e18c4db8834bd4d079bc511c2f", 0x10, 0x80, &(0x7f0000000040)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000480)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) 16:50:37 executing program 3: sched_setaffinity(0x0, 0x228, &(0x7f0000000100)=0x800000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x9) r1 = socket$inet(0x2, 0x3, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r1, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={r2, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) socket$inet6(0xa, 0x8, 0x0) 16:50:37 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000880)=0xe8) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000140)={@empty, @local, r1}, 0xc) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000040)={'broute\x00', 0x0, 0x0, 0x0, [], 0x7, &(0x7f0000000000)=[{}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) 16:50:37 executing program 4: sched_setaffinity(0x0, 0x228, &(0x7f0000000100)=0x800000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x9) r1 = socket$inet(0x2, 0x3, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r1, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={r2, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) r3 = socket$inet6(0xa, 0x8, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) 16:50:37 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xf) ptrace$cont(0x18, r1, 0x6, 0x6) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x83}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r1, 0x0, 0x0) [ 1089.589226] binder_alloc: 17209: binder_alloc_buf, no vma [ 1089.609972] binder: 17209:17219 transaction failed 29189/-3, size 0-0 line 3135 16:50:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xfffffffffffffffc, 0x100050, r1, 0x10) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:50:37 executing program 2: sched_setaffinity(0x0, 0x228, &(0x7f0000000100)=0x800000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x9) r1 = socket$inet(0x2, 0x3, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r1, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={r2, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) r3 = socket$inet6(0xa, 0x8, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0xa, @in6, 0x0, 0x1, 0x0, 0x5}}, 0xe8) connect$inet6(r3, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) 16:50:37 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$getflags(r0, 0x1) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) [ 1089.692933] binder: undelivered TRANSACTION_ERROR: 29189 [ 1089.699195] binder: send failed reply for transaction 1841 to 17209:17219 16:50:37 executing program 3: sched_setaffinity(0x0, 0x228, &(0x7f0000000100)=0x800000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x9) r1 = socket$inet(0x2, 0x3, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r1, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={r2, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) 16:50:37 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) [ 1089.735906] binder_alloc: 17245: binder_alloc_buf, no vma [ 1089.744654] binder: 17245:17248 transaction failed 29189/-3, size 24-8 line 3135 [ 1089.759557] binder: 17245:17248 got transaction to invalid handle [ 1089.767266] binder: undelivered TRANSACTION_COMPLETE 16:50:37 executing program 3: sched_setaffinity(0x0, 0x228, &(0x7f0000000100)=0x800000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x9) r1 = socket$inet(0x2, 0x3, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r1, &(0x7f0000000000)=@xdp, &(0x7f0000003740)=0x202) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) [ 1089.794622] binder: undelivered TRANSACTION_ERROR: 29189 [ 1089.796344] binder: 17245:17248 transaction failed 29201/-22, size 0-0 line 3012 16:50:37 executing program 4: sched_setaffinity(0x0, 0x228, &(0x7f0000000100)=0x800000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x9) r1 = socket$inet(0x2, 0x3, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r1, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={r2, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) socket$inet6(0xa, 0x8, 0x0) 16:50:37 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x1}, 0x6e) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x13) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) 16:50:37 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40000, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000040)={0xffffffffffffffff, 0x3, 0x87, 0x3, 0x751}) 16:50:37 executing program 3: sched_setaffinity(0x0, 0x228, &(0x7f0000000100)=0x800000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x9) r1 = socket$inet(0x2, 0x3, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r1, &(0x7f0000000000)=@xdp, &(0x7f0000003740)=0x202) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) 16:50:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) lsetxattr$security_ima(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='security.ima\x00', &(0x7f0000000140)=@v1={0x2, "dac2e1ef5d66f621ddc1f690bb8fe880"}, 0x24f44e31722cbb93, 0x2) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x7c, 0x0, &(0x7f0000000440)=[@release={0x40046306, 0x4}, @clear_death={0x400c630f, 0x0, 0x2}, @acquire={0x40046305, 0x3}, @enter_looper, @dead_binder_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000280)=[@fd={0x66642a85, 0x0, r2, 0x0, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f00000000c0), 0x1, 0x1, 0x16}], &(0x7f00000002c0)=[0x30, 0x30]}, 0x8}}], 0x5e, 0x0, &(0x7f00000004c0)="410313b2fd7367f970266eb5d80a0d6584567d11535c0f100147c20a1848dee7868df6bcf1baa2caa01998683777ff9776e942895b0d98cec4b716f7e43cb4ac5d046690414e6eb17c975b76fdb597a809715aefe45d65cb026ac8a719b8"}) [ 1089.892394] binder: undelivered TRANSACTION_ERROR: 29201 [ 1089.899109] binder: undelivered TRANSACTION_ERROR: 29189 [ 1089.933223] binder: 17274:17277 unknown command 0 [ 1089.956766] binder: 17274:17277 ioctl c0306201 20000040 returned -22 [ 1089.972668] binder: 17274:17277 Release 1 refcount change on invalid ref 4 ret -22 [ 1089.980682] binder: 17274:17277 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 1089.990381] binder: 17274:17277 Acquire 1 refcount change on invalid ref 3 ret -22 [ 1089.998724] binder: 17274:17277 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1090.007434] binder: 17274:17277 got reply transaction with bad transaction stack, transaction 1849 has target 17274:0 [ 1090.020226] binder: 17274:17277 transaction failed 29201/-71, size 64-16 line 2935 [ 1090.043994] binder: send failed reply for transaction 1849 to 17274:17277 [ 1090.051599] binder: undelivered TRANSACTION_COMPLETE [ 1090.065194] binder: undelivered TRANSACTION_ERROR: 29201 [ 1090.077615] binder: undelivered TRANSACTION_ERROR: 29189 16:50:40 executing program 3: sched_setaffinity(0x0, 0x228, &(0x7f0000000100)=0x800000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x9) r1 = socket$inet(0x2, 0x3, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r1, &(0x7f0000000000)=@xdp, &(0x7f0000003740)=0x202) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) 16:50:40 executing program 5: 16:50:40 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @local, @dev}, &(0x7f0000000040)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000180)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0xcde, 0x4e20, 0x0, 0x2, 0x20, 0x20, 0x7e, r1, r2}, {0x0, 0x7, 0x2, 0x6, 0x4, 0x6, 0x266, 0x3}, {0xfff, 0x100000000, 0x41, 0xf32}, 0x7, 0x6e6bb6, 0x0, 0x0, 0x1, 0x3}, {{@in=@local, 0x4d3, 0xff}, 0xa, @in=@broadcast, 0x3504, 0x3, 0x3, 0x6, 0x9, 0x100000001}}, 0xe8) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000300)=""/4096) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) 16:50:40 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b3fdc)) syz_open_pts(r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f00000006c0)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) write(r3, &(0x7f0000000340), 0x10000014c) lsetxattr$trusted_overlay_origin(&(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) ioctl(r0, 0x1, &(0x7f0000000740)="9c576e44df933760bb5a297fd33ca5910678e00922c257ec44ea74fca5b81b15c7e8332332b87f0feb0e4eec50dbb9d42460932407787db2635d50b828800e20520b75e3e780e5d2887ede8cdb0def8ce13f0bf61849323d27f7d1a37f2f549995a99a859b38900b198a5e212865644f580f04399f38882a2601645d3378ea283276000ca69b4eb7657edb3a466ce385c6bdb81dd4ccec0eb7616170353032ac6f753c1c293c0ceaaa74d953720aaecac147956edff99eeb1df7ec03f841aed2ca9a2db53c157f50052460e06a7d53602265538aee3c3e5f924f5e0731ba6066") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) io_setup(0x100000001, &(0x7f0000000080)=0x0) io_cancel(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x2}, &(0x7f00000002c0)) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000300)=@xdp, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/71, 0x47}, {&(0x7f00000001c0)=""/26, 0x1a}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/66, 0x42}], 0x4, &(0x7f00000005c0)=""/204, 0xcc}, 0x10000) 16:50:40 executing program 4: clone(0x1ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x800, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 16:50:40 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/keychord\x00', 0x81, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=@delqdisc={0xa0, 0x25, 0x100, 0x70bd28, 0x25dfdbfd, {0x0, r3, {0x7, 0x8}, {0x1f, 0xfff2}, {0xffff, 0xa}}, [@TCA_STAB={0x2c, 0x8, [@TCA_STAB_DATA={0xc, 0x2, [0x8, 0xb244, 0x1]}, @TCA_STAB_BASE={0x1c, 0x1, {0x5, 0x3f, 0x100000000, 0xffff, 0x2, 0x7ff, 0x9, 0x4}}]}, @qdisc_kind_options=@q_pfifo={{0xc, 0x1, 'pfifo\x00'}, {0x8, 0x2, 0x8}}, @qdisc_kind_options=@q_prio={{0xc, 0x1, 'prio\x00'}, {0x18, 0x2, {0x0, "86bdf53ee59170aa30349e0f136db6e2"}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8001}, @TCA_RATE={0x8, 0x5, {0x9, 0x8}}, @TCA_RATE={0x8, 0x5, {0x2, 0x3}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000280)=0x0) ptrace$cont(0x1f, r6, 0x2, 0x4) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x141000, 0x0) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000100)=""/140) 16:50:40 executing program 4: [ 1092.695249] binder: 17286:17289 unknown command -680907660 [ 1092.703896] binder: 17286:17289 ioctl c0306201 20a20000 returned -22 [ 1092.715031] binder: 17290:17296 ioctl 8933 20000580 returned -22 [ 1092.733903] binder_alloc: 17290: binder_alloc_buf, no vma 16:50:40 executing program 3: sched_setaffinity(0x0, 0x228, &(0x7f0000000100)=0x800000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x9) r1 = socket$inet(0x2, 0x3, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={0x0, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) 16:50:40 executing program 5: 16:50:40 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000140)=0x4, 0x4) sendto$inet(r0, &(0x7f0000000000)="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", 0xfa, 0x800, &(0x7f0000000100)={0x2, 0x4e24}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) 16:50:40 executing program 4: [ 1092.753131] binder: 17290:17296 transaction failed 29189/-3, size 0-0 line 3135 16:50:40 executing program 5: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xffffffffffffffed, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, 0x1c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in=@broadcast, @in6=@ipv4={[], [], @multicast2}}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0x96) 16:50:40 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000002c0)={0x0, 0x0, 0x0}) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000000)=""/211) ioctl$int_out(r0, 0x5460, &(0x7f0000000340)) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000400)=ANY=[@ANYBLOB]) prctl$PR_CAPBSET_DROP(0x18, 0x11) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 16:50:40 executing program 3: sched_setaffinity(0x0, 0x228, &(0x7f0000000100)=0x800000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x9) r1 = socket$inet(0x2, 0x3, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={0x0, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) [ 1092.849002] binder: undelivered TRANSACTION_ERROR: 29189 [ 1092.861430] binder: send failed reply for transaction 1854 to 17290:17296 [ 1092.876162] binder: undelivered TRANSACTION_COMPLETE [ 1092.900091] binder: undelivered TRANSACTION_ERROR: 29189 16:50:41 executing program 2: getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000005d00), 0x0) mlockall(0x2) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) mlockall(0x3) 16:50:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) r2 = dup2(r0, r0) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:50:41 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x801, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000200)={0x1, 'teql0\x00', 0x2}, 0x18) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ion\x00', 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x407, r1) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000100)=0x8) r4 = socket$inet(0x2, 0x80000, 0x9) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000300)={0x800, {0x2, 0x100000000, 0x7ab5f3e1, 0x1, 0x400}}) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000280)=""/114) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40000, 0x0) renameat(r5, &(0x7f00000000c0)='./file0\x00', r4, &(0x7f0000000080)='./file0\x00') ioctl$TIOCSBRK(r5, 0x5427) 16:50:41 executing program 5: sched_setaffinity(0x0, 0x228, &(0x7f0000000100)=0x800000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x9) r1 = socket$inet(0x2, 0x3, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={0x0, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) 16:50:41 executing program 3: sched_setaffinity(0x0, 0x228, &(0x7f0000000100)=0x800000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x9) r1 = socket$inet(0x2, 0x3, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={0x0, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) 16:50:41 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0x0, 0xffffffffffffffff, 0x0) accept(r0, &(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000100)=0x80) r3 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r3, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 16:50:41 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x101080, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000180)={0x8, 0x9, 0x3, 0xb5d, 0x10, 0x8}) openat$keychord(0xffffffffffffff9c, &(0x7f0000000140)='/dev/keychord\x00', 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x0, 0xffffffffffffffff, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000000), 0x0}, 0x20) r2 = fcntl$getown(r1, 0x9) ptrace$setopts(0x4206, r2, 0x9, 0x100004) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r1, &(0x7f0000000000), 0x0, 0x2}, 0x20) r3 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0) write$binfmt_elf64(r3, &(0x7f0000000800)=ANY=[], 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f0000000280)=0xc) r6 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0xfffffffffffffffd, 0x8, 0x3, 0xa3, 0x0, 0x15, 0x10000, 0x4, 0xbf, 0xb796, 0x6, 0x1f, 0x5, 0x3, 0x110000000, 0x401, 0x64, 0x0, 0x3296, 0x1, 0x1f, 0xbf, 0x9, 0x4, 0x2, 0x3, 0x5, 0x2, 0x7, 0x8, 0x8, 0xd4f0, 0x1, 0xda3, 0x80000000, 0x405, 0x0, 0x1, 0x2, @perf_config_ext={0x4, 0x13}, 0x1000, 0x7, 0x2b5d, 0x0, 0xa, 0x10000, 0x3}, r5, 0xc, r4, 0x9) sched_setattr(r5, &(0x7f0000000080)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mlockall(0x41000002) fcntl$getownex(r6, 0x10, &(0x7f0000000000)={0x0, 0x0}) creat(&(0x7f00000001c0)='./file0\x00', 0x82) ioctl$void(r1, 0x5451) prlimit64(r7, 0xf, 0x0, &(0x7f0000000240)) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000bc0)=ANY=[], 0x0) fallocate(r8, 0x0, 0x7fff, 0x4003ff) getresuid(&(0x7f0000000640)=0x0, &(0x7f0000000680), &(0x7f0000000700)) r10 = request_key(&(0x7f0000000a00)='syzkaller\x00', &(0x7f0000000a40)={'syz', 0x0}, &(0x7f0000000a80)='#systemcgroup\\%\\user\'\\nodevmd5sum\x00', 0xfffffffffffffffb) keyctl$get_persistent(0x16, r9, r10) write$cgroup_type(r8, &(0x7f0000000240)='threaded\x00', 0xf96d) fallocate(r8, 0x3, 0x5e89, 0xfff9) write$P9_RREADLINK(r8, &(0x7f0000000ac0)=ANY=[@ANYBLOB="10000000176c0007002e2f66696c65317cdeee70d6924976b4094a54908407f096a88c87375700a736114db5b7e6b03f88040000022bdf0ce686d1f686a3"], 0x3e) unshare(0x40000000) ioctl$sock_inet_SIOCDARP(r8, 0x8953, &(0x7f00000003c0)={{0x2, 0x1000004e20, @rand_addr=0x100000000}, {0x307}, 0x4, {0x2, 0x4e24, @remote}, 'sy\t\x00\x00\x00ler1\x00'}) 16:50:41 executing program 3: sched_setaffinity(0x0, 0x228, &(0x7f0000000100)=0x800000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x9) r1 = socket$inet(0x2, 0x3, 0x4) getsockname(r1, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={r2, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) [ 1093.646833] binder_alloc: 17330: binder_alloc_buf, no vma [ 1093.680774] binder: 17330:17336 transaction failed 29189/-3, size 24-8 line 3135 [ 1093.692253] binder: 17330:17336 ioctl 5601 200000c0 returned -22 [ 1093.699522] binder: 17330:17336 got transaction to invalid handle [ 1093.708633] binder: 17330:17336 transaction failed 29201/-22, size 0-0 line 3012 16:50:41 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0xfbfffffffffffffe) write$P9_RXATTRCREATE(r0, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0xffffffffffffffff}, 0x10) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000240)=ANY=[@ANYBLOB="01005a0011306ebcd70517d97acb1de6233230e1e0dd9255dc64e7fd5baad6a9fc43163ce5f1cfaee7b914d0f8dc1f1a65730744f298a6cc7f5d000000000cf14aac6cb60473b47b37eb4ecf6eaa7e731745d90000000000000000000000"]) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) fstatfs(r0, &(0x7f00000003c0)=""/231) 16:50:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x2) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0063404001000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000e50b3ff6057faa5c62157bf1a1b7f8ec23e0f3ccc45525e37f59782ab89920188ddb7c58"], 0x0, 0x0, 0x0}) 16:50:41 executing program 3: sched_setaffinity(0x0, 0x228, &(0x7f0000000100)=0x800000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x9) r1 = socket$inet(0x2, 0x3, 0x4) getsockname(r1, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={r2, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) [ 1093.744907] binder: undelivered TRANSACTION_ERROR: 29201 [ 1093.752049] binder: undelivered TRANSACTION_ERROR: 29189 16:50:41 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) ioctl$int_out(r0, 0x5460, &(0x7f00000000c0)) r1 = getuid() ioprio_get$uid(0x3, r1) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl(0x7, &(0x7f0000000100)='./file0\x00', r2, &(0x7f0000000140)="486044c2f661eca5c65fba1f2774a5f97e7b2a3ab86c7627e98a436aaed56d50c3d2d9fe41989249bd804cc2278f5db391d144cac40f7daf43fa334a368486c403b07954302d92147ffbffe885c50dfd928abd21a195747017a3f140578ac6208c0708c9a61f135dbd139e3dd5cd2a2981248a266b78c81d3f5cf685168e54274c5adfd3a8c48714df792c3bde470dc06db3926821ba46e5d86a30997760a69643b34d2de902e18bae08a6a11310fd493cfd03a28613e1a91feb7b7803c0e45051a24bd033c77b93a1c247947e") restart_syscall() [ 1093.801351] binder_alloc: 17357: binder_alloc_buf, no vma [ 1093.821284] binder: 17357:17360 transaction failed 29189/-3, size 0-0 line 3135 [ 1093.875861] binder: undelivered TRANSACTION_ERROR: 29189 [ 1093.881811] binder: send failed reply for transaction 1862 to 17357:17360 [ 1093.904006] binder: undelivered TRANSACTION_COMPLETE [ 1093.915878] binder: undelivered TRANSACTION_ERROR: 29189 16:50:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000000, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4001fc) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x10000, 0x14565142e8fd4d20) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x18edd73310f89fe8}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, r4, 0x801, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 16:50:42 executing program 3: sched_setaffinity(0x0, 0x228, &(0x7f0000000100)=0x800000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x9) r1 = socket$inet(0x2, 0x3, 0x4) getsockname(r1, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={r2, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) 16:50:42 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) connect$netlink(r0, &(0x7f0000000140)=@unspec, 0xc) 16:50:42 executing program 2: socket$inet6(0xa, 0x1, 0x4) epoll_create1(0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/mls\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000300)='./file1/file0\x00', r0, &(0x7f0000000380)='./file1/file0\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000280)=ANY=[@ANYBLOB="2f6465762f73cf2b7210d7cb58d06f9188f4"], &(0x7f00000008c0)='./file1\x00', &(0x7f0000000180)='mslos\x00', 0x800000000, &(0x7f00000004c0)) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000900)={{0x2, 0x4e20, @local}, {0x306}, 0xc, {0x2, 0x4e24, @local}, 'nr0\x00'}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000001440)={'filter\x00', 0x4}, 0x68) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r2 = gettid() syz_open_procfs$namespace(r2, &(0x7f0000000340)='ns/user\x00') setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100)=0x40, 0x921b527a62bfdc30) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000002c0)=""/20, 0x14}, 0x100) write$binfmt_elf64(r1, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x3dd) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], 0xc25) 16:50:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000005c0)='net/mcfilter\x00') ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000000)='bcsh0\x00') ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) ptrace$getregset(0x4204, r2, 0x1, &(0x7f0000000140)={&(0x7f0000000080)=""/171, 0xab}) ioctl$TIOCCONS(r1, 0x541d) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000600)={'filter\x00', 0x45, "12da835c9b4fdbc1c66e23af8436d9004918051a3b35a205a89f43e4fdab4b8e7fcadf5df4f5137b75bded2e858294778582de5009894789c479ba113829e8eab88153704b"}, &(0x7f00000006c0)=0x69) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) 16:50:42 executing program 4: r0 = dup(0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x1ff) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000000100)=""/20, &(0x7f0000000140)=0x14) syz_genetlink_get_family_id$fou(&(0x7f0000000000)='fou\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps_rollup\x00') ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) getpeername$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0xfffffffffffffd22) socketpair(0x1, 0x1, 0x0, &(0x7f0000002000)={0x0, 0x0}) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000180)=0x7) write$cgroup_int(r0, &(0x7f0000000340), 0x12) close(r2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x894c, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0xb703, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x2, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 16:50:42 executing program 3: sched_setaffinity(0x0, 0x228, &(0x7f0000000100)=0x800000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x9) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(0xffffffffffffffff, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) 16:50:42 executing program 0: getcwd(&(0x7f00000000c0)=""/238, 0xee) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/hci\x00') ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000080)={0x4, 0x100, 0xb5f0, 0x0, 0x80, 0x9}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) memfd_create(&(0x7f0000000040)='net/hci\x00', 0x0) [ 1094.566299] binder_alloc: 17374: binder_alloc_buf, no vma [ 1094.592878] binder: 17374:17377 transaction failed 29189/-3, size 0-0 line 3135 16:50:42 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x80000) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001a80)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000001b000000050000003005000028030000280300003c14c00100002803000028030000980400009804000098040000980400009804000005000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="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"], 0x590) llistxattr(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)=""/4096, 0x1000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f0000000080)={'nat\x00'}, &(0x7f0000000100)=0x54) ftruncate(r2, 0x7) timerfd_create(0x6, 0x80800) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000001880)={'icmp6\x00'}, &(0x7f00000018c0)=0x1e) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x177, 0x4) ioctl$PPPIOCSMRU1(r3, 0x40047452, &(0x7f0000001940)=0x3) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000001980), &(0x7f00000019c0)=0xc) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000140)=0xffffffffffffff91, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000020d000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000f61000), 0x353, 0x2040, 0x0) ioctl$KDGKBDIACR(r4, 0x4b4a, &(0x7f0000001a00)=""/117) rmdir(&(0x7f0000001900)='./file0\x00') 16:50:42 executing program 3: sched_setaffinity(0x0, 0x228, &(0x7f0000000100)=0x800000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x9) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(0xffffffffffffffff, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) [ 1094.675236] binder_alloc: binder_alloc_mmap_handler: 17374 20001000-20004000 already mapped failed -16 [ 1094.700518] binder: BINDER_SET_CONTEXT_MGR already set [ 1094.705823] binder: 17374:17377 ioctl 40046207 0 returned -16 [ 1094.715299] binder_alloc: 17374: binder_alloc_buf, no vma 16:50:42 executing program 0: getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x1, &(0x7f00000000c0)={0x2, 0x80000000000, @rand_addr=0x5}, 0xffffff05) [ 1094.733188] binder: 17374:17388 transaction failed 29189/-3, size 24-8 line 3135 [ 1094.750705] binder: 17374:17377 got transaction to invalid handle [ 1094.757183] binder: 17374:17377 transaction failed 29201/-22, size 0-0 line 3012 [ 1094.774367] binder: undelivered TRANSACTION_ERROR: 29189 [ 1094.780383] binder: undelivered TRANSACTION_ERROR: 29189 16:50:42 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'nr0\x00', r2}) getsockopt$inet_int(r1, 0x0, 0x15, &(0x7f00006ed000), &(0x7f0000000000)=0x2) [ 1094.828602] binder: send failed reply for transaction 1867 to 17374:17377 [ 1094.850228] binder: undelivered TRANSACTION_ERROR: 29201 [ 1094.867386] binder: undelivered TRANSACTION_COMPLETE 16:50:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x9) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet6_udp_int(r3, 0x11, 0xb, &(0x7f0000000280), &(0x7f00000002c0)=0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x6) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:50:42 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='personality\x00') ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f00000005c0)={'bridge_slave_1\x00', 0x682}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x480, 0x0, 0x0, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@arp={@remote, @dev={0xac, 0x14, 0x14, 0xf}, 0xff, 0x0, @mac=@broadcast, {[0xff, 0xff, 0xff, 0x0, 0xff, 0xdd09b415ac161974]}, @mac=@local, {[0xff, 0x0, 0x0, 0xff, 0xff]}, 0x9, 0x100000001, 0x5, 0x8, 0x81, 0x0, 'ip6erspan0\x00', 'hwsim0\x00', {}, {}, 0x0, 0x20}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x2, 0xffffffff}}}, {{@arp={@broadcast, @empty, 0xffffff00, 0xffffffff, @mac=@random="0d9c243917c2", {[0xff, 0x0, 0x0, 0xff]}, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}, 0x5, 0x100000001, 0x10001, 0x0, 0x2, 0x8, '\x00', 'lapb0\x00', {}, {0xff}, 0x0, 0x8}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x20000000000}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="ef10efb24c51", @empty, @dev={0xac, 0x14, 0x14, 0x17}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xf, 0x1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) r2 = dup2(r1, r1) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000540)={0x8057, 0x1}) 16:50:42 executing program 3: sched_setaffinity(0x0, 0x228, &(0x7f0000000100)=0x800000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x9) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(0xffffffffffffffff, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) [ 1094.892506] binder: undelivered TRANSACTION_ERROR: 29189 [ 1094.927127] binder: 17429:17432 ioctl 40046205 9 returned -22 [ 1094.960648] binder_alloc: 17429: binder_alloc_buf, no vma [ 1094.980150] binder: 17429:17432 transaction failed 29189/-3, size 0-0 line 3135 16:50:42 executing program 2: r0 = socket$packet(0x11, 0x80003, 0x300) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x40440, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x13) prctl$PR_GET_CHILD_SUBREAPER(0x25) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000080), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'ip6gretap0\x00', {0x2, 0x4e22, @local}}) 16:50:42 executing program 4: r0 = socket(0x11, 0x800000003, 0x600081) bind(r0, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = dup2(r0, r0) write$tun(r1, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], 0xff0) 16:50:42 executing program 3: sched_setaffinity(0x0, 0x228, &(0x7f0000000100)=0x800000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) 16:50:42 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) recvfrom(r0, &(0x7f0000000000)=""/143, 0x8f, 0x40002000, 0x0, 0x0) 16:50:42 executing program 5: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x71}], 0x1, 0x0) [ 1095.008403] binder_alloc: binder_alloc_mmap_handler: 17429 20001000-20004000 already mapped failed -16 [ 1095.049571] binder: 17429:17432 ioctl 40046205 9 returned -22 16:50:42 executing program 0: r0 = socket$inet(0x2, 0x800000000000009, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40000, 0x0) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000040)={0x5, 0xdf84}) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x39) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)={0x9, 0x8, 0x401, 0x3ff, 0x10, 0x3f, 0x0, 0x5, 0x0, 0x1, 0x3, 0x1ff}) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f00000000c0)) [ 1095.056911] binder: BINDER_SET_CONTEXT_MGR already set [ 1095.073792] binder: 17429:17441 ioctl 40046207 0 returned -16 [ 1095.095212] binder_alloc: 17429: binder_alloc_buf, no vma [ 1095.101985] binder: 17429:17458 got transaction to invalid handle 16:50:43 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xe, 0x4, 0x7, 0x200, 0x0, 0xffffffffffffff9c}, 0x2c) listen(0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) getegid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f00000001c0)) creat(&(0x7f0000001840)='./file0/file0\x00', 0x10) fchmodat(0xffffffffffffffff, &(0x7f0000001880)='./file0\x00', 0x51) sendto$packet(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, &(0x7f00000022c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f0000001780)={0x88, 0x0, 0x0, 0x70bd2d, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x68, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3db}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1613f95c}]}, 0x88}}, 0x0) socket$packet(0x11, 0x3, 0x300) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/load\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000780)=""/4096, 0x1000) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000002300)=""/4096, 0x1000) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000080)) sched_rr_get_interval(0x0, &(0x7f0000000100)) syz_read_part_table(0x0, 0x1, &(0x7f0000000580)=[{&(0x7f0000000500)="d8223e047f5a3e3cca26da2201a5c6c9960350766b2f2091d0fa358a73f34e346ce6737d14e1eab60880c3470648ab3436cb34d10b011eaa04d1838b8200164c2c5c1adc", 0x44, 0x1}]) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x0}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000040), &(0x7f0000000300), 0x1}, 0x20) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000080)) [ 1095.108669] binder: 17429:17432 transaction failed 29189/-3, size 24-8 line 3135 16:50:43 executing program 3: sched_setaffinity(0x0, 0x228, &(0x7f0000000100)=0x800000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) 16:50:43 executing program 4: sched_setaffinity(0x0, 0x228, &(0x7f0000000100)=0x800000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) [ 1095.133022] binder: 17429:17458 transaction failed 29201/-22, size 0-0 line 3012 [ 1095.147360] binder: undelivered TRANSACTION_ERROR: 29189 [ 1095.160377] binder: send failed reply for transaction 1874 to 17429:17432 [ 1095.189267] proc: unrecognized mount option "" or missing value [ 1095.207611] binder: undelivered TRANSACTION_ERROR: 29201 16:50:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000fc5f2000018000000000000000800000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) 16:50:43 executing program 3: sched_setaffinity(0x0, 0x228, &(0x7f0000000100)=0x800000009) r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) 16:50:43 executing program 4: r0 = epoll_create1(0x0) unshare(0x800000000040003) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_buf(r1, 0x0, 0x27, &(0x7f0000000080)=""/72, &(0x7f0000000000)=0x48) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) [ 1095.234361] binder: undelivered TRANSACTION_ERROR: 29189 [ 1095.255718] binder: undelivered TRANSACTION_COMPLETE [ 1095.274604] binder_alloc: 17478: binder_alloc_buf size 536871160 failed, no address space [ 1095.298713] binder: undelivered TRANSACTION_ERROR: 29189 [ 1095.329559] binder: 17478:17486 got transaction to invalid handle [ 1095.336768] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 1095.362786] binder: 17478:17486 transaction failed 29201/-22, size 0-0 line 3012 [ 1095.373071] binder: 17478:17481 transaction failed 29201/-28, size 402653426-134217728 line 3135 [ 1095.423896] binder: undelivered TRANSACTION_ERROR: 29201 [ 1095.430969] binder: undelivered TRANSACTION_ERROR: 29201 [ 1095.448066] proc: unrecognized mount option "" or missing value 16:50:44 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) 16:50:44 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400000, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000040)=""/4096) 16:50:44 executing program 4: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000bc0)={{{@in=@remote, @in=@broadcast}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r1 = getpgid(0xffffffffffffffff) r2 = syz_open_procfs(r1, &(0x7f0000000140)='net/ipv6_route\x00') connect$inet6(r0, &(0x7f0000000800)={0xa, 0x4e21, 0x0, @remote}, 0x1c) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000d80)={0x0, 0x0, 0x2, 0x6}) r3 = request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000003c0)='/selinux/avc/cache_threshold\x00', 0xfffffffffffffffc) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000200}, 0xc, 0x0}, 0x800) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000200)=@buf={0xc, &(0x7f00000001c0)="50795452cdb306d242cc0fe4"}) keyctl$instantiate(0xc, r3, &(0x7f00000000c0)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'user:', 'user\x00', 0x20, 0x9, 0x20, [0x0]}, 0x30, r3) sendmmsg(r0, &(0x7f0000007e00), 0x26e, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) flistxattr(r4, &(0x7f0000000400)=""/63, 0x3f) sendmmsg(r0, &(0x7f000000ac80), 0x400000000000302, 0x4008800) setxattr$security_ima(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='security.ima\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="050109000000000000e4e1254143406fb750efc506f9d949b802281a3e4a689477858bd79f2b520ec6111fb763d9817753807e94582fe17e24de5b8583a24819f64acf81b2181f9c9971342295e3d45f015327640437f0cffca7f190c13fdce69dae9ce8b675f2e89a66750435752e682c4fa1d9824d22104fb3e91cde5951589f9c5b9a2a1092fcda394376444f2f240a2ae1d4c1a2ea298a94dbdc258ed20228bc7113dd422d0b3601c62a9a3cf0c72326dd9033bede84e6539b145d0ba6c6121754cac0e3a48f7e788f80bdbd04da90e66acf0ec51c7588b74c06affe341ddb6d90a0ba7fd1be3cd2527832b5"], 0x1, 0x3) 16:50:44 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x10) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x0, &(0x7f0000000400), &(0x7f00000000c0), &(0x7f0000000180), &(0x7f0000000500)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0xd, &(0x7f00000000c0), &(0x7f0000001ac0)=0x4) 16:50:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000008000000000000000000000000000000005ac29202f32054e853bcee3fca5907000000000000005014d53b6ad762f2e639b1d21b416266e53ac1ef73a5e4061abe6859b3342224ea102752cb", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0063404001000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 16:50:44 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="850000000500000015000000000000d5207c7c5c2860fe0001fc88c4ea"], &(0x7f0000000200)='GPL\x00', 0x5, 0xff7b, &(0x7f00000006c0)=""/195}, 0x48) 16:50:44 executing program 3: r0 = socket$inet(0x2, 0x0, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) 16:50:44 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000001580)={0x2, 0x70, 0x6932, 0x1d86, 0x80000001, 0x81, 0x0, 0x7, 0x85220, 0x4, 0x1f, 0xfff, 0x100, 0x4, 0xf71, 0xf3, 0x7c, 0x5, 0x90, 0x9eeb, 0x8c5, 0x2, 0x90bd, 0x8, 0x9, 0x6, 0x20, 0xfffffffffffffff7, 0x80000000, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x4, 0x7, 0x80000001, 0x1, 0x400, 0x0, 0x2, 0x1, @perf_config_ext={0xffffffff, 0x1}, 0x80, 0x6385, 0x5, 0x5, 0x484, 0x8, 0x64d}, 0x0, 0xb, r0, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x11, &(0x7f0000001540)=0x4f, 0x4) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) r3 = socket$inet6(0xa, 0x2, 0x0) shutdown(r3, 0x0) r4 = creat(&(0x7f00000018c0)='./file0\x00', 0x8) write$P9_RATTACH(r4, &(0x7f0000001900)={0x14, 0x69, 0x1, {0x43, 0x1}}, 0x14) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) recvmmsg(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)=@tipc, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/171, 0xab}, {&(0x7f0000000180)=""/4, 0x4}, {&(0x7f00000001c0)=""/191, 0xbf}], 0x3, &(0x7f0000000540)=""/4096, 0x1000}, 0x10000}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/23, 0x17}], 0x1, &(0x7f0000000340)=""/247, 0xf7}, 0x50}, {{&(0x7f0000000440)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000001780)=""/34, 0x22}, 0xfffffffffffffffb}], 0x3, 0x0, 0x0) getsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000000), &(0x7f0000001880)=0x4) [ 1096.433068] binder_alloc: 17499: binder_alloc_buf size 2374244257903542272 failed, no address space [ 1096.472793] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 16:50:44 executing program 0: r0 = socket$inet(0x2, 0x5, 0x6) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x1000, @mcast1, 0xffffffffffffff4a}, 0x1c) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f00000000c0)={'filter\x00', 0x0, 0x0, 0x0, [], 0x9, &(0x7f0000000080)=[{}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x108) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x40, @loopback}, 0x10) [ 1096.497281] binder: BINDER_SET_CONTEXT_MGR already set [ 1096.522724] binder: 17499:17503 transaction failed 29201/-28, size 0-2374244257903542272 line 3135 [ 1096.528606] binder: 17499:17512 ioctl 40046207 0 returned -16 [ 1096.558217] binder: 17499:17524 got transaction to invalid handle 16:50:44 executing program 3: r0 = socket$inet(0x2, 0x0, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) [ 1096.571049] binder: 17499:17524 transaction failed 29201/-22, size 0-0 line 3012 16:50:44 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000040)={0x7e, @multicast2, 0x4e22, 0x4, 'sh\x00', 0x2, 0xfffffffffffffffa, 0x1d}, 0x2c) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) inotify_init() sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) 16:50:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000bd5b91e40000000000000020000000000000000000000000000000180000000000000008000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:50:44 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1b) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x7, 0x400000, 0xca}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x54, r2, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x40, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x64}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9e1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x12}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x10) ptrace$cont(0x1f, r1, 0x0, 0x0) [ 1096.622095] binder: undelivered TRANSACTION_ERROR: 29201 [ 1096.628165] binder: undelivered TRANSACTION_ERROR: 29201 [ 1096.669195] binder: 17537:17541 got transaction to context manager from process owning it [ 1096.683269] binder: 17537:17541 transaction failed 29201/-22, size 103079215104-34359738368 line 3003 16:50:44 executing program 3: r0 = socket$inet(0x2, 0x0, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) [ 1096.713782] binder: 17537:17541 got transaction to invalid handle [ 1096.727800] binder: 17537:17541 transaction failed 29201/-22, size 0-0 line 3012 [ 1096.758024] binder: undelivered TRANSACTION_ERROR: 29201 [ 1096.764156] binder: undelivered TRANSACTION_ERROR: 29201 16:50:44 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xaf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xdau\xaf\x1f\x02\xac\x06\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x00\x00\x00\x00') perf_event_open(&(0x7f0000940000)={0x2, 0x301, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x8, 0xffffffffffffffff, 0x0) unshare(0x20000000) clone(0x0, &(0x7f0000000040), 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f0000000080)) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x100040000000, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='user.syz\x00') 16:50:44 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x50, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=r1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) 16:50:44 executing program 2: r0 = memfd_create(&(0x7f0000000240)='rom\xf6\xd1\xc3.\xb4i\xe5i\xd0\xb2\x14\x94i\xc9qc\xda\xf9\x13HN\x82\xb4\xa1\xf4\xb4\xb8a\x8a\x9f\xbd\x1f\xd1\xba\xc5\\\x14\xc6A\xe5\b\x00\v\xfb\xf7\x89\xe4\xd97s\xf8\xc8\x96\xb4f\xfa\xbdDAkX<.\xdcGN\xf9\xc8|\x9e\xdf\xb6T\xbb\x89\xc9\xd0\xdc\x1f\xdd\x1c(\xd3\xb9<\xac\xd6\x18\xcfI\a\xfe\xb9\xec\x9bge*,\xeb\xc4\x8c\xe5\x9d\x99\x95 \x84\xa6\xd1\xe8xJ\x12=\xeb\xcb\xed\xb02-\x87Om\xf2<+\xce7|\x9d\x0e\xb8UYZ\v_h\xe1h\'dS\xe4_!\x9a~\xe5', 0x0) write$P9_RWRITE(r0, &(0x7f0000000040)={0xfffffffffffffe7d, 0x77, 0x0, 0xfffffffffffffffe}, 0xb) sendfile(r0, r0, &(0x7f0000001000), 0x7) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x800, 0x0) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000080)) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0xffffffffffffff00, 0x7, 0x6, 0x10001, 0x3}) utimes(0x0, &(0x7f0000000200)) 16:50:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x5, 0x6, 0xadb, 0x6, 0x0, 0x5, 0x10000, 0x1, 0x200, 0x8d9, 0x6, 0x10000, 0x5, 0xfffffffffffffff8, 0x6, 0x5, 0xfffffffffffffff8, 0x81, 0x9d1, 0xbd, 0x7, 0x2, 0xfffffffffffffffa, 0x75e, 0x1ff, 0x7, 0x1, 0x2, 0x97ee, 0x3, 0x3f, 0x400, 0x3, 0x0, 0x10000, 0x14, 0x0, 0x100000000, 0x4, @perf_bp={&(0x7f0000000180), 0x4}, 0x800, 0x3, 0x34, 0x9, 0x80, 0x7, 0x6}, 0x0, 0x2, r1, 0xa) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x63881e43, 0xfff, 0xffff, 0x1c9b, 0x0, 0x2, 0x800, 0x1, 0x2, 0x10000, 0x100, 0x400, 0x5, 0x6, 0x5, 0x3, 0x651, 0x9, 0x7, 0x9, 0x2, 0x4, 0x6, 0x2, 0x3f, 0x7, 0x4, 0x4, 0xffffffff, 0x2, 0x20, 0x5, 0x6, 0xd7, 0x7f, 0xffffffff, 0x0, 0xfffffffffffffffc, 0x0, @perf_config_ext={0x23, 0x5}, 0x800, 0x9, 0x10000, 0x8, 0x7f, 0x5, 0x2}, r3, 0x10, r4, 0x9) 16:50:44 executing program 3: r0 = socket$inet(0x2, 0x3, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) [ 1097.014017] binder_alloc: 17560: binder_alloc_buf, no vma [ 1097.031428] binder: 17560:17562 transaction failed 29189/-3, size 0-0 line 3135 [ 1097.073290] binder: undelivered TRANSACTION_ERROR: 29189 [ 1097.079025] binder: send failed reply for transaction 1890 to 17560:17562 [ 1097.096529] binder: undelivered TRANSACTION_COMPLETE [ 1097.103107] binder: undelivered TRANSACTION_ERROR: 29189 16:50:45 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x9, 0x20000000000001, 0x0, 0x0}, 0x2c) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000540), 0x0, 0xfffffffffffffffe) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000500)={0x5, 0x5}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40480, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xe) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000040)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = epoll_create(0x400002) r5 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000100)={0x20003}) r6 = dup3(r3, r5, 0x0) r7 = dup3(r1, r0, 0x80000) creat(&(0x7f0000000080)='./file0\x00', 0x48) setsockopt$inet6_mtu(r7, 0x29, 0x17, &(0x7f0000000100)=0x1, 0x4) fcntl$getownex(r6, 0x10, &(0x7f0000000200)) munlock(&(0x7f0000007000/0x3000)=nil, 0x3000) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000140)=0x14) 16:50:45 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@dev, @in6=@dev}}}, [@policy_type={0xc}]}, 0xcc}, 0x8}, 0x0) 16:50:45 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001840)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast2}}, &(0x7f00000001c0)=0xe8) lstat(&(0x7f0000001940)='./file0\x00', &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, r2) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000840)=""/4096) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000001a00)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = creat(&(0x7f0000001a40)='./file0\x00', 0x40) ioctl$UI_SET_FFBIT(r4, 0x4004556b, 0x44) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001b40)='./cgroup/syz1\x00', 0x200002, 0x0) writev(r3, &(0x7f0000000740)=[{&(0x7f00000007c0)="b02f2bf807ab365d5fa324f185b69e82d794ea4946d6cbd420a1e1028433b25a2f88a9d9c5c426fd4e012d2adaef632f9e15e243767c2dfcf558c79ee15c683306980ba6fb83d42735ff8ebaa34ba9777b759a98e3ca71b2d9612b2740a6a0e649f29146aec669d4653626de904c014ad02906cb02d6df95f4723a2a91", 0x7d}, {&(0x7f0000000200)="014554aa8fc68da98957b88825ce52b443b9937dd5c51b27046d8af18a712922e4004fd5d6ceedfb17b331d12219b837ee11c2f551770d9b6410453d9f25932a5659b4e0a20b49f632902a8e1b3d26e62bef6cb05d42ebf2a474b790f115e7e485921e1a00cda5ef8ab7700c9750791b814737d8c597a54d87f7bcecbec9c99d3a8a5822f3ec881bd6cc7a08e3a51c111e67576e09f62e1771c385296f2a2450dbedb5bb5f65b57022bf2ca5b75842294df4c6f31dee6cae7f723617b50a72f928efcb5698a2494785c049471460489708934d183aa929cbfd5e951bd19f2e4d73106d5840b073", 0xe7}, {&(0x7f0000000300)="4b6625c4b0bd4c1a64f2f66bbfb21e25b7af3922cbbf5e2374028f7d46b8eb456c61573f67e63a6e7410a140c31a1b7a95ed2e7dd9bd2a1d151bcbf5ef01f73a78d26e10b06f773da915bac1", 0x4c}, {&(0x7f0000000380)="7582645c350318407a6ccaed8b1f373e1f4ae01efc9c24b0e8e58b837e7a5094728e043fe58d73034a575438f0ed97d1e89e8c18f3f4021e2f84cfbbe6e2e71b260ba4f02e1cd874c684222dc536182bf4b8937806f17f", 0x57}, {&(0x7f0000000400)="0b08138f23ca3cc26c92", 0xa}, {&(0x7f0000000440)="ad4e8c1ea07f66e4878e1b6c18690068ceca6b9bed1cd33a0303100fba8557c8b03ad99830896d22cbbce6b688d385b10a4c5219bd4b1d1bdc0c246d7ac8def8c6348c55c47106896f22501bd2702105e15d59b42f0c8594374d4fd099d81fe046f5f329b71c680db34b50919e9d516ad54167ea7ebc7a3b11b2e44dbec0726e7e45146f947667f919aa343839d8f45433c5b6f8e63da8c9622261b8780ef7f961098457db23956a457d5413b05d80d44246466fa0cd2013a97949dbf5eee39e6904937552112704a84cfbb4d2929ad02c97c82c1a5317f2055bda28fd4115d8036e045b", 0xe4}, {&(0x7f0000000540)="f99b4df82dbda8650ae937bbd69a3a619a29713157b80c3148d96b57ad175109c1b4f5cbdeaab94483d419ffea618c720b593f1f0c82004d86fbece46b68930c5df27410a76034a1d910e7139e30d6d7f41987a8a5805271c03c636e45054667f3e85615071397dafc601da2954bf288784cf54bc046f6c1fdf29618b919e47ca85363f30628db016cd40de9101823cbe880ea62059c10967a59a097008dc70400fb5af9f8ae06577b01cc5e4f19be426558aec506d867256865a01df6a95ad21415ae89867c29cc4313c6fb7ac39ad5b38ffc2c8e367c1ddef8b648d6ede6850b", 0xe1}, {&(0x7f0000000640)="a11b5dd41d0cdd1535b6162b427e3d3a2a32ab4fc5ee41b293210a550f2c7d2e4839adb08d16ac83bf1ca2b7396f1eb15463c1c1a5855601a961b972a0ba73514f535430e130bef7da2b91a29e3443f90bc4372d47ce2b6e38db4e2344f3f7cb370076036cb580bba0524b7b2883fd1800d67c0d169f940a406466ee03e8d11b21ac71d12837476e775894693230aac3a7646b7b874bec3c4214b2d70f0768616429465f8fc75d3106d6ec1f80ac6373ae8c80a4b1a6aea6199a854597a466a0ebd922c2a1c7abba554caae3e00c1fc874c18cfe1daf8d2122c0", 0xda}], 0x8) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000001bc0)) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000001b80)=0x4) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000000)="2ed48db50d94aea5f7d628968c16fbe2a3fc95f7bda7cda924b973ea3bfe840a1d65d07161b0bdf8494ac080895b927ebe13524afbc47a6fd85551fa262cad5216536c2fbcf6b0fd8c71f03e35a5570a6a76da5c874e2029e5d0350a487c853f455558a8c5e4ea36215b5ecf328a13ea60098c5b07f839a729a2ba399be15c779085918bd7a2dc6e079e40fdd9b1c9504c1c1e67e88793aaabde4429d48702de1a39a9f2b1a1e515422c9c5333e496cb5e59443cea54009e72de6dc0d78c4728b5193c80b3e620a29aae66f5f28a7ab2c79b3024c731766fb66f1c58e7eff9d5447dee7de632bd6d8493e1", 0xeb}, {&(0x7f0000000100)="ceff8687ece5d13d6c7fb61d3d7480711e7b3f11", 0x14}], 0x2) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000001b00)={0x9, &(0x7f0000001a80)=[{0x5, 0x4a1, 0x81, 0x5}, {0x82c4, 0x6, 0x80000000, 0x3800}, {0x7, 0x4, 0xfffffffffffffeff, 0x9}, {0x1, 0x5, 0x40, 0x80000000}, {0x7, 0x1000, 0x101, 0x8000}, {0x3, 0x4, 0x1000200000, 0x4}, {0x9, 0x7, 0x1, 0x8}, {0x8, 0x4, 0x8001, 0x800}, {0xffffffff, 0x2, 0x7, 0x64b}]}) 16:50:45 executing program 3: r0 = socket$inet(0x2, 0x3, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) 16:50:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000e3100000000000000000180000000000000008000000000000000000000000001a2d8acf7b3ebd7210b0543505883ecdba35c0f589dd80f51349f83ec975cd8fc9ede0f94ab3d361d02e5e0e58ad485ab0ab7ec194dc09eda00000001a09e17de09dc306a84559010deb364598a2f989e95e57bd387fa54a756e230ffb7c700ef686f8b8ef0c948fda63062277e757ff5cef39d1de15ed6e66e065ca63236eb0fcebef7daba08f1879443ca882449dce", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) fallocate(r1, 0x10, 0x7, 0x1ff) fremovexattr(r1, &(0x7f0000000280)=@random={'osx.', '/dev/binder#\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x180) getsockopt$inet6_int(r3, 0x29, 0xfa, &(0x7f0000000300), &(0x7f0000000340)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0063404001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000abebf67ab676e1a1b5bb9841064fbbf46b72e04e4be88debd02313e31b8acea7928f3a4473528474294f7938da67d965b9a539458eaf6ad1a2df7f657e6909d7b6a8700cf0fa7ae0b8b3025b08991b964f9f0b873983fc38db8f892d2c0d0b67073a8b6f12f61d8af0e42bd306d2855617750a1ed8e9766e708899b28b8311b806892ebfe1970a9bb090eaba1ab7509419936f503b9b6317f512c27565ea2d4cda5a4626779f17fd4d2a435419995674733714faa38b18ef91547636192e4d060bca392ec45d11da93a4a5926ec9f1d2224efa679e63d41272c575b64216f1366ac657147ffdd83e666b22732b8c270b56e3375b14d3b04a94ff070000af08ffd622beb80bf4532e3d85d4265d271ae725d7219d1a4ec98b01bbb7a5dfb058a284e0408c8bbbabcd726b694ad0839a6d6b874db07e98668c7dd931ad9c067d5100f97c00e2da69c243c787394458fed89c3a3155a042bc48e1037c9a44fe75f55c21f4e7a0d47c68bf6435a54c47a15b2ca27a8397086100f4a98ab60a80f6730010a1fef270937f3187e271d119d262bc522582758ddbf2bfbef8a456934715e9a8963d2f8624efa59360"], 0x0, 0x0, 0x0}) 16:50:45 executing program 4: r0 = dup(0xffffffffffffff9c) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/snmp\x00') r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000200)) prctl$PR_CAPBSET_READ(0x17, 0x1b) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000300)='./file0\x00', 0x40c2, 0x100) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x2) lsetxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:device_t:s0\x00', 0x1e, 0x1) syncfs(r6) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000040)=0x40a5) lsetxattr$security_selinux(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:default_t:s0\x00', 0x1f, 0x1) write(r5, &(0x7f0000000440)="938fbd9b56870b7b12cdd5cd87fca426956989161e459617a7f0a9545ba11a6dd49da32511ff8749306679edbefb9461f2dc3566119f36edc1566b5cc6f2b8717bc0525f12a12a70c5529700037fef267a2baa09d6ef267209b172da900150dc07838c017c6c7e9addda2fd98aaa4a3bc740cd4572e3322db0192a0cd99ccc4745", 0x81) write$cgroup_type(r4, &(0x7f00000003c0)='threaded\x00', 0x9) fallocate(r4, 0x3, 0x0, 0xfff9) unshare(0x40000000) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) unlink(&(0x7f00000000c0)='./file0\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) r8 = geteuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000740)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in=@multicast1, 0x4e20, 0x0, 0x4e23, 0x0, 0x2, 0xa0, 0x20, 0xe7, r7, r8}, {0x22e8d2f, 0x4, 0x8, 0x8, 0x3ff, 0x9, 0x3, 0x861}, {0x9, 0x2, 0x1, 0x200}, 0x1, 0x0, 0x1, 0x0, 0x2}, {{@in6=@mcast2, 0x4d2, 0x7f}, 0xa, @in=@empty, 0x0, 0x1, 0x3, 0x49, 0x5, 0x7, 0x6}}, 0xe8) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f00000002c0)='./file0\x00', 0x8, 0x2) geteuid() openat(0xffffffffffffffff, 0x0, 0x0, 0x0) write$P9_RREADDIR(r5, &(0x7f0000000400)=ANY=[@ANYRESHEX=r7], 0x12) fstat(r2, 0x0) 16:50:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000140)) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) write$UHID_INPUT(r1, &(0x7f0000001880)={0x8, "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", 0x1000}, 0x1006) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) r3 = dup2(r2, r1) fcntl$setstatus(r1, 0x4, 0x4000) io_setup(0xab, &(0x7f0000000000)=0x0) sync_file_range(r3, 0x0, 0x4, 0x7) sync() io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x2000, 0x600}]) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f00000001c0)=0x6) 16:50:45 executing program 3: r0 = socket$inet(0x2, 0x3, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) [ 1097.351634] binder_alloc: 17589: binder_alloc_buf size 524288 failed, no address space [ 1097.361289] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 1097.380637] binder: 17589:17592 transaction failed 29201/-28, size 524288-0 line 3135 16:50:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair(0x8, 0x2, 0x4, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000440)="b690a1c58d0032d8dfdda0105f78fcb1962bde7f79b94aa3c5cb8336dbbcf3066904dd4774f6277a6a85d3818fc142fd3cc36d53e953549f59f9bef0670fec481acc8864b91feda6b27ea40e79751bd8e4c6f6200c911710eb256526eca3dad54d9a77b5c74afafafcd631ae9ff2ade2934b4ea48f5f818ae2acad7a6b2245d2bba4fb72ffcecc9e4d6a99cf9d36c3a6f6d23e639bacd30086a18fcea583f3c98f64a8029bba3bdf088fa5dd69bce6c083bd78412ae034f276e8480e753fa1d81c9d8e63f2740d0116a2034e8401d04aaaa6845374", 0xd5) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:50:45 executing program 5: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0x10, 0x80000000002, 0x0) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="5500000018007f7000fe01b2a4a280930a60000000a84302910000003900090023000c00030000000d000500fe8000000000c78b80082314e9030b9d566885b16732009b84e7b1df136ef75afb0000000000000000", 0x55}], 0x1}, 0x0) r3 = gettid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) tkill(r3, 0x39) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000000)=0x9) fstat(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r4) [ 1097.398686] binder: 17589:17592 got transaction to invalid handle [ 1097.408275] binder: 17589:17592 transaction failed 29201/-22, size 0-0 line 3012 [ 1097.429679] binder: undelivered TRANSACTION_ERROR: 29201 [ 1097.435732] binder: undelivered TRANSACTION_ERROR: 29201 16:50:45 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) [ 1097.491523] binder_alloc: 17609: binder_alloc_buf, no vma [ 1097.498663] binder: 17609:17611 transaction failed 29189/-3, size 0-0 line 3135 [ 1097.506772] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1097.513406] IPv6: NLM_F_CREATE should be set when creating new route [ 1097.519786] binder: undelivered TRANSACTION_ERROR: 29189 [ 1097.526942] binder: send failed reply for transaction 1898 to 17609:17611 [ 1097.531742] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 16:50:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="852a40cb7673000000a4c7b75b", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00634040010000000000060000000000000000000000e3ff0000000000000000000000000000000000000000000000000000000000002022feb30bbe08e622420000000007000000000000000000c34cb21843790c1120ccd35c980273de6063ee2a0560169d3a6abc6f8ed03413c1ce334c5b08b2bd00ab999ac9ac1805c9d2d4c0d0469e03db728bd6a0005c4ad73d7e24e2f19b42002a47c6212b149cfae8832d4d47305098d94fd4a18aa460092aefdbf47b6dc7b546e52b88291b29580a2edf"], 0x0, 0x0, 0x0}) 16:50:45 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) 16:50:45 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000140)={0xffffffff, {0xff, 0x5, 0x5, 0xab, 0x2, 0x5}}) lseek(r1, 0x0, 0x2) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="5b7875b3"], 0x1) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0xfffffffffffffffe) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$UHID_DESTROY(r2, &(0x7f0000000180), 0x4) fcntl$setstatus(r1, 0x4, 0x0) mlockall(0x1) write$P9_RREMOVE(r3, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) lseek(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) ftruncate(r2, 0x0) fcntl$dupfd(r0, 0x0, r3) lseek(r1, 0x0, 0x7) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) [ 1097.542372] binder: undelivered TRANSACTION_COMPLETE [ 1097.551278] binder: undelivered TRANSACTION_ERROR: 29189 [ 1097.561416] binder: 17627:17628 got transaction with invalid offset (0, min 0 max 24) or object. [ 1097.570704] binder: 17627:17628 transaction failed 29201/-22, size 24-8 line 3197 [ 1097.597783] binder: 17627:17628 got transaction to invalid handle [ 1097.608026] binder: 17627:17628 transaction failed 29201/-22, size 0-0 line 3012 [ 1097.629327] binder: undelivered TRANSACTION_ERROR: 29201 [ 1097.635525] binder: undelivered TRANSACTION_ERROR: 29201 16:50:46 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e24, @local}, 0xfd32) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) 16:50:46 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101400, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000040)=0x1000, 0x4) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f00000000c0)={0x0, 0xfb, 0x85, 0x4, 0x11, "bdf3a9b446fb3e5019a21e61e9b4cce1", "b147343d87e897b71aa3fe720fb3abe4742f42c429cbf26c1e56da3eeb4833ebaaa496113fa9351746bfb87a97b961f626fdebe46d3f01a34d000a9ff223663c6c46f6899760de98dc41a762310ff23efc7fe982908c4b82fc9f502dedef0dd1f31d3a517f6a43fe379e0e24c06eb2dd"}, 0x85, 0x2) sendfile(r0, r0, &(0x7f0000000180), 0xffffffffffffffc1) getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='trusted.overlay.impure\x00', &(0x7f0000000240)=""/161, 0xa1) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x1) fallocate(r0, 0x10, 0x7, 0xfffffffffffffffb) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000440)={r0, &(0x7f0000000300)="78e5fd54e229f73eef9c0b368dcc297acf8c6ace25", &(0x7f0000000340)=""/245}, 0x18) fdatasync(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x80000, 0x0) r2 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/attr/exec\x00', 0x2, 0x0) setxattr(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)=@random={'user.', ']mime_type,/)self$lo)bdevlo\x00'}, &(0x7f0000000580)='/proc/self/net/pfkey\x00', 0x15, 0x0) writev(r2, &(0x7f00000015c0)=[{&(0x7f00000005c0)="ce7fa872141912cff313b16964458393cf9d1e9baf0a28c77123165c48ff77d5bcb910e0832e009947683cd700eca4c94fd7ba462c0b788176367c17abdf1cb440c5a1613dced97c05d28c23b81fb5171a60052738aeba7c1c392d4c8e20f6238acc715679d63760d97047c36423289937ab405719eac7f9d5e3fae1e228ce5c28d6f6152de7ef3923a24ee8d7e4ce507c6653bcb657d2880e251482d384569f31dc53b0f098b3c421b32d44789c52c2c08064403e1d1677df7f249c7c088485a15198f4e8d8c472f508a9d703c42dc1e291f73af17586c14389dfe5979547b4ee41eb3c5066d28a580b4839acca29077e820005be5fa3c41128336c8bd2fabbdee5d71680a0005a7de357960c3b78f064d9a8ad2f1ba6330154a5afc6a99b09ba52d8e8e529c81c702669129a98181af31da3c5ac64c7704a8e9d795fe9845be3f2d52c56dfb75cf6a578404177d289d396a0df4d8601c427a9689e626154cd5dd9197fbef10fb0a31a2412b9ce2299708bd610499c3c73cc1f67d15bc501c1767852a38828dd05f655cc7c716f735058c72724031cf4c02d40dda0684228cc871a74777d2509af86ceea3c8c9e626da2584191c74b0b6f10ad572917f9d759a3b8de3e1e624a60f881e80a337a5143920a7471b2f53aa69fafa9989ea93a09c2cdf80323d03aaa39b19d20509ebc236d1400687465deb788aced7231ebb9c612b410cd2e392f302ee04e380d81a8a5fa9cdccae4bb3fbb46602063c785297c3f9ced5ab85412e77d66ae169680bd3f9460c38dd3e47b9c65ba72f09f44a031b8193b2fe7dc98b7b244d88e1455c1a936c489266780729c9a6c65e24266f3a0087b08b4f85f55f5d7d812cce3e6f4236a7c74c98ae6b881d3b9766d1131a3df52816b5a3f493584dc08f668beff8e519830bf7faf00a9533c726c785c8e23b416f92964f3dc99f992b96395bf1d59422d8d41ad2637a126e9b41a795c82c1ed3913aebb67feabe4e05770bc4d40930e04e410f828e55c1f44f362ca3301d77919891fa158a12e5d48ee98807d6cfab66f168aaf5af65849cf4d3371a5a63eee00c0c5f001282a006bb6f0660f83ae7a4777f44eea45b00faf537cca4191074af69290c4a3a82e35c4ef382327f5470c0d36d7dfcf3f1555715c4b46abde35ac817f9d14f3a56fd4a7adf41fbac84c1eb4b81ffa8e8aa1a9dfe6b163600f10a08f0eda09c668daef7ff103711eba56587ab12938d09e9257497d88d9767fefaf7643645af2520329a73dcb1106294c97fdf64617be06ba801279825552425a72436d5d165e665d9ff8b4b2adef2f17f64bb6d977ebf5a1c0a3fb57c6f614ebb71b460dff9e35e745400ec6d4487e1b32781024f857a47278034829cb814f0109875788992006eb52741070d43aa6522f4140ad23be4c625c9e258e00c2a53981d0e48e07d564a5df17ba89c0100814e04741528c3c0c983aaec2e0085fe6dc523325b513b135a6a890975daf4592d49a546b0343b9dd4fcee56d88d6cd62fe09d9063afaaf0aea4f060e7d9be56802a2c081e81179d25cf7819420260a748f5fd3c4854d33bebbd0892d1fbee509b40a3d6bd8bfc5062321509f54cbf7483695f4680be28ce2860fbdf8931e5934bf830f3ad0383e6eee68e4192d6b56a65b04b138252df457bd6cc4ea0897aa14ec9136cc94c497d102f80c5d97f413e3d02072546bd1d640ea7999b6c73baceb385533900f97e657b6bbfeb77bd705ec5d6eb3e36a63418d284e81fab1e7ca0fa09a3a47d6389aca5927c4e089cd625d5a68296ba5a0ff5746f41602ba4e1e1ce8660f1291b43e778a8f933134e642d1f54df3f6fcb98be7f079921e7f2d49f2f5e137431edef80d54ea9cf36290b11c0ced23740c5ce4e83a98bc7dee0643c7186e1f64b595f00854ba9d3a7f2242235702638672e939a3d3c7ad71fb2fa9b8eed6d7c8127093e4cd6a2306f8604fec53aa9cce2f7b68f33be81089c37cc03e5444cccb47db22a238f76c093f3ffd8fe04103ad4ec4ddad439516d838e833a2c50fbdd033b4b895009d52754e69a6bab47b9f10d65a2c71c082e90fcfb5af6a3c4bd19c8c3b70699734f6218f3dba9b9aae9998ea02e9ea805df9cac9810052835a64fafb296afc0e3ac8044f032a2581e307975d359ef76a52dc778e79fc7a53a61f02e29095a118e9ef6ec8b16209d304ac1c1130e926bccb9d59057c645e046d5e18ee545efe60f4c1bbea007c4bfc7c39bfdd3fe4e45fc9fb0cc89c37034c4d2dd197cba84744d9bd4a7db1ac7c49e953ad6b8af996e76b7427fa8f2a57049e44b512aef5d2de818a8d7a5a16860a21fc8cdcc4a5398d5e0281b53ef32386a816a011e859b7c12056995f90debf482e4a06c6f7e60cf13f05eaa524a7ff31a1c2ecbec8973aa4c42a37ff435cc30299d4421e677273668aca713433725ac5f1e678d09b60509311213edac7fde60031b3dc7e191ef679552c8a40e9717a1faae96ad02871d852657727351f275c5735938a27ef802768d225d19cf91717b6b8b09c5cf406a1ef76af736ca15dcd9ac6fa8ad4b8d1801ab19fb7a9749d9b5f0794bcb4f8879fe2ba8318310b68c1cdb751c97b30e2864ce2ee73a3b5101de536c30ff777093e0b24aa84d92afa926c76b8d3729723ef3b5adb78989ccd94e258fbe561aa0184257b9da80d3d6120a5f894406f9e96e64b70a009bbc34d0b6841651a6bd5d1fa2329516511665bff11aa1c23fcf6d0944f7d9e449fa357f72e6792009bb6ff3ac68f7a850ce848ff01952735d5f86b6b0252362566a8fc4a99d962e7b3b14b3fde8990c3d28320c60562c016f4388f9c39a49ae4ba9a05522bccfcfab8a1bb56ede65e6cc93d7852bb2357372faed5b46e693db00f69c2ed6b1405c63edf8581c5bb48733a43b4cc9256c987f68966c723d9857f291b0b99186b6286c6442269b410d22ff56410374af89f7ebe9ee208fddb844c99315eeb1b31b24cf2e62cf0c015e73e76cedb9200edce2145966e7390e89b38fed6a54e388b799a6308383bd92bc8a32afba5a1988f750d154bd0be4fc2d5a324719c658d03108395cd9cf7da0d2b8b0a380f4a88a101425950b931c31f351902486aa84d3f7bb4eea53d156d0dc81cf64b1fa0e08115fd8b954ce7a63bb67515373f4c9d454b3ae4cbca49ec8ddfb0807c2f066c95663eab58ebd89de10a4501c6a7a66f1b02d1fe4def51bd8f3dfa7599594d8076d3c3f19faead96f3d00490713daaf37e0f16ffc6e87a7898a03df36b2cc4863f57242eb053eb0b902d7ca7ad9e7abe79ce992257daf9d94517604627010bcacb48e09fe53b9cbee19b131866de30e2336270a73076356d7402ba6bc18eb521afbcd93b730d94c3e6e683378ee5914ab1892a164c385eea405b07da5ba33f1432154d53358852ed79e37217c79705a82c4b29069deab379d3da06af8d32691ddecc8cb37854e9d9c980cf401a55f4804cb1f9b9638fc5556ea30e44fcdbd61e0512ed4b1194796f488661b8c3e002f9dc6677a78d19726344e4c3b27657e4443286bbd87ab116ba8c979b74ce889748d2afd2137c520f01ef461cac5cc5b8508b3ffec8cfe13fcf5bd4dc9dcc9087b512766f79f0da743c1078ddecd8703f3f1ab3e50f6b31ebccaebe07e5efb6c59ee8260ad679f031759b53ff00c774a3dc7e8fc2d1b2f4139d742ad2fb4c792cd8c7c601825b3b29821d4d655191b89a543a6b911e7ce4e49fab2412232eaef9ca2676fab9c1f4d3500c5a20c6ec5b77e7133880b37d145b3770c08423e5f5bcab76b9dc92769e3c63c0a8d8d628ffe1fd48ab0ac7e8a5e88efd1f74380d784e9bd02bbf72df6815ffc007f79d1bad56e24e6df68f28d61fadf1a7a2e5e94a136197a076f5834d6ea538ebb05c5e6578916ee97cc2784b693438e709344edce5e855b51c8875728c23e518a1d38318103849150922ccae162e37094865160412f7cc3f2da405e54e4d9777ca28bd6d7109ca0f0105c6d881b0f2858e152b250e858a5598b0dab51e78ac5f3e8414f6235a0427d162c1528e1280e155c6a76ee3bfdf508e0fc103b1a3db6e9f6c559af9a2ac8ab7a03008d21c5321ddd68e3bac1864516b5806f75d7d40e8187e4ff33539214ba4ab0dadff637d8901ce646719f1b6ac5bd88d77eda14fd006ac24f1bf87f35758c1cd125d1dfed3c13fb558e21560b8523a3e1d135c91b88b35c6c399fe57aa673280742cfbe5443f8582adf7076c798443c887c16009f981fd88295e4677e5f3ab7dd63ae788aa0377f3630da5dd98f019ad2bc43c0f3f969667b7fac4b5e16894dd5e4b55a3b458bc2878995ce943cf6cb1920484d2464e4440ed231809b98b3e397f5497d3f8308e08bf674d7041b78e1e383bc594b537046d1069400c452d1261f06fab0f47d30d0cac3ef50ad63a4eb5d1547e599c8eb28b5fbf6efede185ef100d20d77b80c6bfcdd4f0c191c04a87ba544e295310eb647ce7bc7cc4961d68af2c40c3c47ce073514911d602c211e9c3e229bb67d89c94208449880787d0dcca11561cb22cb532551ca874df5d9b3fdf7957b6a632452f850ac1d80f2d6cf1f22bdbe81a4dbb9e4c08dc0745163282653c43855060a2ce0fa950a40ec2d015724be31208e1c66f244d5d4ff5477694aba39fa8f61812c77d5605550e75fd8bf95b9c25b8377a40fb653caef745447fdf25d0c5d9a5274697f5be8cae0d3f743d13ff52b742b388f534ebbb880af0f8ca7248d8383558ef48151d637ec032fda886d73ad9dea86e153f8bff629cea285ee1355c3b11b57261ce4880a13f907fdcb008b87a101a5b69e568bae2c821e433f4d6a8542e1c9d96de6191c1b21cb80fc55376723473adb5653061c64f93b8ca86a706b7bcce3fd586f9544328fe3712a51a37d0c44303825c823e90f883f117e44f0d06a8e21ed1ff47712059609bccf13e89d483ab38ea468106eeb4addc67ca0fda799222aac19f9af0b19fd70d526b642c257d46e93faeb4bb79bc4bb7845c50e01263a4058b2ccc92c5815457ca8d738ce50a0378459eac10ea3229df6d2f24b7ae7b93e67a8b4aa7456a6d4bc2aed43509c20d4226186c7614e249b7e043149eead72b461ed99c6a0ab2b2de5c68ead3786fb49f101262e6e2706b05a9ec47db34333523edc17aea05ebdac01d044b70a1c6d43d0bf78cecbda80aa990150d2d1d5e64292dab660453a6bbb9e98d62163b5d1e98840bb575bd3aa4003bcc1eaed9f28b44a45965f4c4a775b2bfb5379b83f88d88f3c4e796c7f8144b4c5a8aa400cbecf90f794c701016d793fe48cbca8dcd68bfe3c2b0e9317ad11af01b1a91aabfe8281096c345acfc2d4cf8b88dc4575a1573f3d3759db2d3799aff8c16dc04b211677d7936cc435a9915c8ea69030cd7a5f92223a1abe050c133c1123429cf3a3988731766bb3e47241c0b39173ef55a09efef56929fcd87fcc288062434a5ac901cfb76cc7b48f507bbf3d3551d70b1364f936c2991a181576e71fc11e0eb9b3721f52577716ceffc646146120012ae8420891a70722f4a6bb9e5fdda1515c90d7c22ba843af9ed1c37cd9f77c47fd0d7595e1956fe0f449f763c2255aa4b844c56ada16f2435f0384c871306e88d7250a0743048c881aecfc4a3f51162bd396aef573c5598d65877e10b450304b41b1756ee78342f38420b0b98d4e11ff8aa5aff9e5564729b5e22e0d043819cc61e5dad8d50f8899540b4e7c3afbf45811589fafafd37c8c", 0x1000}], 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001600)=0x0) fcntl$lock(r1, 0x27, &(0x7f0000001640)={0x3, 0x3, 0x80, 0x80000001, r3}) ioctl$UI_DEV_CREATE(r0, 0x5501) write$P9_RLCREATE(r0, &(0x7f0000001680)={0x18, 0xf, 0x1, {{0x2, 0x1, 0x7}, 0x5}}, 0x18) fsync(r0) lsetxattr$trusted_overlay_opaque(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='trusted.overlay.opaque\x00', &(0x7f0000001740)='y\x00', 0x2, 0x2) write$selinux_access(r0, &(0x7f0000001780)={'system_u:object_r:systemd_logind_sessions_t:s0', 0x20, 'system_u:system_r:kernel_t:s0'}, 0x62) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001840)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x2c, r4, 0x822, 0x70bd28, 0x25dfdbfd, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @l2={'ib', 0x3a, 'gretap0\x00'}}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4840}, 0x48000) lsetxattr$trusted_overlay_upper(&(0x7f0000001940)='./file0\x00', &(0x7f0000001980)='trusted.overlay.upper\x00', &(0x7f00000019c0)={0x0, 0xfb, 0x43, 0x1, 0x5, "84444f2548c87c5e40be4990aeb1c7d0", "f0b43cb11bd3f5e6eaceef25b9f51630206f355bd310af364ad0b3b333e0e9e7dcfe293ffc0daec56e6daadc4b38"}, 0x43, 0x1) lseek(r0, 0x1, 0x1) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000001a40)=0x5f) syz_open_dev$binder(&(0x7f0000001a80)='/dev/binder#\x00', 0x0, 0x2) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001bc0)={r0, &(0x7f0000001ac0)="4db54c8470bc3641348f27c8580c0aa65667147d04f271de8f51dfbef4fd439aa34102f483124777684275c74a8d792caa2aab4f31a859664555e639f5dd95f1e348d0ed880772006aa410a699e14ef98efcfffaf13d1eaaa625c8c24e3082094d7f107f16941321871e091e521910557284adef0d9afe32f68e27149a9202654daa3048b7c370da9116b1f12f04d08cfa78dece1f13a81925e59428bdc555a4816fea536a0b96de0806a780101e58be571a3c77fddfff1d7425fcbd76bf0dfa769be7df87ca8fdf5ba157b7a4838bbf79bf9df61efdad42f4d513f9819e998041edad5db1f88044d2faf1bfe346fa72c301aec576516433"}, 0x10) lsetxattr$trusted_overlay_opaque(&(0x7f0000001c00)='./file0\x00', &(0x7f0000001c40)='trusted.overlay.opaque\x00', &(0x7f0000001c80)='y\x00', 0x2, 0x1) 16:50:46 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) 16:50:46 executing program 2: madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x40000000000000) socketpair(0xa, 0x0, 0x5, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'rose0\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x13, 0x400, 0x56, 0x5}}) 16:50:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:50:46 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x7e, &(0x7f0000000140)={@empty, @empty, [{[{0x9100, 0x7, 0x1000, 0x3}], {0x8100, 0x7, 0x7, 0x2}}], {@ipv4={0x800, {{0x15, 0x4, 0x4, 0x1, 0x68, 0x64, 0x3, 0x5, 0x8, 0x0, @loopback, @remote, {[@ra={0x94, 0x6, 0x958}, @ssrr={0x89, 0x13, 0x10000, [@rand_addr=0x2, @broadcast, @dev={0xac, 0x14, 0x14, 0x23}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @ra={0x94, 0x6, 0xffffffffffffff6c}, @timestamp={0x44, 0x20, 0xb09, 0x3, 0x3bc, [{[], 0x1}, {[@broadcast], 0x5}, {[@multicast1], 0x7}, {[@loopback], 0x7}]}]}}, @icmp=@timestamp={0xd, 0x0, 0x0, 0x8, 0x9, 0x300000000, 0xc6, 0x40}}}}}, 0x0) connect$inet6(r0, &(0x7f0000000280), 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/validatetrans\x00', 0x1, 0x0) 16:50:46 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, 0x0, 0x0) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) [ 1098.221526] binder_alloc: 17644: binder_alloc_buf, no vma [ 1098.240479] binder: 17644:17646 transaction failed 29189/-3, size 0-0 line 3135 16:50:46 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) ptrace$peek(0x1, r0, &(0x7f0000000080)) rt_sigsuspend(&(0x7f0000000000)={0xcde}, 0x8) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000800)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmmsg(r1, &(0x7f0000007e00), 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000007c0)='ip6tnl0\x00', 0x10) r3 = socket$key(0xf, 0x3, 0x2) getpeername(r3, 0x0, 0x0) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="736563757269747900000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000356ceee31a5e982e00"], 0x48) fsetxattr$security_selinux(r3, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:initctl_t:s0\x00', 0x1f, 0x2) 16:50:46 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) [ 1098.269348] binder_alloc: binder_alloc_mmap_handler: 17644 20001000-20004000 already mapped failed -16 [ 1098.311306] binder: BINDER_SET_CONTEXT_MGR already set 16:50:46 executing program 5: socket$key(0xf, 0x3, 0x2) r0 = syz_open_pts(0xffffffffffffffff, 0x2000) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000000)={0x0, 0x9}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r2, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) [ 1098.316650] binder: 17644:17646 ioctl 40046207 0 returned -16 16:50:46 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xd, 0x17, 0x4, 0x7, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x28, &(0x7f00000000c0)}, 0xffffffffffffffe7) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000540)={r1, &(0x7f00000001c0)="63f26267efaa0e767398ff9995b0822bf77ddcfe9a7128b7c3c960a16735aa378489ac3475044a7cce9dc61ef14b4c869ea47e6abaed0db8ed0492f46b0a089279a51d7b4371a35c447b901105d5405d02b9ad20e8a91bb8cce38e037c875c9bdd96477750aea6d24b4d441f595826b38247cd3857f8bb47819f6bea8b5b2f3862f26159f8edfda0372e044b99c3a3610fc4af2a63c88be2e7314de3be28f441f3d2dcec2b79028bb2c31fb6f9aa1f707f861035981efd2b9f40cbbc52349b7c4b6156d9a8424c69304f17a571d4e2f732d311b1c6e73b5a724fec3432d081e8ebc657"}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='cpusettrustedkeyring!\x00') 16:50:46 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, 0x0, 0x0) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) [ 1098.345390] binder_alloc: 17644: binder_alloc_buf, no vma [ 1098.372929] binder: 17644:17674 transaction failed 29189/-3, size 24-8 line 3135 [ 1098.386041] binder: 17644:17646 got transaction to invalid handle 16:50:46 executing program 0: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x40010, &(0x7f0000000000)={0x2, 0x5, @multicast1}, 0xffffffffffffffc9) 16:50:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000440)={'filter\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f0000000280)=[{}], 0x0, [{}]}, 0x88) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = socket$inet(0x2, 0x805, 0x400) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e6174000000000000000000000000bb9f6f000000000000000000000000000052000000eb53bf79a526b9c2a39e06707c8e7c9ba2f22d99d23b7d9cbd98c9aaa41abc65af5e2ad3150632166a498cd3fb3655c4a2998c4db904f87273b583ed111b1803eb1e6bb4f741300e5534aa56f09891"], &(0x7f0000000140)=0x76) [ 1098.393401] binder: undelivered TRANSACTION_ERROR: 29189 [ 1098.399235] binder: send failed reply for transaction 1906 to 17644:17646 [ 1098.408207] binder: 17644:17646 transaction failed 29201/-22, size 0-0 line 3012 [ 1098.409205] audit: type=1400 audit(1547398246.311:13486): avc: denied { relabelto } for pid=17666 comm="syz-executor4" name="KEY" dev="sockfs" ino=233608 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:initctl_t:s0 tclass=key_socket permissive=1 16:50:46 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, 0x0, 0x0) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) 16:50:46 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) r1 = syz_open_pts(0xffffffffffffff9c, 0x100) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000000)=""/43) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x10002, 0x0) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x1) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0x3, 0x101, 0x7ff, 0x832a, 0x7, 0x8, 0x2, 0x0, 0xffff, 0x2}) accept4(r0, 0x0, &(0x7f0000000180), 0x80000) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000080)={0x1a, 0x3, 0x9, 0xfe4, 0x3ff}) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000000c0)=ANY=[@ANYBLOB="030000000000000002004e20e0000002000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x90) [ 1098.475094] binder: undelivered TRANSACTION_ERROR: 29201 [ 1098.506478] binder: undelivered TRANSACTION_ERROR: 29189 [ 1098.513138] binder_alloc: 17689: binder_alloc_buf, no vma 16:50:46 executing program 5: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x3) syz_emit_ethernet(0x3e, &(0x7f00000a8fa2)={@link_local, @link_local, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @broadcast, {[@rr={0x7, 0x7, 0x4, [@local={0xac, 0x14, 0xffffffffffffffff}]}]}}, @icmp=@timestamp}}}}, 0x0) 16:50:46 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x14, &(0x7f0000000000)=""/181, &(0x7f00000000c0)=0xb5) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb8, r1, 0x104, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xa4, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000001}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4044}, 0x8000) ioctl$sock_ifreq(r0, 0x8942, &(0x7f0000002480)={'ip6tnl0\x00', @ifru_settings={0x0, 0x0, @fr=&(0x7f0000002440)}}) 16:50:46 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(0xffffffffffffffff, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) [ 1098.521062] binder: undelivered TRANSACTION_COMPLETE [ 1098.521423] binder: 17689:17692 transaction failed 29189/-3, size 0-0 line 3135 [ 1098.532187] binder: undelivered TRANSACTION_ERROR: 29189 [ 1098.565237] binder: undelivered TRANSACTION_ERROR: 29189 [ 1098.577922] binder: send failed reply for transaction 1913 to 17689:17692 [ 1098.591961] binder: undelivered TRANSACTION_COMPLETE [ 1098.605077] binder: undelivered TRANSACTION_ERROR: 29189 [ 1098.636914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=17704 comm=syz-executor2 [ 1098.667018] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=17704 comm=syz-executor2 16:50:47 executing program 0: r0 = socket$inet(0x2, 0x80805, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 16:50:47 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x100000000000) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:50:47 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(0xffffffffffffffff, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) 16:50:47 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)='(\x00', 0x2) write$binfmt_misc(r2, &(0x7f00000002c0)=ANY=[@ANYRES32], 0x4) sendfile(r1, r2, &(0x7f0000000000), 0xffff) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$addseals(r2, 0x409, 0x12) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="0e", 0x1}], 0x1) r3 = dup(r1) recvmmsg(r0, &(0x7f0000007280)=[{{&(0x7f0000001b00)=@hci, 0x80, &(0x7f0000003ec0)=[{&(0x7f0000001b80)=""/137, 0x89}, {&(0x7f0000001c40)=""/57, 0x39}, {&(0x7f0000001c80)=""/122, 0x7a}, {&(0x7f0000001d00)=""/7, 0x7}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/120, 0x78}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000003e00)=""/143, 0x8f}], 0x9, &(0x7f0000003f80)=""/132, 0x84}, 0xffffffff}, {{&(0x7f0000004040)=@ipx, 0x80, &(0x7f0000004380)=[{&(0x7f00000040c0)=""/250, 0xfa}, {&(0x7f00000041c0)=""/129, 0x81}, {&(0x7f0000004280)=""/47, 0x2f}, {&(0x7f00000042c0)=""/143, 0x8f}], 0x4, &(0x7f00000043c0)=""/150, 0x96}, 0x100}, {{&(0x7f0000004480)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000004680)=[{&(0x7f0000004500)=""/220, 0xdc}, {&(0x7f0000004600)=""/80, 0x50}], 0x2, &(0x7f00000046c0)=""/57, 0x39}, 0xaeb}, {{&(0x7f0000004700)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f00000058c0)=[{&(0x7f0000004780)=""/160, 0xa0}, {&(0x7f0000004840)=""/86, 0x56}, {&(0x7f00000048c0)=""/4096, 0x1000}], 0x3, &(0x7f0000005900)=""/85, 0x55}}, {{&(0x7f0000005980)=@can={0x1d, 0x0}, 0x80, &(0x7f0000005b00)=[{&(0x7f0000005a00)=""/198, 0xc6}], 0x1, &(0x7f0000005b40)=""/105, 0x69}, 0xfffffffffffffff7}, {{0x0, 0x0, &(0x7f0000006ec0)=[{&(0x7f0000005bc0)=""/155, 0x9b}, {&(0x7f0000005c80)=""/4096, 0x1000}, {&(0x7f0000006c80)=""/98, 0x62}, {&(0x7f0000006d00)=""/183, 0xb7}, {&(0x7f0000006dc0)=""/224, 0xe0}], 0x5}, 0xc67}, {{&(0x7f0000006f40)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000007000)=[{&(0x7f0000006fc0)=""/9, 0x9}], 0x1, &(0x7f0000007040)=""/72, 0x48}, 0x10000}, {{&(0x7f00000070c0)=@xdp, 0x80, &(0x7f0000007240)=[{&(0x7f0000007140)=""/119, 0x77}, {&(0x7f00000071c0)=""/92, 0x5c}], 0x2}, 0x400000000000}], 0x8, 0x0, 0x0) connect$packet(r3, &(0x7f0000007480)={0x11, 0xf5, r4, 0x1, 0x3, 0x6, @local}, 0x14) stat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r2, r5, r6) r7 = dup2(r2, r0) r8 = gettid() readv(r2, &(0x7f0000000700)=[{&(0x7f0000000300)=""/105, 0x69}, {&(0x7f0000000100)=""/58, 0x3a}, {&(0x7f0000000380)=""/7, 0x7}, {&(0x7f00000003c0)=""/131, 0x83}, {&(0x7f0000000480)=""/205, 0xcd}, {&(0x7f0000000580)=""/53, 0x35}, {&(0x7f00000005c0)=""/19, 0x13}, {&(0x7f0000000600)=""/204, 0xcc}], 0x8) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x401, 0x100, 0x1, 0xcdb9, 0x0, 0x9, 0x8000, 0x8, 0x2, 0x39a, 0x1, 0xff, 0x1f, 0x1f, 0x2, 0xb9d, 0x7, 0x10000, 0x4, 0xff, 0x1000, 0x0, 0x1, 0x2, 0x7ff, 0x6, 0x8, 0x3, 0x101, 0x24a, 0x7fffffff, 0x8, 0x56cbc76b, 0x101, 0x6, 0x9, 0x0, 0x600000000000000, 0x5, @perf_config_ext={0x40000000, 0x5d00000000000000}, 0x1000, 0x8c80, 0x6, 0x2, 0x46, 0x7}, r8, 0x10, r2, 0x2) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) recvfrom(r7, &(0x7f00000008c0)=""/4096, 0x1000, 0x10102, &(0x7f00000018c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x0, 0x4, 0x4, 0x0, {0xa, 0x4e24, 0x100, @rand_addr="7dcc511168ca728100b0696ea2c63780", 0x9}}}, 0x80) 16:50:47 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x75) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x0, 0x6f, 0x2, 0xec}, {0x100000001, 0x7b1f7dbf, 0x800000000000, 0xfffffffffffffffe}, {0x3, 0x3, 0x7, 0xffffffffffffff40}, {0x0, 0x5f, 0x7fff, 0x3}, {0x647, 0xffff, 0x7, 0x904a}, {0xff, 0x6, 0x0, 0x5}, {0xffff, 0x5, 0x7, 0x101}, {0x8001, 0x81, 0x1, 0xffff}]}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x8000, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) setxattr$security_ima(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='security.ima\x00', &(0x7f0000000380)=@v1={0x2, "8c469454335da6"}, 0x8, 0x2) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$EVIOCGABS3F(r0, 0x8018457f, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) quotactl(0x80000101, 0x0, 0x0, &(0x7f00000001c0)) r2 = creat(&(0x7f0000000300)='./file1\x00', 0xffffffffffffffff) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1f, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x5) ioctl$int_in(r2, 0x5473, &(0x7f0000000000)=0x1) symlinkat(&(0x7f0000008ff8)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./bus\x00') 16:50:47 executing program 4: pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) dup3(0xffffffffffffffff, r1, 0x80000) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/mls\x00', 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, 0x0) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r5 = memfd_create(&(0x7f0000000e40)='\x00\x00\x00\x00\x00\x00r%\xf7\x83\x80\x80}\xdePS`\x18A\xa0\xd0\xf8+t7HR\xb0\x1f\x12Y\x97b-\xc4\xa5\xe7\x1d,\xe5\xac2\xff\x90\x82O\xa2^Y\a4\x87\xcf6\xadWn2\x92k\x04\x89M\xa7@\xf7\xe9\xc0\xff\xb4,5j\x1f([\xfc\x8f\v\x8cor\xef\x15\x1d\xabL\\*Zu\x1f\x04\xbf\xc6\x9a\xc5\xc3\xb5\x16\x8am\x13\xd8&\xb1\xed\fu\'\xd5\x8fT\xad\xc1/\xca\x1f%\xc8\xfc%\x86\xeaM\x90\xf8M\xab\xcd\xec)\x1f\xb7\x80\xa3\x9a\x11}\x12\xb0\x89;\x18 \x98\xdc\xee\xd3;\"*\x1dA7\t\xae5]M)\x7f\xe4,]N\x9d\x8b\xbd\x9d\fp\x9c\xaeG\xe8\x8f\x8a\xa2*P[>\x99[P\x1f\r7S\xcd5\x10\xe8t6a+@\x13\x05\xf3\x16\x17\x7fmMLp\xfd\x9d&!\xc3pz\xd8\x8d\xa7\x85%\x96\xd8\x9aY\xcbtP^gZ\xc6\xeb\xc0?\xaa>\xe9\x98\x89\x17kW\x115\x03\x1a\xfc\x97\xce\xc4]\"\xfdhy(A\x1b\x83\xf6\x8b\xf7\xbeK!\xfd\xf0\x03<\xf9I\xb8\xa7j\xa6]h\xad\x88Yg\xc2\xcc<-`\xect\xfc\xf5\xde\x16,\x94\xff\xe3\xe1Wu\xc1\xa1\xcf\xd9\x81\x8dL\x17\xa2\xf8\xd0\xa70%8\xf0y\xe7\xb1(\xef\x12<\x8b\xb9\t\x00\x00\x00\x00\x00\x00\x008\x14\xc2\xae\xa8l5\xfb\xf4$Jdc]2\xff\x12\xe4\xdc\xb3\xdfV\xe5\xd5\xd3\x88*\x99\x84\x99?\x8a\x7f\xefr\xd8u\xd2\x1c\x1e;\xb2\xbc>ny\xa2\xb6\xd3\"\xf7\x10\xf07\x8a\xbc \x95\xd3!9\xe3\x9f2#\xdb\x99a0\x92\x95\xe4\xc3\xc8\xe1\xb0\x00\x1d\xd7W\xaa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\xec\xa8\f{\f', 0x0) execveat(r5, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f00000001c0), 0x1000) ioctl$UI_SET_KEYBIT(r5, 0x40045565, 0x0) r6 = getpgid(0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000004c0)="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") ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000240)=0x80000001) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000140)=""/185) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x494be2fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800}, r6, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000b40)=0x5) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000640)={{{@in=@multicast1, @in6=@ipv4={[], [], @multicast1}}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000000740)=0xe8) r7 = getgid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) getgroups(0x4, &(0x7f0000000900)=[r7, 0xee00, 0xffffffffffffffff, r8]) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000940)={{{@in=@multicast2, @in=@broadcast}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f0000000a40)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000b80)={{{@in6=@remote, @in=@local}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000b00)=0xe8) link(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000400)='./file0/file0\x00') getgroups(0x5, &(0x7f0000004240)=[0xee00, 0xee01, 0xee00, 0x0, 0x0]) getresgid(&(0x7f0000005880), &(0x7f00000058c0), &(0x7f0000005900)) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000200)) getresgid(&(0x7f00000059c0), &(0x7f0000005a00), &(0x7f0000005a40)) ioctl$TIOCLINUX2(r2, 0x541c, &(0x7f0000000100)={0x2, 0xdbf, 0x8, 0x9, 0x800, 0x3b37}) stat(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000006540)) 16:50:47 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(0xffffffffffffffff, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) [ 1099.279425] binder_alloc: 17717: binder_alloc_buf, no vma [ 1099.306205] binder: 17717:17721 transaction failed 29189/-3, size 0-0 line 3135 16:50:47 executing program 5: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) getpgid(r0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r2, 0x500, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffffffffffe}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="1fea57c96fef95eb5d276f9854929c473541536a041de7fdf81fcae42e7dbde40606d23bdc0537feab9a3a4ac8fcd11fc63775c222744003625add8b9fed70e23d36539466db0007f78fa4c3154cd7d900fcfd6f3cdb8ef6febf122e191c755f88ab3a2e0878c233be9343e68c048f353886d8655c68f6fd5bf5d88049675360c23aa9f8abaa64ec171f5f36a99a638a2df671fe550d48bb61e01adbae69cdc1bef0468ca5456e15b090b2b3e14f1aa6bb3b8431045d7c83b0e3e9c2bb923bf370e2db589e81bfdd10e9e85e1d8cbd5dbfa8a6e24e3ea8bf62143298b6817bd69b678346816c285f4793e5593ea212d02571b7fca8ef15ab2fe40d2f8b898aad5c01168f0a20d3ebef8f1251878d6bf9c43bdc3a35533f4fc9f0aac5a35469e3bcbd11ecfa9abe681e769d"]) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x800, 0x1) lsetxattr$trusted_overlay_nlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='trusted.overlay.nlink\x00', &(0x7f0000000480)={'U+', 0x1dd}, 0x28, 0x2) setsockopt$inet6_group_source_req(r3, 0x29, 0x0, &(0x7f0000000140)={0x5a, {{0xa, 0x4e21, 0xcc42, @mcast1, 0xf828}}, {{0xa, 0x4e23, 0x7f, @ipv4={[], [], @multicast2}, 0x4}}}, 0x108) 16:50:47 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, 0x0, &(0x7f0000003740)) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={0x0, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) 16:50:47 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000002}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, r4, 0x101, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1099.368284] binder: undelivered TRANSACTION_ERROR: 29189 [ 1099.374236] binder: send failed reply for transaction 1918 to 17717:17721 [ 1099.400859] binder: undelivered TRANSACTION_COMPLETE 16:50:47 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x3) [ 1099.429815] binder: undelivered TRANSACTION_ERROR: 29189 16:50:47 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, 0x0, &(0x7f0000003740)) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={0x0, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) 16:50:47 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x1, 0xfffffbfffffffff9) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000000)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@empty}}, &(0x7f0000000100)=0xfeb8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000000280)=0xe8) setreuid(r1, r2) 16:50:47 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, 0x0, &(0x7f0000003740)) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={0x0, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) [ 1099.503804] binder_alloc: 17752: binder_alloc_buf, no vma [ 1099.511709] binder: 17752:17757 transaction failed 29189/-3, size 0-0 line 3135 16:50:47 executing program 0: r0 = socket$inet(0x2, 0x3ffffffffffffffe, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 16:50:47 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3:U\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#') fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setgroups(0x3db, &(0x7f0000000100)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x100, 0x70bd28, 0x25dfdbff, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0xffffffff}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}}, 0x70d4bde3b62018be) sendfile(r1, r0, 0x0, 0x9) [ 1099.577897] binder: undelivered TRANSACTION_ERROR: 29189 [ 1099.583990] binder: send failed reply for transaction 1923 to 17752:17757 [ 1099.624878] binder: undelivered TRANSACTION_COMPLETE [ 1099.653939] binder: undelivered TRANSACTION_ERROR: 29189 16:50:47 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) 16:50:47 executing program 4: pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) dup3(0xffffffffffffffff, r1, 0x80000) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/mls\x00', 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, 0x0) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r5 = memfd_create(&(0x7f0000000e40)='\x00\x00\x00\x00\x00\x00r%\xf7\x83\x80\x80}\xdePS`\x18A\xa0\xd0\xf8+t7HR\xb0\x1f\x12Y\x97b-\xc4\xa5\xe7\x1d,\xe5\xac2\xff\x90\x82O\xa2^Y\a4\x87\xcf6\xadWn2\x92k\x04\x89M\xa7@\xf7\xe9\xc0\xff\xb4,5j\x1f([\xfc\x8f\v\x8cor\xef\x15\x1d\xabL\\*Zu\x1f\x04\xbf\xc6\x9a\xc5\xc3\xb5\x16\x8am\x13\xd8&\xb1\xed\fu\'\xd5\x8fT\xad\xc1/\xca\x1f%\xc8\xfc%\x86\xeaM\x90\xf8M\xab\xcd\xec)\x1f\xb7\x80\xa3\x9a\x11}\x12\xb0\x89;\x18 \x98\xdc\xee\xd3;\"*\x1dA7\t\xae5]M)\x7f\xe4,]N\x9d\x8b\xbd\x9d\fp\x9c\xaeG\xe8\x8f\x8a\xa2*P[>\x99[P\x1f\r7S\xcd5\x10\xe8t6a+@\x13\x05\xf3\x16\x17\x7fmMLp\xfd\x9d&!\xc3pz\xd8\x8d\xa7\x85%\x96\xd8\x9aY\xcbtP^gZ\xc6\xeb\xc0?\xaa>\xe9\x98\x89\x17kW\x115\x03\x1a\xfc\x97\xce\xc4]\"\xfdhy(A\x1b\x83\xf6\x8b\xf7\xbeK!\xfd\xf0\x03<\xf9I\xb8\xa7j\xa6]h\xad\x88Yg\xc2\xcc<-`\xect\xfc\xf5\xde\x16,\x94\xff\xe3\xe1Wu\xc1\xa1\xcf\xd9\x81\x8dL\x17\xa2\xf8\xd0\xa70%8\xf0y\xe7\xb1(\xef\x12<\x8b\xb9\t\x00\x00\x00\x00\x00\x00\x008\x14\xc2\xae\xa8l5\xfb\xf4$Jdc]2\xff\x12\xe4\xdc\xb3\xdfV\xe5\xd5\xd3\x88*\x99\x84\x99?\x8a\x7f\xefr\xd8u\xd2\x1c\x1e;\xb2\xbc>ny\xa2\xb6\xd3\"\xf7\x10\xf07\x8a\xbc \x95\xd3!9\xe3\x9f2#\xdb\x99a0\x92\x95\xe4\xc3\xc8\xe1\xb0\x00\x1d\xd7W\xaa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\xec\xa8\f{\f', 0x0) execveat(r5, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f00000001c0), 0x1000) ioctl$UI_SET_KEYBIT(r5, 0x40045565, 0x0) r6 = getpgid(0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000004c0)="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") ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000240)=0x80000001) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000140)=""/185) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x494be2fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800}, r6, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000b40)=0x5) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000640)={{{@in=@multicast1, @in6=@ipv4={[], [], @multicast1}}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000000740)=0xe8) r7 = getgid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) getgroups(0x4, &(0x7f0000000900)=[r7, 0xee00, 0xffffffffffffffff, r8]) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000940)={{{@in=@multicast2, @in=@broadcast}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f0000000a40)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000b80)={{{@in6=@remote, @in=@local}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000b00)=0xe8) link(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000400)='./file0/file0\x00') getgroups(0x5, &(0x7f0000004240)=[0xee00, 0xee01, 0xee00, 0x0, 0x0]) getresgid(&(0x7f0000005880), &(0x7f00000058c0), &(0x7f0000005900)) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000200)) getresgid(&(0x7f00000059c0), &(0x7f0000005a00), &(0x7f0000005a40)) ioctl$TIOCLINUX2(r2, 0x541c, &(0x7f0000000100)={0x2, 0xdbf, 0x8, 0x9, 0x800, 0x3b37}) stat(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000006540)) 16:50:47 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockname$inet(r3, &(0x7f0000000100)={0x2, 0x0, @empty}, &(0x7f0000000140)=0x10) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:50:47 executing program 0: r0 = socket$inet(0x2, 0x20000a0005, 0x7) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) syncfs(r0) 16:50:47 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x75) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x0, 0x6f, 0x2, 0xec}, {0x100000001, 0x7b1f7dbf, 0x800000000000, 0xfffffffffffffffe}, {0x3, 0x3, 0x7, 0xffffffffffffff40}, {0x0, 0x5f, 0x7fff, 0x3}, {0x647, 0xffff, 0x7, 0x904a}, {0xff, 0x6, 0x0, 0x5}, {0xffff, 0x5, 0x7, 0x101}, {0x8001, 0x81, 0x1, 0xffff}]}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x8000, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) setxattr$security_ima(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='security.ima\x00', &(0x7f0000000380)=@v1={0x2, "8c469454335da6"}, 0x8, 0x2) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$EVIOCGABS3F(r0, 0x8018457f, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) quotactl(0x80000101, 0x0, 0x0, &(0x7f00000001c0)) r2 = creat(&(0x7f0000000300)='./file1\x00', 0xffffffffffffffff) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1f, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x5) ioctl$int_in(r2, 0x5473, &(0x7f0000000000)=0x1) symlinkat(&(0x7f0000008ff8)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./bus\x00') 16:50:47 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x80, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) fstat(0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x80000001) faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x42, 0x400) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) 16:50:47 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) [ 1099.948026] binder: BINDER_SET_CONTEXT_MGR already set 16:50:47 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) 16:50:47 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000040)="84e1dd945736ba1f9e234ffff00e8e4693fed915cb1780b6140fa4f706c8cf675134ba28037ac77c77da503b746445b3b9081b6da2a987366d08c03d1115836392cfa383617e4e2bf0a89ac13996a35c012e11221bb6ae8d96bddd60a61aca7ad2fee234e15a7fa562dff983b1e6d636f954382394145a0fe1ad37842dcf4d0bb926f454d5a2d40154898d45c325e64903eca5237bb6a44d943b717301fe9303d6697b9e4e628cda0b9b6cac537553c79a7e4ae3daae2763ae4544b3a760efdebfb5fd48879eb5cde7d3bf4151150a25c72ffc689a1aea41791e6fcafb9bb2b47de505451e0b8b5f3809c15ac812230026a0bef2a2a6f961fd44f9073e2e8f49cb95ba9ac65ec4b0c13497e80e80b094beb237010d4cd5ce024c649de3ce81dc20cbab9bde11c4745756742180b345c02d1316a883ffafe4280925b3d1026b3e241ec03d31494f8fa6c98b873cab72d5db037e3e5a8c79939289dd959daf042d7a3e6812dbd812589695e155c82f9c3ca741ccbb48d4d5cccf6c5fb95ebf8d8a52f0fae8c16b6acdbc9799f2dd1a74f9b8a1f548296eb27a2e6ff50c8fa7fd72f372aae1da0c4cf576bfbbbbafe466b0dabdfbd15296d704180285e9066111e9155487f41ed224d30fd2530db20e8b2415977b1d6b9b0074aa047c86b33fb113480f7366f0029a1be5dc12b07cb082d836d4906d1fbb37b068b322c8f5fd9c2d30c408bfd0b14f59d73af28f6bd4662273c8a5c41874583fcf067c7661dc5918d3687d6c9df474f3b92767fc5770aa5532d9237a74af2dd47d220b3984333c83b43368aff60c8a7c68f28d274c7b2f2a4063a43ad05c5ae31b7e19c1078821f6b6b997d57414ab17b6e188cda42cf6982b5453342a5c8e27683b8ce71e9897ed70626acf3510514ca620a7d31da47246926d5e9d9148a2d8d67cd5ab08617d06c85b2557c77899a222c9312ea33204fea00495c697899ae2b2542062d5795f39afbdf1dc2bd13c3ae3128636cfdd980b3d4d781c0979e20680465680ddff1a444b09ec50c0409c54fe384a3fab9988b500ed33ee1d954f2e57575014af0fb45841b273dfcfab95424cd45f763e49c536ac7ba8e26ef714fe9f1bed9af05ab225d870112c62ce423f138f48cd8b6c012048d0d017878835ed1129f263970925283a371f4185000f65de3e7cd44ba734632473250b56ef6d88c061f9cb56dcc4fabffafd6a98940d1b17b3672742b71ddfa9eebaa52249e2ad631b7e6c9c25081663d7ef3245eed0e67ddc5c0d9a6359c401870beecfe5f47956cbd379d688e3976553aa90e6e0d848a1620311567a36590946997fe3400b2b2c005fcfdea85f7f3c0917719eaae2307793aae99271b6067a7b7839b1009d0ca642cbe4f65d67eafb3836398774469e9d1a39349a51f8d2e5415215be72bbcbc4f345d9e7a80b7b28aacf0dfa698ac6ee1313fff915c08e163c83c576a7b0ad45d1bd66d85032db8b3370c6b593cb24d0f228a0a97b7fc7bc538e7cc76342ed448f15fb0d3d804930bb37c01a21a41bca24da6e1319e15bfccba43ffcbdb17819010772d2e8d564272c33f5bca64845c2b3f164a0bcfe38c264bf15dff0d4dd229429c8039bd0f147265b5899963d9cd5cb18d5dc467b3bf0865163e173c24d098916e140d6e60ef7693601fa59615c6ce4f320f405b323fa098d7bec41c3f3c7bb240b9a7771ed12a11b0d948f58c20db4ce03fbd4408bd3903d41cd2dd14a6b047ac881295f2668e54bad49024d442c4e16e98969a4fa5859d5c882294c1d1b73c541961857c12d0b98198d5815dd95f622e80beba7ac80be706797944c3c1b0f76e979584e6f4b0819ae96b2e293c0cc088d43705c6f280350793f97994c6a2773059fc3c0cad1a9a34ebd64b841268ecec19595f2803763a954556a50fc731a39897ec772220d6faa74eb9100fd4d797746bb971e82e0cf0fa2edd1a4e860b04de1bf53e1d6a9d49022e32230e76c6a62b53405bc18c1183ee2e1cf844fc6c72eafdf026eb57210c8d764f1d9a18c855d628974390a821d758df067e221bd65b049fcb9ff721ef7742510f95cdba72fe266c2b8571adccd463e57773dbcde8b216a2904eba462c2c283309e144f27c711152bdaed60ae73d31a923d7ba310ffc7ec726c00094d03e9bca95a72ed7f1e851cbbcc726108c68a7c5a998442def4c500906b6ae4b5982f0f1179c4c4d0c5f8085b2f5ec9eac342caaf34be89d68cb0ffebab5b57a75f3dd7ee86363766a35b0e579895a60b24be62c1782f7c346c68b66aa1111a2b0771a4bee0303e0f8719329f3e55885f9035201c9b3f45cf0bdf4f97ed72a9b65196c435b8f575da8950f65d3f1b9e29375058852610747681666ff2b44fecd3f9d8590485ea4e73a03641c9c05d6b811750c494156af2a294f82f4b5ed96037b513313439aca4d4afca5005faf1c2d6de0d5416e4d67f6fd0f7e60293a99f413725e0d494131287f661feb1a43fdc2bb426a4f6f3eb1dd83ea952eb12e8e4cae575cd74f49ae8880320bbf12590fa13da7ed6fd6d4e3aa8a32a1f942dba850223d41f0bb25b91f6acf7c0d4d1f73e75f3d9fd3ce3c330c84b8d7931bb56c7af36718cccfc78ead7ed753a688fa6b4b17d27c0003aa351aa2be5f127ae59c2b1a43e4cbad756c472565574a2114e91d89b6e08390a1d4c4d8570928aedada191783fcbd3fe2f0011d79823c0f35d9bad06cbd65cce055f9c4d8ff0b91d0aed47cc860ebd3d6836034543fb04e53586507d4d2ec354815e68ad29b4093be36adb2c8c3b569412b76b19dbb3c76ae1ba3046580002d9210d55229189a3e7d19a966700f17646cb43e9d2862cebbeab6bb7801a07af59e3d9dab5a54000205ab1ecf38b8a96cf9478a336a132c7251d6a023f7265355616584d384d1c74f197aef288008ed05a48f5698b0aedd7ec47965249622b96496e3a1d181620c5c07559003776099b5032ebf8da60b9541f1c043b825003ca48a089ea9edae7a76899f4b79b39d01a732823702f48a0be990f62893c2098e53e1934b93757e6df0cf6032a08ab8081feceed11458ecbc2e9b79864d343ee009188068cc2d784ce1c4b05faebddb95d93066b03f85be6894fc31611062f4786ecba9ca36bfcad9d1500608ec2210c0ff49291e582dfc8f25ec442fb104da8d796dae1c24b6973a13a14970bc60b8db9f74efc96a519eec9bf85fad1e7c0861787bb42c44f4179e13baa7e6490d91e8c9aa7577910f76f015d8bdbc93cb81f9f00c2360d9b66ec91a18654201571a79fe1fbeb071889531766b36e8cffdc1672a6d9b8c661720c80818b88cd782936c0aa5bf5307f16c8c4049ca00d26dc6dfc876e0b29a12d4ccb3c04e6e9b050c4f86430288c0a59cc0d3763acce3671363d69add0c79a4fdcce781e12855e5b2b4b41d010e0b0f82bb7d74a6bf70405e763452e97389fbec08618b066ced55f0feb787c5ff401fd3f1375d0fc8222abdef300e4b096e8e98295e31274ba5052e91fdcb12cf3f8df9ebfeba7d9fbfcca5a162c40df17561569b6a0ff55bb3adb20a70796ecb95b6e2a66ffd6c19ed69d685cbe57ea492696d30bd3accdc758f57dc47fbdbe88084b465e16c1fbfbb2bf9c720ef81004a3c400aae4c8660755780fb4b2b72e50e84f2d56725bb69b78157380c1ef500d98a22d3ae80049d68df0535d3ee9c28a4d8d5eca2bec4308e77fd990a38336abd6c016e81eb6889499b1723d91ff1142cad3f471e8a706265c16851b0ebc7e61da26cebda4e55535cfc44191865f165cd18727c8150e715ce789f175b97bee28f7d1beeb2d304ba36d0da03895312672995812dfa31cebe91ed929588b0166fdcee9a4a7ac698798bcf2c6511b2454e0df89a81ca5459cb0dae9382838116b644adebfabb5efd2e1a77c4c58e4195225a521d7536e386428fe29dcb22f0d22af90df3d46b205d1ac7c8ffafb62295be2a50c1f22cfe9bdd3f6a07c6a7e1c612a84b5e85b5e774fbd1dbece90059fde93e46cb75f6f27c47755fe50a58e947979ba5bf1686a0a677da606cf6bcebd86f626866becc0e2d230961408da1981ae12ccc66f9975aa51d3e2050c7337fafd46a245c17473fa7fc54cb85173ffc70dada8b76496f73dc81b9703b56716f9c396ea2d3d347113725412e637e86a3e2677cedd07a8549edcea861e4a9bd1afac6d3fbf96c288ce3e727fdb0a28a6a15bc89fe5244fe489069c39e3d18d88b48e71579af7db0b5938bd09f3302ffeecebef2fbb57203bb8cbfa0b06347af949f11c5d759696f620e6d6e78edf92877c52f1e465a8f003d50639880e14542e8f0124acd0f2b216ae88f3585a83fbe013c044cc28a2023443a30e25e0bf581cab0f590a2374d30337734c8878d5fad0e5b634a84e22575ec5e2fe5375a6573c7a4ed4e7e4c2f13e2ba83d1a0f628ec3b806ac8df9923e988daa2a2614d88798d809b65d1225855b70a604937e781a6c48ffa10ba3f0a53dda02d43e5b6d032a2d18f5fcd60dd7f2add840310b83765667075c3817672634bbe9ff44664476d22dc973052da7339597a7c36a5faeed1f075b822d56a7b4781062d823f2189c28b8e3269b94560df7eab062b2befee04a0715699825589bc1608e07824b84b68f1548bc7657846d2fac14b384fd7beef6e772e9ed1b61c3c742c454e488c775c3adeeec4af7454b0defbe2513b1669f56958cd00e50789f1b9e4744e61eac9e1f35f4a0ce74454747d1f47ef75e08f86a87105938c9cf29c3d5191ac9d5d1ba14230a5b5680a19190c3eee1282f27d6655f29dfb4252b74f610d824cd140ac5b81f9aacb9ac1c61285660a0caa27f57a4f9028e6c466d84fdab2ec3c2620f7dba4adbe30dc30260cd015157d38e01fb98a4a6d251ee3f77e1592b7f4601775133dc5d2de3a403280807ec80144c405df78140953a74c61ddde76b89c976d3e6e81d4efdc8efca1baff7d6af917565176435658cdd002a4e4abf054865672515d90e9d0096d659c9af33b5a1edb934eff5b58c179a7effd80b0b979ad1ce984c9da255b1a883dee99106b4442fefb06e161f758ed16e4629d5138bf709e53eef54e506e46b052c83f8535c5037164dab8a0a24245b269580ff12cb00842bd801415ca36ecfcf60c54aa9ab00a9a86758366614eec1ff70a46697fc76f03c8356656783d6afa6d842237e03307f500fead8796366d55baf51a5cc6486808afb9b03b4530cb2e01a71bc70f7b73b975ce063707f8431301b6125af00a4cc79e63d76e7798eb714df7da38996458fa98f3b093a89eb2775e39bb5b2311295ecd4d93501379ea75ffa218e83ebfe074291402ee8be59a0b99508f5b1cc150afe7990457c2b6262ead81cfb23003753e8de7c7ce06ad617fefc8e859933f9073130061cbe29914441b1956fb2cf01fa80bcb754f8258207503856faf4ded836478bd826fa451123287b3e1385753db608c588f6694f9e09c3a1ede3875bde9cbccddcc1d3c79b7bdf93c42d13c64ffe001acee8b345918a319227070efe9088701e2b0625525ee5074a7d9424bd102756dbdaebf23792262745f3e06ac3ea4e2bee2f1fcd1931db1aa3f7229a4a5ce489826523130d8cd6810add47d58ac18c0d5271036dccd504d2c1ab24149128d3f4504b9c9fc62db4e288d58d7cad635a996e475aa4e7429744d70bf11653fcb4144479d3388fa4e415e3f7cdbc47ae6016c04b8a0acbcc1da31962094708a0a30cf91135ec4f7c50a162b97626a3") [ 1099.969794] binder: 17788:17796 ioctl 40046207 0 returned -16 [ 1099.988063] binder_alloc: 17788: binder_alloc_buf, no vma 16:50:47 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) [ 1100.010588] binder: 17788:17796 transaction failed 29189/-3, size 0-0 line 3135 16:50:48 executing program 4: fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f00000002c0)="020400000300600000000000fff55b4202938207d9fb3780398d5375000006007929301ee616d5c01843e06590080053c0e385472da7222a2bb40100000042914c5e61eaa96fa9a1e8d1843e770afd6e9ef5837dbdeba97bc406eb04", 0x5c, 0x20040000, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x3ffffffffffffffe, @broadcast}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000a40)) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RATTACH(r3, &(0x7f0000000240)={0x14, 0x69, 0x1, {0x28, 0x2, 0x3}}, 0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000a80)='./file0/file0\x00', &(0x7f0000000bc0)='security.capability\x00', &(0x7f0000000800)=@v2={0x2000000, [{0x75}, {0x6, 0xfffffffffffffffd}]}, 0x14, 0x3) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000380)={@multicast2, @rand_addr=0x1}, 0x8) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000180), 0x4000) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000007c0)=""/36) mprotect(&(0x7f00003a3000/0x3000)=nil, 0x3000, 0x0) 16:50:48 executing program 0: r0 = socket$inet(0x2, 0x4000000000000007, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) 16:50:48 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) 16:50:48 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x9, 0x7, 0x1) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfc, 0x10000}, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1100.130602] binder: undelivered TRANSACTION_ERROR: 29189 [ 1100.136755] binder: send failed reply for transaction 1928 to 17788:17796 [ 1100.151436] binder: undelivered TRANSACTION_COMPLETE 16:50:48 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) 16:50:48 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x400, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f00000001c0)) [ 1100.177546] binder: undelivered TRANSACTION_ERROR: 29189 [ 1100.232939] binder_alloc: 17825: binder_alloc_buf, no vma [ 1100.239067] binder: 17825:17826 transaction failed 29189/-3, size 0-0 line 3135 16:50:48 executing program 2: dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) r0 = dup(0xffffffffffffff9c) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xffffffff00000000) clone(0x3102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1b) ptrace$cont(0x18, r1, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xa5}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r1, 0x0, 0x0) 16:50:48 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000200)={{0x0, 0x0, 0xa, 0x1, 0x1}, 0x9e3a, 0xe049, 0x3}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) syncfs(0xffffffffffffffff) r2 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x9) gettid() timerfd_gettime(0xffffffffffffffff, &(0x7f00000005c0)) lseek(0xffffffffffffffff, 0x0, 0x3) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x80008000000002, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000100)={0xb, 'syz1\x00', 'syz0\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf6\xff\xff\xff\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "80"}, 0x119) fallocate(r1, 0x4, 0x4, 0x20) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000280)={0x5, 0x1ff, 0x6, 0xa2}) getsockopt$sock_int(r0, 0x1, 0x1e, &(0x7f0000001280), &(0x7f00000012c0)=0x4) dup3(r4, r3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000000301ff06000000000000000000000000"], 0x14}}, 0x0) 16:50:48 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) 16:50:48 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) signalfd4(0xffffffffffffff9c, &(0x7f0000000040)={0xbe0}, 0x8, 0x80800) ftruncate(r0, 0x8) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0xc0, 0xe9, &(0x7f00000000c0)="f2d6a29752ab3e473dbbfb009cd7793a44f17457709aa20aee9bcf88bc8ac4c1c782dd5b37465487f3d63369f36588d8175c8ed475772843218a8164574bb6b3207676d48c25ab5491ad2cb4698447c0bd0abc9e47957dd7569cd386b0b0472d27454184fe879f67c4738346bdf623bc098efdfc39043f110aecd51a894a6ff8ae7b0690301f06420c6c32f0c706434ce2c536c35eb6dcb7c783af341b21c428bffbfcc2002ced1268d943da0a0e968c93fc97a707da61991ae6ae6dc62da56b", &(0x7f0000000180)=""/233, 0x2}, 0x28) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)) r1 = socket$inet(0x2, 0x807, 0x0) getsockopt$inet_int(r1, 0x0, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x4) sendto$inet(r1, 0x0, 0x0, 0x4000000, &(0x7f0000e68000)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 16:50:48 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1100.294672] binder: undelivered TRANSACTION_ERROR: 29189 [ 1100.300464] binder: send failed reply for transaction 1933 to 17825:17826 [ 1100.315221] binder: undelivered TRANSACTION_COMPLETE [ 1100.321029] binder: undelivered TRANSACTION_ERROR: 29189 16:50:48 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) [ 1100.363597] binder_alloc: 17844: binder_alloc_buf, no vma [ 1100.369326] binder: 17844:17848 transaction failed 29189/-3, size 0-0 line 3135 [ 1100.407695] binder: undelivered TRANSACTION_ERROR: 29189 [ 1100.413898] binder: send failed reply for transaction 1938 to 17844:17848 [ 1100.431239] binder: undelivered TRANSACTION_COMPLETE [ 1100.444567] binder: undelivered TRANSACTION_ERROR: 29189 16:50:48 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) sched_setscheduler(r1, 0x7, &(0x7f00000000c0)=0x1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r2, 0x0, 0x70bd27, 0x25dfdbfc, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x4}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa0, r3, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2000000000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4e77}]}]}, 0xa0}}, 0x8080) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000440)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x18010}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r4, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x400}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x810) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x84081}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xe0, r5, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffffe}]}, @TIPC_NLA_LINK={0xa8, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x804}, 0x0) setpriority(0x2, r1, 0x1) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100240}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r2, 0x0, 0x70bd25, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x40) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rtc0\x00', 0x80, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r6, 0x400c6615, &(0x7f0000000880)) r7 = add_key$keyring(&(0x7f00000008c0)='keyring\x00', &(0x7f0000000900)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r7, &(0x7f0000000940)=""/209, 0xd1) fstat(r6, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, &(0x7f0000000b00)=0xc) stat(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r0, &(0x7f0000000c00)={0x75, 0x7d, 0x1, {{0x0, 0x5b, 0x2, 0x5, {0x10, 0x3, 0x4}, 0x0, 0x722, 0x1, 0x7a, 0x0, '', 0x5, 'TIPC\x00', 0x23, 'vmnet1)[/,cpusetselinux^md5sumwlan0'}, 0x5, 'TIPC\x00', r8, r9, r10}}, 0x75) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) sched_getscheduler(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c80)) sendmsg$TIPC_NL_NODE_GET(r6, &(0x7f0000000f40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000d00)={0x1d0, r5, 0x320, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ba4}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd8c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x70, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb97e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xac}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}]}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3c84}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_NET={0x14, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1b1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000f80)) ioctl$RTC_WIE_ON(r0, 0x700f) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000fc0)) 16:50:48 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) 16:50:48 executing program 5: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)=0x1) read(0xffffffffffffffff, 0x0, 0x0) 16:50:48 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000000c0)={0x6b, 0x2, 0x7, 0x93, 0x7}, 0x14) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2, 0x110, r1, 0x0) r3 = mmap$binder(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x8, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="c4a80840a590b87d04d848d9787ccfb01358e9aad1f880e46c2cfa743cdcdfe12914ca79fc09725b4fc760201442d054cbdb7c78d6773c0a657b973c507dcd9efc186faa64f67a8856e24a1d6436483b0cbec6e9f1d26d0b47e6e2ad8bbdfde94c5867d8055a30dbbf4a21f3ebd4493c9c05484e3e2768668af1e6c2875dbce00388080233136bd9a2ce4503f6657b10", @ANYRES64=r3], 0x52e, 0x0, 0x0}) 16:50:48 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @broadcast}, 0x10) 16:50:48 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={0x0, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) [ 1100.539855] binder_alloc: binder_alloc_mmap_handler: 17869 20004000-20008000 already mapped failed -16 [ 1100.564822] binder: 17869:17878 unknown command 1074309316 [ 1100.576647] binder: 17869:17878 ioctl c0306201 20000040 returned -22 [ 1100.612247] binder: send failed reply for transaction 1943 to 17869:17878 [ 1100.619671] binder: undelivered TRANSACTION_COMPLETE [ 1100.647141] binder: undelivered TRANSACTION_ERROR: 29189 16:50:51 executing program 2: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000480)={'syz0\x00', {0x9, 0x3, 0x7fffffff, 0x3}, 0x1d, [0x3, 0x200, 0x4, 0x6, 0x8, 0x8000, 0xfffffffffffffff7, 0x2, 0x21, 0x1f, 0x3, 0x9, 0xffffffff, 0x200000000000000, 0x4, 0x100000001, 0xfffffffffffffff7, 0x0, 0x2, 0x7, 0x9, 0x0, 0x0, 0x6, 0x4, 0xc000000000000000, 0x7, 0x9, 0x9, 0x3, 0x8, 0x9, 0x0, 0x0, 0x4b8, 0x80, 0xffffffffffffb6df, 0x8, 0x7, 0x2, 0x8, 0x9, 0x3, 0xffffffff, 0x200000001ff, 0x80000000, 0x5, 0x7, 0x0, 0x6, 0x5, 0x2, 0x8, 0xffffffff80000001, 0x3, 0x4, 0x2, 0x3f, 0x9, 0xffff, 0x40, 0x5, 0x7, 0x34], [0x20, 0x7, 0x1, 0x1, 0x1000, 0xfd, 0xfffffffffffffff9, 0x100, 0x7, 0x8000, 0x7, 0xffffffffffff171c, 0x3, 0x4, 0x4, 0x7, 0x1, 0x4, 0x101, 0x7, 0x4000080000000, 0x5, 0x7, 0x505, 0x2, 0x81, 0x80000001, 0x6, 0x5, 0x600000000000000, 0x2, 0x9, 0x1000, 0x6, 0x80000001, 0x10001, 0x5, 0x6d68488a, 0x0, 0x4, 0x3, 0x5, 0x800, 0x0, 0x2c3, 0x7fffffff, 0x0, 0x7, 0x5, 0x0, 0x7, 0x400, 0x3, 0xa2a, 0x7, 0x1000, 0x6f4, 0x40, 0x80000001, 0x9, 0x5f, 0x5, 0x80000001, 0x4], [0x0, 0x3, 0x4, 0x6, 0x400, 0x1ff, 0xfffffffffffffff9, 0xfdeb, 0x8001, 0x9, 0x1a3205df, 0x7, 0xffffffffffffffc7, 0x7, 0x9, 0x6, 0x80000000, 0x100000000, 0x3, 0x6, 0x3, 0x0, 0x8, 0x2, 0x0, 0x800, 0x0, 0x8, 0x400, 0x10001, 0xc98, 0xffffffffffff42ff, 0x100, 0x7, 0x8000, 0x924, 0x0, 0x1000, 0x2, 0x4, 0xd, 0x1, 0x20, 0xc17a, 0x8, 0x0, 0x81, 0x0, 0x43a, 0x7, 0x8, 0x6, 0x9, 0x2, 0x7, 0x8, 0x40, 0x9, 0xbe, 0x9, 0xbc, 0xd3, 0x1, 0x40], [0x3, 0x7, 0x1, 0xf6, 0x3ff, 0x6, 0x8, 0x1, 0xfff, 0x60a8000, 0x1d6, 0x8, 0x40, 0x4, 0x0, 0x2, 0xf4, 0x2, 0x1, 0x8, 0x4, 0x2, 0x100, 0x0, 0x7fff, 0x401, 0x1400000000, 0x0, 0x5, 0x1, 0x5, 0x0, 0xd8, 0x3ff, 0x9, 0x3, 0x3, 0x9fb1, 0x7e, 0x1600, 0x0, 0x8, 0x3ff, 0xac8, 0x5, 0x4, 0xffffffff, 0x4e1, 0x1, 0xfffffffffffffffd, 0x8, 0x100000000, 0x100, 0x5, 0x401, 0x0, 0x6, 0x10000, 0x0, 0x6, 0x2f, 0xe40f, 0x100000000, 0xff]}, 0x45c) recvmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x80) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f0000000100)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='limits\x00') preadv(r1, &(0x7f00000017c0), 0x74f, 0xfffffffffffffffd) unshare(0x40000200) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x8013, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000240)={@dev={0xfe, 0x80, [], 0xc}, @mcast2, @ipv4={[], [], @broadcast}, 0x6, 0x7741, 0x7ff, 0x500, 0x0, 0x200000, r2}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r0, &(0x7f00000002c0)="024e430d9f4cf6d64022893636d3ea63f130c58aea67c7277aa172998c6e8e689a00f93a62ea1528737d2d6b925b72f8c2c1b642b691db1cd6168118e3143503cb531f0af22efd513d9e1dd96d31099980d84e36a0016120a33373af92231d93b9dcd4ed6c933e7cb90ab2f5e7885f9a6601af8bd01bf18dbcae17eb6fa1191a5753c0de30a85d3867e57e969aec417fdb4cb2d2afb3c207"}, 0x10) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000140)=""/72) 16:50:51 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x480000, 0x0) connect(r0, &(0x7f0000000080)=@generic={0x3, "9c9e19800616187bfc58a298a414d9efe6d7413fb81821b2805c0815d45b3ab31bc38fdcce75f1850090982ef99189df92d0bee42853a332bfca6ad5e70fbfdc2fe91906ad82f070c6cc5f0e60e734255d7a9b69a8f20ac338c37894f4fdb863df12a5f7faaa5a163a5a9b5699a0585f193ac069e3a9a2bb8aba67d86291"}, 0x80) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000040)={0x1b61, 0x1, 0x6}) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) 16:50:51 executing program 5: capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000000)=0x0) syz_open_procfs(r0, &(0x7f0000000140)='setgroups\x00\x93,\xdeh\xfa\xfeT\xad\v\xeb\x8d\xf4|{8B\n\t\xc4\xdf\x16\xc6\xbfm\xf2sy\xf1\xa7\xa1Z\xdb\xf6\x92\xa3/\x81\xff\x17\xda\xc0\xed\xc4\xb0\xde9\xb1\xf84iD\xf2\x88\x92\x7fU\x17 \xcd\xa6N\x03\xba\x13\xca\xc7c$\xb9\xa4\x97\xe2\xf6\x13\xe4\t\xc2c\xab\x89\xc8\x8f\x9b#\xbf\x1a.\x0e\xdb\xf0b|\xc6&\x0e\xf2\x00\'{\xb2\x01b\xa7\xe97!\x88y\x86\xac\xafd\x9d\x83,b\\\x02\xc9\x81\xc32\xc9W\x06\x17!\xf0\xe1;\xa3\xe4\x82\xef\x91\x01\x17}\'`\xfa{l\xb1\xd2\x82p\xc9\x0e-t\xc6\xd9T\x15\xe8\xb5\xb0\x13\x97J\xbfn\xa8\x9f\xef\xc9\x00\x17\xfdi\x19k>\t#\xe5\x16\x14\f\xa9\xf0{\xe1\xa8\x1c\x9d\xad\n\x8a\xa3\xc9') 16:50:51 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={0x0, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) 16:50:51 executing program 4: clone(0x2007f8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() mlockall(0x5) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x4001400000012) wait4(0x0, 0x0, 0x0, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000040)) 16:50:51 executing program 1: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$ppp(r0, &(0x7f0000000440)="4a273aa80e05efa563e69b12c13dcff02b81c7c736b83c54990bcf271621948761d4a3cda41836e961f07f9b7a00dfae70ba05d20d7bb6cbac9b3567d03c6f9e4b39ada9b00f39025661c05dad8c9822fb9988e3afd29c538636e8a069aa2861970a9700587aaacaf1a9c685334062b7845fd3af53aede836391ef67b0f5711dc53ce8afbaed54fcbb4cf181a4659c6bc92f544010436f774e5886b18958abfa4abec724f7bf3535522cba66138388568adb69a095ba87d053a2f259200ed7fe956dc0b5ca80912099e09b", 0xcb) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="000000ad030df560104bc17e993812f00000000000"]], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) inotify_init() ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:50:51 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={0x0, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) 16:50:51 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000540)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "055033", 0x10, 0x0, 0x0, @local, @remote, {[], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "9c7de2", 0x0, "6b6701"}}}}}}}, &(0x7f0000000300)) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000200)={0x0, 0xf2, &(0x7f0000000100)="0651bc7b0aa6ef15589dd68702dde85cb96555576c3804fd72ae2e4d9c14b584b5c856c556be4a52c99c78b801b38287858b6c1f8a08c79cff4c945b4960628fda140035076297588d76a68c8e031b2b8a82786560b2891343a916f50f5a40579cdc75df5973b5747dea6e90536da4658fd70c2a6fdbcb87a7c325ddd165aa8d341511878f47b09f5ce552a5ddd4018345017e43d59b9d0ac9d87be5d94ac88616d74287a9307a6282bf38eee54f3212386ace225ca7c793a6de27a0d27bbfe5f050d50f5e3ea97a1bf8dbe57549729ef6da58684dc2d6103e9b514db05da71d2db1abc6fe7864386b9d2f2eb024f7759cff"}) prctl$PR_GET_DUMPABLE(0x3) ioctl$FICLONE(r0, 0x40049409, r0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x3c, &(0x7f0000000000)="29dabbe607f78e93d0452a71672b668a8e445c6da591329a58c429af319fea51cdf2a5377afeba940ac99a9a9153756a837265237f3017704db277345866ac6968b75d1002342832506e9862fac0c6dd1d880969afbb7b424de289fe56653ca1e0c8ba5d0a05381bb0a1bffbc17b3b26a0e8321f94485cf150fac5b16058c9413bf7ba64bfd5de9cd66402f432a86eab1f459f5728316387c1d2743d0716801903018930d415473d8fbd59f9837704d1258872eba499129825e5f6dbb3", 0xbd) 16:50:51 executing program 0: r0 = accept(0xffffffffffffff9c, &(0x7f0000000000)=@isdn, &(0x7f0000000080)=0x80) sendto$inet(r0, &(0x7f00000000c0)="8d38", 0x2, 0x800, &(0x7f0000000100)={0x2, 0x4e22, @remote}, 0x10) r1 = socket$inet(0x2, 0x1, 0xfffffffffffffffd) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) [ 1103.379880] binder: 17900:17906 got transaction with invalid offset (6986504706373713920, min 0 max 24) or object. [ 1103.402148] binder: 17900:17906 transaction failed 29201/-22, size 24-8 line 3197 16:50:51 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x0, 0x0, 0x0) [ 1103.447682] binder: 17900:17906 got transaction to invalid handle [ 1103.471659] binder: 17900:17906 transaction failed 29201/-22, size 0-0 line 3012 16:50:51 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(r0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x300000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r3, 0x100, 0x70bd29, 0x25dfdbfc, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x44) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYRES16=r4], 0x1}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x4000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000080)={0x8}) r6 = getgid() setgid(r6) write$P9_RSETATTR(r5, &(0x7f0000000100)={0xfffffffffffffe74, 0x1b, 0x1}, 0x7) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x22b, &(0x7f0000000180)={&(0x7f0000000280)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) 16:50:51 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0700000000008000"]], 0x0, 0x0, 0x0}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000440)={{{@in=@loopback, @in=@initdev}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000140)={0x36b, 0x1, 0x8, 0x400000, 0xb67a, 0x7}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000380)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)={0x78, r5, 0xbcc560bb610b1e79, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x10}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5e}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0x1d}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x1}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa1e9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1103.501205] binder: undelivered TRANSACTION_ERROR: 29201 [ 1103.507192] binder: undelivered TRANSACTION_ERROR: 29201 [ 1103.551841] binder: 17928:17931 got transaction with invalid offset (36028797018963975, min 0 max 24) or object. [ 1103.573665] binder: 17928:17931 transaction failed 29201/-22, size 24-8 line 3197 [ 1103.589691] binder: 17928:17931 got transaction to invalid handle [ 1103.596678] binder: 17928:17931 transaction failed 29201/-22, size 0-0 line 3012 [ 1103.614336] binder: undelivered TRANSACTION_ERROR: 29201 [ 1103.619865] binder: undelivered TRANSACTION_ERROR: 29201 16:50:51 executing program 2: mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) unlink(&(0x7f0000000080)='./file0\x00') chdir(&(0x7f0000000000)='./file0\x00') r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000100)={0x5, 0x4, 0x6}) mkdir(&(0x7f00000007c0)='./file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x3) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x3, 0x0) renameat2(r1, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4) 16:50:51 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xab5c8a2afaea6137, 0x44) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000200)='/dev/keychord\x00', 0x10200, 0x0) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000003380)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = dup(0xffffffffffffff9c) fstatfs(r4, &(0x7f0000000140)=""/73) r6 = fcntl$getown(0xffffffffffffffff, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000033c0)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f00000034c0)=0xe8) r8 = getgid() sendmsg$netlink(r0, &(0x7f0000003580)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbff}, 0xc, &(0x7f00000000c0), 0x0, &(0x7f0000003500)=[@rights={0x28, 0x1, 0x1, [r1, r2, r3, r4, r5]}, @cred={0x20, 0x1, 0x2, r6, r7, r8}], 0x48, 0x40}, 0x800) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r9, 0x0, 0xffffffffffffff20, 0x200807fd, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 16:50:51 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x0, 0x0, 0x0) 16:50:51 executing program 4: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0xf1, 0x9, 0xf7, 0x8, 0x1b, 0xffffffffffffff78, 0x100, 0x80000000, 0x740dd465, 0x6}) r1 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000580), 0xf8e682be2d3a23da) lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x3) listen(r1, 0x7) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x0) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x0, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40001ab, 0x0) 16:50:51 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() fcntl$setown(r1, 0x8, r3) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:50:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x701, 0x0, 0x0, 0xe98b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x80, 0x0) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f00000001c0)=0x3) openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x105080, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x11) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, &(0x7f0000000100)=0xfffffca7) r2 = getgid() r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vga_arbiter\x00', 0x2, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000280)={0xa0, 0x19, 0x2, {0x48, {0x90}, 0x80, 0x0, r2, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x7, 0x180000000000000, 0x0, 0x0, 0xc0000000000, 0x0, 0x6}}, 0xa0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0x20000102}, 0x27c}}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r3, 0x0}, 0x10) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000140)) 16:50:52 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f00000001c0)="5500000018007fafff2d3cb2a4a280930206000000a843096c260f69250008000c000000000000a3c728f1c46b7b31afdc1338d544f9ff9a84136e005afb83de448daa7227c43ab822000700002758eaabd40d8d02", 0x55}], 0x1}, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x0) 16:50:52 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x0, 0x0, 0x0) [ 1104.083661] binder_alloc: 17945: binder_alloc_buf, no vma [ 1104.098965] binder: 17945:17952 transaction failed 29189/-3, size 0-0 line 3135 16:50:52 executing program 0: r0 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="0ae68a873a96e2085b0a02b95ff3822fd81d6a5f29ca4b12c769d4c872a2328b399a1ae44dc1dcc75a45def5ea26fdb15747ea45aac8781361ce328730add3fb5232287b90fcd8494cc973ba22d4c93c15db73ba2b75c7c9f6bba80dd8c804e4c93162b10f3b52fd491bfccf5ebd77bb68ba50441e6df4274a509c82c1251a3767531e2055433fe9ebe790ed3cab5f7658f8d75ecb8c9460542816b9973fadadfcda37123f7647888ecad183ffe486dd629ac80c162bae9e1eb664165979eda4fcb471e358255181b70c200cc12b2f2f70ce87ab3983a21ab8fc", 0xda, 0xfffffffffffffffd) keyctl$get_security(0x11, r0, &(0x7f0000000180)=""/236, 0xec) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) fcntl$getown(r1, 0x9) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) 16:50:52 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) 16:50:52 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) request_key(0x0, &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000280)='\x00', 0x0) symlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00') dup2(r1, r0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) rmdir(&(0x7f0000000240)='./file0\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000000000009500000000000000"], 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x0, 0x10, 0x0, &(0x7f0000000000)="5ae02efc441a80536af0d1d96ac723fa", 0x0, 0x6000}, 0x28) 16:50:52 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f00000041c0)=[{{0x0, 0x0, &(0x7f0000002a40)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/mls\x00', 0x0, 0x0) r2 = gettid() r3 = dup2(r0, r0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000140)={0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x3c, 0x0, &(0x7f0000000180)=[@increfs={0x40046304, 0x4}, @request_death={0x400c630e, 0x0, 0x1}, @increfs_done={0x40106308, r4, 0x2}, @clear_death={0x400c630f, 0x4, 0x4}], 0xec, 0x0, &(0x7f0000000400)="77a933d53fca34973e65bb8be750cdfc01b96b1d583dfa9612952a9fc16be56c75df650a75506e1129b060f4604d4a42ed5fa830c8ff2cdde7cbc9742e41e94a86f84cb5cd2f259ed80a639e3979a92b3fca7d08aa14e3e8b76d3161ac6e8c0a719b1988c300d30d820f8db0aab95a07aa1c60e9bd66ceb92c8008bca7535ac14bc83e4113daf2d349da9ebbd52442b331861eabc9fe44095e1497d189bf0ec53de876b558f80a144c543fce1118a529bf74951abd43947ea5db91e9fc4de57726872158211da2d7a1b1b43e5fc3fc8d0b3c8ba8da630c6cdd424b3d57e32a48e5d64073301c78dcf762f86d"}) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/null\x00', 0x8000000800, 0x0) ptrace$setopts(0x4200, r2, 0x1, 0x18) ioctl$VT_DISALLOCATE(r3, 0x5608) ioctl$LOOP_SET_BLOCK_SIZE(r5, 0x4c09, 0x8000008008d25) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='status\x00') preadv(r6, &(0x7f00000017c0), 0x324, 0x0) inotify_init() lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x2f, 0x1) 16:50:52 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f00000000c0)=[@acquire={0x40046305, 0x4}], 0x0, 0x0, 0x0}) [ 1104.178987] binder: undelivered TRANSACTION_ERROR: 29189 [ 1104.192414] binder: send failed reply for transaction 1953 to 17945:17952 [ 1104.214009] binder: undelivered TRANSACTION_COMPLETE 16:50:52 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000000000)="27e8168266ff06c71ba4ab175c5f9b43685b6c89e8833b8f2c0ef7bfa3e70c90000b5513512cdc1eaea237c25aafbd91c6ff82407dde36c20c22d2635f50113e62", 0x41, 0x40, &(0x7f0000000080)={0x2, 0x4e23, @rand_addr=0x8}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) 16:50:52 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) 16:50:52 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ftruncate(r1, 0x8200) lseek(r1, 0x0, 0x2) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000100)) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) syz_open_procfs(r4, &(0x7f00000001c0)='net/connector\x00') fcntl$setstatus(r1, 0x4, 0x0) mlockall(0x1) lseek(0xffffffffffffffff, 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) sendfile(r1, r3, &(0x7f0000002780), 0x8000fffffffe) io_setup(0x8, &(0x7f0000000280)) ftruncate(r2, 0x0) [ 1104.234282] binder: undelivered TRANSACTION_ERROR: 29189 [ 1104.257241] binder: 17977:17978 Acquire 1 refcount change on invalid ref 4 ret -22 16:50:52 executing program 0: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x141002, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x302, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x8, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=@ng={0x4, 0xf, "f6552f3ae82d6fe553ec4b22"}, 0xe, 0x3) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) 16:50:52 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) 16:50:52 executing program 2: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f201000700096c0000030000000c00000009", 0x15, 0x1400}], 0xffffffffffffffff, 0x0) 16:50:52 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x10042, 0x0) ioctl$BLKGETSIZE(r3, 0x1260, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1104.352500] binder: send failed reply for transaction 1958 to 17977:17978 [ 1104.370698] binder: undelivered TRANSACTION_COMPLETE 16:50:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$inet(0x2, 0x806, 0x49eb) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000080)=0x74, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x800, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff}, 0x4000) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000040)={0x2b, 0x27, 0x10, 0xa, 0x1, 0x10001, 0x1, 0x5f}) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000000)={0x8, 0x1, 0xfff, 0xe7, 0x100}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x32907f, 0x0) sendto(r1, &(0x7f0000000340)='u', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000e80)="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", 0x2d1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000380)="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", 0x419, 0x10, 0x0, 0xffffffffffffff41) [ 1104.398970] binder: undelivered TRANSACTION_ERROR: 29189 [ 1104.429095] binder_alloc: 17993: binder_alloc_buf, no vma 16:50:52 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x4e22, 0x2, @empty, 0x6080}}, {{0xa, 0x4e23, 0x0, @local, 0x7}}}, 0x108) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) 16:50:52 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x56, &(0x7f00000002c0)={@local, @remote, [], {@canfd={0xd, {{0x0, 0x9, 0x6, 0x9}, 0x2e, 0x2, 0x0, 0x0, "0da0ffe8ebf5d2cf6c9b5443faab145579a2a4e05591c07ef77045672f1641b5857c5f3eb2801304474738239060d3ea27772b497d8d3f03e9834abd20653d64"}}}}, 0x0) [ 1104.455849] binder: 17993:17998 transaction failed 29189/-3, size 0-0 line 3135 [ 1104.534879] binder: undelivered TRANSACTION_ERROR: 29189 [ 1104.541189] binder: send failed reply for transaction 1962 to 17993:17998 [ 1104.572754] binder: undelivered TRANSACTION_COMPLETE [ 1104.607020] binder: undelivered TRANSACTION_ERROR: 29189 16:50:52 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffa000/0x4000)=nil) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) 16:50:52 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="b4", 0x1, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x800) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000100)={0x2, 0x20, 0x0, 0x7, "f71f57363dba71b24485de13cfdaf5f9c1466c88d24793ff892e7ba9fc5eb612"}) 16:50:52 executing program 0: recvmmsg(0xffffffffffffff9c, &(0x7f0000002a00)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)=""/241, 0xf1}, {&(0x7f0000000300)=""/239, 0xef}, {&(0x7f0000000080)=""/23, 0x17}, {&(0x7f0000000400)=""/209, 0xd1}, {&(0x7f0000000500)=""/236, 0xec}, {&(0x7f0000000600)=""/186, 0xba}], 0x6, &(0x7f00000006c0)=""/81, 0x51}, 0x3}, {{&(0x7f0000000740)=@xdp, 0x80, &(0x7f0000001800)=[{&(0x7f00000000c0)=""/25, 0x19}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/64, 0x40}], 0x3, &(0x7f0000001840)=""/6, 0x6}, 0x2}, {{&(0x7f0000001880)=@xdp, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001900)=""/35, 0x23}, {&(0x7f0000001940)=""/103, 0x67}, {&(0x7f00000019c0)=""/123, 0x7b}, {&(0x7f0000001a40)=""/10, 0xa}, {&(0x7f0000001a80)=""/134, 0x86}], 0x5, &(0x7f0000001bc0)=""/83, 0x53}, 0x80000000}, {{&(0x7f0000001c40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000002100)=[{&(0x7f0000001cc0)=""/108, 0x6c}, {&(0x7f0000001d40)=""/168, 0xa8}, {&(0x7f0000001e00)=""/135, 0x87}, {&(0x7f0000001ec0)=""/131, 0x83}, {&(0x7f0000001f80)=""/50, 0x32}, {&(0x7f0000001fc0)=""/19, 0x13}, {&(0x7f0000002000)=""/179, 0xb3}, {&(0x7f00000020c0)=""/59, 0x3b}], 0x8, &(0x7f0000002180)=""/163, 0xa3}, 0xfffffffffffffffc}, {{&(0x7f0000002240)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f00000026c0)=[{&(0x7f00000022c0)=""/192, 0xc0}, {&(0x7f0000002380)=""/44, 0x2c}, {&(0x7f00000023c0)=""/144, 0x90}, {&(0x7f0000002480)=""/42, 0x2a}, {&(0x7f00000024c0)=""/144, 0x90}, {&(0x7f0000002580)=""/52, 0x34}, {&(0x7f00000025c0)=""/68, 0x44}, {&(0x7f0000002640)=""/106, 0x6a}], 0x8}, 0x1000}, {{&(0x7f0000002740)=@nl=@unspec, 0x80, &(0x7f0000002900)=[{&(0x7f00000027c0)=""/81, 0x51}, {&(0x7f0000002840)=""/52, 0x34}, {&(0x7f0000002880)=""/122, 0x7a}], 0x3, &(0x7f0000002940)=""/153, 0x99}, 0x4}], 0x6, 0x21, &(0x7f0000002b80)) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000002bc0)={'IDLETIMER\x00'}, &(0x7f0000002c00)=0x1e) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/user\x00', 0x2, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000002c40)=0x40100000000, 0x0) syz_extract_tcp_res$synack(&(0x7f0000002c80), 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write$selinux_user(r1, &(0x7f0000002cc0)=ANY=[@ANYBLOB="756e636f6e66696e654dc128feb1a6d8645f753a73797374656d5ff83a696e736d6f645f743a73302d73303a63302c63313032332073797374656d1c5551"], 0x37) 16:50:52 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = fcntl$dupfd(r2, 0x406, r1) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000140)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4c, r5}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.current\x00', 0x0, 0x0) ioctl$TIOCSBRK(r6, 0x5427) [ 1105.094019] binder_alloc: 18015: binder_alloc_buf, no vma [ 1105.114433] binder: 18015:18020 transaction failed 29189/-3, size 0-0 line 3135 [ 1105.199873] binder: undelivered TRANSACTION_ERROR: 29189 [ 1105.205633] binder: send failed reply for transaction 1967 to 18015:18020 [ 1105.222291] binder: undelivered TRANSACTION_COMPLETE [ 1105.230875] binder: undelivered TRANSACTION_ERROR: 29189 16:50:53 executing program 4: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x200, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000680)={0x2, 0x2, @multicast1}, 0xfedb) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000280)={0x0, 0x6936}) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) setsockopt$netlink_NETLINK_RX_RING(r4, 0x10e, 0x6, &(0x7f0000000500)={0x7fffffff, 0xfffffffffffeffff, 0x7, 0x80000000}, 0x10) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000980)=0x0) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000100)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r5, r4, 0x0, 0x2, &(0x7f00000001c0)=']\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r6, 0x8, &(0x7f00000000c0)=0x461) renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xa5cb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000600), 0x4) ftruncate(r4, 0x0) clone(0x2002, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000740)=""/216, 0xd8}, {&(0x7f0000000840)=""/225, 0xe1}, {&(0x7f00000003c0)=""/130, 0x82}], 0x3, 0x0) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000000)) futex(&(0x7f0000000080)=0x2000000000000002, 0x6, 0x0, &(0x7f0000000640)={0x0, 0x989680}, &(0x7f0000000280)=0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x6, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000540)="1221f27f77d88c37242aada9554e130cf8ccc581648e5694d115858fc5585bc48b6c7c019e03f3a65e601829975c9ad719fc33b9d7aed4d4aba1dc472893bbe4e7c2d7437200036f8c9079613f81506b18cf341bc9f0dbdf51141d9e404d582c4b9466972db39bfc2d9d", 0x6a, 0xf4d8}], 0x400, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000140)=0xffffffffffffffff) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x1) sendto$inet(r1, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @local}, 0x10) sendto$inet(r1, &(0x7f00000000c0)="fb", 0x1, 0x8801, 0x0, 0x0) getpid() 16:50:53 executing program 3: r0 = socket$inet(0x2, 0x804, 0x1a) recvfrom(r0, &(0x7f0000000000)=""/109, 0x6d, 0x2000, &(0x7f0000000200)=@isdn={0x22, 0x10001, 0x20, 0x3, 0x9}, 0x80) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={0x0, @local, @empty}, 0xc) r1 = socket(0x5, 0x3, 0x3653a284) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000100)={0x9, 0x1, 0xfffffffffffff9fe, 0xfa, 0x1}, 0xc) syz_emit_ethernet(0x4, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRES16=0x0], 0x0) sysinfo(&(0x7f0000000440)=""/197) 16:50:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8, 0xd, 0xffffffffffffff81}, @IFLA_GROUP={0x8}]}, 0xfffffffffffffdda}}, 0x0) r3 = dup(r0) setsockopt$inet_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000040)={0x1ff}, 0x4) 16:50:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x4000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000000140)={@mcast1, 0x0}, &(0x7f0000000180)=0x14) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000280)=r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:50:53 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000680)=""/190, 0xbe}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/\x00\x00\x00\x00\x00\x00\x00\x01\x00') perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000348000/0x4000)=nil, 0x4000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x9, 0x3, 0x1800000000000000}}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) r1 = memfd_create(&(0x7f0000000000)='/dy\xbdv/autofs\x00', 0x20) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0) unshare(0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000000c0)) open$dir(&(0x7f0000000040)='./bus\x00', 0x6247e, 0x115) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x2}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0xd, 0x0, 0x7fffffffe, &(0x7f0000000840)={0xffffffffffffffff}) r4 = openat$cgroup_ro(r3, &(0x7f0000000600)='memory.current\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00\x00\x05\x00'}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000300)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') close(r4) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8923, &(0x7f0000000200)='memory.current\x00') socketpair(0x11, 0xa, 0x8, &(0x7f0000000340)) r6 = creat(&(0x7f0000000100)='./bus\x00', 0x1) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x401) ftruncate(r6, 0x2008200) r7 = open(&(0x7f0000000140)='./bus\x00', 0x4000, 0x0) sendfile(r6, r7, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 16:50:53 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ftruncate(r1, 0x8200) lseek(r1, 0x0, 0x2) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000100)) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) syz_open_procfs(r4, &(0x7f00000001c0)='net/connector\x00') fcntl$setstatus(r1, 0x4, 0x0) mlockall(0x1) lseek(0xffffffffffffffff, 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) sendfile(r1, r3, &(0x7f0000002780), 0x8000fffffffe) io_setup(0x8, &(0x7f0000000280)) ftruncate(r2, 0x0) 16:50:53 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000000000004002ab00000e5700"], 0x20) [ 1105.650390] binder_alloc: 18039: binder_alloc_buf, no vma [ 1105.669952] binder: 18039:18044 transaction failed 29189/-3, size 0-0 line 3135 [ 1105.716454] device lo entered promiscuous mode 16:50:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x80b, 0x212) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000003dc0)='nv\x00', 0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:50:53 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000280)="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") r1 = epoll_create(0x575e) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0x1}) epoll_pwait(r1, &(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) [ 1105.741935] SELinux: failed to load policy [ 1105.753113] binder: undelivered TRANSACTION_ERROR: 29189 [ 1105.758779] binder: send failed reply for transaction 1972 to 18039:18044 [ 1105.761563] SELinux: failed to load policy [ 1105.778757] binder: undelivered TRANSACTION_COMPLETE 16:50:53 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000180)={0xfffffffeffffffff, 0xc5, 0x100000000, 0x3, 0x41b4213b}, 0x14) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r2, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0008004500001c000000000004907809000000ffffff040000000000039078"], 0x0) [ 1105.821214] binder: undelivered TRANSACTION_ERROR: 29189 [ 1105.832653] binder_alloc: 18065: binder_alloc_buf, no vma [ 1105.861255] binder: 18065:18070 transaction failed 29189/-3, size 0-0 line 3135 16:50:53 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) read(r1, &(0x7f00000000c0)=""/176, 0xb0) write(r1, &(0x7f0000000040)="2400000900be79a1402aff07000000000000f407000904ffffff08000000000000060000000012acfecf0000", 0x2c) [ 1105.886953] FAT-fs (loop4): bogus number of reserved sectors [ 1105.925400] FAT-fs (loop4): Can't find a valid FAT filesystem 16:50:53 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) accept4(r0, &(0x7f0000000140)=@nfc, &(0x7f00000001c0)=0x80, 0x800) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) [ 1105.945535] binder: undelivered TRANSACTION_ERROR: 29189 [ 1105.951523] binder: send failed reply for transaction 1977 to 18065:18070 [ 1105.969776] binder: undelivered TRANSACTION_COMPLETE [ 1105.984430] binder: undelivered TRANSACTION_ERROR: 29189 [ 1106.013894] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48640 sclass=netlink_route_socket pig=18088 comm=syz-executor0 [ 1106.739035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48640 sclass=netlink_route_socket pig=18099 comm=syz-executor0 16:50:54 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x81) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ce8000)={0x9, 0xff, 0x7fff, 0x2}, 0x2c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$netlink(r2, &(0x7f0000000000), &(0x7f0000000080)=0xc) r3 = dup3(r0, r0, 0x80000) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x800, 0x6, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24044080}, 0x20000004) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={r1, &(0x7f0000d9df52), 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r1, &(0x7f0000000100)="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", &(0x7f0000000200)=""/242}, 0x18) fdatasync(r0) mlockall(0x1) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={0x0, r5, 0xe, 0x2}, 0x14) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r1, &(0x7f0000000080), 0x0}, 0x18) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f00000000c0)={'teql0\x00', {0x2, 0xffffffffffff37e6, @rand_addr=0x8000}}) 16:50:54 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, 0x0) ustat(0x8, &(0x7f0000000100)) times(0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1c2dc0000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x40020b) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:50:54 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000006a00)={{0x2, 0x4e23, @rand_addr=0x9}, {0x7, @dev={[], 0x14}}, 0x12, {0x2, 0x4e20, @multicast1}, 'bridge_slave_1\x00'}) r1 = openat$cgroup_ro(r0, 0x0, 0x2761, 0x0) ioctl$int_out(r0, 0x5462, &(0x7f0000000240)) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x600, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') recvmmsg(r1, &(0x7f0000006780)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f00000004c0)=""/210, 0xd2}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000180)=""/22, 0x16}, {&(0x7f00000005c0)=""/208, 0xd0}, {&(0x7f00000006c0)=""/214, 0xd6}, {&(0x7f00000007c0)=""/251, 0xfb}, {&(0x7f00000008c0)=""/210, 0xd2}], 0x8, &(0x7f0000000a40)=""/169, 0xa9, 0x6}, 0x9}, {{&(0x7f0000000b00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000b80)=""/100, 0x64}, {&(0x7f0000000c00)=""/148, 0x94}, {&(0x7f0000000200)=""/51, 0x33}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000300)=""/59, 0x3b}, {&(0x7f0000000cc0)=""/105, 0x69}, {&(0x7f0000002c80)=""/4096, 0x1000}], 0x7, &(0x7f0000000dc0)=""/251, 0xfb, 0x5f8}}, {{&(0x7f0000000ec0)=@alg, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000f40)=""/33, 0x21}, {&(0x7f0000000f80)=""/235, 0xeb}, {&(0x7f0000001080)=""/72, 0x48}, {&(0x7f0000001100)=""/54, 0x36}, {&(0x7f0000001140)=""/125, 0x7d}], 0x5, 0x0, 0x0, 0x3f}, 0x6}, {{&(0x7f0000001240)=@l2, 0x80, &(0x7f00000016c0)=[{&(0x7f00000012c0)=""/28, 0x1c}, {&(0x7f0000001300)=""/16, 0x10}, {&(0x7f0000001340)=""/219, 0xdb}, {&(0x7f0000001440)=""/225, 0xe1}, {&(0x7f0000001540)=""/187, 0xbb}, {&(0x7f0000003c80)=""/4096, 0x1000}, {&(0x7f0000001600)=""/133, 0x85}], 0x7, 0x0, 0x0, 0x7fff}, 0x5}, {{&(0x7f0000001800)=@nfc_llcp, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001880)=""/122, 0x7a}, {&(0x7f0000001900)=""/184, 0xb8}, {&(0x7f00000019c0)=""/222, 0xde}], 0x3, &(0x7f0000001b00)=""/76, 0x4c, 0x1}, 0x6}, {{&(0x7f0000001b80)=@xdp, 0x80, &(0x7f0000004d80)=[{&(0x7f0000004c80)=""/212, 0xd4}], 0x1, &(0x7f0000004dc0)=""/217, 0xd9, 0x1}, 0xc7b}, {{0x0, 0x0, &(0x7f00000050c0)=[{&(0x7f0000004ec0)=""/76, 0x4c}, {&(0x7f0000004f40)=""/110, 0x6e}, {&(0x7f0000004fc0)=""/53, 0x35}, {&(0x7f0000005000)=""/147, 0x93}], 0x4, &(0x7f0000005100)=""/58, 0x3a, 0x1}, 0x2}, {{&(0x7f0000005140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000005380)=[{&(0x7f00000051c0)=""/14, 0xe}, {&(0x7f0000005200)=""/156, 0x9c}, {&(0x7f00000052c0)=""/161, 0xa1}], 0x3, &(0x7f00000053c0)=""/134, 0x86, 0x2}}, {{&(0x7f0000005480)=@nl=@proc, 0x80, &(0x7f0000005740)=[{&(0x7f0000005500)}, {&(0x7f0000005540)=""/221, 0xdd}, {&(0x7f0000005640)=""/213, 0xd5}], 0x3, &(0x7f0000005780)=""/4096, 0x1000, 0x7900000000000}, 0x9}], 0x9, 0x20, &(0x7f00000069c0)={0x0, 0x1c9c380}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0x80, 0xfffffffffffffe89) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="cc", 0x1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=""/188, 0xbc, 0x1}, 0x10000}], 0x2, 0x2000, 0x0) 16:50:54 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000180), 0x4) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r2, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c2b49924e4b6cb7ab0c039d5dbd4f40000aaaaaaaaaa0800000900653c8027ffff000000000003907871336f0d3d3496934bf9eb5d19f00b3583fe1e4da37fe502289f541ce892e90ea9ad8b3563a59a81ecea40f2d7a6308d57d348f7969a0fb66592ce9818dff41126"], 0x0) 16:50:54 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) pipe(&(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x8001, 0x0) eventfd2(0x1000, 0x80000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x40001, 0x0, 0x0, 0xfffffffffffffffc}) 16:50:54 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000100)=0x0) io_setup(0x19, &(0x7f0000000000)) r2 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r3}, 0x14) io_submit(r1, 0x2050, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0xffffff45}]) 16:50:54 executing program 2: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000040)={{0xa, 0x4e22, 0x400, @ipv4={[], [], @rand_addr=0x6}, 0x5}, {0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, [], 0x17}, 0x400}, 0x100000000, [0x5, 0x10000, 0x5, 0x7, 0x1000, 0x4000400000000, 0x8, 0x2]}, 0x5c) 16:50:54 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={r1, @local, @empty}, 0xffffffffffffff2a) r2 = accept$inet(r0, 0x0, &(0x7f0000000140)) syz_emit_ethernet(0x5e, &(0x7f00000002c0)={@link_local, @empty, [{[{0x9100, 0x380000, 0x4, 0x4}], {0x8100, 0x1000, 0x6, 0x3}}], {@canfd={0xd, {{0x1, 0x333, 0x8, 0x8}, 0x5, 0x1, 0x0, 0x0, "ca27cbe54bb47156f59214b5bb6edcb7bf0515f8a8256f2fa24321aff2c1d69b059b54042b0ce08977312ca8b858fe3812aaaad9693163377eef83f9474de694"}}}}, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000180)={'TPROXY\x00'}, &(0x7f00000001c0)=0x1e) 16:50:54 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x20000) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f0000000240)={0xffffffff}, &(0x7f0000000280), 0x8) socket$inet6(0xa, 0x1000000000002, 0x0) r2 = creat(0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000400)) unshare(0x3ff7fff8) fsetxattr$trusted_overlay_redirect(r2, 0x0, &(0x7f0000000340)='./file0\x00', 0x8, 0x2) lstat(&(0x7f00000002c0)='./file0\x00', 0x0) setfsgid(0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0xfffffffffffffffd) close(r0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = getpid() setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000380)=r2, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000000700)=0xe8) setreuid(0x0, r5) sched_setscheduler(r4, 0x0, &(0x7f0000000200)) sendto$inet(r3, &(0x7f00000007c0)="f64402183cae28d0fb3e35e31fcbfcc05f2ee1dfcbc4722b9188e272a7803f181fd7209629dec48738be7fe63db744597ac636662aa16b8c90fcf166a50892ab5a9a39ffa5859846b146ddb6855f276c5738fe7c56403a04e7b79485e500c32d85f0e75f6d31146714d5f309b283eb564728783e5c8b4d31f0a6b4601b85f6704cdee3ab534c4bdbb06d8dc49f2f9b0fee891e9f07fbc11d1deb10dbeedb48f61d2f7910a5826225ae99ca4eda152d3a8811498e333340fc3737893ce45e", 0xbe, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(r3, 0x8953, 0x0) r6 = socket$inet6(0x10, 0x400000005, 0x0) sendmsg(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)=[{&(0x7f0000010000)="5500000020007fafb72d00b2a4a2809302000000030343ee6b26236925000a0000000000130000008848a3c728f1c46b7b31afdc1338d5440000000000000000000000088daa7227c43ab8220000bf0c00157400d4", 0x55}], 0x1}, 0x0) 16:50:54 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) ustat(0x1, &(0x7f0000000180)) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @remote, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) chroot(&(0x7f0000000140)='./file0\x00') [ 1106.937553] binder_alloc: 18101: binder_alloc_buf, no vma [ 1106.940843] audit: type=1400 audit(1547398254.831:13487): avc: denied { getattr } for pid=18109 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 1106.949623] binder: 18101:18119 transaction failed 29189/-3, size 0-0 line 3135 16:50:54 executing program 1: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x8000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000800)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x44, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bcsf0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x800) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(0x0, 0x0, 0x802) fcntl$setlease(r2, 0x400, 0x0) flistxattr(r2, &(0x7f0000000100)=""/129, 0x81) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = mmap$binder(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x4, 0x30, r2, 0x47) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0xfffffffffffffe44, 0x0, &(0x7f0000000680)=[@clear_death, @acquire_done={0x40106309, r4, 0x4}, @acquire={0x40046305, 0x2}, @free_buffer={0x40086303, r4}, @free_buffer={0x40086303, r4}, @reply_sg={0x40486312, {{0x8, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@ptr={0x70742a85, 0x1, &(0x7f0000000380), 0x0, 0x4, 0x1f}], &(0x7f0000000480)=[0x78, 0x40, 0x38, 0x78, 0x38]}, 0x8}}, @reply_sg={0x40486312, {{0x0, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@flat={0x736a2a85, 0x101, r4, 0x1}, @flat={0x77622a85, 0x1, r4, 0x1}], &(0x7f0000000500)=[0x78, 0x0, 0x48, 0x78, 0x70, 0x40, 0x0, 0x0, 0x0, 0x28]}}}, @reply={0x40406301, {0x0, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@flat={0x77622a85, 0x1, r4, 0x1}], &(0x7f00000005c0)=[0x70]}}, @dead_binder_done={0x40086310, 0x1}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@flat={0x73622a85, 0xa, r4, 0x4}, @fda={0x66646185, 0x3, 0x4, 0x3e}], &(0x7f0000000640)=[0x38, 0x40, 0x30, 0x38]}, 0x5}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0063404001000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 16:50:55 executing program 2: getrlimit(0x0, &(0x7f0000000000)) r0 = dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@mcast1, 0x30, r1}) r2 = fcntl$getown(r0, 0x9) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/rt_cache\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)={0x0, 0xfb, 0x36, 0x3, 0x7, "6dccabc3aa6433d76c282b64667a98f1", "16205c73a786ef873a5eb5005f61fdb53054ab3e843ab62023d2bb8e92d01c5dce"}, 0x36, 0x1) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000180)={0xd2, 0x3ff, 0xffffffff, 0x0, 0x1, 0x3, 0x6, 0x3, 0x0, 0x8001}) write$P9_RXATTRWALK(r3, &(0x7f00000001c0)={0xf, 0x1f, 0x1, 0x20}, 0xf) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000200)={'caif0\x00', {0x2, 0x4e21, @empty}}) ioctl(r4, 0x0, &(0x7f0000000240)) write$selinux_access(r3, &(0x7f0000000280)={'unconfined', 0x20, '/usr/sbin/ntpd', 0x20, 0x1}, 0x2f) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f00000002c0)='./file0\x00', r0}, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000040}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r5, 0x8, 0x70bd26, 0x25dfdbfc, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0xfff, @bearer=@l2={'ib', 0x3a, 'veth1\x00'}}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x800) write$selinux_access(r3, &(0x7f0000000480)={'system_u:object_r:bsdpty_device_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x9}, 0x51) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/checkreqprot\x00', 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x6) ioctl$TIOCLINUX6(r3, 0x541c, &(0x7f0000000540)={0x6, 0x10001}) ioctl$BLKALIGNOFF(r3, 0x127a, &(0x7f0000000580)) mkdir(&(0x7f00000005c0)='./file0/file0\x00', 0x40) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000600)=0xffffffffffffffff, 0x4) write$input_event(r0, &(0x7f0000000640)={{0x77359400}, 0x7, 0x2, 0x3}, 0x18) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000680)) write$binfmt_script(r3, &(0x7f00000006c0)={'#! ', './file0/file0', [{}, {}, {0x20, 'ppp1systemself'}, {0x20, 'md5sum^:'}, {0x20, 'self:'}, {}, {0x20, 'veth1\x00'}, {0x20, 'vboxnet0'}, {0x20, 'TIPC\x00'}], 0xa, "79a7"}, 0x4a) readv(r7, &(0x7f0000000800)=[{&(0x7f0000000740)=""/129, 0x81}], 0x1) ioctl$FICLONERANGE(r7, 0x4020940d, &(0x7f0000000840)={r6, 0x0, 0x2, 0x1, 0x20}) perf_event_open(&(0x7f0000000880)={0x2, 0x70, 0x31, 0x401, 0x80, 0x5, 0x0, 0x4, 0x2000, 0x8, 0x0, 0x0, 0x94, 0x3, 0x2, 0x6, 0x0, 0x2, 0x0, 0x5, 0xffff, 0x10001, 0x1, 0xfffffffffffffffe, 0x5, 0x9, 0x400, 0x2, 0x3, 0x6, 0x3, 0x9, 0x7fffffff, 0x9afe, 0x5, 0x100000001, 0x1, 0x9, 0x0, 0x9be, 0x4, @perf_config_ext={0xffffffff, 0x1000}, 0x8, 0x885f, 0x4, 0x4, 0x2, 0x3f}, 0x0, 0xf, r3, 0xa) [ 1107.240480] binder: undelivered TRANSACTION_ERROR: 29189 [ 1107.246344] binder: send failed reply for transaction 1982 to 18101:18119 [ 1107.302168] binder: undelivered TRANSACTION_COMPLETE [ 1107.322074] binder: undelivered TRANSACTION_ERROR: 29189 16:50:56 executing program 5: r0 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) read(r0, &(0x7f0000000000)=""/217, 0xd9) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x8200, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) prctl$PR_GET_NAME(0x10, &(0x7f0000000100)=""/124) getsockopt$inet6_int(r0, 0x29, 0x47, 0x0, &(0x7f00000001c0)=0xad) 16:50:56 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x101000, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000d60e036cd74aadf10d98e6aaaaaa2aaa0008004500001c000000040000000000000000ffffffff00000000000390788a4d9903d700040000000000000000"], 0x0) 16:50:56 executing program 0: ftruncate(0xffffffffffffffff, 0x800) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) getpgid(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000180)='\x00'}, 0x30) fcntl$getown(0xffffffffffffffff, 0x9) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0xc) getpgrp(r0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x90) fcntl$setstatus(r1, 0x4, 0x44000) ptrace(0xffffffffffffffff, 0x0) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) r3 = creat(&(0x7f0000000380)='./bus\x00', 0x0) ftruncate(r3, 0xbb1) r4 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x20011, r4, 0x2000000000000) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:50:56 executing program 2: recvmsg(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000740)=[{&(0x7f00000002c0)=""/38, 0x26}, {&(0x7f0000000300)=""/191, 0xbf}, {&(0x7f00000003c0)=""/122, 0x7a}, {&(0x7f0000000440)=""/217, 0xd9}, {&(0x7f0000000540)=""/65, 0x41}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/94, 0x5e}], 0x7, &(0x7f00000007c0)=""/4096, 0x1000}, 0x10000) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000001800)=0x10000, 0x4) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0) accept(r2, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000200)=0x80) r3 = request_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='wlan0(\x92+-\\\x00', 0xfffffffffffffffa) keyctl$instantiate(0xc, r1, 0x0, 0x0, r3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000001840)='/dev/zero\x00', 0x80, 0x0) 16:50:56 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000040)) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f00000002c0)={0x8}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x00', 0x1}) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x88, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x81, [], 0x0, &(0x7f0000000000), &(0x7f0000000100)=""/129}, 0xffffffffffffffff) getsockname$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0xffffff80) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x400, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x3, 0xffffffff7fffffff, 0x0, 0x0, 0x0, 0x4453, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_config_ext, 0x0, 0x7, 0x800, 0x0, 0x8, 0x0, 0x100}, 0x0, 0xd, 0xffffffffffffff9c, 0x0) 16:50:56 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x3ff, 0x4) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000280), 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xc85) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000300)={'syz1', "46962365fc5829c41133b09c0b4c34cfa1eb8fed3f88c9e80616659ae6f9d4a18dceff3a8af044cd466728f6cbcb2cc1f4529da0684ba6c5c97b2a08fabdb9f104a1d4daef0478a6f1ed85"}, 0x4f) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000a00)='/selinux/load\x00', 0x2, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000d80)='/proc/self/net/pfkey\x00', 0x0, 0x0) fstat(r3, &(0x7f00000003c0)) gettid() sendmsg$nl_netfilter(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000dc0)={0x44, 0xd, 0xf, 0xd070eebc9213aa9d, 0x70bd2c, 0x25dfdbfd, {0x7, 0x0, 0x4}, [@generic="f73d317cd0d0a874a506d06aa48c3b63240e5a19464d31b5868756f8d381542dd2cd3cbde2818ee2ead824ac39"]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x40000) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000000d40)={0x7, 0x0, 0x8000000000008}) write$selinux_load(r2, &(0x7f0000000b00)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815000000000000000800000007000000402c0000000000002315c908e62da29864c1ab74e9589999e506d7a086132b59a541d4ae62ec08d80b1e55858e1124d656730000f948a0c046a7cfc9d4bd84cd58192a578f8f85704e755cf3e4a5bd8702aa2f72487459f015d0b148d69dac7400e4b077ca5335069e683364c6843a7a950b411d2aa7326a75b238b80779faca605994fccb5a70986e7c6285433dfc3b21b5e67b8a74721a2fa9488aec441e3d43ebbba1ed03"], 0xc6) setxattr$security_smack_entry(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)='security.SMACK64\x00', &(0x7f0000000200)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xe9u\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00', 0x46, 0x3) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) syz_extract_tcp_res$synack(&(0x7f00000002c0), 0x1, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setrlimit(0x7, &(0x7f00000005c0)={0x6, 0xa7}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='reno\x00', 0x5) r4 = gettid() fcntl$setownex(r3, 0xf, &(0x7f0000000500)={0x1, r4}) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 16:50:56 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) fsetxattr$security_evm(r0, &(0x7f0000000400)='security.evm\x00', &(0x7f0000000440)=@md5={0x1, "8692cc7db0c8c9d38c816ce1c15dd371"}, 0x11, 0x2) fsetxattr(r0, &(0x7f0000000480)=@known='trusted.overlay.redirect\x00', &(0x7f00000004c0)='^', 0x1, 0x2) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000580)) r3 = geteuid() getresgid(&(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000240)={{{@in=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000340)=0xe8) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) write$P9_RSTATu(r2, &(0x7f0000000380)={0x5f, 0x7d, 0x1, {{0x0, 0x49, 0x599, 0xf82a, {0x4, 0x1}, 0x4000000, 0x8, 0xffff, 0xff, 0x0, '', 0x9, '@trusted#', 0xc, 'md5sumvmnet1', 0x1, '\x8e'}, 0x1, '^', r3, r4, r5}}, 0x5f) syz_emit_ethernet(0x2a, &(0x7f0000000500)=ANY=[@ANYBLOB="0180c20000da124d6c0000000004908f270e6f43f3d8e2ace73b68d67809000000000084ce7f8b1413fb86f44eecea05b5b9719b54e136c30352a7ac6a166597000000039078"], 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) 16:50:56 executing program 2: r0 = socket$inet6(0xa, 0x1200000000000002, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x7fe, 0x4) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r2, 0x628, 0x70bd29, 0x25dfdbfd, {{}, 0x0, 0x4102, 0x0, {0x14, 0x13, @l2={'eth', 0x3a, 'ip6gretap0\x00'}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4) syz_emit_ethernet(0x437, &(0x7f0000000700)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x401, 0x11, 0x0, @dev, @local, {[], @dccp={{0x0, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}, "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"}}}}}}, 0x0) sync_file_range(r0, 0x3, 0x3, 0x5) 16:50:56 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x3) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c200e2ffaa12141a4ed001773c001c0000f0f91ed09078a74086e6b18f93d505247c2b00ff1dff"], 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@mss={0x2, 0xfffffffffffff001}, @sack_perm, @mss={0x2, 0x3}, @window={0x3, 0x3f, 0x400}, @sack_perm, @mss], 0x6) 16:50:56 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) r2 = add_key$user(&(0x7f0000000140)='user\x00', 0xfffffffffffffffe, &(0x7f0000000180)="1e8190c47d4c4ed0afda9f418a2bc18686dce363f6", 0x15, 0xfffffffffffffff8) keyctl$update(0x2, r2, &(0x7f00000001c0)="959d53a9631ece522b7cbeba1f846d88e394eac774490ca6170a23dccf3667a9615ede44adef976c1b2962b2c8cfb3579b2f380e11fcba2cfa251eaf2bd73150442726887bea41c3bf7dd7dd35c17a913905311c1e15a44c85daf16225a11dfe564d9e7e248a5949b5f0e09a0c3263f8282144f697f4fb1b6b6bc57ccdc22f20a953fb1185722d65da005e046f4a093fec38e7d3297ad5ef408758ee05f4afcb283015fa71c9", 0xa6) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) keyctl$update(0x2, r2, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) r3 = dup3(r0, r0, 0x80000) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) [ 1108.950167] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1109.153459] audit: type=1400 audit(1547398257.061:13488): avc: denied { map } for pid=18191 comm="syz-executor1" path="/sys/kernel/debug/kcov" dev="debugfs" ino=5005 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 16:50:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="006340400100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048deca74defc882f7e24ec0bbb29af2b4b1918aea54a94bd86d8f22513072e70d7351c28b4642d282496b3c8a1e76fa826add2fe5b277cf02f07ecd30fa2e26fe9ee9c8801bf26c01cc08c2abebc4f0233e2bde0aa51c10d881b012d02e51d234d6e9ec9482a52f1853fc2d33dd02b347f0288a41da6b6083dfbe3779aeca22f9521aed405909e4b9cedfec119276296d452e83e32462866caa373a467a50d7c6b2816d05a0b44e0326cd498b8beb75ee1a482ae61d07eac610a289420766b89090aa7351c685c99d185b79f92018c5959271f06e0001a7b8541e0a4dfc893d8a4"], 0x0, 0x0, 0x0}) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000100)) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000280)) readahead(r3, 0x4, 0x5828) 16:50:59 executing program 2: r0 = socket(0x2, 0x3, 0x1) getsockopt(r0, 0x1000000ff, 0x2, &(0x7f0000000000), &(0x7f0000000040)) 16:50:59 executing program 4: recvmmsg(0xffffffffffffff9c, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000003d80)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) recvmmsg(0xffffffffffffff9c, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f00000025c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) epoll_create1(0x80003) epoll_create1(0xffffffffffd) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x1, 0xffffffffffffffff) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000140), &(0x7f0000000180)=0x4) socket$inet_udp(0x2, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0xe4ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) memfd_create(&(0x7f0000000100)='/dev/loop#\x00', 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x110, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000300)={0x5, 0x8, 0x6, 0x0, 0x8cf}) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000680)) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"]) add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='uid_map\x00') preadv(r3, &(0x7f00000017c0), 0x3ba, 0x0) 16:50:59 executing program 0: creat(&(0x7f00000000c0)='./file0\x00', 0x2) syz_open_dev$rtc(&(0x7f0000000140)='/dev/rtc#\x00', 0x9, 0x1) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000040)={'HL\x00'}, &(0x7f0000000080)=0x1e) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000540)) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x208200) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/current\x00', 0x2, 0x0) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000240)=""/170, 0xaa, 0x10040, 0x0, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/create\x00', 0x2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4c00) r3 = socket$inet_udp(0x2, 0x2, 0x0) io_setup(0x80, &(0x7f0000000180)=0x0) io_submit(r4, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000040), 0x20000040}]) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80000, 0x0) syncfs(0xffffffffffffffff) ioctl$KIOCSOUND(r5, 0x4b2f, 0xffff) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VT_RELDISP(r5, 0x5605) 16:50:59 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) 16:50:59 executing program 5: syz_open_procfs(0x0, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, &(0x7f0000000080)) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x80) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000600)=""/246) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x4000001000000001, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = timerfd_create(0x0, 0x0) readv(r5, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/14, 0x34c}], 0x1) timerfd_settime(r5, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x80000003, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_MM(0x23, 0x80000000a, &(0x7f0000922000/0x4000)=nil) fsetxattr$trusted_overlay_origin(r6, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x3) io_setup(0xa, 0x0) [ 1111.220782] binder: 18343:18344 got transaction to invalid handle [ 1111.227253] binder: 18343:18344 transaction failed 29201/-22, size 262144-0 line 3012 [ 1111.245216] binder: undelivered TRANSACTION_ERROR: 29201 16:50:59 executing program 3: r0 = socket$inet(0x2, 0xb, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000180)={0x7, 0x21, 0x2}, 0x7) 16:50:59 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="737e0898e70d2b38797a306e730a0b365e59c4bcc20d808fff7102401f413d0aadc7b1efd3bb253f44c08d5190916a449eeda44b535a16524dd2db96c0d5b9f0f754ac8392ef04a6ed8c10be453b2401c1b4cde5060f3d9771d8fab62b34d5e82453e2284a1ce5a6cc6fc64b76d5b23d2a7c861cd3abbb91da245dc334325b4335f57b1e0b36a7a193c6de45b26a8d080f"], 0x99) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) close(r1) [ 1111.282422] binder: 18354:18360 got transaction to invalid handle [ 1111.307114] binder: 18354:18360 transaction failed 29201/-22, size 0-0 line 3012 16:50:59 executing program 2: r0 = socket(0x10, 0x802, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="87eea9e2d2a4aece2fa8b32ae7ef741f", 0x10) write(r0, &(0x7f0000000080)="240000002a0025f000154302000000000000000004000000000000000000000009000000", 0x24) 16:50:59 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) r2 = dup3(r0, r0, 0x80000) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000140)=0x1) syz_emit_ethernet(0x30, &(0x7f0000000180)=ANY=[@ANYBLOB="793092db0f3a00000000000088480001000000000000000100000000000000f0ffbf00000040000000000000001000000000aa01a01d8bcd150016fec5e01637b14e1d882ffb597919441c9e8c72a499521cd0c40504be94696f6e357174cd16aeb9f21771ae1079ea1756af416a616406418a22627ffbadb357b13657424edf52636925ab80dee2253549cb67b7a7335755efa910d40c722f32fe"], 0x0) getsockname(r0, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f00000002c0)=0x80) mkdirat(r2, &(0x7f00000000c0)='./file0\x00', 0x0) [ 1111.333823] binder: 18354:18364 ioctl 1278 20000100 returned -22 16:50:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a625000000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$inet6_opts(r2, 0x29, 0x3f, &(0x7f0000000100)=""/141, &(0x7f0000000280)=0x8d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) accept$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) 16:50:59 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth0_to_hsr\x00', 0x8000}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000006c0)={'br\xb34\xb7L2q+\bQe_1\x00'}) [ 1111.384491] binder: undelivered TRANSACTION_ERROR: 29201 16:50:59 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) prctl$PR_MCE_KILL_GET(0x22) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000140)={0xff, @rand_addr=0x40, 0x4e21, 0x0, 'dh\x00', 0x10, 0x401, 0x59}, 0x2c) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) 16:50:59 executing program 2: socketpair(0x8, 0x801, 0x1, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) write$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x1aa) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) [ 1111.459777] binder: 18379:18382 got transaction with invalid offset (0, min 0 max 24) or object. [ 1111.489414] binder: 18379:18382 transaction failed 29201/-22, size 24-8 line 3197 16:50:59 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000140)) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) [ 1111.506520] binder: 18379:18382 got transaction to invalid handle [ 1111.523775] binder: 18379:18382 transaction failed 29201/-22, size 0-0 line 3012 [ 1111.601496] binder: undelivered TRANSACTION_ERROR: 29201 [ 1111.607413] binder: undelivered TRANSACTION_ERROR: 29201 16:50:59 executing program 0: recvmmsg(0xffffffffffffff9c, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f00000025c0)}}], 0x1, 0x0, 0x0) r0 = epoll_create1(0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000000)) r2 = accept4$inet(0xffffffffffffff9c, 0x0, &(0x7f0000003080), 0x80800) sendmmsg(r1, &(0x7f0000008880)=[{{&(0x7f00000002c0)=@nfc_llcp={0x27, 0x1, 0x2, 0x5, 0x5, 0x0, "d34ca841d832d52494f0b45827dee26088d1ce88182ca6c5429e430d6840dc4c085feccbc0037e09c529baa9d2bb080681f4d4dc1b21b0652238f5fe2e0e8d", 0xe}, 0x80, 0x0}, 0x20}, {{0x0, 0x0, &(0x7f0000001fc0)=[{0x0}], 0x1}, 0x3c0000}, {{0x0, 0x0, 0x0}, 0x9}], 0x3, 0x804) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f00000001c0)=r3) setsockopt$sock_int(r1, 0x1, 0x13, &(0x7f0000000180)=0x200, 0x4) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') preadv(r0, &(0x7f00000017c0), 0x0, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ipv6_route\x00') write$binfmt_aout(0xffffffffffffffff, 0x0, 0xffa2) sendmsg(r4, &(0x7f000000a040)={&(0x7f0000008a00)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x1, {0xa, 0x4e22, 0x30, @loopback, 0x80000000}}}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="200000000020000015000000000180f8ffd53ac0ea3036b3c191ac7db4464ab1257e2068741f321fba115af311ac097bc05be56422811f9911189f816773a7002093932ac1179a039679ac5d96420be609c067c5951c010610a4d1de0061c0f813febca0db8f293f758a2e856e766add3e4ac8a44a5331717a3b81dc942913f5663f5ecad4e4084887d302613bc0d4cf7db94c"], 0x93}, 0x4000) socket$nl_xfrm(0x10, 0x3, 0x6) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x20000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 16:50:59 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 16:50:59 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000080)=0x5, 0x4) recvmsg(r1, &(0x7f0000000200)={&(0x7f00000000c0)=@ethernet, 0x80, &(0x7f0000000000)=[{&(0x7f0000000140)=""/146, 0x92}, {&(0x7f0000000400)=""/222, 0xde}, {&(0x7f0000000280)=""/80, 0x50}], 0x3, &(0x7f0000000500)=""/4096, 0x1000}, 0x2000) recvmsg(r1, &(0x7f0000000040)={0x0, 0x329, 0x0, 0x0, &(0x7f0000000340)=""/148, 0x94}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000037f, 0x0) 16:50:59 executing program 2: r0 = socket(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000000)=""/51, &(0x7f0000000040)=0x33) capget(&(0x7f0000000140)={0x20080526}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x100, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f00000002c0)) r3 = socket(0x10, 0x2, 0x0) fcntl$notify(r2, 0x402, 0x80000000) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r5, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="10000200000000002000000000432500"], 0x1, 0x0) chdir(&(0x7f0000000340)='./file0\x00') mount(&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], &(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000540)='gfs2meta\x00', 0x24, &(0x7f0000000580)=' :em0!-\x00') pselect6(0x40, &(0x7f0000000240)={0x1, 0x1ff, 0x7, 0xfffffffffffffffa, 0x200, 0xffffffffffff0000, 0x8, 0x7f}, &(0x7f00000002c0)={0xdbb, 0x8, 0x3, 0x401, 0x7, 0x4, 0x51a1, 0x445}, &(0x7f00000003c0)={0x4, 0x100, 0xfffe00, 0x1, 0x2, 0x8000, 0x5, 0x5}, &(0x7f0000000400)={0x0, 0x989680}, &(0x7f00000004c0)={&(0x7f0000000480)={0x8}, 0x8}) symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) ptrace$cont(0x39, r4, 0x9, 0x5) ptrace$peek(0xfffffffeffffffff, r4, &(0x7f0000000440)) syz_open_pts(0xffffffffffffffff, 0x185141) perf_event_open(&(0x7f0000000740)={0x0, 0x70, 0x0, 0x0, 0x0, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000140)={@local, @empty, @mcast2, 0x0, 0x78}) socket$unix(0x1, 0x3, 0x0) socketpair$unix(0x1, 0x80000000003, 0x0, &(0x7f0000000100)={0x0, 0x0}) sendmmsg(r6, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000000500)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000007380), 0x0, &(0x7f00000000c0)}}], 0x2, 0x0) 16:50:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x101) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @rand_addr, 0xffffffffffffffff}, 0x1c) shutdown(0xffffffffffffffff, 0x2) r1 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r1, 0x1) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000140)={@mcast2, @local, @loopback, 0x9, 0x3, 0x3ff, 0x400, 0x80000001}) 16:50:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:50:59 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) accept4$inet(r0, &(0x7f0000000140), &(0x7f0000000180)=0x10, 0x800) pwrite64(r0, &(0x7f00000001c0)="8b603ad0696f561e67ce9d0e6cb35e3201a13515b27f7fed7bbc584b", 0x1c, 0x0) 16:51:00 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000340)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000300)=0xffffff90) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) [ 1112.117005] binder_alloc: 18420: binder_alloc_buf, no vma [ 1112.123038] binder: 18420:18426 transaction failed 29189/-3, size 0-0 line 3135 16:51:00 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c202000000aaaaaaaa0008004500001c000000000004907809000000ffffffff0000000000039078"], 0x0) 16:51:00 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='gid_map\x00') socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x1f1) r1 = socket$inet6(0xa, 0x400000000001, 0xffffffffffffffff) r2 = dup(r1) ioctl$TIOCCONS(r2, 0x541d) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x8000004e20, 0xfffffffffffffffe}, 0x1c) openat$urandom(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/urandom\x00', 0x4000, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000001400)=0x0) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000001540)=0x6b) fcntl$setownex(r2, 0xf, 0x0) setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000280)=0x2, 0x4) pause() r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(r4, &(0x7f0000000200)='trusted.overlay.nlink\x00', &(0x7f0000001340)={'U+', 0x203f}, 0x28, 0x4) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r3, r0, 0x0, 0x18, &(0x7f0000000240)='%/\'-]em1\x00\x00\x00\x80[bdevvmr\xbd\xabM\x00'}, 0x30) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) ioctl$TIOCNXCL(r2, 0x540d) mlock2(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) getsockopt$inet_tcp_buf(r2, 0x6, 0x3f, &(0x7f0000001440)=""/147, &(0x7f00000001c0)=0x93) r5 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) pread64(r2, &(0x7f0000003580)=""/4096, 0x1000, 0x0) getresuid(&(0x7f00000002c0), &(0x7f00000000c0), &(0x7f0000000140)) perf_event_open(&(0x7f00000012c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(r5, 0x7fff) sendfile(r2, r5, 0x0, 0x8000fffffffe) 16:51:00 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x22200, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="68000000c9d4f214801b49054fb885cd57b1a370513123d7a207", @ANYRES16=r1, @ANYBLOB="000328bd7000fddbdf25010000000000000009410000004c0018000000066962000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) recvfrom$inet(r0, &(0x7f0000000280), 0x0, 0x1, &(0x7f00000002c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001219e04e64d740bd9dc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001700000000000000000000000000007b6327f5ceb1b0106f3e39aa5801a4"], 0x0, 0x0, 0x0}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@nat={'nat\x00', 0x1b, 0x5, 0x4c8, 0x0, 0x150, 0x360, 0x150, 0x360, 0x430, 0x430, 0x430, 0x430, 0x430, 0x5, &(0x7f00000003c0), {[{{@uncond, 0x0, 0x128, 0x150, 0x0, {}, [@common=@set={0x40, 'set\x00', 0x0, {{0x0, [0x101, 0x3, 0xff, 0xcda, 0xfffffffffffff000, 0x3f], 0x101, 0x80000001}}}, @common=@osf={0x50, 'osf\x00', 0x0, {'syz1\x00', 0x2, 0x1, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}, {{@ip={@loopback, @broadcast, 0xffffffff, 0xffffffff, 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x33, 0x1, 0x2}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}, @common=@set={0x40, 'set\x00', 0x0, {{0x3, [0x6, 0x5, 0x8, 0x5, 0x1, 0x8], 0x9, 0x2}}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x401, 0xa599}}}, {{@uncond, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x6, @empty, @broadcast, @port=0x4e21, @gre_key=0x81}}}}, {{@ip={@empty, @multicast1, 0xff000000, 0xffffffff, 'bridge_slave_1\x00', 'vxcan1\x00', {0xff}, {0xff}, 0x7f, 0x2, 0xa}, 0x0, 0x98, 0xd0}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x11, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @gre_key=0x362f, @gre_key=0x1}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x528) [ 1112.166139] binder: undelivered TRANSACTION_ERROR: 29189 [ 1112.172097] binder: send failed reply for transaction 1994 to 18420:18426 [ 1112.191045] binder: undelivered TRANSACTION_COMPLETE 16:51:00 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000240)) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={r2, @local, @empty}, 0xffffffffffffff93) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0008004500001c0000e8112efca5aa80650000ffffffff0000000000039078"], 0x0) [ 1112.215672] binder: undelivered TRANSACTION_ERROR: 29189 [ 1112.234963] binder: 18443:18446 got transaction to invalid handle [ 1112.243805] binder: 18443:18446 transaction failed 29201/-22, size 0-0 line 3012 [ 1112.272041] binder: undelivered TRANSACTION_ERROR: 29201 [ 1112.277676] binder: send failed reply for transaction 1999 to 18443:18446 [ 1112.295248] binder: undelivered TRANSACTION_COMPLETE [ 1112.320506] binder: undelivered TRANSACTION_ERROR: 29189 16:51:00 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) lstat(&(0x7f0000003100)='./file1\x00', 0x0) getegid() getgroups(0x3, &(0x7f0000000040)=[0xee00, 0xffffffffffffffff, 0xee00]) getgroups(0x2, &(0x7f00000031c0)=[0x0, 0xee01]) getresuid(&(0x7f0000003380), &(0x7f00000033c0), &(0x7f0000003400)) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0xb7, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x10}}}}, 0x88) getgroups(0x0, &(0x7f0000003440)) fcntl$getown(r0, 0x9) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000002880)) fcntl$getownex(r1, 0x10, &(0x7f0000002900)) getpgrp(0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002e00)) getpgid(0xffffffffffffffff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000004ac0)={0x0}, &(0x7f0000004800)=0x1fd) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000004840)={{{@in6=@ipv4={[], [], @broadcast}, @in=@multicast1}}, {{}, 0x0, @in=@multicast2}}, &(0x7f0000004940)=0xe8) ptrace$pokeuser(0x6, r2, 0xffffffff, 0x59754338) getpgrp(0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000004a00)) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)) fcntl$getown(r1, 0x9) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000056c0)={0xffffffffffffffff, r1, 0x0, 0x9, &(0x7f0000005680)='keyring[\x00'}, 0x30) sendmmsg$unix(r1, &(0x7f0000005880)=[{&(0x7f0000002d00)=@abs, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40}, {&(0x7f0000002f00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004740)=[{&(0x7f0000004680)}], 0x1, 0x0, 0x0, 0x48000}, {&(0x7f0000004b00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004e00)=[{0x0}], 0x1, 0x0, 0x0, 0x4000}, {&(0x7f0000004e40)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f00000052c0)=[{&(0x7f00000050c0)="06659dffb01e64cd7c5a48a8855a3dd4b1883522e45022f794afa0258ee0ac779fec501056da2b0b81bc5a2ce0bcb6daf709f90d777bad0a35447a3cd39915b7d59c6c4ef3d71bc1667d7cf87f7c5d1152fdcaa4e6e700a577318197d8b5d3a48e5dbcd1d3dff0fdbb6da121dfef02830b6a571c380597d1ea8486a36d322cbf103dbdb3e2e2b34137b7d11bbde2df2c7f002986ada62f03347c8f568e0dde92de1afd2149750aade20f53ad9c46953ec36d4e01a745223ce7aa24a5442947fa58c84467e434f0c8c4bdaa44c5405316baba292be46ac37df187fe0866", 0xdd}, {0x0}], 0x2, 0x0, 0x0, 0x10}, {&(0x7f00000053c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000005600)=[{&(0x7f0000005500)="20c8d17119cfabea0855776c1328f77e6e14ce9e8c6499a88c9b681f1aa08f799c54a9084935c71c4c973bccac2f2a993a28dbe2d19d025f9e5cf636aa80c7cfcc5f2bc0160aeed5042f5e34452f1527406e097e439c351acd798fe2f8f0dba6d199c06f00327afa92e1cd3a70715365bdb820b3798bf5e74fc57a7a5b3f2e6c2e8b3d8c763596dcc662929ad4c4106ace0d94ebda96bac651ec96be02f6d9b3f233080d4dfce2f7544e835959fa97e3f5d96ee02ca61cf6795a7f688078bdbe7a7ade34aa90722907c1bf97354c4b4a6058ffdac08e1d5615", 0xd9}], 0x1, 0x0, 0x0, 0x4000001}], 0x5, 0x4811) getegid() r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000000800)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb9693dd6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b804bfe70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9ca8bec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b60fca627576ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c46a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a166fa4284a516362621e2c06731a442791f1db063a32cf1f005c914102c7273cb4d7ab1bf567d72f230783d2ea99c43a60e8729132441ee6c5362c33f9b613f84417c3c5549f4e3d9e73c6f83f16c8e57ae22fe5f54515e111fe43ad7c400d214281452bb6141cecad84b23a695f061988d906d03be5d89584634b9e9d9a9b072f8e7cbb47c47719318a2001cafa665dd2c82672d16877ea115bd023fc1975f7c59664bfb06f66a1a5e3f05cb283fb45ea67a2727ee6e10bf35b31fdd03d43ec67b753f6737e0d2f4a5275031595878cefc8f0ca0403b3c6da327afe21720024881def9fa15ec15bb0cb39374f19d63b357936a748e0bb2099ec2a79035bec4a89224cf37c93b534a5348ee94ba3f5f55fa92acaf8e0061598d802fcdc1f7253969a3278154696f42eaf07c89aacdfb016fcb0485a72fc2cdfd7d72f132ff82028a47b61d4dd4d1201d87bd883f74ac1710e05a8fe598dbd94c78adc2ad0e9ae6cb911691b61feaf07539d17c2b05a608dc1f71011c10c92f7faae952e304f0b6c94f754b11e416c4df32f5ca6c0caa6070ee04bfd47adf2f90843fc143b52d2ff50e63ea46a2677baf1df09e67c0768ee6382a8de5dc91eb5552dbd3ba7647b47efc8dc6c9de913710ad2314e3e94a2f9193c5fc3120474261c4914925707530c3a41ec98741aa30fabd70fc38cc57c6707bead0cf24b369f8989b366507b6a261842c727efa97032314f09626954d357374b42fee36fafd448fd0836bea7397b2ac03dff44372e987316fdacf8477befe768dc1505eb58bdb052a5eb3ab1a79014008c8ab55b3ea432beba4434f5199fc6f3b08934cc3fb4cc62b7a733826030153750fa61bbf0dbc1cdfef66ef77aa047c04b9ceb80ff0b99959fdeeaec0e3838dced78e9f12f997bcd992ef36baff4de252999d00406a379272912bab80fbecbd334eb4b844c66c0018312dc20ccb52f36dc84ba4c3876fe9f5b49f39e49e9348f38bcfb4a77a36790971c41c0ed554ebf03c145336e77bca86fcce945c43075d583233b2c36ff471d140ff8b4d91b33ad13540f5f2cffe0ced42839848a13cbc66f1d7393f01a8fe63b37619665d1c98bc1ae09fa9dcc642f2047a555bc8aab2ebfc00b13b902494b139ebe4b96026bf5c441b30b11611371386fac1ccf99df87093bd6609b24f7e7a1bfc175e720c7bb496c45d6f42acfacc216307f7f3bebb96f443e68717442b6ae5a9c29e10a5be02f30007653c9debdaa1e69c28d15d3bfd69232dfafae13622f4cbe9a030ae880375f7415d10770aae1c8271393546f40fa07e6e205de1f52ab215d7c2a1dc474d28e79081913f19c2c53fc8b8d86c699523e836a548c1315610ca4542b0ae145a1fac88d417252fdbec86b4d2d824ca2702102b18062a7194e2f96904dd210c1d2cbd12d253f4243324f61cbb42a0271527d7b871a1ddee9b55030a173ed9573a5cce7924946474c21e39bdddd559aa5f85e981d6ca79e967d5edb484ed6c70bf1d1c57f3ad64b5ede6ba51158d044578d395c561abd382335c5342883d6588d94fb860c0025adab4df23b2c9c00638fe33816b609267ad80e2b6b04d6b7872db753b3ed3dba724bec6c02d5a40cca99e074682f0fc6e0db69a265e5b2757dafd5db7d8a9d5f00b94e6afe662b180b750bedbbb3ba03c52bee15be40b259471fca2fd32696d241d6f9dea3beac4054146e334969e4dae0ef929a4b762bd44612353dbe8275ed21b3f34bf9b38d64e7cfbd8aebf826bd40eb2cb2331b410ca7753c40250954fa8ad12c09e7a54e18a645ad1e501d93e540c6560e702e80e360def60ccab4fd18bc3a33a9ef798aa77ccd30a0175e35b1d6df6963a489322b149d673d920695294f0e6267a4a078c4ab4b2e2cfefb7e81f45f6dd7207e2c8b7e57ac9d988856fa8c0c4c6e49be3c4f9dc7aa078f76268f0be9e2af88a0fe658b243ded33b3836d559a1fb480278f82e546eec2666def860686e9abb898d80f018edb937f7a902238194a16be357e91fd86eaab3c19ae9446a27810dfe586f2d354e251c4afdd89af87421f943d7b9e12b6640897459bd988ef31960784c8072184456fa99d33c3978a0dfc5dd88bfe941da4681d6e31894f5100b2e6fdbd75e51f2f32a0bc00976721b453c5c670b04ca27c23232be7734c35f2898512c3138c78d42626693084826d195299fdb4467db31c79761e40112d1e47d8fe1b846bec1dc7f92d59d088af95a7d4b0d10b7ece85bf6aef12693c429e3df8f7f27289857e16005a233ac1c526afcfa2d4a82ffdd0d52724b3a635e4415d7c0fbcacd1c24294919ad8bd6edc2dcc7e8c66f5980b8483d50a9f5b2204d2f9fbfccffd578dd718b342a1443be5e4f18fbc10691c678ec837ea9a37c8456dde7e3f420bd61e918270b83c3f5c3f9495b33c7be6ea81b78df808cdd55862beb2ad246bf402cbc90918f6d4ff0d24755c346cac9093a101f8ae9eb863139e012c73e10f4e09ae69f822f2bace32429dbbff181115c9eaf00deae55ac0c5c2563672947820b7d016d15049b9fe294a4613954832521727fbac1d900b441174140864c9c5d1fb58b2f0dbfbec0b62c4216a408b8b7f6c3aaaa8b3f153161173dc48daf0f2ddb3f30ac6e573430df30d6ea7259e460a19cf329c661dee097b871b351ffd22b8090df3dd9fdb22cb636f18eb4df69a63299ff3e2acf0d08a944e46907007be920a3672c215dc9fc8aa3066399d9b7494a8a2bc0416aec022389a52bb110ee99ce773132c61c04095c3d591dc273d7b91a99ec99911e7dfcc4b4522431d543ae1710ebfa4c0ac8c3b2af2827233d4b4edda49b98c7086e65b05930d2014cc44bb92217c9578282fdb9c2ce817eba860a14c8f9914353ca14f14d4baad9be49f03e91ecc42d199c3e3704d0476cbb01016326e351f6995e59287197cdc1b1a103a749b6d6a55bbc3cfdb9b8211653d55c46618fd1a0e4a2c755ab4c5d3503d4900648c6adc486ff1ea7e3228300ea161a32a55702de9115bb75928fff82d3761599792a359c3d04e738be8a16ecf1db16935bc2a6c54bd1c33f881b7f1ea687a06504667ec0f05c058392af51a4141123c6090f5ddb12845dc0a486d5f318f0efe1926b9bd5e3ae982e75f49225ee6b71899b7483b501466767a05320eebe3e94c54ec335a33eaa54ea97912a0cf844ad2edf59294af5f07ae3ffdeb7d6f03d10b7bb1616dce11ca2140ea859ddd2536602320eab4801360f821090a67562db436c0dd1209cc717bfe8fa9696ee917ca8985a0abc54b9f6f1b462e00b29b36a413e2fc784d153e95f2b7fc75b048c7aba3db76941b090e1fd76dddc8f6f2758c5e72cf101f0dc8185fb8f86fc4ec615312eb559954c2a32fb7add4699bc486c219744126c077a30f8402a03c95405f8a7981933ec1e9cf145fe8a0f0053794efacc1e8ad066841c87ff819ecf87c75e7e741faef1ade631bd2cb1572d00b341fc6306b56da50f53638e979f093fd789a28cd4cc320da4c43640a0394691f809fc0268d95e81773dfcae593f17f04864712eb47cedf4b0375399cef0982a78e1654085fb8a8704f27b1dfa5378919e4977aad38b5771c8f3402bb93a697abc7c21dd4374c4b74c1a923cdb3e532a4d2be5dd5897723f1ac3ec744b1ec87c324f93c9845456b72d7da990ec8a133864f247f5c9c88e9d3fc999b86c51d8a7d8c833dc5570b0d4339eabb0456f5b39e5216d8ee0be3465caf182d3373a50ba98b653c30b7986bed8687a005b14b344bd49cf487a96090565c35969d7e7c58af5199fe14eefe947cad9ef0fb6ab156438d5855c4bf03bb5095b72333bded3c35c5764c73abd73889d04e9904f44580726cd7491ba09840ecacac8f61e9711dcb5fd232ba71a586", 0x1000) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000100)) sendfile(r1, r3, 0x0, 0x10000) 16:51:00 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x101000, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000c312aec9743947a44ef41c214dd42d6ed6a81a5546710b3fd517a2a955fd291adaf738e7e3af611de90125a15aaaa17cf7558bbceaddcff9922927bcaa38b0fb14dec59fc45be4a1bc4fb298c5bfa37a520b63bdc5b7d545f2486692da81335414dd3e1f47348832164b827d7c0ab67cbaefb95bcfde65148782743cdfcad83c905ef4c53810eb61e22b66670c1362cc45e00d6da3e1b5cbec331c3a0f1214a9261ea339951960665f826cf842399d35bb9ec07e32763c9c038ad818e725233bc8fd4e938bf313b2fce2d7e82185a8c564b07f9b5d"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1112.408153] binder_alloc: 18458: binder_alloc_buf, no vma [ 1112.413808] binder: 18458:18459 transaction failed 29189/-3, size 0-0 line 3135 [ 1112.432260] binder: undelivered TRANSACTION_ERROR: 29189 [ 1112.437749] binder: send failed reply for transaction 2004 to 18458:18459 [ 1112.446339] binder: undelivered TRANSACTION_COMPLETE [ 1112.460926] binder: undelivered TRANSACTION_ERROR: 29189 16:51:00 executing program 5: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280)={0x1}, 0xff7f) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)='T', 0x1}], 0x1, 0x0) fcntl$setstatus(r3, 0x4, 0x6100) fdatasync(r2) ftruncate(r1, 0x8200) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) recvmmsg(r0, &(0x7f0000003b40)=[{{&(0x7f0000000380)=@ipx, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/20, 0x14}, {&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000000400)=""/248, 0xf8}, {&(0x7f0000000580)=""/133, 0x85}], 0x4, &(0x7f00000008c0)=""/241, 0xf1}, 0x1000}, {{&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000740)=""/128, 0x80}, {&(0x7f00000009c0)=""/118, 0x76}], 0x2, &(0x7f0000000300)=""/3, 0x3}}, {{&(0x7f0000000a40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000000ac0)=""/146, 0x92}, {&(0x7f0000000500)=""/38, 0x26}, {&(0x7f0000000c80)=""/196, 0xc4}, {&(0x7f0000000b80)=""/115, 0x73}, {&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/22, 0x16}, {&(0x7f00000007c0)=""/26, 0x1a}], 0x7}, 0x677}, {{&(0x7f0000001e00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}}, 0x80, &(0x7f0000000c00), 0x0, &(0x7f0000001e80)=""/195, 0xc3}, 0x80000001}, {{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000001f80)=""/165, 0xa5}, {&(0x7f0000002040)}, {&(0x7f0000002080)=""/97, 0x61}, {&(0x7f0000002100)=""/243, 0xf3}, {&(0x7f0000002200)=""/69, 0x45}], 0x5}, 0x5c26}, {{&(0x7f0000002300)=@hci, 0x80, &(0x7f0000003740)=[{&(0x7f0000002380)=""/202, 0xca}, {&(0x7f0000002480)=""/207, 0xcf}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/122, 0x7a}, {&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000003700)=""/59, 0x3b}], 0x6}}, {{&(0x7f00000037c0)=@can, 0x80, &(0x7f0000003ac0)=[{&(0x7f0000003840)=""/180, 0xb4}, {&(0x7f0000003900)=""/157, 0x9d}, {&(0x7f00000039c0)=""/252, 0xfc}], 0x3, &(0x7f0000003b00)=""/59, 0x3b}, 0x800}], 0x7, 0x20, &(0x7f0000003d00)={0x0, 0x1c9c380}) setsockopt$inet_udp_int(r4, 0x11, 0x6f, &(0x7f0000003d40)=0x401, 0x4) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8}) r5 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$user(0x0, 0x0, &(0x7f00000003c0), 0x0, 0xfffffffffffffffb) r6 = creat(&(0x7f0000000340)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x4000) creat(&(0x7f0000000080)='./bus\x00', 0x180) io_setup(0x8, &(0x7f0000000200)=0x0) r8 = creat(&(0x7f00000002c0)='./bus\x00', 0x80) r9 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1, 0x11, r9, 0x0) getgroups(0x40000000000002e0, &(0x7f00000006c0)) getresgid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, 0x0, &(0x7f0000007580)) write$P9_RSTATu(r8, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32], 0x8) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x377140be6b5ef4c7}]) sendfile(r0, r5, &(0x7f0000d83ff8), 0x8000fffffffe) 16:51:00 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000240)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000280)={{{@in=@empty, @in6=@empty, 0x4e22, 0xff, 0x4e20, 0xc880, 0xa, 0x20, 0xa0, 0x21, r1, r2}, {0x7, 0x2, 0x80, 0x0, 0x3c8, 0x490d, 0x1, 0x20}, {0xee, 0x1, 0x4, 0x9}, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {{@in6=@local, 0x4d2, 0x3c}, 0xa, @in=@multicast1, 0x34ff, 0x2, 0x1, 0xfffffffffffffe01, 0x9, 0x100, 0x8001}}, 0xe8) 16:51:00 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) inotify_init() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(r3, 0x890d, &(0x7f0000000140)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, 0x0, 0x0, 0x0, 0x98, &(0x7f0000000100)='ifb0\x00', 0x6d6, 0x4}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:51:00 executing program 0: clone(0x13102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4208, r0, 0x0, 0x10) tkill(r0, 0x3f) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x13f}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 16:51:00 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e22, 0x200, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, {0xa, 0x4e21, 0x0, @mcast1, 0xff}, 0x9, [0x9, 0x5, 0x0, 0x1, 0xd233, 0x3, 0xffffffff, 0x32e5]}, 0x5c) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1, 0x0, 0x8000}) setsockopt$inet6_buf(r0, 0x29, 0xff, &(0x7f0000000180)="c64615891ce8ee4041fc55c76ad071ad1de82360727cbc90a293b842faee5cb7c7cf07e31b95370f37c9cb464ede9929eb742be45475a3ead2a0cca308abde0736e85450e3d61fef8564301d41843edd68aaf3670cc32a9e4843bac1bf5b90b13978c438d08fbebc9327670136", 0x6d) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x4}) fcntl$lock(r1, 0x7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x6}) 16:51:00 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x57e, 0x4) connect(r0, &(0x7f00000001c0)=@in={0x2, 0x4e20, @local}, 0x2a) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000d7, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000780)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x0) 16:51:00 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) chdir(&(0x7f00000000c0)='./file0\x00') bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) [ 1112.971273] binder_alloc: 18471: binder_alloc_buf, no vma [ 1112.977842] binder: 18471:18477 transaction failed 29189/-3, size 0-0 line 3135 16:51:01 executing program 2: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) pipe2(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) openat$ppp(0xffffffffffffff9c, &(0x7f0000000580)='/dev/ppp\x00', 0x140, 0x0) rmdir(&(0x7f0000000500)='./file0\x00') sendto$unix(r2, &(0x7f00000005c0)="d2eb099451c03be717ade37e3f667b10013e175c7a6abb29692b2cc0f427f93eb74bc4e21423096a13436d10919ffb446d5a8bc66d0ec0f96c51b5b6cb4de78bf4b3fb8760d48e1e9c1f69c6ce0e016b752a6e3b2bbf2f9cfd3fef8958ee712337a70ae81e2e02f90f3d777202a4a64054c39cf68b2af53049c3d018a644c84a66cc79911420821592ae79c8e7e22c942a4abfbb15f440a99b6d66cc23c4a12021aef8858ecc39b2379de77171d7e25fbee1f69a7ca40857d8a9f5eb157ee9a1b5bceb147123b035fd31cbec1e87890b030ce38fc02ffdcf7dab8a4d89", 0xdd, 0x40000, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='map_files\x00') fstat(r1, &(0x7f0000000380)) getgid() keyctl$invalidate(0x15, r0) fchdir(r3) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x40) mkdir(&(0x7f0000000740)='./file1\x00', 0x40) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x1ff) getdents64(r2, &(0x7f0000000200)=""/116, 0x74) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r4 = perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x7ff, 0x138, 0x0, 0x0, 0x10000, 0x0, 0x686, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x4}, 0x20048, 0x0, 0x0, 0x0, 0x73, 0x773a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) clone(0x0, &(0x7f0000000440)='f', &(0x7f0000000280), &(0x7f00000004c0), &(0x7f0000000540)="f4290fd3645255e6cd89be8044bd3bcbf8") write$binfmt_aout(r4, &(0x7f0000000700)=ANY=[], 0x0) write$P9_RSYMLINK(r1, &(0x7f00000006c0)={0x14, 0x11, 0x1, {0x0, 0x4}}, 0x14) r5 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x4400000010, 0x0, 0x0, 0x70a0}, 0xc) getsockopt$netlink(r5, 0x10e, 0x9, &(0x7f0000000440)=""/4, &(0x7f0000000080)=0x2e9) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840)='/dev/net/tun\x00', 0x4400, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00'}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) pipe(&(0x7f0000000700)) 16:51:01 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f2) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x4002, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x8000fffffffe) read(0xffffffffffffffff, 0x0, 0x0) ptrace(0x4207, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0xa07000) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0xc) 16:51:01 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001540)='/dev/rtc0\x00', 0x5, 0x0) ioctl$KDADDIO(r2, 0x4b34, 0xfffffffffffffffe) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r3 = accept4$packet(0xffffffffffffff9c, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000014c0)=0x14, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000400)=""/4096, &(0x7f0000000080)=0xffffffffffffffd4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000002680)='/selinux/policy\x00', 0x0, 0x0) flistxattr(r4, &(0x7f0000001640)=""/4096, 0x1000) mkdirat(r4, &(0x7f0000002640)='./file0/file0\x00', 0x12) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) r5 = getpid() rt_tgsigqueueinfo(r5, r5, 0x19, &(0x7f0000000100)={0x0, 0x0, 0x400000008}) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000240)={0x4, 0x1, 0x3, 0x6, 0xfffffffffffffffe, 0x8}) ptrace(0x4208, r5) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f00000003c0)={'teql0\x00', {0x2, 0x4e21, @remote}}) wait4(0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000300)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x50, &(0x7f0000001440)={0x0, 0x0}}, 0x2f) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001500)=r6, 0x4b2) fcntl$getflags(r4, 0x408) lstat(&(0x7f0000001580)='./file0\x00', &(0x7f00000015c0)) getgroups(0x0, &(0x7f0000000040)) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000002740)='/dev/vga_arbiter\x00', 0x189000, 0x0) openat$cgroup_type(r7, &(0x7f00000000c0)='cgroup.type\x00', 0x2, 0x0) 16:51:01 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @remote}, 0x10) [ 1113.062383] binder: undelivered TRANSACTION_ERROR: 29189 [ 1113.068268] binder: send failed reply for transaction 2009 to 18471:18477 [ 1113.076539] binder: undelivered TRANSACTION_COMPLETE [ 1113.083534] binder: undelivered TRANSACTION_ERROR: 29189 16:51:01 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x57e, 0x4) connect(r0, &(0x7f00000001c0)=@in={0x2, 0x4e20, @local}, 0x2a) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000d7, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000780)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x0) [ 1113.187202] binder_alloc: binder_alloc_mmap_handler: 18497 20001000-20004000 already mapped failed -16 [ 1113.216067] binder: BINDER_SET_CONTEXT_MGR already set [ 1113.223202] binder: 18497:18501 ioctl 40046207 0 returned -16 [ 1113.223234] binder_alloc: 18497: binder_alloc_buf, no vma [ 1113.230999] binder: 18497:18509 transaction failed 29189/-3, size 24-8 line 3135 [ 1113.277950] binder: undelivered TRANSACTION_ERROR: 29189 [ 1113.284042] binder: send failed reply for transaction 2014 to 18497:18501 [ 1113.312756] binder: undelivered TRANSACTION_COMPLETE 16:51:01 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = epoll_create1(0x80000) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x493, &(0x7f00000000c0)={0x400}, 0x8) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) r3 = syz_open_pts(r0, 0x0) epoll_create1(0x80000) write$binfmt_elf32(r3, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffff800, 0x0, 0x7, 0xb11b, 0x3, 0x3, 0x3f, 0x9, 0x313, 0x38, 0x38, 0x9, 0x9, 0x20, 0x1, 0xcc, 0x101, 0x4}, [{0x70000000, 0xffff, 0xfff, 0x9, 0x401, 0x5d, 0x1ff, 0x225}, {0x7, 0x1, 0x100000001, 0x1, 0x1, 0x4, 0x8000, 0x3}], "ad0137d2e1cc03de3051dd64390185cb3ab7e22b0875d2e32f7256ff374c16b27b7106e39a6f50fc859f8f97c899d8c50e43b7f71449c191a8101784308aa6c5c3", [[], [], [], [], [], [], []]}, 0x7b9) close(r3) 16:51:01 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) 16:51:01 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x2050, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="e7ff01ff00000000"]], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000000c0)=0x10000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap$binder(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000008, 0x42010, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:51:01 executing program 4: socketpair$unix(0x1, 0x1000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x1010000, &(0x7f00000003c0)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d332c73686f7a746e616d653d77696e39352c00b7a93f253b347d6c9ab6b8df2093dc70d1757b9503337c26ef9f101381741f28b76f676c811000000000000000011b6b08ef8d8741413c3938e223df915276f79e296c340000f510fafe70437937f2"]) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xc0, r2, 0x0, 0x70bd2d, 0x0, {}, [@TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3f}]}, @TIPC_NLA_LINK={0x6c, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffff8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffc01}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x24040000}, 0x20000000) [ 1113.337318] binder: undelivered TRANSACTION_ERROR: 29189 16:51:01 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000140)={0x3b, @multicast2, 0x4e23, 0x2, 'rr\x00', 0x28, 0x1, 0x17}, 0x2c) fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, 0x0}) sched_setaffinity(r2, 0x8, &(0x7f00000001c0)=0x6) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) [ 1113.383680] binder_alloc: 18524: binder_alloc_buf, no vma [ 1113.394558] binder: 18524:18528 transaction failed 29189/-3, size 24-8 line 3135 [ 1113.408397] FAT-fs (loop4): Unrecognized mount option "shoztname=win95" or missing value 16:51:01 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000004000)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/239, 0xef}, {&(0x7f00000002c0)=""/206, 0xce}, {&(0x7f00000003c0)=""/160, 0xa0}], 0x3, &(0x7f0000000480)=""/134, 0x86}, 0x10000}, {{&(0x7f0000000540)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000100)=""/61, 0x3d}, {&(0x7f00000005c0)=""/107, 0x6b}], 0x2}, 0x40500000}, {{&(0x7f0000000680)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000001800)=[{&(0x7f0000000700)=""/246, 0xf6}, {&(0x7f0000000800)=""/4096, 0x1000}], 0x2, &(0x7f0000001840)=""/96, 0x60}, 0x100000001}, {{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/134, 0x86}, {&(0x7f0000002980)=""/31, 0x1f}, {&(0x7f00000029c0)=""/43, 0x2b}], 0x4}, 0x5}, {{&(0x7f0000002a40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000003ec0)=[{&(0x7f0000002ac0)=""/205, 0xcd}, {&(0x7f0000002bc0)=""/47, 0x2f}, {&(0x7f0000002c00)=""/4096, 0x1000}, {&(0x7f0000003c00)=""/115, 0x73}, {&(0x7f0000003c80)=""/201, 0xc9}, {&(0x7f0000003d80)=""/50, 0x32}, {&(0x7f0000003dc0)=""/197, 0xc5}], 0x7, &(0x7f0000003f40)=""/144, 0x90}, 0xff}], 0x5, 0x0, &(0x7f0000004140)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000004180)={@rand_addr="df58017b1d2f4afa48a5c94c1c8b27b2", 0x8000, 0x0, 0x2, 0xc, 0x100, 0x4}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000041c0)='tls\x00', 0x4) r2 = dup(r1) write(r2, &(0x7f00000000c0)="1b0000004a001f0fff07f4f9002304000a04f51108000100020100", 0x1b) 16:51:01 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000180)="119d2b868dc338de3a5825570e7dbd8bf4aa1dbd5a22570eb66e438ad95d69e524e0570c55a10da6e9a427c0d3345fb3911e0051b9a5751a7a8f12489d1643af67c33353f5bc47f3a0bb1f38423b6be18aef535c9aa976f266") [ 1113.442147] binder: 18524:18528 got transaction to invalid handle [ 1113.452290] binder: 18524:18528 transaction failed 29201/-22, size 0-0 line 3012 [ 1113.478825] FAT-fs (loop4): Unrecognized mount option "shoztname=win95" or missing value 16:51:01 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f2) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x4002, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x8000fffffffe) read(0xffffffffffffffff, 0x0, 0x0) ptrace(0x4207, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0xa07000) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0xc) 16:51:01 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000100)="7335f5c1633f3a5413b7c37f0022a7bb5430866c34eb1e2ae887a71e67c9aabfdeacdb7c840ef58c1319051b64adc47a588a", 0x32) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="850d627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:51:01 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = open(&(0x7f0000000140)='./file0\x00', 0x80, 0x1) getsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000300)=""/177, &(0x7f0000000180)=0xb1) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1d3}}, 0x2000000000000) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030609100000000000004c9320b74e0200130002000000000000000000000105000600200000000a00000000000000000500e50000070000f46a8e0cf05b8438e4d9019f8f00000000000000000300000000000002e40c00000000e400000000000a000000000000006b17000000000000000000000000001700000000"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000006640)='/proc/thread-self/attr/current\x00', 0x2, 0x0) fcntl$setstatus(r2, 0x4, 0x2c00) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x2, 0x8000, 0x3, 0x9, 0x0, 0x70bd27, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x28, 0x0, "f0e8103388"}, @sadb_address={0x5, 0x0, 0xff, 0x80, 0x0, @in6={0xa, 0x4e22, 0x10000, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6765}}]}, 0x48}}, 0x800) [ 1113.515861] binder: undelivered TRANSACTION_ERROR: 29201 [ 1113.532284] binder: undelivered TRANSACTION_ERROR: 29189 16:51:01 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) recvfrom(r0, &(0x7f0000000180)=""/187, 0xbb, 0x2002, &(0x7f0000000240)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={r1, @multicast1, @rand_addr=0x9}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) 16:51:01 executing program 2: time(0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x129401, 0x128) recvmsg(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000100)=@can={0x1d, 0x0}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/133, 0x85}, {&(0x7f0000000380)=""/221, 0xdd}, {&(0x7f0000000240)=""/102, 0x66}], 0x3, &(0x7f0000000480)=""/36, 0x24}, 0x1) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000500)={r1, 0x1, 0x6, @broadcast}, 0x10) connect$packet(r0, &(0x7f0000000300)={0x11, 0x19, r1, 0x1, 0x47, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='./file0\x00') openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x802, 0x0) mlockall(0x3) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000001100), 0x0) [ 1113.606624] binder: 18558:18563 got transaction with invalid offset (0, min 0 max 24) or object. [ 1113.631227] binder: 18558:18563 transaction failed 29201/-22, size 24-8 line 3197 [ 1113.658538] binder: 18558:18563 got transaction to invalid handle [ 1113.667410] binder: 18558:18563 transaction failed 29201/-22, size 0-0 line 3012 [ 1113.688625] binder: undelivered TRANSACTION_ERROR: 29201 [ 1113.703340] binder: undelivered TRANSACTION_ERROR: 29201 16:51:02 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000000c0)) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r1, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4084) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000100)=0xff, 0x4) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000002c0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001a00)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in6=@mcast1}}, &(0x7f0000001b00)=0xe8) stat(&(0x7f0000001b40)='./file0\x00', &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001c00)=0x0) lstat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001d00)={0x0, 0x0, 0x0}, &(0x7f0000001d40)=0xc) r8 = fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001d80)={{{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000001e80)=0xe8) getgroups(0x9, &(0x7f0000001ec0)=[0xee00, 0xee01, 0x0, 0xee01, 0xee00, 0xffffffffffffffff, 0xee00, 0xee00, 0xffffffffffffffff]) sendmsg$unix(r0, &(0x7f0000001f80)={&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001940)=[{&(0x7f00000003c0)="1f32618f4615cd96ab27999d3a4afa829b86611d116dc6e3da774900dd7a130357bdc6f8c38598d88ccee874c4ea834c5e534e7bf4f21e318378b2f5f49cce3a7431394c384a5f079e5465dbd1df09de414c55bd02f4b709d4e1695275feffa5545798f2b342a2c8a29366a792e1735926e1fb005c1bc40362b0acbe96a30ca8bee7ab40fd751feff97442b82ff7fb2842c74710f39f11e6e3ad7b6372ba82c2cd76ba101796d2f8c610187717db48388731fc9fddaadeba3848ec5585980bb22f", 0xc1}, {&(0x7f00000004c0)="a03f4da6493fa68bf138c615e92649378441b339b65d789126c76a129bf7797eb0b39a9c34c9365863efb732fdbdc884b293eae75e8c3f5344572d272a1a31954b41e527fce2809e771a3118de5db32ee3fbb54430f26d57758424f046bce5d2ac17b340a02f73ce51ed5f99426ea1e9b6c07978b24d8ec3b39e3504ef3badb5327a4c87042e88c4c827ac5c949d8d1bef64f32006960389677457dfca9a07299f04000ac47abdd04693e2bf77590513a8d77dbe8f48543053acba75d3ee1a723f244587578f2375b17dc2e88d41ac85e5ee51a154410fa22ccdd65ffbd65d870840", 0xe2}, {&(0x7f00000005c0)="de344f52c6549a82df69512f266b7ddc597ec32bb9ef5b20ed88773ea2ba0da7b84f698f015876a14778581fda01025ae17399c67a2d0e86b04d616d778e8e2a2d99b2719b2221a08a3ba09419780d11", 0x50}, {&(0x7f0000000640)="50f7b4056a94978e8b9523c16fc8c5ddebe7c8c7ab024c7ad8e303db0ba561c722e00220903415f003ec5f36598818b0f64e68393ebcf7c6891ad82677c1464cd20878157e2cb2e4d7187f76213df70d2ccc85983f703d2c08b1651783721afc301ee8cc8f", 0x65}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="0a701b3a451d8794570765051a77bb14815a629783536d177b5700d67c832fe35403cc018500885c48b3deee1a29ff6f1e93466a5f4ec75382d119776fc672ef6ab88b57e4e3395962c9d8b1a5c4a4cf0cd6de4d4f870f36f9e7eb43020fa411ad8aa16a3966b27ccd7751", 0x6b}, {&(0x7f0000000180)="5b0dbf37df1df4", 0x7}, {&(0x7f0000001740)="82571a708976644249163836e3a3559b1e6017c0c33eb3fd3f690b50f44d57e13a0d84dcffc1b927450578a4cf4ce4b65529724cc0b5bfe4c6b3a6b1fd8a81d9ebc7d4efb5efc5dbcc9fc8d5", 0x4c}, {&(0x7f00000017c0)="9b1126ce261bcb55ba0045e53396af0cfeea646adccbef56bdc8aee6d04ad5ed8ee0c508b7396c9ef2da337ad7992d6d64d2d96fce1f384e526e1b56e709dc21b22eab8d3a8086993e1338f00dd95edcdc263dde0fda11a83f94bd62703236da23a3e3b362f821f516d46c6d77eb81c6a294f4a018f6f1507aa52c7511c1e638f31811180e6661f399071a334490d1d0a40f7d6f49cfaee8a2f070eb5b46957cf115750f5018d32e9d03172136c5a578b0dc24558b954561aa0fcb62797282c1fae89eb9441536e8bf30731c77e1cbd088e7ea223b1abb179e711bfc36d6", 0xde}, {&(0x7f00000018c0)="1306f4944fcab935a322e17c43d013153a9600966990247feda22fbb6f98b9b8397d6c1dfc4567738f865898597ac7c509de3a3230d7e5501f7cf050030dd2c2b37d849668a5e6ba0436fb9f", 0x4c}], 0xa, &(0x7f0000001f00)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}], 0x60}, 0x4000000) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r11, 0x107, 0x5, &(0x7f0000000040)=@req={0x120, 0x4, 0x9da4, 0x5}, 0x10) r12 = dup3(r11, r11, 0x80000) ioctl$IOC_PR_CLEAR(r12, 0x401070cd, &(0x7f0000000000)={0x9}) 16:51:02 executing program 3: r0 = socket$inet(0x2, 0x7, 0x7ff) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) 16:51:02 executing program 4: r0 = socket$packet(0x11, 0xffffffffffffffff, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x6862c8e930f59c5) fchown(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000680)={'\x03\x00\x00\x00\x00\x00\xaf\x00', 0x1000e803}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="0300006cd07b79591f525e063d33d49b88917e3005a6388a7e46c6ae82cdc4dc3628b9b65ca422ad6d7b0a2c91d49286a2ac79e4afb8a50188888f6f57717a96ef051e90ffc5d508771c1e2f05dcf730d56d8c8fbfdd226f8f6af893eac1c055"], 0x28}}, 0x0) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0xfffe) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) sendfile(r1, r4, &(0x7f0000d83ff8), 0x800000000024) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x101880, 0x0) close(r5) 16:51:02 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f00000003c0)=[@acquire_done={0x40106309, r3, 0x3}], 0x0, 0x0, 0x0}) 16:51:02 executing program 0: clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40000, 0x0) write$binfmt_misc(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a319b20f14bf09eb87d9f7f38faabe7cc68f9f30c24d46570cbd9157a6c05db87fb73c3e424faa2080bee0143e447a3e9d3f9562a0829b803e3442886c6e7d132bcf4345f7adf3504445dfc757649134568b0d742e2143504d9a0d8c631bee18120ab274f52ed480df9ed1d0f51db637a6d93b399f60bde0c479628845ac49931501499d8ff64f65e67f65b0e54a7fe89ca834860486c563117d25b52b257ff517ee84135c58e53affacb8c"], 0xa2) write$P9_RLERROR(r1, &(0x7f0000000040)={0xd, 0x7, 0x1, {0x59a0d06bd61e4a03, 'syz1'}}, 0xd) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000080)=0xe8) connect$packet(r1, &(0x7f0000000240)={0x11, 0x4, r2, 0x1, 0x7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x30) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x15, 0xfa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 16:51:02 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000000)=[0x7, 0x1d72f4f7]) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000040)=""/161) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x7, 0xff, 0x1, 0xffffffffffffffff, 0x400}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r2, 0x28, &(0x7f0000000340)}, 0x10) read(r1, &(0x7f00000003c0)=""/71, 0x47) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r2, &(0x7f0000000480)="2f1b976a4387daf6635b3dc0185a4d61f31444b7a6e73d9fcf8b", &(0x7f0000000240)=""/216}, 0x18) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000100)={'veth0_to_team\x00', {0x2, 0x4e22, @broadcast}}) 16:51:02 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x13, 0x8000, 0x7, 0x7, 0x23, 0xffffffffffffffff, 0x9}, 0x2c) r0 = socket$inet(0x2, 0x807, 0x6) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0xfe45) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c2000000aad0f5680526aaaaaaaa0008004500001c000000000004907809000000ffffffff0000000000039078"], 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000140)={'veth1_to_team\x00', {0x2, 0x4e24, @local}}) [ 1114.230517] binder: 18582:18586 BC_ACQUIRE_DONE u0000000000000000 node 2024 cookie mismatch 0000000000000003 != 0000000000000000 [ 1114.259799] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 16:51:02 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) tee(r1, r0, 0x101, 0xe) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000140)={0x32, @multicast1, 0x4e20, 0x4, 'fo\x00', 0x1b, 0x9, 0x62}, 0x2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f00000000c0)=0x9) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:51:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet6_opts(r2, 0x29, 0x3f, &(0x7f0000000200)=""/189, &(0x7f0000000140)=0xbd) [ 1114.314202] binder: send failed reply for transaction 2025 to 18582:18586 [ 1114.322764] binder: undelivered TRANSACTION_COMPLETE [ 1114.336680] binder: undelivered TRANSACTION_ERROR: 29189 [ 1114.343408] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 16:51:02 executing program 4: chdir(0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xbb) symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000200)='./file0\x00', 0x0) 16:51:02 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) [ 1114.390671] binder: 18606:18615 ioctl 40081271 200000c0 returned -22 [ 1114.406828] binder_alloc: 18606: binder_alloc_buf, no vma [ 1114.427023] binder: 18606:18615 transaction failed 29189/-3, size 0-0 line 3135 [ 1114.458094] binder: undelivered TRANSACTION_ERROR: 29189 [ 1114.463787] binder: send failed reply for transaction 2029 to 18606:18615 [ 1114.471889] binder: undelivered TRANSACTION_COMPLETE [ 1114.483869] binder: undelivered TRANSACTION_ERROR: 29189 16:51:03 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000280), 0x1c) getsockopt$bt_hci(r0, 0x0, 0x3, 0x0, &(0x7f0000000240)) 16:51:03 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) sched_setaffinity(0x0, 0x7, &(0x7f0000000240)=0x8000009) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000002c0)='sit0\x00', 0x8b) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0xc0100, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000300)) sendto$inet(r1, 0x0, 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000140)={'yam0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, 0x0) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000)={0x1, 0x3, 0x9c}) socketpair(0x1, 0x100000000000000a, 0x3f, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000003c0)=""/145, &(0x7f0000000180)=0x91) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x100, 0x41) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000200)={0x100000001, 0x8, 0x4, 0xffffffff, 0xf, 0x0, 0x0, 0x9, 0x28cfb6e6, 0xffffffffffff8000, 0x5, 0x9}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000380)={0x0, 0x0, 0x2ffd}, 0x4) fcntl$getownex(r3, 0x10, &(0x7f0000000040)) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) sendto$inet(r1, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x200, 0x0) 16:51:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000100)) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) preadv(r1, &(0x7f0000000980)=[{&(0x7f0000000440)=""/248, 0xf8}, {&(0x7f0000000540)=""/255, 0xff}, {&(0x7f0000000280)=""/33, 0x21}, {&(0x7f0000000640)=""/200, 0xc8}, {&(0x7f0000000740)=""/220, 0xdc}, {&(0x7f0000000840)=""/119, 0x77}, {&(0x7f00000008c0)=""/174, 0xae}], 0x7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000140)="b62b5bb7c9a82dcab552ba697ef37a8abdd290c27afcbb126017230eec80bc6e9267c751805bf7289e8516bdc7dd66395bf4202c67e8a98ed2e8fb6b115355c11f3a1952f4d39e9fbecd2f59283d74f0c4b5", 0x52) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:51:03 executing program 3: prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f00000001c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0xffffffffffffff5a) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) 16:51:03 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1a2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x1}, 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_int(r3, 0x0, 0x17, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) r4 = getpid() sched_setparam(r4, &(0x7f00000000c0)=0x80) 16:51:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x109000, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000300)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000180)='\x8ca') getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000000)=""/34, &(0x7f0000000040)=0x22) r3 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0) write$binfmt_elf64(r3, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x1a0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mlockall(0x41000002) fcntl$getownex(r4, 0x10, 0x0) prlimit64(0x0, 0x3, 0x0, &(0x7f0000000240)) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$binfmt_aout(r5, &(0x7f0000000f40)=ANY=[@ANYBLOB="0801200303010000b3020000f20e000003010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010cbd5627ab7342ba069088046590e384501db68e6ffffffffffffe59cc05dda28d9b25514e00c24cb04b4418e9b19377bfdfaf054039681f11fff781f696b537a70d371c7d825f50000000000000000"], 0x502) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f0000000740)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000003f000002000000000000000000000000000000000000004700174dd127f350bb41c2000000000000000000"], 0x1) write$binfmt_elf64(r5, &(0x7f0000000080)=ANY=[], 0x1da) fallocate(r5, 0x0, 0x0, 0x4003ff) write$cgroup_type(r5, &(0x7f0000000240)='threaded\x00', 0xf96d) fallocate(r5, 0x3, 0x8000, 0x8001) fallocate(r5, 0x3, 0x5e89, 0xfff9) unshare(0x40000000) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e23, @rand_addr=0x100000000}, {0x306, @local}, 0x2, {0x2, 0x4e24, @remote}, 'nr0\x00'}) getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000b80)=0xfffffd2c) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) unshare(0x2000400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)) symlinkat(&(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00') syncfs(r3) setsockopt(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000001000), 0xc5) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000340)='fou\x00') sendmsg$FOU_CMD_DEL(r6, &(0x7f00000004c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x1c, r7, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004850}, 0xc0) 16:51:03 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000140)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0xffffffffffffff23) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) [ 1115.519274] binder_alloc: 18636: binder_alloc_buf, no vma 16:51:03 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000340)) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score\x00') timer_create(0x7, &(0x7f0000000480)={0x0, 0x14, 0x0, @thr={&(0x7f0000000380)="6ef1f950fbf0056aa8449bed0305238b5efc757c95d034c88bd99c447e986b3d6197f6af9630093119483bdd93454d3c8846e12b387b9363be8df8c580bd85ef835a6a1a82f3e6122fadd5", &(0x7f0000000400)="7105c676b7dc59db3170f5db30bea18353c54bb79e1c3fee1722aa823885a24e433830714b1f5128a8fa72e71f4a3653d8ab470a82966f8cfef51fc5c0cc93e38a615d8cc7e17474bef8bd7fcf0a"}}, &(0x7f00000004c0)) exit(0x0) sendfile(r3, r4, 0x0, 0x7ff) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000240)={0xa8, 0xfc9, 0x7, 0x0, 0x0, [{r0, 0x0, 0x4}, {0xffffffffffffff9c, 0x0, 0x55a}, {r0, 0x0, 0x6}, {r0, 0x0, 0x3939baa}, {r0, 0x0, 0x2}, {r0, 0x0, 0x7fffffff}, {r0, 0x0, 0xfffffffffffffa7f}]}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x40000, 0x0) r6 = perf_event_open$cgroup(&(0x7f00000001c0)={0x5, 0x70, 0x1ff, 0xfffffffffffffff9, 0x40, 0x0, 0x0, 0x2, 0x415, 0x2, 0x80, 0x5, 0x3, 0x4, 0x1ff, 0x100000000, 0x92, 0x5, 0x800, 0xb4a, 0x8, 0xb8, 0xffff, 0x8, 0x6, 0x8, 0x9, 0x4, 0xfffffffffffff916, 0x1, 0x81, 0x2, 0x1f, 0xfffffffffffffffa, 0x3, 0x400, 0x7, 0x9, 0x0, 0x7, 0x0, @perf_config_ext={0xbd5, 0x10000}, 0xa00, 0x6, 0x5, 0x1, 0x1, 0x1}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0xc) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r6) r7 = dup2(r0, r0) setsockopt$inet6_tcp_TLS_RX(r7, 0x6, 0x2, &(0x7f0000000140), 0x4) [ 1115.572142] binder: 18636:18643 transaction failed 29189/-3, size 0-0 line 3135 16:51:03 executing program 2: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$selinux_user(r0, &(0x7f00000001c0)={'u:r:untrusted_app:s0:c512,c768', 0x20, 'system_u\x00'}, 0x28) write$smack_current(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f0000000100)) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0xfd02afba9a5e39c1, 0x4) getdents(r3, &(0x7f00000003c0)=""/162, 0xa2) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x0) 16:51:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000a621209fe3181c07289c6d1d8f307152000000"]], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1115.624520] binder: undelivered TRANSACTION_ERROR: 29189 [ 1115.630622] binder: send failed reply for transaction 2034 to 18636:18643 [ 1115.643555] binder: undelivered TRANSACTION_COMPLETE [ 1115.663056] binder: undelivered TRANSACTION_ERROR: 29189 16:51:03 executing program 2: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) r3 = memfd_create(&(0x7f0000000400)='\x06\x00\x00\x00^\x00\xac\xd8\xfd\xcc\xeeq\xe5\xf5\xcb\x801`\xe48\x85\xa4\xf5\xd0\x1b\\\x04\f\xf8F\\\xb4\xba\x8d\xef\x12d\xee\xa5?\x00kZ\x8b\x19h\xd7|\x14i\r\x18U9\xc1\xd7\x10\xf0G\x12\xa8\xbaa\xb2\x94|%n\x1e+\x9f\xbb\xb8\xac\x81\x8d\x93q\xd4\xd4z\xaaZ\x0f\xaa\xc7\x97#\xe5g l\xd55\x15\xbf\xfc\xf5\x83\xb72\x00Y\x15\x92\xb1\xb6a\xf4\xe9u\xb2\xe7\xeciy\b\xdb\xc7\xf1\x87\xc9\a\x91\x04J\xc8\x0e\xff|J\'Nxr\x00\xbc\xab5\x9b\x85>\x99\xcaz2\xabKI\xdc\xe4\x9f\xa5\xd0\x0ewm\xe7\xccK\xc9\x8b\x8bE\x89\x03\x00\x00\x00}@Ry\xa69^\xdc\x9d\xa0\x04\xdf \aelO7\xf1\xda\xcc\xa2x\xc2\x9a\xf5\x18F\xa0\x80M\xf9,+\xc9\xf7/nt\x9ba\x14\x1b\x18\xdd\x18X\xd2o\x15\x97L\xe6\xb5\xba\xc7\xf2W\n\x7f\x14ZIL:T\x1bd\x19\x8dE\x9c\xb1\xb9JK\x1do\x85\xe9\xa2\xca\x9cd\b\xc8\xbdiQ_L\xb0\xb9 \xf7/F\xfc\'M#,\x84M\xba\xa9\xa2yr\'?f\tb\xdai\xfd\x8c\x9aoj\x84\x03i\x8a|\xf7T;=p\xa2\x98f\xc7\xefu=\x96\xcb\x11\x91\xce\xce\xbev\xaa\xbb\xca\xfa\xa3\xde\xd5\x1f\xd7\x03:12\xf2\xfd\rN\x84=A\xae\x9b3\x81\xa9~\xb7\x80\xd1\xe2\xf6\xf2\xb8\xc9\x8a\xabC\xe2\xec\xb8,j\xe1\xbb\x1b\x1f@', 0x3) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r2, r3, &(0x7f0000000040), 0xfffb) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000740), 0x24, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0x0, 0x0) ioctl$EVIOCGBITKEY(r4, 0x80404521, &(0x7f00000000c0)=""/62) fcntl$addseals(r3, 0x409, 0x8) fchmod(r3, 0x0) dup3(r2, r3, 0x0) shutdown(r2, 0x1) [ 1115.689030] binder: 18665:18672 got transaction with invalid offset (2315314202375356416, min 0 max 24) or object. [ 1115.717239] binder: 18665:18672 transaction failed 29201/-22, size 24-8 line 3197 [ 1115.729625] binder: 18665:18672 got transaction to invalid handle 16:51:03 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000280)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000300)={r3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00'}, &(0x7f0000000240)=0x78) openat$zero(0xffffffffffffff9c, &(0x7f0000000340)='/dev/zero\x00', 0x30302, 0x0) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@random={'osx.', '/selinux/avc/cache_stats\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x10, &(0x7f0000001000)=ANY=[@ANYBLOB="bfa20000000000007b12f8ff0000000015010100000000007a02f8ff0000000015010100010000007a02f0ff0100000015010100020000007a02f8ff0200000015010100030000007a02f0ff0300000015010100040000007a02f8ff0400000015010100050000007a02e0ff05000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000000aaaad81db3eae4d88c6bb76daaaaaa0008004500ffffff000000000010907800000000000000000000"], 0x0) 16:51:03 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) munlockall() preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x1, 0x2000) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd1, 0x5, 0x10, 0x8, "28fdf196b505d30961050f5aacb367f7a8012dee54e5107b8afe222c6dab005bd12cbe34b0c1096a75e9617b9461abafe139d75de9444f63cad291de7de17b53", "2a06e1174367fe70aeae194633a5756acdd9ca98032b7c20b824a63f9e060c37", [0x9, 0x200]}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$selinux_user(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r2, &(0x7f0000000480), 0x2ec, 0x0) [ 1115.736295] binder: 18665:18672 transaction failed 29201/-22, size 0-0 line 3012 16:51:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="9f06000000000000000000dfb5e0a620df93835ada2c85430000000080"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1115.786149] binder: undelivered TRANSACTION_ERROR: 29201 [ 1115.792846] binder: undelivered TRANSACTION_ERROR: 29201 16:51:03 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000080)=""/44, 0x2c}, {&(0x7f0000000200)=""/36, 0x24}, {&(0x7f0000000280)=""/54, 0x36}, {&(0x7f00000002c0)}, {&(0x7f0000000300)=""/202, 0xca}, {&(0x7f0000000400)=""/83, 0x53}, {&(0x7f00000004c0)=""/155, 0x9b}, {&(0x7f0000000580)=""/99, 0x63}, {&(0x7f0000000600)=""/31, 0x1f}, {&(0x7f0000000640)=""/207, 0xcf}], 0xa, &(0x7f0000000800)=""/86, 0x56}, 0x20}], 0x1, 0x60, &(0x7f00000008c0)={0x0, 0x989680}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000940)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000a80)={&(0x7f0000000900), 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x88, r1, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x60, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'syz_tun\x00\x00\x00\x00\x00\x01\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x153, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001400090100000000000000000a000000", @ANYRES32=r3, @ANYBLOB="080008008402000014000100fe8000000000000000000000000000aac5cdaa4f11576f4fa1f91e9bff5ed9d788befb14151cbef0621a632a549a6c5b68ff0ec698e545a845cc4e0c80da4c57b0daf76bdacbb102ce12671b9a44496dd1abb90c70306582061b7c13d5ca641208e687db846c6448e5bbbba60ac4d0fc294301f9b8093c9ee6ceb432f3a568e077a0b9300effec10ac12a5c6dc269e000224a3001dc6609e0773415b92097944918cc6fdd8e68e0ea3f96963"], 0x34}}, 0x0) [ 1115.882596] binder_alloc: 18685: binder_alloc_buf, no vma [ 1115.888321] binder: 18685:18689 transaction failed 29189/-3, size 0-0 line 3135 16:51:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400202) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bic\x00', 0x4) [ 1115.933630] binder: undelivered TRANSACTION_ERROR: 29189 [ 1115.939313] binder: send failed reply for transaction 2042 to 18685:18689 [ 1115.949781] binder: undelivered TRANSACTION_COMPLETE [ 1115.971981] binder: undelivered TRANSACTION_ERROR: 29189 [ 1116.017191] binder: 18699:18704 got transaction to context manager from process owning it [ 1116.045652] binder: 18699:18704 transaction failed 29201/-22, size 24-8 line 3003 [ 1116.055728] binder: 18699:18704 got transaction to invalid handle [ 1116.062629] binder: 18699:18704 transaction failed 29201/-22, size 0-0 line 3012 [ 1116.072141] binder_alloc: binder_alloc_mmap_handler: 18699 20001000-20004000 already mapped failed -16 [ 1116.081973] binder: BINDER_SET_CONTEXT_MGR already set [ 1116.087487] binder: 18699:18704 ioctl 40046207 0 returned -16 [ 1116.093753] binder_alloc: 18699: binder_alloc_buf, no vma [ 1116.099618] binder: 18699:18708 transaction failed 29189/-3, size 24-8 line 3135 [ 1116.108025] binder: 18699:18704 got transaction to invalid handle [ 1116.117050] binder: undelivered TRANSACTION_ERROR: 29189 [ 1116.130405] binder: undelivered TRANSACTION_ERROR: 29201 [ 1116.136180] binder: 18699:18704 transaction failed 29201/-22, size 0-0 line 3012 [ 1116.146018] binder: undelivered TRANSACTION_ERROR: 29201 [ 1116.162642] binder: undelivered TRANSACTION_ERROR: 29201 16:51:04 executing program 4: ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000040)) futex(&(0x7f000000cffc)=0x2, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) rt_sigtimedwait(&(0x7f00005a1000), &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) r0 = open(&(0x7f0000000500)='./file0\x00', 0x4, 0x110) futex(&(0x7f0000000440)=0x1, 0x80000000000b, 0x4, &(0x7f0000d8d000)={0x77359400}, 0x0, 0x0) futex(0x0, 0x10000000000000d, 0x2, &(0x7f0000000480), &(0x7f0000048000)=0x1, 0x0) exit(0x0) r1 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/relabel\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f0000000280)=0xc) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0xfffffffffffffffd, 0x0, 0x1f, 0x0, 0x0, 0x15, 0x0, 0x4, 0xbf, 0xb796, 0x6, 0x1f, 0x5, 0x3, 0x100000000, 0x401, 0x64, 0x0, 0x0, 0x1, 0x0, 0xbf, 0x9, 0x4, 0x2, 0x3, 0x5, 0x2, 0x7, 0x0, 0x8, 0xd4f0, 0x1, 0xda3, 0x80000000, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x4, 0x13}, 0x1000, 0x7, 0x2b5d, 0x7, 0x6, 0x10000}, r3, 0xc, r2, 0x9) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x2, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mlockall(0x2) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000002c0)={0x0, 0x0}) creat(&(0x7f0000000380)='./file0\x00', 0x18) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000300), &(0x7f0000000200)=0x68) creat(&(0x7f00000001c0)='./file0\x00', 0x82) prlimit64(r4, 0x6, 0x0, &(0x7f0000000080)) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0xf7) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$binfmt_aout(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="a23c67f8e342f1c84c3a42026a38aec225e812281dbe5b8f03f27029ef891c55d58ebc69db7813e7d2bbc38dc48350e48d9fe4263839163844b59feb8cb55f06b443538ef6ae861a1b2e7626206d588dbb2605f2dce3d833ab49393f33ceebe31de99c377eff7ecea8b339013c19a70d05a17cacd0185b77b1c7a25dfa2d8fd2f24cd80f76b29b795f27a881179fef3cfdae48567bee3e11639c137b4ea97b757061", @ANYPTR], 0xa2) write$binfmt_elf64(r5, &(0x7f0000000080)=ANY=[], 0x1da) fallocate(r5, 0x0, 0x0, 0x4003ff) write$cgroup_type(r5, &(0x7f0000000240)='threaded\x00', 0xf96d) fallocate(r5, 0x3, 0x5e89, 0xfff9) write$P9_RREADLINK(r5, &(0x7f0000000ac0)=ANY=[], 0xfffffffffffffd15) unshare(0x40000000) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e20, @rand_addr=0x100000000}, {0x306, @local}, 0x4, {0x2, 0x4e24, @remote}, 'nr0\x00'}) 16:51:04 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) r2 = getpgrp(0xffffffffffffffff) sched_getscheduler(r2) recvfrom(r0, &(0x7f00000004c0)=""/220, 0xdc, 0x42, &(0x7f00000005c0)=@llc={0x1a, 0x32e, 0x1, 0x8, 0x2f, 0x4, @link_local}, 0x80) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1}, 0x14) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880)='TIPCv2\x00') sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f00000003c0)={&(0x7f0000000240), 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x9c, r4, 0x14, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffffff}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1b81f2a}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x20044010) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x68, r4, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x200}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x101}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100000000}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x48000800}, 0x6, &(0x7f0000000400)={&(0x7f0000000440)={0x54, r3, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x24, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4004810) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x40, 0x0) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f0000000180)={0xd5, 0x100000000, 0x4, 0x6, 0x6, 0xfffffffffffffffb}) 16:51:04 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f00000004c0)={'security\x00', 0xfffffffffffffefb, "31bbeef212acaf00d0613440ce985dc7bae0c38994c261ec240feb10f3cbe9bdabe22770c980a4e412c8749ded06a842518ee0e8aa085f0d71dbcafd25cc6758edaa9bef18cc401669cb6dcbefc00a17eeab42470316c85b8fa3d6468e5ea3bff5dae05d0c2f7dcc904823decab1709dc0871e8afe9f7279319bdf6771b3925d400f0fe4dcbdedb6c64a789156a481e7c9c64ee22ec722b5d74afd3190"}, &(0x7f0000000240)=0x3a9) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xfffffffffffffd09) timer_create(0x7, &(0x7f0000000440)={0x0, 0x5, 0x3, @thr={&(0x7f0000000280)="b779f8f6e1f39a316b0eb5d4a6c6521eb51f31ea02ff7792a6698689b84d42eecec8c77d4d22331bb95a11e8f149f16c926e0b3008918bf28a1119b2ba56776228ec6df4cc8e428f2a0ce9e3181758446b4e3745f224bbc3305c5959c88becc5c1546aa85e084b55a291bda0d3b2bd2d4ea608e33a43318833b918633d6c1e9b6aa14abaaabbebb357c41ee3ffdf6fc33ea17d1961c5d18da5889b223486bd36bf62", &(0x7f0000000340)="23ef7694f61f4c2452284ec8cec62c0deaa00e0ba66fb2a69ae46051e616ba4a5ed968c3a57e71dab30c7c86170b75e105de7391a7c257ecbfdf35a6541afba65e85dce8d590bf4bd6e78e5e632e878c011a9ef0020e2f6e68d7784c2332e83c4df37e07d890baffe3f4494f4f7736a7af67f8f228ba5aec0b0fe34d92696d97afc82811633d2752b34ddc6528b43041759eae94edb6795808cd2cb725c771de1b2812e08349501e1ffa8006ec4b0f531e7450d530a90d58309715be7423c670a7228a65be797cac96a287eaeb2e0dc351230fdbbdb4b70bf001dcc882a14db014"}}, &(0x7f0000000480)=0x0) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0) ioctl$BLKREPORTZONE(r3, 0xc0101282, &(0x7f0000000180)={0x100000000, 0x1, 0x0, [{0x8, 0x8, 0xab3d, 0x7ff, 0x0, 0x9, 0x7fff}]}) timer_getoverrun(r2) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) 16:51:04 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x200000, 0x0) ioctl(r0, 0x7, &(0x7f0000000180)="0628a60151819725fc3076080dd79f5ea0a9f8824f99da1822decb0b15bc2fa723") write$P9_RREAD(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0xe9) ioctl$KDMKTONE(r0, 0x4b30, 0xfb8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x7fffffffffffffe, 0x0) ioctl$TIOCSCTTY(r1, 0x540e, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e21, @remote}, {0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x1, 0x800, 0x3}) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000140)=@buf={0x87, &(0x7f0000000080)="7e21fec8e3d8962a16c846cbc7f956830f3f728fa3697353519a83c50b30d15526bbe7a96de1940e1dafb8de761f1a0ad73affb2f05d3b7f3aff1321352d41f2017615124cb176220ffd820fb838ebc2a7c308a2d51bfc15170a202c70151e318ee7bced8cca0059f7684acbfb4064650d64e04c628db381c2eee9c390141f1e961ea86f6b1291"}) 16:51:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4172bcd1308b3253, 0x0, &(0x7f00000003c0)=[@reply={0x40406301, {0x0, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000100), &(0x7f0000000140)=[0x78]}}], 0x0, 0x0, 0x0}) 16:51:04 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000c000000d1298846fa36339bd8022c9dbc5323ee00000000007b61381718d25687871014000000000095"], &(0x7f0000f6bffb)='GPL\x00', 0xffffffffffffffff, 0x3c5, &(0x7f00001a7f05)=""/251}, 0x48) fcntl$getflags(r0, 0xb) 16:51:04 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000806, &(0x7f0000001180)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='sit\xb0\x00', 0x10) sendto$inet(r0, &(0x7f00000003c0), 0xed5f0dd4, 0x0, 0x0, 0x184) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000000)={{0x2, 0x4e22, @rand_addr=0x1}, {0x1, @broadcast}, 0x10, {0x2, 0x4e22, @multicast1}, 'caif0\x00'}) shutdown(r0, 0x400000000000001) 16:51:04 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="0180431b00001c000000000004907809000000e8ffffff000000000003907800000000000000000000007358b395e67a9a8e038d"], 0x0) 16:51:04 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x400) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0x7, 0x4, 0x478, 0x278, 0x0, 0x0, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000200), {[{{@arp={@broadcast, @multicast1, 0xff, 0xffffffff, @mac, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}, @mac, {[0x0, 0xff, 0xff, 0xff, 0xff]}, 0x1, 0x3, 0xfe44, 0x1, 0x100000001, 0x80000001, 'bond_slave_0\x00', 'sit0\x00', {0xff}, {0xff}, 0x0, 0x140}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={[], 0x2b}, @empty, @empty, @local, 0xf}}}, {{@uncond, 0xf0, 0x138}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz1\x00', 0x8}}}, {{@uncond, 0xf0, 0x118}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x20}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) write$P9_RREMOVE(r2, &(0x7f0000000040)={0x7}, 0x7) fcntl$notify(r2, 0x402, 0x8000001c) flistxattr(r0, &(0x7f0000000080)=""/204, 0xcc) write$P9_RLERRORu(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="0d0000000701000000bf0a0000fc7918e2c829072ec6a1e319424149d1b48607c1f0471c30c71be2a65cdd2b27760bc7ebec6161815b2a69c8442294a75eab6da4fde16be5e19c7c605cf5453b797c18aa9a6d7a791a1d26928da54bc2bc81d2b621f85e76c19f8ad01789197402278324f0070a6d9738e8822e6c55ba57a3b77dcdc3f7dea09dc36b204790d96a78833e7385262c572714ca06e8482b7ed4f4d25f59bf7dae46d132f43e1ae73aecce9fa93f99d111c2ddd8122c461640abffb8f3e994a9abcfd5"], 0xd) [ 1116.259853] binder: 18714:18718 got transaction to context manager from process owning it [ 1116.284796] binder: 18714:18718 transaction failed 29201/-22, size 24-8 line 3003 [ 1116.311138] binder: 18714:18718 got reply transaction with no transaction stack [ 1116.327699] binder: 18714:18718 transaction failed 29201/-71, size 0-8 line 2920 16:51:04 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000440)="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", 0x1000, 0xfffffffffffffffb) keyctl$read(0xb, r0, &(0x7f0000001440)=""/140, 0x8c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x4002, 0x40) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000180)) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) execveat(r2, &(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)=[&(0x7f00000002c0)='syz'], &(0x7f0000001700)=[&(0x7f0000000400)='user\x00', &(0x7f0000001600)='syz', &(0x7f0000001640)='user\x00', &(0x7f0000001680)='\x00', &(0x7f00000016c0)='*[\x00'], 0x1400) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f00000000c0)={@dev, 0x0, r6}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="0063404001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000186d9f2cc1bce50c5a28224cd480550b4cab39309e1d9b4869d8f87796a09fd75cf23acff6d51ee82632f2ba2b82b53f1b9d20a0de124e871307c7bc4b264449abb38c695d4764d077f932e1ac04b5490a933f8dc1a838992018b951106b08ce8ca1f549f210f2a55f12efd54d8a3959547f8064b765fe92a90da264f62dd245d942c5188fc47b7002fb541b19ea2f325ea6efd18c597054dcd8bf95c14a3ef7e6d9372b244d"], 0x0, 0x0, 0x0}) 16:51:04 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x480, 0x0, 0x0, 0x0, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000180), {[{{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="3f6e16bec2f6", @dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x8, 0x4, 0xffffffff}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @empty, @broadcast, 0x1, 0xffffffff}}}, {{@arp={@empty, @local, 0xff, 0xffffff00, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}, @empty, {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}, 0x83fa, 0x7, 0x2, 0x6, 0x1000, 0xff, 'veth1_to_team\x00', 'ip6gretap0\x00', {0xff}, {}, 0x0, 0x100}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x4000, 0x0) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) 16:51:04 executing program 0: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x2000, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000040)=""/186) ioctl$TIOCSCTTY(r0, 0x540e, 0x6) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000100)='veth1\x00') ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000140)=""/148) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000200)={0x7, 0xc0c, 0x8}) fallocate(r0, 0x10, 0x10001, 0x5) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000240)="4779cfe18a78f4a0ba499487720d4abe", 0x10) r1 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)="f5713c331bea2b82f1433b79f37ad72d6381e01699", 0x15, 0xfffffffffffffffa) keyctl$describe(0x6, r1, &(0x7f0000000340)=""/187, 0xbb) close(r0) write$binfmt_elf32(r0, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x100000000, 0x8, 0x75, 0x2, 0x101, 0x3, 0x6, 0x8001, 0x33f, 0x38, 0x16f, 0x4, 0xff, 0x20, 0x1, 0x3, 0x80, 0x100}, [{0x0, 0x8, 0xffffffff, 0x8, 0x80000000, 0xe3, 0x7, 0x4}], "5be8a2d51ab4fca8f5f1b868fb99b7d0bef010ca86adecf3d35735c8a775035a3c0a9b916d09bc2f6df03e97c80825dbb20a70d1a9aa9951242562a93f2ba9f104ac1407448d3bd348669b1fde43fa838fee39b59b339f45f611ceeff32b3a", [[], [], []]}, 0x3b7) prctl$PR_GET_DUMPABLE(0x3) ioctl$BLKFRASET(r0, 0x1264, &(0x7f00000007c0)=0x3f) fallocate(r0, 0x23, 0x4, 0x8) r2 = dup2(r0, r0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000800), 0x4) sendto$unix(r0, &(0x7f0000000840)="0bb6aa31118287d1a88c6283741ec2a96f6e7c3d2eab533dbdbe2e92e6e2bae1079ce1302d96f1565fc7e635cc8345779aea326668ea02ac1d82fd9ec1cc1b09fc7fea8802a6de5d41a0983a1e6b222c828aec2a3e1fae733ffcb313ce75019d465d0620166b1046e747558aac072f1f0ce0e39a5b28fc460b24bdc0f8a1b027", 0x80, 0x0, &(0x7f00000008c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sched_yield() write$apparmor_current(r0, &(0x7f0000000940)=@profile={'stack ', 'user\x00'}, 0xb) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000980)=""/89) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000a00)={0x472, 0x4, 0x3ff, 0x8}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000a40)=0x401, 0x4) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000a80)=""/112) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000b00)=0x80000000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/ptmx\x00', 0xc00, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000b80)={0xb, 'syz1\x00', 'syz0\x00', 'syz1\x00', 0x34, 0x8001, 0xd2f3, 0x4, 0x5, 0x4, "d4a5f1c0cc774062c2c3be82d3bfa839add4f160bf78a89ecd14ea22af73fc7bd51016b0380aa051bafb2a358d1f6f73c1e6ae40"}, 0x14c) connect$inet6(r2, &(0x7f0000000d00)={0xa, 0x4e24, 0x7, @remote, 0x3}, 0x1c) listxattr(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80)=""/54, 0x36) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000dc0)={@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x7fffffff, 0x0, 0x2, 0x9, 0x1, 0x1cb}, &(0x7f0000000e00)=0x20) [ 1116.354720] binder: undelivered TRANSACTION_ERROR: 29201 [ 1116.360928] binder: undelivered TRANSACTION_ERROR: 29201 [ 1116.416202] binder: 18738:18742 got transaction to context manager from process owning it [ 1116.440843] binder: 18738:18742 transaction failed 29201/-22, size 24-8 line 3003 [ 1116.461911] binder: 18738:18742 ioctl c0306201 20000040 returned -14 [ 1116.500919] binder: undelivered TRANSACTION_ERROR: 29201 16:51:05 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) select(0x40, &(0x7f0000000940)={0x8f}, 0x0, &(0x7f00000009c0)={0x5, 0x7f, 0x7, 0x3, 0x2, 0x5, 0x80000001, 0x8}, &(0x7f0000000a00)={0x77359400}) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000000)={0xa, 0x1, 0x10000, 0x8}, 0xa) fcntl$setflags(r2, 0x2, 0x1) 16:51:05 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000000aaa467aaae0008004500001c000000000004907809000000ffffffff0000000000039078"], 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000140)={'HL\x00'}, &(0x7f0000000180)=0x1e) 16:51:05 executing program 2: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockname$unix(r0, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) r1 = gettid() r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x80000) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={'bond0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r4, &(0x7f00000002c0)}, 0x10) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f00000014c0)=r1) ptrace(0x10, r1) wait4(0x0, 0x0, 0x0, 0x0) 16:51:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/enforce\x00', 0x1d9902, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) r3 = openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x10000, 0x0) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000140)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x14, r4, 0x804, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) 16:51:05 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@mcast1, 0x4e23, 0x0, 0x4e23, 0x85, 0xa, 0x80, 0xa0, 0x8, 0x0, r1}, {0xffffffffda71f366, 0x8, 0x2, 0x40, 0x4, 0x0, 0x6, 0x1}, {0x7, 0x6, 0x5, 0x4}, 0xfffffffffffffff8, 0x6e6bb8, 0x0, 0x1, 0x2, 0x2}, {{@in=@multicast2, 0x4d3, 0xff}, 0xa, @in=@rand_addr=0x7, 0x3504, 0x4, 0x3, 0x7fff, 0x8}}, 0xe8) timer_create(0x7, &(0x7f0000000000)={0x0, 0xd, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_delete(r2) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000058, 0x0) 16:51:05 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) io_setup(0xd1, &(0x7f0000000040)=0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000140)) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f00000000c0)=0x7fffffff) io_setup(0x400, &(0x7f0000000000)) write$P9_RLOPEN(r2, &(0x7f0000000100)={0x18, 0xd, 0x2, {{0x62, 0x4, 0x6}}}, 0x18) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0}]) 16:51:05 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={r1, @empty, @multicast1}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0008004500001c00009b020004907809000000ffffffff0000000000039078"], 0x0) [ 1117.366361] binder_alloc: 18764: binder_alloc_buf, no vma [ 1117.387771] binder: 18764:18769 transaction failed 29189/-3, size 0-0 line 3135 16:51:05 executing program 4: r0 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)="945643245bde3aa7374b44f70db88005a855e39269520b82ce4126ff6a664be4d61c9fbc2bdf29cf321901e65e4ab330a539ce51bfa1375fae61d4787bdabd372eab05198193d53ef3ad3a47db5fab46d6a41e4eb654383ca3a36828e05a38bf0e3c839a2edd34e61ecb2ef8d55071731b0381df7e47d9c994263fad93d1567dc4a6c6e1635c320a7845835146a84c68a1540166b5a853aaf90c1ad53fadb3e87de469361d426fba10ee1aaa213352c437aa2328c686d769c251c27a6f8a4563727ceb9d13c9534cb801bf3890e03dc78489d2b14ab9af85888bace29828", 0xde, 0x0) r1 = request_key(&(0x7f00000002c0)='syzkaller\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)='wlan0\x00', 0x0) r2 = add_key(&(0x7f0000000380)='cifs.idmap\x00', &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000400)="4cc407", 0x3, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000500)={r0, r1, r2}, &(0x7f0000000540)=""/178, 0xb2, 0x0) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) personality(0x20008) uname(&(0x7f0000000440)=""/176) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0)='\x00', 0xffffffffffffffff}, 0x30) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xdc, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1, 0x44}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0xfb, &(0x7f00000006c0)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xffffff97]}, 0xffffffffffffff01) 16:51:05 executing program 5: sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x13, 0x0, 0xfffffffffffffff8) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000040)={'hwsim0\x00', 0xcbf}) r1 = socket(0x200000000010, 0x80003, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x52) write$UHID_SET_REPORT_REPLY(r2, &(0x7f00000000c0)={0xe, 0xa, 0x7, 0x2b8bd3fe, 0x41, "d3694af0ec110d918ec2e69d85591f6eeeab35ad33134608a67be16d026ec0af5d4124b65c84ce645cdb200340d981432df9caf04d6acddb6d3c94ff93b68effc6"}, 0x4d) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace(0x8, r3) write(r1, &(0x7f0000000400)="240000002600ff000000000000007701000000ff010000000000000008ffffff0100ff10", 0x24) 16:51:05 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x18f040, 0x32) ppoll(&(0x7f0000000140)=[{r0, 0x4}, {r0, 0x200}, {r0, 0x1}, {r0, 0x4202}, {r0, 0x2000}, {r0, 0x8000}, {r0}], 0x7, &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={0x3}, 0x8) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000200)=0x8) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') r2 = socket$inet6(0xa, 0x5, 0xfffffffffffff800) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000900)={0xffffffffffffffff, r1, 0x0, 0xfd27, &(0x7f00000008c0)='\xe8\x00', 0xffffffffffffffff}, 0x30) getpgrp(r3) fcntl$getown(r1, 0x9) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000540)={0x0}, &(0x7f0000000880)=0xc) ptrace$pokeuser(0x6, r4, 0x10007fffffff, 0x81) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") r5 = creat(&(0x7f0000000440)='./bus/file0\x00', 0x1) rmdir(&(0x7f0000000580)='./bus\x00') r6 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_int(r6, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x12d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2}) epoll_create1(0x80000) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000300)={0x3, 0x0, [0x0, 0x0, 0x0]}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000480)=0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0xfe, 0x3}, 0x20) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000004c0)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x1}) ioctl$PERF_EVENT_IOC_REFRESH(r5, 0x2402, 0x8001) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000500)='cubic\x00', 0x6) r7 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r7, r7, &(0x7f00000000c0)=0x202, 0xdd) mremap(&(0x7f0000001000/0x1000)=nil, 0x7ffffffff000, 0x1000, 0x0, &(0x7f0000000000/0x1000)=nil) 16:51:05 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x160) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) [ 1117.439136] binder: undelivered TRANSACTION_ERROR: 29189 [ 1117.448381] binder: send failed reply for transaction 2057 to 18764:18769 16:51:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x4000000000008) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000000c0)={0x2, 0x203, 0x5, 0x8001, 0x80, 0x3}) clone(0x0, &(0x7f0000000440)="86c8f2734447d08b4d0bde4f45417201cbb3f00d6c6324d9c608d75d7d3d5dfda601d7dfa13507475257b17ebea84c9bb872e730d74a1c25cd864172586ab027c5741bcd37b346a01aca68189a5e035ab7e03214d8018866c8c505f33051c4345a6042c68a77e4e94a5947223dd23b863871b70ff14a07099db97b22b828ddb7147f4a1b25d09727e7899d2e640bfb0ed5b58394c7654f2519c310e67db08ea33b5c94f0a60f29693aef939e17238c8f2cb611e2bf4f404351e313ca8ed0f513674ac61b3df25d6973c81d5f932b1ae7b9c7cf1f5668245827d8532db24dc6cc1818e3c1f5809b5c3da5e9a6a6ee9155c5", &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000280)="58755086d9e640341261eb225f96b29c08af360bffdbde25a5441d0cb82920d7deccd18e108ca5915fdfada4c74661148bff6256421400c557f078563c6eff33f022ca6998bd77111a772bb8d798d3") socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_GET_KEEPCAPS(0x7) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1117.487732] binder: undelivered TRANSACTION_COMPLETE [ 1117.511088] binder: undelivered TRANSACTION_ERROR: 29189 [ 1117.539576] binder_alloc: 18797: binder_alloc_buf, no vma 16:51:05 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="b4000000000000006b0000000000a3c3b10537f8fdb84aa95bad2e234895aaca416fab3b4206bbb29122137dc4204d36caecaaceb99a6e89b7b8dc7f181c9de835b758a428c5ac716a161f"], &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2'}, 0x48) r1 = socket$unix(0x1, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) getsockopt$sock_buf(r1, 0x1, 0x1a, 0x0, &(0x7f0000000040)=0xfffffffffffffde5) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) 16:51:05 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast2, 0x4e21, 0x6, 0x4e24, 0xee88, 0x2, 0xa0, 0x20, 0x87, r1, r2}, {0x6, 0x3, 0x6, 0x4, 0x0, 0x7b, 0x0, 0x54}, {0x7f, 0x35, 0x8}, 0x2, 0x6e6bb6, 0x2, 0x1, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d2, 0xff}, 0xa, @in6=@loopback, 0x3505, 0x3, 0x3, 0x4, 0x80000000, 0x1, 0x6}}, 0xe8) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={r1, @local, @multicast1}, 0xc) syz_emit_ethernet(0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0x0) [ 1117.564856] binder: 18797:18801 transaction failed 29189/-3, size 24-8 line 3135 [ 1117.589558] binder: 18797:18812 ioctl 40286608 200000c0 returned -22 [ 1117.633154] binder: 18797:18801 got transaction to invalid handle [ 1117.645344] binder: 18797:18801 transaction failed 29201/-22, size 0-0 line 3012 [ 1117.679236] binder: undelivered TRANSACTION_ERROR: 29201 [ 1117.685145] binder: undelivered TRANSACTION_ERROR: 29189 16:51:08 executing program 2: socket$inet(0x2, 0x4000000000000001, 0x0) add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000000200), &(0x7f0000000240), 0x0, 0xfffffffffffffffe) flistxattr(0xffffffffffffffff, &(0x7f00000008c0)=""/249, 0xf9) keyctl$setperm(0x5, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000010003b0e000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="430200000000000008000a00", @ANYRES32=0x6, @ANYBLOB="1800120008000100767469000c00029ceaef08aa245bc77fb3121341abf4834c2c27281a80187cb2ae4df50200"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000580)) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @multicast2}, {0x0, @random="59a310eebccc"}, 0x0, {0x2, 0x0, @dev}, 'veth1_to_bond\x00'}) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001000), 0xc5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500)={0x0}, &(0x7f0000000640)=0xc) syz_open_procfs(r1, &(0x7f0000000680)='uid_map\x00') r2 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r2) sendto$packet(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x2000005) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) 16:51:08 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/icmp\x00') openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000180), 0x4) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r2, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) 16:51:08 executing program 0: perf_event_open(&(0x7f0000940000)={0x20000000000002, 0x70, 0xee6a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0xffffffffffffffff) setsockopt$inet6_mtu(r0, 0x29, 0x4c, &(0x7f0000000000)=0x2000000, 0x4) 16:51:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r0, &(0x7f0000000000)=@rc, &(0x7f00000000c0)=0x80) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x101, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, [{0x4, 0xa}]}]}, 0x28}}, 0x0) 16:51:08 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(0x0, 0x0) fsetxattr$security_smack_entry(r1, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) prctl$PR_GET_CHILD_SUBREAPER(0x25) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) ptrace$getregs(0xc, r3, 0xd19, &(0x7f00000002c0)=""/228) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000280), 0x4) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000000ce, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) 16:51:08 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair(0x7, 0x3, 0x5, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:51:08 executing program 4: clone(0xfffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="240000005e0007031dfffd946fa2830020200a0009000300ff1d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) readv(r1, &(0x7f0000000580)=[{&(0x7f0000000080)=""/157, 0x9d}, {&(0x7f0000000140)=""/114, 0x72}, {&(0x7f00000001c0)=""/79, 0x4f}, {&(0x7f0000000300)=""/238, 0xee}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000400)=""/88, 0x58}, {&(0x7f0000000000)=""/39, 0x27}, {&(0x7f0000000480)=""/243, 0xf3}], 0x8) 16:51:08 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000280)={0x0, 0x81, 0x10001, 0x0, 0x6}) ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000200)) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x8005) mkdir(&(0x7f0000000240)='./file0\x00', 0x1c1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000180)=0xc) chdir(&(0x7f0000000980)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000a00)={&(0x7f00000009c0)='./file0\x00'}, 0x10) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000340)={{0x2b, @local, 0x4e24, 0x1, 'lblcr\x00', 0x0, 0x80000000, 0x7f}, {@rand_addr=0x9, 0x4e23, 0x3, 0x80000000, 0x1400000000000, 0xfffffffffffffffb}}, 0x44) 16:51:08 executing program 0: r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TCSETS(r1, 0x5402, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) [ 1120.381385] binder_alloc: 18825: binder_alloc_buf, no vma [ 1120.388223] binder: 18825:18829 transaction failed 29189/-3, size 0-0 line 3135 16:51:08 executing program 2: syz_emit_ethernet(0x6e, &(0x7f0000002b40)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}]}}, @gre}}}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0x1, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x5) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r0, 0xbd2f}, 0xc) 16:51:08 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death={0x400c630f, 0x1, 0x2}], 0xf9, 0x0, &(0x7f0000000440)="141aa6bd68f5ee69a80efe0bda19eb28977e7c9643a3fa65307873a23248a28a316c26a17e540b8149f0cfa3ae1c9fcaa56dae01cab4d27929837cc7a58d7be6c918d8e9d92208aabcb09e83005edfd15ddac671b93113f1139416889af23a679e10e96f0225643c79e17b5c2eb4d9dc94105dc3bbc35a0393de1ee32be5bdc9700fb9aadd69abec940119809750f07704960b18887c7fb691a9bad2fb98ef3bf91b6cf95bedea3dcfbba1a732a394ecb9250f5d64bf6bef3da66f2e2dde7fb96e20ea487ae580107d5f03a1f7628715afd64cc3b9ecb7c8ef3b6e886cc9b3a44976ead61a54f9cbe380f6b18d92ac68515b02cb8ade316517"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x1f) [ 1120.475498] binder: undelivered TRANSACTION_ERROR: 29189 [ 1120.481383] binder: send failed reply for transaction 2065 to 18825:18829 [ 1120.495521] binder: undelivered TRANSACTION_COMPLETE [ 1120.505401] binder: 18844:18848 ioctl 5402 0 returned -22 [ 1120.519227] binder: undelivered TRANSACTION_ERROR: 29189 16:51:08 executing program 0: r0 = epoll_create1(0x80000) r1 = socket(0xd, 0x2, 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = inotify_init() r3 = open(&(0x7f0000000280)='./file0\x00', 0x30000, 0x40) write$P9_ROPEN(r3, &(0x7f0000000300)={0x18, 0x71, 0x2, {{0x81, 0x0, 0x8}, 0xc2}}, 0x18) inotify_add_watch(r2, 0x0, 0x3) write$binfmt_elf32(r1, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x7f1) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r7, 0x208200) r8 = open(&(0x7f0000000140)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r8, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x3b4, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r11, 0x29, 0x1b, &(0x7f0000000000), 0x14) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) fsetxattr(r5, &(0x7f0000000100)=@known='trusted.overlay.redirect\x00', &(0x7f0000000180)='{:lowlan0bdev#/\x00', 0x10, 0x3) syz_emit_ethernet(0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaa786ddc19f25308b082737fe803600000000724be8a03fd50ce4f4ee0000000000000000bb000000000000000000000000000000000420880b0000000000000800000086dd080088be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) dup3(r12, r11, 0x0) write(r6, &(0x7f00000001c0), 0xffffffea) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000000)=0x6) 16:51:08 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file1', [{}, {0x20, '}-+proc'}, {0x20, '$-}'}, {0x20, 'keyring]bdev[vboxnet0'}, {0x20, 'selinux\x8a\' '}, {0x20, '$wlan0\''}, {0x20, 'eth1&keyringself)}'}, {}, {0x20, '#^procposix_acl_access'}, {}], 0xa, "88ea2b75c8f635f8f2c0bba47cddf07763b935902ecc51c49640076b4e8487edfed5c3589baed1117964f9ff12f46a2cd579904c5a24ce236504d102fb48034fc592c719538cddc9382cf7c13a5a7d2ca9134b3a50797a2ca91d417cd64a98de755d67eafdee2e338445613c4e4b8bfa295479fe8afb05f09e7d19efc326b7fd2694e8cb83cffa27ba14b6c08cab1bb8b90b30ece2f119286aaefb"}, 0x108) mknodat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000100)='./file1\x00', 0x400000000001) [ 1120.525358] binder: 18844:18853 ioctl 5402 0 returned -22 [ 1120.529371] binder: 18851:18857 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 1120.543953] binder_alloc: 18851: binder_alloc_buf, no vma [ 1120.563130] binder: 18851:18857 transaction failed 29189/-3, size 0-0 line 3135 16:51:08 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) r2 = fcntl$getown(r0, 0x9) ptrace(0x4207, r2) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) 16:51:08 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x400000, 0x0) ioctl$RTC_VL_READ(r2, 0x80047013, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000140)=0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1120.616620] binder: undelivered TRANSACTION_ERROR: 29189 [ 1120.622364] binder: send failed reply for transaction 2070 to 18851:18857 [ 1120.654877] binder: undelivered TRANSACTION_COMPLETE 16:51:08 executing program 2: r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000200)="2400000021002551075c0165ff0ffc020a00000000100f0007e1000c0800060000ffffff", 0x24) fcntl$setsig(r0, 0xa, 0x31) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0xa, &(0x7f0000000000)='^security\x00'}, 0x30) fcntl$setown(r0, 0x8, r1) [ 1120.675506] binder: undelivered TRANSACTION_ERROR: 29189 [ 1120.699239] binder_alloc: 18870: binder_alloc_buf, no vma [ 1120.712689] binder: 18870:18873 transaction failed 29189/-3, size 0-0 line 3135 [ 1120.725387] binder_alloc: binder_alloc_mmap_handler: 18870 20001000-20004000 already mapped failed -16 [ 1120.735861] binder: BINDER_SET_CONTEXT_MGR already set [ 1120.742414] binder: 18870:18873 ioctl 40046207 0 returned -16 [ 1120.748708] binder_alloc: 18870: binder_alloc_buf, no vma [ 1120.763832] binder: 18870:18881 transaction failed 29189/-3, size 24-8 line 3135 [ 1120.771912] binder: 18870:18873 got transaction to invalid handle [ 1120.778659] binder: undelivered TRANSACTION_ERROR: 29189 [ 1120.784544] binder: undelivered TRANSACTION_ERROR: 29189 [ 1120.790320] binder: 18870:18873 transaction failed 29201/-22, size 0-0 line 3012 [ 1120.798142] binder: send failed reply for transaction 2075 to 18870:18873 [ 1120.812150] binder: undelivered TRANSACTION_ERROR: 29201 [ 1120.822284] binder: undelivered TRANSACTION_COMPLETE [ 1120.833683] binder: undelivered TRANSACTION_ERROR: 29189 16:51:09 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0xfe) write$9p(0xffffffffffffffff, &(0x7f0000001300)="97cac37d80fe3b545d8cd5b4a4521962fab9dd2e5ed6e7b57aa6d481c515b5fc530ff7b54f5b9da8fecf1b9e5e06c4066f41de73d5639178356e15107ce0fd81d6f155414ea08ed4955334cddce566b8458c466cea60261271529dc4aedb9444101910c69d0039a2ff34ec8d8090d6c99184c87f889381d813a16331a965bdc00f123e0d7605c780e5d22e961a9eacd71d12ae9d4b39bc9439ca92f4cac13e78dba68f3b430de799e31e6fb83f0dda147f08e8fac1", 0xb5) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x80000001, 0x7ff}) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x2e7) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000001100)=""/126) write(r1, &(0x7f0000000200)="b626e04915cad817258f158e8b5bd400512ca27550958f5ed2249a6129021fccf9b169ccffe6ffd9e3d8b0aaa396254f858454ee9060cb0ad482e375ddb80c8713d7fc3a31b9aba6a9379f7970a73c67ac94d2c2f11ebe3b7a4012ac3fd4c7794116211db3387a", 0x67) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000001180)={0x9, {{0x2, 0x4e24}}}, 0x88) fallocate(r1, 0x0, 0x8, 0x5) bind(0xffffffffffffffff, 0x0, 0x0) ioctl$VT_RELDISP(r1, 0x5605) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x0, 0xffffffffffffffc6, 0x72, &(0x7f0000000280)="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", 0x0, 0xffffffffffdffffe}, 0x1) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='/\x02ro\x05\x00\x00\x00tap\x00\x89PY7/\x91\x99\xaaS\xf0\xbb\\\xf7\xb6L\xb73ke\x02d\xb1\xf1\xf8\x1d\xb6,\xc99\x96h\xf3\x01\xb3f\x8a\xd0+G\xddC\x9d\xcfE?\x1b\xce\xff;OZ\'E\xf5', 0x2761, 0x0) ioctl$TIOCMGET(r2, 0x5415, &(0x7f00000013c0)) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f00000010c0)='keyring\x00', &(0x7f0000001280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$link(0x8, r3, r4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001240)='./cgroup.net/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0xc0c0583b, 0x0) connect(r0, &(0x7f00000012c0)=@nl=@unspec, 0x80) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x6) prctl$PR_GET_NO_NEW_PRIVS(0x27) 16:51:09 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x146) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) 16:51:09 executing program 4: r0 = socket$inet(0x2, 0x803, 0x10) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040), &(0x7f00000000c0)=0x4) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000240)={@multicast2, @local}, 0xc) open$dir(&(0x7f0000000000)='./file0\x00', 0x280, 0x80) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000140)=0x6) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000080)={@multicast2, @local}, 0xa) 16:51:09 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='\x00\x00\x00\x00\x00\x04\xd8\x0e\xdf\xe9\x9e\x84@\xbc\xff\x86\x86[\x10\xf9\xfa\\\x00\xef\xbd.Y\x18\fFvsY\xc1\xd0\x1f\x12\xec<\x9e9\xd6\xcaF\xae\xa0j\x19\xd9\xb7\x16\xae\x86C\xf9\'\x1e~J\x9f\x0evX\x02\xe7\x82\xa3\x03X\xea\x17\x12\xda5\xb4\x8a\xe6\xc2\x80\xf4\x8e\xfa$\a`\xb1\xe0\xc5M\x9c\xcf\x84\b\xfe\xe6\xa3\xce\x85 \xd4\x98\xac\x86V\f\xae\xae?#r\x16\x13C:\xa0\xcd\x94\x18\xd5\x90\xac\xac0\xf8\x1e}\xae\xd1q\xa88\xb40\xa1\x12c') exit(0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0xa0001, 0x0) fdatasync(r0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x584c07d9, &(0x7f0000000980), 0x100000000000008a, 0x0, 0xfffffffffffffe03}, 0x0) sync_file_range(r1, 0x8, 0x4, 0x5) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r2, &(0x7f0000000040)=""/46, 0x2e) socket$inet6(0xa, 0x3, 0x2) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000d2c000/0x3000)=nil, 0x3000, &(0x7f0000000480)=""/4096) set_robust_list(&(0x7f0000000340)={0x0, 0x1c53}, 0x18) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x4, &(0x7f0000130000/0x800000)=nil) munlockall() r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f00000002c0), &(0x7f0000000300)=0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r5 = socket(0xa, 0x1, 0x0) write$P9_RFLUSH(r2, &(0x7f0000000280)={0x7, 0x6d, 0x2}, 0x7) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', 0x0}) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000000240)={0x7, 0x5}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={@loopback, @remote, @loopback, 0xf5d, 0x4, 0x0, 0x0, 0x0, 0x0, r6}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000180)={@mcast2, @mcast1, @loopback, 0x0, 0x7, 0x0, 0x0, 0xffffffffffffb8fa, 0x83420004, r6}) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000008c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="756e696174593d38804c00"]) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0xfab, 0x0, 0x3, 0x2, 0xffffffffffffff9c, 0x7}, 0x2c) ioctl(r7, 0x2, &(0x7f0000000040)="9c58537850b37e31c359136f77452a8c30b4186506") 16:51:09 executing program 0: r0 = epoll_create1(0x80000) r1 = socket(0xd, 0x2, 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = inotify_init() r3 = open(&(0x7f0000000280)='./file0\x00', 0x30000, 0x40) write$P9_ROPEN(r3, &(0x7f0000000300)={0x18, 0x71, 0x2, {{0x81, 0x0, 0x8}, 0xc2}}, 0x18) inotify_add_watch(r2, 0x0, 0x3) write$binfmt_elf32(r1, &(0x7f0000000f40)=ANY=[@ANYBLOB="7f454c4639ff02b0800000000000000003003e00050000007e030000ff7f2000010008000700ff010000000004000000050000007f0000007000000001040000f8ffffff00000000060000003bf82add70a0b8d34aa5e94e8fbbd4a691a7dcafd5c1a0a790f217d4dbe597a4900f644ad11f00e4fcaed54fdd88eb4ee6f69c3c9928ace18c1e073ce01bc978d8697e6fbd2817f071700cd9fb4e94c927069ffe482f9ac8065949485fe8478f97616bebe202f64ce0ef430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000065a7f133e6bb897e1b20170000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffdd000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0a239e9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ff0000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ed561975b0e5a9c38e3361e4385953a46c99705210f0f6b2c9ffcd1faf5e1fc26256ea000000000000000000000000"], 0x7f1) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r7, 0x208200) r8 = open(&(0x7f0000000140)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r8, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x3b4, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r11, 0x29, 0x1b, &(0x7f0000000000), 0x14) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) fsetxattr(r5, &(0x7f0000000100)=@known='trusted.overlay.redirect\x00', &(0x7f0000000180)='{:lowlan0bdev#/\x00', 0x10, 0x3) syz_emit_ethernet(0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaa786ddc19f25308b082737fe803600000000724be8a03fd50ce4f4ee0000000000000000bb000000000000000000000000000000000420880b0000000000000800000086dd080088be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) dup3(r12, r11, 0x0) write(r6, &(0x7f00000001c0), 0xffffffea) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000000)=0x6) 16:51:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000100)='./file0\x00', &(0x7f0000000540)='security.SMACK64\x00', &(0x7f0000000580)='/selinux/enforce\x00', 0x11, 0x3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000e6c8dc63404021000002000000000000000000000000000000000000007bebd26c2a7e00f06a944a16c5eceeda500000005876000000fcffffff00000000001000005893991d00000000000000000000"], 0x0, 0x0, 0x0}) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x680000, 0x0) getsockopt$inet6_tcp_buf(r4, 0x6, 0xd, &(0x7f0000000480)=""/171, &(0x7f00000000c0)=0xab) setsockopt$packet_buf(r4, 0x107, 0x5, &(0x7f0000000380)="c132adb9b5b3ddd8597fc61a5b095607c937e02b7b0a5ebe5eda37dfe4a30fb8820e00aee5b60711344fba506d85990d608b4dd99226427e092389e60fc4648d2c48146d13921a59424ade2c8189bfb46a037cd6872c5acce305eddac39694c1ca7f14125b1283f61ab21c7c6985cb45d739c68d580458c9b23e3a89122287e28bd6eea5fc83004256081ce0e223a89be714d61edd6110f21f373282049797b2e05dd855bd2226685c454551255f72a62953e8a0b64e67b3360b65c6d99bd7e94477d70167d399ecb9cef5e8f73ea83715059fc458cb73449b0018f2679caecfaf15559d", 0xe4) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000140)) 16:51:09 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x0, &(0x7f0000000140)=ANY=[], 0x0) 16:51:09 executing program 4: r0 = open(&(0x7f0000000140)='./bus\x00', 0x8000, 0xc0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000180)=0x8, 0x4) set_robust_list(0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x208200) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000000)) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1b, &(0x7f0000000300)={@loopback, 0x0}, &(0x7f0000000340)=0x14) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000380)={r2, @loopback, @dev={0xac, 0x14, 0x14, 0x20}}, 0xc) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000100)={'veth0_to_hsr\x00', {0x2, 0x4e21, @loopback}}) r3 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002012, r3, 0x0) ioctl$KDGKBMETA(r1, 0x4b62, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x80) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f00000000c0)={0x5, &(0x7f0000000040)=[{0x0, 0x3, 0x80, 0x548c}, {0x7, 0xffffffffffffffff, 0x9, 0x96}, {0x82, 0xfc, 0x80}, {0xffffffffffffffe1, 0xffffffffffff0000, 0x30000000, 0xffffffffffffffff}, {0x40, 0xfffffffffffffffa, 0x8000, 0x277}]}) [ 1121.283737] binder: 18902:18906 unknown command -924450816 [ 1121.293980] binder: 18902:18906 ioctl c0306201 20000040 returned -22 16:51:09 executing program 3: r0 = socket$inet(0x2, 0x2000002, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) r2 = fcntl$dupfd(r0, 0x406, r0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1814084}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0xb02, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) syz_emit_ethernet(0xa2, &(0x7f00000004c0)=ANY=[@ANYBLOB="0180c2000000aaaa5aaa810007008137ffff00900504ffffffff000000000000fc00ffffffff0000000000000d747ddce0c91097b0cdb6ba66fb00756e1dadc5a2d144ec17922b6d9f040fcb87bbe05512529cad8e24343a8ce9944c3d6cddaffc9a96fcc941d0f0e2e06f69c3939a5861599fb30dbe63794b441a4852d2434e1fed6bdb19e9d53681d1458f2c26aa6e450bb13b8742cf428241d1a342a2078395199900000000000000"], 0x0) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendmsg$FOU_CMD_GET(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xe0}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x20, r4, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40048d4) 16:51:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f00000000c0)=""/106, &(0x7f0000000140)=0x6a) r3 = socket$netlink(0x10, 0x3, 0x15) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000001, 0x10, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1121.355661] binder: send failed reply for transaction 2082 to 18902:18906 [ 1121.367535] binder: undelivered TRANSACTION_COMPLETE [ 1121.403235] binder: undelivered TRANSACTION_ERROR: 29189 [ 1121.423851] audit: type=1400 audit(1547398269.331:13489): avc: denied { create } for pid=18920 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 16:51:09 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000240)={0x0, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}, 0x8, 0x0, 0x0, 0x0, 0xffff, &(0x7f0000000200)='bcsh0\x00', 0x749930ce, 0xffffffff, 0x401}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x80, 0x0) getsockopt$inet6_int(r2, 0x29, 0xfb, &(0x7f0000000180), &(0x7f00000001c0)=0x4) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) [ 1121.472300] binder_alloc: 18920: binder_alloc_buf, no vma [ 1121.491754] binder: 18920:18930 transaction failed 29189/-3, size 0-0 line 3135 16:51:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f023c123f3188a070") mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0xc, &(0x7f000095bffc), 0x4) [ 1121.563912] binder: undelivered TRANSACTION_ERROR: 29189 [ 1121.569569] binder: send failed reply for transaction 2086 to 18920:18922 [ 1121.586062] binder: undelivered TRANSACTION_COMPLETE [ 1121.617072] binder: undelivered TRANSACTION_ERROR: 29189 16:51:09 executing program 4: r0 = socket$unix(0x1, 0x3, 0x0) r1 = accept(r0, &(0x7f00000000c0)=@nl, &(0x7f0000000040)=0x80) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e22, @loopback}, 0x2, 0x0, 0x0, 0x0, 0x38d9, &(0x7f0000000140)='bond_slave_0\x00', 0x8000, 0x8, 0x100000000}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x9, 0x3, 0x2e0, 0x0, 0x0, 0x0, 0x130, 0x130, 0x248, 0x248, 0x248, 0x248, 0x248, 0x3, &(0x7f0000000200), {[{{@ip={@broadcast, @empty, 0x0, 0xffffffff, 'bond0\x00', 'ip6_vti0\x00', {0xff}, {}, 0xef, 0x2, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x9875, 0x8a6}}, @inet=@rpfilter={0x28, 'rpfilter\x00'}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x8, 0x1, 0x7, 0x2, 0x7fffffff, 0x1000, 0x4, 0x200]}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x1b}, @local, 0xff, 0xffffff00, 'veth1_to_team\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x6, 0x1, 0x2}, 0x0, 0xb8, 0x118, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[], 0x1f}, 0x1, 0x6, [0x17, 0x23, 0x34, 0x21, 0x2d, 0x2a, 0x23, 0x6, 0x26, 0xc, 0x2d, 0x0, 0x32, 0x1a, 0x3b, 0x9], 0x3, 0x4, 0x7fff}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000080)=@ethtool_cmd={0x1f}}) 16:51:09 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x32, &(0x7f0000000140)={@local, @dev, [{[{0x9100, 0x3ff, 0xfffffffffffffffd, 0x2}], {0x8100, 0x7ff, 0x80, 0x1}}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 16:51:09 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000014c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) mmap(&(0x7f0000889000/0x2000)=nil, 0x2000, 0x200000b, 0x6031, r0, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mprotect(&(0x7f000079b000/0x3000)=nil, 0x3000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 16:51:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x5, 0x4c8) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/212, 0xd4}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000001240)=""/187, 0xbb}, {&(0x7f0000001300)=""/135, 0x87}], 0x5, &(0x7f00000000c0)=""/8, 0x8}, 0x40) ioctl$TCFLSH(r0, 0x5405, 0x0) 16:51:09 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0xfe) write$9p(0xffffffffffffffff, &(0x7f0000001300)="97cac37d80fe3b545d8cd5b4a4521962fab9dd2e5ed6e7b57aa6d481c515b5fc530ff7b54f5b9da8fecf1b9e5e06c4066f41de73d5639178356e15107ce0fd81d6f155414ea08ed4955334cddce566b8458c466cea60261271529dc4aedb9444101910c69d0039a2ff34ec8d8090d6c99184c87f889381d813a16331a965bdc00f123e0d7605c780e5d22e961a9eacd71d12ae9d4b39bc9439ca92f4cac13e78dba68f3b430de799e31e6fb83f0dda147f08e8fac1", 0xb5) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x80000001, 0x7ff}) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x2e7) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000001100)=""/126) write(r1, &(0x7f0000000200)="b626e04915cad817258f158e8b5bd400512ca27550958f5ed2249a6129021fccf9b169ccffe6ffd9e3d8b0aaa396254f858454ee9060cb0ad482e375ddb80c8713d7fc3a31b9aba6a9379f7970a73c67ac94d2c2f11ebe3b7a4012ac3fd4c7794116211db3387a", 0x67) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000001180)={0x9, {{0x2, 0x4e24}}}, 0x88) fallocate(r1, 0x0, 0x8, 0x5) bind(0xffffffffffffffff, 0x0, 0x0) ioctl$VT_RELDISP(r1, 0x5605) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x0, 0xffffffffffffffc6, 0x72, &(0x7f0000000280)="9a6768b02d8b76d609e19c241619bc8e50c2f1a5ea09b4cd4629aa5db2040fc5fe94bf1c69395cd7925eb88ff0ae0abcb433e3e77565546c73cccbab92553a564ac626033f9bc8d12dc69796e0b38e768a3820e9803a39040d30785a8fdc76e87a92850df0c2452f377198cb32699844d410945a8bdb5c67ddf9b47944e659104e99caebaa8474929c4b8516ed2a80677a5a18253d0727aa8c0f5292848d80b1f6913fe1512d9cc8441ff7ea9d998e6514232c6256c0efdc9cd737de041df98a13a21af3b539971d470c395b122b6921e68330451ee916d941675d555b491a29e4eaf7061b4265fd976f1457205e82879dc180c4eea0d4aeaa331ff4402249783a303037c29b863d368833282c1d78948c3aa5d960dd059b6296227930bcb593005b4fb4caffcc62ff76260f472425f80af1b3bedfb051e818be70da91147439c8c88d15ca91c936bb3ccc73299beb5a0c39df2991c77639d2f35633a9fbd2ed157ba43a2b072d200bef3921572285a8f8c89779466629e58d9d010b9512a79ec97928972c82d88a27e005cf28fc38a26c444865ec2b5231ac2c7b70f4c1f4d18d5f3ee5c3636fcd9be58e29a3c7a6a313d6d0eaf08a3544566fb04de50f58818571651e510b2da6037c204ca9dd341e1a2830a54e893ae949e98189f1a2893c4580e559473eb6108aaa335d3c5a22fe0295949b9d4191eb81ec5da5b7eb69560980365e7cfb28e885a76e50adecc8f2afd9a9a1dfff0232d1094b2447eb58f2d49ee6e5ad285647b284b4d5b1aa63e47fbd3390b8c42b174871a016707c5d39cf26c771f0b9770bd580d50d58e786edf6771d96cfb3d6b64a3cccc7acd75e86c275e90cb5089d801b6f176d4d658922af07208f43dfd47349b54cec2567e8833db7e401b3a23ebb43452df1b99fcf5bd2ac609dfd80ef4c57f28c98256253826992478801b4fd80f844c25c2383377f0aad49be1ffd677cfd13401e061aaf213598e3c1ac36ba6cb6ee3ae2b77e532c911accf1faae720b9fb8f5653302ee83b8e414da29c31bd735cf006fb4720904965da622616fe94320dc3db8eabc0c19904177e6c8390ad50a79d6fb3e45517d7a35e38d1e6cd8c4c0bd86726ea677dc94cacc5eda761c493e0a645d4fb10c3f7505e405cfc40197af0fd90f1eccd448cf76c44ed21dc2c2865cc8c075f204fafb50ebb612c567213ff4741530a15fc11e26afdf3156f10d3f7d65f9e5246beac0674f4ae9bba300173de9482903f9897efebceb8e0f42d3e970c593114b5ff274f076c4b2048b567ab41fbe052ed8982460c22a2fc6b7aa882365b53311bd5fbc48bcd85077eed0734e786c57f5704dfaaee774c54d1d736b373497408bc3a8e9cd122a27d61b470ab7facff55e1d1da5bab1f873d33999eba4881d616ba55ac7014a01067cf4c803b13ff531a8439663d4426a85d03c8429ae06e17f90601ff0612c6870fd7e6044bbc7bc0b97c6d6efe05434984c12dc41e0092f50a3c59105c56f1be814606633c0945600d8ed51c05b5f2c4385d58c42e26d156a41cbd7de64116290640843aee40280acde490d7b32ae68b13aaeedc8ad452202f8930f9ac7c88edf3488c3168aa1ade43e174089a64dfd7240025584cb129bf38de87847b18f74afba278a45898736106e852e193c62677d291060d64fc278a58c1bcf1041f692de067c01e755ea128c91977fd5a65572e0edf8093f8bbcc6d1e1181f551b3d2b549ac06729b8245afe280e015fcdcec6cc65915f8d37a8b46fc5baefc90558ae79631f908b783cae80b4ee0eed0f8a4cb603fcec0dc60d637869274d44ad936267ed4d399769cc0cfc2fb295b8d322d99e2b6a344f7f9e7e3a5ec358f0bbd14fe30a57b19436463d323e267e75199f99df03ec9535343048c809dd83af667dc09b2cc9f5687f9b57d2765b5b18554ada9c9a3a13bd84e041c5fe5cc3435fbfcdd589ff6eaa4e20b3c979d428d96726a205fb7dc7ce7ae8f15ef17d8d466dac1cc274d7b2655edb3167c7d5b7ee0c006292727cade70e4afc291469807e04f2742ce44a50554b65f219054d3af6c02128e8cf13bc7f4c4ed036f87c57e725f03f2d84ed0f4728d3e5c9cb6b961d1107cc3b966eaad8ef4b35a55e1a83f1d69280cb57bb0b14adf6aee2485dde508c2f8775300da8b3f02d6fbf3e14aa56aae7dac4a4d3703b85336558e9b622fc2c2159af8561b971cc010d97c0d79b63cbfe49afb97274ec494f93dd577c6812a2b345231da443561d54a7a8d799ee7fc01aa616d3ccf046752961f10ca04158f1d00391d7b1f2a46e611be832964bbc45bdbbd71afb7fce8441ebd88cd44ba398945719e765404fb47e71568e0ad9ee49830eb76561b18862d0e8ca4b433ee8a599efa297001a95d2734573329fb41b006e90c69ab52b92e98ef6db7222e5b22d6da4afdbd213fd9a6e67ebad14e801be4f005c7193294621f9330e4e3905fe3422637f30da72db5ac3c773b143b247ad86b7866220b3345f255ca42a8c33c0543d0fa9dcb8925bd6259c3bfe176d1f461f0e8df231f5fd9e03ba0156bdea50ab1cc8c8bcae13fcf74b054671080b3d3a5875f370ec8a7195260036a6c137693192caae411900ac95fdbe599747466e6a512ca842ad2fbc92cbd55b96e687fd090cd1a913bfd9b654d8a2ca1959e5eeeb5438f0de11485c717b5d4a9ac84f1fde1e5be6414f4afe6c037b4a9be4c50674e877627199fa7695f1b0af7d0d80f38ee26212a3fb97e6b8ab99f2a7cff2a46566341c6b8c6899302a46bcce8eb70966da0a2b01ad73b0732a53f53735664572fa422dae497d621e4e37e1c0d6ee4f286054fbda3961a32f1258258cdc7f73ab50e4d756e23fd0b68b2b8f486931be470f1829031007c27e5c4f710eab0b38b2c96af4f42c0ddec1c93ea288380e2e406f07dea0aeb1424c6f39b27daea40f41ea4a4cb5cbf53bd0dd15d0b107261d4407930b621ac579bdcacc5e512ab30dfbb25d226a4c2dada344df07b67697d29df2c75db6ea6120e9018a136f413c31e5e4d0757d83fa5feab9318b813b56120f4404bd529782155e7e121e22352b1a1d28ce1559b63b934d00e0d3c604f768baba0b9407b5f017cb3c9a88496b8c400e34f835de93420c0f1a9ca593e927e47569f70ccd5d30d7fb4b1279531a4afcc721b12526807cf8f15e03dfc983d9ffd9ca132a93ef9831e08fa4c6eb9ac437d33718ba5d8cc1c37418dca468cac4240c9af27cd770771244fcff5e2efd85322dd8d6b3df2fa2f1507538c193f45d38a5567845c6072aa84c28b4ecb6703acc7d40cb7971c9f5d23c7f7d88eb82add932a46a7a2627a74fff9750c713644ed3a4fc8df52c154e249f196ff7eb85ea074b0a5c3adbfda804d23f7fde1e2495def1ac7fb98eace80023a302e1d05992e84eaeac8d249080f2aaefffa2938d79916a853874aadd08173c5fb4b9df5a9e5dace8d70f2f5963d1910c59781b0c7261bae7634e42367182e2a098316ed069964ddfdd0bf5b84a96e4b2e4b5ff79d71338ad59d51d16baa1535996ac41a239291b2308f375707ee8fb6da99fc48f8a4de8502c85c48d662e23913f21d36b8d521a3549bbb6f472796e0d0b84735a6f2a8a41b75d08400aa73c8ab8ceece607eb0c3703d76152df151ca46a70f7fa39cf32e884278e446949f6840a74c2a5c0622dd13ca6b2d26d24e494a40a646af55829167cc15d66f85ddb2b269930452296e3bd25910634d8cd81ee8a7da2f6bd9dd1b5ff5066e8db69cd11e107162c52d64ef98a206740ee346f5d5680907569d3d399fa625919cc50cfc0bfb1a9baabbe98fd919a8e6f57c6e108bd06e393689a100a0a415b5c06061571130feeb2df105481441939a3575a846db40872ab024e7a1e555b8ff0173450153d66f0558be7583d6bac6d9f2b18206577b8e16dbc5751e93961aab104cce8db406fa3bbf84408f3e5333ab4a5316bbd19898d60ac9c86136b284ff80082940bb29e6d9b3ee493814e85bb381806f34f040ce837e2ce0dbe5d2a57dd4ad1741f8434f3d0fa12994512181627754ad99b4af50f86dc9399458c99327496e23dc1380dd4298f02f31b935331d4793c59da895496b5774f6fb97104c0a8252842b9b01e71002f63f449fbc6589090289282fd987851f9cf161972fce95c122ab4ede641023d4e9b783d1321890069cbe72087d215f88d4fba26f3bdb0dd93f6df5000a98bce9bb3a56c44e53e0361d946944f32348391d1bcd33ad3c621a37bfe874f8462049451fc26ab79eb0fe2c2244fb7d1f36ae6f56c90b1158976b66777d41f571380cb693f28f868bb0d8295d841545b7c151db32b6b42276aab3788d203ee8759f6f6fa7b641f60e0998ee43479c0b21744ae7792ed576b9b75da6b5f89fb46ae2260fef215b1d29bd5c5453e1dbe48c47d1ee262c6cad6a67c5699db18bd1e619cd8f7c9e301428da4ee05f04845ac6743531a44aa799b943c7cb6c612a8763a9da183877390d257a0be41cdad29a819aacf614b7871890ac2da87ac9cf6bf3d38b426a153c025cf5781f7bf59f74aacf89577b2f4fe7088815d45f60eb9b718388f710ddfb7f9f288aa15e56acea2a0486b6c69a4bdaace1a6d2eeb279c665e8759dfca47f3a213b45613d95407dffacbd767eaf7890493b760b282e301618c9e287ef2fe2b4084e03c987035da03ea7b1bdb734a6954c5c2139706eb51420e5c26713470857bcac206bbf6860b61335c447118d1bfae51f7cedef972dfb107a22c06b4fd99c50bc78efad1d641ddb36b79b1e72b775b839fa2ae217e8d6204bcc227d648fa058b4baec156f4a24a7f0e395f0a340b503a8e268210a3e6b247a628e79b922f35d4ac426f05cb1e91ad1d6cae41e49de8afa171326151e11d7813bd69a75e9187b1800cb322f79206461acc4e6c2decf299653abeb8f866cc733cfb88934547304502be", 0x0, 0xffffffffffdffffe}, 0x1) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='/\x02ro\x05\x00\x00\x00tap\x00\x89PY7/\x91\x99\xaaS\xf0\xbb\\\xf7\xb6L\xb73ke\x02d\xb1\xf1\xf8\x1d\xb6,\xc99\x96h\xf3\x01\xb3f\x8a\xd0+G\xddC\x9d\xcfE?\x1b\xce\xff;OZ\'E\xf5', 0x2761, 0x0) ioctl$TIOCMGET(r2, 0x5415, &(0x7f00000013c0)) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f00000010c0)='keyring\x00', &(0x7f0000001280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$link(0x8, r3, r4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001240)='./cgroup.net/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0xc0c0583b, 0x0) connect(r0, &(0x7f00000012c0)=@nl=@unspec, 0x80) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x6) prctl$PR_GET_NO_NEW_PRIVS(0x27) 16:51:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) sched_setaffinity(0x0, 0x2, &(0x7f0000000180)=0x9) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) getcwd(&(0x7f0000000240)=""/220, 0xdc) ioctl$TIOCSBRK(r0, 0x5427) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffd, 0xc3c, 0x400, 0x8, 0x9, 0x80, 0x1, 0x4524, 0x2}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0xfdfdffff}) syz_open_pts(r1, 0x8000) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r4, &(0x7f0000000100), 0x0, 0x20000001, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000340)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@initdev}}, &(0x7f0000000440)=0xe8) sendmsg$nl_netfilter(r2, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x13c, 0x11, 0xa, 0x200, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x6}, [@typed={0x8, 0x84, @uid=r5}, @generic="0d22231651f967e65827a21e1e90cca57f01123acdee3095240d139ce9f7f044427f0c76bb5a2a3e5c2c958b2d4794ce4213797d29e7882259ee18dce998903bec04f0373fa8a1ae4d2989e86aab74eaea08ceee3bdbf421f0f2cecb65df5c05a25ae71b117dbd08a5d3b8ca8631c5355cbffb0ee30fec0cf957a3c91693cafcce038dc18571e098953791c4edc5c27349ce52227815c6fce6f43dabca861b179bad6f4c4b67ba032ec46f7318f243ff0fa1158c3fd0bae41fed2756ac23c8395f3b359f545b90f71015ccdc3faed7d54dbb027222515ebe60a01b5097a9", @generic="bedff353fffbf4b5eaa647aed72a027cc7f0ce3bcb8870bb4011fcac19f8f989eab6b087439edbe21c085c0273c4e72b3fbb4c95103e1c93285acda1527a090375"]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000200)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munlockall() splice(r4, 0x0, r3, 0x0, 0x3cceb664, 0x0) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000040), 0x4) 16:51:09 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x2d4) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @loopback}, 0xfffffffffffffd13) 16:51:09 executing program 1: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0xffffffff, 0x0) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$P9_RWALK(r3, &(0x7f0000000280)={0x4a, 0x6f, 0x1, {0x5, [{0x52ad110eedf8ed8d, 0x3, 0x1}, {0x41, 0x2, 0x8}, {0x2, 0x3, 0x2}, {0x0, 0x1, 0x4}, {0x1, 0x1, 0x6}]}}, 0x4a) ioctl$LOOP_CLR_FD(r2, 0x4c01) fchmod(r0, 0x100) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000140)={0x0, 0xfb, 0xd7, 0x5, 0x1000, "705f8736d38bcd8d0f50b70b74f09283", "1a0265ec09786261039ae3f49f5c9413c88c1d6c1a755f5ab17ed34e215176025bbb94c676823e5c64d9c531957095bdf4303d2eff9bdd0c746e3498a4aee726904db035a4031f5c326fe1dfaaac339b382365d4188c21e7fe0ee740f97d318663b41e11e385155cfb53cb390f946f1d5510152ecf77ac4a22401c4b6610a00cc35d9374fcba5466623fa9c60d8c5246a1f83ae36f81bc8f348bb0fc0e69ddddf5402426c80079c5e63569fd6f26b014edafb9b5fe8a8d581b62a3b3e681dfb69d86"}, 0xd7, 0x1) finit_module(r0, 0x0, 0x2) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x5218}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xdc, r4, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x400}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x232}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4004}, 0x4) fcntl$dupfd(r0, 0x3, r1) 16:51:09 executing program 0: r0 = epoll_create1(0x80000) r1 = socket(0xd, 0x2, 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = inotify_init() r3 = open(&(0x7f0000000280)='./file0\x00', 0x30000, 0x40) write$P9_ROPEN(r3, &(0x7f0000000300)={0x18, 0x71, 0x2, {{0x81, 0x0, 0x8}, 0xc2}}, 0x18) inotify_add_watch(r2, 0x0, 0x3) write$binfmt_elf32(r1, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x7f1) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r7, 0x208200) r8 = open(&(0x7f0000000140)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r8, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x3b4, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r11, 0x29, 0x1b, &(0x7f0000000000), 0x14) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) fsetxattr(r5, &(0x7f0000000100)=@known='trusted.overlay.redirect\x00', &(0x7f0000000180)='{:lowlan0bdev#/\x00', 0x10, 0x3) syz_emit_ethernet(0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaa786ddc19f25308b082737fe803600000000724be8a03fd50ce4f4ee0000000000000000bb000000000000000000000000000000000420880b0000000000000800000086dd080088be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) dup3(r12, r11, 0x0) write(r6, &(0x7f00000001c0), 0xffffffea) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000000)=0x6) 16:51:10 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) sendfile(r0, r0, &(0x7f0000000040), 0xfffffffffffff6a9) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000080)={'sit0\x00', 0x20000000403}) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x4400) fsync(r1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000001, 0x103030, r1, 0x0) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:51:10 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000001240)={0x2, 0x0, @broadcast}, 0xfffffffffffffece) syz_emit_ethernet(0x94, &(0x7f0000001140)={@local, @remote, [], {@llc_tr={0x11, {@snap={0xaa, 0xab, "84", "23067e", 0xfbfd, "34eae7d68797c093cbb99d30d20c56017a3ffb8bc2a16be1c4793a68a74550c815d1bead74a2ee593c9310dceb46e3637ba2a7362520801c00652b33420d5ca08d20d1835c7cbe90d56e91f2349385a9a295df8a65df05896b608dac5dc30c92a254fab795cca2bf5fed119ddf6f51b4b96877d4811ba64b6c3610a89ee5"}}}}}, &(0x7f0000001200)={0x1, 0x3, [0x312, 0x2, 0xa99, 0x3af]}) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) r2 = dup(r0) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000140)=""/4096) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) 16:51:10 executing program 1: syz_emit_ethernet(0x6f, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2ff00001280c20000000800450000610000000000889078ffff7fffac1414aa0420880b0000000300000800000086dd080088be00000000100000000100000000d2a9dbb3b6c978000000080022eb00000000200000000200000000000000000000000800655800000000295470da7bc18c94cb3b3bdc3cebbb12e1aa9e3cf3351125697543f011ba7ddf52ceab86dd4320d96b8f9ebeb5a4e35f8a0a93e54394e74ea570"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000200)={@rand_addr, 0x0}, &(0x7f0000000240)=0x14) r3 = geteuid() setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000280)={{{@in=@rand_addr=0xff, @in6=@mcast2, 0x4e23, 0xe82, 0x4e21, 0x4, 0x2, 0x20, 0xac6dcca778ed600d, 0x3b, r2, r3}, {0x4, 0x5, 0x400, 0x8, 0x4, 0x2, 0x8, 0x1e}, {0x6, 0x2, 0x7, 0x200}, 0x3, 0x0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@dev={0xfe, 0x80, [], 0xd}, 0x4d2, 0x32}, 0x2, @in=@empty, 0x3501, 0x1, 0x0, 0xfffffffffffffff7, 0x1073, 0x7ff, 0x4}}, 0xe8) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000480)={@remote}, 0x14) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x4000000001c, &(0x7f00000001c0)={@remote, r4}, 0xff08) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r5, 0x40087705, &(0x7f0000000040)={0x323, 0x8}) 16:51:10 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2, 0x9) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000530407031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e280000005304ffffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 16:51:10 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_tcp_int(r1, 0x6, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockname(r1, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x80) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000180)={r2, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000001c0)=0x4, 0x4) sendto$packet(r1, &(0x7f0000000200)="b310b5cd3fc6ca952f3e21d6ea4d264033497afa804fa97fc1f0aa69ab9565eaac61198e4725c8625d4165e46732d887d83d85b3d8b0f2c83e5666d40376c45afe88b7173d595293a9adb703d23552e30fc91039a924ef03d7947e66019a2ce9029867060c3763ea74c8d65922a84b8348a6e0df3a74d199ab6a42d2347745d7175bcdcca860c26e7419", 0x8a, 0x0, &(0x7f00000002c0)={0x11, 0x1d, r2, 0x1, 0x400, 0x6, @random="cde0f9254125"}, 0x14) getsockopt(r1, 0x80, 0xfffffffffffffc00, &(0x7f0000000300)=""/94, &(0x7f0000000380)=0x5e) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f00000003c0)) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000400)) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000440)={'bond_slave_0\x00', {0x2, 0x4e22, @remote}}) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x1e) getsockopt$inet_udp_int(r1, 0x11, 0x0, &(0x7f0000000480), &(0x7f00000004c0)=0x4) sendmsg(r1, &(0x7f0000001c40)={&(0x7f0000000500)=@pptp={0x18, 0x2, {0x1, @empty}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000580)="19daa5be2fcc767d017482e3aa291f39d207197f3474e6a4522fccbffe7b70d8f42f42bf937bed7e0af542fdef41c1d1c8f611f147dcd8c7f7026b43692c35506f9d4418e222ad7afb60b4dded938c31335a0a6c9470b4ad78e6a9db7ec34ef879c6eb8d7804831098a536b9cc515a63c85801701ff0734322bfd7901e414f740c6b49207f6e418d4c5d19531559a0c561530f31a8b4162dc600cee7ef99d58b8a95ffaf3a4a2980297808680b3fdc79c2da3d1109a5f8fae1cf805931753bd2c434575d5642d9a3", 0xc8}, {&(0x7f0000000680)="0b976235aaf4513aa815276834d24dbeeec298cc53172e1e5c42fbc1b54918f9bc1de9a16a4a09a65a4837a2b6187bcf94d1d3c4f6a03d58c6ffc7059a10bbddf0dedf4ca271732cfdc94f7ca33e762a9d794521db63cb5a679bf77e8e0a95bae65ae2ccce7969ab3690546b6a8a04a813f606c34970f87bf7ca5dc4bf15ed29b4e0819bd7fe7d077fa3953262483a277f721dd1ae081ea730adc7b92fa7f835535b3fb4f861255b507724659c9fe0cbff1b2993bf472f8ad9f7f72ef8f7fb6fca595c98b5480fe20d7a7ef7f8a589b66ce6bf0757c833886114b77d26666f25", 0xe0}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000001780)="70120171a1af4b5cbbedd4263dde7ec0212d2f17e71fe1e499ca1c49847b3457f29e684d26944f69dbcc30ae7da24380b7dd182aa8f3d6bcbcb61b11c29327d7e4754f83208027d5b275728739514a31e241cdf6c8bcdc826ed95ef7f7f476810438b6fde0ffbb9d721c", 0x6a}, {&(0x7f0000001800)="d63713878c15488c1d58b4483e0e5df6336bb32b78f845a777e215c3e7d93c54a7e8d019596e234b47cbc4b3fa162ff4735a6ffd6aab2a3f03160d8a59feba6ba1d4067d984de215012ffd192f21f561f5e5143cbb885df529719c3cdb8929a61762364dc03243730cdc797980821ba51e92c03de59f9e9fbd76ab0b", 0x7c}, {&(0x7f0000001880)="eee1e42ad7307fc49ade4b616eaa78a92b7ecd1181c296a88629aa0d75736752d7d73db15d6470fb71fe6425802aef95aad919f0c0cb34127d02c7656d431338569c7f0723029e4bf6dc28854c6fda79e4e8b371ed41ac2dd6e502f556ecf98b93e817fd61102f83243c0c2c1765e7f8a91b8ff8bd39c032c80bef104aacba77957dbc6541934ec8578dbcae326b7d3b2a726b177e204a6e3fe453c06e563b6096d2", 0xa2}, {&(0x7f0000001940)="8af050eebb660dc6839b3cb7dee057fbd175f9ec07f68eaec20789b251b2d3966d91f5e27b8e98b48305bd2c6c96d4ff66fe9c595ecd7c299977a794cd773fa155af9ae35baa4b099e", 0x49}, {&(0x7f00000019c0)="1dc7c15be3db3eb387c4af3b09ba5bb613661eedc947ecc74fae770e3de1584b5580333607584a6665cee2f525e2c1cddc99d17cf89246277fbd06f5904bb0cd64f8249d541e4177898cba915b52bd9fda21abdbf61f8a29a007c46a92f3a1057ee9cfaf66f95fdf7ab606f0a6e7947839ad77d7ecbb48aff2850f0629ca6c748d52870f6282d1336f99c71aec8c25d728dcb026ed50a852a9f088db67f63ff3cad4ae03a9e0745da7f6977b6319fbde6ef323f4964af36116a10f768a68fef3bea9668f980e10d015911882390ad48e010fc399c8c83d", 0xd7}, {&(0x7f0000001ac0)="64680cb9fe7d28d3b70c4c6a72f59e1900b50f1c819363801e6014ae8bb9b21316ba38f76ddaff80a3b7999a5612c5716d32e3db27c7bfede11ac90726867e4b78aa5238aecf1183638999f486efdd5c38d00df84dfa205bfecc83ea6d4c9562e712161b44b7b3f1d68d04558770981cfae27fb9f1c8309b45e4cf98924d5402063a1376f8dc319a5f", 0x89}], 0x9}, 0x81) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = open(&(0x7f0000001c80)='./file0\x00', 0x200001, 0x8) ftruncate(r1, 0xfff) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000001cc0)) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000001d00)={0x80000000, 0x69}) ioctl$IOC_PR_REGISTER(r4, 0x401870c8, &(0x7f0000001d40)={0x5, 0x2}) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) write$binfmt_script(r1, &(0x7f0000001d80)={'#! ', './file0', [{}, {0x20, '*bdev{'}, {0x20, 'bond_slave_0\x00'}, {0x20, '$+&ppp0GPL\''}], 0xa, "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"}, 0x102d) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000002dc0)={'nr0\x00', {0x2, 0x4e22, @multicast1}}) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000002e00)={0x1ff, 0x5, 0x2, 0x0, 0x0, [{r1, 0x0, 0x1f}, {r3}]}) dup3(r0, r3, 0x80000) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000002e80)={0x1, 'bond_slave_0\x00'}, 0x18) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000002f00)={0x0, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @multicast2}, 0xbea598129d6f0202, 0x0, 0x0, 0x0, 0x1, &(0x7f0000002ec0)='syz_tun\x00', 0xfef, 0x400, 0x7b800000000000}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000002fc0)={'ip6gre0\x00', &(0x7f0000002f80)=@ethtool_rxfh={0x47, 0x6, 0x830e, 0x1ff, 0x4, "00d667", 0x9}}) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000003000)={r2, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000003040)={0x8, 0x7, 0x8000}, 0x4) setxattr$trusted_overlay_redirect(&(0x7f0000003080)='./file0\x00', &(0x7f00000030c0)='trusted.overlay.redirect\x00', &(0x7f0000003100)='./file0\x00', 0x8, 0x1) 16:51:10 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xa5) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000000aa9c18aaaa0008004500001c000000e0ff00000000000000ffffffff0000001e00079078"], 0x0) [ 1122.336290] audit: type=1107 audit(1547398270.241:13490): pid=19000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=' [ 1122.336290] ' 16:51:10 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x800, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000200)=0x2) r1 = fcntl$getown(0xffffffffffffffff, 0x9) r2 = syz_open_procfs(r1, &(0x7f0000000080)='sched\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x6) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x8060, 0x0) fcntl$setsig(r5, 0xa, 0x11) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f00000000c0)) fcntl$setlease(r5, 0x400, 0x1) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140), 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@initdev}}, {{@in6=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000000400)=0xe8) r6 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$int_in(r3, 0x5473, &(0x7f0000000240)=0x7) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000100)={0x6, 0xe986, 0x9, 0x4f6ee820, 0x40}) fcntl$setlease(r5, 0x400, 0x0) [ 1122.381939] audit: type=1107 audit(1547398270.241:13491): pid=19000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg='VÚZ€Ñ‹ãL…FÈ$9)Û$² Ó~ÐÀ' [ 1122.467401] audit: type=1107 audit(1547398270.271:13492): pid=19000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=' [ 1122.467401] ' [ 1122.504024] audit: type=1107 audit(1547398270.271:13493): pid=19000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg='VÚZ€Ñ‹ãL…FÈ$9)Û$² Ó~ÐÀ' 16:51:10 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000013000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000010000)={0x1}) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) fcntl$lock(r1, 0x6, &(0x7f0000603000)={0x0, 0x0, 0x0, 0x0, r2}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) 16:51:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000000)) fsetxattr(r0, &(0x7f0000000040)=@random={'security.', 'GPL\x00'}, &(0x7f00000000c0)='/dev/ptmx\x00', 0xa, 0x2) 16:51:10 executing program 3: r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) finit_module(r0, &(0x7f0000000140)='\\\x00', 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) 16:51:10 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00'}, 0x10) r0 = dup(0xffffffffffffffff) unshare(0x4000000) mkdir(&(0x7f0000000800)='./file0\x00', 0xfffffffffffffffd) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='ramfs\x00', 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000200)={0x100000001, 0x81, 0x6, 0x86, 0x8001}, 0x14) syslog(0x5, &(0x7f0000000080)=""/109, 0x6d) r2 = socket$inet_udp(0x2, 0x2, 0x0) set_robust_list(&(0x7f0000000440)={&(0x7f00000002c0)={&(0x7f0000000280)}, 0x2, &(0x7f0000000340)={&(0x7f0000000300)}}, 0x18) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000001640)=0x3, 0x4) r3 = socket$packet(0x11, 0xa, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, 0x0, 0x0) getsockopt$packet_int(r3, 0x107, 0x0, &(0x7f0000000380), &(0x7f00000003c0)=0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000000180)={0xa, 0x4e24, 0x6, @mcast2, 0x55f}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x200, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) setns(r0, 0x20000) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc0\x00', 0x0, 0x0) 16:51:10 executing program 0: pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) fcntl$setstatus(r0, 0x4, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f0000000040)=""/131, &(0x7f0000000100)=0x83) r2 = perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd4b, 0x0, 0x0, 0x2000000000000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xd5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x5, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x1000000000, 0xfffffffffffffffc, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) fallocate(r3, 0x1, 0x0, 0x10000101) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) r4 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000380)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x28}, 0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000240)=r4, 0x2e5) readv(r2, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/37, 0x25}, {&(0x7f0000000500)=""/126, 0x7e}], 0x2) setxattr$security_ima(0x0, &(0x7f0000000300)='security.ima\x00', &(0x7f0000000340)=@md5={0x1, "a7c4c0214378353a347cc0fe4855c5bc"}, 0x11, 0x1) 16:51:10 executing program 4: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000006c0)=0x3, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) r3 = dup3(r1, r1, 0x80000) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xaf, @mcast2, 0x1}, {0xa, 0x4e20, 0x8, @remote, 0x2}, 0x40, [0x7fffffff, 0x6, 0x10001, 0x7ab, 0x24000000000100, 0xffffffffffffc0e1, 0x8, 0xfffffffffffffffd]}, 0xf) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="020400000300600000000000fff55b4202938207d9fb3780398d537500000600791f301ee616d5c01843e06590080053c0e385472da7222a2bb40100af5ba514d40000c3b542914c5e61eaa96fa9a1e8d1843e770afd6e9ef5837dbd", 0x5c, 0x0, 0x0, 0x0) r4 = dup3(r0, r0, 0x80000) io_setup(0x782d406e, &(0x7f0000000140)=0x0) io_submit(r5, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x1a53, r1, &(0x7f0000000180)="08cee316e3a41056d9181cfb50ae18f9db5f36aaaf0c95ea9b100badc9982fb018e63389c09ab3183eafe44d35fec45159f63a3bd7f2662e439d99e7962c1034a50fbdd5114501f1af5d0f850da94662d2f21684f0179f09a1f24a7951ba3364", 0x60, 0x9, 0x0, 0x2, r4}]) getsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000100)=0x4) 16:51:10 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x3}) close(r0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000080)={0x6, 0x1, 0x2}, 0xc) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x83eb) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f0000834000)={0x7fffffff}, &(0x7f00000c1000), 0x8) dup2(r2, r1) write$P9_RSETATTR(r2, &(0x7f0000001500)={0x7}, 0x7) 16:51:10 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) dup2(0xffffffffffffffff, r0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000000180)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) ftruncate(r0, 0x40007) r2 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x0) dup2(r1, r2) 16:51:10 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000180)="4ef131fdc8a4cbf1d770556028c10f1f21827291f63285df5393729932a461d4a9f3c0a7e6d9ed6139b7605420079ac72ce9bbf6b52109f1a190cd357677003b4c2839f6288206dc2dae7b83a0b8a37d3704425b17978981f62deb950d3b37af19b2357ebf7fd68e443ab6c861c37b2660dca0060bb7391acff78599dc46635dbd5eeeecede449b00f19f7690198d51f1ced60c37a3a15044c8aec1d7c093354907f91dff09e81cbe5558cdcede4a2597c5979b8679692726b28cb9eee637b915c45e8") setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) 16:51:10 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0x16a) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x80000001) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f00000000c0)='TRUE', 0x4, 0x3) splice(r0, 0x0, r3, 0x0, 0x3, 0x0) 16:51:10 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0x66) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) clock_gettime(0x0, &(0x7f0000001800)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000015c0)=[{{&(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000001c0)=""/162, 0xa2}, {&(0x7f0000000280)=""/196, 0xc4}, {&(0x7f0000000380)=""/166, 0xa6}, {&(0x7f0000000440)=""/23, 0x17}, {&(0x7f0000000480)=""/10, 0xa}, {&(0x7f00000004c0)=""/215, 0xd7}, {&(0x7f00000005c0)=""/100, 0x64}, {&(0x7f0000000640)=""/124, 0x7c}], 0x8}, 0xe8}, {{&(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/220, 0xdc}], 0x1, &(0x7f0000000900)=""/171, 0xab}}, {{&(0x7f00000009c0)=@nfc, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000a40)=""/247, 0xf7}], 0x1, &(0x7f0000000b80)=""/29, 0x1d}, 0x1f}, {{&(0x7f0000000bc0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000c40)=""/237, 0xed}, {&(0x7f0000000d40)=""/203, 0xcb}, {&(0x7f0000000e40)=""/129, 0x81}, {&(0x7f0000000f00)=""/211, 0xd3}, {&(0x7f0000001000)=""/191, 0xbf}, {&(0x7f00000010c0)=""/200, 0xc8}, {&(0x7f00000011c0)=""/51, 0x33}], 0x7, &(0x7f0000001280)=""/11, 0xb}, 0x5}, {{&(0x7f00000012c0)=@sco, 0x80, &(0x7f0000001500)=[{&(0x7f0000001340)=""/207, 0xcf}, {&(0x7f0000001440)=""/160, 0xa0}], 0x2, &(0x7f0000001540)=""/122, 0x7a}, 0x7}], 0x5, 0x2000, &(0x7f0000001740)={r2, r3+30000000}) 16:51:10 executing program 5: syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x838, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x10180, 0x0) ioctl$void(r0, 0x544f) sendmsg$key(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030c00000000000020006a59134851bebee07ce548bbbb00000002001900400000000000bc0000000000030006001400000002000000e0000054d81458186fe8b9000200010000001d000000020200044a7b030005000000000002000000e0003f010000000000fca0d9"], 0x60}}, 0x0) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) r2 = syz_open_dev$binder(0x0, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x13, 0x0, &(0x7f00000000c0)="f2f5c457370033eacac6e885283df2609dfafd"}) 16:51:10 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) dup2(r0, r1) 16:51:10 executing program 3: r0 = socket$inet(0x2, 0x0, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) eventfd(0x6) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) 16:51:10 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x20) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000340)={0x0, 0x0, 0x800000000000012}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000b00)=0x0) fstat(r0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getegid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001100)=0x0) r7 = getuid() r8 = getgid() ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000002300)=0x0) stat(&(0x7f0000002340)='./file0/bus\x00', &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x9, &(0x7f0000002400)=[0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xee00, 0xee00, 0xee01, 0x0, 0xffffffffffffffff]) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000002440)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002480)={0x0, 0x0}, &(0x7f00000024c0)=0xc) r14 = getgid() r15 = getpgrp(0xffffffffffffffff) fstat(r2, &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000002c40)='./file0/bus\x00', &(0x7f0000002c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000004d40)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000004d80)={{{@in6=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f0000004e80)=0xe8) getgroups(0x5, &(0x7f0000004ec0)=[0xee00, 0xee01, 0xee00, 0xee01, 0x0]) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000005280)={0x0}, &(0x7f00000052c0)=0xc) stat(&(0x7f0000005300)='./file0/bus\x00', &(0x7f0000005340)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000053c0)='./file0\x00', &(0x7f0000005400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000054c0)={0x0, r2, 0x0, 0x31, &(0x7f0000005480)='$%userppp1systemvboxnet1ppp0eth0bdevppp0$selinux\x00'}, 0x30) r25 = geteuid() r26 = getgid() fcntl$getownex(r0, 0x10, &(0x7f0000005500)={0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000005540)={{{@in=@local, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000005640)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000005680)={0x0, 0x0, 0x0}, &(0x7f00000056c0)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000005700)={0x0}, &(0x7f0000005740)=0xc) lstat(&(0x7f0000005780)='./file0\x00', &(0x7f00000057c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000005840)=[0xee01, 0x0, 0xee00, 0xffffffffffffffff]) r33 = getpgid(0xffffffffffffffff) fstat(r0, &(0x7f0000005880)={0x0, 0x0, 0x0, 0x0, 0x0}) r35 = getgid() ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000005900)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000005940)={{{@in6=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000005a40)=0xe8) getresgid(&(0x7f0000005a80), &(0x7f0000005ac0), &(0x7f0000005b00)=0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000005e40)={0x0}, &(0x7f0000005e80)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000005ec0)={{{@in6=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f0000005fc0)=0xe8) r41 = getegid() r42 = getpgrp(0x0) stat(&(0x7f0000006000)='./file0/bus\x00', &(0x7f0000006040)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000060c0), &(0x7f0000006100), &(0x7f0000006140)=0x0) r45 = fcntl$getown(r1, 0x9) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000006180)={{{@in=@multicast1, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@initdev}}, &(0x7f0000006280)=0xe8) getgroups(0x2, &(0x7f00000062c0)=[0xee01, 0xffffffffffffffff]) sendmmsg$unix(r0, &(0x7f0000006440)=[{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000100)="d1b52381c6eddb95dcca10e0bd74774b3b5bdd8bc66a3e5bc6c51dde667b923ffc3f81ba2d10f0fab1862019c04bb368e58d869b9fd65ce1238c233905d14d39c9de4144b9670f324acbe8b59f1e4139c9b817279866d15199ed7c254d8a832bb8368e980defba1e21b43ea84f135bc404f123b6ca975c1b34abfd8aa800466798aa2a6e21a9d0706f7f2c35bf52b7d9393eab2ab67f82b3d7f15f8e650e301c1502b97889e39871eeea3ae075f3f446dab3773cffdb07b32c572533ccb68929645430191fdbe50be6ecc481e34b89ad7b0129e3c97e1bcfbe12", 0xda}, {&(0x7f0000000200)="e1ca9eb18d214ea1599adbbc872f5e2b1cefb41b8c36eadfb65dfa54fa703e9bb1ea2f30d9d80f77aa0622fe1b3d5e8407b33c7f5be7b9ab0ddb86760181f6b1b13be4d9419d9787b7e5fdf70e9e282c8953e92c83d1482fb6f551037f6a36fc655c0941fea981eb4dee55bc82c2cee9126637d5dae9ef0e5296c04b30ff72753ad25978789c655d972a23ab8f28b7fc40f1b16e56cf", 0x96}, {&(0x7f00000002c0)="ffeec4317213b995154d746101a8c373debeed26c2817ac09f4f088bf4a4bfdcdd35ca7e5f371e0d20a20e1e2c2bbbf8261400486f99354791b4", 0x3a}, {&(0x7f0000000380)="b71c92c135598607881878cb6c0891e76420400de16e46f4fc2cec862736ae5033b37ed0536f47d6c6776f29fc32038ddebfc775c9e1aa86867e5a6ef8a7af970eb5d62452b26ec939178a33902e6719aa7cb7251eebea8f713a34894a0283528a0d50f53f40496dba58bde835a9deca383dfdaa75551f609717b84557acf83fef6650849f", 0x85}, {&(0x7f0000000300)="c5ee7c1e4f9178c8c3b0c090725bf2f08f0cbefcc05e160b7c67e244b626c1e3753f89ec37ecf85cb0dde9", 0x2b}, {&(0x7f0000000440)="5b11bce6ec850db5550463cf9bf2f0e8c86d8e338f7fedf0f010fc872034b174e44a335f6dfdfadafafca07e2054014a1160c752c8fa692d4ad0ad0bcf0f2700b233ff566047e95b2545c4918d4abf017d6ebd23b87249eaabd893a7d6b1e2e9982e569c743ccf5e2b47b1fb7c5b428c6bd19dfd72531fd1611d72dd84ef3fd29b7d96192f49623ade2d", 0x8a}], 0x6, &(0x7f0000000580)=[@rights={0x38, 0x1, 0x1, [r0, r2, r1, r0, r0, r2, r1, r0, r2]}, @rights={0x28, 0x1, 0x1, [r1, r2, r1, r0, r2]}], 0x60, 0xc0}, {&(0x7f0000000600)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000680)="2b05cb5106e26b6437d3c193b759cd688718b1f679e256f6e5cd47e048012b40279ccb56e1dd303adbc762a87a0ebbe56ccb308b41f6ed2d9a372582266d0543d1631f687df3c56c93d3b208bdb8705d740b52c26d21d05f4e52ec8c1ab499eafe87f099178679ab71c13940b37d713830de1b4698bb763ff9847be8ee6d7511830ddf49d9b9ffcf441739de00a28f5a58ff24a93928b9c062f88aa25cbcb0f54f29346bfd1469e0a0b92108cda6c476145babe8ebb1c2b0315fd40b25da3b49684eed4c5d9cc25cabc605dd4fbab9b9be32d39ba33ad257816709", 0xdb}, {&(0x7f0000000780)="567a952ad96e33266393c4811744b4b383a199447567b8f878da9f2c0ac4599365da986a0e4a48afeb949dee6651f03746cb2302cc43c12fdf9d67c5b2805a2c23ae130e9f2f51e8dbfda57cdcfcb76d54deaef0d5e2e1156e5fa1f472df5f9f2ca7cffc3d6bc0ca40f0b1edc232d31bac468d3f1e782565296f4a5e0cef05672dc57dd4a3", 0x85}, {&(0x7f0000000840)="797d588e4253dc9f5305572a4cdf1636d50b243a85e90043efcd2a206e2805947cd5550401e2cb33239bd267831fd2c6f1ebc7a0c716c8e81519b669bb0a95bf356f15675b593d4eac98bdbdb867fb7c025ad1b1b6a8280158395b5e8e0b55e9ac9daa2e00522b7adb865ac91640145806efa67b7410ac5ee1ba6cf23129fbeb242d7cc72b9b76864557f704e8fc27a6704d3e9d14be1a65966d39c89a11dcf4c8d606e7de0540b5d5f1466a070bbd9bcfbd", 0xb2}, {&(0x7f0000000900)="43d5df761967a198e6720a921a7b950910c2d479deee4cfb35dec86dd65dcd9dce4afe8091cbfd3003eeb323b305450df863caf2a2b8ed57662f1eb9de244e5e292630f7d84b5890245b90ca61430cf1c448d3d0b5de2ecb1c4cd1a95e4b9f6e8a", 0x61}, {&(0x7f0000000980)="7aa122812dbd4770b1d386e200f8bc285c995aabaf1ff3c2160c7a872850d076f4fff2cf0012983284bf79a885ce39458925082c292c661f84c202f4760ed638ab1fae57cfee7528731c0af169259939881776a526c6cc28a5222617eec0a18b5f933a13f0fa13274a07e05a74b23cb839ba909b6b52b5ab8725076a8857267b94812c6fe510918710075fa5e165dfdcaac9e5b186c39ea5fa36daf203df7cfe3e4033b665a87ff77a83fb98b0fe8f99344b3b3c3c2045621381857f4596194f0f09c8bb2f5b425b325775115281cea01ad54165e8fc668dc2e0100a678cc8", 0xdf}], 0x5, &(0x7f0000000bc0)=[@rights={0x18, 0x1, 0x1, [r1, r1]}, @rights={0x30, 0x1, 0x1, [r0, r2, r1, r1, r1, r0, r2, r1]}, @cred={0x20, 0x1, 0x2, r3, r4, r5}], 0x68, 0x20004090}, {&(0x7f0000000c40)=@file={0x1, './file0/bus\x00'}, 0x6e, &(0x7f0000001080)=[{&(0x7f0000000cc0)="5fe47303cfad5b44fd1604341e6af5663c087de3cc69aeedfcfec35ec872a7dca5e477120456d01561dc8fd66b8d6d05c4804cada2f4f2ad156664a9869fabbb42a17eaa2309e222e33d5dc61659e6b6ebffefeacef6225cc8566fa2769b312b8725c1ee8161a8d604bf395239946b6212eb58c2be08cee3be18", 0x7a}, {&(0x7f0000000d40)="f007706f3c5028362d1e7ebb0259085774cabdaf6e9df5f70c450fdf4a05277d6438274472dfdbad21f6ccdb704714f1c4e2d5cc8f99cf6c342cb7173bdae3705341ddc53d93aabe164b1c62baebf515d2f43be4d8a9112f", 0x58}, {&(0x7f0000000dc0)="d68563bc73fd0f5de655aac7300650216a497030bfb33de472fe2d1c79f6e724783ab18c9c7bf31666dfac57b33ec9", 0x2f}, {&(0x7f0000000e00)="1ce5b03df58a333e08c262f8d38b3bd6625dc542c686309d4c8ad490b181bdb2ddf129e5bf7986042f16818eabd8f5dc7eb258994ab4767553d290a2ecafd57200bf5536be9e7e58aef9324c59b399d83d5096176c7ee970be689354c55ba2517b77ce9fc8984a0ce7c4e3f76f7f0fb0dfe7a90983e08a860762b4272e671d4630aeae7fb6d499155e773f25edc0091a96931b476edee5f9757d4f6cbf81c8180496c2e8b6eed3cc98e64535791d4770f27483d6d5735cdd97f9754d9a0b93c205bf94f716e083bf", 0xc8}, {&(0x7f0000000f00)="c2f6c71aa1fb1eab7a7b73325f5ca4aadfcc05c80bd09ef8b01e54bffad62f47769c69707a5338ecef0f7f3fa456a32ecb78b5c59210f3f1847759a429bfbc621acb91b21dd5e21c5052103d8a0c9262b158408756b17af9179601b462c4411721801d02a1765b5045eae748d5df57b3a68654be8448f6b6bbdc765a881b9938d2421212cdcad685c1b11e82f15c7da68d9057ca9d0c5bba8b7da987", 0x9c}, {&(0x7f0000000fc0)="d24141c25a65af44ea767c6e7cc11eec1ab30dd15c9f864b74160f4760d633a956a7d444ce81f0b74d5a3bf97617bf82802248d1fd67e1acec01fe5addd4e4447472c987d737bb7a32f3133e1394bb1947ed0c7ddc80c32c08ee38e85fb59f550244305824cacb5db09c68861dd4e8aa9bbb40b1ca73a9529376382ae2d05454b0efefab50ce324e0331d8", 0x8b}], 0x6, &(0x7f0000001140)=[@cred={0x20, 0x1, 0x2, r6, r7, r8}, @rights={0x38, 0x1, 0x1, [r1, r2, r2, r2, r0, r0, r0, r0, r2]}], 0x58, 0x20000000}, {&(0x7f00000011c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000022c0)=[{&(0x7f0000001240)="5e2af5486842eb6773d2360e8e2a5ce575f2584e9acbfe8f7010e571a9d2425507e0cfd801dfd4da2eb27b137a4be55c8bb4be767a18cb2d2dfad29d8112ad46d3f1281b83c2fe743757d829a9ef0272acd89f7ac58c02", 0x57}, {&(0x7f00000012c0)="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", 0x1000}], 0x2, &(0x7f0000002500)=[@cred={0x20, 0x1, 0x2, r9, r10, r11}, @rights={0x38, 0x1, 0x1, [r0, r0, r2, r0, r1, r1, r1, r2, r1]}, @cred={0x20, 0x1, 0x2, r12, r13, r14}], 0x78}, {&(0x7f0000002580)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002b40)=[{&(0x7f0000002600)="7428e0c9efa9a42094483a5a91121174a6e20fee391911046a1a5d7dbb72ad4117ae1c91ba0fd248177b88aa990ba21dfb3a3718ac6be68e220495ebc05fc6248d26b81ca6e92314f7aef0d102dd808f6b0c475e39bc79635273de7f41d1b71c412d9b4b894026894f59a08afdd20461738439d8c5430969adf12a4ab3d1ff31fb556f97af33b8c85e2cb0d11aedcc5d5c141853404c696865a576d29e77e404a276968e67a7b2673f5e2aaba921399f59168c8b00052e986fcd0dbb6aea187670ce57cd448c559af9fba2dca599804b905f8423401d8b808bae0d9c2113d39f41253cecf2d78a8a481639", 0xeb}, {&(0x7f0000002700)="c73977222cbb1b62106ef1cca498f2e1c18484628f1dd712e912d3c959377c90299c4e4944218fec73f1f711440136a0531d1e0ca604dbb0d3e9de9eed61b3b2ec97101888dde4c55a43758258d915aef81e56fbeac2c66a74c38ae2596b327e095f14279b5b0c4cf523b8710385e7c223cd55db8e581f00b3f5a9", 0x7b}, {&(0x7f0000002780)="4772a4ed347c1ec12802518dbdff2467d7955edaa2d58aaf3970f46ab7138728a4892d982212615f03ae8a7ad5ab8ba77c191819a83fbcd6d21acee6eabc0d15b6ce0513ad039f4a80e40f93b9ab87f60f03517182cf9e", 0x57}, {&(0x7f0000002800)="85f26d6d811df5f8b965bb48ad7275bed13519efd2025cc504dfef50bc5c58daddb9601fa99912cd38ca2ddab87e84da609d44c17f1665ca6600480eb31b1826a3c98e174890907c81edff311033e9d986dfae992b5a13bc58bc40e66beade040497f85961f02c6b9e0d7406b7cef8a76b522fa3bc28c01398382d72e052b7a3dbd9c93c3bb85c4c255405a58e2f", 0x8e}, {&(0x7f00000028c0)}, {&(0x7f0000002900)="bf7a52eb6a7d88f4f18b04b16d896cf3cb9597f936cab065cac87230051e1006f3d3caf5b4bc9c500ed8d1fa4b680946aabe737ab35a14d9ed361a20fe176f4dff48876badbbbfdb2f084827c28229c67d8d84fda98426ef9df6924c7d2059c93c4fe76eeb4641494e288ba66d5fec593685c81464c5f6bca863721ff833e397b734eff52ab4ba2bdf5ca52e862f62c9c0ecf0292261f407a3fda9c243425ed6f14711f7d1db41c3681f2637429ffb6e6d29389f69bf16d59ab32147bf13979cd3b27aa8f3f2bc57ff54bf", 0xcb}, {&(0x7f0000002a00)="da5175d1f39407e91cc409ac076a858f4506f68203ff0bdf32b1f2aaa58232b36868359da4884c0f5b592dfcb5c712cda56ed42d9a1dd1aab694c36542b4e9d45313023c0a7c87b8c6cd16817877a3649bb0f40136eb1655d65669a578451ae4bcfd67a685b68dc5d4242df29e2b3ec0eb621fbf6c6b980955ff9bb4a18fe489", 0x80}, {&(0x7f0000002a80)="32c791cbc2e35b363b543d4a7af32d4b644fa7cbff5fb447bdf646412796712083c28c5b1fc35f0a772bdc342b5e11c10d1a27ee069a806be2d3678ab0466ac05cbe1d8e4cc71c8ae30b2fa95cdbed703d060843caa0b1de751777a82efe6beca815160b7fdfe00ee90335cafc4b82647d2c8911ec8eb404b042a63a2c8018bac9ab330eae3a69c9751291738c6fad53d197f873f739d9216287e523e5afef9f08503cc938baeb2f7785061f7675e87f9b670a88951d0f7546", 0xb9}], 0x8, &(0x7f0000002d00)=[@cred={0x20, 0x1, 0x2, r15, r16, r17}], 0x20}, {&(0x7f0000002d40)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000004380)=[{&(0x7f0000002dc0)="e3974987792628ba1deebb37b477e5967a0407fd271a7b0c91c09daee32e668aa2199d55b9430c1d310f53b6d5e73aedc2c7b76dbfc2e35e85727b64297cb9eefc64522d8a44ea797648f870d1", 0x4d}, {&(0x7f0000002e40)="76453d7108cf3487ce8102e088b78602d17efafe45b348c86bd84d27f724d20acdb2d222587af53aaf8c69ba3ea770c1959801f73abbd316015d4dc82e08998f7194b75581082d91914e07a8371877d03bd91dc3374da9bed5e8c9da19c66ea399c1d5562f9a43fbb95968fedcd6ca24cb27", 0x72}, {&(0x7f0000002ec0)="36b10022180afb230b56aec7a61ae4e211b83ad1c99f6ab8c3968ee16c283db89f790d9d0dc728db1b87eab1486de9e35060aa004c558ca9dfbf5f0b0c55a2b37fa52077b42b3c4e39cae47f9700b2bc16cab0072c4a1465b02caca847a976d155b599dd3b77327148701a73766cb058f64d88a5e9d521cd565fb29026636862c1f8ce74da49d2cecff5ff08e0214f9530c9a0063c1c1c9ec4d607b037319f91c8", 0xa1}, {&(0x7f0000002f80)="d7d7017c3c5816e65b78c3b8787ad9932ebba85d3379105548a5006ebdca9d", 0x1f}, {&(0x7f0000002fc0)="1e02fb9db703bc2f7317be7d60722120acd3a63476c49cf2c9178f22557f97e9871419ebde5bec208784940bc64c21b0e564fcd19e4cf69cc2c76ca04c3e84fa19dd52ee42ccf926eda9494bc70ca2f8eb0a0c0e8b79c3f29d49603e414bbd58546f68063dc80dec40f7814aad1c4c4730f2502d195d3db71b3cb4e7591ef8852eae0b67a483f1bb4442bccfe1e9b06f166bc5bfd004f50ce932587ed4399c4a598aacd3863e492c967536ffd0a4af173efa1e8639ad0be4eb1d6eeeb0c16d8908d8c2dddcc12ce46009822dcdc7ff36d8f6301cd99751679a76beebe68fc274d194835a500bb83458ba0dd5", 0xec}, {&(0x7f00000030c0)="86ba30e3c6fa2f84b03206c495abe8e7e5909098203bd80cb564c2511b500f8113159bbbe99a1c55eab9b70238f4a86a91f2e5af19abbc010efb984b16f0d68278713f9a1bbd5d55ea663bcc5c779f9948a70a37079f501f18f53dbca750d8a83e39c04e1484dacef061a97d5f4d25596b26f3a49c8020301973a577f1cf9052658f6ce6394116e5d1248ea1402095e52661f760f4c7da3393e7b580afa1b287f66204783032cb05ae5d7af3bdf2faf4ab9221c17487771fdaeffbea92", 0xbd}, {&(0x7f0000003180)="07031c203ab4f26687e436ef449dde6bd7f359810838811bf4c73c7e19effd17f932e79722e9e816ce98e0aea2a581f23b8412c1159b70980424b1406ff213dad6d982c0300298b42f05ad6fa6b309d7eff802a1fd3a719b340828544d3b95be08b2e7ef4ab0613b741726bb20902b5853e1e491bbf27a3da580ea81a23f30c5872fb6bcb6cae2eea19fc4d4eb36c8ae84f4ae97b00218d619a2deb5a5f0a55a42a6da83485ce7f61f87b20759adffc5c640355e0518410941071f26ddd16e45063ecc281b601d13f93002c8cc71677ada7aa858c5942d37", 0xd8}, {&(0x7f0000003280)="99678c4145cb8b5ec9ff40bd76f55a5456ccee26ada0d4b5f3bafd2bf1f357a6c6bbca94f2dfb69f304ded4b69bd244f392bde0df72c766b225d03c1dfa77f66819c60e9269cc943879a66753937317c24d738e78345a73e4f3ca5daa45a1055b0908c55f009a74ad19219917d81367c2f15a88e5e33608655476e4cc44ba53cad404b622116ea1689dbab465587527717040fa81ec6e174c5cc0bdc469c7e9a5388e79061304a12016a5244e2d81b3fd5683201a4961bb3100dc18317465cac9aa24bf44e68b5d77592df86c9091f6774618ed78aebd23efbbf20689c5be2d9ce58682f12da62fc1ef8216d2bc2f909581a853bff37ecede6d3d7622b0e927c19b9a3f4e0ec1914c41522ea189da921151106268aedd5c365684f60d66c3217fba7a59665e66122c97795cb1c529cd40513e023ff19d35a3bb16d1e65dd639b4009bc317386995ca46474e992043520a6a132451088942a374f75990921edb22cc68abfdee54a206e8107ab8801d40412a28b8101832b69bf5809396b6c7c200f7fb48195615081c1093ad4d4a98294804a1fb73a14706b1fc15dc73b1dc4d190070126a251ae7996aeb422abde7c2d3df90adacce6420b279cdbeb48068a5caec77c0cd87e18dce313a576b21cf4cc534dab23e4476b57d5af037bbad13173b4aff64ce03cd3c288ab215cddb4819df95e83c183f4bff3b811735f13acac7aac974a4ac22feea8a4b0b6c504cbd3676750815178d49ab1c5c62ef903bb7b5ec705b6616930c8590bc15046805d1e3a70a9a76a5da61bbf27e1b89e0d2472c3b2d781262a3ee6fc759cce801796df2b68b271360bed2ff1213992ab57e8bdcf8833e377119ce65d2a780cec8f6475447f1aec375fb29b3ddb6badf99fdfa89bbfdd377d61b7225bb7aca472f78fbcb64ced8cabae0bcd73dfc4cb197c53100431e03445540458f806853796fe6c99e8a9c8ee846b4a8ffdb53c88597dbb332cbdc94ffbe37430149d412d586c7f83b9725756da4038046d23516069c25859a20c9fafcd3ace5df53281f658030d484978c4571513c1b1988e948867f95c4ed526e1eee4f2cd06c05e0b5555372eec82e2df98efe1dee2feb56633cd0c60786d09b344d0ba2eac0f43a54cf8022322efbf55dc414d3c6ec3182c2aeda16336ec92d9d8ba45bfa33ab8494fe461062ecbdd3712805e162ccccf4dfefa8faa12f9e50ca651232501f3074424aa490009d2e08f596d65e65f4cc67ad9e258c27b70eb25b0521ec0d465b47037c94c3cb4adaea001369735125e0d24cb094f5a2bfdc0091eff32476872d753ae5e1eb274b6a5632644cde82e90477c1f41b8ec1fc5ae3388cd6ab56afe7fbde7105b52c046cf484b517e0fddef6da67a99c5e99f923926d9eb3c90bac5775d26341344ecd9ed2c56eae1aa3a7cb68f493176c7ded9507aeafa66c23b474643b6334575898cce30bbbacb35d92e5d39f69e5bc28a9a495eec706df9bac5125adce5ea012cccbab5d72818258582bf462007c93497d79eb6a2bd7e21fef76e398908a12200304b169a5bae04b35b4b2ba862900e80da622882d5af4cbfd07c851202c662117949675d1f26bdd7c7ba363d2765c45ed1d797f1c39e2d3f6b0e17c05a4076fdeb1a92900df83a80fc466c0e44eebfff66852fc62b757d3187fadba5e39f2f8694af31402aec61388aac69ff0546db82fcea89da37e0b44658085368aea52d309ee09b6be78006f2456a2db787f003ed7f2306c6ac09a06a959c11197129819fec80c5d187f70a04998a4277a28823481dba2171abee39a24002ee26489e0faf87a23fff5644f6c0f083cf9c34ef79a247561e2b9f2ffc49766f8b92621ddf7cfdf29f392ca97267dd1772c49f3e43a3396b6a8211f6751ab704b59f2314127d0f9bf6cbb67f2fb98d8bf6a08265f0f7261139fb8d29b5c51167a180e0917c9062bafb1763b3924b7436af531f633ed01b2d8e37174dd3cd1a6c062e404a87b41e27b4d93eff0df05897380461bd77638fc5f34cd5cd9c7438459650704a1c8add9e98b02542a14900d4f9d5348db1296ba05583634fee5540ced014480550ad628c44f7401e40000dd2e236c071209e1cc390ee8aa8556ba7b6a1f603c3a5b19b20243d5de11bfe77b9671a69cc557e5ff59ec503cf607cdcec38a19555fcdaee80e1663f931dc9e9bc212fde34bdd55ebb2a0c690caef43fae6be0f886afbf7290a170a9ae0cecb71de924574cbd72b523cc8b76bd6337de3b3da6d7e42a1c9065c25463bb30f2d1464de715ebf3eccd8986f03278ba7700d14229e6f8ee7dc656cdf4c6c202e3224b5d40dca21c17dac1a66c845d6e575dcf13953d208f0a8bd005b7503dd2568c618d0ef874e25f53d4ca71575ffe045e922141a684bda7aea65f4efbda81f8c063edf9e17ecbf7ed05216d60710171c686e7fb9b979f2b73d2fd74aa2026b50f760cf7790c642185fa7d07956d5eab0e24933c77376e0cb8af539ee6c42951b213c5e6e5c3c30c36cae650b2db12a2f9535f4ab99952e92d9135c8b16507ea2845ec3de770d7f9c4785b1847f3da76d23d25d0d40b645cb5fa27128c70fff45f6c65f2d0fb732fe278564d794a19a289c8375b4ed8eba9f27af5538380c1fdc221b2e02ffb2d48d7b2d76d439d5e71f5c06d9685259b7b8e0d88dd342838abfacf6e76195f9b36d3e5826d23c20c7952adddc05dbb1e190a79fbd315f7c44c6fcf94b2d380c4c976f65316adc5588a5a4100b1230bf1f1fa49a080f087198b905532a3a6977ce4b8e8a1ed78b19f925f62e4cd8a5e0f2db1e91c8521f2bc75a876d9065eda68bb59010a15c27eed412116a54c4201c1824839d4bc06a25db6434729f4f9ee9bfed1abfb296c8339619648643531014ea0aace7a0b9253251377f22993d86bc2bd89831598189fba48b9f9593443381e3a86086f9b3787f3e849b574e541f5aa801f46e8b1bbe1dba6aa006369b676ac0e4f07b5b42f9449915bf0e2a127a3574b9f903ff822e3fd9de9fbc248352cd51cc9b81816016067472e16ef4bca43faf936b819f2e9e31d785966af66fcc81f0dc674552b1c30afc3973cd2340c1a2dd33cd6057190792fa387ac766b96fe9d542e384bb7d2deb82ad0a828169c16f7bf7b813ad2f9abfe1a5dd37f199c9514423b86dd67af7b94c2debca2c070a676e9ef5855a1e38f4a1a45bb0b1727eee5f38c5eb85a5394d47aa2ae259dc12460145612aa2c1b04a7bc486488d079b79549a431faf703ed7bf9c5844145b4fcf83ca5cc3cda7d93c5eb9a5eedc52b7896359087f8c0b93f54cabfc5f0d341a759a335030f04099533020ddcf2eb1caf02622f73e5cf75e4338dba6fe7482d7a82e3d93657678f423742e5ba3b9c3a7a8c85ddd459f15e2ace26e3d639aab90d26999425d05f0adbd63a8553e7c4572f9faff45ecaa662e8d87ce4bf59806170f801851cc2ce7636d2388bce98200df8c4204e312a89f25276f1c43a8da666c347740605a58e553050adea3e3eae3b379185cc045e6ffb3156f9e9cb4a987937cbe727bdf4012abcf4e76fbb7d007c8ebf8063ea2b6a98a7dbb9ead96edf97ebb75be9df746620ab1e2fbca35f48a8b2165b5ef7939bb3359037117b082f67f59c4e32451e72a8a380da5ca952cba4c329aa25c2515dcd3a096d6174654c9f9333f0379b9dba3ea78076e1641233d4022aa2dc09bf16a7664c764936d1ecd9b7add30e2b9c5152ae45cad51ea5184a7b1a2db15442e9bbb456ae340e4e1307fd381508f26d72911973871f3d0a7ce2d747aca103c108e7fdc31ff0f93928ba01b0bef6dc0f85883d8f837d472910f60e7f48083bd1f263bfc72e286e70c0c3644363b08e2a4d6cf0f060ec8782c3d23be0112c1f1ca6eebc787ec4d98909f13631c83de6f6485318a9b05f993146619845925c7de91032d97f8b2441ef891aaa62fc57695cbce4c74b6366614504de3440e69335964745d9d6efd8e5b9fc5e9f7291dc98c98c46b14fed0a9195a5c57c38d7d510acceee3d665e97fe69c2721aad19037a6334ed17544e296d8b8c3b8486bf4eeff5f04f132223250601d358341781b58735db1b4e2295dbd2074aa36e0151050823a03fcda80b4e1764591443b8c0f9ee2fbf7c80a0f10c22d3798c9e33c89c01b227b1e6e3324d10104c243c7b7cafb108ca9d1affd0fce2e555d8bc64e031dbac856abccb49f26490568a79f1597e60a360349b01ade9640baa3a4fea20380a8089783b17d43625313cd0f8d57436fd7e2682c5f7fdd2ab9ee13891e52527088d59302b958e6fb91993b75999caae1f4b5f4605110b5abd62fd81dfcab12e82f24f0e5ab9109df307acc825a947ec39c3ec779586c02e1793f533f0253f953b08c4be9cab39b954290edc91646095c912d78ae225d61914ffe650329b10042ee5fcdcc9d03f28974d2377f2e0709fc356169c6e43dec6854eaa866e8f75784823e910ab853410e4016f3f40bd3496237bcc43bfa805b4a0e3081d3eeddd824b4cfcfa86ee0266716e730cbf8e6a6339bcf1cf325cc5965f43e44f4ede58856ec7af31e9914907cdcebe0d868f720cce2cfe34af86a168987ddad2a4a7a3adc1495e158b4936bb387813a77265f213a57c11a2ebc2371141a2141417a47778f805652445e5e7f70bd458e3e94fdc02368e1697c0ae12d698c910a136a1a2068011af1f0e343a7aca7d2562c5427b3f59cf5f40ffbba59720b6dae8a836d56608e0b2a8f0144b9ab720852b65b963268c835bdd674d0bd2ea9b8ba62123c1dd7fd945b0096e4917099d1990b32ff27a61ebc9c4282c37a06d9c2b58b8d874a5360a9bef725e1bc38081ad4af8006b0e41d4699b609990c5a589c7eb7818924543f1690aaa1e3f041e635623ca57f057e68039144ed5176ff2fea9f8937edd5a592a0b05f15582cb98329b1866cf93e0bb4ae3fe547e6c1b0e17722d0fd7947b2f6e6cccddbbd4b8cdf1911d8a64a191dd80c6dfb57c56588fb204b1db3b01f4c6cd2df7861d0f47228dc6508f94542880c3a3802416e1c9dc61ad1447c981b7aebcf8d26209a17766ee538a928f2003aae0454a21bb1e9e8575b8744ce67a85c0e2479a57d3f1cbc95c87d2bd1d6dd3e52f6278a0eee7f638995916118ae06cb3e5b48772f6bcc4ec7d53e540ecd2e029de204ac215c90679061ff95a645d746cb0f9247d38c92aa719655001ffc5ad6922823075328c335776b59d6f3796a716069206469a53e5efb4665950d8ad5b571a7c4c2f8038530304b488bedb5c1f3ce25d03e58dfdaebc15769cd8041ea0b06fc77948d01c071a42b80aa8db48dc03a45b8e84898f511d7d57b2ea436eb8f7fcb12c74e26f759cd60fcf0b67e7ecddda7b4ccdb7e2c8c702bfc340459e3bb0b89c5f534bb46f8b06dc152ee81ac3f030f48c116d1eae979b6f33a4b9d54fe4acf1a859037239f441c1f831353de14c09f5d19357775617981d2bd93ff92001d184335d8ee4336edd719f77349566d94a53a85d87e5f2cb917c4266ed8c17faca7c743585cc548efd1e8987e3f352f1d8fe2f7ffc8f94849f69e43cd5a4b644cbf0f9df23d0eae181010e87d765cd8d1ccb7245c0cd4453dca21a57d25d222a71e4fa53516d3d807b5b887c11b52c359dcb86ba799741f11d9567b7b155bd0a05a6852f1c2e6b4ae86e2e754caa54aa4c5e39d764939d89c78db10a14e989b06c3fbb28144e35dbe469cfca7c89b2aa61065b4ab4e68ed8f2f9d927fcbfcd", 0x1000}, {&(0x7f0000004280)="ca22e427d4c670fb52421da0f766bbbd8eb5d6174ca2271f42e5c2c8d50dd32e490b7d882cc60ac87e0b393505be5079ce632dbc3f2b865f4b5dd2c61a6212e8ab4deaaf07091b4af866db33c0ee2fc80a516dd606c1342e0033cb5d16297ccb77bf3e51c25478a5c30ce8a53ad4f39cdf7ed7fd3343e288b119a7e69d3337221feb9d9b15093c13b5cab65b64998c6548ccd1ee9a476854bf2bf5ab4afcf0946b602cb705ddadf2b4a5373e1108def856f010165abbd4609b754ff1de0b56e78e9b847f11481016efcb1525c26e042923bef946d684af396f2d3af913762c7dd46c6397ea143f65fde9a0bbff90", 0xee}], 0x9, &(0x7f0000004440)=[@rights={0x30, 0x1, 0x1, [r1, r1, r0, r0, r1, r2, r2]}], 0x30, 0x4040004}, {&(0x7f0000004480)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000004c80)=[{&(0x7f0000004500)="672d35055ed2dd318f5a31c71e2d9ecb7a6862b3d29bcfa6aa1ebcb3c279f12c016f7ceeb1d3a358153a566ab244bfa4f4dd5fb66330b2760ac8df8b3e0517e3788b8f1c5605dc620d9d4a5ce94d8e4e46", 0x51}, {&(0x7f0000004580)="e4ddede95dc3ab4a7de13889e7c59cf5e3f010f27504dbb9e6568933a62908b67662f4b2ae2768edf4c4d75d351dbfc2d7b1045c78b808ccf3c05c84955099f1f2461f839759f059a2324f39db85522edcbd65a457da5de77f68a1e3b70985678a2b1804b1b2f452c56fcc6a8d5efd09468fe3285786bec0479308872f419fc29539a7ebc7b65abcd046c3e571743ec6d7c3b97bb945cabacb5da50d7d99ac68ae73c5f90728f432680b412601565049f0868addcc586b821f01b5689dc5670d6af26f67f81c0c3bdc08b74f38b9248bc821d0aa8b13ed872f4b2c9b", 0xdc}, {&(0x7f0000004680)="c6a297627c4a0f137d6672122cbbe3a8829a8a0479e7051b22a8defd7d9f361945f26d517e892de02f1fb1239c227568145a6d09b3f32542b683b2e7f6d9619300239f303b78d450388cad71eb468fd455a1256afdcef920cec92885c68dfd281130adb8c591a6b93b9751d7860060c75830440873fb3d1dfc41476d232d7864d005daf1a887df8c778f6606d51ad929700526402241c467bf0920d365f6f3a7cada352a2b91ac45e9b6f2de0578c3ac00ee4c3f8599ba6afff40e58cbc46acb2fd7ee1d754f1ae13f09bd", 0xcb}, {&(0x7f0000004780)="652747ed2e850e091d18bf478ecdaf2b2b7a0f43365c0f8d05c899bd19152b951a9ad37102dd83a65d19f5dc97074793ab3f7a07c25fbaecc9cd95ff082cf9c13b3da74aaa81f509c5c6c901826dc2f7d6b700a12e6eefb6f4d87283663064aad43b7817", 0x64}, {&(0x7f0000004800)="d9baf5ff5cbd7c9d0484283aaf2913b4d1b0d8043074dfe866554f44d4c7f74575ce3f037d4b5266c9a6453785549c74c5ad845ed4e00bfd511c1a7e160c0fc663db03a288269f1da5093cac351d2d6537a7879add79d054e9c96e47c115cc66ad629973ce1899adfe22909fd3f9d8ef49a9b25c84e17e0882b6b57e7bde92a2e3997839aa1376735511b59f460dcfd7df89130c32434834511699a8ec3c937550ac0160a8aba0f3bae9cdb173053336c0fe70dd2e13f95a0e2934c19e265fb4954bc60f2dc5a1456d35dc2f0d19eea439001ae93c9f7d79bcd172173dc13d19ff", 0xe1}, {&(0x7f0000004900)="f3a416aa926da4ec1b0fa3891efdf72fd542a96f194720a7862c0c3b472277f87438cfcd2a11e2a66b863797fde5f6d107130db4572810f05b80d49fc7bf3708505c0f6cf1321cf1dc36444254894ca57590780e497128e0c28acd8479e1d02d3dd15dab336b610deb688a99f3440a2253acc2c2930d1d97193fd1208b795d0a4dc46fa9b67cca91e7f151453afd9a25213f04df3cd27831", 0x98}, {&(0x7f00000049c0)="a6e869777c8409a70b06aac7e52b34a423499cd4108b819976d41c6ae6e44e81cb14fc8554549f6776acb6e79e82dde51a55dc2491c6ae80bbcce35ad2d7b42774fb28be79fe0278f04db5f30ef7c951f060db357d010bcb1a081a35cb7c4d9e875fa4000ef8946b41e4880049055b368c33e0f68d562f557a0fb9b5911ba11dada736bd3fbea2f2d49a945763dee33c99400fbc3512896465e8c4e553a8480adef517dad3680f5ba16096a217b3bb3ac068945537117c55d1a82eda669c5e2c4d071b534d28e3526fe40071c90e31798479525353946d35077f6fe479dd8a496454e84367e0d049c746bc48cdc02df3a3d0647e8e7f2c", 0xf7}, {&(0x7f0000004ac0)="05c19e59df37c6147901187173a5ce85820afe8562b2bd546cc84c5c9007f9272129def23bfa07ff4c3f5d372a9f3e8011c89f0411b4b8729b9763ce24f450401afea8b44f44927cee4ff2a9605c7ede5d832eccb0a3711dae84425b7c0bfba603336fed896c3589d915df90787e202bbeba7bd84b257e1072b1325141c8bc577d30ed8598d0873935419e39f6221064dd6b28974ed8ddab1714ec52b7fd00fdcf55f68a3d97d2e5061fe9fbb4ced29ac5f3f36c96ed44de0f011672e5891872d2aee0d8f0d53a76ec2d48dc2726e83f4d1bf5753fe84a4bff4b2890d2526cb704a8f8f61a6cc1a7f04bc78c633b601962164f00152146494ab94b7bee85a0", 0xff}, {&(0x7f0000004bc0)="a44d94ccbb63086dceea8f999f081bf79ed49d218c50601f76a8e981ef40ad63cd8953e62c9e2499051db93b3b65892e14467dd4ed4b0a6f9309f9ed324c9ea8e2dfd5324032d0a6e4273ecdaacd0aace59a06947e9017147031ae3f9851568f486cc3578bda952a094b028711a66ee95fa391adb5d15eeaa06129ef533c95a49eca5917397a95c705d1b8b774723f1bb3cb6ab225635dc6084db9b2eff3beaf43dcbec2d305699113eecba74b", 0xad}], 0x9, &(0x7f0000004f00)=[@rights={0x20, 0x1, 0x1, [r0, r2, r2, r0]}, @rights={0x30, 0x1, 0x1, [r1, r0, r2, r0, r1, r0, r0]}, @rights={0x38, 0x1, 0x1, [r0, r0, r0, r1, r0, r0, r1, r0, r1]}, @rights={0x18, 0x1, 0x1, [r2, r2]}, @cred={0x20, 0x1, 0x2, r18, r19, r20}], 0xc0, 0x10}, {&(0x7f0000004fc0)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000005240)=[{&(0x7f0000005040)="4859fb5866f0b27772ff03d85f7ef2782e7353c1bbab49030b9e8fe128d58f71506353c133ef946b6910d37903a4b05e2610d514cdaf8fa805c4d2cca8f8913086e4d77dc51b5c5515aa1e81abf7a3e1869953fcaf32cf4ddb9a9d99ad0211bc21ca00686f640535a8af7f1289d512f89629c509f78f71e8d0020ffd2f14b34f7068a938904d76ed7cf47f2fe08289acec90f9c64e4ee860cbd62b11b7d2c2fb149973e6fb96a64b69bb66892ebf", 0xae}, {&(0x7f0000005100)="3c739b7eead161a24c0b96b63e5b0bb27a9b4105130d1d75856f7098a695f491c0c782a4bd5604f2c373049ab4f04d211320c363ea18f22255864ed227603a9108e3ef02b8e572475135c2cb217d011ba571299f8fe9d7f8d3e54b3628f3cb3e1aac68106a98aa6d8c6cc47f50cab9", 0x6f}, {&(0x7f0000005180)="b3da1dc1990321c0d62a738fdaec3ee9f4b08b9c38b9fddc8edc0b117f49b5aa741ce9a62d7da3e65e1d091808d86f65c7bd727e2ade68904b1fd091a9ff40d58e613961e393596f8be4b772a4c51bb833b40e0de8157ee2bf445a7bf620d4f770d6023b5682d6978e8e472924811fa8428ae6dcbf59404b0b0a76ac93f8ef180b6cbd3847035d84e1e316bc625c3d89c623913a4515c2d29f04c4879fe328f4e80dbe06842c0cff31fa130563586c", 0xaf}], 0x3, &(0x7f0000005b40)=[@rights={0x28, 0x1, 0x1, [r1, r1, r1, r2, r0]}, @rights={0x20, 0x1, 0x1, [r2, r0, r0, r2]}, @cred={0x20, 0x1, 0x2, r21, r22, r23}, @rights={0x20, 0x1, 0x1, [r2, r0, r2]}, @cred={0x20, 0x1, 0x2, r24, r25, r26}, @cred={0x20, 0x1, 0x2, r27, r28, r29}, @rights={0x18, 0x1, 0x1, [r2, r2]}, @cred={0x20, 0x1, 0x2, r30, r31, r32}, @cred={0x20, 0x1, 0x2, r33, r34, r35}, @cred={0x20, 0x1, 0x2, r36, r37, r38}], 0x140, 0x48091}, {&(0x7f0000005c80)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000005e00)=[{&(0x7f0000005d00)="a193d1c3b497580aae3b60d777e5b9ed837c38434d7c158f4dbcd9b1e4a6defa591b6234f7bd5d446556bf23c4e2f9a5dcce8730973c2bb9bdbef0cbf5d6b75be7ff958822ba18b3d08811b5414ecd031e325c9667353cb4b57b2cd6630d11c9c538fa8cf67b0e3cd8375019587d95a6c04094cb4d51cc05dcaefa443f8e43f9650cf04e1501f10d8c77bf813374d576d4f075750357b16b05aec69327e501b4c0499e284f1f6e2059e0dc101a5afac3e1c79456567403", 0xb7}, {&(0x7f0000005dc0)="9f", 0x1}], 0x2, &(0x7f0000006300)=[@rights={0x28, 0x1, 0x1, [r0, r1, r1, r2, r1, r1]}, @rights={0x28, 0x1, 0x1, [r0, r1, r2, r2, r1, r0]}, @cred={0x20, 0x1, 0x2, r39, r40, r41}, @rights={0x38, 0x1, 0x1, [r2, r2, r1, r0, r0, r2, r1, r0, r2]}, @rights={0x30, 0x1, 0x1, [r1, r0, r1, r1, r2, r2, r2]}, @cred={0x20, 0x1, 0x2, r42, r43, r44}, @cred={0x20, 0x1, 0x2, r45, r46, r47}, @rights={0x18, 0x1, 0x1, [r0]}], 0x130, 0x801}], 0x9, 0x80) 16:51:11 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x480000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000580)={{{@in=@remote, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000380)=0x27) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) pread64(r2, &(0x7f0000000300), 0x0, 0x0) getgroups(0x5, &(0x7f0000000240)=[0xee01, 0xee01, 0xee01, 0x0, 0x0]) r4 = socket(0x11, 0x80000, 0x7) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000280)={{0x2, 0x4e21, @multicast1}, {0x6, @local}, 0x48, {0x2, 0x4e24, @broadcast}, 'hwsim0\x00'}) shutdown(r4, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="08042bbd7000fcdbdf250a000000080004000900000008000600000000001c000100080008000000000008000200000000000800060072720000080006003f000000080006000200000008000600c60f000014000200080002004e22000008000600ff0100000800040007000000080005000100000008000678b82d0b0600ffffffff"], 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x48000) chown(&(0x7f00000000c0)='./file0\x00', r1, r3) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000d8e000)=@known='security.capability\x00', 0x0, 0x0) 16:51:11 executing program 5: sched_setaffinity(0x0, 0x228, &(0x7f0000000100)=0x800000009) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0xa, @in6, 0x0, 0x1, 0x0, 0x5}}, 0xe8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) r2 = fcntl$getown(r1, 0x9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r0, 0x50, &(0x7f0000000180)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r2, r0, 0x0, 0x2, &(0x7f00000000c0)='(\x00', r3}, 0x30) r4 = dup3(r1, r0, 0x80000) ioctl$GIO_FONT(r4, 0x4b60, &(0x7f00000002c0)=""/163) sendmmsg(r1, &(0x7f00000002c0), 0x4cc, 0x0) 16:51:11 executing program 0: recvmmsg(0xffffffffffffff9c, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000001700)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x3c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x240, &(0x7f00000011c0)}}], 0x249, 0x0) write$selinux_user(r1, &(0x7f0000000000)={'system_u:object_r:passwd_exec_t:s0', 0x20, 'staff_u\x00'}, 0x2b) ioctl$LOOP_CLR_FD(r1, 0x4c01) fcntl$setlease(0xffffffffffffffff, 0x400, 0x10000005) 16:51:11 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) ioctl$BLKRRPART(r0, 0x125f, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x200000, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000280)=0x20000000009) getsockopt$inet6_tcp_int(r1, 0x6, 0x17, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r2, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c200009600aa03aaaaf40008004500001c0000ffffffff0000001e315ed5"], 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000240)={0x87, @dev={0xac, 0x14, 0x14, 0xf}, 0x4e21, 0x2, 'wlc\x00', 0x28, 0x800, 0x4a}, 0x2c) llistxattr(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)=""/188, 0xbc) 16:51:11 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/mls\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r3, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x7, 0x0, 0x3, 0xfb7}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}}, 0xd0) rt_sigprocmask(0x1, &(0x7f00000001c0), 0x0, 0x8) getpeername$packet(r1, &(0x7f0000000000), &(0x7f0000000140)=0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002c00)=""/125, 0x7d}}], 0x1, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000180)=0x2, 0x4) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='net/mcfilter6\x00') preadv(r4, &(0x7f00000017c0), 0x3ba, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x22, 0x0, 0xfe57) readahead(r0, 0x0, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000000040)) 16:51:11 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0028004500b71c000000000004907809000000ffffffff0000000000039078"], 0x0) 16:51:11 executing program 1: r0 = socket$inet(0x2, 0x4, 0x3) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x1000000004e23, @local}, 0x10) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$P9_RSYMLINK(r1, &(0x7f0000000200)={0x14, 0x11, 0x1, {0x0, 0x0, 0x8}}, 0x14) sendto$inet(r0, &(0x7f0000000b40)="762d013abf428f831f537d10987f3f009e134c11cb6b5d479d61fac22b7c399e31904cab65dc1f2efc95ac1348db76ab634cf0fbde36acede0e45438773d28036919fd3c82e3622eb6f09975594f6bda43d29d0021a06e309383d903c1c4fd79f21eb35886e667dbe7", 0x69, 0x4008000, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000001340)={{}, "be51a285797c035382bdad8b5c3ccff17f741892ad1b0cdb31d3ddf2dde10081a19ae416d83898a9cc1b77e2e604ee70234551399997ea5e3720bde0020ac257f17f299953632ffce02f341ec2f728c4e3c693e66c0b1360fb0e56cc53d02353813a62a0b49e5553334ddb3e218be42cb58ef06bdbd090621e249bd978c342ea3b36e92abc7e2a45269f0edd8bcb918a83cc622e8bdb5d04ca3159df7d63889c10a7f30978f7d8de2112cfd55e9f2341aecf548ed28e66e219efef407519eafbcdc3eb926b901f9c2dcdce1c90853a6c67efc08e404a032b35aa2f34358013a6820509c1175c05eda87212af5d349be75f0d718330a2c89601dbf2e4a3636625a2fb9685de73bdcd725de7810a223a0821e4c25f615c504ac3171d98100f9d04304285532093ec8261a9f9641576b63432dbdd475d300da5a589b73e0f780d2aed6cda80a88355434d1d9e35ceff20d03c767dc4a6c7ab8352ae2883c4baa6823c031195ae76baa4891106ef520e156821172ca0f75e3824d431704d1000560935cd2866e7833cb9aeb267f8ac7db1ecdeb6d4519e7addad7a2bbdecb0c45a0503e7258ecc8a4a421cb8dcdaff37559ed31dc7bda6982fd70fe1513302763983b27dfe35dc0fa49fd9580bf41019516f93aa0ab26bb9b81778c007bd41d86d746450969721106b9bc1bdd301f27712993a6bc8e553133713f7c858ddc6c6d53f9c18998b555d39d22ddbdcf1cd22cc2c454839151f91b166ae8e3ddda6b11762c91228ca180917661a79419ac828005b7368841345fb054d9346f09a98f485ecdd2a01543072a2ad291ac038ae09ccf69bd36933399e04ff29a1c474d6f953de22defbf641aa1a2e41003a84bf93ac26f75496bfb1bb51eb776603e3d1538fb703062e04d8900804404c135752fe71794f8706c1fdd1e274d96c926a036fd5a36c074f27b4cd76bedcae4a80e3d9893ecc96ce9199dfeb455072852faa228bd7d936be7b5bfbec6225eb1f72bee6a2ef11a2e9da056d72c2c4743283b753048ca67dd5c63195fedfb6869e9388d262f140c67f21737e1536cc1b9d50657b1322412d7441dc2bf15926c79eb77ce907830ef1a66b19bb4053c21d1b510bb81d99ef30dba4a63e2edf337caacd63e01d7e5189a169141b354d1149ae761bdbcf83617d2a9c6f4be9aec0a5f64ecf34dce5f94fad31f7f808a3881cff639b152e6ff1315847a7f66b765c1023cf97100274c2e43e5d5392f5dd455e994a945d98dd687ca8b7529e3eb29571cb18598788c293e04d8c35e535ad8ef78b23cf60295ee62a07ae445215309177a2616923401119e9ccf6ee6051c96c04310f3a895bc542dd2c7d07538474565661d83ec08bacef05d6b6da941fc09395382f7315efd8bc3a08d05e422621742c6ddf01693fe2437ace73410f43780a74724e58e3d865d966554bacbdc031eea8f59c87bb19e74009ea1ada0c02013a78faa02db66db9010c27837bbe5b19acce112c6b5d27b144fae3465d5e55a6a03b39eba5d15581cfe721c27980b6f60be44aa1ed2e7509ee2a637dafa75ee1771883bd14a47378fd93da028f31cb367e640ecd86684174b72a4778d9595d1a049aeec980ae73cb86ebae56676bf80f5787f9617395b80c45ec90edb257ebd1f9860c640ddf7366ed94357efed7925fc84e2f392d9c56c4314f5d404d49523fd156ec785bbc0262f015e00da0098e92caa689f1a3e6b05219d89cde39593ffcdb5a39332bce778fb31e0aaf46e298600da7ec8a2ee48f3f5fc3fb06a240b6ff8e0796704ed70dabe993a18341b8cd1f2755f45528e122a4fca7f7ee2b970211a374d89fbf1292f21efe844615c66e27ec59ebb986cfa57f5ceae72cf0ee811f8ddf52c97f6feacd2f1ac115dc5c3e0c2c3ecec2be08c295484e0995418eb68311a835b01c0151b737626b3fa8a00085a815d0ffa71c28816aa3fff4becf848e539ab61a85a30130a593cfedb608389096af6752aa9d2dc4552855c3729cb80a5805fe143d43181a896f88ff389c06ab77f0d4db98e9c46db59ac62d76077b1a7bc7b2cb4e5c0b47f68a970437b8c0ae50f42583895e31c5462e7333a096e6d3f064f11d4e3bc318cfc28fee7c770cd56da77393bbb4910b6f00aa3f947b8f265798cabcea5742756966724058b7704777306900948ee82794b68990e39282392458642fdf83a664812924ff42af0c5968054c175f4bbf82f8f5b45fda358701bd24895ece76a761b964bb456e160ff64bfbbe5433be512d48fe8e02241fd448809f8d27a6966e9bfb9d99b55202c0a52c0645bd6b36e891c0217d454baba13afda3b5fdb514d5298e91267ab319e8305c65c62177ac55462b89da2d4c0baed9ccd09a0d24ff1ffcac76ebcf442892c4efa3a7eb43b34c0744ecec38a7977e7dc4faaee9800b62c101909d555e423efa7f8a9438338fd0c3723d02705d94d2c4493fbea532fc29b8b1f585da9e99a53e5ae9c564b3074709055faf42466849055b7a0b80722f1a7e9fa57ea91727db587486d2f759401c74c5c6a7bf8aabf6429e63a9c5bd96f1d93d75c42a9972244ce0ae4a07168fd6c03d1e075e5882abe8b3a23878e5d7da72a002a4fa41729594a8aaafb8425db50625b56b5d8525169efde26b0d2b416a3bc0ea81cfbaf13ffb9d75f4b508c83b6b43f38cc54c5513631904a605cffe2907904568920cbad38e94e85c3bcd5a94321375bd166834397610ae2f4591617a8460ec9eb6898a18db179a935915e695684bb50c2c5dfaaca46c2453c4ed946a846ab02c95d8a71c269294f95505a88ccc6500845b24e2d0919435a419db35c07657422bb97996246974b091684360c17fe006b9f77657a3fe4458fe03a8cb22d1788e5fe8df4d13c0f62f56a46a369cd01866d2f5b19242561f26522053658812fe5ccbde784a594737c3e63323ee5c3807b0a864c0804515b0d1cc9943d9a8a682cd0d84d56457198f2635f42c76e249734b413976d199ec2d73669a0f84d31e6d97f5c415f66d8dce67e3ff9b1368fef14a7a65623d2b645402a4d439ae2cbd9468f3cf7459af7c68661c06508f8021fc44a443c893bc90b31e462bb175bc4d97cfba2c2d782a8571ce026204e28ec282efefc2d65ed3987aa4c139f084829006e56a5f2e1da0d8aab2e1bffad6252ba6e7f678407ae21ac94792af6adad21b5e8c7a37750d132df75b571bc6317bebff317078c4286ff13a0fbdb568635d6df5ccd5fd20091b92a1eb4441b6f4d266be65c607805dcad8bba418d6afccf89e60b5bb3038ef8cc1e1b45e85b02429fb5001cd28734b0fa386f569192f4da70e2e8c8a47fd66bea0fe76367fa18be3ad06320f53ec1f6ab2939ba7a82347f482eff2f5586051290e73ff6bc0db2cf998e51556806f0c380bf1782ca0968deca573b67514d787890b129e09ba640f6f69db9cc64c511f41631ea1de01de2a022124a03fe6b65e28653a62d68989667be102022c405143162868dddb2da36e1e4fac04bfa9b41659710e6f5aca022befc68492aab7b54281b9dd51b7b1bd24ddb6700e7902321308760226835f0afe0ce6901ca3e36c"}, 0xa15) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140)=0xda7, 0x4) write$binfmt_elf64(r0, &(0x7f0000000bc0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001}], "", [[], [], [], [], [], []]}, 0x678) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00000000c0)={{0x2, 0x4e20, @remote}, {0x1, @random="ba8948cafe4e"}, 0x10, {0x2, 0x4e22, @local}, 'ip6gretap0\x00'}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000080)=0x3, 0x12) socket$inet6_udplite(0xa, 0x2, 0x88) 16:51:11 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mprotect(&(0x7f000079b000/0x3000)=nil, 0x3000, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) 16:51:11 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) r2 = fcntl$dupfd(r0, 0x406, r0) write$UHID_SET_REPORT_REPLY(r2, &(0x7f0000000140)={0xe, 0x2, 0x3ff, 0x9, 0x6, "e90b16ea91e9"}, 0x12) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) 16:51:11 executing program 5: clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() preadv(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)=""/97, 0x61}], 0x4, 0x0) timer_create(0x7, &(0x7f0000000040)={0x0, 0x2f, 0x4, @thr={&(0x7f00000000c0)="2fbb407e463e34f4a432a26eee15f0c9d26868dab3f1841096946efeb6ccc1a6fa354655b22ed0d1e2db0df7db4cc82c8c930149dfb3da27a4307562b252cc1437c2e786a7c169e62ea4d9b808e2e6baecaa8e43ef2e6e0150287ada3920af43f5d4a664e6bf8041e5f929ca284836de02753f5514cde7376741397d93534f58f41a834b3ce66867f82f764065f1a4f89401f7c609b4c7f50a6d9aba40252ff4e68a10f638dcd5bdbe7586fdbc7cb2aa6fb4d9b73913adb7db7677bdfcfd6559", &(0x7f0000000180)="412da57444776acee83e640fd2b89bec5368a16216957a6ce6f5775c2f13a264b8241cd971546007cf94546e7d0598f01eba9fe8c07a80be8d34df5a5d92ba8964b0590c3220eb9c5b11be3e398163c77149244a5b056aadb11e09c2bdbf20e07536b9cd9c98eb3431474c193a6236966d778af43cb6acf02961788311cb93ceffe5b7add8bde60d09dc0622133ed56479946bd236ef74b93c850199c47cc41dac5eb6d4175e414db9d9fa7d60312b18e58982f4283c96cbcf177467c8718ba595ee18baba29fb8f2f6e8787d167f97e17bb5724bfd6e25cebea8bdebbd049f25fdd55123fdf3f4e"}}, &(0x7f0000000280)) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r1) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x200000, 0x0) 16:51:11 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd\x00') fchown(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) fchown(r0, 0x0, 0x0) 16:51:11 executing program 4: r0 = gettid() sched_setaffinity(r0, 0xffffffffffffff1b, &(0x7f0000000040)=0x7) r1 = socket$inet6(0xa, 0x1, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000000)) setsockopt$inet6_buf(r1, 0x29, 0x80000000000031, &(0x7f0000000240), 0x0) 16:51:11 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') getdents(r0, &(0x7f0000000240)=""/4096, 0x18) write$binfmt_script(r0, &(0x7f0000002ac0)={'#! ', './file0', [{0x20, 'fdinfo\x00'}, {0x20, 'fdinfo\x00'}, {0x20, 'fdinfo\x00'}], 0xa, "94aaa991eee567d6116ae0bcc93d73faeab044815cc6c5f18c71c81daaeb398c8dbbc8a9676c11bc2373beaf"}, 0x4f) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000000)=@can, 0x80, &(0x7f00000015c0)=[{&(0x7f00000000c0)="5a3ecbd64c9ed97d50f938eeeeb924761321ddc5543b2cab437259fcc4c8c8652c577ccdba9e1aad73b13a1c9d82985773c2da13006aedc79b22062596d6e4de51ff20caeede12f9d6318cf9cfd170fb478b3ed284ea1bff5fcc785a9ed4ae9841f70037b87dadb80429847f179a6c3c37d009e46d6d46318882d1", 0x7b}, {&(0x7f0000000140)="0d02875fd4ddb5627def3169d26341ea9ba65ba25d12fd6ddee553c72f91bed1320cd1b303569b05107dd064f372a8c401831b1d005b083feb6853bb815f5ef4b0b7555e3987027b598f10a61b9515d84e48", 0x52}, {&(0x7f0000001240)="4e3dedcf4dfa7d1910a22fdc0bd33af11dec2cc69666d48b46f7fb4d065c6b3b2d669b8219e53ecc556167f2f2507eecb70265ded6096ff00283578262ba7e19d48e04cad0adcc262fafef5a679cd9abd4be926218d255e99f4fea2a179cbb38afe26f5a77d9e58f6a6998ed3f346ceac71bb1c14538fc5d53c3ea3d39b9c9d6b652b1c0998fdfc9cc21f2cd5004379d6ebdf6723de6d495e3b6fbfc2cfe1e75a55a170019919db7d27f604b4d35deaa06a63770242007b8007ce8a9137d41ef8b9ea95ee38fc7aae8fb9e91993b2fb495cd6ef290c3628242baf149a0d211e17827c7cad1817397e0cfee5141938e85fe8a649cc3e9028ca95ea7fcda51", 0xfe}, {&(0x7f0000001340)="e98c67fbc608347c74a236290681e144e32f2fca99978eb936250fad2553d186e664e4f4a26dd64121586828c0873eb12819c33d6d6d0fce913f0192ce2faf86a1475fe7aae76218703768adc82e68049f0d6b2cfd3b909de23d93678327c601fac6f1058b7aeeba52e6377c7fb8ec61c789357a96d19b94a6fdf80457a0c408814d7d1944de7ad6112366987785a023542b2f1092c7ceb7854668e172e2fdf1aae9a1b6b03fd059ab7e6129847aec2f4374c5", 0xb3}, {&(0x7f0000001400)="b9555518b8bf0f10f2ab7094fe0b47262c4ed760c6fb139d0cde6ab1a234151bc179b96b9ad9247a01397fe86d515c3cbc201769898b97d34899f6d480cefb05f2ae7a3b2b89129d73f26cd0952546bb33ccfc6caa833a25797d15667b9964986b7667104891cc6493dfb1c2148292c9294c8b6832e06129a96c8bf7e1b45896df7e0623dc8345c1e346f0138217f9eecd6ec341f657f107b7b101fad66f8ec57c77f0bf7fb38cc67da6f26f5a66aa174b33ccbf4966a17444b22ec15d58d916c1e6b69fed94e7bae653fd4a", 0xcc}, {&(0x7f0000001500)="6326fdfc99ef49824358c76e6024878934e1fd2e9386201791592e271efcdcdcb8f77ea6e0ad05ba1eb7bc840d02740b9adf2044d696fee4bc2acf9f9dec9e595b3623ed4257ed2cfad80d5c32da3708a579f039159980c4ea535e902a4a3214dee8e36c87bc9f11c2e8be2ff2265325f11f721c139588aa0c78a3b1f7ee116cb2d8720fc5896167bca4192adcf5b52cfebcafb4a57f27c42ab01827734a0a610e806614f9a984c181f9604da452d8e4150be43dd50805f242", 0xb9}, {&(0x7f00000001c0)="56c86327ef76af6d57646f11cbbf6daa8dd76c1a85982c15bf1c47f3b9baa13d68f69c77c241f01926e886356e0a60d62139f4fd", 0x34}], 0x7, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], 0x1450}, 0x4) 16:51:11 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x37) ptrace$cont(0x18, r2, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xa6}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r2, 0x0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x80010000, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000440)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'ip6erspan0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x0, &(0x7f00000004c0)={@empty, 0x0}, &(0x7f0000000500)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000880)={'team0\x00', 0x0}) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000008c0)={@broadcast, @multicast2, 0x0}, &(0x7f0000000900)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000940)={0x0, @rand_addr, @initdev}, &(0x7f0000000980)=0xc) recvmmsg(r0, &(0x7f0000001a80)=[{{&(0x7f00000009c0)=@can, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000a40)=""/53, 0x35}, {&(0x7f0000000a80)=""/90, 0x5a}], 0x2, &(0x7f0000000b40)=""/90, 0x5a}, 0x8}, {{&(0x7f0000000bc0)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000c40)=""/73, 0x49}, {&(0x7f0000000cc0)=""/58, 0x3a}], 0x2, &(0x7f0000000d40)=""/146, 0x92}}, {{&(0x7f0000000e00)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000e80)=""/49, 0x31}], 0x1, &(0x7f0000000f00)=""/183, 0xb7}, 0x52}, {{&(0x7f0000000fc0)=@l2, 0x80, &(0x7f0000001100)=[{&(0x7f0000001040)=""/48, 0x30}, {&(0x7f0000001080)=""/114, 0x72}], 0x2, &(0x7f0000001140)=""/93, 0x5d}, 0x81}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000011c0)=""/88, 0x58}, {&(0x7f0000001240)=""/49, 0x31}, {&(0x7f0000001280)=""/204, 0xcc}, {&(0x7f0000001380)=""/134, 0x86}], 0x4}}, {{&(0x7f0000001480)=@ethernet, 0x80, &(0x7f0000001900)=[{&(0x7f0000001500)=""/215, 0xd7}, {&(0x7f0000001600)=""/93, 0x5d}, {&(0x7f0000001680)=""/131, 0x83}, {&(0x7f0000001740)}, {&(0x7f0000001780)=""/124, 0x7c}, {&(0x7f0000001800)=""/82, 0x52}, {&(0x7f0000001880)=""/94, 0x5e}], 0x7, &(0x7f0000001980)=""/236, 0xec}, 0x3}], 0x6, 0x40000020, &(0x7f0000001c00)={0x0, 0x1c9c380}) accept4$packet(0xffffffffffffffff, &(0x7f0000001c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001c80)=0x14, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001d00)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@empty}}, &(0x7f0000001e00)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001e40)={0x0, @remote, @initdev}, &(0x7f0000001e80)=0xc) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000001ec0)={0x0, @multicast2, @loopback}, &(0x7f0000001f00)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001f40)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001f80)={{{@in=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000002080)=0xe8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000003300)={@empty, @empty, 0x0}, &(0x7f0000003340)=0xc) accept4$packet(0xffffffffffffffff, &(0x7f0000003380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000033c0)=0x14, 0x800) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000003980)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003940)={&(0x7f0000003400)={0x520, r4, 0x4, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x7c, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r7}, {0x7c, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x1d8, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1ff}}}, {0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x44, 0x4, [{0xa5, 0x5, 0x6, 0x9}, {0x1521, 0x4, 0x5, 0x2}, {0x1, 0x2, 0x6, 0x2251}, {0x4, 0x0, 0x8, 0x2}, {0x0, 0x20, 0x3, 0x10001}, {0x9, 0x10000, 0xf42e, 0x10001}, {0x1000, 0x0, 0x14000000, 0x7}, {0x800, 0x3, 0x80000001, 0x6}]}}}]}}, {{0x8, 0x1, r13}, {0x198, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r15}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0x2, 0x6, 0x3, 0x1}, {0xf6a8, 0xad, 0x10000, 0x81}, {0x5, 0x0, 0x0, 0x2}, {0x7fffffff, 0x2, 0x80000000, 0x200}, {0x7fff, 0x7, 0x8, 0x5}, {0x7ff, 0x2, 0x42b, 0x1}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x401}}, {0x8, 0x6, r17}}}]}}, {{0x8, 0x1, r18}, {0x7c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r19}}}]}}]}, 0x520}, 0x1, 0x0, 0x0, 0x814}, 0x40801) 16:51:11 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000140)={@empty}, &(0x7f0000000180)=0x14) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f00000001c0)=""/133) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r2, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0008bbe7183f8febfadd2abd004500001c000000000006907809000000ffff"], 0x0) [ 1123.739878] audit: type=1400 audit(1547398271.641:13494): avc: denied { setattr } for pid=19117 comm="syz-executor0" name="fd" dev="proc" ino=236851 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 16:51:11 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x22}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffffffffffdb}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x90) sendmsg$nl_route_sched(r0, &(0x7f00000032c0)={&(0x7f0000000240), 0xc, &(0x7f0000003280)={&(0x7f0000001b00)=@newtaction={0x34, 0x31, 0x219, 0x0, 0x0, {}, [{0x20, 0x1, @m_skbedit={0x1c, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x4}, {0x4}}}}]}, 0x34}}, 0x0) 16:51:11 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r0, r2, &(0x7f0000000000), 0xffff) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='trusted.overlay.upper\x00', &(0x7f00000001c0)={0x0, 0xfb, 0xd4, 0x4, 0x6, "187ce8c129a50e1461669270420b51f7", "60d7e6ccbe5711000b6f39dfa1709a56885744ed4e189dfd4821423b3ce2b2b26be3209db6bc99a0b967b45cb8184bfad7a79e1cb8ace90a03d44b69790c0ce8aac7248354b593179ef4588ae375f955f2203f91e27eae64d1882673388eb38856ef6d6bd9537fd73b2eb796336315688759b8699795c1d5358e122d93d063dca95eb35c5caa8e46e64364dc422c25ffd95c0b82012d5725ee0f2b10970aa1ef96ea3b4dc9671a4d19b4be9ce02d947d5861d072c0650162236311abb041cd"}, 0xd4, 0x2) fcntl$addseals(r2, 0x409, 0x8) fsetxattr(r2, &(0x7f0000000100)=@known='system.posix_acl_access\x00', &(0x7f0000000080)='\x02\x00\x00\x00 \x00\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x4, 0x0) dup3(r1, r2, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) shutdown(r0, 0x1) 16:51:11 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) pause() syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) 16:51:11 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x2000000000001000, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x20000000080b04, 0x0) open$dir(&(0x7f0000000040)='./bus\x00', 0x901, 0x0) r1 = fcntl$getown(r0, 0x9) sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x6) [ 1123.862439] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19157 comm=syz-executor5 16:51:11 executing program 4: listen(0xffffffffffffffff, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x40c2, 0x0) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000faffe7)=@known='security.capability\x00', 0x0, 0x0, 0x0) setxattr$security_evm(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.evm\x00', &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], 0xfad, 0x0) setxattr$security_smack_transmute(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) write$P9_RWRITE(0xffffffffffffffff, 0x0, 0x0) [ 1123.914707] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19166 comm=syz-executor5 16:51:11 executing program 4: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) link(0x0, 0x0) unlinkat(r0, &(0x7f00000001c0)='./file0\x00', 0x200) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x234, r1, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xa4, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x53a}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_BEARER={0x44, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @rand_addr=0x5}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x9, @remote, 0x7460}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}]}, @TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}]}, @TIPC_NLA_BEARER={0x64, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1000}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x937}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc882}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x48, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4000000000000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r2 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) mlockall(0x1) sendfile(r0, r2, &(0x7f0000d83ff8), 0x8000ffffffff) creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 16:51:11 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'bri$\xe2e\x80slave_0\x00\b', 0x1000000000003}, 0x18) inotify_add_watch(r0, &(0x7f0000000340)='./file0\x00', 0x20000120) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000180)={'filter\x00', 0x0, 0x4, 0xba, [], 0x7, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000000c0)=""/186}, &(0x7f0000000200)=0x78) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000280)=0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000880)={0x1110, 0xc, 0xb, 0x513, 0x70bd29, 0x25dfdbfe, {0x5, 0x0, 0x52d}, [@typed={0x8, 0x7e, @pid=r2}, @generic="cf4012ea813003a9a8b2b2261db701e1b2e8cb8ea770d57224da833bb07bceeb403b4aaca000190145a498090ce2d2dd08e547", @nested={0xc0, 0x3c, [@generic="927d2da318d4c36411b484cf1728ad076d2b16e5ba130ccee50e5998692bf2a734c63acbbd062b6ca723a3568585811a9aac4c63e9d63c1b7b34a01172dd53b585d1f9f61f357d4c5a03288dceffbb5e6e7049606220273781e88a06753bee7c86a706784af7b1eba4b2c3a94bdc81af96cfe197bd1bc6bf36d8f4bcd756b9ec7be76af2fc35c45ce0ba66aca55e2d363caca0dc749b45badc89be046effd50c585b3524b83390255807aca088e1e0cf93f504a6a48ce9fa93b81426"]}, @generic="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"]}, 0x1110}}, 0xc010) getsockopt$packet_buf(r0, 0x107, 0x5, &(0x7f0000000380)=""/10, &(0x7f00000003c0)=0xa) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000800)={{0x2, 0x0, @local}, {0x20000000304, @dev}, 0x4, {0x2, 0x0, @initdev}, 'lo\x00'}) 16:51:11 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000000)) r3 = creat(&(0x7f0000000380)='./file0\x00', 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000007e00), 0x400000000000087, 0x0) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f0000000180)={0x8057, 0x3}) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$P9_RGETLOCK(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="0f00bd73656c3877757821265d6574683078e4922b09623384b277ac2484e0c7ad54fca1beaea398fed1b1d86ff501ae28a1c08efb5f5d54981c0c4ce7ae8248e1725d206238678f15770700000000000000ba33ce0e4cde7b7c8f80e9b7aeff1a333028cba5c087997bc751cf7e53abb7c860776891e3a75275ca6b2de49ed19de2c66aaccc3f03864a8ea71cdfa1f35c73d48449c83f5feb9f5d41823b9bbf944e8025d9253d5363b09a64ced046cb655e8ce28d486eac685e1a877a42b6bbbd7cea5b410c744bb448acd61f019378c3ed6bd7da5de3e7345b3b5b3c149bfc0e43ca3c5de0bacc1cf60000a13b49407577bb72df363f86e72218d583f03aeeeee2cb0b448b05e52815e4393b09580d08f1869fb53118c901cf268e6aeecc5f02ba4afc97cb4d42"], 0x53) 16:51:11 executing program 1: epoll_create1(0x80000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="17b0000000000000000000000000000000000021000000000000000000000000000000000000000000000000"]}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r2, 0x102, 0x70bd25, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) 16:51:11 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) sendmsg(r0, &(0x7f0000000b40)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x20018}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000080)="47625ec59bcf18d41846db943beac6558ca4165229c21b603fd180c36550e97920855d8673", 0x25}, {&(0x7f00000000c0)="2956d83c01e2", 0x6}, {&(0x7f0000000100)="ab304d088318daf90865d8427ed147588cb5793db1379013877527060759a43e8e4462c930bb9dd3e3c287b0a8d5db7b607cc0b0ef055c6e2c6746f256f7c626aaf9cf962428dac9c591bc2d6444f4a9ba6849f6b096fd7500713441f4394d15b4e40bb98f333c2927fcaf0ad1c68594e8ed52acd36bbb1c1a09086d8222791f026859ac994491ec1982fb4c3891e860f04d22aa98a340c6bf774bb606fcfe83289a5a9f25497cbfd4b0b64c916408e0a10ea7f7abbb38b46c15088ffba12fb59e44f30d997f6c85a82a5a06d98292270addd823884eee9d38f66b20370da128c1392cf22f", 0xe5}, {&(0x7f0000000200)="072c426a4d54a61155e18a4d137260e19b9745b5f1c1b197ca7197120186f0af90c2eaf9255614e323e713adecd140f456ca7927ad946584968262778f474edf0dafa37bdbf97beebe81cde5b6310aee25dd64b3fe9a4ff4f8483ee955fd19bdd5bed788fd", 0x65}, {&(0x7f00000002c0)="e60bd0b663e380ebc9d000f60c05b58f0042c08de4feae9b724993777d311b00c720c82c5745f0d5cae16463678adfd18fc094f1c98b17a5271ddd54d6fb2f8607ac2f7e30eefa2503b87753d71b07e1b6e26d623b7b21ee2b90ff722a3e8ab10b7e89c70aff9dfc9610de6ee3c5c81d4829675f604351fa8aa2a41bbd8f71939147a3a669f62afacc8e6ebee31bafb727e439e4a68a7b46c227069730cf18421758236840f8e1dcb320e001062e823b8eae435abfd3d86144bffa5760a2037e5f43532e62a3ced276d2", 0xca}, {&(0x7f00000003c0)="ee9bd9bb5290f3560f91f6e8a093cd14d3dbc8e35c1d328f635f95baa2ea8d4130851f0511ab8f001771db6ee842b49c78bad5527ebc09115c27709612c0bade318d9afa331353ce3ddd8851a2137fc7545d41447a8071c57511361199509bd1216faa442ae9f8e7f419d39852920d3943063f4d4f7184f626fa440c6d0f334b9d21d97fd74354a70ab7bfb6bfe5db98ccc5c149ffd91ef839f0226060d2f4ab78533f95163818fb4628c5f8451bb034", 0xb0}], 0x6, &(0x7f0000000500)=[{0x20, 0x116, 0x401, "263d37ae73fbebf43cebfbe2447dc7"}, {0xa0, 0x29, 0x4, "d287e7513bbd0ede0c932f5241dc71f749b2bdb7b68c696d72660e0e244935a6ef15f88845774c4ff6f89057a1c35250edaece2876fdd0d93cef4316a6b79476184244acc9ec53c0cadab5fb9c010f4e4dab51c966c1fc0c38e2e842db018f5fbe0261f80c73b49d34754d0f8446ea91bd90020bb833810be510f314b1820ee000250f323352cacac1132dd8f4c4"}, {0xc8, 0x3a, 0x5, "142b944c102e2c120fa02af2e33eb0fc0590a88838fe888c38c68210e4cf02e4f60ddb3b6707e44f8da73827f6818fb7b5f2e04e5bc504098cbe1ca7d5626cf4d74f26c7781b605d428f5eec1cf3a65da9823a1439e9729f8c9fc6e2c18789e0e7e6216cbdb6202b6a252be520e5fcf41bb3c157ac328273acca4da8d57ccbbd80084a1ee05dbf663901484fb94ec66ad750372f2b564db095073266f213e71b680c866a23e9e966f9bae3d8c9f5056b8fbc589f"}, {0x108, 0x102, 0x81, "f3eaf199f2f713f425778e458d2d7c87a2fe13666423d18944e91e91dbc23ccc6e0bfed678cc6ec89918f3615ed4828a97eebcd4abcdd0041202370fb6051bd4e697de94eef5bc50e2d9817418a90ec1d041555c1a6b1540d7a210b79bce5227f3b0a108625d8a7d44964a22a9817be1c39fd43e69d6613bf8a35ce515af4724a3377c463e8fa040857a52332edde6fcbc90a9719671bd464a562a8477bfb445386be2c640538739e32383c6c026cef49814328343463c8e64801130e3a4d7a5e1d0b47f8719f5315b91a5043dcb36dd9eb22c809e5e7674f87f34487114b293e11a0cb892e136f123eb5f2392d2f6a6f6"}, {0xc8, 0x18d, 0x1, "c51d47bde011e087d43e008919c3ff03f4f9487ecfff7e20eb33d484ec6f294cfd43b9e6f414652274886c062f33ff171a2139891b64048e2e1a90c11987c6c28ad4d25364d3ddffeb5284647a2b447cbc80f26e94b07294908bf6cb9f2f85d33d7e6b0bce08243d9ff56ca49f95a571b0a84106c52826ef17e7a3740e02264c2e61b5fceda9afc7531b58701cf8c86c17490212ee644aa91f33534832953366874dc39b11e725f581c59dcf55ea811c67b670b04ac9"}, {0xc0, 0x0, 0x71, "9029b3eba6f06eea4a2b8b1b0bb9382664348e5ad3b102db4c1efebe1aae4cd9a0372bb4edd8f3f8b9bed3b787dd206464bb103c645521f17c53d57ec3b141e4195bd68ddc631200ebff4a3e02cfcad7ab193cd994d3373307c07435e311a8d971c505ffd74a9c0149f33bbdeeb779054c0924bd454c944ecbd61c9c366665092d0855f227eb6fb21703f7bbd46a9f8b7fd93de2202b7dfa29dd75dd97cf02072b71e559864a658ba380"}, {0xf8, 0x116, 0x200, "6f8861707eb18dbe278134ec74af12c4ff9fbc86b03d8d02638421b1ec4ceaa97e5b94241f6b7254087f71321de8a9cdf9399fdb833621b40a4b0f960f93dd67443f619605757166a21deab9de6461ebd176c889bc20a9bccc4f152671ec52bfe459444c86232e78f0cfe86e88d7c6d71af0927b8da379104ddc29c09df3bb5e5e6e65b5ff082ae10b55e018a9f37b1e2a957479b536f9018a7167b30ef4ebc05fa6593c7963ca5033b26eae51fb0c8d145a5129381c05dbe74f73104e63b72b58e9fa77beebbaf236288eb7dfeb3ecafedf7684bcf907fb5af837ffd3ff96986b1f"}, {0x50, 0x108, 0x6, "ba4fc3a800bbfbb2f639dc9bc3fb4faa40e5d8a7369860286c8b6d7a7355b9a0fb226f04e311cd76aee58cd542a26e768f1417532db94c48c9c554c4"}, {0xc8, 0x1bf, 0x200, "d0c40064a1b2991b6189c596a72365a78747c97aa1de9c01a5e334ce3aa50b16d852c52cc0a38c87dbe95d6cfeca22d008fbb1ca225f96028738749dbca31cf7e40818eb80773b10813923e6c3bf39ac77d52aed5baedbe153df33038555f3acfe720c50c8f3bc8e8929d4508c28e09f9534029166f99adb2e4af184c8956e83885917a33dabcfbd90efa77028f736b327c1f0aa3c0251901f50a2b94b757397139b8d49c71c4f93ebf05bc95a3abdb93d3f1293d661"}], 0x628}, 0x800) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 16:51:14 executing program 0: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffd000/0x3000)=nil) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ff7000/0x1000)=nil) mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4) 16:51:14 executing program 2: mknod$loop(&(0x7f0000000100)='./file0\x00', 0x400002000006008, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) fdatasync(r0) r1 = inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x40000000) inotify_rm_watch(r0, r1) 16:51:14 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x800, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000080)) eventfd2(0x4, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="4000000010000100000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006970365f7674693000000000000000000c000100aaaaaaaaaa000000"], 0x40}}, 0x0) 16:51:14 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa00080045f5001c000000000004907809000000ffffffff000000000003902e"], 0x0) 16:51:14 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x80011, r0, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64IPOUT\x00', &(0x7f0000000100)='eth1#posix_acl_access\x00', 0x16, 0x1) futex(&(0x7f0000001ac0), 0x3, 0x0, 0x0, &(0x7f0000001c40), 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) 16:51:14 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x240001, 0x4) prctl$PR_CAPBSET_READ(0x17, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) prlimit64(r1, 0xd, &(0x7f0000000200)={0x1, 0x6}, &(0x7f0000000440)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init1(0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = epoll_create(0x7) open(&(0x7f0000000180)='./file0\x00', 0xa0800, 0x20) ptrace(0x420a, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x20) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000580)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) setsockopt(r5, 0x7b, 0x6, &(0x7f00000005c0)="7351517b68837646ba10fc6d30a017269841a1b737e17033422ddb4f6a606633ac760a4e9f0296a2d695a643c37b1e053c54ce2ffe46ad534bfa2f8fe20e25f0f377f36870b3208bf56aae62b9499be9ce96ab7e122f0ee63a89281b450c293f63f1f8ae12857b49155b5e8a9f28f6181b59bc8bbbed7836689d413d4c3b0cc628ca84e6053256bde28955cf0d1b2a472bb0bfc94afca64d3ca89262c865da03421c9a06f8f208b77872c6763fb9404f76b15647471e9f41f406e610a77837c9b800e656b0598064c5a4105df905bd5da528cba190643c44f8cd5a375f95e41d7fa69e5fcaf0ab9646f765671ca0fd18f5", 0xf1) r7 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r6) keyctl$update(0x2, r7, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x4000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000006c0)) write$selinux_create(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="dd3638b7663d2175f4dd6ea72ca34a00cf178fd5ec470078fd406dfc7ca3c8aa070000004d0a068d4db4d8b4ea4348e730cafd0dd2ecab3dccd2735c35d75cdec213a3eef9b10771eace76d02f866a176900d1097c0101622f049c4b00860ee278dd2e7ab9d78fead280fbbb4e5e065799fe5fc635bfa3424ff79107a7ad0b3ebcfbffffff6924881e7442392f8c6c40ae796b8f83b13e"], 0x97) write$selinux_access(r5, &(0x7f0000000000)={'system_u:object_r:etc_t:s0', 0x20, '/usr/sbin/ntpd'}, 0xfffffeff) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000340)) unlinkat(r2, &(0x7f00000001c0)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$GIO_FONT(r5, 0x4b60, &(0x7f0000000480)=""/244) syz_open_procfs(0x0, &(0x7f0000000100)='net/sockstat6\x00') clone(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') 16:51:14 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) write(r0, &(0x7f0000000140)="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", 0x1000) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) 16:51:14 executing program 0: socketpair$unix(0x1, 0x10000000040002, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x10000, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x41c1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x40000, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000280)='/dev/keychord\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x521400, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x7f) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './file0', [{0x20, '/dev/keychord\x00'}, {0x20, '/dev/keychord\x00'}, {0x20, '/dev/keychord\x00'}, {0x20, '/selinux/checkreqprot\x00'}, {}, {0x20, '\x00\b\x00'}, {}, {0x20, '/proc/self/net/pfkey\x00'}, {}, {0x20, 'vboxnet1[wlan0cgroup\\'}], 0xa, "affb32e69ac3bf888c558e9caf6768776e0d1cddf6e054e6cfb2d99569ede51317329103fc5c32e15e6a259fcffe868a81f5df19a29d2a59b0202127c7a9a0aa50b1ccabd6bcc296717caad175a3b3c83b980bb053ec977f3956ab5110685a91a24ef9aa623848f94c57515e4c1fc399c3af5e69d1b4fbaa417d46b659bddd854d853a4f575867ba0fc99b072719cc7ff96ab622adbba996ba0296a3448d76b3d850d342709cf2f2270ca727545971f415ca2a87621837f479ef67261563a61ca86b4cf6b0a7d7b7eb411d66faab3dbe41fa0db113f353c54bf1b8dce1"}, 0x15f) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x9, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="bf160000000000007b6af8ff000000000000950000000000000093baed84220c58ad10bc08465cc1d79a066156ce458bcd5b7ef014714f70f4491787d03836e605ce563e47991800193aa3a99f1b31d341165c137b3d4afea4a9d86508f81d6afae504ffffff7f000000009310c28027fc44935300ea2d6b2ac94a6aa42f5b22ff5f4c2d7cda3e68a4886be89b312b3281c80aae10936b69c93ceb1a3717c625722258541df485000000000000000000"], &(0x7f0000000080)='\x00\b\x00\x00'}, 0x48) 16:51:14 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x18<]\xb7H8V\xd1SP\xfa`\xd5)\x8d\xcbG\x0fH\\\x8d\x8awr\xc9\x91VB\x11\xd8\x9e~3\xf1\x87\xa3\xc6$V.\x0f\xbe\xcccbY\x10\x8f\x05\xfaH$_\xa6u\xc6\"\x16k\x16\xc3\x94]\xb3\xd63V\x1d\x19\x02H\xbc\xf2ic\x9d\xdd\bq\xf9\xc0\xf7\x9f\x8d\xf6\xfe\x1d\x9e+Kf\x06s\x19rJG\xa1d\xc6\xe1\x03\xf4m \xe6Re\x1c-\xf4\xdd\x98\xa4p2*u\xd1mW\xaa\xb8\xaa\x17\x1b\xea\xa9\nzF\xead\xdfov\xaa\x9fQ\xb4\xd3U\xd7\xd4\x88[\x1f-g\xbc\xf9\xb9\xd2\xf6\x12\x04\xdc3i\x8e~!\x99\xe4\xfb\xd2\xfb\xa7lgj\x87\xed\xcb\xdf\x91\xaf\x16xG3;\xb6lXN~\x83\xcb]\x1cIL\x91pH\r\x997\xde^\x9e\a\xc0L\x01\x93}c\xe84\xa4j\x00\x00\x00\xd8\xd0\x88R\x17\xcb+]\x1fe\x12\x8a2\xb1469\xa2\x19\x02\xd2\xc6\xe9\xe5\x006\\@\x96\x10C\xe5\xe697\xe4\x12\xb0\x9bi\x8aB\n\x7f\x7f\xb0\x9dL\x87\x8f') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x1) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000380)=0x0) tkill(r1, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x4, &(0x7f0000000000)=[{0x691b, 0xfffffffffffffffd, 0x3, 0x40}, {0x1, 0xfffffffffffffff8, 0xffffffffffffffce, 0x100000001}, {0xffffffffffffff8b, 0x3, 0x6, 0x5}, {0x2b, 0x3, 0x3, 0x3}]}, 0x10) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) listen(r0, 0x7fff) write$selinux_create(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="73797374716d5f753a6f626a6563745f723a6770675f6167656e745f657865635f743a733020756e636f6e66696eed3920303030303030303030303030303030303130323300beb42400ead4c3ea80be11f632c6330df27a54f8eb2389246f06c8d6dde5f3ecbf1a2fef5affa12427afa13887fc22d0b1c7"], 0x46) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) fcntl$notify(0xffffffffffffffff, 0x402, 0x1e06d73802273095) fcntl$setflags(r4, 0x2, 0x1) pwritev(r2, &(0x7f0000001b40)=[{0x0}], 0x1, 0x0) add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000001bc0)={'syz', 0x0}, &(0x7f0000001c00)="e27bc7eb7efc9fadf2318a3f80dd5d79bffa2bfb689966f96dff02d81002a7f2ba567caac18a4bd036bdbace5270cbbe7a9455c8a270d7641e7fb28185c9d608932c85d62792a239002c70a1ddc4ff9e93794449b929f565da41b9155a3f4b69dbf4379f15ddcb1d95beb82eed78", 0x6e, 0xffffffffffffffff) ioctl$int_in(r0, 0x5452, &(0x7f0000000340)=0x8) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000480)={0x8, &(0x7f0000000440)=[{0x1, 0x0, 0x54f6, 0x5088}, {0x7, 0x2c7, 0x6, 0xfffffffffffffffd}, {0x8, 0xffffffffffffff80, 0x3, 0x6}, {0x1, 0xffffffff, 0x4, 0x1}, {0x1, 0x9, 0x5, 0x400}, {0x7, 0xfffffffffffffffa, 0x6, 0x6}, {0x800, 0xc51, 0x800, 0x8}, {0x16c00000000, 0x7, 0x4e60000000000000, 0x60}]}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000200)) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f00000001c0)) sendto$unix(0xffffffffffffffff, &(0x7f0000000280)="f50805f9e06ff933cd61ddbdf1e3714d29f349fc363c85f62ee103ba15abdc8b20faf9d21a763d034cb7ffec812ae6fcbc1f439ce5f60ac646a0097ef5217603af5c606f798328a5a79705f6e71d76f88d2fcca0975cbf04cea6e53e3543a8", 0x5f, 0x20000000, 0x0, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000300)=0x4, 0x4) 16:51:14 executing program 2: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xfffffffffffffff8) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000040)) clone(0x800000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000400)='tls\x00', 0xfffffffffffffe73) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f00000002c0)) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {}, [], {}, [{0x8, 0x2}, {}, {0x8, 0x4}, {}], {0x10, 0x2}}, 0x44, 0x1) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000002c0), 0xc, &(0x7f0000000480)={&(0x7f00000009c0)=ANY=[]}}, 0x10) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000540)) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000080)) [ 1126.853100] print_req_error: 260 callbacks suppressed [ 1126.853120] print_req_error: I/O error, dev loop4, sector 0 [ 1126.876038] print_req_error: I/O error, dev loop4, sector 0 16:51:14 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={0x0, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) 16:51:14 executing program 4: clock_gettime(0x1, &(0x7f0000000000)={0x0}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) clock_settime(0x0, &(0x7f0000000440)={r0}) 16:51:14 executing program 0: ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x180, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x5, 0x80000000, 0x0, 0x4, 0x11, 0x1, 0x72ad, 0x10, 0x7, 0x1, 0x2, 0x3f}) mount(0x0, 0x0, 0x0, 0x801000, 0x0) capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f00005ccfe8)={0x0, 0x4}) syz_read_part_table(0x0, 0x0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) 16:51:14 executing program 4: r0 = openat$selinux_relabel(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$binfmt_elf64(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917}, 0x0) mlockall(0x41000002) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x3) write$binfmt_aout(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="0801200303010000b3020000f20e0000030100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000150000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c38ac80671874dbe65cf12e37dda19dc71973f8950b9ca6fb182b9917cac8052d2ea0a7d70"], 0x4df) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0x1da) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4003ff) write$cgroup_type(r1, &(0x7f0000000240)='threaded\x00', 0xf96d) fallocate(r1, 0x3, 0x8000, 0x8001) fallocate(r1, 0x6, 0x0, 0xfff9) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) sendfile(r2, r2, &(0x7f0000000000), 0x2000005) 16:51:14 executing program 3: lsetxattr$security_selinux(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:memory_device_t:s0\x00', 0x25, 0x3) r0 = socket$inet(0x2, 0x3, 0x4) getsockname(r0, &(0x7f0000000280)=@sco, &(0x7f00000000c0)=0x80) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0008004500001c00000000000490780916000006ffffffff0000000000039048193f85e4761211394ee1cb100f58a26815e96b437e30559da54109ef309a3cff0c44e184790f1ef0b897909f3ee1e5cd7b9b"], 0x0) 16:51:15 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) r1 = creat(&(0x7f0000000140)='./file0\x00', 0xa) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x8) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r2, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0008004500001c000000000004907809400000ffffffff0000000000039078"], 0x0) 16:51:15 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\xcc\xbdh\x00\x00\x00\x00\x00\x00\x04\x00', 0xf310a43552698e69}) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, 0x0) splice(r0, &(0x7f0000000000), r0, &(0x7f0000000040), 0x3a, 0x8) 16:51:15 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) ioctl$KDSETMODE(r0, 0x4b3a, 0x80000001) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003740)=0x202) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) 16:51:15 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000100)=0x6) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000bc0)={{{@in, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000cc0)=0xe8) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000d00)={r3, @loopback, @loopback}, 0xc) capset(&(0x7f00001e8ff8)={0x19980330, r1}, &(0x7f0000032fe8)={0x0, 0x0, 0x0, 0x6}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ifb0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000b80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b40)={&(0x7f00000001c0)=@deltfilter={0x980, 0x2d, 0xf12, 0x70bd2a, 0x25dfdbff, {0x0, r4, {0xe, 0xfff9}, {0xe}, {0x2, 0xfff2}}, [@filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x50, 0x2, [@TCA_RSVP_POLICE={0xc, 0x5, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffff}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x80000000, 0xfff, 0x100000000}, {0x4, 0x8, 0x8001}, 0x6c, 0x4749, 0x3}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xfffffffffffffffb, 0xfffffffffffffff9, 0x80000001}, {0x2, 0x9, 0x80000000}, 0x16, 0x200, 0x7fff}}]}}, @filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20c, 0x2, [@TCA_U32_ACT={0x58, 0x7, @m_csum={0x54, 0x14, {{0xc, 0x1, 'csum\x00'}, {0x20, 0x2, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6f, 0x4, 0x8, 0x10000, 0x5}, 0x1e}}}, {0x20, 0x6, "86541717699479debe0e6b40a4ed7f8bcd4c74b85107a42927367d"}}}}, @TCA_U32_DIVISOR={0x8, 0x4, 0x4e}, @TCA_U32_MARK={0x10, 0xa, {0xffffffffffff7fff, 0x7}}, @TCA_U32_CLASSID={0x8, 0x1, {0x5, 0xf}}, @TCA_U32_LINK={0x8, 0x3, 0x5}, @TCA_U32_SEL={0x174, 0x5, {0x8, 0xffffffffffff6127, 0xffffffff, 0x3, 0xffffffff, 0x1, 0x6, 0x100, [{0x9, 0x7, 0x10001, 0xff}, {0x5, 0xfcc, 0x7, 0x3}, {0x5, 0x2, 0x0, 0x8a6}, {0x6, 0x8, 0x6, 0x1c0000000000}, {0xfffffffffffffff7, 0x10000, 0xfffffffffffffffa, 0x2}, {0x80000000, 0xb1, 0x3090, 0xea}, {0x4, 0x101, 0x2, 0xffffffffffff4488}, {0x80000000, 0x7eb7, 0x3, 0x3}, {0x0, 0x39f7000000000, 0xe33, 0x401}, {0xfff, 0x0, 0x9, 0x7fffffff}, {0x0, 0xffff, 0xfffffffffffffffb}, {0x0, 0x7b, 0x9, 0x2b33ceeb}, {0x6, 0x7e15, 0x7, 0x1}, {0x53, 0x80000000, 0x6, 0x8a8}, {0xfffffffffffff001, 0x5, 0xd54e, 0x800}, {0x698, 0x5, 0x80000001, 0x5}, {0x5, 0x1, 0x3, 0x8}, {0x7, 0x10001, 0x5, 0x1}, {0x0, 0x8, 0x57e, 0x3ff}, {0x147d, 0x30613980, 0xc53, 0xfffffffffffeffff}, {0x2, 0x1, 0x800, 0x1f}, {0x7ff, 0x2, 0x6, 0xc3}]}}, @TCA_U32_POLICE={0xc, 0x6, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}}, @TCA_U32_CLASSID={0x8, 0x1, {0xffff, 0x6}}]}}, @TCA_RATE={0x8, 0x5, {0x0, 0xffffffffffffffff}}, @TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0xfffffffffffff801}, @filter_kind_options=@f_basic={{0xc, 0x1, 'basic\x00'}, {0x6c0, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xffff, 0xffff}}, @TCA_BASIC_POLICE={0xc, 0x4, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}}, @TCA_BASIC_POLICE={0xc, 0x4, @TCA_POLICE_RESULT={0x8, 0x5, 0x100000000}}, @TCA_BASIC_EMATCHES={0xc, 0x2, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3ff}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xfff2, 0xffff}}, @TCA_BASIC_POLICE={0x40, 0x4, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x3, 0x8, 0x3, 0x1, {0x20, 0x0, 0x0, 0x4, 0x0, 0xc0}, {0xfffffffffffffff8, 0x1, 0x6, 0x9, 0x2, 0x5}, 0x100000001, 0x2, 0x10001}}}, @TCA_BASIC_ACT={0x518, 0x3, @m_police={0x514, 0xa, {{0xc, 0x1, 'police\x00'}, {0x408, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x20, 0x80, 0x3, 0xffffffff, 0x1f, 0x8001, 0x6, 0x7, 0xab4, 0x3, 0x4, 0x4, 0x3, 0x1, 0x975, 0xdcd, 0xca71, 0x5, 0x9, 0xffffffffffffff7f, 0x92e7, 0xe46, 0x2, 0x444, 0x246, 0x5, 0x6, 0x81, 0x400, 0x1, 0x2, 0x7, 0x1, 0x10001, 0x400, 0x100000001, 0x6, 0x3f, 0xc89, 0x7, 0x0, 0x27, 0x1f, 0x3, 0x1ff, 0x401, 0x3, 0x100000000, 0x82ba, 0x0, 0x28, 0x1, 0x9d, 0x5, 0x1, 0x0, 0x7, 0x80, 0x2, 0x100000001, 0xfffffffffffffff8, 0x1f, 0x80, 0x8000, 0x200, 0x8, 0x80000001, 0xa8c6, 0x0, 0x2e4d, 0x3, 0x5, 0x2000000000, 0x7f, 0x1c1d0e87, 0x1, 0x8, 0x1, 0x5, 0x7e, 0x7, 0x1000000, 0x80000000, 0x8, 0xa2c, 0x8, 0x0, 0x2, 0x800, 0x200, 0x85, 0x2, 0x9, 0x4, 0x6, 0x0, 0x1000, 0x2, 0x2, 0x8, 0x8000, 0x9, 0x5, 0x1, 0x20000000000000, 0xff, 0x2, 0x8, 0x6, 0x4, 0x2, 0x2, 0x0, 0x1, 0x7fffffff, 0x655d, 0x20000000000000, 0x0, 0x2, 0x3, 0x20, 0x1000, 0xfffffffffffffffa, 0x2, 0x1, 0x8, 0x0, 0x9, 0x8, 0x2, 0x3, 0x0, 0x6, 0xf2, 0x5, 0x1, 0x6, 0x0, 0x2056, 0x7, 0xffff, 0x4360, 0x7fffffff, 0x7, 0x7, 0x9, 0xffffffffffff6af0, 0x5, 0x1, 0x71, 0x7fffffff, 0x8, 0x100000001, 0x5, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x400, 0x3, 0x1, 0x7ff, 0x7, 0x26, 0x7, 0x100000000, 0x2, 0x20, 0x1, 0x3, 0x6, 0x174, 0x9, 0x0, 0x7, 0x90, 0x8651, 0x7fff, 0x2, 0x3, 0x3, 0x7, 0x1, 0x5adb, 0x1, 0x2, 0x6, 0xfffffffffffffffe, 0xa52853e, 0x5, 0x6, 0x2, 0xff, 0x8, 0x4, 0x80000000, 0xcd3, 0xa5d3, 0x7fb, 0x800, 0x100, 0x6, 0x0, 0x4, 0x9, 0x744, 0x8001, 0x6, 0x101, 0xa6, 0x2, 0x2, 0x2, 0x8000, 0x80, 0xa9, 0x9, 0x7, 0x9, 0xfffffffffffffae5, 0x5, 0x2, 0x10000, 0x100000001, 0x80, 0x4, 0xffffffffffffff68, 0x8, 0x2, 0x200, 0x5, 0x100000000, 0x4, 0xff, 0x3ff, 0x80, 0x80000001, 0x7fff, 0x8001, 0x2, 0x9, 0x0, 0x6, 0x2, 0x9, 0x10001, 0x5, 0x8, 0x351, 0xae9, 0xec0, 0x8, 0x3, 0x9f6, 0x3, 0x10001]}]}, {0xf8, 0x6, "b3424f26ddfd240082716a50acc9543bb3a147fd7268c7681c36e6b8d61c811ba8d6cf9b8d6366ea9ecdebf1fafc80e1ccdb0986126e3cf1ae30c89b6553af032639e6c7ac29f1db6f99a74515974403ede27f2ab2c6677c531d40d3445caa69694e7a3b0091da5357f7bba26d57fc88443fc498d252b6eea6e615e56740baff597908588c0198e0cfabd13c67cff59bfc39175a8b08e15edbe33928be5442ac3f8eee4ee0d932bb8f494079fe73243df63ee180b1bf1541be70eeabc622fd11c369caf1e545df04e199caccd11fa6c1257a7f358e80a3e8443940c8ecd36ac8411c218556310b85a96ab93927ab4a83dab764d9"}}}}, @TCA_BASIC_ACT={0xe8, 0x3, @m_simple={0xe4, 0xd, {{0xc, 0x1, 'simple\x00'}, {0x88, 0x2, [@TCA_DEF_PARMS={0x18, 0x2, {0x100000001, 0x4, 0x10000007, 0x2, 0xffff}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x1, 0x4, 0x1, 0x6}}, @TCA_DEF_DATA={0x28, 0x3, '\x88!-cpusetwlan0@cpuset\xc6ppp0selinuxlo\x00'}, @TCA_DEF_DATA={0x14, 0x3, 'cgroupvboxnet1^\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x44, 0xfffffffffffffffd, 0x4, 0x0, 0x8}}]}, {0x48, 0x6, "c661b8d5085796cbd8e70ead020235dad086dea7783f82ce0988cc44fac59788768bb29ac7b74058e880e6557020ca1a9afb8ef36f704695f85242600b1451b7acfcec07"}}}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xf}}, @TCA_BASIC_POLICE={0x40, 0x4, @TCA_POLICE_TBF={0x3c, 0x1, {0x80, 0x1, 0x21, 0x7fffffff, 0x0, {0xa54, 0x2, 0x5, 0x101, 0x9}, {0x3, 0x2, 0x3, 0x2, 0x0, 0xdd23}, 0x40, 0x7f, 0x6}}}]}}]}, 0x980}, 0x1, 0x0, 0x0, 0x8000}, 0x4040811) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8955, &(0x7f00000000c0)={'\xeco\x00@\x00'}) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) ioctl$LOOP_SET_BLOCK_SIZE(r5, 0x4c09, 0x40) 16:51:15 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, 0x0}) fcntl$getownex(r2, 0x10, &(0x7f00000001c0)={0x0, 0x0}) rt_tgsigqueueinfo(r3, r4, 0xa, &(0x7f0000000200)={0x6, 0x3f}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f00000002c0)=0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) rt_sigtimedwait(&(0x7f0000000000)={0x8000}, &(0x7f0000000100), &(0x7f0000000080), 0x8) getsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000b67000), &(0x7f00000000c0)=0x4) [ 1155.030283] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1211.350216] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1216.470376] ip6_tunnel: 6tnl0 xmit: Local address not yet configured! [ 1252.310328] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1288.150279] INFO: task syz-executor1:19242 blocked for more than 140 seconds. [ 1288.157584] Not tainted 4.14.93+ #6 [ 1288.161976] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1288.169932] syz-executor1 D27992 19242 18192 0x00000004 [ 1288.175705] Call Trace: [ 1288.178295] ? __schedule+0x91c/0x1f30 [ 1288.182307] ? __sched_text_start+0x8/0x8 [ 1288.186466] ? lock_downgrade+0x5d0/0x5d0 [ 1288.190726] ? lock_acquire+0x10f/0x380 [ 1288.194697] ? __mutex_lock+0x64b/0x1430 [ 1288.198798] schedule+0x92/0x1c0 [ 1288.202322] schedule_preempt_disabled+0x13/0x20 [ 1288.207091] __mutex_lock+0x559/0x1430 [ 1288.211024] ? retint_kernel+0x2d/0x2d [ 1288.214911] ? loop_control_ioctl+0x183/0x300 [ 1288.219395] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1288.224934] ? __lock_acquire+0x56a/0x3fa0 [ 1288.229175] ? retint_kernel+0x2d/0x2d [ 1288.233215] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1288.237969] ? __radix_tree_lookup+0x180/0x220 [ 1288.242596] ? loop_control_ioctl+0x183/0x300 [ 1288.247127] loop_control_ioctl+0x183/0x300 [ 1288.251495] ? loop_probe+0x180/0x180 [ 1288.255297] ? loop_probe+0x180/0x180 [ 1288.259079] do_vfs_ioctl+0xabe/0x1040 [ 1288.262998] ? selinux_file_ioctl+0x426/0x590 [ 1288.267587] ? selinux_file_ioctl+0x116/0x590 [ 1288.272824] ? ioctl_preallocate+0x1e0/0x1e0 [ 1288.277222] ? selinux_parse_skb.constprop.0+0x16b0/0x16b0 [ 1288.282903] ? __fget+0x1ff/0x360 [ 1288.286376] ? lock_downgrade+0x5d0/0x5d0 [ 1288.290570] ? lock_acquire+0x10f/0x380 [ 1288.294545] ? __fget+0x44/0x360 [ 1288.297897] ? check_preemption_disabled+0x35/0x1f0 [ 1288.302984] ? security_file_ioctl+0x7c/0xb0 [ 1288.307400] SyS_ioctl+0x7f/0xb0 [ 1288.310812] ? do_vfs_ioctl+0x1040/0x1040 [ 1288.314976] do_syscall_64+0x19b/0x4b0 [ 1288.319008] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1288.324436] INFO: task syz-executor4:19275 blocked for more than 140 seconds. [ 1288.331734] Not tainted 4.14.93+ #6 [ 1288.335859] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1288.343846] syz-executor4 D25992 19275 1849 0x00000004 [ 1288.349477] Call Trace: [ 1288.352118] ? __schedule+0x91c/0x1f30 [ 1288.356014] ? HARDIRQ_verbose+0x10/0x10 [ 1288.360161] ? __sched_text_start+0x8/0x8 [ 1288.364334] ? lock_downgrade+0x5d0/0x5d0 [ 1288.368571] ? lock_acquire+0x10f/0x380 [ 1288.372596] ? __mutex_lock+0x2c1/0x1430 [ 1288.376659] schedule+0x92/0x1c0 [ 1288.380067] schedule_preempt_disabled+0x13/0x20 [ 1288.384818] __mutex_lock+0x559/0x1430 [ 1288.388745] ? __mutex_unlock_slowpath+0x9a/0x7d0 [ 1288.393695] ? __blkdev_get+0xf3/0xe50 [ 1288.397796] ? refcount_inc_not_zero+0x81/0xe0 [ 1288.403122] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1288.408656] ? kobject_get_unless_zero+0x27/0x40 [ 1288.413465] ? get_disk+0xd0/0xd0 [ 1288.416945] ? exact_match+0x9/0x20 [ 1288.420619] ? kobj_lookup+0x325/0x410 [ 1288.424513] ? blkdev_ioctl+0x1810/0x1810 [ 1288.428756] ? __blkdev_get+0xf3/0xe50 [ 1288.432770] __blkdev_get+0xf3/0xe50 [ 1288.436496] ? __blkdev_put+0x6d0/0x6d0 [ 1288.440510] ? blkdev_get+0x1f6/0x8b0 [ 1288.444319] blkdev_get+0x44b/0x8b0 [ 1288.447931] ? bd_may_claim+0xd0/0xd0 [ 1288.452066] ? lock_downgrade+0x5d0/0x5d0 [ 1288.456442] ? bd_acquire+0x21/0x2c0 [ 1288.460242] blkdev_open+0x1cc/0x250 [ 1288.463958] ? security_file_open+0x88/0x190 [ 1288.468510] do_dentry_open+0x41b/0xd60 [ 1288.472527] ? bd_acquire+0x2c0/0x2c0 [ 1288.476336] vfs_open+0x105/0x230 [ 1288.479783] path_openat+0xb6b/0x2b70 [ 1288.483639] ? path_mountpoint+0x9a0/0x9a0 [ 1288.487889] ? perf_trace_lock+0x11e/0x4e0 [ 1288.492199] do_filp_open+0x1a1/0x280 [ 1288.496018] ? may_open_dev+0xe0/0xe0 [ 1288.499804] ? lock_downgrade+0x5d0/0x5d0 [ 1288.503977] ? lock_acquire+0x10f/0x380 [ 1288.507951] ? __alloc_fd+0x3f/0x490 [ 1288.511718] ? _raw_spin_unlock+0x29/0x40 [ 1288.515865] ? __alloc_fd+0x1bf/0x490 [ 1288.519653] do_sys_open+0x2ca/0x590 [ 1288.523405] ? filp_open+0x60/0x60 [ 1288.526970] ? do_clock_gettime+0xd0/0xd0 [ 1288.531747] ? do_syscall_64+0x43/0x4b0 [ 1288.535711] ? do_sys_open+0x590/0x590 [ 1288.539597] do_syscall_64+0x19b/0x4b0 [ 1288.543628] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1288.549013] INFO: task syz-executor4:19293 blocked for more than 140 seconds. [ 1288.556561] Not tainted 4.14.93+ #6 [ 1288.560770] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1288.568732] syz-executor4 D28600 19293 1849 0x00000004 [ 1288.574437] Call Trace: [ 1288.577058] ? __schedule+0x91c/0x1f30 [ 1288.581015] ? __sched_text_start+0x8/0x8 [ 1288.585167] ? lock_downgrade+0x5d0/0x5d0 [ 1288.589299] ? __wake_up_sync+0x20/0x20 [ 1288.593307] schedule+0x92/0x1c0 [ 1288.596666] blkdev_get+0x3f2/0x8b0 [ 1288.600339] ? bd_may_claim+0xd0/0xd0 [ 1288.604254] ? lock_downgrade+0x5d0/0x5d0 [ 1288.608388] ? wait_woken+0x240/0x240 [ 1288.612246] blkdev_open+0x1cc/0x250 [ 1288.615957] ? security_file_open+0x88/0x190 [ 1288.620397] do_dentry_open+0x41b/0xd60 [ 1288.624383] ? bd_acquire+0x2c0/0x2c0 [ 1288.628185] vfs_open+0x105/0x230 [ 1288.631782] path_openat+0xb6b/0x2b70 [ 1288.635583] ? path_mountpoint+0x9a0/0x9a0 [ 1288.639894] ? perf_trace_lock+0x11e/0x4e0 [ 1288.644200] do_filp_open+0x1a1/0x280 [ 1288.648115] ? may_open_dev+0xe0/0xe0 [ 1288.652003] ? lock_downgrade+0x5d0/0x5d0 [ 1288.656185] ? _raw_spin_unlock+0x29/0x40 [ 1288.661109] ? __alloc_fd+0x1bf/0x490 [ 1288.664909] do_sys_open+0x2ca/0x590 [ 1288.668719] ? filp_open+0x60/0x60 [ 1288.672310] ? do_clock_gettime+0xd0/0xd0 [ 1288.676529] ? __fget_light+0x16a/0x1f0 [ 1288.680569] ? do_syscall_64+0x43/0x4b0 [ 1288.684680] ? do_sys_open+0x590/0x590 [ 1288.688552] do_syscall_64+0x19b/0x4b0 [ 1288.692491] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1288.697876] INFO: task syz-executor0:19277 blocked for more than 140 seconds. [ 1288.705180] Not tainted 4.14.93+ #6 [ 1288.709320] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1288.717319] syz-executor0 D28768 19277 26243 0x00000004 [ 1288.722973] Call Trace: [ 1288.725563] ? __schedule+0x91c/0x1f30 [ 1288.729528] ? HARDIRQ_verbose+0x10/0x10 [ 1288.733639] ? __sched_text_start+0x8/0x8 [ 1288.737789] ? lock_downgrade+0x5d0/0x5d0 [ 1288.741982] ? lock_acquire+0x10f/0x380 [ 1288.745949] ? __mutex_lock+0x2c1/0x1430 [ 1288.749990] schedule+0x92/0x1c0 [ 1288.753393] schedule_preempt_disabled+0x13/0x20 [ 1288.758163] __mutex_lock+0x559/0x1430 [ 1288.762096] ? blkdev_reread_part+0x1b/0x40 [ 1288.766417] ? mark_held_locks+0x80/0xf0 [ 1288.770517] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1288.775967] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 1288.781117] ? __wake_up_common_lock+0xe0/0x170 [ 1288.785840] ? blkdev_reread_part+0x1b/0x40 [ 1288.790815] blkdev_reread_part+0x1b/0x40 [ 1288.795057] loop_reread_partitions+0x72/0x80 [ 1288.799535] loop_set_status+0xaa6/0xfb0 [ 1288.803696] loop_set_status64+0xa5/0x100 [ 1288.807855] ? loop_set_status_old+0x2f0/0x2f0 [ 1288.812490] ? lo_ioctl+0x87/0x17e0 [ 1288.816172] lo_ioctl+0x3ce/0x17e0 [ 1288.819706] ? loop_clr_fd+0xac0/0xac0 [ 1288.823634] blkdev_ioctl+0x4d9/0x1810 [ 1288.827538] ? blkpg_ioctl+0x910/0x910 [ 1288.831611] ? lock_downgrade+0x5d0/0x5d0 [ 1288.835830] ? lock_acquire+0x10f/0x380 [ 1288.839793] ? debug_check_no_obj_freed+0x148/0x5c0 [ 1288.844850] ? check_preemption_disabled+0x35/0x1f0 [ 1288.849970] block_ioctl+0xd9/0x120 [ 1288.853802] ? blkdev_fallocate+0x3b0/0x3b0 [ 1288.858218] do_vfs_ioctl+0xabe/0x1040 [ 1288.862146] ? selinux_file_ioctl+0x426/0x590 [ 1288.866638] ? selinux_file_ioctl+0x116/0x590 [ 1288.871165] ? ioctl_preallocate+0x1e0/0x1e0 [ 1288.875571] ? selinux_parse_skb.constprop.0+0x16b0/0x16b0 [ 1288.881330] ? __fget+0x1ff/0x360 [ 1288.884791] ? lock_downgrade+0x5d0/0x5d0 [ 1288.888918] ? lock_acquire+0x10f/0x380 [ 1288.892945] ? __fget+0x44/0x360 [ 1288.896337] ? check_preemption_disabled+0x35/0x1f0 [ 1288.901422] ? security_file_ioctl+0x7c/0xb0 [ 1288.905843] SyS_ioctl+0x7f/0xb0 [ 1288.909297] ? do_vfs_ioctl+0x1040/0x1040 [ 1288.913514] do_syscall_64+0x19b/0x4b0 [ 1288.917399] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1288.923382] INFO: task syz-executor0:19281 blocked for more than 140 seconds. [ 1288.930674] Not tainted 4.14.93+ #6 [ 1288.934913] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1288.942912] syz-executor0 D29120 19281 26243 0x00000004 [ 1288.948546] Call Trace: [ 1288.951201] ? __schedule+0x91c/0x1f30 [ 1288.955082] ? HARDIRQ_verbose+0x10/0x10 [ 1288.959266] ? __sched_text_start+0x8/0x8 [ 1288.963461] ? lock_downgrade+0x5d0/0x5d0 [ 1288.967604] ? lock_acquire+0x10f/0x380 [ 1288.971611] ? __mutex_lock+0x2c1/0x1430 [ 1288.975672] schedule+0x92/0x1c0 [ 1288.979101] schedule_preempt_disabled+0x13/0x20 [ 1288.983896] __mutex_lock+0x559/0x1430 [ 1288.987779] ? __mutex_unlock_slowpath+0x9a/0x7d0 [ 1288.992654] ? perf_trace_lock+0x11e/0x4e0 [ 1288.996881] ? __blkdev_get+0xf3/0xe50 [ 1289.000803] ? refcount_inc_not_zero+0x81/0xe0 [ 1289.005379] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1289.011012] ? kobject_get_unless_zero+0x27/0x40 [ 1289.015765] ? get_disk+0xd0/0xd0 [ 1289.019196] ? exact_match+0x9/0x20 [ 1289.023035] ? kobj_lookup+0x325/0x410 [ 1289.026923] ? blkdev_ioctl+0x1810/0x1810 [ 1289.031168] ? __blkdev_get+0xf3/0xe50 [ 1289.035049] __blkdev_get+0xf3/0xe50 [ 1289.038746] ? __blkdev_put+0x6d0/0x6d0 [ 1289.042778] blkdev_get+0x97/0x8b0 [ 1289.046320] ? bd_acquire+0x171/0x2c0 [ 1289.050738] ? bd_may_claim+0xd0/0xd0 [ 1289.054526] ? lock_downgrade+0x5d0/0x5d0 [ 1289.058649] ? lock_acquire+0x10f/0x380 [ 1289.062650] ? bd_acquire+0x21/0x2c0 [ 1289.066364] blkdev_open+0x1cc/0x250 [ 1289.070117] ? security_file_open+0x88/0x190 [ 1289.074623] do_dentry_open+0x41b/0xd60 [ 1289.078702] ? bd_acquire+0x2c0/0x2c0 [ 1289.082577] vfs_open+0x105/0x230 [ 1289.086047] path_openat+0xb6b/0x2b70 [ 1289.089850] ? path_mountpoint+0x9a0/0x9a0 [ 1289.094130] ? perf_trace_lock+0x11e/0x4e0 [ 1289.098378] do_filp_open+0x1a1/0x280 [ 1289.102215] ? may_open_dev+0xe0/0xe0 [ 1289.106019] ? lock_downgrade+0x5d0/0x5d0 [ 1289.110187] ? lock_acquire+0x10f/0x380 [ 1289.114264] ? __alloc_fd+0x3f/0x490 [ 1289.118043] ? _raw_spin_unlock+0x29/0x40 [ 1289.122238] ? __alloc_fd+0x1bf/0x490 [ 1289.126140] do_sys_open+0x2ca/0x590 [ 1289.129844] ? filp_open+0x60/0x60 [ 1289.133424] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1289.138884] ? check_preemption_disabled+0x35/0x1f0 [ 1289.143942] ? fput+0xb/0x140 [ 1289.147062] ? do_syscall_64+0x43/0x4b0 [ 1289.151090] ? do_sys_open+0x590/0x590 [ 1289.154974] do_syscall_64+0x19b/0x4b0 [ 1289.158852] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1289.164281] INFO: task blkid:19279 blocked for more than 140 seconds. [ 1289.170978] Not tainted 4.14.93+ #6 [ 1289.175117] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1289.183681] blkid D29088 19279 298 0x00000004 [ 1289.189302] Call Trace: [ 1289.191998] ? __schedule+0x91c/0x1f30 [ 1289.195880] ? HARDIRQ_verbose+0x10/0x10 [ 1289.199923] ? __sched_text_start+0x8/0x8 [ 1289.204094] ? lock_downgrade+0x5d0/0x5d0 [ 1289.208232] ? lock_acquire+0x10f/0x380 [ 1289.212332] ? __mutex_lock+0x2c1/0x1430 [ 1289.216403] schedule+0x92/0x1c0 [ 1289.219869] schedule_preempt_disabled+0x13/0x20 [ 1289.224659] __mutex_lock+0x559/0x1430 [ 1289.228546] ? __mutex_lock+0x6aa/0x1430 [ 1289.232680] ? __mutex_unlock_slowpath+0x9a/0x7d0 [ 1289.237517] ? lo_open+0x19/0xb0 [ 1289.240932] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1289.246479] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1289.251972] ? kobject_get_unless_zero+0x27/0x40 [ 1289.256727] ? get_disk+0xd0/0xd0 [ 1289.260212] ? exact_match+0x9/0x20 [ 1289.263941] ? blkdev_ioctl+0x1810/0x1810 [ 1289.268205] ? loop_unregister_transfer+0x90/0x90 [ 1289.273086] ? lo_open+0x19/0xb0 [ 1289.276461] lo_open+0x19/0xb0 [ 1289.279651] __blkdev_get+0x8e2/0xe50 [ 1289.283527] ? __blkdev_put+0x6d0/0x6d0 [ 1289.287530] blkdev_get+0x97/0x8b0 [ 1289.291106] ? bd_acquire+0x171/0x2c0 [ 1289.294983] ? bd_may_claim+0xd0/0xd0 [ 1289.298773] ? lock_downgrade+0x5d0/0x5d0 [ 1289.302973] ? lock_acquire+0x10f/0x380 [ 1289.306948] ? bd_acquire+0x21/0x2c0 [ 1289.311293] blkdev_open+0x1cc/0x250 [ 1289.315003] ? security_file_open+0x88/0x190 [ 1289.319410] do_dentry_open+0x41b/0xd60 [ 1289.323440] ? bd_acquire+0x2c0/0x2c0 [ 1289.327255] vfs_open+0x105/0x230 [ 1289.330751] path_openat+0xb6b/0x2b70 [ 1289.334571] ? path_mountpoint+0x9a0/0x9a0 [ 1289.338797] ? perf_trace_lock+0x11e/0x4e0 [ 1289.343086] do_filp_open+0x1a1/0x280 [ 1289.346886] ? may_open_dev+0xe0/0xe0 [ 1289.350732] ? lock_downgrade+0x5d0/0x5d0 [ 1289.354878] ? lock_acquire+0x10f/0x380 [ 1289.358836] ? __alloc_fd+0x3f/0x490 [ 1289.362601] ? _raw_spin_unlock+0x29/0x40 [ 1289.366759] ? __alloc_fd+0x1bf/0x490 [ 1289.370611] do_sys_open+0x2ca/0x590 [ 1289.374330] ? filp_open+0x60/0x60 [ 1289.377867] ? do_syscall_64+0x43/0x4b0 [ 1289.381930] ? do_sys_open+0x590/0x590 [ 1289.385821] do_syscall_64+0x19b/0x4b0 [ 1289.389707] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1289.395138] [ 1289.395138] Showing all locks held in the system: [ 1289.401488] 1 lock held by khungtaskd/23: [ 1289.405750] #0: (tasklist_lock){.+.+}, at: [] debug_show_all_locks+0x7c/0x21a [ 1289.414958] 2 locks held by getty/1746: [ 1289.418926] #0: (&tty->ldisc_sem){++++}, at: [] tty_ldisc_ref_wait+0x22/0x80 [ 1289.427946] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1f7/0x1700 [ 1289.437337] 2 locks held by syz-executor1/19242: [ 1289.442138] #0: (loop_index_mutex){+.+.}, at: [] loop_control_ioctl+0x71/0x300 [ 1289.451290] #1: (&lo->lo_ctl_mutex#2){+.+.}, at: [] loop_control_ioctl+0x183/0x300 [ 1289.460813] 1 lock held by syz-executor4/19275: [ 1289.465473] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0xf3/0xe50 [ 1289.474140] 2 locks held by syz-executor0/19277: [ 1289.478887] #0: (&lo->lo_ctl_mutex/1){+.+.}, at: [] lo_ioctl+0x87/0x17e0 [ 1289.487513] #1: (&bdev->bd_mutex){+.+.}, at: [] blkdev_reread_part+0x1b/0x40 [ 1289.496508] 1 lock held by syz-executor0/19281: [ 1289.501202] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0xf3/0xe50 [ 1289.509710] 2 locks held by blkid/19279: [ 1289.513796] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0xf3/0xe50 [ 1289.522348] #1: (loop_index_mutex){+.+.}, at: [] lo_open+0x19/0xb0 [ 1289.530429] [ 1289.532045] ============================================= [ 1289.532045] [ 1289.539470] NMI backtrace for cpu 1 [ 1289.543139] CPU: 1 PID: 23 Comm: khungtaskd Not tainted 4.14.93+ #6 [ 1289.549549] Call Trace: [ 1289.552119] dump_stack+0xb9/0x10e [ 1289.555646] ? irq_force_complete_move.cold+0xc/0x7b [ 1289.560830] nmi_cpu_backtrace.cold+0x47/0x86 [ 1289.565555] ? irq_force_complete_move.cold+0x7b/0x7b [ 1289.570724] ? nmi_trigger_cpumask_backtrace+0x119/0x147 [ 1289.576157] ? watchdog+0x56c/0xa90 [ 1289.579765] ? reset_hung_task_detector+0x10/0x10 [ 1289.584642] ? kthread+0x310/0x420 [ 1289.588175] ? kthread_create_on_node+0xf0/0xf0 [ 1289.592821] ? ret_from_fork+0x3a/0x50 [ 1289.596794] Sending NMI from CPU 1 to CPUs 0: [ 1289.601379] NMI backtrace for cpu 0 skipped: idling at pc 0xffffffffa0a50322 [ 1289.602346] Kernel panic - not syncing: hung_task: blocked tasks [ 1289.614706] CPU: 1 PID: 23 Comm: khungtaskd Not tainted 4.14.93+ #6 [ 1289.621090] Call Trace: [ 1289.623659] dump_stack+0xb9/0x10e [ 1289.627178] panic+0x1d9/0x3c2 [ 1289.630449] ? add_taint.cold+0x16/0x16 [ 1289.634414] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 1289.639496] ? cpumask_next+0x1f/0x30 [ 1289.643274] ? printk_safe_flush+0xac/0x110 [ 1289.647594] watchdog+0x57d/0xa90 [ 1289.651027] ? reset_hung_task_detector+0x10/0x10 [ 1289.655934] kthread+0x310/0x420 [ 1289.659283] ? kthread_create_on_node+0xf0/0xf0 [ 1289.663931] ret_from_fork+0x3a/0x50 [ 1289.667985] Kernel Offset: 0x1e200000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 1289.678892] Rebooting in 86400 seconds..