[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 20.754756] random: sshd: uninitialized urandom read (32 bytes read, 34 bits of entropy available) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 24.806955] random: sshd: uninitialized urandom read (32 bytes read, 38 bits of entropy available) [ 25.281099] random: sshd: uninitialized urandom read (32 bytes read, 39 bits of entropy available) [ 26.224348] random: sshd: uninitialized urandom read (32 bytes read, 92 bits of entropy available) Warning: Permanently added '10.128.0.43' (ECDSA) to the list of known hosts. [ 31.708938] random: sshd: uninitialized urandom read (32 bytes read, 98 bits of entropy available) 2018/08/08 10:43:40 fuzzer started [ 32.913118] random: cc1: uninitialized urandom read (8 bytes read, 100 bits of entropy available) 2018/08/08 10:43:43 dialing manager at 10.128.0.26:36177 2018/08/08 10:43:44 syscalls: 1 2018/08/08 10:43:44 code coverage: enabled 2018/08/08 10:43:44 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/08/08 10:43:44 setuid sandbox: enabled 2018/08/08 10:43:44 namespace sandbox: enabled 2018/08/08 10:43:44 fault injection: CONFIG_FAULT_INJECTION is not enabled 2018/08/08 10:43:44 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/08/08 10:43:44 net packed injection: enabled 2018/08/08 10:43:44 net device setup: enabled [ 35.741186] random: nonblocking pool is initialized 10:44:17 executing program 0: r0 = memfd_create(&(0x7f0000000000)="73656c66736563757269747940736563757269747927707070302673656c696e7578da3a766d6e65743073656c696e7578707070307d282d5d6e6f6465765b272f2976626f786e6574307d73797374656d766d6e65743000", 0x3) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffd, 0xd8, 0x7, @scatter={0x4, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/26, 0x1a}, {&(0x7f00000000c0)=""/134, 0x86}, {&(0x7f0000000180)=""/224, 0xe0}, {&(0x7f0000000280)=""/210, 0xd2}]}, &(0x7f00000003c0)="9317353cb5cbcd258a596c40fbaa89d62d27a7a84396d2c439af7e871707895f3de2baa07f14855f33b16b2b299ca2e77d6de95e57f4bcfbe556073646ecfb2d646825cb065d3d64c6eeb55a9cce2547d2bbfcf375feeb0532dea6542647e8d90583f94f99795b7076a4bdcbe811f380ea5881b251a2ab08f868d91c254a4ad17413962d18a487c14f92b150cdf567da4a05d7247316502db4e82494cde8e4a7417d8baa45a2c2d32f68b843a69c9653db5d6d06bc2cadffa56e0c41289370c575c49f9e6b6d2ce489c1dc65c383dad9104ac4956a224ec0", &(0x7f00000004c0)=""/144, 0x5, 0x10011, 0x3, &(0x7f0000000580)}) r1 = getuid() getresgid(&(0x7f00000006c0)=0x0, &(0x7f0000000700), &(0x7f0000000740)=0x0) mount$fuseblk(&(0x7f0000000600)='/dev/loop0\x00', &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='fuseblk\x00', 0x4000, &(0x7f0000000780)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}]}}) chown(&(0x7f0000000840)='./file1\x00', r1, r2) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000880)) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) chmod(&(0x7f00000008c0)='./file1/file0\x00', 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000900)={0x0, 0x2, {0x0, 0x2, 0x7, 0x1}}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000980), &(0x7f00000009c0)=0x30) recvfrom$inet6(r0, &(0x7f0000000a00)=""/159, 0x9f, 0x41, 0x0, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000ac0)=0x1) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000b00), &(0x7f0000000b40)=0x8) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000b80)) r4 = syz_open_dev$loop(&(0x7f0000000bc0)='/dev/loop#\x00', 0x6, 0x8000) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000c00)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6}}, &(0x7f0000000d00)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000d40)={{{@in6=@mcast1, @in=@remote, 0x4e20, 0x9, 0x4e24, 0x100, 0xa, 0x0, 0x20, 0x6c, r5, r1}, {0xfffc000000000000, 0x8, 0x4, 0x6, 0x9, 0x5, 0x24a5f0e0, 0x9}, {0xe22, 0x401, 0x20, 0x9}, 0xffffffffffffffe0, 0x0, 0x1, 0x1, 0x3, 0x3}, {{@in6=@mcast1, 0x4d6, 0x7f}, 0xa, @in6=@mcast1, 0x0, 0x1, 0x3, 0x0, 0x9, 0x5, 0x8}}, 0xe8) fcntl$getownex(r4, 0x10, &(0x7f0000000e40)={0x0, 0x0}) ptrace$getregset(0x4204, r6, 0x3, &(0x7f0000000ec0)={&(0x7f0000000e80)=""/47, 0x2f}) truncate(&(0x7f0000000f00)='./file0\x00', 0x2) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000f40), 0x4) ptrace$setopts(0x4206, r6, 0x2, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000f80)={{{@in6=@ipv4={[], [], @multicast1}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f0000001080)=0xe8) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000010c0)={@rand_addr=0x80000000, @loopback, r7}, 0xc) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000001100)) rt_sigtimedwait(&(0x7f0000001140)={0x3f}, &(0x7f0000001180), &(0x7f00000011c0)={0x0, 0x1c9c380}, 0x8) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000001200)={@loopback, r7}, 0x14) inotify_add_watch(r0, &(0x7f0000001240)='./file1/file0\x00', 0x20000000) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x14) 10:44:17 executing program 6: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x8) ioctl$sock_ifreq(r1, 0x8957, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_names='syz_tun\x00'}) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0x100000001, 0x4, 0xffffffffffffff1e, 0x1, 0x8}) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0x5) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x200000, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x8000) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000140)=""/28) socket$l2tp(0x18, 0x1, 0x1) socket(0x10, 0x6, 0xfffffffffffffff9) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x200000, 0x0) r4 = memfd_create(&(0x7f00000001c0)='syz_tun\x00', 0x2) socket$l2tp(0x18, 0x1, 0x1) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000200)={{0xa, 0x4e24, 0xa3b6, @remote, 0x2}, {0xa, 0x4e24, 0xe2, @remote, 0x1}, 0x80000000, [0x49155e37, 0x1f, 0x40, 0xb575, 0xaf, 0x1, 0x8000, 0x4]}, 0x5c) r5 = open(&(0x7f0000000280)='./file0\x00', 0x101800, 0x20) unlinkat(r5, &(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$RTC_WIE_OFF(r5, 0x7010) write$sndseq(r3, &(0x7f0000000300)=[{0x0, 0x100000001, 0x2, 0x3, @tick=0x7fff, {0xffffffffffffff01, 0x6}, {0x5, 0x72d8}, @raw8={"d2cb30ad58f57a822b1be6a8"}}], 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000340)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000480)={'team0\x00', r6}) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) utimensat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)={{}, {r7, r8/1000+10000}}, 0x0) creat(&(0x7f0000000580)='./file0\x00', 0x194) socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f00000005c0)={0xa, 0x4e21, 0xffffffffffffffdc, @mcast1, 0x10001}, 0x1c) chroot(&(0x7f0000000600)='./file0\x00') syz_open_dev$loop(&(0x7f0000000640)='/dev/loop#\x00', 0x7ef5, 0x80000) setsockopt$inet_mreqsrc(r3, 0x0, 0x26, &(0x7f0000000680)={@multicast1, @dev={0xac, 0x14, 0x14, 0x21}, @multicast2}, 0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f00000006c0)={0x4, 0x5, 0x1, 0x100, 0xfff, 0x5}) 10:44:17 executing program 2: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x821, 0x4) sendto$inet6(r0, &(0x7f0000000040)="29ed317bc1633ce8feb3f1e1e81c63eb60a92ee77f4093782666e1bc2edda9053a68ff9fc99fb2c8b4c8b6f1bd2ecaeb2ee4f15001aa52d953d60737956bb49b08c67d139ffadc7d3e9860ca1a1422aef68a552202e5e1eba1fbab8a86f443a97f4f5ceba042af5711ecfd77770ee16ba6c415945749ea524fde1dc6d66161bf3991d1fb8f355aec28a6a3938a23c8", 0x8f, 0x8000, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) sendmsg$nl_route_sched(r0, &(0x7f0000000cc0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000008}, 0xc, &(0x7f0000000c80)={&(0x7f0000000280)=@newtfilter={0x9ec, 0x2c, 0x300, 0x70bd2d, 0x25dfdbfd, {0x0, r1, {0x5}, {0x1, 0xffff}, {0xe, 0x7}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_CHAIN={0x8, 0xb, 0xd711}, @filter_kind_options=@f_flow={{0xc, 0x1, 'flow\x00'}, {0x498, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xbf81, 0x2, 0x80, 0x7, 0x8, 0xfffffffffffffffc, 0x7, 0x4, 0x7, 0x7, 0xfffffffffffffffe, 0x3, 0x8, 0x8c, 0x0, 0xffffffffcf8560ea, 0x7, 0x5, 0x4, 0x100000001, 0x0, 0x8, 0x6, 0x7, 0x200, 0x71, 0x1, 0x10000, 0x8001, 0x9, 0x8001, 0xd2d0, 0x1f, 0x9, 0x4, 0x200, 0x5ea, 0x4, 0x4, 0x8, 0xfff, 0x7, 0xfffffffffffffffb, 0x0, 0x81, 0x7fff, 0x0, 0x401, 0xffffffff, 0x80, 0x3, 0x1, 0x4, 0x0, 0x2, 0x101, 0x4, 0x6, 0x3, 0x20, 0x8, 0x2, 0x1, 0x9, 0x5, 0x1, 0x1, 0x9, 0x20, 0x40, 0x6, 0x84, 0x2, 0x401, 0x3, 0x2, 0x7, 0x0, 0x401, 0x4, 0x3, 0xff, 0x6, 0x8001, 0x5, 0x5, 0x5, 0x1000, 0xfbb, 0xf032, 0x3, 0xfffffffffffff117, 0xd53, 0x100, 0x1, 0xffff, 0x8, 0x9, 0x6, 0x3, 0x9, 0x100, 0x4, 0x2, 0x2, 0x1f, 0x8e, 0x7, 0x2, 0x3f, 0x7, 0x9, 0x2, 0xf1, 0x7ff, 0x7, 0x2, 0x33a9, 0xfffffffffffffbff, 0x3, 0xffffffffffff0001, 0xff, 0xfffffffffffffffc, 0x20, 0x1, 0x6, 0x5, 0x10001, 0x4, 0x80000000, 0x6, 0x4abd, 0x8, 0x4, 0x7, 0x27bb, 0x8, 0x3, 0xffff, 0x4, 0x200, 0x0, 0x10001, 0x80000000, 0x5, 0x10000, 0x6, 0x41d4, 0x8, 0x6, 0xd1b, 0x4, 0x7, 0x3ff, 0x9, 0x7, 0x80000000, 0x1, 0xfffffffffffffffb, 0x80000000, 0x6, 0x3, 0x2, 0xffff, 0x6e, 0x72, 0x3cdc28ec, 0xfff, 0x10000, 0x1a, 0x1ff, 0x80000000, 0x3, 0xffff, 0x7, 0x0, 0x3f, 0xffffffffffffff01, 0x101, 0x4, 0xfff, 0x9e, 0x7, 0x2, 0x800, 0x1, 0x7, 0x22d, 0x1f, 0xfffffffffffffffd, 0x2, 0x0, 0xa2, 0x1, 0x3c4a594, 0x6, 0x1, 0x40, 0x6, 0xfffffffffffffffd, 0x9, 0x9, 0x35a4e816, 0x400, 0x101, 0x80, 0x80, 0x8000, 0xffffffff, 0x13, 0x5, 0xfffffffffffffffb, 0xfffffffffffffffb, 0xd04, 0x7, 0xffffffff00000001, 0x8a, 0x3, 0xf2, 0xbc, 0x8, 0x2, 0x4b6f, 0x7, 0x7, 0x2, 0x400, 0x9e52, 0x81, 0x2, 0x3, 0x5, 0x5, 0x5, 0x4, 0x0, 0x7f, 0x4, 0x3ff, 0x80, 0x8, 0x624, 0x7f, 0x401, 0x80000000, 0x3f, 0x5, 0x6, 0x2, 0x4, 0x8, 0x2, 0x401, 0x2a, 0x3, 0x4]}}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x1f, 0xb}}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_EMATCHES={0x60, 0xb, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, @TCF_EM_IPSET={0x14, 0x64, {0xfffffffffffffff8, 0x8, 0xfff, 0x13fb0323, {0x3bf3, 0x3, 0x7}}}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffffffffffffffe0}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffffffffffffffd}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, @TCF_EM_NBYTE={0x18, 0x2, {0xffff, 0x2, 0xdac, 0x0, {0x100000000, 0x2, 0x1, '~'}}}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}, @TCA_FLOW_POLICE={0xc, 0xa, @TCA_POLICE_AVRATE={0x8, 0x4, 0x625}}, @TCA_FLOW_ADDEND={0x8, 0x5, 0xffffffffffffffff}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x400}]}}, @TCA_RATE={0x8, 0x5, {0x0, 0x2}}, @filter_kind_options=@f_flow={{0xc, 0x1, 'flow\x00'}, {0x4cc, 0x2, [@TCA_FLOW_POLICE={0xc, 0xa, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffffffffffc1}}, @TCA_FLOW_MASK={0x8, 0x6, 0x3}, @TCA_FLOW_POLICE={0xc, 0xa, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffff}}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x300000000}, @TCA_FLOW_PERTURB={0x8, 0xc, 0xffffffff}, @TCA_FLOW_EMATCHES={0x138, 0xb, [@TCA_EMATCH_TREE_LIST={0xdc, 0x2, @TCF_EM_CONTAINER={0xd8, 0x3ff, {0x1, 0x0, 0x0, 0x6, "79ba17a6f5948fdb00b8161fb2526bf589ba19d6d6f52e81379bf81fe14ce18bd45a524e8b7b7c8072f8919b1ce9218f5133978ead03849bf4f89b0ca09ca90af892a5f796c2a8ee9df9c3bf4cf46cde760442d7a5b8467bea0ea4028b248ce8ed43b037ab7ff6dcd1204759f28c1789233f07cdd2051dfee6534c905afabdcf3b9a0f9e758adc6179fcddbe0ab8a91be87521730857a174bd856907a1b9ece2b1305d3de199a44f84dee85017f204c189c644ec9401dd2ef890d12a8c2b98d5f91babd3a406301b"}}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, @TCF_EM_NBYTE={0x1c, 0x7fffffff, {0x0, 0x2, 0x3, 0x5, {0x8000, 0x6, 0x1, '+k'}}}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x94}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x10001}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, @TCF_EM_CMP={0x1c, 0x71, {0xb81, 0x1, 0x80000001, 0x8, {0x4, 0x9, 0x7, 0x1, 0x80000001, 0x3, 0x1}}}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x100000001}}]}, @TCA_FLOW_ACT={0xd4, 0x9, @m_ipt={0xd0, 0xb, {{0x8, 0x1, 'ipt\x00'}, {0x48, 0x2, [@TCA_IPT_INDEX={0x8, 0x3, 0xfffffffffffffff8}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_TABLE={0x14, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x401}]}, {0x78, 0x6, "7d2de0750764457e28a2d92428f57df7778b2ee66f0b6d23fbc4e0831753950bef31cf4e363acc5187ee5aada5b855731e20177fbfb45c586d44f2726f611eecd32f4b0f9a2602a605d7e8f824b506e3566dfdac616e9006065267f0144e45ff7f3ddff22a206ae561b346f2cb6ec31bd131c21d"}}}}, @TCA_FLOW_EMATCHES={0x27c, 0xb, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, @TCF_EM_NBYTE={0x1c, 0x2d5, {0x44, 0x2, 0xfffffffffffeffff, 0x400, {0x0, 0x8, 0x2, "85d0f2cfca"}}}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, @TCF_EM_IPT={0x10, 0x0, {0x1, 0x9, 0x100, 0x9}}}, @TCA_EMATCH_TREE_LIST={0x1c8, 0x2, @TCF_EM_IPT={0x1c4, 0x40, {0x101, 0x9, 0x3, 0x5, [@TCA_EM_IPT_MATCH_REVISION={0x8, 0x3, 0x7f}, @TCA_EM_IPT_MATCH_REVISION={0x8, 0x3, 0x8}, @TCA_EM_IPT_MATCH_NAME={0xc, 0x2, 'policy\x00'}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x7}, @TCA_EM_IPT_NFPROTO={0x8, 0x4, 0x5}, @TCA_EM_IPT_MATCH_DATA={0xa4, 0x5, "0954ad7e9fb05467bd6cc9c0ac7d21053195271874a7f5540ec7579bc24c2bf0fd9fd807a3802ea0b7f30dbbb7a3807b138026827cac09cd06bc72290fe957b4ddcfc811f586c1bd65645eef7c5e0db9990a2523c24081e555313522a60c9de3af016b56f3198fbd8ffa27fff1880c01555350f8f1c88ac3d58e0200b3c3d0dbe0b6dcd0e82a228f7d9cbb133e771bbc46ef47868ea85c9f2b745cc4d9fb"}, @TCA_EM_IPT_MATCH_NAME={0xc, 0x2, 'policy\x00'}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x7}, @TCA_EM_IPT_NFPROTO={0x8}, @TCA_EM_IPT_MATCH_DATA={0xc8, 0x5, "2ecf1aafe549c04cf72c431b5277292138bf10deb82f4a3927a8f6a3c8d769baef9b95182daa7c48a336e5748bccbd1e25eae7f3b5462f6a236557d7cdbc98afa3f6e473c4033811f6d3abb8fd0feb7104d66bb849c027df8d0174d462fb24d434dab761a01635b42df5179990be8d676456439202084f768db29a94c40572245f8569668d1fb2acc86cde6322c6bb347546aff7f28481a34f340acb6c621e17acaa454fc613f24ea4cb0c3a051b540e6c45b95eebcc34c275e29fa5f6d21b89ca"}]}}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, @TCF_EM_CANID={0x18, 0x4, {0x9, 0x7, 0x8, 0xffff, {0x0, 0x5}}}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, @TCF_EM_IPT={0x28, 0x8, {0x7, 0x9, 0xf5, 0x7f, [@TCA_EM_IPT_MATCH_NAME={0xc, 0x2, 'policy\x00'}, @TCA_EM_IPT_MATCH_NAME={0xc, 0x2, 'policy\x00'}]}}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, @TCF_EM_NBYTE={0x20, 0x8, {0xab84, 0x2, 0x1f, 0x7fff, {0x47b, 0x7, 0x0, "ed6d9ac1128b"}}}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1000}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}, @TCA_FLOW_MASK={0x8, 0x6, 0x100}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x4, 0x7}}]}}, @filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x1c, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x7}, @TCA_U32_CLASSID={0x8, 0x1, {0xd, 0x10}}, @TCA_U32_FLAGS={0x8, 0xb, 0x8}]}}, @TCA_RATE={0x8, 0x5, {0xbc5, 0xc422}}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x9ec}, 0x1, 0x0, 0x0, 0x8d0}, 0x48800) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000d00)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in=@multicast2}}, &(0x7f0000000e00)=0xe8) connect(r0, &(0x7f0000000e40)=@ipx={0x4, 0x0, 0x9, "0058c4ef7667", 0x8}, 0x80) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ec0)=0x0) ioctl$BLKTRACESETUP(r0, 0xc0401273, &(0x7f0000000f00)={[], 0x3, 0x8000, 0x4, 0x5, 0x0, r2}) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0xffff, &(0x7f0000000f80)=""/209) preadv(r0, &(0x7f00000013c0)=[{&(0x7f0000001080)=""/25, 0x19}, {&(0x7f00000010c0)=""/210, 0xd2}, {&(0x7f00000011c0)=""/107, 0x6b}, {&(0x7f0000001240)=""/69, 0x45}, {&(0x7f00000012c0)=""/234, 0xea}], 0x5, 0x0) getpeername$unix(r0, &(0x7f0000001400)=@abs, &(0x7f0000001480)=0x6e) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000014c0)=0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000001500)) r4 = add_key$keyring(&(0x7f0000001540)='keyring\x00', &(0x7f0000001580)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000001640)='keyring\x00', &(0x7f0000001680)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$search(0xa, r4, &(0x7f00000015c0)='cifs.spnego\x00', &(0x7f0000001600)={0x73, 0x79, 0x7a, 0x1}, r5) sched_setaffinity(r3, 0x8, &(0x7f00000016c0)=0x4) keyctl$restrict_keyring(0x1d, r4, &(0x7f0000001700)='encrypted\x00', &(0x7f0000001740)='GPL\x00') write$P9_RSYMLINK(r0, &(0x7f0000001780)={0x14, 0x11, 0x2, {0x1, 0x4, 0x4}}, 0x14) r6 = syz_open_procfs(r3, &(0x7f00000017c0)='net/icmp6\x00') getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001800)={0x0, @multicast2, @dev}, &(0x7f0000001840)=0xc) write(r0, &(0x7f0000001880)="059dc318d529aebb3a104e9a659305a1c983a16bd6e3b822a5306598d862f8db252a944f24a9258b74ea", 0x2a) sync_file_range(r0, 0xb0d, 0x8000, 0x4) umount2(&(0x7f00000018c0)='./file0\x00', 0x4) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000001900)) getsockopt$inet6_udp_int(r6, 0x11, 0x66, &(0x7f0000001940), &(0x7f0000001980)=0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000019c0)=0x62a5741e, 0x4) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000001a00)='/selinux/relabel\x00', 0x2, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001a40)='/selinux/commit_pending_bools\x00', 0x1, 0x0) 10:44:17 executing program 7: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)=0x0) getsockname$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x1c) r2 = dup3(r0, r0, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000140)=""/108) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x80000000, @dev={0xfe, 0x80, [], 0x17}, 0x1}, 0x1c) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000200), &(0x7f0000000240)=0x8) ftruncate(r2, 0x20) acct(&(0x7f0000000280)='./file0\x00') setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f00000002c0)=0x7, 0x4) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000300)={0x2, 0x5}) ioctl$TIOCLINUX2(r2, 0x541c, &(0x7f0000000340)={0x2, 0x4, 0xfff, 0x9, 0x7}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x2000, 0x0) write$FUSE_LK(r3, &(0x7f00000003c0)={0x28, 0x0, 0x7, {{0x100, 0x5, 0x1, r1}}}, 0x28) ioctl$RTC_PIE_ON(r2, 0x7005) sendfile(r3, r3, &(0x7f0000000400), 0x3) recvmmsg(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000440)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/180, 0xb4}], 0x1, 0x0, 0x0, 0x435}, 0x8000}, {{&(0x7f00000005c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/245, 0xf5}, {&(0x7f0000000740)=""/38, 0x26}, {&(0x7f0000000780)=""/89, 0x59}, {&(0x7f0000000800)=""/190, 0xbe}, {&(0x7f00000008c0)=""/77, 0x4d}, {&(0x7f0000000940)=""/179, 0xb3}], 0x6, &(0x7f0000000a40)=""/70, 0x46, 0x2}, 0xffffffffffff75d8}], 0x2, 0x2, &(0x7f0000000b00)={0x77359400}) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000b40)={0x1, {{0xa, 0x4e21, 0x4, @loopback, 0x10001}}, {{0xa, 0x4e24, 0x10000, @ipv4, 0x40}}}, 0x104) clock_getres(0x1, &(0x7f0000000c80)) r5 = openat$cgroup_type(r2, &(0x7f0000000cc0)='cgroup.type\x00', 0x2, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000d00)={0xffffffffffffffff}) socketpair$inet(0x2, 0x6, 0x1f, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_GET_SG_TABLESIZE(r2, 0x227f, &(0x7f0000000d80)) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000dc0)=0x910, 0x4) bind$inet(r4, &(0x7f0000000e00)={0x2, 0x4e21, @local}, 0x10) ioctl$KIOCSOUND(r3, 0x4b2f, 0x7) setsockopt$inet6_int(r2, 0x29, 0x4c, &(0x7f0000000e40)=0x8, 0x4) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000000e80)={0x7fff, 0x18000000, 0x4, 0x0, 0x0, [{r5, 0x0, 0x7fff}, {r7, 0x0, 0x1df}, {r3}, {r6, 0x0, 0x3}]}) 10:44:17 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000100)="6077568a321a8452ddce6dcf90f9f670", 0x10) r1 = mmap$binder(&(0x7f0000ff1000/0xe000)=nil, 0xe000, 0x9, 0x10010, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x1c, 0x0, &(0x7f0000000140)=[@free_buffer={0x40086303, r1}, @request_death={0x400c630e, 0x4, 0x9}], 0x86, 0x0, &(0x7f0000000180)="6002d64b274c461bfeb882adc0d5acfcc2c04ea2b3b4251ee3d4f766a3f8ca0048715cdbe04bc16b2df6caed39fc7c41da357a8b5ed384917a182f73aaf6d638079f42e64a133aa440f4f6797ef59776df20928e119a9048b73905160035c90bcce8ddc2a4a782bf73a65053a5dd4635115ba2e24b70f17451e05fc4c0c08a27ee9f22675cf5"}) fcntl$setpipe(r0, 0x407, 0x7fff) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000280)="a917abd6") r2 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x40) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000300)="87e3b97bbebc8d826cdc33e02fc130a6dd3d04a30b52afdd309f1bef29476d82480a694ee7a497e6ad7368792190ff6778b4e86eb7372f2e8f52bdfa30b7f978feff64a0ea25a76f1052f5aaf981948f61c452180e568b41ee22c1867215a43176fc8fe85e9a0153dd1b95cf116ae9fd23ad458e9e52db4f342040ba6e9a10c1ffa4af2273732c6b3628922ac4a8e065980bd4f7c83ea277fcecbb1ac5336dbf1f21473ab7ce7d8db15b4130de7737013a8927c8d9605a6a2f0f0dd78b0e18335b82f126b73e95162bb0b917b1ff32a32d96701597d69375733a5e76dd16") ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000400)) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000440)="05622bb989dddef2924c22c2d0a4d2b6", 0x10) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sw_sync\x00', 0x40, 0x0) connect$inet(r0, &(0x7f00000004c0)={0x2, 0x4e20, @multicast2}, 0x10) recvmsg(r2, &(0x7f0000000880)={&(0x7f0000000500)=@sco, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000580)=""/158, 0x9e}, {&(0x7f0000000640)=""/187, 0xbb}, {&(0x7f0000000700)=""/170, 0xaa}], 0x3, &(0x7f0000000800)=""/87, 0x57, 0x4}, 0x10000) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f00000008c0)=0x5) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000900)=0x7) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000940)={{0x2f, @local, 0x4e22, 0x2, 'rr\x00', 0x20, 0xfffffffffffffff8, 0x1}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x4e23, 0x7, 0x7, 0x9, 0x5}}, 0x44) ioctl(r0, 0xfff, &(0x7f00000009c0)="14ded08b170aa00bf2001d373bc118d153d9d8a7884bdc2fb9affa5fd3c49c20a80ce2c432f56ee2109aff7bbc2700aff2f20cfc7b83dff5fc906793ed56710b0e00d10de207582e29398fa5b24375f8759c95b7a5c0c455afb008e80b7b414b4b17ee7883db035cc8e6a50780308bc6d85ef1167277e09a2a77af582031f664b704b667616dd59228be913c2942a914cd18fa4c8e1c1358ec9057abb47b49d9362606") getsockopt$inet_mreqn(r0, 0x0, 0x815290963d9dfdcf, &(0x7f0000000c00)={@dev, @remote, 0x0}, &(0x7f0000000c40)=0xc) recvfrom$packet(r0, &(0x7f0000000a80)=""/98, 0x62, 0x60, &(0x7f0000000c80)={0x11, 0xf7, r4, 0x1, 0x81, 0x6, @link_local}, 0x14) recvmsg(r3, &(0x7f0000001200)={&(0x7f0000000cc0)=@ethernet, 0x80, &(0x7f0000001180)=[{&(0x7f0000000d40)=""/184, 0xb8}, {&(0x7f0000000e00)}, {&(0x7f0000000e40)=""/82, 0x52}, {&(0x7f0000000ec0)=""/244, 0xf4}, {&(0x7f0000000fc0)=""/253, 0xfd}, {&(0x7f00000010c0)=""/159, 0x9f}], 0x6, &(0x7f00000011c0), 0x0, 0xcc}, 0x42) r5 = getpid() ptrace$setopts(0x4200, r5, 0x3, 0x100000) mkdir(&(0x7f0000001240)='./file0\x00', 0x0) pwritev(r3, &(0x7f0000001400)=[{&(0x7f0000001280)="c6951df8c68f38d7d0c16bd6ac7b5b25c60492f337b74bd8ccbfbec5a2f1881709c771a983c8c1e7c4eff6c56bd7f1622c4478689c77d7999baa82766060718316d0eed44be2de035d0edf35d2b6141899e3af3afe7818e286326b8c25db2b1b39a70c8f4241b8b4cfb8fee90119666c91a7d141f46c7e193d1af97045be7cf18d3748dd445210f49d5bfa595f3c692261f57d13019320596a9e3e4c5f975dfb0caa38fee631f70409ef94959c25300a21c9026b99b4bc1b2e4d015628027224bd773d5c67b7696e894f6cc64ef1a60e575499caee676f09aa8b20088aea", 0xde}, {&(0x7f0000001380)="de94d16dd3bcdf32b6f6400c1be03a2e4afec7c242addeb970728bcf0ec6d886d3f7742267186c82bc8c755214dc82786612724cb1758a97ab945e8b7fb85e2057bc737503d1b6c694f3bf6eb794fe85928ca667a6142f54d51b6002d36ba9ff45349ca691d5077d4cdf1f7bebfcf52829d7954384fbebc60e", 0x79}], 0x2, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r6) sched_getattr(r5, &(0x7f0000001440), 0x30, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000001480)={0x4, 0x5, 0x8, 0x40, 0x7fff}) ioctl(r0, 0x5, &(0x7f00000014c0)="6f3cc005cbf9dfce440599bd542899c49e6d14d61c9ff4e2217b51ad413a2303ffd42a069fd4263029644de017cfd000e01a5cddfa6498be727ac9a5695a2785e80ca0ac7c9a487201fa364a383c905b5dc3e5694779d311fd614567308400a646a456a97218924ee101834c2a3158474c9f186a1394d1344bdf4806fc5325c1a458b81bd8b5c4462b54d2193445b5efeaf5ae798daf0115480ace2895d25ba9b4f5dc56d1dacda02226bcdbbbbd46cf5bd2bcd3bc8879affca6dc0f6b912f681fc44ebdeadf217c61") openat$sw_sync(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/sw_sync\x00', 0x101400, 0x0) 10:44:17 executing program 4: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000040)=0x8) r1 = getpgrp(0x0) sched_setattr(r1, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x3, 0x3, 0x400, 0x8001, 0x6}, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000000c0)) ioctl$RTC_WIE_OFF(r0, 0x7010) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000100)) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000140)={@empty, @remote, 0x0}, &(0x7f0000000180)=0xc) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000001c0)={@mcast1, r2}, 0x14) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000200)={0xffffffffdd8743dd, 0x10000}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x2}) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000280)={0x3ff, 0xb7, "50322ab7054d4d3e651992119a70b4a0f0d10e05cf014296262ddc94e7745a4ec652b74c16ef86f68299863b71468f6ddd6304655fac8886f18ed61e78ace2971483acfc300a45eca5fffe903099916c86fc8abd82a3e9cecac6fd6c178b8e31ebf3438805cd7882750b0f082ef7aa324a4de1287db2521cf5818a47ef4575860b2911827a9f82afeb1c936b798034f19194e2e172a12cd254c907e8be42d7cb94ff846118e78409263e8b70969be345df9535fc5684af"}) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000340)=r1) getrandom(&(0x7f0000000380)=""/4096, 0x1000, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000001380), &(0x7f00000013c0)=0x4) ioctl$BLKGETSIZE64(r0, 0x80041272, &(0x7f0000001400)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001440)={{0xffffffffffffffff, 0x3, 0x7f, 0x3, 0x1}}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40042406, &(0x7f0000001480)='\x00') ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000014c0)={{0x2, 0xc6ca72d1c16fb980, 0x80000000, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001500)={0x4, 0x101, 0x4, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000001580)=""/195, &(0x7f0000001680)=0xc3) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000016c0)={{{@in, @in=@multicast1}}, {{@in=@local}}}, &(0x7f00000017c0)=0xe8) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001840)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x900}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x24, r3, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x53}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000) modify_ldt$write2(0x11, &(0x7f0000001940)={0x446, 0xffffffffffffffff, 0xffffffffffffffff, 0x7fff, 0x7, 0x401, 0x7, 0x6, 0x7, 0x3}, 0x10) tee(r0, r0, 0x115, 0xe) write$P9_RREADDIR(r0, &(0x7f0000001980)={0x2a, 0x29, 0x2, {0x8, [{{0x8, 0x4}, 0x0, 0x5, 0x7, './file0'}]}}, 0x2a) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f00000019c0)) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000001a00)={0x5d, 0x5, 0x20}) 10:44:17 executing program 3: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) r1 = getpgrp(0xffffffffffffffff) rt_tgsigqueueinfo(r0, r1, 0x19, &(0x7f0000000040)={0x25, 0x3ff, 0x6, 0x1}) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@ipv4={[], [], @remote}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@rand_addr, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast1}}, &(0x7f00000003c0)=0xe8) fstat(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@ipv4={[], [], @local}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000580)=0xe8) r8 = getgid() lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000000680)=[0x0, 0x0]) write$FUSE_DIRENTPLUS(r2, &(0x7f00000006c0)={0x2b8, 0xffffffffffffffda, 0x9, [{{0x2, 0x0, 0x3, 0xffffffff, 0x9, 0x0, {0x6, 0x4, 0x3, 0x6, 0x5, 0x6, 0x9, 0x7, 0x6, 0x80, 0x8, r3, r4, 0x7, 0x3}}, {0x0, 0x400, 0x18, 0x5, '/selinux/avc/hash_stats\x00'}}, {{0x3, 0x2, 0x57f8ac41, 0x992, 0x4, 0x8000, {0x5, 0x10000, 0x3457, 0x0, 0x3, 0x7, 0x40, 0x6, 0x0, 0x9, 0xffffffffffffdb75, r5, r6, 0x2, 0x5}}, {0x3, 0x80000000, 0x18, 0x1f, '/selinux/avc/hash_stats\x00'}}, {{0x5, 0x2, 0x1, 0x3, 0x9, 0x7, {0x3, 0x9, 0x20, 0x1, 0x12, 0x4, 0x8eaf, 0x3, 0xffff, 0x10000, 0x40, r7, r8, 0xfffffffffffffeff, 0x1}}, {0x2, 0x7, 0x2, 0x6, 'lo'}}, {{0x5, 0x1, 0xffffffff, 0x8, 0x4, 0x0, {0x2, 0x3, 0x9, 0x100400000, 0x234, 0xfffffffffffffc01, 0x8, 0x7, 0x24532583, 0x8a8, 0x0, r9, r10, 0xfffffffffffffff7, 0x9}}, {0x1, 0x8, 0x10, 0x7ff, 'posix_acl_access'}}]}, 0x2b8) pipe2(&(0x7f0000000980)={0xffffffffffffffff}, 0x4000) ioctl$TIOCLINUX4(r2, 0x541c, &(0x7f00000009c0)) fcntl$setown(r2, 0x8, r1) rt_sigprocmask(0x3, &(0x7f0000000a00)={0x1ff}, &(0x7f0000000a40), 0x8) ioctl$sock_SIOCGPGRP(r11, 0x8904, &(0x7f0000000a80)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000ac0)={{{@in=@multicast1, @in=@dev}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000bc0)=0xe8) pwritev(r11, &(0x7f0000000cc0)=[{&(0x7f0000000c00)="aa4f1eec9f7f71b865fc842d5f032395c73d02bb3525b22baa9cf10ef0c09c24a0edb5382032397d4dfb3bc84242c50a68c90593e12381ad7dc2eaa3072ee8e5ee535e2c3ee2ac5c1f9a1137969c9921108f1f21d3e32d812f8c5961538f1426c7cc369e3a46b1df5027aebb02e02fc73e404f77a65688479e48b90057df206803ca11f664e70e05ad717207694a319c7543c2f92d1a975964377216ea5ac7cfac1187a70416332294f90f2a96d2bbee5f1e592050cc", 0xb6}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r11, 0x6, 0x1, &(0x7f0000000d00), 0x4) r12 = syz_open_dev$loop(&(0x7f0000000d40)='/dev/loop#\x00', 0xfffffffffffffc01, 0x88100) sched_setaffinity(r0, 0x8, &(0x7f0000000d80)=0x8000) write$P9_RLOCK(r11, &(0x7f0000000dc0)={0x8, 0x35, 0x2}, 0x8) waitid(0x1, r0, &(0x7f0000000e00), 0x2, &(0x7f0000000e40)) fcntl$getownex(r12, 0x10, &(0x7f0000000ec0)) getsockopt$inet6_mreq(r11, 0x29, 0x1c, &(0x7f0000000f00)={@local}, &(0x7f0000000f40)=0x14) set_thread_area(&(0x7f0000000f80)={0x6, 0x20000000, 0xffffffffffffffff, 0x6, 0x80000000, 0x2, 0x90c7, 0x80, 0x4, 0x10001}) ioctl$TIOCGETD(r11, 0x5424, &(0x7f0000000fc0)) 10:44:17 executing program 5: socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)=0x0) r3 = fcntl$dupfd(r0, 0x406, r1) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000080)={@multicast2, @dev, 0x0}, &(0x7f00000000c0)=0xc) ioctl$BLKTRACESETUP(r3, 0xc0401273, &(0x7f0000000100)={[], 0x9, 0x0, 0x6, 0x1ff, 0x20, r2}) ioctl$SG_SCSI_RESET(r3, 0x2284, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r3, 0x770a, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bcsh0\x00', r4}) readv(r1, &(0x7f0000001340)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/96, 0x60}, {&(0x7f0000001240)=""/232, 0xe8}], 0x3) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000001380)=r2) ioctl$KDDISABIO(r3, 0x4b37) socket$l2tp(0x18, 0x1, 0x1) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f00000013c0)={0x401, 0x5, 0x3, 0x9}) recvfrom$packet(r3, &(0x7f0000001400)=""/11, 0xb, 0x100, &(0x7f0000001440)={0x11, 0xf6, r4, 0x1, 0xff, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r5 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001480)='/dev/pktcdvd/control\x00', 0x200000, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r5, 0x40047705, &(0x7f00000014c0)={0x800, 0x9}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001540)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000001740)={&(0x7f0000001500), 0xc, &(0x7f0000001700)={&(0x7f0000001580)={0x154, r6, 0x108, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @broadcast}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x100000000}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x43}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x100}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3f}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xe, 0x32}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x24}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa823}]}, 0x154}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) ioctl$SNDRV_TIMER_IOCTL_STATUS(r3, 0x80585414, &(0x7f0000001780)=""/105) syz_open_dev$sndtimer(&(0x7f0000001800)='/dev/snd/timer\x00', 0x0, 0x40000) pread64(r0, &(0x7f0000001840)=""/56, 0x38, 0x0) recvmmsg(r1, &(0x7f0000005280)=[{{&(0x7f0000001880)=@generic, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001900)=""/191, 0xbf}, {&(0x7f00000019c0)=""/96, 0x60}, {&(0x7f0000001a40)=""/125, 0x7d}, {&(0x7f0000001ac0)}, {&(0x7f0000001b00)=""/103, 0x67}, {&(0x7f0000001b80)=""/4, 0x4}], 0x6, 0x0, 0x0, 0x4}, 0x7ff}, {{&(0x7f0000001c00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001c80)=""/231, 0xe7}, {&(0x7f0000001d80)=""/91, 0x5b}, {&(0x7f0000001e00)=""/102, 0x66}, {&(0x7f0000001e80)=""/76, 0x4c}, {&(0x7f0000001f00)=""/106, 0x6a}, {&(0x7f0000001f80)}], 0x6, &(0x7f0000002000)=""/52, 0x34, 0xfffffffffffffff9}, 0x8}, {{&(0x7f0000002040)=@ipx, 0x80, &(0x7f0000002200)=[{&(0x7f00000020c0)=""/193, 0xc1}, {&(0x7f00000021c0)=""/14, 0xe}], 0x2, &(0x7f0000002240)=""/99, 0x63, 0x1000}, 0xc000000000000}, {{&(0x7f00000022c0)=@ax25, 0x80, &(0x7f00000026c0)=[{&(0x7f0000002340)=""/164, 0xa4}, {&(0x7f0000002400)=""/166, 0xa6}, {&(0x7f00000024c0)=""/133, 0x85}, {&(0x7f0000002580)=""/201, 0xc9}, {&(0x7f0000002680)}], 0x5, 0x0, 0x0, 0x5}}, {{&(0x7f0000002700)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002780)=""/13, 0xd}, {&(0x7f00000027c0)=""/72, 0x48}, {&(0x7f0000002840)=""/140, 0x8c}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003900)=""/234, 0xea}, {&(0x7f0000003a00)=""/4096, 0x1000}, {&(0x7f0000004a00)=""/198, 0xc6}, {&(0x7f0000004b00)=""/51, 0x33}, {&(0x7f0000004b40)=""/17, 0x11}, {&(0x7f0000004b80)=""/197, 0xc5}], 0xa, &(0x7f0000004d00)=""/6, 0x6, 0x1a4}, 0x8001}, {{&(0x7f0000004d40)=@in6, 0x80, &(0x7f0000004f00)=[{&(0x7f0000004dc0)=""/240, 0xf0}, {&(0x7f0000004ec0)=""/9, 0x9}], 0x2, 0x0, 0x0, 0x3}, 0x10001}, {{0x0, 0x0, &(0x7f0000005200)=[{&(0x7f0000004f40)=""/65, 0x41}, {&(0x7f0000004fc0)=""/75, 0x4b}, {&(0x7f0000005040)=""/172, 0xac}, {&(0x7f0000005100)=""/101, 0x65}, {&(0x7f0000005180)=""/14, 0xe}, {&(0x7f00000051c0)=""/44, 0x2c}], 0x6, &(0x7f0000005240)=""/28, 0x1c, 0x424}, 0xb71}], 0x7, 0x2000, &(0x7f0000005380)={0x77359400}) r8 = openat$md(0xffffffffffffff9c, &(0x7f00000053c0)='/dev/md0\x00', 0x8000, 0x0) ioctl$BLKRAGET(r8, 0x1263, &(0x7f0000005400)) recvmsg(r1, &(0x7f00000067c0)={&(0x7f0000005440)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000006780)=[{&(0x7f00000054c0)=""/82, 0x52}, {&(0x7f0000005540)=""/4096, 0x1000}, {&(0x7f0000006540)=""/190, 0xbe}, {&(0x7f0000006600)=""/100, 0x64}, {&(0x7f0000006680)=""/101, 0x65}, {&(0x7f0000006700)=""/99, 0x63}], 0x6, 0x0, 0x0, 0x4}, 0x41) r9 = openat$cgroup_subtree(r5, &(0x7f0000006800)='cgroup.subtree_control\x00', 0x2, 0x0) sendfile(r7, r9, &(0x7f0000006840), 0x9b) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000006880)) openat$rfkill(0xffffffffffffff9c, &(0x7f00000068c0)='/dev/rfkill\x00', 0xc0800, 0x0) [ 68.711610] IPVS: Creating netns size=2552 id=1 [ 68.942957] IPVS: Creating netns size=2552 id=2 [ 69.029227] IPVS: Creating netns size=2552 id=3 [ 69.114098] IPVS: Creating netns size=2552 id=4 [ 69.200195] IPVS: Creating netns size=2552 id=5 [ 69.352077] IPVS: Creating netns size=2552 id=6 [ 69.574146] IPVS: Creating netns size=2552 id=7 [ 69.812722] IPVS: Creating netns size=2552 id=8 [ 70.167862] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 70.225848] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 70.345579] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 70.432460] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 70.590257] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 70.651750] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 70.666059] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 70.765360] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 70.776287] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 70.888156] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 70.899561] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 70.995156] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 71.177213] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 71.300381] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 71.319883] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 71.344667] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 71.406992] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 71.415701] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 71.430950] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 71.500933] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 71.510331] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 71.683883] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 71.697501] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 71.754788] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 71.766798] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 71.837718] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 71.847802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.865219] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 71.910408] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 71.923444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.947091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.980521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.000259] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 72.054131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.083523] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 72.118604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.127814] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 72.148448] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 72.189397] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 72.200541] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 72.222233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.357809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.458494] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 72.468186] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 72.557400] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 72.569679] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 72.628772] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 72.669995] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 72.699178] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 72.707998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.756890] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 72.813200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.831833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.901760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.020290] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 73.093346] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 73.235524] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 73.357047] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 73.476351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.538634] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 73.575602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.671402] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 73.753355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.859916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.548015] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 76.621822] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 76.809897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.887322] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 76.947866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.062877] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 77.223226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.248699] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 77.429018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.515573] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 77.588183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.850965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.011998] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 78.317891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.419083] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 78.719272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 10:44:28 executing program 0: 10:44:28 executing program 0: 10:44:28 executing program 0: 10:44:28 executing program 0: 10:44:28 executing program 0: 10:44:28 executing program 6: 10:44:28 executing program 0: 10:44:28 executing program 4: 10:44:28 executing program 6: socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'ip6_vti0\x00', {0x2, 0x4e22, @rand_addr=0xa8e}}) getsockopt$netlink(r1, 0x10e, 0x0, &(0x7f00000000c0)=""/33, &(0x7f0000000140)=0xffffff6d) 10:44:28 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x84000482) unlink(&(0x7f0000000380)='./file0\x00') writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="fd", 0x1}], 0x1) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80000002) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setlease(r1, 0x400, 0x2) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000001c0)={0x7, 0x67, 0x10001, 0xbd4, 0x800}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000080), 0x4) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x800) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000002c0)) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)="73797a5f74756e00000000000400", 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000000300)={'security\x00', 0x2, [{}, {}]}, 0x48) getsockopt$bt_hci(r5, 0x0, 0x3, &(0x7f0000000480)=""/4096, &(0x7f0000000240)=0x1000) r6 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, &(0x7f0000d83ff8), 0x8000fffffffe) 10:44:28 executing program 2: mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0xfffffffffffffffd) timer_create(0x0, &(0x7f0000009ff9)={0x0, 0x0, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000000)) 10:44:29 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000), 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'bridge0\x00'}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x40000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r2, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x73}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0xc001}, 0x4000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a45352, &(0x7f00000000c0)={{0x3, 0x7}, 'port0\x00', 0x0, 0xa0048, 0x80000000, 0x3, 0x36bc, 0x7, 0x2fc68ff7, 0x0, 0x2, 0x3}) 10:44:29 executing program 0: r0 = getpgrp(0x0) r1 = syz_open_procfs(r0, &(0x7f0000000240)='net/udplite6\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') ioctl$sock_ifreq(r1, 0x89df, &(0x7f0000000000)={'veth1_to_bond\x00', @ifru_addrs=@rc={0x1f, {0x13, 0x4, 0x8001, 0x101, 0xf7b8, 0x7}, 0x1}}) sendfile(r1, r2, &(0x7f00000000c0), 0x1) 10:44:29 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00') ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000180)=0x4) write$P9_RMKDIR(r0, &(0x7f0000000280)={0x14, 0x49, 0x2, {0x2, 0x2, 0x4}}, 0x14) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{}, {}, {}, {}, {}]}) r1 = eventfd2(0x0, 0x800) sendfile(r1, r0, &(0x7f0000000000)=0x3, 0x80000001) recvmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f00000017c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001840)=""/129, 0x81}], 0x1, &(0x7f0000001940)=""/182, 0xb6, 0x3f}, 0x5}, {{&(0x7f0000001a00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001a80)=""/144, 0x90}, {&(0x7f0000001b40)=""/122, 0x7a}], 0x2, &(0x7f0000001c00)=""/111, 0x6f, 0x3f}, 0x4}, {{&(0x7f0000001c80)=@in6, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001d00)=""/194, 0xc2}], 0x1, &(0x7f0000001e40)=""/53, 0x35, 0x2}, 0x1d1}], 0x3, 0x100, &(0x7f0000001f00)={0x0, 0x1c9c380}) sendmsg$nl_route(r0, &(0x7f0000001fc0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2800}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)=@bridge_dellink={0x3c, 0x11, 0xb01, 0x70bd28, 0x25dfdbfe, {0x7, 0x0, 0x0, r2, 0x1000, 0x40000}, [@IFLA_PHYS_PORT_ID={0x1c, 0x22, "5106a4074d58b6cd583265a32fcf136b845af4ca3584"}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc001}, 0x8010) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000040)) write$binfmt_misc(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="73797afceb287f71581a"], 0x4) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, &(0x7f0000000080)={{0x0, 0x0, 0xff, 0x3, 0x80000000}, 0x7fffffff, 0x2}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x0, 0x0) recvfrom$unix(r0, &(0x7f0000000480)=""/59, 0xfd78, 0x40004004, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e24}, 0x4c) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000240)=0xe8) r5 = getgid() fchown(r3, r4, r5) ioctl$EVIOCSFF(r3, 0x402c4580, &(0x7f00000004c0)={0x54, 0x7fff, 0xffffffffffffff71, {0x1f, 0x1}, {0x5, 0x10001}, @ramp={0x8000, 0x0, {0x2, 0x4000000, 0x0, 0x232664d2}}}) 10:44:29 executing program 2: socketpair(0x1b, 0x8080f, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) r1 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r1, &(0x7f0000000040)=[{{0x0, 0x7530}, 0x400000000000000, 0x400, 0x6}, {{0x0, 0x7530}, 0x2, 0x5, 0x80000000}, {{0x0, 0x7530}, 0x100000001, 0x9, 0x4}, {{}, 0x3, 0xffffffffffff7fff, 0x7fffffff}, {{}, 0x400, 0x1, 0xf0}, {{}, 0x101, 0x58147e62, 0x9fd}], 0xfe9e) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) 10:44:29 executing program 7: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x14000, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x2e) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x384c0, 0x0) 10:44:29 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x400, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x2, &(0x7f0000000000)={'icmp\x00'}, &(0x7f00000002c0)=0x25a) write$P9_RATTACH(r1, &(0x7f0000000040)={0x14, 0x69, 0x2, {0x0, 0x2, 0x4}}, 0x14) 10:44:29 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000002c0)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0fe1100027f0000d15335352bdf3e26e1"], 0x18) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f00003fdff5)={@multicast2, @dev={0xac, 0x14, 0x14, 0xa}, @dev}, 0xc) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000100)=0x54) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x400, 0x0) 10:44:29 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='limits\x00') write$cgroup_pid(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='0xf'], 0x3) preadv(r0, &(0x7f0000002600)=[{&(0x7f00000003c0)=""/88, 0x58}], 0x1, 0x0) 10:44:29 executing program 6: r0 = gettid() sched_setattr(r0, &(0x7f00000000c0)={0x30, 0x6, 0x1, 0x2, 0xffffffffffff50b9, 0x1, 0x6b, 0xfffffffffffffffc}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @loopback}, 0x1) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000080)={@multicast2, @local, @multicast2}, 0x50) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040)=[{0x7, 0x2}, {0x3, 0x875f}, {0xb, 0xff}], 0x3) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f00000001c0)=""/145, &(0x7f0000695ffc)=0xffffffffffffffbd) 10:44:29 executing program 5: r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) fstat(r0, &(0x7f0000000100)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x87, @empty, 0x4e21, 0x3, 'wlc\x00', 0x12, 0x8001, 0x5a}, 0x2c) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00@\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'lo\x00', 0xfffffffffffffffb}) sendmmsg(r2, &(0x7f0000004840)=[{{&(0x7f0000003540)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000003640)=[{&(0x7f00000035c0)='v', 0x1}], 0x1, &(0x7f0000003680)}}], 0x1, 0x0) 10:44:29 executing program 2: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f0000000080)) r1 = socket(0x20000000000000a, 0x2, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfc}, 0xc) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000180)}, 0x338) fcntl$getflags(r0, 0x40b) 10:44:29 executing program 4: mkdir(&(0x7f0000dda000)='./file0\x00', 0x0) mount(&(0x7f0000900ff8)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000ebcffe)) r0 = creat(&(0x7f0000c5eff4)='./file0/bus\x00', 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mq_getsetattr(r0, &(0x7f0000000000), &(0x7f0000000080)) [ 80.375211] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 10:44:29 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x802, 0x4) syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') recvmsg(r0, &(0x7f0000001d80)={&(0x7f0000000b00)=@xdp, 0x80, &(0x7f0000000d40), 0x0, &(0x7f0000000d80)=""/4096, 0x1000}, 0x0) sendto$inet(r0, &(0x7f00000000c0), 0x3b, 0x0, &(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10) 10:44:29 executing program 1: prctl$void(0x3f) [ 80.423398] device lo entered promiscuous mode 10:44:29 executing program 6: sigaltstack(&(0x7f0000000000/0x2000)=nil, &(0x7f0000000000)) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) socketpair(0x1f, 0x80000, 0x8, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e22, @multicast2}, 0x10) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000040)='/dev/pktcdvd/control\x00', 0x90000, 0x0) ioctl$TIOCNXCL(r2, 0x540d) creat(&(0x7f0000000080)='./file0\x00', 0x6) 10:44:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000002440)=""/4096, 0x1000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000001400)={&(0x7f00000001c0), 0xc, &(0x7f00000013c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001200054100000000ec0000000a000000"], 0x14}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x9, {{0x2, 0x4e24, @rand_addr=0x7}}}, 0x84) 10:44:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_bridge\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4d, 0xfffffffffffffffe, 0x81, 0x2, 0xff, 0x0, 0x0, 0xe9, 0x2, 0x101, [0x900b, 0xfffffffffffff259, 0x5, 0x8000000000000000, 0x440, 0xa52, 0x2, 0xffff], [0x8]}}) 10:44:29 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000080)) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x30040, 0x0) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000240)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000500)={0x0, {{0x2, 0x4e20, @multicast1}}}, 0x84) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000180)={{0xa, 0x4e20, 0x7107, @ipv4={[], [], @multicast1}, 0x6}, {0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, [], 0x21}, 0x7}, 0x8, [0x1, 0x9b, 0x3, 0x81, 0x3, 0xffffffff, 0x4884, 0xf3]}, 0x5c) prctl$void(0x1b) lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000004c0)=@known='security.evm\x00', &(0x7f0000000400)=""/23, 0x17) pipe(&(0x7f0000000200)) [ 80.505741] device lo left promiscuous mode 10:44:29 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x20}, 0x20}}, 0x0) write$binfmt_aout(r0, &(0x7f0000000700)={{0x108, 0x100000000, 0x1, 0x336}, "", [[]]}, 0x120) 10:44:29 executing program 6: memfd_create(&(0x7f0000000000)="0000000000001c0000004300000000", 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000f6bfe8)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) 10:44:29 executing program 7: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) linkat(r0, &(0x7f00000001c0)='./file1\x00', r0, &(0x7f00000000c0)='./file1\x00', 0x0) unlink(&(0x7f0000000100)='./file0\x00') 10:44:29 executing program 4: r0 = socket(0xe, 0x8, 0x4) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffffffffff, 0x2}}, 0x1c}}, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x80000, 0x0) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000080)) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) 10:44:29 executing program 6: syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="27801c777ab4e0b7e8792cdf1974516cd32dda529b2526d93501a1982d6f88c1d2e87171c6c511ce823ddad8980f488fd637cdb1675d028ba35f95abc6529488e2eda66091ac905cee0af0da6c142b19ea8a327b9299dec81a825e3e5153dd436396b324f185700b92d30c6987829087704cd02abd77f92ce5557e5c45c394425d54c464a89edb65bf35869579bfc7868f5e9855813da59fb28e70b84f87d015fe566dd6bfe212542a7acc2d9b1c"], 0x1}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r0 = eventfd2(0x3, 0x0) r1 = dup(r0) fanotify_init(0x4, 0x80000) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000180)) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @mcast2}}, 0x100000000, 0x1, 0x2, "155fdec54234f2760fcd0e82248643a1b2e7ba392564cef84f537e16a912529c367b24aecc7195cbc7eb4392d5b8422f3b869b0952c09cb9ae52c71a275ae2169ca9fc3861574139964c50a40a6a6c61"}, 0xd8) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000340)) ftruncate(r2, 0x280080) sendfile(r1, r2, &(0x7f0000d83ff8), 0x2008000fffffffe) 10:44:29 executing program 7: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)="2f70726f632f3079532f6e65742f69707634af76732f736e61745f7265726f75746500", 0x2, 0x0) 10:44:29 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xc, &(0x7f0000000280)=0xffff, 0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000180)={{0x0, 0x1, 0x9175, 0x3, 0xc04}, 0x8c44, 0x8, 0x2}) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) fallocate(r1, 0x0, 0x0, 0x2) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='lp\x00', 0xfffffffffffffe89) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f00000002c0)) shutdown(0xffffffffffffffff, 0x1) 10:44:29 executing program 5: r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) fstat(r0, &(0x7f0000000100)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x87, @empty, 0x4e21, 0x3, 'wlc\x00', 0x12, 0x8001, 0x5a}, 0x2c) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00@\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'lo\x00', 0xfffffffffffffffb}) sendmmsg(r2, &(0x7f0000004840)=[{{&(0x7f0000003540)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000003640)=[{&(0x7f00000035c0)='v', 0x1}], 0x1, &(0x7f0000003680)}}], 0x1, 0x0) [ 80.767636] device lo entered promiscuous mode 10:44:29 executing program 2: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x1, 0x9, 0x81, 0xeff, @time={0x0, 0x1c9c380}, {0x5186, 0xca}, {0x6ff, 0x7}, @raw32={[0x6, 0x1, 0x8]}}, {0x101, 0x1, 0x40, 0x8, @tick=0x8000, {0x1, 0x1}, {0xfffffffffffff801, 0x7}, @note={0x0, 0xfff, 0x80000000, 0x889, 0x2}}, {0x7fffffff, 0x401, 0xffff, 0x4, @time, {0x7fffffff, 0x4}, {0x0, 0x2}, @result={0x1f, 0x8}}, {0x6, 0x2, 0x9, 0x40, @time={0x77359400}, {0x2, 0x80000000}, {0x6, 0x6}, @control={0x6a63, 0x200, 0x1}}, {0x9, 0x4, 0x0, 0x1, @tick=0x54, {0x8000, 0xfff}, {0x6, 0x6}, @ext}, {0x1ff, 0xffff, 0x9, 0x38, @tick=0x4, {0xbc, 0x673}, {0x6, 0x4}, @control={0x8, 0x10000, 0xffffffffffffffb4}}], 0xa8) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x41) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000b00)={0x0, 0x0, 0x0, 'queue1\x00'}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000300)={0x800, 0x6, 0xfffffffffffff475, 0x3, 0x1, 0x1, 0x4, 0x7}, &(0x7f0000000340)={0x0, 0xffffffff, 0x401, 0x3, 0x80, 0x4, 0x200, 0x7f}, &(0x7f00000003c0)={0x1, 0xfff, 0xc498, 0x3, 0x7, 0x3, 0xffffffffffffffff, 0x8}, &(0x7f0000000400)={0x0, 0x989680}, &(0x7f0000000480)={&(0x7f0000000440)={0x6}, 0x8}) write$sndseq(r0, &(0x7f0000000280)=[{0x6, 0x3, 0x7, 0x9, @time={r3, r4+30000000}, {0x0, 0x8000}, {0xfff, 0x5}, @ext={0x3f, &(0x7f0000000200)="a5cca019be951335365ec8490bf972fe4d91111e3afdaf521c257e8b300fd47979d5f399b81219b01d1f46947305f611600985d73f648ca7d455d712bb697c"}}, {0x0, 0x8000, 0x3, 0x0, @tick=0x2, {0x1, 0x7fff}, {0x7, 0xffffffff}, @connect={{0x3, 0x1}, {0x1ff, 0x6}}}, {0xffffffffffffffb9, 0x5, 0xb38046, 0x5, @time={0x77359400}, {0x7, 0x6}, {0x401, 0x1}, @quote={{0x1}, 0x2}}, {0x8000000080, 0x80, 0x3bc3, 0x11f4a247, @tick=0x9e4aff8, {0x81, 0x101}, {0x20, 0x6}, @quote={{0x4, 0x2}, 0x7, &(0x7f0000000240)={0x1ff, 0x1, 0x7, 0x8, @time={0x77359400}, {0x8, 0x81}, {0x100000001, 0x59}, @result={0x800, 0x49}}}}], 0x70) clock_gettime(0x0, &(0x7f0000000140)={0x0}) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000000)) write$sndseq(r2, &(0x7f0000000380)=[{0x0, 0x1ff, 0x0, 0x0, @time={r5}, {}, {}, @ext={0x0, &(0x7f00000000c0)}}], 0x30) r6 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) write$sndseq(r6, &(0x7f00000001c0)=[{0x1e, 0x0, 0x0, 0x3fd, @time, {}, {}, @connect}], 0x30) 10:44:29 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000000000)={0x2, 0x85, 0xa3af, 0xfffffffffffffff7, 0x5, 0x8}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f000002b000)={0xffffffffffffffff, 0x7, 0x81, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d", 0xffffffffffffffff}) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6669000010000bfe"], 0x1) ioctl$KIOCSOUND(r2, 0x4b2f, 0x8) write$sndseq(r0, &(0x7f0000000080), 0xffffffe7) [ 80.854756] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 80.946485] device lo left promiscuous mode [ 81.033546] device lo entered promiscuous mode 10:44:30 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) socket$inet6(0xa, 0x5, 0xce) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) mq_timedsend(r1, &(0x7f0000000080)="969a94d0f4bb8744276d8ecc20", 0xd, 0x4, &(0x7f00000000c0)={0x77359400}) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fremovexattr(r0, &(0x7f0000000040)=@random={'security.', './cgroup.cpu\x00'}) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x100000000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) getresuid(&(0x7f00000004c0), &(0x7f0000000000)=0x0, &(0x7f00000032c0)) syncfs(r1) fstat(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r2, &(0x7f00000001c0)={0xa0, 0x19, 0x2, {0x828, {0x8b, 0x3, 0x2}, 0x28, r3, r4, 0x7, 0x88, 0x5, 0xe00000, 0xd5, 0x6, 0xe6, 0x6, 0xffffffff, 0x1ff, 0x9, 0xfffffffffffff001, 0x80000001, 0x0, 0xffffffffffff6c39}}, 0xa0) 10:44:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x2000000000000007) writev(r0, &(0x7f0000000100), 0x0) getrandom(&(0x7f0000000000)=""/247, 0xf7, 0x3) socket$netlink(0x10, 0x3, 0x12) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x20) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x5) 10:44:30 executing program 2: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x1, 0x9, 0x81, 0xeff, @time={0x0, 0x1c9c380}, {0x5186, 0xca}, {0x6ff, 0x7}, @raw32={[0x6, 0x1, 0x8]}}, {0x101, 0x1, 0x40, 0x8, @tick=0x8000, {0x1, 0x1}, {0xfffffffffffff801, 0x7}, @note={0x0, 0xfff, 0x80000000, 0x889, 0x2}}, {0x7fffffff, 0x401, 0xffff, 0x4, @time, {0x7fffffff, 0x4}, {0x0, 0x2}, @result={0x1f, 0x8}}, {0x6, 0x2, 0x9, 0x40, @time={0x77359400}, {0x2, 0x80000000}, {0x6, 0x6}, @control={0x6a63, 0x200, 0x1}}, {0x9, 0x4, 0x0, 0x1, @tick=0x54, {0x8000, 0xfff}, {0x6, 0x6}, @ext}, {0x1ff, 0xffff, 0x9, 0x38, @tick=0x4, {0xbc, 0x673}, {0x6, 0x4}, @control={0x8, 0x10000, 0xffffffffffffffb4}}], 0xa8) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x41) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000b00)={0x0, 0x0, 0x0, 'queue1\x00'}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000300)={0x800, 0x6, 0xfffffffffffff475, 0x3, 0x1, 0x1, 0x4, 0x7}, &(0x7f0000000340)={0x0, 0xffffffff, 0x401, 0x3, 0x80, 0x4, 0x200, 0x7f}, &(0x7f00000003c0)={0x1, 0xfff, 0xc498, 0x3, 0x7, 0x3, 0xffffffffffffffff, 0x8}, &(0x7f0000000400)={0x0, 0x989680}, &(0x7f0000000480)={&(0x7f0000000440)={0x6}, 0x8}) write$sndseq(r0, &(0x7f0000000280)=[{0x6, 0x3, 0x7, 0x9, @time={r3, r4+30000000}, {0x0, 0x8000}, {0xfff, 0x5}, @ext={0x3f, &(0x7f0000000200)="a5cca019be951335365ec8490bf972fe4d91111e3afdaf521c257e8b300fd47979d5f399b81219b01d1f46947305f611600985d73f648ca7d455d712bb697c"}}, {0x0, 0x8000, 0x3, 0x0, @tick=0x2, {0x1, 0x7fff}, {0x7, 0xffffffff}, @connect={{0x3, 0x1}, {0x1ff, 0x6}}}, {0xffffffffffffffb9, 0x5, 0xb38046, 0x5, @time={0x77359400}, {0x7, 0x6}, {0x401, 0x1}, @quote={{0x1}, 0x2}}, {0x8000000080, 0x80, 0x3bc3, 0x11f4a247, @tick=0x9e4aff8, {0x81, 0x101}, {0x20, 0x6}, @quote={{0x4, 0x2}, 0x7, &(0x7f0000000240)={0x1ff, 0x1, 0x7, 0x8, @time={0x77359400}, {0x8, 0x81}, {0x100000001, 0x59}, @result={0x800, 0x49}}}}], 0x70) clock_gettime(0x0, &(0x7f0000000140)={0x0}) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000000)) write$sndseq(r2, &(0x7f0000000380)=[{0x0, 0x1ff, 0x0, 0x0, @time={r5}, {}, {}, @ext={0x0, &(0x7f00000000c0)}}], 0x30) r6 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) write$sndseq(r6, &(0x7f00000001c0)=[{0x1e, 0x0, 0x0, 0x3fd, @time, {}, {}, @connect}], 0x30) 10:44:30 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000000)=""/60) 10:44:30 executing program 5: ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) r0 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/pktcdvd/control\x00', 0x400000, 0x0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f00000003c0)) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000100)="38c13251726176dc15777f14fe4b041fd46e18db67b85b9978d7d5676629992115876884131176d43b71b71f216c65b7138fd337b5a54dc8ecd138a3e7b8e5e9", 0x40) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000002c0)=0xdaa8d1d5e90addb8, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000500)=""/99) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x410000, 0x0) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000400)) r2 = memfd_create(&(0x7f0000034ffe)='\x00 ', 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000000)={'lo\x00'}) r3 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x101802) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f00000000c0)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r5, r6, r7) write$sndseq(r4, &(0x7f0000048fe4)=[{0x0, 0x1fd, 0x0, 0x0, @time={0x77359400}, {}, {0x800}, @queue}], 0xfffffec3) 10:44:30 executing program 1: getpgrp(0x0) prctl$getreaper(0x19, &(0x7f0000000000)) r0 = gettid() unshare(0x8000000) exit(0x0) r1 = syz_open_procfs(r0, &(0x7f0000000280)='status\x00') getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@local}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)={0x30, 0x1a, 0xe01, 0x70bd25, 0x0, {}, [@generic, @nested={0x1c, 0x96, [@typed={0xc, 0x0, @u64}, @typed={0xc, 0x2, @str='selflo-\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20004801) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080), &(0x7f0000000100)=0x4) readv(r1, &(0x7f0000001740)=[{&(0x7f00000004c0)=""/230, 0xe6}], 0x1) 10:44:30 executing program 2: r0 = socket$inet(0x2, 0x800000800, 0xffffffffffffffff) sendto$inet(r0, &(0x7f0000000280), 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000040)={{0x5e, @multicast1, 0x4e24, 0x1, 'none\x00', 0x24, 0x6, 0x6c}, {@multicast1, 0x4e21, 0x2, 0x7, 0x0, 0x4}}, 0x44) 10:44:30 executing program 6: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) close(r0) write$binfmt_aout(r0, &(0x7f0000000140)={{0x1cf, 0x8, 0x0, 0xca, 0x60, 0x5c4, 0x370, 0xf70d}, "1f68e6ab42dcfd4972f710e837d6e2dfc4d5cd63fafc3ef21bf3713b2308cb461a7b10c6579f5287977bd6962efc3d66507b227eba875b9709e7efabf3a0e1cc708fbacc1cb2a6208e6ccce5da80875fa6f57de27d1150ab3880654a1b16af742e", [[], [], [], []]}, 0x481) 10:44:30 executing program 4: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r0, r1) ioctl$TUNATTACHFILTER(r0, 0x400854d5, &(0x7f0000000140)={0xa, &(0x7f00000001c0)=[{0x100000000, 0x4, 0xfff, 0x2}, {0xffffffff80000000, 0x0, 0x7, 0x3f}, {0x6, 0x1f, 0x470d384b, 0xfffffffffffffff7}, {0x8001, 0x3ff, 0x101, 0x4}, {0x101, 0x1f, 0xffff, 0x4}, {0x3f, 0x1, 0xaac2, 0xfff}, {0x5, 0x54, 0x5, 0x7c8}, {0x3, 0x2, 0x5}, {0xffffffffffffffff, 0x3, 0x90, 0xbc7}, {0x7, 0x4, 0x80000000, 0x1}]}) socket$inet6(0xa, 0x7, 0x2ac0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c4600000001000000000000000000000000000000000000b7c46a8a76350000380000000000000000000000000020000000000000000000000000000000000000000000000090e5000000208704000000000000000000000000000057e57464000000000000000000000000090000000000000000000000fcffffff"], 0x78) unlinkat(r2, &(0x7f0000000280)='./file0\x00', 0x200) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000000)={0x100, 0x0, 0xfffffffffffffffd, 'queue1\x00', 0xfffffffffffffffc}) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000240)={0x1f, 0xca92, 0x6}) write$sndseq(r2, &(0x7f0000000140), 0x0) 10:44:30 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') clock_gettime(0x0, &(0x7f00000009c0)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000000940)=[{{&(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/184, 0xb8}, {&(0x7f0000000200)=""/189, 0xbd}], 0x2, 0x0, 0x0, 0x9}, 0xfffffffffffffff7}, {{&(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/34, 0x22}], 0x1, &(0x7f0000000400)=""/42, 0x2a, 0x4}, 0xffffffff}, {{&(0x7f0000000440)=@nfc, 0x80, &(0x7f0000000880)=[{&(0x7f00000004c0)=""/43, 0x2b}, {&(0x7f0000000500)=""/255, 0xff}, {&(0x7f0000000600)=""/13, 0xd}, {&(0x7f0000000640)=""/209, 0xd1}, {&(0x7f0000000740)=""/253, 0xfd}, {&(0x7f0000000840)=""/14, 0xe}], 0x6, &(0x7f00000008c0)=""/66, 0x42, 0xfffffffffffffff7}, 0x101}], 0x3, 0x10122, &(0x7f0000000a00)={r2, r3+10000000}) accept4$packet(0xffffffffffffff9c, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b00)=0x14, 0x800) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b40)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000c40)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'syz_tun\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000cc0)={0x0, @broadcast, @remote}, &(0x7f0000000d00)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000d40)={'dummy0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d80)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000e80)=0xe8) getpeername$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000f00)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000001000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001040)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000001080)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000001180)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000011c0)={{{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f00000012c0)=0xe8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000004f80)={@local, @rand_addr, 0x0}, &(0x7f0000004fc0)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000005040)={0x0, @multicast1, @multicast1}, &(0x7f0000005080)=0xc) getpeername$packet(0xffffffffffffffff, &(0x7f00000050c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000005100)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000005240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000005280)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f00000052c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000005300)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000005340)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000005440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000005480)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f0000005580)=0xe8) accept4$packet(0xffffffffffffffff, &(0x7f00000055c0)={0x11, 0x0, 0x0}, &(0x7f0000005600)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000005800)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000005840)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000005880)={{{@in6=@local, @in6=@ipv4={[], [], @rand_addr}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000005980)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000059c0)={{{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000005ac0)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000006340)={&(0x7f0000000040), 0xc, &(0x7f0000006300)={&(0x7f0000001300)=ANY=[@ANYBLOB="d8070000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fbdbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="340102003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400feffffff40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r6, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="400001002400010071756575655f696400000000000000000000000000000000000000000000000008000300030000000800040039f5000008000600", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="9000020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004000004000008000700000000004c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=r10, @ANYBLOB="ec00020040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r11, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000700000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004004000000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000000000008000100", @ANYRES32=r12, @ANYBLOB="2801020040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004003f00000008000600", @ANYRES32=r13, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000700000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004004000000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400018000003c00010024000100656e61626c6564000000000000000000000000000000000000000000000000000800030006000000040004000800060007c28793e4c00fd911f62aa34250e30f983db5c10ffa13b62eceb97914f43da5b5a8627b3f8f41166e6f09fc72be4249e3703fd1db29e6c91c4f7b6d636dd5e8b38dcdbc88eb8e8df04b7085f146dbaf14108d3fbfbb544a97cff453183bcbad12c33cb41ee86dca438266a494407667bd371c8f1c62a2e253c7177cab94160b961b4524e72625d744ce4ceffdc1e9ef0810c885fac2b6b88c16f26c0ba291c2f3b8b7a4eb1a8edf1fa6aab07a603aa6cded2eb4bcae2c844e7ebc7db517b5edd2e5b1c7622272f31dccf56fe5320dc0daf8dc51b7dc10", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="ec00020038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000004000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400040000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r16, @ANYBLOB="3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000000c00040072616e646f6d000008000100", @ANYRES32=r17, @ANYBLOB="280102003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r18, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r19, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c00040068617368000000003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000900000008000100", @ANYRES32=r20, @ANYBLOB="a00102003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r21, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000500000008000600", @ANYRES32=r22, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r23, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r24, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r25, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r26, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400ff030000"], 0x7d8}}, 0x4040000) r27 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r28 = syz_open_pts(r27, 0x200004) close(r28) 10:44:30 executing program 5: ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) r0 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/pktcdvd/control\x00', 0x400000, 0x0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f00000003c0)) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000100)="38c13251726176dc15777f14fe4b041fd46e18db67b85b9978d7d5676629992115876884131176d43b71b71f216c65b7138fd337b5a54dc8ecd138a3e7b8e5e9", 0x40) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000002c0)=0xdaa8d1d5e90addb8, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000500)=""/99) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x410000, 0x0) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000400)) r2 = memfd_create(&(0x7f0000034ffe)='\x00 ', 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000000)={'lo\x00'}) r3 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x101802) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f00000000c0)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r5, r6, r7) write$sndseq(r4, &(0x7f0000048fe4)=[{0x0, 0x1fd, 0x0, 0x0, @time={0x77359400}, {}, {0x800}, @queue}], 0xfffffec3) 10:44:30 executing program 6: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000000)) r0 = dup(0xffffffffffffff9c) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f00000000c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xdf02c0fe74073fc4) r3 = syz_open_procfs(r1, &(0x7f0000000180)='status\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x18032, 0xffffffffffffffff, 0x0) write$binfmt_script(r3, &(0x7f0000000140)=ANY=[@ANYRES64=r2], 0x305) socketpair(0x9, 0x5, 0xbd2, &(0x7f0000000040)) 10:44:30 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xc, &(0x7f0000000280)=0xffff, 0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000180)={{0x0, 0x1, 0x9175, 0x3, 0xc04}, 0x8c44, 0x8, 0x2}) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) fallocate(r1, 0x0, 0x0, 0x2) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='lp\x00', 0xfffffffffffffe89) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f00000002c0)) shutdown(0xffffffffffffffff, 0x1) 10:44:30 executing program 0: r0 = userfaultfd(0x800) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000003000)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sw_sync\x00', 0x101001, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x90, r3, 0x22, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x17, 0xe}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'eql\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ifb0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x0) 10:44:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f0000000140)={{r2, r3+10000000}, {r4, r5+30000000}}, &(0x7f0000000180)) getsockopt$inet_tcp_int(r0, 0x6, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x4) 10:44:30 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, &(0x7f000000a000)) chroot(&(0x7f0000000280)='./file0\x00') mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x201000, &(0x7f00000002c0)) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40000, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x3, [{}, {}, {}]}, 0x58) chdir(&(0x7f0000000100)='./file0\x00') mkdir(&(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f0000001380)='./file0\x00', &(0x7f00000016c0)='./file0\x00') 10:44:30 executing program 6: r0 = userfaultfd(0x0) mkdir(&(0x7f0000000100)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0x0) r2 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) lseek(r2, 0x0, 0x1) getpid() close(r1) r3 = gettid() syz_open_procfs$namespace(r3, &(0x7f00000000c0)='ns/mnt\x00') ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000080)={&(0x7f00003ab000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f0000000040)={{&(0x7f00003ab000/0x2000)=nil, 0x2000}, 0x200003}) 10:44:30 executing program 2: r0 = socket$inet6(0xa, 0x4000000003, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201000000000000000000130001"], 0xffffffffffffffc7) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @multicast1}, 0x3, 0x0, 0x1}}, 0x26) dup3(r3, r2, 0x80000) 10:44:30 executing program 0: r0 = userfaultfd(0x800) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000003000)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sw_sync\x00', 0x101001, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x90, r3, 0x22, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x17, 0xe}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'eql\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ifb0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x0) 10:44:30 executing program 4: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000200)={'filter\x00', 0x0, 0x3, 0x7f, [], 0x7, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000180)=""/127}, &(0x7f0000000380)=0x50) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000280)={'filter\x00', 0x72, "8cef4b4e91e720293e1c245c68aa0e17ff5437d1a550aa779de87eb2e712bf8d4312b7d6c543f3dd13ff61e339a45ddf2e9c1192d69662ef3916267b55ff076b08fe1f0bd512c7a24305df729cbff77f77aba464eac5e438f933afffa20bf1c356d73431a979a0319294fbe04ea8d240fcc7"}, &(0x7f0000000340)=0x96) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="290000001800190000003fffffffda060200000003e8000102400004ffff0500000500000005000000", 0x29}], 0x1) socket$netlink(0x10, 0x3, 0x12) 10:44:30 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000000)={0x100, 0x3, 0x4, 0x401, 0x9, 0x3}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) [ 81.775833] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket [ 81.836774] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket 10:44:31 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000000)={0x100, 0x3, 0x4, 0x401, 0x9, 0x3}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 10:44:31 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x80001, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000180)={0xc5, 0x29, 0x2, {0x1, [{{0x10, 0x1, 0x4}, 0x0, 0x5, 0x7, './file0'}, {{0x8, 0x2, 0x4}, 0x4, 0x80000000, 0x7, './file0'}, {{0x2, 0x1, 0x7}, 0x1e, 0x7, 0x7, './file0'}, {{0x80, 0x4, 0x5}, 0xfffffffffffff357, 0x2, 0x7, './file0'}, {{0x80, 0x0, 0x3}, 0x1, 0x3, 0x7, './file0'}, {{0x1, 0x4, 0x7}, 0xfffffffffffffeff, 0x1000, 0x7, './file0'}]}}, 0xc5) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) write$P9_RRENAMEAT(r1, &(0x7f0000000080)={0x7, 0x4b, 0x1}, 0x7) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f0000000000), 0x1) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000040)={0x300, 0x7fff, 0x8, 0x1}) ioctl$TIOCGPTPEER(r1, 0x5441, 0x2dc) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f00000000c0)={0x4}) 10:44:31 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000140)) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @remote, @remote}, 0xc) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000180)={0x1, {{0x2, 0x0, @multicast2}}, 0x1, 0x2, [{{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast1}}]}, 0x190) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00', 0x4000000000000}) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x20040, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast2, @loopback}, 0x10) ioctl$void(r0, 0x0) 10:44:31 executing program 4: r0 = socket$inet(0x2, 0x853677fd71cebca2, 0x8) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0)=0x8000000000004, 0x4) r1 = socket$packet(0x11, 0x5, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000001180)={{0x3, 0x1, 0x32, 0x1, 0x7}}) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0xffe3) poll(&(0x7f0000000080)=[{r1}], 0xb, 0x0) sendto(r1, &(0x7f0000000100)="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", 0x1000, 0x20008000, &(0x7f0000001100)=@l2={0x1f, 0x40, {0x917c, 0x6, 0x6, 0xffffffff, 0x4, 0x2}, 0x140000000, 0xfffffffffffffffa}, 0x80) 10:44:31 executing program 5: r0 = socket(0x11, 0x2, 0x0) recvfrom(r0, &(0x7f0000000040), 0x0, 0x2, &(0x7f0000000080)=@ethernet={0x307, @remote}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) 10:44:31 executing program 2: syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf8, r2, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x67}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x462a}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x35}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x40}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7fff}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004800) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000000)=@generic) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000080)={0x0, 0x66}) 10:44:31 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000000)={0x100, 0x3, 0x4, 0x401, 0x9, 0x3}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) [ 82.207908] device lo entered promiscuous mode [ 82.222537] device lo left promiscuous mode [ 82.292798] device lo entered promiscuous mode [ 82.308292] device lo left promiscuous mode 10:44:31 executing program 2: r0 = memfd_create(&(0x7f0000000080)="2e993f97e9100a2bec29d89b8bfcbc002c6210ffffff1ec6f35f8352a100751810dd53d4d389a821562b24f21f856aa94cfda35ea67335975463824ca734d8125f27e75cca4604a556c74f98c8effc42cdbbffcb07ff7c60b32b", 0x0) ftruncate(r0, 0x94d) ioctl$TCSETA(r0, 0x4030582a, &(0x7f0000760000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}) ftruncate(r0, 0x800) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x2) 10:44:31 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1}, 0x14) write$binfmt_misc(r0, &(0x7f0000000080)={'syz1', "0f9f095ce67942d9f0ca1d"}, 0xf) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000140)={'filter\x00', 0x3, [{}, {}, {}]}, 0x58) syz_extract_tcp_res(&(0x7f0000000040)={0x41424344, 0x41424344}, 0x40, 0x5) syz_extract_tcp_res$synack(&(0x7f00000000c0)={0x41424344}, 0x1, 0x0) syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x501040) write$tun(r2, &(0x7f0000000280)={@void, @val={0x3, 0x87, 0x9, 0x5, 0x3, 0x7}, @mpls={[{0x1, 0x6, 0x6, 0x4}, {0x9b63, 0x9, 0x6, 0x6}, {0x91c6, 0xc1, 0x8, 0x7fff}], @ipv6={0x0, 0x6, "c66104", 0x1b3, 0x2, 0x3f, @empty, @mcast1, {[@fragment={0x6, 0x0, 0x9, 0x401, 0x0, 0x894, 0x68}, @srh={0x33, 0xa, 0x4, 0x5, 0xffffffffffff8000, 0x10, 0x7f, [@remote, @remote, @mcast1, @empty, @remote]}, @fragment={0x0, 0x0, 0x72, 0x800, 0x0, 0xfffffffffffffff7, 0x65}], @tcp={{0x4e20, 0x4e22, r3, r4, 0x2, 0x0, 0x13, 0x12, 0x3, 0x0, 0x3, {[@nop, @sack_perm={0x4, 0x2}, @fastopen={0x22, 0xa, "1e4f8eb2e3e53eaf"}, @timestamp={0x8, 0xa, 0x2, 0x8a}, @mss={0x2, 0x4, 0x2}, @md5sig={0x13, 0x12, "e4e6f746d13a149ee010d83167b9cd1e"}, @exp_fastopen={0xfe, 0x9, 0xf989, "bd8aa181a5"}, @nop]}}, {"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"}}}}}}, 0x1f1) 10:44:31 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x6, &(0x7f0000000340)) mknod$loop(&(0x7f0000000100)='./file0/file0\x00', 0x1, 0xffffffffffffffff) r0 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x2, 0x8000) mq_timedreceive(r0, &(0x7f0000000180)=""/90, 0x5a, 0x80000001, &(0x7f0000000200)={0x77359400}) execve(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000580), &(0x7f0000000100)) 10:44:31 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000000)={0x100, 0x3, 0x4, 0x401, 0x9, 0x3}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 10:44:31 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000000)={0x100, 0x3, 0x4, 0x401, 0x9, 0x3}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 10:44:31 executing program 6: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0xfffffffffffffffc) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x14}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f00000000c0)) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) r3 = dup3(r1, r1, 0x80000) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) 10:44:31 executing program 2: r0 = memfd_create(&(0x7f0000000080)="2e993f97e9100a2bec29d89b8bfcbc002c6210ffffff1ec6f35f8352a100751810dd53d4d389a821562b24f21f856aa94cfda35ea67335975463824ca734d8125f27e75cca4604a556c74f98c8effc42cdbbffcb07ff7c60b32b", 0x0) ftruncate(r0, 0x94d) ioctl$TCSETA(r0, 0x4030582a, &(0x7f0000760000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}) ftruncate(r0, 0x800) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x2) 10:44:31 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYBLOB="0b82030021cb708ed4f4672335cbfecb02729f79439434ceaa8d27293534e5001e28363a8f799db17048bdcab7fe5379bf0a445fa1f6deb28f7aeeaafd4df06133b2cee05f2ec61bb3f2cecba315f7c3769316a198befbb034e6661e1d4ab72ef8c75d872bde94522445aa801b8e8b087f87c17e21b180a0f918314ae320a2813dbcaed48d0f0f42a941f08b091fac035f31cbb0b85f787c75830723984acbaf979bab5bdd32670a9fa7b468b0406c0abc991b223c0f73b15c36f9a1bd6c9116a07368da3273c29bb9df044f6360e56cd33e303b15401891f79b6c99291786224f3ef947890a1f5f26da3ea2", @ANYRES32]) unshare(0x10000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x106) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000100)={0x2, 'ip6gre0\x00', 0x3}, 0x18) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000080)=0xeb) 10:44:31 executing program 6: r0 = socket$packet(0x11, 0x808000000002, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0xfd90, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) 10:44:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000400)={0x14, 0x2e, 0x105}, 0x14}}, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) mq_timedsend(r1, &(0x7f00000000c0)="29d308606f92edc91ecfacfcc6e831ba5db9907cedb30d2087413fe234867df8695a6f378adc4f6a6a58eb9356cf21a2ca43669392ebca01bbdbe3998784afe11a46eb4a77acc30b68660f795725b119fb5a10908e4a624e92653a6adecab8cdfd8517c9445930814a3fac90", 0x6c, 0x40, &(0x7f0000000140)={r2, r3+30000000}) 10:44:31 executing program 2: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r0, r1, &(0x7f00000000c0), 0x80000001) syncfs(r1) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000080)={'eql\x00', {0x2, 0x4e25, @broadcast}}) 10:44:31 executing program 7: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0xc00, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000140), &(0x7f0000000240)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f00000004c0), 0x1000002c0) sendmmsg(r1, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)='#', 0x1}], 0x1}}], 0x1, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000040)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x33f) write$sndseq(r2, &(0x7f0000000080), 0x0) read(r2, &(0x7f0000000180)=""/153, 0x99) 10:44:31 executing program 2: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r0, r1, &(0x7f00000000c0), 0x80000001) syncfs(r1) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000080)={'eql\x00', {0x2, 0x4e25, @broadcast}}) 10:44:32 executing program 5: futex(&(0x7f0000000ffc), 0xb, 0x0, &(0x7f0000000080), &(0x7f0000000ffc), 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000200)='/dev/keychord\x00', 0x80, 0x0) ioctl(r0, 0x8, &(0x7f0000000240)="f5cc5a8121ef054b7ba48cd7d0d56b181fb87182cbe82694e0667ad72f4daa4c6e42c686b8fcd06de5522f452a016fba78e7a6110802766dfc65f88dd37e06620d6840865c922717fb5a04b80ffb07c9eea5c1b0e058e443632dce028018a7e4e13600d9fb4b81012a7b5cd7cefd18b2ee") setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="6f73782e736563810c38043f54"], &(0x7f00000001c0)='/dev/ppp\x00', 0x9, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101, 0x0) getsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) 10:44:32 executing program 3: openat$cgroup_int(0xffffffffffffff9c, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r0 = open(&(0x7f0000000040)='./file0\x00', 0x80, 0x24) write$FUSE_POLL(r0, &(0x7f0000000080)={0x18, 0x0, 0x2, {0x9}}, 0x18) write$P9_RLERRORu(r0, &(0x7f0000000100)={0x16, 0x7, 0x1, {{0x9, 'rdma.max\x00'}, 0x4}}, 0x16) r1 = socket(0x10, 0x2, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000280)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f7980584303d01f0549a8b878dc4af89ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5ad3657818feb0279188b92b2e6b035cde4c66c6b00081bd106f6adfe58108a8be89d3695670374e304c071de17635f3034de8c2372e769fd1d57d1b83e77d656f") sendfile(r1, r2, &(0x7f00000000c0), 0x80000002) 10:44:32 executing program 7: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0xc00, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000140), &(0x7f0000000240)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f00000004c0), 0x1000002c0) sendmmsg(r1, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)='#', 0x1}], 0x1}}], 0x1, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000040)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x33f) write$sndseq(r2, &(0x7f0000000080), 0x0) read(r2, &(0x7f0000000180)=""/153, 0x99) 10:44:32 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @loopback, @multicast1}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x90) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x47c, 0x270, 0x0, 0x270, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x130}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "eb22af3a6de40433b3a7c951230c1120108196b0bb5cbea4d335b90290e6"}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={[], 0x19}, @empty, @multicast1, @rand_addr=0x9, 0xf}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0xf}, @multicast2, 0xff000000, 0x0, @mac, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}, 0x63ec, 0x1ff, 0xfffffffffffffe01, 0x48ce, 0x7ff, 0x3, 'syzkaller0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x0, 0x20}, 0xf0, 0x128}, @unspec=@RATEEST={0x38, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2d98, 0x7, 0x9}}}], {{[], 0xc0, 0xe4}, {0x24}}}}, 0x4c8) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000004000)=0x90) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000580)="7a6640f0e714a9881a76132cd9d115117015451920f55d8aa6cfdc1c225f0fb0076b177ee95e6ca07651083e8224baa4f60707c768ead0fb9fb5ab6720bb5d058ccc42ce041027ae026d21ea9681bb639a52621a7e346c529a38a83689f22e78d86fc842a66f2fb0f5aacceeacba74be3596e0beafb5fddbfb148db531e37fcc8dee8261cee7e939b3bd7918f044746ae99734918a472045be461365d73b00255c80f9cd529e", 0xa6) 10:44:32 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') read$FUSE(r0, &(0x7f0000002140), 0x1000) 10:44:32 executing program 6: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth0_to_bridge\x00'}) r2 = dup2(r0, r0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000280)=0xc) mq_notify(r2, &(0x7f00000002c0)={0x0, 0xd, 0x1, @tid=r3}) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="08400100ac141400080002000000000584aca11eb70387dbf5"], 0x1}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000000)=0xe8) r5 = geteuid() setreuid(r4, r5) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a45321, &(0x7f0000000300)={{0x4, 0x6717}, 'port0\x00', 0x1, 0x1000, 0x1ac, 0x6, 0x9, 0x100000000000, 0x101, 0x0, 0x4, 0x1a}) 10:44:32 executing program 0: r0 = gettid() unshare(0x40000000) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1000082) r2 = add_key$user(&(0x7f0000001400)='user\x00', &(0x7f0000001440), &(0x7f0000000100), 0x159, 0x0) keyctl$describe(0x6, r2, &(0x7f0000000240)=""/235, 0xeb) r3 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) flock(r3, 0x6) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r1) ioctl$RTC_EPOCH_SET(r3, 0x4004700e, 0x7fff) pwritev(r3, &(0x7f0000000340)=[{&(0x7f00000001c0)}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r3) sendfile(r1, r1, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$LOOP_CLR_FD(r1, 0x4c01) sync() futex(&(0x7f0000001480)=0x2, 0x0, 0x1, &(0x7f00000014c0), &(0x7f0000001500)=0x2, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x3, 0xd6e1, 0x8}}, 0x28) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f0000000140)={'ip6gretap0\x00'}) fcntl$addseals(r3, 0x409, 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) sysinfo(&(0x7f0000000400)=""/4096) openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x201, 0x0) write$FUSE_LK(r3, &(0x7f00000003c0)={0x28, 0xfffffffffffffffe, 0x4, {{0xfffffffffffffbff, 0x2, 0x2, r0}}}, 0x28) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f00000001c0)={0x7824, 0x11, 0x20, 0x1, "405aef975325ac7416be6a80546d956d87497356aeb2a25470167858573255b9"}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000001540)) rt_tgsigqueueinfo(0x0, 0x0, 0x3f, &(0x7f0000000040)={0x0, 0x0, 0xbb}) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000340)=""/91) 10:44:32 executing program 2: socketpair$packet(0x11, 0x0, 0x300, &(0x7f0000000080)={0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r0, 0x10}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000140)={0x400}, 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='net/netlink\x00') ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000040)=0x47b) preadv(r1, &(0x7f0000000080), 0xa2, 0x4000000) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000001c0)=@add_del={0x2, &(0x7f0000000180)='yam0\x00', 0x7}) fchmod(r1, 0x100) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) lseek(r1, 0x0, 0x3) 10:44:32 executing program 7: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffd}) setpgid(r0, r0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) read(r2, &(0x7f0000481000)=""/128, 0x1d8) 10:44:32 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x104) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x10000, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) utimensat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={{r2, r3/1000+30000}, {0x0, 0x2710}}, 0x0) 10:44:32 executing program 1: perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x240000, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000200)={0x68, ""/104}) write$P9_RWALK(r0, &(0x7f0000000140)={0x8b, 0x6f, 0x2, {0xa, [{0x0, 0x3, 0x3}, {0x4, 0x1, 0x7}, {0x4, 0x1, 0x2}, {0x6, 0x1, 0x4}, {0x2}, {0x10, 0x3, 0x5}, {0x80, 0x3, 0x2}, {0x4c, 0x4, 0x2}, {0x10, 0x3, 0x2}, {0x68, 0x3, 0x1}]}}, 0x8b) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f3, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) 10:44:32 executing program 6: getcwd(&(0x7f0000000000)=""/41, 0x29) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000015ff8)={0xffffffffffffffff}) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0xfffffffffffffffc, 0x32, 0xffffffffffffffff, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000abaff9)={0x3, 0xfff}, 0x10) [ 83.151926] IPVS: Creating netns size=2552 id=9 10:44:32 executing program 6: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x924924924924ab9, 0x0) r1 = getpid() fcntl$setown(r0, 0x8, r1) r2 = memfd_create(&(0x7f0000000180)="2b8b8a161139aad580ff36dd92d53e6f5a221d0a0000000000000000000000000000", 0x2) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000040)) sendfile(r0, r2, &(0x7f0000000000), 0xffff) sendfile(r0, r2, &(0x7f0000000100), 0x9) fcntl$addseals(r2, 0x409, 0x8) socket(0x4, 0x0, 0x8) shutdown(r0, 0x1) 10:44:32 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) socket$inet6(0xa, 0x1000000000002, 0x0) add_key(&(0x7f00000005c0)='pkcs7_test\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='veth0_to_bond\x00', 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) close(r1) 10:44:32 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x101040, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000100)=0x2) r1 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000040)={0x1, 0x9}) seccomp(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x40}, {0x6}]}) 10:44:32 executing program 1: bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2, 0x0, @loopback}, 0x10) r0 = socket$inet6_udp(0xa, 0x2, 0x0) close(r0) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f00000f5ffc), 0x4) socket(0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000140)=0x54) sendmmsg(r1, &(0x7f00000092c0), 0x224, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rfkill\x00', 0x20000, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x240000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snapshot\x00', 0x4000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x4080, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x420100, 0x0) creat(&(0x7f00000004c0)='./file0\x00', 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ppp\x00', 0x280000, 0x0) creat(&(0x7f0000000540)='./file0\x00', 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000580)='/dev/sw_sync\x00', 0x20000, 0x0) open(&(0x7f00000005c0)='./file0\x00', 0x80000, 0x100) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) pipe2(&(0x7f0000000640), 0x84800) r2 = syz_open_dev$usbmon(&(0x7f0000000680)='/dev/usbmon#\x00', 0x2, 0x200000) ioctl$VT_WAITACTIVE(r2, 0x5607) getsockopt(r1, 0xffffffff, 0x0, &(0x7f0000000180)=""/153, &(0x7f0000000240)=0x99) r3 = open(&(0x7f0000000280)='./file0\x00', 0x100, 0x0) ioctl$RTC_RD_TIME(r3, 0x80247009, &(0x7f00000002c0)) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udp6\x00') ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000300)) sendfile(0xffffffffffffffff, r4, &(0x7f0000000000), 0x0) 10:44:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="0000003f529439080ae0dc92a575d1553861ae1f2d0c00001b0000000000f0a7a4da53b69f317362e76e07baf2827fd6b399ca698432ffb537574c2467ec14ddda1a78f43f5673b2edbd170d16ba875121881e0a00a620b3147ba674784bf0a56f4cce0100000000000000bcec558c290a115934cd38a0ab0ff3f93586d1cf64eee25c1ce35ce5175036f574e9a1943b6bb2d3c60b9a4bfd9adda128b5d26639"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) [ 83.384608] binder: 6408:6411 got transaction with invalid offset (592667906941124608, min 0 max 24) or object. [ 83.414039] binder: 6408:6417 Release 1 refcount change on invalid ref 1 ret -22 [ 83.436991] binder: 6408:6421 BC_ACQUIRE_DONE u0000000000000000 no match [ 83.456215] binder: 6408:6411 transaction failed 29201/-22, size 24-8 line 3200 [ 83.465794] binder: 6408:6421 BC_INCREFS_DONE u0000000000000000 no match [ 83.487301] binder_alloc: binder_alloc_mmap_handler: 6408 20001000-20004000 already mapped failed -16 [ 83.505649] binder: BINDER_SET_CONTEXT_MGR already set [ 83.516196] binder: 6408:6411 ioctl 40046207 0 returned -16 10:44:32 executing program 3: openat$cgroup_int(0xffffffffffffff9c, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r0 = open(&(0x7f0000000040)='./file0\x00', 0x80, 0x24) write$FUSE_POLL(r0, &(0x7f0000000080)={0x18, 0x0, 0x2, {0x9}}, 0x18) write$P9_RLERRORu(r0, &(0x7f0000000100)={0x16, 0x7, 0x1, {{0x9, 'rdma.max\x00'}, 0x4}}, 0x16) r1 = socket(0x10, 0x2, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000280)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f7980584303d01f0549a8b878dc4af89ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5ad3657818feb0279188b92b2e6b035cde4c66c6b00081bd106f6adfe58108a8be89d3695670374e304c071de17635f3034de8c2372e769fd1d57d1b83e77d656f") sendfile(r1, r2, &(0x7f00000000c0), 0x80000002) 10:44:32 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='pids.events\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000080)={0x2f, @remote, 0x4e23, 0x3, 'lblc\x00', 0x13, 0x1, 0x69}, 0x2c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1}, 0x10) 10:44:32 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000004ff0)={0x2, &(0x7f0000002fe8)=[{0x45}, {0x6}]}, 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000040)="035ba7ed7184018ac0e81eb842a286b82e78fe860fb14e5caad77b70e40e9689c765c5e26b6dc53896e6d45c3d8d93a1dd796861b5aacf379ac011c80cde2d9193f0b463fa7f3a9843239b11d7591206344a67b72a5ea8dd63955508e956f656ef075fdafbad6fd463fa1e03b08b7463639c741e12b8cc94ceb62d917a0b74a2ae") prctl$setfpexc(0xc, 0x3) sendto$packet(r1, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) personality(0x500000d) 10:44:32 executing program 7: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x80, 0x0) write$9p(r0, &(0x7f0000000100)="1c0e3980c1f1ee99864bc53b6134b63d47f60ef770be92290464249ef5bea53dc3", 0x21) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000cecffc), 0x4) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{}]}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={&(0x7f00000000c0), 0xfd4c, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 10:44:32 executing program 6: r0 = open(&(0x7f00000001c0)='.\x00', 0x3, 0x0) mknodat(r0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000001440)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) accept4(r0, &(0x7f0000000040)=@hci={0x1f, 0x0}, &(0x7f00000000c0)=0x80, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000100)={@ipv4={[], [], @multicast1}, r1}, 0x14) [ 83.532342] binder: 6408:6421 Release 1 refcount change on invalid ref 1 ret -22 [ 83.539967] binder: 6408:6437 BC_ACQUIRE_DONE u0000000000000000 no match [ 83.539977] binder: 6408:6437 BC_INCREFS_DONE u0000000000000000 no match [ 83.557584] IPVS: Creating netns size=2552 id=10 10:44:32 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000300)={'syz1', "98cdd3e84ecc483ad83ae93f27d0ef6e9a24ed30e7a55e9ff92487d08819f44b5dde535ec1b757da8180a28211013c81e79d9f54f7e633665320c165440aa9dd912fc8a54ae9310148fed643daad1f4e8e6f7c976cec11444d99b8b42e70d6d77b0519069328084a32d6935a82531d94a955277ea91674a4be59d273bb4246445a540a2c5fd27bc550427e24ba0ab28e89998c059d2b6fe1f6dba3ac366a240308f7c1126bd89f7b9ec41c213a02fc70cc7f4b423622032fb9203404b44d04d125a3df66306cf1e735526785aa12e9191ab9fc0a727968f2d7a3144f5349ea8e15b30b89cc423956cc8e92329fa8e3e4b621b8209b"}, 0xf9) ioctl$SG_IO(r0, 0x2205, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x7f, &(0x7f0000000040)=""/127}, &(0x7f0000000100), &(0x7f0000000180)=""/194, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 10:44:32 executing program 1: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000140)='./file1\x00') open$dir(&(0x7f0000000040)='./file1\x00', 0x82280, 0x24) 10:44:32 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_tables_matches\x00') setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000003c0), 0x4) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r0, 0x400454ce, r2) getegid() stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) mq_getsetattr(r1, &(0x7f0000000300)={0x56, 0x401, 0x7ff, 0x3, 0x3ff, 0x19, 0x40, 0x7}, &(0x7f0000000340)) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)) fstatfs(r1, &(0x7f0000000240)=""/187) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'dh\x00', 0x0, 0x6}, 0x2c) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2000, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) 10:44:32 executing program 6: futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000), 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r1 = request_key(&(0x7f0000000080)='blacklist\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0xfffffffffffffffa) keyctl$get_security(0x11, r1, &(0x7f0000000380)=""/226, 0xe2) r2 = memfd_create(&(0x7f0000000000)="2f6465762f6ca49b0e694e", 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1081806) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) sendfile(r0, r0, &(0x7f0000000100), 0xffffffff) sendfile(r0, r0, &(0x7f0000000240), 0x2000005) mq_timedsend(r2, &(0x7f0000000300)="94d2754fbd589170416367a89a821af4257778b88a6c4ce245420d45c2340ebbb462773107b3cdc4367b26d8a61eb5b934b7bd011e72", 0x36, 0x3, &(0x7f0000000480)={0x77359400}) ioctl$LOOP_CLR_FD(r0, 0x4c01) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)) getgid() 10:44:32 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f000039a000)=[{0x3c}, {0x6}]}, 0x10) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001380)='/dev/ppp\x00', 0x240, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000013c0)={0x0, 0x0, 0x0}, &(0x7f0000001400)=0xc) ioctl$TUNSETGROUP(r2, 0x400454ce, r3) kexec_load(0xa0ed, 0x5, &(0x7f0000001300)=[{&(0x7f0000000140)="7eb9529453ac5953a298a44bc3d8a738ed4db51443942d8cc705807e0981dc9c979cef082db4bdb563f74c409dc4579eb86d11c372c9b20c1b6b13dec3691d69a799d8747d9d56d770f7bdb10070365bc1890deef1cb8b54d0373e6c688ccab863", 0x61, 0xfffffffffffffff8, 0x6}, {&(0x7f00000001c0)="b4ff8313832680e12c7d487640893f6f18f3a9ae76fe46e19d25cb2481390a5d76407a790861", 0x26, 0x2, 0x4}, {&(0x7f0000000200)="c29cd57e957c4a0613575a98ee4ba21c7126dc653a1a0faa48726c898340f048935bafa2a81138908f3284d2f4144c6e365f35fcdb76212d10d307e52bd24c32b48532ffdf90c94d301bb1a86301efa0f5ea7134bdb01fd317df46679b", 0x5d, 0x3f, 0x5}, {&(0x7f0000000280)="8d617ac76adb1551118289b31c3b8cdf236a8e883b56b5db440d338a0acf22d9b769e8fd15a8d84e70f1bc13416e1e414a09d6958784281af12637f3835283d71bd02fb12f7f76813ac019", 0x4b, 0xca3c, 0x3f}, {&(0x7f0000000300)="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", 0x1000, 0x5, 0x401}], 0x2a0000) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000009ac5e5b70000000000000000000000000000380000000000000000000000000000000000000000004130dbcb72350724f3321d70d367fcee00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x78) 10:44:32 executing program 5: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000180)='/dev/pktcdvd/control\x00', 0xfb2bfb249506dc69, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x4) r1 = openat(r0, &(0x7f00000033c0)='./file0\x00', 0x7c, 0x140) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000003400)=[{0x2, 0x4}, {0x0, 0x13}, {0x6, 0x9}, {0xc, 0x4f6e}, {0x3, 0xcd09}, {0x2, 0x3}, {0x8, 0xffffffff80000001}, {0x2, 0x4}, {0x3, 0x5}], 0x9) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000080)={{0xffffffffffffffff, 0x3, 0xf8, 0x1, 0x1ff}}) prctl$seccomp(0x16, 0x2, &(0x7f0000000000)={0x20000000000000b1, &(0x7f00000000c0)=[{0x64, 0x0, 0xbb, 0x80}]}) 10:44:32 executing program 7: alarm(0x400000100100001) alarm(0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x2000000010c40, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x0, 'erspan0\x00', 0x4}, 0x18) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000000)) 10:44:32 executing program 5: chroot(&(0x7f0000000080)='./file0\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000100)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x8080, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000040)={'teql0\x00', 0x4}) 10:44:32 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1000082) r1 = memfd_create(&(0x7f00000002c0)='\x00', 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) fcntl$addseals(r1, 0x409, 0x8) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000000), 0x200140000) mkdir(&(0x7f0000000240)='./file0\x00', 0xcc) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) sync() pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)='-', 0x1}], 0x1, 0x0) 10:44:32 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x2, 0x0) tee(r0, r1, 0x7, 0x0) 10:44:32 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000461000)={0x10, 0x0, 0x2}, 0xc) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x2}, 0xc) dup2(r1, r0) clone(0x40008200, &(0x7f0000000000)="a186f8585fb9edb6dcf9fca47bd9ab4a2060cfde8fa358988bbf045effd50b714d892ce42a2f53b9813510ccdcdc8eeb1a32953c27c9d1dfc661c76f3d560d0de0ef71edcdc1e3ee1969e0b1fba1a23983693820f25c9c0edf84849b87e685ed86e9dd53258db67a7c03610a35c77f931ff9", &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)="77cf1b9214592647a6eee2b1b38591697b34612b58fae06f6b3523e45117bc8813a8513e6b5c854b0a19ec61b10fe7a168aa5feace505b59fa586f8df575edf8953b8112ddeb8af1b3a65ecacec08fec0c3b09536af09d8c8ccb27cd507bf5af7907c0ab50813c3c2d9bfa62b43ab9f30151888a7db8baa5bac32f6fcd81") 10:44:33 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x40, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @broadcast}, &(0x7f0000001040)=0x1) 10:44:33 executing program 3: unshare(0x20000000) clone(0x0, &(0x7f0000000040), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000000140)) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000180)=0x0) ioprio_set$pid(0x3, r1, 0x3) clone(0x4, &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000200)="4b02daa384850d48") r2 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x14d) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000280)={0x40, 0x5, 0x7ff, 0x5, 0x9, 0x10001, 0x1ff, 0xdd9, 0x7fff, 0xfffffffffffffffb}) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f0000000080)=0x20) rmdir(&(0x7f00000000c0)='./file0\x00') ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000002c0)={0x4, 0x7, 0x200, 'queue0\x00', 0x200}) ioctl$TIOCNOTTY(r2, 0x5422) 10:44:33 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x40280, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x200, 0x0) dup3(r0, r1, 0x80000) signalfd(r0, &(0x7f0000000180)={0x100000001}, 0x8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14001d00110001020000000000e4ffffff0000003ebf5302eaeda2bb2e6d941420be61af6dfd79d37f8f5fbea64f7bb6a1c59f6be10700d81545befcc724d0c2"], 0x14}}, 0x0) ioctl$VT_RELDISP(r0, 0x5605) 10:44:33 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000440), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00005c8000)="c3", 0x1, 0x0, &(0x7f0000e66000)={0x2, 0x0, @multicast2}, 0x10) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000002940)=[{{&(0x7f00000011c0)=@hci, 0x80, &(0x7f0000002440)=[{&(0x7f0000002380)=""/133, 0x85}], 0x1, &(0x7f0000001280)=""/112, 0x70}}, {{0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f00000028c0)=""/87, 0xffffffffffffff4f}}], 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x19, 0x4, @thr={&(0x7f0000000040)="03b95514273101cfb7d0a343ae5e5bcbbd048e451b7bfb2ec09beeca361babdf155e9a2e425a3edb8a639be96e5b78e845f3060664703e59176c1b1c76d498f33fdfc22edfb5c7fbb915fc5b5aa4f1787e10babc44fc49487b0a049106e9ac44417bc6f4204b382d135f0997ad0abc953bbe93", &(0x7f00000000c0)="d15cb1aeca0a9d289ff20437d3285c2714f69ede90e78c7d436fb0e706c3f145f81b06351c8818c2f5d4a558758c2f99b54cf52950677092517b54c8ffd504238457ec9d29645672dc230c"}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = gettid() tkill(r2, 0x16) 10:44:33 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000)=0x1f, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) ioprio_set$uid(0x3, r2, 0x1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) 10:44:33 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1000082) r1 = memfd_create(&(0x7f00000002c0)='\x00', 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) fcntl$addseals(r1, 0x409, 0x8) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000000), 0x200140000) mkdir(&(0x7f0000000240)='./file0\x00', 0xcc) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) sync() pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)='-', 0x1}], 0x1, 0x0) [ 84.023224] blk_update_request: I/O error, dev loop0, sector 744 [ 84.023393] blk_update_request: I/O error, dev loop0, sector 640 [ 84.023459] Buffer I/O error on dev loop0, logical block 80, lost async page write [ 84.049306] Buffer I/O error on dev loop0, logical block 93, lost async page write 10:44:33 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) readv(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/122, 0x7a}], 0x1) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f00000001c0)={0x0, 0x1, 0x3, 0xffff}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='loginuid\x00') openat$cgroup_ro(r1, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001480)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) userfaultfd(0x800) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000400)) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)) 10:44:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00'], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x4, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="09631040"], 0x0, 0x0, &(0x7f0000000580)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) [ 84.237068] binder_alloc: binder_alloc_mmap_handler: 6539 20003000-20004000 already mapped failed -16 [ 84.253392] binder: BINDER_SET_CONTEXT_MGR already set [ 84.258781] binder: 6539:6542 ioctl 40046207 0 returned -16 [ 84.284357] binder: 6539:6548 BC_ACQUIRE_DONE u0000000000000000 no match [ 84.290180] binder_alloc: 6539: binder_alloc_buf, no vma [ 84.290231] binder: 6539:6544 transaction failed 29189/-3, size 24-8 line 3137 [ 84.304542] binder: send failed reply for transaction 4 to 6539:6542 [ 84.359121] binder: undelivered TRANSACTION_ERROR: 29189 10:44:33 executing program 6: futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000), 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r1 = request_key(&(0x7f0000000080)='blacklist\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0xfffffffffffffffa) keyctl$get_security(0x11, r1, &(0x7f0000000380)=""/226, 0xe2) r2 = memfd_create(&(0x7f0000000000)="2f6465762f6ca49b0e694e", 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1081806) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) sendfile(r0, r0, &(0x7f0000000100), 0xffffffff) sendfile(r0, r0, &(0x7f0000000240), 0x2000005) mq_timedsend(r2, &(0x7f0000000300)="94d2754fbd589170416367a89a821af4257778b88a6c4ce245420d45c2340ebbb462773107b3cdc4367b26d8a61eb5b934b7bd011e72", 0x36, 0x3, &(0x7f0000000480)={0x77359400}) ioctl$LOOP_CLR_FD(r0, 0x4c01) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)) getgid() 10:44:33 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000540)='net/netlink\x00') preadv(r0, &(0x7f0000000080), 0xa2, 0x4000000) getsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=""/41, &(0x7f0000000040)=0x29) lseek(r0, 0x0, 0x3) 10:44:33 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x104) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000140), &(0x7f0000000180)=0x8) preadv(r0, &(0x7f0000001380)=[{&(0x7f00000001c0)=""/148, 0x94}], 0x49, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x361, 0x10400003) 10:44:33 executing program 2: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) timer_create(0x1, &(0x7f0000000080)={0x0, 0x3d, 0x6, @thr={&(0x7f0000000040)="f5480f84552b2f619021ac20875d95", &(0x7f0000001440)="e27823d88b0f4cb5778eb3c7bdb9b1d0ebe35a718f50ac5dc16637160527f1ae0b8a0a374ea4b407dca2c59757514b93320c6172cc6d34034de20b3690da467aec0278d3d1efa19cf4c88694c3a7e8be55011af2abed67439c3d7d781807721dfdb77ced599f77ce0199a3b7396794bfd01a8e071e439086e028adc6c37a57318fdb799b877874af3f74af87322f54287109b347aa2963356e316b59e08ea29fe9d6ec7e9124875b14643c5861527ecaacdda556a7802df2eba3b8facd0fc41bb466fe26db5b8c9f1e199e81e4c1"}}, &(0x7f0000000100)=0x0) timer_gettime(r3, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000380)={0x0, 0x551, 0x0, "9ede7a8c5ae95ec8672c93c30f643a66dc6bd36cde2c51f01b7f0b014f9f91eeb7c3fc7240f476c8d753d000aa8faf8fb574dbcfa6dc0200", 0x2}) write$sndseq(r2, &(0x7f00000004c0), 0xfebe) write$P9_RWSTAT(r2, &(0x7f00000000c0)={0x7}, 0x7) write$sndseq(r2, &(0x7f0000000200), 0x0) readlinkat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440)=""/4096, 0x1000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00N\\\x00'}) 10:44:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00'], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x4, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="09631040"], 0x0, 0x0, &(0x7f0000000580)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) 10:44:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00'], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x4, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="09631040"], 0x0, 0x0, &(0x7f0000000580)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) [ 84.677029] binder: release 6557:6558 transaction 9 out, still active 10:44:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00'], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x4, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="09631040"], 0x0, 0x0, &(0x7f0000000580)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) [ 84.719583] binder: send failed reply for transaction 9, target dead [ 84.786477] binder: release 6569:6573 transaction 13 out, still active [ 84.808341] binder: BINDER_SET_CONTEXT_MGR already set [ 84.841474] binder: send failed reply for transaction 13, target dead [ 84.843069] binder: 6576:6581 transaction failed 29189/-22, size 24-8 line 3014 [ 84.843310] binder: 6576:6581 BC_ACQUIRE_DONE u0000000000000000 no match [ 84.843528] binder: 6576:6581 Release 1 refcount change on invalid ref 1 ret -22 [ 84.867813] blk_update_request: I/O error, dev loop0, sector 968 [ 84.867822] Buffer I/O error on dev loop0, logical block 121, lost async page write [ 84.868103] blk_update_request: I/O error, dev loop0, sector 624 [ 84.868111] Buffer I/O error on dev loop0, logical block 78, lost async page write [ 84.898490] binder: 6576:6578 ioctl 40046207 0 returned -16 [ 85.798099] pktgen: kernel_thread() failed for cpu 0 [ 85.803405] pktgen: Cannot create thread for cpu 0 (-4) [ 85.808950] pktgen: kernel_thread() failed for cpu 1 [ 85.814056] pktgen: Cannot create thread for cpu 1 (-4) [ 85.819509] pktgen: Initialization failed for all threads [ 85.925546] pktgen: kernel_thread() failed for cpu 0 [ 85.930741] pktgen: Cannot create thread for cpu 0 (-4) [ 85.936258] pktgen: kernel_thread() failed for cpu 1 [ 85.941456] pktgen: Cannot create thread for cpu 1 (-4) [ 85.946845] pktgen: Initialization failed for all threads 10:44:35 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000480)={0x3, {{0xa, 0x4e21, 0x0, @mcast1}}}, 0x8c) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440)=[{0xf}], 0x20000000000002f7) 10:44:35 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00'], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x4, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="09631040"], 0x0, 0x0, &(0x7f0000000580)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) 10:44:35 executing program 5: socketpair(0x19, 0xe, 0x8, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f00000000c0)={0x2, 0x33d26b1d, 0xffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000001c0), &(0x7f0000000240)=0xffffffffffffff7b) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="1000000000b97167c035887f9c0000800000000000000000000000000400000000000000"]}) [ 86.076477] binder: release 6598:6605 transaction 18 out, still active [ 86.129157] binder: send failed reply for transaction 18, target dead 10:44:36 executing program 0: capset(&(0x7f0000000140)={0x20071026}, &(0x7f0000000180)) r0 = getpid() capset(&(0x7f0000000000)={0x20080522, r0}, &(0x7f0000000040)={0x7, 0xfe9, 0xffffffffffff34ed, 0x6, 0x100000001, 0x3}) 10:44:36 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x104) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000140), &(0x7f0000000180)=0x8) preadv(r0, &(0x7f0000001380)=[{&(0x7f00000001c0)=""/148, 0x94}], 0x49, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x361, 0x10400003) 10:44:36 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="00000300000000fa084c2ab1366300eb010000000a"]) r1 = socket(0xa, 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/net\x00') ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/net\x00') ioctl(r0, 0x8916, &(0x7f0000000000)) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) r4 = request_key(&(0x7f0000000380)='cifs.spnego\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000480)='ns/net\x00', 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$negate(0xd, r4, 0x3, r5) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) setitimer(0x0, &(0x7f0000000180)={{0x0, 0x2710}, {r6, r7/1000+10000}}, &(0x7f00000001c0)) syz_open_procfs$namespace(r3, &(0x7f0000000080)='ns/ipc\x00') r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x4100, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000002c0)={0x4, {{0xa, 0x4e24, 0xe85, @dev={0xfe, 0x80, [], 0x20}, 0x4}}}, 0x84) write$sndseq(r8, &(0x7f0000000280)=[{0x80000001, 0x9c33, 0x7f, 0x5, @tick=0x80000000, {0x6, 0xffffffff}, {0x7fffffff, 0x3}, @result={0x3, 0x1}}], 0x1c) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e24, 0x0, @mcast1, 0x2}, {0xa, 0x4e21, 0x2, @local, 0xfc96}, 0x6, [0x7f, 0x3, 0x4, 0x80000001, 0x20, 0x2, 0x8]}, 0x5c) 10:44:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') 10:44:36 executing program 6: r0 = open(&(0x7f0000000140)='./bus\x00', 0x40, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000100)="000000008c00000001000000008000", 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2010002, 0x12, r3, 0x0) fcntl$setstatus(r1, 0x4, 0x0) write$P9_RFLUSH(r0, &(0x7f00000001c0)={0xffffffc9}, 0xffffffffffffffff) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000180)) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f62757320000000008c10000001002b6de3e5082d6d522c2d73795d74656d2a657468312029b80ac3beb559f8368786e46d5761e38cbe83281d4e5a"], 0x54) ioctl$RTC_EPOCH_READ(r0, 0x8004700d, &(0x7f0000000000)) 10:44:36 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x8001, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYRESDEC=r1, @ANYRESDEC=r0, @ANYRES16=r1, @ANYRESHEX=r1, @ANYRESOCT=r1, @ANYRESDEC=r1, @ANYRES64=r0, @ANYRES64], 0x79) 10:44:36 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f00000005c0)={&(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000240)=""/223, 0xdf}, {&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000000)=""/41, 0x29}, {&(0x7f0000000400)=""/87, 0x57}, {&(0x7f0000000480)=""/68, 0x44}], 0x5, &(0x7f0000000500)=""/166, 0xa6, 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f00000000c0), 0xff4b, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000021f002c5eca9e600000000000a0000000002000800000000000000002899c98723d0f2f5c9e77295c37c009bdb80fa484d0da0f5382ffa1c0541b0aae28b7cb421a2fb3e2f476f56e2a2c58a7616aa8da8fce1f86a8fdc8ea61bb6e4550620ab327d96e5f6096586"], 0x20}}, 0x0) 10:44:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00'], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x4, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="09631040"], 0x0, 0x0, &(0x7f0000000580)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) 10:44:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4, 0x0, @dev={0xfe, 0x80, [], 0x1e}, 0xfffffffffffffff7}, 0x232) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="14010000", @ANYRES16=r2, @ANYBLOB="0903000000000000000008000000"], 0x14}}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r1, &(0x7f0000000040)=""/205, 0xcd, 0x0, 0x0, 0x0) dup2(r4, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1004000000016) rt_sigqueueinfo(r3, 0x4, &(0x7f0000000000)={0x24, 0xb, 0x8, 0x1}) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000180)={0x21, @empty, 0x4e24, 0x2, 'lblc\x00', 0x28, 0xfffffffffffffffa, 0x46}, 0x2c) 10:44:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00'], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x4, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="09631040"], 0x0, 0x0, &(0x7f0000000580)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) [ 87.137100] binder: release 6619:6624 transaction 22 out, still active 10:44:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='gretap0\x00') setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000e3dffc)=0x7, 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000d11000), &(0x7f0000000000)=0x4) 10:44:36 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x100) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x3ff) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000080)={0x0, 0xa7e, 0x60}) r2 = dup(r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[{0xa, 0x7ff}, {0x2}], 0x2) 10:44:36 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace(0x4207, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000040)={&(0x7f0000002100)=""/4096, 0x1000}) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x4002, 0x0) write$P9_RLINK(r2, &(0x7f0000000080)={0x7, 0x47, 0x1}, 0x7) ptrace$setregs(0xf, r1, 0x0, &(0x7f0000000140)) ptrace$setregs(0xf, r1, 0x2, &(0x7f00000001c0)="82b628a46479c0df2fa9dc3a5d55c595483e0ad0a5a1d4f96ca1aece3c8f7a3b36c097e4d45dc1c292a659b05ea964bdc418411321cd627e2256719ed5cce55e1278e891ceb1d60a684bcfab409bf57743f9c04f726f0aa3d94bc2ea51a039fe146367271f07a63a3d0fab5286f5e79a367328084cf5958056d914ddac9357c032f02740cfa33541c00366a6a52ca7573351314ca377dcd4f7705b51a8ca683a4f9b3afdf35489ef0f37b07131a29bcd38b52081d4be92a34bd665bf0d5786ba8df3d91a7f6d03e0f7e7fbab") [ 87.190743] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61473 sclass=netlink_route_socket [ 87.229933] binder: send failed reply for transaction 22, target dead 10:44:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00'], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:36 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1a) setsockopt$inet6_int(r0, 0x29, 0x40021, &(0x7f0000000100)=0xfff, 0x4) getpeername$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f00000001c0)=0x1c) r1 = open(&(0x7f0000000000)='./file0\x00', 0x500, 0x18) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0x80, 0x3}) [ 87.255513] binder: release 6638:6643 transaction 26 out, still active [ 87.290043] capability: warning: `syz-executor0' uses deprecated v2 capabilities in a way that may be insecure 10:44:36 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) clock_getres(0x3, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000100)={0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000000)={r1}, &(0x7f0000000180), 0x8) r2 = dup(r0) ioctl$TIOCSBRK(r2, 0x40044591) [ 87.350765] binder: send failed reply for transaction 26, target dead 10:44:36 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) clone(0x0, &(0x7f0000000400), &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[], 0xffffffffffffffc5) ioctl$SG_GET_NUM_WAITING(r0, 0x227c, &(0x7f0000000000)) r1 = dup2(r0, r0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) [ 87.400072] binder: release 6661:6664 transaction 30 out, still active 10:44:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=@newspdinfo={0x14, 0x24, 0x703}, 0x14}}, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x10001, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f00000001c0)=0x7f, 0x158) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x0, @dev}}, 0x0, 0x0, 0x0, "a9bb6985f862ac1dad8d2b48855bee347e639abfb73f25e68f05f8bd746616146cdcc00fc52e0b4fac654b2b083ef46510a626c1c733f4fc346acd5001ea72ade16ae272eff6ceff7db90a2dbf8ea398"}, 0xd8) r4 = dup(r2) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e1d, 0x4, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x4e22, 0x7ff, @dev={0xfe, 0x80, [], 0x1c}, 0x9}}, 0x3ff, 0xdfa0, 0xffffffff00000000, "a3b285c8de09458e1edf4bf9223f59a0c6cfa0ee1057747c0ef9931c09c124b65ed3d2da9a7e214df36809416cae627938f0f2660571c2f662cc9c98b9fccb8e9907c4dbaaea8e11f590d684a9f49d2b"}, 0xd8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendto$inet6(r2, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000180)=@generic) ioctl$sock_inet_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000300)) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x10000, 0x7f, "1948074d07f8564d8ecee9f5719e0603cb4dddd689c31453731f10b427ff1b2197adcd3529853f5a572c6b2951b4658fe3f8dee9754347a5d751fbf6cc3785cb5937d850c705d6566d106edc96036a54"}, 0xd8) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) sendfile(r3, r5, &(0x7f0000d83ff8), 0x8000fffffffe) 10:44:36 executing program 5: chmod(&(0x7f0000d3f000)='.', 0x5398fffb08fec7ed) 10:44:36 executing program 6: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4, 0x300000000000031, 0xffffffffffffffff, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000300)) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r0, &(0x7f00000001c0)={0xa0, 0xfffffffffffffff5, 0x5, {{0x1, 0x0, 0x6, 0x7fffffff, 0x0, 0x8001, {0x1, 0x5, 0x101, 0x80000001, 0x1, 0x1512, 0x4, 0x5, 0x6, 0x6, 0xfffffffffffffe00, r1, r2, 0x100, 0x800}}, {0x0, 0x4}}}, 0xa0) 10:44:36 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0xfffffffffffffffc, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"52700500000074613287f316be3a8264", 0x3002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/65, 0x41}], 0x1, 0x0) 10:44:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) [ 87.479764] binder: send failed reply for transaction 30, target dead [ 87.599695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.611188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.620909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.628778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 10:44:36 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1000082) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000100)=0x2) clock_gettime(0x0, &(0x7f00000000c0)) r1 = memfd_create(&(0x7f00000002c0)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) write$P9_RXATTRCREATE(r1, &(0x7f0000000280)={0x7, 0x21, 0x1}, 0x7) mkdir(&(0x7f0000000240)='./file0\x00', 0x3) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) clock_gettime(0x0, &(0x7f0000000300)) ioctl$RTC_PIE_ON(r1, 0x7005) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f00000004c0)={0x522, 0x0, 0xfffffffffffffe01, 'queue0\x00', 0x7f}) clock_gettime(0x0, &(0x7f0000000480)) truncate(&(0x7f0000000040)='./file0\x00', 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000380)=[{0x0, 0x3, 0x1, 0x2235, @time={0x77359400}, {}, {0x401, 0xc8}, @ext={0x43, &(0x7f0000000140)="b5a479c5ba1b54dd1205427adc5817d3726274ef006dc54fd41d33f77172f53e46fed6d975f383c4506ea1a1f37e5e43ef0732302c7b864f72eafe9c7a76456d9cc3d8"}}], 0x1c) sync() setsockopt$inet6_tcp_buf(r1, 0x6, 0x21, &(0x7f0000000400)="e39eabfbcd9cf1d859659884069d799b3a0453b3b15c8934698aba9ac5fbb8c6ad3d41995391b91ada96be77d98251d079ba75c29ca7138714bd13e5be2e57e08476b6f7", 0x44) 10:44:36 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x242, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x1, 0x7, 0x2a13, 0x100}, {0x10000, 0x8, 0xff, 0x4}]}, 0x8) r1 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/context\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000140), 0xfffffffffffff000) preadv(r0, &(0x7f0000000700), 0x31f, 0x10400003) 10:44:36 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'vlan0\x00', 0x2026}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20000000308) getrusage(0x1, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 10:44:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:36 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0xfffffffffffffffc, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"52700500000074613287f316be3a8264", 0x3002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/65, 0x41}], 0x1, 0x0) 10:44:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xffffffff80000000) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000080)=0x8) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7) r3 = syz_open_pts(r0, 0x0) dup2(r1, r3) 10:44:36 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000340)={0xf5, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}}, {{0x2, 0x4e21, @loopback}}}, 0x104) recvfrom$inet6(r0, &(0x7f0000ffbf47)=""/185, 0xfffffffffffffeba, 0x0, 0x0, 0xfffffffffffffde6) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x42) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x10000000004e20}, 0x1c) openat$cgroup_ro(r2, &(0x7f0000000300)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r3 = add_key(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f00000001c0)={'bcsf0\x00', 0x400}) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, r3) [ 87.902134] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61473 sclass=netlink_route_socket 10:44:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:37 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/sockcreate\x00') syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[]}}, 0x0) r1 = eventfd2(0x3, 0x0) fcntl$setlease(r1, 0x400, 0x1) r2 = dup(r1) fanotify_init(0x4, 0x80000) r3 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x0, 0x0, "155fdec54234f2760fcd0e82248643a1b2e7ba392564cef84f537e16a912529c367b24aecc7195cbc7eb4392d5b8422f3b869b0952c09cb9ae52c71a275ae2169ca9fc3861574139964c50a40a6a6c61"}, 0xd8) ioctl$SCSI_IOCTL_SYNC(r3, 0x4) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)) ftruncate(r3, 0x280080) sendfile(r2, r3, &(0x7f0000d83ff8), 0x2008000fffffffe) exit(0x0) readv(r0, &(0x7f0000001440)=[{&(0x7f0000001380)=""/140, 0x8c}], 0x1) 10:44:37 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x38, &(0x7f0000000040), &(0x7f0000013000)=0x4) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpgid(0xffffffffffffffff) getpgrp(0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)) r2 = getpgrp(0x0) r3 = syz_open_procfs(r2, &(0x7f0000000280)="636c6561725f72656673007edb") r4 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r4) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f00001ae000/0x4000)=nil, 0x4000, 0x0, 0x8012, r5, 0x0) close(r0) 10:44:37 executing program 4: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r0, &(0x7f00000004c0), 0xffffffffffffffd7) r3 = memfd_create(&(0x7f0000000000)='\x00 ', 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) [ 88.053334] blk_update_request: I/O error, dev loop0, sector 1280 [ 88.060230] blk_update_request: I/O error, dev loop0, sector 1535 [ 88.062621] blk_update_request: I/O error, dev loop0, sector 0 [ 88.062630] Buffer I/O error on dev loop0, logical block 0, lost async page write [ 88.062659] blk_update_request: I/O error, dev loop0, sector 4 [ 88.062665] Buffer I/O error on dev loop0, logical block 1, lost async page write [ 88.161758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.173061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.190648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.208518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 10:44:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getrlimit(0x6, &(0x7f0000000000)) r1 = dup3(r0, r0, 0x80000) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000100)) setsockopt$inet6_mreq(r0, 0x29, 0x10000000000001b, &(0x7f0000000040)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x14) 10:44:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00'], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:37 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x0, 0x0, @loopback}, 0x1c) inotify_init() r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x0, &(0x7f0000000040)=0x400, 0x4) 10:44:37 executing program 4: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r0, &(0x7f00000004c0), 0xffffffffffffffd7) r3 = memfd_create(&(0x7f0000000000)='\x00 ', 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) 10:44:37 executing program 7: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r0, &(0x7f00000004c0), 0xffffffffffffffd7) r3 = memfd_create(&(0x7f0000000000)='\x00 ', 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) 10:44:37 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'vlan0\x00', 0x2026}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20000000308) getrusage(0x1, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 10:44:37 executing program 0: r0 = socket(0xa, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x0) setsockopt$inet_int(r0, 0x0, 0x40, &(0x7f0000000000), 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x200200, 0x0) 10:44:37 executing program 7: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2040, 0x0) mmap(&(0x7f0000585000/0x2000)=nil, 0x2000, 0x1000000, 0x31, r0, 0x0) request_key(&(0x7f0000000180)='pkcs7_test\x00', &(0x7f00000001c0), &(0x7f0000000200)='\x00', 0xfffffffffffffffc) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000ab2000), 0x4) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000100)) mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r1 = open(&(0x7f0000039000)='./control\x00', 0x0, 0x0) mkdirat(r1, &(0x7f000002cff6)='./control\x00', 0x0) mkdirat(r1, &(0x7f0000016ff8)='./file0\x00', 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000140)="fd3b1e5b68a11c4e96f6c86e1b8ee510", 0x10) r2 = openat(r1, &(0x7f0000025000)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000023ff8)='./control\x00', r2, &(0x7f0000012ff6)='./control\x00') renameat2(r2, &(0x7f0000bee000)='./control\x00', r1, &(0x7f000003a000)='./control\x00', 0x2) mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000f4c000)=""/4096) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sw_sync\x00', 0x40000, 0x0) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) [ 88.427779] binder: 6765:6770 transaction failed 29189/-22, size 24-8 line 3014 10:44:37 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x100082) fchmod(r0, 0x40) r1 = memfd_create(&(0x7f0000000380)="000000000000000100000001000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6201004dbea37aabd3eb9888c4c629419f50937a6848e0d281dbee568c4de9a036c26f1922f64971d4df97fbab04e8ce4938b31dcf259b4bc60901e18661fab8fb2988cd2bc260c2f572353e6bb0a002fc164d4f189b068062d10100000000000000400c0c4ca57b546b9430172ea5362ee0141b3df06ad235e815d89eead3d9473409c09c2e27a952337a24f20188c013123cc0316a33d8b443453773e4a09edd8031124dee13ce9c75288f2ec833c7e66af5b19a00000000000000", 0x0) getpeername(r1, &(0x7f00000002c0)=@ipx, &(0x7f0000000280)=0xfffffffffffffe29) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000140)={@mcast2, 0x78, r2}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x800, 0x4) dup3(r1, 0xffffffffffffffff, 0x5272b312d05404b1) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000000)={@dev={0xfe, 0x80, [], 0x1f}, 0x2d}) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) sendfile(r0, r0, &(0x7f0000000240), 0x20000102000008) 10:44:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00'], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00'], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) [ 88.588002] binder: 6794:6796 transaction failed 29189/-22, size 24-8 line 3014 [ 88.664402] binder: 6803:6806 transaction failed 29189/-22, size 24-8 line 3014 10:44:37 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000001c0)=0xff9) read(r0, &(0x7f00003fefff)=""/1, 0x1) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3c) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x190, 0x2a, 0x51a, 0x70bd29, 0x25dfdbff, {0x1d}, [@nested={0x17c, 0x26, [@typed={0xd4, 0x91, @binary="fc5424882b7e47cc8a31fe7bc3da814eada7ff0b1e72cfe0386d965070594fe7629b5f467a707226f36e832b773f5bc81f031559b27bf35daaccdd81fa2b27082c8e9a1dc9775d2cfa9c81238b2ab922e8c83fffdbf5e07f8981a68370483d36c0bb9d3165bd2cbcb86a68bb4ac82232cfc969acdee6e5eb87485a3a36caa6efdac8e49fa602510f87cda0e90a1cf2f4a9955f85357310fa9445a49d9a0b69dbf0a57347d2927f392192e980a2018da486f94da754443dfe46c2db8f32be483d084b007f44fcb426b5e867cdf930a9"}, @typed={0xa4, 0x5a, @binary="f9ea3f697a54f39dcc3bc4a182a30dbc4c24520985ba12bc5009110f504a3ecf2cbb72dbf3d505336074cea9d32238b8931caf2b0fb26bf8244db1601297bfb0f18d88f654b849503653bb40d7fafb430c4a913132a493e6cf62df12bd41cad29cf242df8e27f0c282b9c977e0b539c3c3fc771c2f771f4669811491f947f4d234d42b7731426422a9e3e805cdda1c598dc1bd16069a3a6bc1cde769ec1e"}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4081}, 0x4000041) dup2(r2, r3) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000180)) fcntl$setown(r2, 0x8, r1) tkill(r1, 0x16) 10:44:37 executing program 7: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x2e) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x200200, 0x0) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000000080)) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x403c5404, &(0x7f00000000c0)={{0x0, 0x3, 0x1e4, 0x0, 0x5}, 0x5c, 0x5}) [ 88.750977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.760420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.783955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.817329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 10:44:37 executing program 5: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pktcdvd/control\x00', 0x40080, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8, 0xf31, 0x8, 0xfffffffffffffffa}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x400000, 0x0) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) 10:44:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00'], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:37 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x100082) fchmod(r0, 0x40) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) getpeername(r1, &(0x7f00000002c0)=@ipx, &(0x7f0000000280)=0xfffffffffffffe29) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000140)={@mcast2, 0x78, r2}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x800, 0x4) dup3(r1, 0xffffffffffffffff, 0x5272b312d05404b1) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000000)={@dev={0xfe, 0x80, [], 0x1f}, 0x2d}) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) sendfile(r0, r0, &(0x7f0000000240), 0x20000102000008) 10:44:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000000)='selinuxkeyring]\x00', 0x1) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000040)={0x17, 0x82, &(0x7f00000001c0)="601c29cbc3dc2cf7788eb8d16378dd37b43e4499ddeaaa7954f7145ad006d5bde75ee0c01d5a0b5d614946d87eed4ecefb4252e4f28b8712041200cc1f6d4fdfc16edb5cfcffb3b8941a0df59cf46bef0229de45de4d552e269bf8204e1b194f4e5587439d25d107a5acc0a5f8ef69e8ff9be2ee7cac2df0151c0813a482d5ea1851"}) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="116348400000000000000000f4ff0100000000000000000000006d450817e50083c48f6a4b4a00000000000e0000000000000000d1b5", @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYPTR64=&(0x7f0000000180)=ANY=[], @ANYBLOB="0080f5000000000051531e610f48aa4ca5b3a5e2275ab9821caee3f5"], 0x0, 0x0, &(0x7f0000000280)}) 10:44:37 executing program 7: socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x44040000) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000640)={0x0, @local, 0x4e22, 0x2, 'rr\x00', 0x8, 0x1, 0x61}, 0x2c) unshare(0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'teql0\x00', r2}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x101000, 0x0) writev(0xffffffffffffffff, &(0x7f0000000480), 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x420000, 0x0) fcntl$getownex(r3, 0x10, &(0x7f00000005c0)={0x0, 0x0}) sched_setaffinity(r5, 0x8, &(0x7f0000000600)=0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000500)={0x0, &(0x7f00000004c0)}, 0x8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x8, 0x0, 0xf, 0x4, 0x9, "5f94d5a5913472a9e69c7e2cd369ca3c9c7f90ec6db4a65ef32a89aa03ceb305a9bb1b18bc09b49254feeb8ef41f1bfdbde5719b780217256afc8bd1b9162454", "ea3288fc8b603cb1a19c16563081f48c24766f788065a6d684e626e6e549a157dfd7918eea2b3e2e46af68d7411e37c79d1901cbb7235d0e7bbf1bb0601f8407", "0072516cb0d2233541f17187a9712f69beae3f1e4afb51b97ccd1fc79045c51a", [0x1, 0x3]}) capset(&(0x7f0000000200)={0x200f1526, r6}, &(0x7f0000000240)={0xfffffffffffff801, 0x6, 0x8, 0xb8, 0x6, 0x854b}) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000040)=0x50) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280), 0xfffffffffffffedd, 0x20000004, &(0x7f0000000080), 0x1c) prctl$intptr(0xa, 0xffffffffffffff00) [ 88.914897] binder_alloc: 6830: binder_alloc_buf size 1008807370945481296 failed, no address space [ 88.939893] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 10:44:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x40000000000000) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060200000000e80001040000040d001400ea1100000005000000", 0x29}], 0x1) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x3, r1}) rt_sigpending(&(0x7f0000000080), 0x8) sync() 10:44:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00'], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) [ 88.970888] binder: 6830:6833 transaction failed 29201/-28, size 1008806316531010123-0 line 3137 [ 88.977308] binder: release 6827:6835 transaction 41 out, still active [ 89.033864] binder_alloc: binder_alloc_mmap_handler: 6830 20001000-20004000 already mapped failed -16 [ 89.047802] binder: BINDER_SET_CONTEXT_MGR already set [ 89.053769] binder: 6847:6851 ioctl 40046207 0 returned -16 [ 89.060490] binder: BINDER_SET_CONTEXT_MGR already set [ 89.066429] binder: 6830:6833 ioctl 40046207 0 returned -16 10:44:38 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x22}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) connect(r0, &(0x7f00000012c0)=@nl=@unspec, 0x80) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x2, @empty, 0x100000001}, 0x1c) [ 89.079614] binder_alloc: 6830: binder_alloc_buf, no vma [ 89.092865] binder_alloc: 6830: binder_alloc_buf, no vma [ 89.092899] binder: 6830:6853 transaction failed 29189/-3, size 1008806316531010123-0 line 3137 [ 89.093294] binder: undelivered TRANSACTION_ERROR: 29189 [ 89.093475] binder: send failed reply for transaction 41, target dead [ 89.093496] binder: undelivered TRANSACTION_ERROR: 29201 10:44:38 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) readv(r1, &(0x7f0000000440)=[{&(0x7f0000000040)=""/41}, {&(0x7f00000000c0)=""/194}, {&(0x7f00000001c0)=""/79}, {&(0x7f0000000240)=""/26}, {&(0x7f0000000280)=""/157, 0x56}, {&(0x7f0000000340)=""/205, 0xffffffbf}], 0x225) dup2(r0, r1) write$evdev(r0, &(0x7f000004d000)=[{}, {{}, 0x0, 0x8, 0x200000000000}], 0x20) [ 89.168825] binder: 6847:6852 transaction failed 29189/-3, size 24-8 line 3137 10:44:38 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00'], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:38 executing program 3: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000280)={{0x62, @broadcast, 0x4e24, 0x3, 'lblc\x00', 0x1, 0x80000001, 0x3a}, {@local, 0x4e20, 0x12003, 0x5, 0x0, 0x9}}, 0x44) r1 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) getsockopt$inet_tcp_buf(r1, 0x6, 0x16, &(0x7f0000000180)=""/74, &(0x7f0000000200)=0x4a) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_netdev_private(r2, 0x89f8, &(0x7f0000000140)="5f2d2cf8f652dcfa6db1a5") r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'dh\x00', 0x0, 0x6}, 0x2c) 10:44:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00'], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x40000000000000) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060200000000e80001040000040d001400ea1100000005000000", 0x29}], 0x1) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x3, r1}) rt_sigpending(&(0x7f0000000080), 0x8) sync() 10:44:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5800000014000100000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="2c000300766574683100000000000000000000001400060000000000000000000000000000000000080002007f00000108000800000000000800010000000000a684c2482c7ab9eb901e1fc9cdac6ccde4c8abbe74eb66e342a09ffaf657957e6947efcdb2a722849e8f8c3e969939a12456e8e2a3e94dd9c545"], 0xfffffffffffffe69}}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)=0x0) r2 = socket$packet(0x11, 0x0, 0x300) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000200)=0x36, 0x4) syz_open_procfs(r1, &(0x7f00000001c0)='gid_map\x00') openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x80, 0x0) [ 89.226936] IPVS: Creating netns size=2552 id=11 [ 89.344191] binder_alloc: 6872: binder_alloc_buf, no vma [ 89.353842] binder: BINDER_SET_CONTEXT_MGR already set [ 89.374112] binder: 6872:6879 transaction failed 29189/-3, size 24-8 line 3137 [ 89.421053] binder: 6871:6876 ioctl 40046207 0 returned -16 [ 89.421122] binder_alloc: 6872: binder_alloc_buf, no vma [ 89.421164] binder: 6871:6881 transaction failed 29189/-3, size 24-8 line 3137 10:44:40 executing program 1: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="8cff7c000000b527ce45ce3165198c1c5bd500000000000000000000000000004308be29876fd3f1d1acdbcb4291760ecdbc1e5a0bc6ec4f4414623fd1cbb8882492b6000629bd2245ea4dfb693ea31f57bb2009d0e2466eab3eddc66b701e8943652788c1ee7065799dc0b0"], 0x20) 10:44:40 executing program 3: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x48000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$sock_proto_private(r2, 0x89e7, &(0x7f0000000080)="95e348024cfd531c2cba9579ee9385955a42b5ac1a437f9735016110f98cb492ae34") r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newroute={0x1c, 0x18, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}, 0x1c}}, 0x0) 10:44:40 executing program 4: mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0x32, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x40181, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)="0001705f66696c657300") r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01032bbd7000fbdbdf25100000001400020008000b000a00000008000500ffffff7f08000400800000005000020008000b000a0000000800040008000000140001000000000000000000000000000000000008000900ff000000080002004e22000008000b00000000000800030002000000080002004e22000008000400415b0000"], 0x88}}, 0x1) getdents(r0, &(0x7f00000002c0)=""/162, 0xffffffffffffff01) getdents(r0, &(0x7f0000000ea9)=""/407, 0x197) mq_timedsend(r0, &(0x7f0000000380)="0cb5a0fe03d965f440daba069c1d89c1ea7234f061a9aefce7d54aabb372673b305b57683a15009ed5e8e33fec46067d439c2606fcbcbab2fda51161a5bf679e9175b18ca4f002bee256acae4cfbcba145b84d020819b817e16817e41ecd70ef9fbcefe1196e8313bf08f2780d218645b5bb20db934ab9c18f2a083a4891b2bcb4819346a316d2553211a79bdf820919570f7015ad7868b807b4612848eef5c3bf6d458f19ee322ec2575dab11d5d5d8213ea81c4758e710ed0d7361fbaec15449256cafcdace4e01c1a541d71a04388", 0xd0, 0xfff, &(0x7f00000000c0)) 10:44:40 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x8) ioctl$sock_ifreq(r0, 0x8993, &(0x7f0000000040)={'bcsh0\x00', @ifru_flags=0xd600}) r1 = socket$inet(0x2, 0xa, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000007480)=""/169, &(0x7f0000003440)=0x10) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, 'bcsh0\x00'}, {0x20, ',ð0selinuxmime_type'}, {0x20, 'bcsh0\x00'}, {0x20, '\'GPL})))'}, {0x20, 'bcsh0\x00'}], 0xa, "d162ea842de5e77618"}, 0x49) 10:44:40 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00'], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:40 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="63750172656e9100000000000000020000000020236aa0ee8091f6f0a9cdea1628ef42fbf7a370d9e6", 0x0, 0x0) getrandom(&(0x7f0000000000)=""/11, 0xb, 0x2) futimesat(r0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)={{0x0, 0x7530}, {0x0, 0x2710}}) 10:44:40 executing program 7: socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x44040000) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000640)={0x0, @local, 0x4e22, 0x2, 'rr\x00', 0x8, 0x1, 0x61}, 0x2c) unshare(0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'teql0\x00', r2}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x101000, 0x0) writev(0xffffffffffffffff, &(0x7f0000000480), 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x420000, 0x0) fcntl$getownex(r3, 0x10, &(0x7f00000005c0)={0x0, 0x0}) sched_setaffinity(r5, 0x8, &(0x7f0000000600)=0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000500)={0x0, &(0x7f00000004c0)}, 0x8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x8, 0x0, 0xf, 0x4, 0x9, "5f94d5a5913472a9e69c7e2cd369ca3c9c7f90ec6db4a65ef32a89aa03ceb305a9bb1b18bc09b49254feeb8ef41f1bfdbde5719b780217256afc8bd1b9162454", "ea3288fc8b603cb1a19c16563081f48c24766f788065a6d684e626e6e549a157dfd7918eea2b3e2e46af68d7411e37c79d1901cbb7235d0e7bbf1bb0601f8407", "0072516cb0d2233541f17187a9712f69beae3f1e4afb51b97ccd1fc79045c51a", [0x1, 0x3]}) capset(&(0x7f0000000200)={0x200f1526, r6}, &(0x7f0000000240)={0xfffffffffffff801, 0x6, 0x8, 0xb8, 0x6, 0x854b}) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000040)=0x50) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280), 0xfffffffffffffedd, 0x20000004, &(0x7f0000000080), 0x1c) prctl$intptr(0xa, 0xffffffffffffff00) 10:44:40 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='fdinfo\x00') exit(0x0) getdents(r0, &(0x7f00000000c0)=""/105, 0x9627da9130046fef) 10:44:40 executing program 3: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) ptrace$pokeuser(0x6, r0, 0xd5bc, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x400000, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='vlan0\x00', 0x10) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x3073ff, 0x0) ioctl$KDDELIO(r2, 0x4b35, 0x7) getpeername$packet(r2, &(0x7f00000000c0), &(0x7f0000000100)=0x14) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000240)) [ 91.851033] syz-executor5 uses obsolete (PF_INET,SOCK_PACKET) [ 91.863721] SELinux: policydb magic number 0x7cff8c does not match expected magic number 0xf97cff8c [ 91.884407] binder_alloc: 6912: binder_alloc_buf, no vma 10:44:40 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) signalfd4(r0, &(0x7f0000000080)={0x4}, 0x8, 0x80000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={'ip_vti0\x00', 0x201e}) close(r0) setxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@random={'trusted.', "fe00"}, &(0x7f0000000300)='!\x00', 0x2, 0x2) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f00000001c0)={0xffff, 0x3, 'client1\x00', 0xffffffff80000004, "e1642bf961c8e003", "4931a77f5ce9cb58e1130a72f89b9b383449ca16d67188e6ddaa871bb51f814f", 0x1000, 0x3f}) r2 = fcntl$dupfd(r0, 0x406, r0) connect$unix(r2, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0xc8) fanotify_init(0x2, 0x141000) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x1ce) write$P9_RMKNOD(r3, &(0x7f0000000040)={0x14, 0x13, 0x2, {0x2, 0x4, 0x3}}, 0x14) [ 91.899050] binder: 6912:6918 transaction failed 29189/-3, size 24-8 line 3137 10:44:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00'], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0xffff}, 0xc) r1 = socket(0x10, 0x807, 0xc) write(r1, &(0x7f0000000000)="130000001000ffdde200f49ff60f050000230a009d0000001100c53022e5f9ec364fe86bc337747a04cb1c24e175cc463437101101bd81dc3181ddd83f8d3d1f2c53e45fca5ab94018975d7db75411543e1226408e88cac1f2cbefbb693d8a0c8efc28ceb4ec3ff429592e5de7e4f28bca763acd06f40ad03226af559bf91efdb19a5faccffe8090d92237be9951be4bd7c2a1c1a2b5b2684ade4025622c962d916c000000000000000000000000000000", 0xb1) [ 91.985932] IPVS: Creating netns size=2552 id=12 10:44:41 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000100)={'ip6_vti0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000080)={{0x0, 0x7530}, {r1, r2/1000+30000}}, &(0x7f0000000140)) setitimer(0x1, &(0x7f0000000000)={{}, {0x0, 0x7530}}, &(0x7f0000000040)) 10:44:41 executing program 5: mkdir(&(0x7f0000cb3ff8)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) execve(&(0x7f00000000c0)='./file0/file0/file0/file0\x00', &(0x7f0000000280)=[&(0x7f0000000100)="9d2c00", &(0x7f0000000140)='\x00', &(0x7f0000000180)="0500de00667300", &(0x7f0000000200)='#cgroup-GPLselfeth1+}[\x00', &(0x7f0000000240)="0500de00667300"], &(0x7f0000000300)=[&(0x7f00000002c0)="0500de00667300"]) mkdirat(r0, &(0x7f0000643ff8)='./file0\x00', 0x0) r1 = open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0) chroot(&(0x7f0000000380)='./file0/file0\x00') r2 = openat(r1, &(0x7f00006e9ff8)='./file0\x00', 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sw_sync\x00', 0x1, 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', &(0x7f00009b9000)="0500de00667300", 0x1008, &(0x7f0000000100)) open$dir(&(0x7f0000000340)='./file0/file1\x00', 0xc0001, 0x11) symlinkat(&(0x7f000001fff7)='./file0/file0\x00', r2, &(0x7f000001fff8)='./file0\x00') renameat2(r2, &(0x7f00000001c0)='./file0/file0/file0/file0\x00', r2, &(0x7f0000284000)='./file0/file0/file0/file0\x00', 0x0) [ 92.019848] binder: 6940:6942 transaction failed 29189/-22, size 24-8 line 3014 10:44:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00'], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:41 executing program 3: r0 = memfd_create(&(0x7f0000034ffe)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000049c0)={'syz_tun\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000004b80)={{{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000004c80)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000004cc0)={{{@in, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004dc0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004e00)={'team0\x00', 0x0}) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000004e40)={@remote, 0x0}, &(0x7f0000004e80)=0x14) getsockname$packet(r0, &(0x7f0000004ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000004f00)=0x14) getpeername$packet(r0, &(0x7f0000004f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000004f80)=0x14) clock_gettime(0x0, &(0x7f0000007100)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000007080)=[{{&(0x7f0000004fc0)=@nl=@proc, 0x80, &(0x7f0000006340)=[{&(0x7f0000005040)=""/199, 0xc7}, {&(0x7f0000005140)=""/100, 0x64}, {&(0x7f00000051c0)=""/149, 0x95}, {&(0x7f0000005280)=""/156, 0x9c}, {&(0x7f0000005340)=""/4096, 0x1000}], 0x5, &(0x7f0000006380)=""/232, 0xe8, 0x3ff}, 0xfffffffffffffffa}, {{&(0x7f0000006480)=@pptp, 0x80, &(0x7f00000065c0)=[{&(0x7f0000006500)=""/134, 0x86}], 0x1, &(0x7f0000006600)=""/205, 0xcd, 0x80}, 0x9}, {{&(0x7f0000006700)=@can={0x1d, 0x0}, 0x80, &(0x7f0000006c80)=[{&(0x7f0000006780)=""/160, 0xa0}, {&(0x7f0000006840)=""/133, 0x85}, {&(0x7f0000006900)=""/148, 0x94}, {&(0x7f00000069c0)=""/163, 0xa3}, {&(0x7f0000006a80)=""/244, 0xf4}, {&(0x7f0000006b80)=""/236, 0xec}], 0x6, 0x0, 0x0, 0x20000000}, 0x2}, {{&(0x7f0000006cc0)=@nfc_llcp, 0x80, &(0x7f0000007040)=[{&(0x7f0000006d40)=""/65, 0x41}, {&(0x7f0000006dc0)=""/117, 0x75}, {&(0x7f0000006e40)=""/77, 0x4d}, {&(0x7f0000006ec0)=""/54, 0x36}, {&(0x7f0000006f00)=""/181, 0xb5}, {&(0x7f0000006fc0)=""/71, 0x47}], 0x6, 0x0, 0x0, 0x1}, 0x5}], 0x4, 0x0, &(0x7f0000007140)={r10, r11+30000000}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000007180)={'teql0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000071c0)={{{@in6=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f00000072c0)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000007300)={@local, 0x0}, &(0x7f0000007340)=0x14) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000007380)={{{@in=@multicast1, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f0000007480)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000009600)={{{@in6=@ipv4={[], [], @loopback}, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f0000009700)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000009880)={{{@in6=@mcast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@mcast1}}, &(0x7f0000009980)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000009a40)={@mcast1, 0x0}, &(0x7f0000009a80)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000009ac0)={'bpq0\x00', 0x0}) getpeername$packet(r0, &(0x7f0000009b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000009b40)=0x14) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f000000df00)={{{@in6=@ipv4={[], [], @multicast2}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@rand_addr}}, &(0x7f000000e000)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f000000e040)={{{@in=@remote, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6}}, &(0x7f000000e140)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000000e3c0)={'syz_tun\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f000000e400)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f000000e500)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f000000e540)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@rand_addr}}, &(0x7f000000e640)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000000e680)={'ip6gre0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000e6c0)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f000000e700)={'eql\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000000e740)={'ip6tnl0\x00', 0x0}) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f000000e780)={@local, @dev, 0x0}, &(0x7f000000e7c0)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000f2c0)={&(0x7f0000000000), 0xc, &(0x7f000000f280)={&(0x7f000000e800)={0xa6c, r2, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x22c, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffff801}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x1, 0x9, 0x3, 0x81}, {0xfffffffffffffff8, 0x100000000, 0x80000000, 0x1}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xa0}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x16c, 0x2, [{0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x8, 0x80000000, 0x20, 0x5}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r12}}, {0x8}}}]}}, {{0x8, 0x1, r13}, {0x140, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x200}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xece}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r15}}}]}}, {{0x8, 0x1, r16}, {0x1b4, 0x2, [{0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x4c, 0x4, [{0x5, 0x4217, 0x10001, 0x3ad286b5}, {0x1997, 0x32, 0x80, 0x7}, {0x6f1f, 0x5, 0x3f, 0xf83}, {0x3f, 0x8000, 0x5}, {0xea, 0x7fff, 0x1, 0x9}, {0x8001, 0x7, 0x40, 0x8}, {0x20, 0x81, 0x5, 0x2}, {0x9, 0x10000, 0x3, 0x6}, {0x6, 0xf8, 0xffff, 0xde1}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r18}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r19}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r20}, {0x50, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r21}, {0x210, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r22}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x8, 0x8, 0xfffffffffffffffd}, {0x9, 0xfffffffffffffff9, 0x3, 0x2}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r23}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r24}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r25}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r26}}}]}}, {{0x8, 0x1, r27}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r28}}}]}}, {{0x8, 0x1, r29}, {0xec, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x6a}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r30}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r31}}}]}}]}, 0xa6c}, 0x1, 0x0, 0x0, 0x4008090}, 0x80) dup2(r1, r0) readv(r0, &(0x7f00000014c0)=[{&(0x7f00000013c0)=""/182, 0x7}], 0x1) 10:44:41 executing program 1: r0 = accept4$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x800) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x7, 0x10040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000885000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f00007a4000/0x3000)=nil) mlock(&(0x7f000066c000/0xa000)=nil, 0xa000) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000040)={0x0, 0x5, 0x0, 0x0, "4f019b55a1ff7f000000000045ad56d08f14133d20c00000000000e7ffffff00"}) 10:44:41 executing program 5: syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)={0x0, 0x4, [0x0, 0x4, 0x0, 0x7ca]}) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000) getpid() pread64(0xffffffffffffffff, &(0x7f0000000000)=""/40, 0x28, 0x0) 10:44:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00'], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) [ 92.190203] binder: 6958:6962 transaction failed 29189/-22, size 24-8 line 3014 10:44:41 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f000074fffc), 0x348) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x80, 0x0) perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x4b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup(r0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000002c0)=0x0) getpgid(r3) setsockopt$inet6_tcp_int(r2, 0x6, 0x60000008000006, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000040)={0x80, 0x8}) r4 = socket$key(0xf, 0x3, 0x2) fsetxattr(r0, &(0x7f0000000340)=@random={'security.', '\x00'}, &(0x7f0000000380)='/dev/null\x00', 0xa, 0x1) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020f0000100000000018410000000000030006000000000002000000e000000100000000000016fe0800120000000200000000009cf4000000000600000000000000000000000000000000000000000000000000000000000001ac1414bb000000000000000000000000030005000000000002000300e0000001000000000000"], 0x80}}, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f00000003c0)=0x3, 0x4) mq_timedreceive(r1, &(0x7f0000000140)=""/30, 0x1e, 0x5, &(0x7f0000000240)={0x0, 0x989680}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r6 = inotify_add_watch(r5, &(0x7f0000000280)='./bus\x00', 0x102) inotify_rm_watch(r2, r6) ftruncate(r5, 0x2007fff) sendfile(r2, r4, &(0x7f0000000300), 0x5) 10:44:41 executing program 7: r0 = socket(0x1000d, 0x8000b, 0x6) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRESDEC=0x0], 0x1}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', r1}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000c, 0x4010, r0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x200000, 0x0) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000000140)) [ 92.318153] binder: 6975:6976 transaction failed 29189/-22, size 24-8 line 3014 10:44:41 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x1c, &(0x7f0000000080), &(0x7f0000001ac0)=0x4) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000000)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) 10:44:41 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f00000000c0), 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000290001000000000000000000132407000000315618ecae189cf0d46387ddadf498192cc373907fbd475fa7ff3831342b337c9ea01add992bf4f6ac32a5527798a207", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x1c}}, 0x0) ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000000)={'bpq0\x00', @ifru_names='veth0\x00'}) 10:44:41 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40000, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0xfff, 0x4) 10:44:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00'], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:41 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000dac000), &(0x7f0000048000)=0x1, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) futex(&(0x7f000000cffc)=0x2, 0xf, 0x4, &(0x7f0000000340)={r0, r1+10000000}, &(0x7f0000000380), 0x2) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x800, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'nr0\x00', 0x0}) setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000080)={@multicast1, @local, r3}, 0xc) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x420}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="10010000", @ANYRES16=r4, @ANYBLOB="010225bd7000ffdbdf250200000008000100", @ANYRES32=r3, @ANYBLOB="f400020038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800110003000000080004000000008040007461747300000000000000000000000000000000000000080003000b000000080004000000000008000700000000003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c00040068617368000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r3], 0x110}, 0x1, 0x0, 0x0, 0x80}, 0x800) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000)=0x1c0000001, 0x0) 10:44:41 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020f0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000000000000000000000000000600000000000000000000000000000000000000000000000000000000000001ac1414bb000000000000000000000000030005000000000002000000e000000100000000000000da4f2fe94de9bc8ae699fbf1203e20c5ad0519209f7285149fa97d3ca4644faf16b699182f93b7d04a6f4eac78de0c2717"], 0xfffffffffffffe0c}}, 0x0) 10:44:41 executing program 1: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x8, 0x34, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000ffb000/0x1000)=nil, 0x1000}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x101600, 0x0) ioctl$SG_GET_SCSI_ID(r3, 0x2276, &(0x7f0000000100)) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000040)) close(r1) 10:44:41 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000340), &(0x7f00000000c0)="9c7643bed1029bd91709", 0xa, r0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x4000, 0x0) gettid() ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) 10:44:41 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @dev}, 0x10) r1 = dup(r0) getdents64(r1, &(0x7f0000000140)=""/171, 0xab) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) ioctl$EVIOCSFF(r1, 0x402c4580, &(0x7f0000000080)={0x53, 0xe22, 0x32, {0x3}, {0x8, 0x2}, @period={0x5c, 0x1ff, 0x6, 0x2252f4c9, 0x0, {0x81, 0x100000000, 0x7, 0xffffffffffff8000}, 0x1, [0x7]}}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) sendto$inet(r0, &(0x7f00000002c0)='6', 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) writev(r0, &(0x7f0000000100)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r0, &(0x7f0000000300)="597323dfcfa08a3701ea36cd4d8de331d43b301eeef0477c1f8348d36fea2d6fec93f52a288c113df1b35a13342f1b43101eeacdf060e2955189a33f8287e81982ea980d80023989490f866f1b5a91bd2704d19b1642df59c0e7f8add7c0f31e7f930bb31ad41f4815771f17e75c3d8de09cb643eeb7a544d6499991309e78938cd7daf4f142087e49e1ce1154c58a63772ac01d8f61657a0891f18d2bcc4e5f3e40b5485c6d2063942d931434e11f0d5cf85eff5273486b10304d736e588a0d5ab8ce7800718b9665c79ef8", 0xcc, 0x400c0, &(0x7f0000000240)={0x2, 0x0, @empty, [0x0, 0x2000000]}, 0x10) 10:44:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00'], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:41 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000340), &(0x7f00000000c0)="9c7643bed1029bd91709", 0xa, r0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x4000, 0x0) gettid() ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) 10:44:41 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000000)={@remote}, 0xd3) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) 10:44:41 executing program 1: ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000100)) unshare(0x0) clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000000), &(0x7f0000000200)) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f00000000c0)={0x0, 0x6, 0x0, 0x0, 0xe13d, 0x200, 0x10001, 0x0, 0x100000000, 0x0, 0xff, 0x342}) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$RTC_WIE_ON(r1, 0x700f) pwritev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="e235c5d550653f7f39471db4757bbc2b0ab5efe396a6e04099f9526cccbe6d8be10a88c9acd76a5bfd8e22a3927b729b8faf82dc6095a7894d18c88bb7813bf898c11c53bf2a9877c4b359a6ecbd42cf275eddf5d955d0f01fd4810f", 0x5c}, {&(0x7f0000000380)="f9d5cc38aa1a0599a6e5ae87e670dfda53be68233e7338a3c5ea74b5c0233bf8920c618af29b9b60902724b4b558e6f58d18827dd4e075128f4f24101fb8d1ef3e8ed0ce9afd91ad1d95a6686e797e95b25094b5c691a45611f92bb26aa5fd660378344cc34eee81d87d6d7fe9474e733c3e4412fa1f9f50762cc1e5a9372d38745cdc59a91fb28e03b8a246fba2f8fc6f89c78ca18fba234a41836306032a4f51a9a8069eac6d943637aa6eaba7394eb8bd64d5045e4a60aa38", 0xba}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000000140)="c402f18480e3cf4c14011eee3a80c019cbff94fb9d0526aa4c4029045df9b606e1d1582132d479c85703ea43491b472c079104e0a3d4ab057aee46b688ad543ef22a0396e88692302eefcb69aef3e3e7924b46570b720414ed", 0x59}], 0x4, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) sendfile(r0, r0, &(0x7f0000000240), 0x20000102000007) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$FUSE_OPEN(r1, &(0x7f0000001440)={0x20, 0x0, 0x6, {0x0, 0x5}}, 0x20) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000b, 0x110, r1, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 10:44:41 executing program 4: r0 = add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000580), 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000380), 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000680), 0x0, 0x0, 0xfffffffffffffffc) readlink(&(0x7f00000002c0)='./file0\x00', &(0x7f00000006c0)=""/250, 0xfa) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000180)="c6a34e987940ea478d9bd365b9e4621e334652733324b7773a3df8a7504d9e18e2e4a839fcd9030000000000000028945d12a9caae603ff81c4dc32ed3d70fb5d4c5b866305249060000005277822d0e0616a2e5b74c48e38b9936f298c6feec95ad327c724ec507bd34b94e99623f014bf81ea54900ac54a99aa04e1a7f000000e8d3bfa2f3abce9736aac3e0b19d5a697bc438cd49bc1cf3af72c2180bbee78e9a7237c02e10ac77e3a4fd8a6e2bdca6a9a1d7da1a3e559fdafb6703c73b3c4c10865302fb324f16327996273625d9f0a54ef16bdb08f22ed11fd80b74eb861aebe51b0912c0f79486c25c49524ffe4f00", 0xf2, r1) mlockall(0x3) request_key(&(0x7f0000000940)="646e735f7265736f6c7665720005083f7605beb89ebb55f56950196fd8b8a6ebddf637ee27ef0fabbbad7523dacb0ab4baaf14787b652566f6eaf50a9d4cff3e30f2d07fd0118cf06573e05f283ef26ec0cc75cf93fe4c95c7185cb70df310c4c08871883fc063c014d46b8b27fd88a01e760bee664a475d69d12e2fc7e3dc680e3bb87b71d301fbf92cadf5537bc8774141ee7d7152d16c9ee500389b527a9b31679b1560e4680fcfd95743ed5305a984645fb4371e5e363f7df35cb72f6d9c953cd2ea3167c037567f7f99399e92ba02db513f40a4d44e072bf5ea9495287934a503a032610a0235c3530cfc99e27a1e10e28ed49beb223bbe910fd417a48e64dbdf97edb9363e6b5853e1323d6f78d0fb80969de2f5fec97acbb11c1ae97f54cf4e3ef9d50e1fbc43cc27e537d18452001232814ac3970ee2938175a91f4e0ca28b803a350dbea3b68d6a71bc65b011a81834b809f86919e4499a53ff8a35993b333b9b2761a44bb4a888a90c078d0b923e28cdbf76aa3fb68394de930dddf27c48926ab9c66951b70ebd4063b510ae453059ff71853bcf5942b5140a111d4a2afbaf612c6415aceb9578cb0d1decc8001f6dfc9d6829dbed2a8dbbc4bc9391960c1bb3fb451d52778143fb3c2f4d17df3c295117e13889037aff061ff283cac330aa03e7d189f01bfd03e68532d5594ef0e4bf1d584c7eacfd53a7ae8ccecc1901c89f4db4a3f1925610f22dac4570169b7f9f4cbf3fa1376f0ce4ab31605a16aff95c1bda1b96b9ded911a38594c3d9b42e7712ac377f377cd30eda00efd15d718e20dba3e76c4850966353c04a178e3b857719f9d81dc0ef8776c46c47d38aad73498289bc0240", &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x3, 0x10000000}, &(0x7f00000004c0)="af2019dcc2380b4623dc8c7a581973a96d57452035fca47b18e7992f4c82e608a92c747d6e80519f2f5a436783ee4e3264245238b946a4a11d39b7873e5f3296185625d49ae13974d13940d0c01a5029b35aec2234864afd4648", 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0\x00') ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a45320, &(0x7f00000007c0)={{0x9, 0x7}, 'port0\x00', 0x8a, 0x7092c35142f17796, 0x2000098, 0x10000, 0x5, 0x86, 0x0, 0x0, 0x1}) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x4e23}}, 0x3d2, 0x9, 0x100000000, "4876061ee412453a245154c46446d9e5ca56981f58e9c9128f7eee43d71ca0453e0394b1c23acd7b7b6ca74de866a9c9a2f749d8100718ff2ec041010672ecda92dea900ceadc20a4f4217a1847cf440"}, 0xd8) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f00000000c0)={0x40, 0xf2c, 0x3, 0x80000001, 0x100}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a45322, &(0x7f0000000000)) 10:44:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00'], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:41 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00003b9ffc), 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e20, @multicast1}}, 0x0, 0x0, 0x2, "387f951e72af362d587cfe377231a3a9083d2fec5e14b3b96189f2d67e30c6cac4dd69f07cec74337e90445d0d04a501f255771e4d6beef4f7fa2e1fe65fa6b08f682473b2451cfd3af9cd04f9501dff"}, 0xd8) ioctl(r0, 0x0, &(0x7f0000000140)="9e360851d0b773f50594eced6f6c7beca3574fc03c481c555d7b659074f5d03a5d5716d3aaeeb8c2d0095150038fe6b65e774696f70e475704ebf61b2f689606385c6df18c36e93d3e8f3340b83e49eef80728f80ca00a706a5c0268eecced8d4e8c2896be635ce393fa77fe5ea3ed47fcc05277178a9bff43f375a551ed03d7ec8fba09c3b23fcc") socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000000)) 10:44:41 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) acct(&(0x7f0000000040)='./file0\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={"6c6f0040000000000000000000000400"}) sendmmsg(r0, &(0x7f0000006b80)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000001c0)}}], 0x1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) 10:44:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00'], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) [ 93.050073] binder_alloc: 7060: binder_alloc_buf, no vma [ 93.053788] blk_update_request: I/O error, dev loop0, sector 0 [ 93.053797] Buffer I/O error on dev loop0, logical block 0, lost async page write [ 93.053930] blk_update_request: I/O error, dev loop0, sector 8 [ 93.053937] Buffer I/O error on dev loop0, logical block 1, lost async page write [ 93.053972] blk_update_request: I/O error, dev loop0, sector 16 [ 93.053979] Buffer I/O error on dev loop0, logical block 2, lost async page write [ 93.054027] blk_update_request: I/O error, dev loop0, sector 24 [ 93.054033] Buffer I/O error on dev loop0, logical block 3, lost async page write [ 93.054067] blk_update_request: I/O error, dev loop0, sector 32 [ 93.054073] Buffer I/O error on dev loop0, logical block 4, lost async page write [ 93.054108] blk_update_request: I/O error, dev loop0, sector 40 [ 93.054125] Buffer I/O error on dev loop0, logical block 5, lost async page write [ 93.054158] blk_update_request: I/O error, dev loop0, sector 48 [ 93.054164] Buffer I/O error on dev loop0, logical block 6, lost async page write [ 93.054198] blk_update_request: I/O error, dev loop0, sector 56 [ 93.054205] Buffer I/O error on dev loop0, logical block 7, lost async page write [ 93.054251] blk_update_request: I/O error, dev loop0, sector 64 [ 93.054258] Buffer I/O error on dev loop0, logical block 8, lost async page write [ 93.054290] blk_update_request: I/O error, dev loop0, sector 72 [ 93.054296] Buffer I/O error on dev loop0, logical block 9, lost async page write [ 93.209909] binder: 7060:7062 transaction failed 29189/-3, size 24-8 line 3137 [ 93.573227] syz-executor6 (7019) used greatest stack depth: 23264 bytes left 10:44:42 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40000, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0xfff, 0x4) 10:44:42 executing program 7: r0 = memfd_create(&(0x7f0000000000)='@r\'self\\\'-[vboxnet0\x00', 0x2000000002) fcntl$addseals(r0, 0x409, 0x5) write$binfmt_misc(r0, &(0x7f0000000040)={'syz0', "dce42b94b18883820e10fa2455795306341eff6be0f116df3db3a778efd37faa433b0a45dcc47e9e65"}, 0x2d) ftruncate(r0, 0x391) 10:44:42 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x8, 0x444000) ftruncate(r0, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000000)=0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x7) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f00000001c0)="390000001300090468fe0700000000000000ff3f0700000045000107000000141900040002000700efff0100000a00005d14a4e91ee438d2fd", 0x39}], 0x1) 10:44:42 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000180)=0x40000000000800, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x10001, 0x1e3) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) sendto$inet(r0, &(0x7f00000000c0), 0x3b, 0x0, &(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x82, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000080)) recvfrom$inet(r0, &(0x7f00000001c0)=""/248, 0xf8, 0x40012000, 0x0, 0xfd12) 10:44:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00'], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:42 executing program 1: ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000100)) unshare(0x0) clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000000), &(0x7f0000000200)) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f00000000c0)={0x0, 0x6, 0x0, 0x0, 0xe13d, 0x200, 0x10001, 0x0, 0x100000000, 0x0, 0xff, 0x342}) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$RTC_WIE_ON(r1, 0x700f) pwritev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="e235c5d550653f7f39471db4757bbc2b0ab5efe396a6e04099f9526cccbe6d8be10a88c9acd76a5bfd8e22a3927b729b8faf82dc6095a7894d18c88bb7813bf898c11c53bf2a9877c4b359a6ecbd42cf275eddf5d955d0f01fd4810f", 0x5c}, {&(0x7f0000000380)="f9d5cc38aa1a0599a6e5ae87e670dfda53be68233e7338a3c5ea74b5c0233bf8920c618af29b9b60902724b4b558e6f58d18827dd4e075128f4f24101fb8d1ef3e8ed0ce9afd91ad1d95a6686e797e95b25094b5c691a45611f92bb26aa5fd660378344cc34eee81d87d6d7fe9474e733c3e4412fa1f9f50762cc1e5a9372d38745cdc59a91fb28e03b8a246fba2f8fc6f89c78ca18fba234a41836306032a4f51a9a8069eac6d943637aa6eaba7394eb8bd64d5045e4a60aa38", 0xba}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000000140)="c402f18480e3cf4c14011eee3a80c019cbff94fb9d0526aa4c4029045df9b606e1d1582132d479c85703ea43491b472c079104e0a3d4ab057aee46b688ad543ef22a0396e88692302eefcb69aef3e3e7924b46570b720414ed", 0x59}], 0x4, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) sendfile(r0, r0, &(0x7f0000000240), 0x20000102000007) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$FUSE_OPEN(r1, &(0x7f0000001440)={0x20, 0x0, 0x6, {0x0, 0x5}}, 0x20) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000b, 0x110, r1, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 10:44:42 executing program 0: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000040)="2400000052001f001515f407000904ff0a00072207000100ffffffff0800e5ff00000006", 0x24) 10:44:42 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000dac000), &(0x7f0000048000)=0x1, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) futex(&(0x7f000000cffc)=0x2, 0xf, 0x4, &(0x7f0000000340)={r0, r1+10000000}, &(0x7f0000000380), 0x2) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x800, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'nr0\x00', 0x0}) setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000080)={@multicast1, @local, r3}, 0xc) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x420}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="10010000", @ANYRES16=r4, @ANYBLOB="010225bd7000ffdbdf250200000008000100", @ANYRES32=r3, @ANYBLOB="f400020038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800110003000000080004000000008040007461747300000000000000000000000000000000000000080003000b000000080004000000000008000700000000003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c00040068617368000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r3], 0x110}, 0x1, 0x0, 0x0, 0x80}, 0x800) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000)=0x1c0000001, 0x0) 10:44:43 executing program 3: r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) close(r0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x0, 0x7530}, {0x0, 0x7530}}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) 10:44:43 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f000004f000)=""/128, 0x80}], 0x1) timer_create(0x0, &(0x7f0000000240)={0x0, 0x14, 0x0, @thr={&(0x7f00000001c0), &(0x7f00000000c0)}}, &(0x7f0000000000)) timer_settime(0x0, 0xffffffffff7ffffd, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x7}}, &(0x7f00000001c0)) 10:44:43 executing program 7: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x2014}) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x80) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000080)=0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 10:44:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0xfffffffffffffffe, 0x7fffffff}, 0x8) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00004e8000), 0x193, 0x804, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x1c) close(r0) [ 93.959574] binder_alloc: 7083: binder_alloc_buf, no vma [ 93.991774] binder: 7083:7087 transaction failed 29189/-3, size 24-8 line 3137 10:44:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00'], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:43 executing program 3: r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) close(r0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x0, 0x7530}, {0x0, 0x7530}}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) 10:44:43 executing program 4: r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) close(r0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x0, 0x7530}, {0x0, 0x7530}}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) 10:44:43 executing program 3: r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000100)=""/33, 0x21}], 0x1, 0x0) signalfd4(r0, &(0x7f0000000040)={0xfffffffffffff801}, 0x8, 0x80800) [ 94.167097] binder_alloc: 7120: binder_alloc_buf, no vma [ 94.200734] binder: 7120:7124 transaction failed 29189/-3, size 24-8 line 3137 10:44:43 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x101000, 0x0) fstatfs(r1, &(0x7f0000000180)) write$P9_RFSYNC(r1, &(0x7f0000000140)={0x7, 0x33, 0x2}, 0x1) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000200)='ip6_vti0\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r2, &(0x7f0000000000), 0x10000) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sw_sync\x00', 0x400, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x8000, 0x0) getsockopt$sock_buf(r0, 0x1, 0x0, &(0x7f0000000040)=""/36, &(0x7f0000000080)=0x24) 10:44:43 executing program 4: r0 = eventfd2(0x0, 0x0) epoll_create1(0x80000) r1 = epoll_create1(0x80000) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000d4a000)={0xffffffff80000005}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000fe0ff4)) pread64(r2, &(0x7f0000000000)=""/4096, 0x1000, 0x0) r3 = creat(&(0x7f0000001000)='./file0\x00', 0x102) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000001040)=0x1) 10:44:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00'], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:43 executing program 3: prctl$seccomp(0x16, 0x0, &(0x7f0000000140)={0x0, &(0x7f0000000040)}) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_misc(r0, &(0x7f0000000180)=ANY=[], 0xfffffffffffffd31) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000080)={{0x3f, @local, 0x4e20, 0x2, 'ovf\x00', 0x20, 0x6d, 0x6}, {@local, 0x4e22, 0x10007, 0x10001, 0x5, 0x2}}, 0x44) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@remote, @in=@local}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000000680)=0xe8) r1 = open(&(0x7f0000000300)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x6, 0x11, r1, 0x0) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 10:44:43 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x0, 0x0, 0x1f, 0x0, 0x60}}) preadv(r0, &(0x7f0000000740), 0x0, 0x0) 10:44:43 executing program 7: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x6, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}, {0x2, 0x4e21, @loopback}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, 0x2, 0x5a135abc, 0x3, 0x1, 0x0, 0x1, 0x6}) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000180)=""/169) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/162, 0xa2}], 0x1) 10:44:43 executing program 7: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x6, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}, {0x2, 0x4e21, @loopback}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, 0x2, 0x5a135abc, 0x3, 0x1, 0x0, 0x1, 0x6}) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000180)=""/169) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/162, 0xa2}], 0x1) [ 94.785921] binder_alloc: 7149: binder_alloc_buf, no vma 10:44:43 executing program 5: r0 = socket(0x18, 0x0, 0x1) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x301000, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000001680)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000016c0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f00000017c0)=0xe8) getresgid(&(0x7f0000001800), &(0x7f0000001840), &(0x7f0000001880)=0x0) r5 = fcntl$getown(r1, 0x9) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000018c0)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f00000019c0)=0xe8) lstat(&(0x7f0000001a00)='./file0\x00', &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getpid() stat(&(0x7f0000001ac0)='./file0\x00', &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = gettid() getresuid(&(0x7f0000001c00), &(0x7f0000001c40), &(0x7f0000001c80)=0x0) r13 = getgid() r14 = gettid() getresuid(&(0x7f0000001cc0), &(0x7f0000001d00)=0x0, &(0x7f0000001d40)) fstat(r0, &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f0000001f00)=[{&(0x7f0000000000)=@abs={0x3a68236c28292558, 0x0, 0x4e23}, 0x6e, &(0x7f0000001600)=[{&(0x7f00000000c0)="3421649ebc82ba1debc43a6b7540d818d88b1bc9965c8097859cae0fbdbcb7ffe74b45a3a90630c92ebb82c194d30bf2c294abb44d858c059e8462aebd59e4dcc5bad16b4375e3bdcdfe916ee9912069547226a505f6215dd477d111682fd24c175777bdca11e3f30813ccab1a78dad1e086027099e396fc7ef123ce62da3ce7b87d06dc982faf1d050c786d2ac056488cb9ca638bf6942b87c5e2c7ccaad90c34d6a00ef6ac6db8db7691b200b60862fa690a5c688319ee6b6881e2f07e6c6474b231ed", 0xc4}, {&(0x7f00000001c0)="b50b5621222d502fb1471a3806f9a5c7bbecd0c9e99aafbff25bbb11877e2d293668f19a131d3afd982354cd518e11b41f4f75266dfeffe0264f1034f71abcffa0fcce830d69157cd0561fcdaf14d390b8a58c54f6f5a1beeca33568a92d81bef1db658a3a54e1e1a76d5a718ee49f0df3118f1362e1db4150d170c4b09a1c8d", 0x80}, {&(0x7f0000000240)="af58b4b95f45dbc34538791e3d35a8deec10bec08bc659a536476df89dbf69cda56c215eb1e48f55c4afc40b72ca9b73d27b1f51edbf6122a6b60f9a84881a79ca510b78c69f0c91285d26091cd58efac8aa1901", 0x54}, {&(0x7f00000002c0)="fb77d13af05191563a44fc7367012a4eb42ba426c881b648d0f0f8877e6d9ff9834c4ecb4b28c82d60530ee0b991b3376fc8a083209fc38968e8f437dff18b94a99c2c19d6713ef4fbd1c4072f3472e8e0a18b80b682c3325ab7da8a7b3b8e3cdca118f6ce71c062c3efba0fc69d0bbf3dd7c90f1460fec9fa31358507dc95d8ef3526589bfae91bdfc9e0ff58e502209947df9c9fff08bfadcf19d1d30e30f5b08535b605964a211ab1326516309019d52d8445306948438ac670520918028c0a10e5aad636a1f85394a2267b330164df3130521004551d56ee6a53", 0xdc}, {&(0x7f00000003c0)="1a68e477a10a526d12a394c92f543cb324f9b123b6516b5c20118db9fe2dffc9d2aa7bd24cf9c86a7f00925bf95a19039394464feaf7dff548b3b30ebbcd84d030fd9bcc821ce493939a3bd804c53399e679ca63d3503ce50c5e29df4432af1c6cf01e2845a760b9ce72a76ef46ca409b2e2dc3555f67d6268d21f8396a7cffcdf4cf415772b8ead2e31ea352d6b3c7bf2969ed60a235337f5da502e573cf2b61b7723b18afbfcc3e0b3d5505257b2570b4620096d2c5241c2a408b092ca9908a4f47c5559671acd283f289e692def0e0cc91804538644174b69718fd89f63", 0xdf}, {&(0x7f00000004c0)="b769e6627b60ed69e93f584a7ebb1e95d3", 0x11}, {&(0x7f0000000500)="dd95bfa9c6599ddfe9991b1df1ee071599da7f91c347f9bc78a5a85ec0c1d53ee82feef27b06b524dc", 0x29}, {&(0x7f0000000540)="17f575ca21e867ec88e9ca653c11b2e75e0ead6ec10ac518069f27de7e6cb81ba4c9ec397d9658f07cb5b181597bdd2b36b5c0535f7c", 0x36}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="c9d1939c4abbb14e70342c34ef0f035b8b92c514d90e5e8b535f0a1ff86a4ace24738ef0d32960de0fe3b0c149b66ee83de441faec7b704e8b85f1951787e3ddee060c5c2aa673a2eb5e2577414cbd9355c3669c6966ed11705aa1fb918f14733ab3178ad6c21d4edb8aafe7", 0x6c}], 0xa, &(0x7f0000002000)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="180000000100000002000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="180000000100000002000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="180000000100000002000000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="100000000100000001000000", @ANYRES32=r0, @ANYBLOB="180000000100000002000000", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="2c0000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="180000000100000002000000", @ANYRES32=r14, @ANYRES32=r15, @ANYRES32=r16], 0xd8, 0x8010}], 0x1, 0x4) connect(r0, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000f4, 0x0) 10:44:43 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x4000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @remote}, &(0x7f0000000280)=0xc) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x1, 0x6, @local}, 0x10) fremovexattr(r0, &(0x7f0000000140)=@known='user.syz\x00') linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00', 0x0) [ 94.834392] binder: 7149:7157 transaction failed 29189/-3, size 24-8 line 3137 [ 94.969929] syz-executor6 (7159) used greatest stack depth: 22432 bytes left 10:44:46 executing program 4: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') 10:44:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00'], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:46 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getpgid(0xffffffffffffffff) fstatfs(0xffffffffffffffff, &(0x7f0000000000)) perf_event_open(&(0x7f0000000280)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x141382, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='yeah\x00', 0x5) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @loopback}, 0x10) shutdown(r1, 0x1) 10:44:46 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000ffefff7e) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) inotify_init1(0x80000) lseek(r0, 0x0, 0x2) r1 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0xfffc, 0x10003) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000240)=0x1) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000180)=0xba) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x1) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000140)=0x1) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000080)=""/129) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000200)={{r3, r4/1000+30000}}, 0x0) 10:44:46 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x101000, 0x0) fstatfs(r1, &(0x7f0000000180)) write$P9_RFSYNC(r1, &(0x7f0000000140)={0x7, 0x33, 0x2}, 0x1) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000200)='ip6_vti0\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r2, &(0x7f0000000000), 0x10000) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sw_sync\x00', 0x400, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x8000, 0x0) getsockopt$sock_buf(r0, 0x1, 0x0, &(0x7f0000000040)=""/36, &(0x7f0000000080)=0x24) 10:44:46 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000002c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='gfs2\x00', 0x100000, &(0x7f0000000480)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000100)='.', &(0x7f00000001c0)='romfs\x00', 0x9004, 0x0) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x80000, &(0x7f0000000140)) mount(&(0x7f0000377ff8)='.', &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='mslos\x00', 0x5010, &(0x7f0000000140)) mount(&(0x7f0000377ff8)='.', &(0x7f0000002e80)='./file0\x00', &(0x7f0000753000)='msdos\x00', 0x5010, &(0x7f0000000380)) umount2(&(0x7f0000000440)='./file0\x00', 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x1b, 0x0, 0x8) connect(r0, &(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x7, 0x3, {0xa, 0x4e24, 0x14b, @mcast2, 0x4}}}, 0x80) 10:44:46 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x3, &(0x7f0000000080)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x8800) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'lo\x00', &(0x7f0000000100)=@ethtool_stats={0x1d, 0x2, [0xffffffffffffffff, 0x4]}}) fchown(r0, 0x0, 0x0) 10:44:46 executing program 3: socketpair(0x8, 0x804, 0x1, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000080)={'broute\x00'}, &(0x7f0000000100)=0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000001c0)) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000140)={0x6, 0x9, 0x5, 0x7}) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x40) 10:44:46 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock2(&(0x7f0000a75000/0x4000)=nil, 0x4000, 0x0) clone(0x0, &(0x7f00000002c0), &(0x7f0000000080), &(0x7f0000000340), &(0x7f0000000000)) mincore(&(0x7f0000732000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/70) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x8000, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000140), 0x4) write$P9_RXATTRCREATE(r0, &(0x7f0000000100)={0x7, 0x21, 0x2}, 0x7) [ 97.060568] binder_alloc: 7191: binder_alloc_buf, no vma [ 97.075303] binder: 7191:7201 transaction failed 29189/-3, size 24-8 line 3137 10:44:46 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_void(r0, 0x29, 0x6, 0x0, 0x300) socketpair(0xa, 0x804, 0x494b, &(0x7f0000000000)) 10:44:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00'], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:46 executing program 5: unshare(0x24020400) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000100)) r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0xf7c, 0x2, 0x7ff, 'queue0\x00', 0x1f}) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='bdev\x00', 0x2091010, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffffffffffee1) unlink(&(0x7f0000000140)='./file0\x00') 10:44:46 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)="000000800000800000") setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='user.posix_acl_access\\!-\'systemmime_typevmnet(\x00'], &(0x7f0000000080)='/dev/ashmem\x00', 0xc, 0x3) close(r0) 10:44:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000400)={0x14, 0x2e, 0x105}, 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000440)={0x36c, 0x5, 0x5cd1ad318dbfa5bb, 0x210, 0x70bd2a, 0x25dfdbff, {0x1, 0x0, 0x7}, [@nested={0x54, 0x3e, [@generic="ec0fd09aac93429ee88b461c7150d163059aab8e89b360863856f1d417c7fe59de655b2f583470", @typed={0x14, 0x3f, @ipv6=@ipv4={[], [], @remote}}, @typed={0xc, 0x3e, @u64=0x2}, @typed={0x8, 0x86, @u32=0x9}]}, @generic="5da8c44aaf60b5cb6dce7efe512a984fd586ba3e00566ad5bf0e669da45162609c2b45c8df0e5c3dc94b0f0d0b014c2c1eec1db1f5f3fe41bb6b6754d049daad3476749d7e9e40a950a9e034310b1ade3e894bcac8a1d8ba376c6a1fe2d1ca0b9019ab24d974c0923f394fbb142fd22e7d063d3d4412979e76beaca73e53d6b7fa06b2899c7301d9e0a25066fa2602acec20a4784718a56f1a19715b020826eb56ae825ed6b745341447d4d54724916ce19f1fe8ff434e4099987936285d0babaa28d0ebf9f2cc8f42", @typed={0x28, 0x56, @binary="cb9f782f61d286300f046ab200a4ddcdeb7d4faee424299fc9246eb29c638e0eb5fdce35"}, @nested={0x1e0, 0x5a, [@typed={0xb4, 0x55, @binary="653b6a5b450e35d628c86fffc96e3516f2b20aa6fe10ba2e1bb904e57c1675b77963f99fc6898b52bb19414dc8873b393024a50b3032569423c4519b179b44af5f482b5aaa7be69a873a04d7fef77ce6ca822952e59293ec475cfb29b9e153eb3d3599e4676b8397d9ff7c6e0b8d12be5155b62336ef8f311662a60462a028945e39c00302c6ec6e6330b0421775b7929167cba53ed1bbb5020c1e6595a9562236acb0db70c445df9c7269c11952"}, @generic="e528848de69c7c7a671d27ada23d4fdd02f05762a72efa8f4a7257acee99669d710bc9cb06823bdc442c65e3d64f78b53671ed8962048feede5439ffd5570123675318f705e54ad4ba8de3f66a6ea623a1f0", @typed={0x8, 0x48, @fd=r0}, @generic="61e0b9c360db28f5371f5f0a2dbab16485636cea864f2a25fd610549e5d713c6e742b788508e2abb4bb431d3e041eb573802b4d794a6f4205b053f17da28a6d41ff42a475052a7d255fc48a67f1a58af0d2492e9561c1b098f5786a54d9ed1c529304a92f316c9c77d1998130a7e74a341e7e58230571e116cb670716f0b6d3678a0448bae0d815a234ca7c2ad70a555f1099a5d8dbc438bcfb48c28ec423cc987949eba9f2eb2a310d5661b3c81632fc1ca2baf1419dddcd354e0912695fdf609ec44a1fc682b14a712e8c06949"]}, @nested={0x2c, 0x6e, [@typed={0x14, 0x48, @ipv6=@loopback}, @typed={0x14, 0x29, @binary="d41d7b938f48f337df0429981553"}]}, @typed={0x4, 0x6f}]}, 0x36c}, 0x1, 0x0, 0x0, 0x4080}, 0xc815) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0) 10:44:46 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000000)) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x13e) sendfile(r0, r1, &(0x7f0000000040), 0x8001) 10:44:46 executing program 1: r0 = socket(0x11, 0x2, 0x10) write(r0, &(0x7f0000000100)="1f0000000104ff00fd010030000200000005010008000100040451c7ffdf00", 0x1f) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x200000, 0x0) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000040)={0x6, 0x100}) getpeername$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000001c0)={@mcast2, r2}, 0x14) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000140)) 10:44:46 executing program 3: r0 = memfd_create(&(0x7f0000000080)="d22a7bb47b4000", 0x0) rt_sigpending(&(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f0000000000)) [ 97.246305] binder_alloc: 7234: binder_alloc_buf, no vma [ 97.268938] binder: 7234:7236 transaction failed 29189/-3, size 24-8 line 3137 10:44:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00'], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:46 executing program 7: r0 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$setflags(r1, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth0_to_bridge\x00', 0x10) write(r0, &(0x7f0000000100)="069f05f335525e9ce73ab58fa990935364524a6b12a1fd33a98b81b8de4263fc6c70666725475f85425406b102303d4c2ec249a296451e629c28df8397b3582e314021441e47491790a876ed", 0x4c) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) setitimer(0x0, &(0x7f0000000040), &(0x7f0000000080)) 10:44:46 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e000000100000000000000000800120002000200000000000000000030000000020300000000000f00000000020000000000000092ab000000000001ac1414bb000000000000000000000000030005000000000002000000e00000010000000002000000"], 0x80}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x28901, 0x83) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f00000000c0)={0x2, 0x1f, 0x400, 0xc90d, 0x9}) 10:44:46 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x2000, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f00000000c0)={0x5, 0x6, 0x1}) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}) 10:44:46 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/route\x00') preadv(r0, &(0x7f0000000100), 0x2000000000000267, 0x10400003) getpgrp(0x0) write$P9_RSETATTR(r0, &(0x7f0000000040)={0x7, 0x1b, 0x2}, 0x7) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x5) write$P9_RWRITE(r0, &(0x7f0000000200)={0xb, 0x77, 0x0, 0xa858}, 0xb) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='attr/current\x00') getpeername$unix(r1, &(0x7f0000000140), &(0x7f0000000380)=0x6e) 10:44:46 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1d, &(0x7f00000000c0)={@mcast1}, &(0x7f0000000100)=0x14) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000040)=0x4, 0x4) sendto$inet6(r1, &(0x7f0000000280), 0xfffffffffffffedd, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000]}}, 0x1c) [ 97.450741] binder: 7258:7262 transaction failed 29189/-22, size 24-8 line 3014 10:44:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00'], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:46 executing program 6: r0 = memfd_create(&(0x7f0000000140)='selinuxproc,]self#\x00', 0x2) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RMKDIR(r1, &(0x7f00000000c0)={0x14, 0x49, 0x6, {0x0, 0x0, 0x1}}, 0x14) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x10000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0x40085112, &(0x7f0000000000)={{0x7fffffff, 0x100000000000c}}) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000100)={0x3, 0x0, 0x1, 0x8000, 0x3f, 0x3}) r3 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000a00)={{{@in=@rand_addr, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}}}, &(0x7f0000000380)=0x32a) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in6=@remote}}, &(0x7f00000004c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000006100)={'team0\x00', 0x0}) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000006140)={@ipv4={[], [], @loopback}, 0x0}, &(0x7f0000006180)=0x14) getpeername$packet(r2, &(0x7f00000061c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000006200)=0x14) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000006240)={@rand_addr, @loopback, 0x0}, &(0x7f0000006280)=0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000006500)={'ip6tnl0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000006540)={'bond_slave_1\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000006600)={{{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000006700)=0xe8) getsockname$packet(r1, &(0x7f0000006800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000006840)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000006c80)={&(0x7f0000000180), 0xc, &(0x7f0000006c40)={&(0x7f0000000500)=ANY=[@ANYBLOB="a4030000", @ANYRES16=r3, @ANYBLOB="080425bd7000000000000300000008000100", @ANYRES32=r4, @ANYBLOB="f801020040000100240001006d6f646500000000000000000000000000000000000000000000000000000000080003000500000010000400726f756e64726f62696e0000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004006800000008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r6, @ANYBLOB="080007000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000000000008000600", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="7c00020038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400fdffffff40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004003f000000080007000000000008000100", @ANYRES32=r9, @ANYBLOB="44000200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000008008000600", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="b80002003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r13, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000100004006c6f616462616c616e636500"], 0x3a4}, 0x1, 0x0, 0x0, 0x40811}, 0x40000) 10:44:46 executing program 7: mprotect(&(0x7f00000e4000/0x4000)=nil, 0x4000, 0x0) mlock(&(0x7f00000e6000/0x3000)=nil, 0x3000) mprotect(&(0x7f00000e7000/0x3000)=nil, 0x3000, 0x1) r0 = getpgrp(0x0) sched_setscheduler(r0, 0x3, &(0x7f0000000000)=0x1ff) sigaltstack(&(0x7f00000e4000/0x4000)=nil, 0x0) 10:44:46 executing program 4: r0 = socket$inet6(0xa, 0x2000000000000002, 0x0) r1 = memfd_create(&(0x7f0000000000)='ppp0\\-\x00', 0x2) ioctl$BLKBSZSET(r1, 0x40041271, &(0x7f0000000040)=0x7ff) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f00000001c0)=""/74) sendmmsg(r0, &(0x7f0000001cc0)=[{{&(0x7f00000000c0)=@in6={0xa, 0x4e24, 0x0, @local, 0x7}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000700)='O', 0x1}, {&(0x7f0000000180)='u', 0x1}], 0x2}}, {{&(0x7f0000000a00)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000001c40), 0x0, &(0x7f0000001c80)}}], 0x2, 0x4801) [ 97.602378] binder: 7286:7287 transaction failed 29189/-22, size 24-8 line 3014 10:44:46 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f00000002c0), 0x0, 0x200007fb, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) r1 = dup2(r0, r0) sendmsg$nl_netfilter(r1, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYPTR64=&(0x7f0000002900)=ANY=[]], 0x8}}, 0x8000) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'vlan0\x00', 0x3}, 0x18) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000180), 0x8) 10:44:46 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/route\x00') preadv(r0, &(0x7f0000000100), 0x2000000000000267, 0x10400003) getpgrp(0x0) write$P9_RSETATTR(r0, &(0x7f0000000040)={0x7, 0x1b, 0x2}, 0x7) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x5) write$P9_RWRITE(r0, &(0x7f0000000200)={0xb, 0x77, 0x0, 0xa858}, 0xb) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='attr/current\x00') getpeername$unix(r1, &(0x7f0000000140), &(0x7f0000000380)=0x6e) 10:44:46 executing program 7: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000000), &(0x7f0000000080)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) getpid() sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd3", 0x48}], 0x1}, 0x0) tkill(r0, 0x1000000000016) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000000c0)) 10:44:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00'], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:46 executing program 1: mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x1, 0x0) r1 = getpgid(0xffffffffffffffff) sched_rr_get_interval(r1, &(0x7f0000000000)) write$sndseq(r0, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {0x0, 0xfffffffffffffffe}, {}, @raw32}], 0x1c) 10:44:46 executing program 4: r0 = socket$packet(0x11, 0xa, 0x300) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000000c0)=""/130) sendto$inet6(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x12) 10:44:46 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000400)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424ada75af1f02acc7edbcd7a071fb35331ce39c3e00000000") syncfs(r0) fsetxattr(r0, &(0x7f0000000600)=@known='user.syz\x00', &(0x7f0000000500)='user.syz\x00', 0x9, 0x0) 10:44:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00'], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) [ 97.757783] binder: 7312:7314 transaction failed 29189/-22, size 24-8 line 3014 10:44:46 executing program 7: mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x8, 0x40) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000000c0)=[0x1, 0x9]) mincore(&(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/81) 10:44:46 executing program 5: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89b0, &(0x7f00000000c0)={'tunl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x1, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x5, 0x8000, 0x4540}}, 0x30) 10:44:47 executing program 3: bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x5db) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) keyctl$session_to_parent(0x12) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="00050001084782f336007245d6c28be785f5e1b988e5fd6c239fc95d8626a4350a2b77ba1b9cbe302393b871f3a59a1e50fc4112ba1d407cfce93ecae698ffbdf65ba7d2adab428a5fa57a2735ef9cfd29f950a700b0f4ef2d600e054f7cfde4b5c7d42e3ee30ceefa3e70"], 0x1) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)='Y', 0x1, 0x4003fff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000002c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000300), 0x8, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f00000003c0)=""/98, 0x62, 0x0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00', 0x101}) read(0xffffffffffffffff, &(0x7f00000001c0)=""/244, 0xf4) [ 98.000617] device lo entered promiscuous mode 10:44:47 executing program 0: close(0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0405405, &(0x7f0000000080)={{0xffffffffffffffff, 0x0, 0x8, 0x1, 0x3f}, 0x8, 0x3, 0x9}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_tables_targets\x00') readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r1, &(0x7f0000000580), 0x3c1) 10:44:47 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000400)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424ada75af1f02acc7edbcd7a071fb35331ce39c3e00000000") syncfs(r0) fsetxattr(r0, &(0x7f0000000600)=@known='user.syz\x00', &(0x7f0000000500)='user.syz\x00', 0x9, 0x0) 10:44:47 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000400)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424ada75af1f02acc7edbcd7a071fb35331ce39c3e00000000") syncfs(r0) fsetxattr(r0, &(0x7f0000000600)=@known='user.syz\x00', &(0x7f0000000500)='user.syz\x00', 0x9, 0x0) 10:44:47 executing program 4: r0 = fanotify_init(0x80000000000000, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8032, r0, 0x1) remap_file_pages(&(0x7f000061a000/0x4000)=nil, 0x4000, 0x0, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) 10:44:47 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000400)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424ada75af1f02acc7edbcd7a071fb35331ce39c3e00000000") syncfs(r0) fsetxattr(r0, &(0x7f0000000600)=@known='user.syz\x00', &(0x7f0000000500)='user.syz\x00', 0x9, 0x0) 10:44:47 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00'], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:47 executing program 3: bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x5db) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) keyctl$session_to_parent(0x12) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="00050001084782f336007245d6c28be785f5e1b988e5fd6c239fc95d8626a4350a2b77ba1b9cbe302393b871f3a59a1e50fc4112ba1d407cfce93ecae698ffbdf65ba7d2adab428a5fa57a2735ef9cfd29f950a700b0f4ef2d600e054f7cfde4b5c7d42e3ee30ceefa3e70"], 0x1) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)='Y', 0x1, 0x4003fff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000002c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000300), 0x8, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f00000003c0)=""/98, 0x62, 0x0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00', 0x101}) read(0xffffffffffffffff, &(0x7f00000001c0)=""/244, 0xf4) 10:44:47 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) getsockname(r0, &(0x7f0000000740)=@ethernet={0x0, @broadcast}, &(0x7f0000000500)=0x80) r1 = socket(0x2, 0x2, 0x0) recvmsg(r1, &(0x7f0000000580)={&(0x7f0000000000)=@hci, 0x80, &(0x7f0000000800)=[{&(0x7f0000000140)=""/19, 0x13}, {&(0x7f00000001c0)=""/26, 0x9}, {&(0x7f0000000200)=""/78, 0x4e}, {&(0x7f0000000280)=""/233, 0xe9}, {&(0x7f0000000380)=""/108, 0x6c}, {&(0x7f0000000400)=""/239, 0xef}, {&(0x7f0000000500), 0xfffffffffffffee7}], 0x3, 0x0, 0xfdef, 0xff}, 0x2020) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000005c0)='net/udplite6\x00') mkdirat(r2, &(0x7f0000000600)='./file0\x00', 0x20) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000180)={"76630600000000000000ffff00", {0x2, 0x0, @multicast2}}) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000100)={'gre0\x00', {0x2, 0xfffffffffffffffc, @broadcast}}) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000640)="76630600000000000000ffff00") r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x200, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a45321, &(0x7f0000000680)={{0x2, 0x7}, 'port0\x00', 0xa0, 0x0, 0x3, 0x0, 0x6, 0x4, 0xa7, 0x0, 0x2, 0x8}) pread64(r1, &(0x7f0000000840)=""/120, 0x78, 0x0) 10:44:47 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000140)="4d10af2bf696e5488cb35db4414ba2da0444ec72e15799ce0000adcafbafaa3119b525", 0xfffffd7d, 0x1, &(0x7f0000000100)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) poll(&(0x7f0000000040)=[{r0}, {r0, 0x8000}, {r0, 0x30}, {r0, 0x2484}, {r0, 0x100}], 0x5, 0x2311) bind$inet(r0, &(0x7f0000000180)={0x2, 0xfffffffffffffff8, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000001c0)="80f66242dcf6bd70f96ab9de3cbee32f8d87b95b9cf81b4a2479bf1e6359ad40c48d4a63df2eaa9bdf5726466b8760db80ae1fa9bd67c1ddfd674266c7691066fe1352bdb2df6fc30f21d84308d4b8c1f45cf772e7852426360051932de00724dc5bcd0c4e388fee38f57f275d6d28a77ecf5cdb219293017418a09132099940232025282a68aaa88c33494dfed7c06e35ee7106aed0dacff60dadae01a6db0bbc5a73dcdcec8bb9dab00044344738826178f2372efcd48a73c2885a4309d882ed00000000000000000000000000000000", 0x17e) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff52, 0xc0, &(0x7f00000000c0), 0x6) 10:44:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x180, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25040000004c000300080007004e20000008000400030000000800010002000000080001000000000008000400680000000800040000000000080007004e220000080003000000000008000500ac14140d3400030008000100020000000800010002000000080007004e2400000800040000000000080007004e2100000800080007000000"], 0x94}, 0x1, 0x0, 0x0, 0x20048880}, 0x20000000) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = epoll_create1(0x0) r4 = socket(0x11, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)={0xfffffffe8000201f}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f00000000c0)) epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1, 0x0, &(0x7f0000000140), 0x8) 10:44:47 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00'], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00'], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:47 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x10000, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2000081, 0x32, r0, 0x40000000000008) r1 = memfd_create(&(0x7f0000000000)='}[nodevmime_type&,\\-^vboxnet0\'\x00', 0x2) fcntl$setstatus(r1, 0x4, 0xc00) r2 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r2, 0x11, 0x64, &(0x7f0000001ac0), &(0x7f00000002c0)=0x4) 10:44:47 executing program 7: unshare(0x20000000) r0 = memfd_create(&(0x7f0000001800)='em0selinux^GPL}\'(cgroup\x00', 0x3) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000001840)=0x8, 0x4) clone(0x0, &(0x7f0000000040), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000000140)) ioprio_set$pid(0x0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) fadvise64(r1, 0x0, 0x5, 0x3) pipe2$9p(&(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RRENAME(r2, &(0x7f00000015c0)={0x7, 0x15, 0x1}, 0x7) clone(0x4, &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000200)="4b02daa384850d48") lstat(&(0x7f0000001600)='./file0\x00', &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000016c0), &(0x7f0000001700), &(0x7f0000001740)=0x0) r5 = getuid() write$P9_RSTATu(r2, &(0x7f0000001a00)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r5], 0x60) r6 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x151) ioctl$BLKSECDISCARD(r6, 0x127d, &(0x7f0000000080)=0x20) readv(r6, &(0x7f0000001540)=[{&(0x7f00000000c0)=""/95, 0x5f}, {&(0x7f0000000240)=""/177, 0xb1}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000000180)=""/105, 0x69}, {&(0x7f0000001300)=""/213, 0xd5}, {&(0x7f0000001400)=""/13, 0xd}, {&(0x7f0000001440)=""/243, 0xf3}], 0x7) 10:44:47 executing program 6: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f000039a000)=[{0x6}]}, 0x8) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000080)=""/56) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000040)=""/37) 10:44:47 executing program 1: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x80000000, 0x0, 0xb11d, 0x0, 0x0, 0x40, 0x3, 0x7}) rt_tgsigqueueinfo(r1, r1, 0x34, &(0x7f0000000040)={0x0, 0x0, 0xffeffffffffffffc}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"79616d300001178b00", 0x4013}) r2 = syz_open_dev$sndtimer(&(0x7f00000002c0)='/dev/snd/timer\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x80000000) ptrace$setregset(0x4209, r1, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)}) [ 98.517002] mmap: syz-executor4 (7385) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. [ 98.588264] binder: BINDER_SET_CONTEXT_MGR already set 10:44:47 executing program 4: r0 = fanotify_init(0x80000000000000, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8032, r0, 0x1) remap_file_pages(&(0x7f000061a000/0x4000)=nil, 0x4000, 0x0, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) 10:44:47 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:47 executing program 5: r0 = socket$inet6(0x10, 0x3, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, &(0x7f0000000080)={0x7fff, {{0xa, 0x3a6e, 0x1, @mcast1, 0x38e}}, {{0xa, 0x4e24, 0x9b, @mcast2, 0x7ff}}}, 0x104) sendmsg(r0, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000002000)=[{&(0x7f00000001c0)="5500000018007fafb72d1cb2a4a280930206000000a843096c2623692500080004000c00160000000000a3c728f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000000080)}, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ashmem\x00', 0x10000, 0x0) 10:44:47 executing program 0: umount2(&(0x7f0000000080)='./file0\x00', 0xffffffffffffffff) [ 98.610965] binder: 7389:7405 ioctl 40046207 0 returned -16 10:44:47 executing program 6: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) sync_file_range(r0, 0x3, 0xfffffffffffffff9, 0x1) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) 10:44:47 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000c33f70)={0x1, {{0x2, 0x0, @multicast2}}}, 0x90) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x200, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f00000003c0)=0xe8) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000200)={0x77359400}, 0x8) fstat(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in6=@remote, 0x4e23, 0x851, 0x4e22, 0x2c, 0xa, 0x20, 0x0, 0x87, r2, r3}, {0x3, 0x4a, 0x6, 0x100, 0x2c8, 0x6, 0x3, 0x3}, {0xfffffffffffffffb, 0x100000000, 0xe, 0x4}, 0x3, 0x6e6bb1, 0x1, 0x0, 0x3, 0x3}, {{@in6=@mcast1, 0x4d2, 0x33}, 0xa, @in6=@remote, 0x3503, 0x0, 0x0, 0x1, 0x0, 0xfff, 0x5}}, 0xe8) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000acf000)={0x1, {{0x2, 0x0, @multicast1=0xe0000014}}}, 0x90) sendfile64(r0, r1, &(0x7f0000000240), 0x9) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sw_sync\x00', 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000580)={{{@in=@multicast1, @in=@dev={0xac, 0x14, 0x14, 0x21}, 0x4e24, 0x8, 0x4e20, 0x10001, 0xa, 0xa0, 0xa0, 0x0, r2, r3}, {0xa29, 0x6, 0x6, 0x34, 0x8001, 0x2b24b00e, 0x7, 0xff}, {0x3, 0x8, 0xfff, 0xff}, 0x5, 0x6e6bbc, 0x3, 0x0, 0x1, 0x2}, {{@in=@rand_addr=0x4000000000000, 0x4d2, 0x33}, 0xa, @in=@local, 0x3500, 0x2, 0x3, 0x3ba, 0x6a17dc90, 0x1, 0x1ff}}, 0xe8) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x100000001, {{0x2, 0x0, @multicast1}}}, 0x88) write$sndseq(r0, &(0x7f0000000180)=[{0x6ef0000000000000, 0x2, 0x1, 0x9, @time, {0x3, 0xc9b}, {0x9, 0x20}, @quote={{0x8, 0x7}, 0x401, &(0x7f0000000040)={0x6, 0x400, 0x1, 0x101, @tick=0x7f, {0x5, 0xfffffffffffff800}, {0x20000000, 0x5}, @addr={0x89dd, 0x9}}}}, {0x1f, 0x1, 0xc3f, 0x9, @tick=0x5, {0x9, 0x9e31}, {0x1800000000, 0x7}, @queue={0x8, {0x1, 0xb9}}}, {0x9, 0xffffffff, 0x80000000, 0x3, @time, {0x1ff, 0x905c}, {0x9, 0x2}, @addr={0x80000000, 0x8}}, {0x1, 0x8, 0x0, 0x0, @tick=0x2, {0xc94, 0x40}, {0x4, 0x7}, @quote={{0x2, 0x8}, 0x5893, &(0x7f0000000080)={0x8, 0x0, 0x6, 0x8000, @time={0x77359400}, {0xc6, 0xc10a}, {0xbfb, 0x8e36}, @result={0x7, 0x5}}}}], 0x70) close(r0) [ 98.695303] binder: 7421:7423 got transaction with invalid offsets ptr 10:44:47 executing program 5: socket$inet6(0xa, 0x80000, 0x4) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)="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", 0x0, 0x0) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f00000000c0)="3ce4435678071176b3b9942f88e1401453ef5ded94e885bbf32db8ca08b56ec83f61c95fe0ef8e9b8e8f942938209e17e9ec05c7c5064aa7f7e725c0a23ae682aab390ce5d543ff23728e2a42f43335b71644177bf7c1d9e1c") read$eventfd(r0, &(0x7f0000000040), 0x8) getrandom(&(0x7f0000000000)=""/11, 0xb, 0x2) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x79, 0xffff, 0x1f}, 0xffffffffffffffe5) 10:44:47 executing program 7: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x121000, 0x0) r1 = gettid() sched_getaffinity(r1, 0x8, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) write$cgroup_pid(r0, &(0x7f00000001c0)=r2, 0x12) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r3) r4 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x82) r5 = memfd_create(&(0x7f0000000140)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r5, &(0x7f0000000900)=[{&(0x7f00000009c0)="1f", 0x1}], 0x1, 0x81a06) ioctl$TIOCGSOFTCAR(r5, 0x5419, &(0x7f0000000080)) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f0000000240)=0x1) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) sendfile(r4, r4, &(0x7f0000000000), 0x20000102000007) 10:44:47 executing program 4: bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) getpriority(0x1, r1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f00000001c0)={0x4}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00', 0x101}) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000200)={'icmp\x00'}, &(0x7f0000000240)=0x1e) close(0xffffffffffffffff) sendto$inet(r0, &(0x7f0000000100)="6c7e65779ab3ef1d6f415d61083dd5beb4c20901cefab28e4018efe246", 0x1d, 0x4, &(0x7f0000000280)={0x2, 0x4e21}, 0x10) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)) 10:44:47 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pktcdvd/control\x00', 0x2, 0x0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x7f80000000, 0x4) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000001000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @dev}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0xfffffd64) syz_emit_ethernet(0x1, &(0x7f0000001080)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaa00813736df0b7c5f2e8a000000c2d51d26d57c000000000000e0d26d34ac6304f17030c27a79359d"], &(0x7f00000000c0)) setsockopt$inet_int(r0, 0x0, 0x40, &(0x7f0000000ffc), 0x4) [ 98.772172] binder: 7421:7423 transaction failed 29201/-14, size 24-8 line 3165 10:44:47 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x3, 0x4) readv(r0, &(0x7f0000000940)=[{&(0x7f0000004c80)=""/98, 0x62}], 0x1) r1 = memfd_create(&(0x7f00000000c0)='&\f\x00', 0x0) getsockopt$inet6_opts(r1, 0x29, 0x3f, &(0x7f0000000100)=""/161, &(0x7f00000001c0)=0xa1) sendto$inet6(r0, &(0x7f0000000040)="04010000008b00ddb8460900ffb2", 0xe, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x2000000000e, @mcast1}, 0x1c) 10:44:47 executing program 1: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x80000000, 0x0, 0xb11d, 0x0, 0x0, 0x40, 0x3, 0x7}) rt_tgsigqueueinfo(r1, r1, 0x34, &(0x7f0000000040)={0x0, 0x0, 0xffeffffffffffffc}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"79616d300001178b00", 0x4013}) r2 = syz_open_dev$sndtimer(&(0x7f00000002c0)='/dev/snd/timer\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x80000000) ptrace$setregset(0x4209, r1, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)}) 10:44:47 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000000)=0x6) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$UFFDIO_COPY(r0, 0x400c55cb, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil}) [ 98.850404] binder: undelivered TRANSACTION_ERROR: 29201 10:44:47 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:47 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000001c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='coredump_filter\x00') writev(r1, &(0x7f00000000c0), 0x20000000000003fa) 10:44:48 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x80800) vmsplice(r0, &(0x7f00000016c0)=[{&(0x7f00000000c0)="9f1a75498ddf1792d169632f95af1fcc08d06d608a6787e16195f36cda911fe1f13bf7332a4619c19326181a6907ad60657eeb339e37a709cff9c21b71e3caf931bd7172456e72191d3d5e82e691fb06479a53389957055a10cffc640a113cd5b0f3d9ef69a18dc32263c2d034c0598a3e973b42059187b54a3537a655f982f648db8fd154dd06ac05afd7aceb17ed467b4cc7a7bd1096687a79a45add672cd24b07fa1d9984d55c91c02df71609f381a40df46e11c090792602491925d456821088b02ba1aacf0f267fd80e47b41ab11c7628c2c3153e52880b227c823480fd4912", 0xe2}, {&(0x7f00000001c0)="84c365b89af55940817b48406b7efceeb61753ca5f34a56cd7319d6ad34631bac7d661c62eba03131b44121da94164e2ed4f4aae5990202af142f8286ef9c6b2cd3e56c1004388e1fdf160ec4f467bdc22edf8a0089596082dc8225fae0e682aa0ca2706be674c6b56ff100e2243caf747831b3f126c35106c7e190e08e84edae741c45ff973e6497cc30ac5dda3aab6a9424b198ec7b8f387229ec06145c2e40be938becaaf00dc2e32f1d250a14a97e1a7f5fc11fb4ab412fca8c1cf8d27c28171bffe03b04713927f6f6e055ba235cf23f023951250f29d80849fc02e8f9580eb0f57eef819f42e51e83f38fb3f10b134334dc58a019f5ba38186483d7d59d6675b679fba64411235c99bf6ccfecb2b99eb2e37c32491f8d786229190104db41432415ae8ad4aa9ef6a6fda6790d3cc39645e6cec45f1e8e08bc13d5dbd2daefa86cf0b60929509bd5f23f2afb27d9531b7aee86a12cefaf2b23be02e2626969bb6dda5ce3c156558380ebbc012a572a9cfa36153cabbd367e2b029988d57d75e16eda9759ccac08b4b21df7548d9416f2225f5eddfc0da9ba5fc01d4d7d4fdc204de40a6e122fb3583043f4c79611bb3f307b88cca71c0f92b238fc1138f0554c01239707e31450e02f05b22c6c01a87ccd0cdff155225ce541f62de4a0cd65ce7138758e384b2f70ac236fc70952607a1598d259e6fedb048301bc8cd94eeb7e039fc9c37edb748e9fcd20fe53b6a6cd0d5e1441442a83f0815a3f1ea974f00f67cee65bb3b9aec592a3086fe220e458d5843a401d21fff717af88b92327e9c498ade45fb8da50392a73865208142ed4c0eda2ddd15ca89baa836c8c43640faea52a442ab944a43331eb9dd1ddd3ee96615114a3b134602c30c55ed7bd97cd46ffe5e6467e5ffe5848bf18d7a7ba6210c6f7dcaa08d0cb8b3b91ba6281618973123687dcfdcb13b88f5427db0f9c2f5630c73d7af0eea1d943113a777192c42b9b26e04f82070d0074e6759b95a132094d27f6f81eaaf5e1c0ad9a9fdae02dee6c643b4499115309432c30c95f34e217675da3f4b6ba751b76b08f9e07c7f5fc66b088d02cda1df8298d1655faf3be3b4f13547504ae96009b989fad167ad2a6ad4862857a7c118ae0d704626b9bb40248b8f3f5859bb1e8b1a59bf1c7f0e1d9c7b515c982f24083faa76379c4366b2e90e15e0e556302789dae5b5bff7e99d54ebc93f6ff04b9325b1753493efcf2c292116c8d3a36bd066c4aeca2ad2f1702bc1febf95e503b0729e73e6c14713e033dceaa3554fc68ba7c2e9afba29752df017d00f5fa94a6cdca669cd23bd48d0461a8d7b4cc9cf6477682369a4479578d208dbb0ec1467232b4ff1254de9c2fbe61a0638c0cb88538130e7f4b190b9290e3d481b394176fa80fb8021833e1d2504dbb42274232dbb2d96069be092b65300b61cbc6147a02a56f7b8815bfc2f73667ef8d2fec2c6cd02115ae5f46404fbf6ee61b3789558ec5164dc50baebee7afa38d49c7a7d76163810ecbb52fd16a253abe472c40b50c6e1c216ca554387af762aa1efcb86df6c385a7344cc8afb47ebe6ab4ccd9c9f19235ce9caf12963b9723630de81172f53a8c9a25fcce3f0c5a81787d1046e8fc4fb964badec38177ec96e65ff92b5e5752a6a2a05193fe45c6b1122e530fb535832df280a30fc17c13bcb45ad252a320415126e2e0464b83222ea5c380f960d028331464046e230fc8ee45317c332172b2f803d6cfec9be32f9447f6d1ebfb00ddf72be617058b2c5998b08e8a946f929b49ba2a8389bd64f486c5983ff265fb5b06f14b795a2871960748dcbcb4c64345c699f2f9b873fe925d582f0f36f93ce1b6a6b1340078598ce765de29e27f475f62a0ed9febdcad4403dec1d2d90ae0b49fb1d81afa11f8c182eeb30dd6c5c0831e9bcf747d4a24d1a7fb8a4bc6d6662040abfd2f3076eaf38212dfb96b7fda8d3ad56bb329f53ce8ef95e87854330de61190fc819872314513756df2ac08c1bde5556672cfa55b4fa1acbfe2fb6bd241fa1a2c64880f1ce6b80f2073c6023dc321894e70119996bad040bb49d70bd58b68a47021dd490e15338b330dc7b6673c732fb701338525bbd8ca3e9fcc7e389caa367feb412a9f20fe3e8d5bde54a57cfc821798be585a3dd699b6791f3b3d6cf1d69c566806b1d69d6e8a54dce8bd61ed4d9b8fe2a1b5a223c247adf327090844d8eec195d8225042b0e42bb7bc314fe025e1ca4f93093d61792972414227471774c91181ce2ceb0f45f61415b4bdba14f97fe1465f51f4334ea4d777d97b2ffe96b17f3774809cb1251b766823a68745ef0b436f803649d9ad5a591efa34e0daffd11a720194d076295d905fb5a68ee4dd562c62f2a77c036aa1bea7b866eddf51fabaab3aaccde9c0997850e22f67f93e56f5044c7ddb416ccbfa4db7a46381be2861165d30ca2dde28ccccdc4662158ea13e60e9a38f9db09b79e6c40620912dfe8a92ab71bca238c359ee13c0ef4f4a8803d996e140331c919d1103d7d37f7d25275a2a7c16e2317c092c4f8c8e93e4c6e291eb28d07c60ff83b5ad00e086414209a2f26a93e7553e8adf75ea011c1ba8db5d7907b6a83982d026c88a286bc64ce7557bfc91edeff3bde1e3ed6101320842def6b2b3b09785f88a010fc4bb5072ca19c7f5594d1ffb69adcb2f31b9e19069e33606dde4e024526f95156d2df7230bbbc91d2dbfa7d73cd86649a791c89fcce71f45a8bf47fc369b306a3640bcf8403e5bc43a6ab6687874783b75899ec67804c00c44b9640c604eb7127003f65d976bef3ffffe2126377a2834ef48ed7142665336106006567d0fdab257f3121049a0922ec704fbb34772b871fb760790be3ffdeb1359522bbeb5c065caf97bbf1002f67da94f538057af4ec7095ccdfd46c0f0e54c57ad8b5314f1cae5330416943b90006c6baf6eb73a2cd974004d52759ec8be436e25f50af9081294378c06f9f5ec99f5f535955124dc4586ba836efb4fafa9c33b946912f91f40df47ad88604980cd50124aec52d13772fd0246d0556bcf7a291b84bdfe80a6c3741aa8a326420596499ed91bec0ea0e4f5931fc1729ec4f67e96d92a187effad512c5aea218b140a54fea55c01eb58ea7f3fb09e3eaf805ff7791f8de051ef982a1c4b0e0dec855ccd79d4ea7493e54e585f0f39cd17a23919ad488a4521bf091fef2a07e353fb33bc39bda6b632b669a725493e734c481e3221b6aa5affd996514d60b24bf8dcbbd4d3f2ca7ca0e5285ef94060c35c70d1cf061b5dde0f53b258c7852f0393f1cb032a807a583f5b53e063e432778ddf2f9e1cf729457b304d7aa20ec7e5210085507c317fe32ec9e761decf8fd080e73cdd0296d2a6650cbfb4f3efbab915bbb69c04b7ad8562759dd4c40e902a5b626149b101cea20fe227f93e54508357d663518e5a1f8d747aa7df9fb37400af49cc4e8311a942a498c950cbd00726ee8b66d46e9a870bfc5c60be83249db9284dc7baec74ade612eb2da5dfa28aa7f6a4e9ad0774792bab7111521bacb4e133e36341bdae275a09a9427c5f821af58624cfe8c1847552ab6b66aad88ee6eef2a9a3e2f435e431e69cecaa642d996cdf007278e89a2f2ec32b5f2fe003d8c71c05216548e0531923b3553c5546d7dcb29c70cfe03c52d7f644330b4638d78556da122b19810d7a22e1a356f2842de319bca63499c04eac0dfd3bb37242bd07d30c13eeb297e035a38484d0dd9def82d6fe808c3092ee71f52c160c72f1267bba0b081e39900ab2873d6ac0d8eaa2cbca5bceccf92fc908ded966384690d9ef4c0619d18773551895870eef6b96bd79ed494fc1741872de2eea1f83e42adb46c6885e9278d7ad701b4d3bb86c0b84e749e5add9f5d8d77f2d95e82fecb007e67760cdf531c57309d27ee52bfaced2f6f6da3cf22ad98a25fafe9ed59c20f4a9ba7ca356c1ebacf45258cc82f5b2a071f2fcfe92985047cf9ad11c2c6b026c38fd3ef7fb98768a810e6b556b6afe11c54c78c29b3a2354e6fe620bb44b8f13ff7efba61e186a8184870f5412254e1c2b809a865bd8b03740308c88d8a020f76a2b27eed7eb442b3e75944e7924348eb5e49ed0f7d18d14811adbe37e214e614c03b8bd96a79e60fdc5a774dd9191f4ba6d750e32aea3e83a0deb1ddea51b5220aae9f9ebc4226544492c5408370e75faefd1669602f75673d27ce8edaeeb773e512a26525846cee7eade9f03639ee3f1028d14635a165d0ff5b9120fc6fc35d049ab3f5eebb48ad761559f26844d335fccdac24c5f4152e7747a5e74ef6ecf7240b318b013c41c2ebeb44f6ab59347d335115101e158f7a950c3074fa7937bc8cfcab7eb1736366abac876fbcee5ba52ddd6dc0f70019225f21fcd71181fdf55b8afba8039617d6e8040ee6b3656749a243ee467a28dcd2cfffdaa3c911c3d1ec5247d8a81ccf22ddd2d36fcf6399dd66aada0c7721a62fe59d4c43e8d0cfb9abb05f419d824964844700838c5092b13d87488add2fa66574208a2bb1669275b948fa017b3bc2e1b2bb1421052d2fe6bdd412e83ac02ce633174dfd64af416590703b0293de33cfa08575dc68b8e7e4e3ce1a656e546c8b403f0db01f49a0aadfc0aab5df354d8e43d5089faea69b7f03c1868287eb4cd59b0c78dd5b75e3c8f65d6bc59bfa459e86e8369ba0b9ce8bcbb80849cd896a23b18ce48239580ea1e6b93b3c9d99ec902e69c7b635b3c7ab5be6da4adb3eeb563f092e863abd6dc21c3abdc0dc4e30b6494e74bb83feb16d62fe5a1d559c387685d2f167a8c3b002f16c795a6534f822f75bc709fff419e301bc3c715dad98c8cfef94991ff52729b0562a9393dfc9b6159bf303f2c9ed248037da13e3d2d0b94aa502443c7d8f89a0f8e929118547efd56a61ad8093294a7e61adb88c7fafc5e97b489e2315a3d2993bc2909c7c73134078fee040ad9a9fae7e7fb81b6427447c5fbc57f14ecda7206ea885df556348e6b88de6ca3f9546822fa3d49f1db9ed6cf5b3f3f064c9a62da25f43c4ae3f9067604dfc4e42d591c50dc7cbf5116282c55576108a572db39d6e1e2dce3977e9d19b7d1abb27981ec9b70070de036aececc089c326f811cc460fdcc80624ec616b99fb96cb0df26990c95e82b5f17da8feee35c3b26ff5d679948a5b5a975f2462c9c89dc0dd41e354067c976ff4af8d2e28cfc18336b1a5dfac3aede4c1134475575e50887a9b55061d162194ad0128d812720585f0be48af7ce0dea9faa8b9bd588bb6a9a3c732cd8e3e6352ed5816efb00d2bbe4365169dc63956d45ba28c97bdea1702bdf20a7d734839b142ab59b08cbbe6b11067454f0dc01c3a64c8ab8c7de249a883ff0a2f68f985b486bbd76870e43f4d5db54e8f7c301f0f61fe6ba88016b8201f4a867a408b9903f19573a7b55db2ac8fa86501000f5aaa28e102073a31dec9723c1082b8d38c813ac5b728de4c9d635bd277df746cdfa62b91aec2f55f386ac177148dcd9263b352f9876de476570caed5e9c7fb8ffa7dfa8f0390358ad67d80fac18f81dd57e4c5bb10b1464c02f6cf7e279d90431a315c85ddf7f6df05744be20d8bb9f7162ccf17524ea3dd990df53cb88fc4def370c4644b764dcef503365d2146099a357ae2712d8bafbf347a59a6b89e46e8a4984a104f72b6ba0c20d72666d2d93797036c24727c2b57090d29e6a260a707db187bf9c1f5a490aeaf9e34e87d2a21a4ef0b1d13518ec11fc6380d9f0318", 0x1000}, {&(0x7f0000000040)="0bfc769142ca1e64d276", 0xa}, {&(0x7f00000011c0)="af3c34bd9ebf27e8e7f11e3acdc4f1e4c23dd027167704d6eba6969e5f472f56e481b82bbfd16d5d62c492222d961a5d7f2a3db3", 0x34}, {&(0x7f0000001200)="83ab70b6c516ddf8a254a782490cfd6019fda375e84f9c3367a5b7ed105712f3e361e8bbe0c499e13f9af68fc7840bdf7d55580746142eab34982fadaeab915bae8cac2f60082a8eee48de9d00211d9b48719e80ba05fd8518281c6782fe3a183083eb4a3aa9a6005fcd82ee4693e5ee6d633aac108165f90dd6b5d064f5cdd906d3f7544c8011bb3dfbbf1bde589847d83f7842783d43d17d05130cc61c5916b199c9da7cdf83a97eedc077c99b881aa4d1d367aa159e6ee6e4645d08ca9f97c5db6cdc456bc38e6adb2e417ce3f8631365414ff6dda7378c45fae9920819404cbea6d109", 0xe5}, {&(0x7f0000001300)="bfcf6e580a76826ac2d1b563a78c47aec78c7f64a49df38f887df9db440d3ba52ca149c579b0f2399dbdec1c54f51373924631d0d8a1596efcccc27eba2e096fe7bae2e542871348a8668a17466d8d544247419a06ea71acede284908ae60f866abbb651033a30e65613d76bf8ccc464fc05cdbc4b7da74daf490b66fdb925c6759aa5f5aecb365133a09e6762a147577ce927c811e8c38e74f1fe98c4828e0260bb9d57932748ba88eab7194456425090e2db8b03350fb41d25cf365747ec8926de08bf0a22f3eb7169ff3da7748ad5c0610db19f6a3a60ed661a1fa25dae4cfb8f2cedff9382ad10c5518a2c11bfc46947082117e6152e", 0xf8}, {&(0x7f0000001400)="851bfb5c16b5cd9e5e1e328196753db2c8eafdda164ade6230165fe68ffe6483c65af3553ce6e3af0aa985488dffad9cce889c64d473b3cca4625783bbeeaf2fffb73bb8c8891bc7f66e0595401895e5b3b39df4fcce61cb7d20b66a9d8b4d7e5230ade4cdd483982bc35331a942194b444923ac13a6a1c83be18eb71c166902838e310eaabd0750ad4f05587a0866aced804f4d55582e1a52930605de293495885948273b299717e0b69095f4a30bca4a05de", 0xb3}, {&(0x7f00000014c0)="3936f8eb4a063fb9a4691597e67a4c81d13ed8c1798c2553aafd8fc350f05c4472a14ffa7041095d0b1cf4554978501a8b358de3fbf8324f28ce50a0c72f23c2a759d245fd52f4605cb3e3bda5d7ad227b02640724006f7e5c06472bc79339a0e732d3b16be54edbad27d77ca366dd5ebfc9cc23a7e0fb6faaa236572d0508f3aaccc71468b150e724c48809abce072763dd8efae6de3b7b1f0115704fad185f001560c1e0010dae8164538b85bcbeed", 0xb0}, {&(0x7f0000001580)="cf23879639d55f5c03e1f9bdf593946102fdcf6146c132c0132689575e524048ea8db49180f0bad3551fd78444823c04392185f15ec676d4282ba7af58bc3d131100941a1a4e868fbfaccec6d57c7d70d9b2e6a00142e186905bd5ecee601bf5ed49ef8537250fb741808fb33eb07dd70b950df6337202f409f5c1091523b90d4645a93b775a90abba5bb8eabfa797745c56f5e4bcc0c41acce86549bd25", 0x9e}, {&(0x7f0000001640)="f62ad8259bafe9476bfd01fc1afdb25ddef00a5910249b82d57d820e80c2c6c63a92bc8ed8394c1626142317f1b21f21d77dc2111a5c5c10bd55fa8ab354ef3af9b513fb34fef7ea151335bc8ecc90aae6b012ccf36984d286306babc3cd2d9e747ff3", 0x63}], 0xa, 0x9) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @dev, 0x15, 0x0, 'lblc\x00'}, 0x2c) fcntl$getown(r0, 0x9) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 10:44:48 executing program 6: socket(0xa, 0x800, 0x40000000) 10:44:48 executing program 3: r0 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth1_to_team\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="0e0000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]}) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) 10:44:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="441d2ce06b0001000000000000004ee5d13104000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800120010000100697036677265746170000000040002000a0001000200000000000000"], 0x44}}, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) sync_file_range(r0, 0x0, 0x5725, 0x5) sendto(r0, &(0x7f0000000100)="e105af5acee0176b4c902ebacda59394dad0141511395c39ee5c", 0x1a, 0x4000000, &(0x7f0000000140)=@can, 0x80) [ 99.015466] binder: 7473:7479 got transaction with invalid offsets ptr 10:44:48 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) r3 = memfd_create(&(0x7f0000000040)='}cpusetselinuxppp0\x00', 0x1) ioctl$VT_WAITACTIVE(r3, 0x5607) r4 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0xffffffffffffffff, 0x0, r4, &(0x7f0000000000)='./file0\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000400)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000000500)=0xe8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'tunl0\x00', r5}) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000002c0)={{{@in, @in6=@ipv4={[], [], @multicast1}, 0x4e22, 0x1, 0x4e20, 0x401, 0x2, 0xa0, 0x0, 0x67, r6, r7}, {0x8001, 0x2, 0x0, 0x572, 0xd300000000000000, 0x10000, 0x2, 0x3061}, {0x3, 0xffffffff, 0x7f, 0x4}, 0x0, 0x6e6bbf, 0x1, 0x1, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0xb}, 0x4d6, 0x32}, 0xa, @in=@rand_addr=0xfffffffffffffff8, 0x3507, 0x3, 0x0, 0x100000000, 0xffffffffffffffff, 0x229a, 0x7fff}}, 0xe8) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) utimes(&(0x7f0000000100)='./file0\x00', &(0x7f00000003c0)={{}, {r8, r9/1000+10000}}) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x6, &(0x7f0000b60000), 0x0, &(0x7f00004f9000)}}], 0x1, 0x0, 0x0) 10:44:48 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) [ 99.066553] IPVS: __ip_vs_del_service: enter [ 99.071808] binder: 7473:7479 transaction failed 29201/-14, size 24-8 line 3165 [ 99.093465] binder: undelivered TRANSACTION_ERROR: 29201 [ 99.129365] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=107 sclass=netlink_route_socket 10:44:48 executing program 3: socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], 0x0, [{}, {}]}, 0x70) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40042406, &(0x7f00000002c0)='broute\x00') getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=""/153, &(0x7f0000000000)=0x99) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x400000000000487, &(0x7f0000dcffe8)=""/24, &(0x7f0000000080)=0x15c) [ 99.175475] binder: 7501:7502 got transaction with invalid offsets ptr [ 99.177355] device lo entered promiscuous mode [ 99.194870] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=107 sclass=netlink_route_socket [ 99.219273] binder: 7501:7502 transaction failed 29201/-14, size 24-8 line 3165 [ 99.260502] binder: undelivered TRANSACTION_ERROR: 29201 10:44:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000ac0), 0xc, &(0x7f0000001f80)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000130011030000000000000000010000000800216a", @ANYRES32=0x0], 0x1c}}, 0x0) 10:44:48 executing program 0: ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0xc0f85403) 10:44:48 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000080)={{0x3, 0x2, 0x512b, 0x3, 0x7}, 0x8, 0x443e}) ptrace$setopts(0x4206, r1, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$KDADDIO(r3, 0x4b34, 0xffffffffffff7fff) ptrace(0x4207, r1) wait4(r1, &(0x7f0000000240), 0x0, 0x0) 10:44:48 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00'], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:48 executing program 7: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x121000, 0x0) r1 = gettid() sched_getaffinity(r1, 0x8, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) write$cgroup_pid(r0, &(0x7f00000001c0)=r2, 0x12) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r3) r4 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x82) r5 = memfd_create(&(0x7f0000000140)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r5, &(0x7f0000000900)=[{&(0x7f00000009c0)="1f", 0x1}], 0x1, 0x81a06) ioctl$TIOCGSOFTCAR(r5, 0x5419, &(0x7f0000000080)) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f0000000240)=0x1) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) sendfile(r4, r4, &(0x7f0000000000), 0x20000102000007) 10:44:48 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80000, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)={0xffff}, 0x8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0x80, @time={r1, r2+10000000}, 0xffffffffffff7fff, {0x80000000, 0x9}, 0x7, 0x3, 0x21}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000d34ff0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r3, 0x4004700c, 0xdd2) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0x40085112, &(0x7f0000000080)={{0x40000fffff782, 0x406}, {0x6}, 0x0, 0x4}) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000140)=0x3, 0x4) 10:44:48 executing program 4: r0 = memfd_create(&(0x7f00000004c0)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) write(r0, &(0x7f0000000080)="a8", 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) fcntl$addseals(r0, 0x409, 0x1) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000180)=ANY=[@ANYBLOB="0800000002004e20e0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000500000002004e21ac1414bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004d0400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x30c) sendfile(r0, r0, &(0x7f0000317000), 0xff8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x48040, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 10:44:48 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_default\x00', &(0x7f00000003c0)="0200000004000000000000000200f30000000000", 0x14, 0x0) [ 99.666894] binder: 7521:7523 got transaction with invalid offsets ptr [ 99.687229] binder: 7521:7523 transaction failed 29201/-14, size 24-8 line 3165 [ 99.691668] binder: BINDER_SET_CONTEXT_MGR already set [ 99.691677] binder: 7525:7531 ioctl 40046207 0 returned -16 [ 99.693080] binder: release 7525:7531 transaction 83 out, still active [ 99.740543] binder: unexpected work type, 4, not freed [ 99.745825] binder: undelivered TRANSACTION_COMPLETE 10:44:48 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x58) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x7, 0xa, 0xffffffffffffffff}, 0x14}}, 0x0) 10:44:48 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) [ 99.817080] binder: undelivered TRANSACTION_ERROR: 29201 10:44:48 executing program 5: clock_adjtime(0x0, &(0x7f0000000080)={0xffff}) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="35e264d3332d961225072d34a46630b7013b9581a263913deae089b41696865ea3fd072a36bd4807d6fad81aa66510f5bef0f452beb9ee8427a36060aae73b51c7faa8ef5a2dc720f4e77ddf5a289a30ec5ea8ad", @ANYRES16=r1, @ANYBLOB="d16d28bd7000fbdbdf250d000000500003001400020069726c616e3000000000000000000000080004000500000008000500ffffffff08000100020000000800030003000000080007004e240000080007004e240000080001000200000008000500080000005400020008000600780d0000080007000400000008000900040000000800040006000000080008000200000008000900b300000008000700010000000800050022470000080008008c0400000800070009000000"], 0xc0}, 0x1, 0x0, 0x0, 0x4040}, 0x40000) syz_open_dev$mice(&(0x7f0000000340)='/dev/input/mice\x00', 0x0, 0x10200) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2, 0x400040) clock_adjtime(0x0, &(0x7f00000002c0)={0x9, 0x81c, 0x6, 0x8, 0x3f, 0x1, 0x0, 0x632, 0x3, 0x5, 0xfff, 0x6, 0x4, 0xffffffffffffffff, 0x81, 0x3ff, 0x2bb, 0x80000000, 0x8001, 0x3, 0x8, 0x100000001, 0xfffffffffffffe01, 0x8, 0xffff, 0x2ea8080f}) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) 10:44:48 executing program 3: mkdir(&(0x7f000002b000)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f000002c000)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x4040, &(0x7f0000000180)) r0 = socket$inet(0x2, 0x3, 0x4) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x80, 0x7fff, 0x100000000, 0x3, 0x7, 0x2, 0x3f, 0x1, 0x1a, 0x40, 0x344, 0x9, 0x7, 0x38, 0x2, 0x80, 0x200, 0x80b8}, [{0x7, 0x100000001, 0x1, 0x4, 0x8, 0x8, 0x80000001, 0x2}, {0x6474e553, 0x6, 0xff, 0x8, 0x4, 0x6, 0x8, 0x8}], "d4df5018e562a1508932132a6a9944e239f351cc324b83658760c46d69036036643fc3601253fad49f36faa25a7ad3aec6e7796e127b0e5ca219301b12c41de656bb51f63df1966f30eb3be580529f32b0557f4176a6c2f26482bb4619ca9c821c9b1896d1e38804a230fe6bd26566385040d5af7442d56d339356efef50c560fc52455eca776281aba04af62f9bd5ec23831670155de469dd3a7b5ecbc5d57c83e18ebbe21334c89b0760d19dbf9ffd9e2712fb04616c3d", [[], [], []]}, 0x468) creat(&(0x7f0000002500)='./file0/bus\x00', 0xcebb6074bb566d03) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x4000, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0/bus\x00', 0x400000000, 0xfffffffffffffffe) write(r1, &(0x7f0000000000)="6cc340be750f8f941181fe9d9bfa7b4ac3d414be38322203863527daa5b23f501e795e757ff501561040c0c11caedf", 0x2f) [ 99.860929] binder: send failed reply for transaction 83, target dead [ 99.905998] binder: 7551:7553 got transaction with invalid offsets ptr 10:44:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)='~', 0x1}], 0x1) r1 = dup3(r0, r0, 0x80000) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x9) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100022b0509000100010100ff3ffe58", 0x1f}], 0x1) dup3(r2, r0, 0x0) 10:44:49 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000}) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000000)={0x77359400}, &(0x7f0000000100), 0x8) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000001c0)=0x101) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) write(r0, &(0x7f0000000080)="2ed2f1f28c087f15954b79f5fef61e31a399fa8e44f3cc825c0e871598b791d16a4f734283061228e2e5ad84bd83b771a4207cde0bdc622ef04757e918a8db0016762e5481ab48", 0x47) 10:44:49 executing program 1: r0 = getpgrp(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) setpgid(r0, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000200)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424ada75af1f02acc7edbcd7a071fb35331ce39c5a00000000") fsetxattr(r2, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000040)='%ppp1wlan0#\x00', 0xc, 0x0) fsetxattr(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)="2f0409004bddd9de91be10eebf000ee9a90f798058439ed5821660f4e9516aebd7a071fb35331ce39c5a0000000000000000080000000000000000000aaad955a3c93f9d248b46a7c99eb35b406bf918ff01739e56187b2db8f1074424745271062042fb3808186e0a837132f9108c583073a4ca94b3e4e58717fe2b659fa3903c7b73bd66b83f5ecc0a7361257896883f1b43ff4ec0a1e336b92f705461af0b60825a7834ffd0a7339d85c51b8db7b4c0e4f40953dd2d9f2110f04c9fdf8489eaa996", 0xc3, 0x0) [ 99.962528] binder: 7551:7553 transaction failed 29201/-14, size 24-8 line 3165 10:44:49 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000180)=""/79, 0x4f, 0x3f, &(0x7f0000000200)) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x2000800e, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x12000, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mq_timedsend(r1, &(0x7f0000000140)="7e0788663a3d933c6b65a9d6b781772873a40427153b7def986ccafed605141873bd5cb4df948387aa", 0x29, 0x4, &(0x7f0000000280)={r2, r3+30000000}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvfrom(r0, &(0x7f0000000040)=""/101, 0xfffffffffffffeec, 0x10100, 0x0, 0x0) shutdown(r0, 0x0) 10:44:49 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:49 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x10, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)="c626262c85") r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) r1 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x44, 0x0, &(0x7f0000000400)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000340), &(0x7f00000003c0)=[0x0]}}], 0x1, 0x0, &(0x7f0000000480)='I'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) [ 100.033354] binder: undelivered TRANSACTION_ERROR: 29201 10:44:49 executing program 3: timer_create(0x7, &(0x7f0000001740)={0x0, 0x29, 0x1, @thr={&(0x7f00000019c0), &(0x7f0000000340)}}, &(0x7f0000001780)) timer_gettime(0x0, &(0x7f0000001800)) 10:44:49 executing program 7: connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4), 0x1c) r0 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x40000) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x1e6, &(0x7f0000000480), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="10820019290000003e00000001ff0040"], 0x10}}], 0x1, 0x408d4) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$selinux_access(r2, &(0x7f0000000140)={'system_u:object_r:ldconfig_exec_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5'}, 0x5f) r3 = dup(r1) getsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x4) [ 100.145921] binder: 7585:7588 transaction failed 29189/-22, size 0-8 line 3014 [ 100.182431] binder: BINDER_SET_CONTEXT_MGR already set [ 100.189931] binder: 7585:7594 transaction failed 29189/-22, size 0-0 line 3014 [ 100.216408] binder: 7586:7589 ioctl 40046207 0 returned -16 [ 100.216587] binder_alloc: 7585: binder_alloc_buf, no vma [ 100.216630] binder: 7586:7593 transaction failed 29189/-3, size 24-8 line 3137 [ 100.243290] binder: BINDER_SET_CONTEXT_MGR already set [ 100.248765] binder: 7585:7588 ioctl 40046207 0 returned -16 [ 100.255167] binder: 7585:7594 transaction failed 29189/-22, size 0-8 line 3014 10:44:49 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x4080, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0xc, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) r3 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x8001, 0x20000) fcntl$getflags(r2, 0xb) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e28, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0xf5) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000100), 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x410000, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) sendto$inet(r3, &(0x7f0000000200), 0x0, 0x24040801, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000340)={'filter\x00'}, &(0x7f00000003c0)=0x44) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0xfffffffffffffffe, 0x45) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000200)={{0x2, 0x4e23, @multicast2}, {0x6, @link_local}, 0x2, {0x2, 0x4e21, @local}, 'gre0\x00'}) clock_adjtime(0xf5a0164fe9ec2fb8, &(0x7f0000000280)={0x4, 0xb9, 0x101, 0x400, 0x62a, 0x18, 0xfff, 0x7ff, 0x1, 0x7, 0x0, 0x0, 0x401, 0xeb, 0x8, 0x539, 0x7, 0x4, 0x7ff, 0x7, 0xffffffff, 0x1000, 0x1, 0x3, 0x50, 0x7}) [ 100.279201] binder: undelivered TRANSACTION_ERROR: 29189 10:44:49 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = getpgrp(0xffffffffffffffff) rt_tgsigqueueinfo(r1, r1, 0x8001, &(0x7f0000000100)={0x33, 0x7ff, 0x835, 0x1}) getpgid(r1) getsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) setfsgid(r2) 10:44:49 executing program 3: sendmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)=[{0x10, 0x0, 0x0, "01"}], 0x10}}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000), 0x200000000000019c) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x0, 0x10000001}, {{0x2}}], 0x20) 10:44:49 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="3fb36653fdbc7b5f90b52c"], 0x10}, 0x8}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000), 0x200000000000019c) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x10000001}, {{0x2}}], 0x30) r2 = dup2(r1, r0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000080)=0x20, 0x4) 10:44:49 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:49 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x4080, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0xc, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) r3 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x8001, 0x20000) fcntl$getflags(r2, 0xb) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e28, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0xf5) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000100), 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x410000, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) sendto$inet(r3, &(0x7f0000000200), 0x0, 0x24040801, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000340)={'filter\x00'}, &(0x7f00000003c0)=0x44) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0xfffffffffffffffe, 0x45) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000200)={{0x2, 0x4e23, @multicast2}, {0x6, @link_local}, 0x2, {0x2, 0x4e21, @local}, 'gre0\x00'}) clock_adjtime(0xf5a0164fe9ec2fb8, &(0x7f0000000280)={0x4, 0xb9, 0x101, 0x400, 0x62a, 0x18, 0xfff, 0x7ff, 0x1, 0x7, 0x0, 0x0, 0x401, 0xeb, 0x8, 0x539, 0x7, 0x4, 0x7ff, 0x7, 0xffffffff, 0x1000, 0x1, 0x3, 0x50, 0x7}) 10:44:49 executing program 4: r0 = memfd_create(&(0x7f00000004c0)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) write(r0, &(0x7f0000000080)="a8", 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) fcntl$addseals(r0, 0x409, 0x1) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000180)=ANY=[@ANYBLOB="0800000002004e20e0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000500000002004e21ac1414bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004d0400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x30c) sendfile(r0, r0, &(0x7f0000317000), 0xff8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x48040, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') [ 100.639657] binder: 7620:7622 got transaction with invalid offsets ptr [ 100.658735] binder: 7620:7622 transaction failed 29201/-14, size 24-8 line 3165 [ 100.662588] binder: BINDER_SET_CONTEXT_MGR already set [ 100.662597] binder: 7623:7631 ioctl 40046207 0 returned -16 [ 100.663063] binder: 7623:7631 got transaction with invalid offsets ptr 10:44:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) [ 100.663124] binder: 7623:7631 transaction failed 29201/-14, size 24-8 line 3165 [ 100.729220] binder: undelivered TRANSACTION_ERROR: 29201 [ 100.760593] binder: undelivered TRANSACTION_ERROR: 29201 [ 100.790235] binder: BINDER_SET_CONTEXT_MGR already set [ 100.795702] binder: 7642:7644 ioctl 40046207 0 returned -16 [ 100.808625] binder_alloc: 7620: binder_alloc_buf, no vma [ 100.814875] binder: 7642:7644 transaction failed 29189/-3, size 24-8 line 3137 10:44:49 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40, 0x0) sendmsg$unix(r1, &(0x7f0000001500)={&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000014c0)=[{&(0x7f0000000180)="29765c7178519bc05c06aa6397f3ea0ed3c50492a11a1bfb174e891f713f27ddae05f2f352fc7ff93f414ed036c381fd9b0026d430d1a9c772d3eb279ed56f4aca717f0040881e525b28bb84caf7f5649d866022192f0690fee0fbc83cfe5bbff6c591a4bd0667e28fc113ca462ba6a38ea8b52cd175315cb44fcd87db04085d1ba3ea48b1a74d8c31f238486ddbf2abc64ed909a21fb1c4b2b4a0d5d78a6d13e1fdea41bb9af3", 0xa7}, {&(0x7f0000000240)="08bed141baa6b1777e86c82a8b45d48bb016859ea006500cd786efdba6c0da7d7a7185d20a412be771b76624c4450d97ede9e81bd1824191142310d321338297cf46abd33d566de5429b68d1376fb079a0a6565771b63a34ea2e9b7d818b69d6cc9f9508fe0deb3787050360eeeedbb60a061f8c66cb44c96b121092ca81689622589aff1b6b6d05bd9128cf95cddc", 0x8f}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="39ff0f2becbb91e6c05d2b445282e302d9aa82353e9675f643a9ed29b342affba2bef5a3678eb3c0e336a8e6a69c19e11f2bc03ac6c0d73e23c7e7e36e5fab04d419204d0184f4469d1782a8c06bbf7f940590cff5bbe0dc389bb85f53812853badcda8fbc1a5969d1c9f5b9c9f82083bf6e11a35546dc4e75fb9e483b678a9e8e9dcca4fa7901018eada6eb4da66a975b4e77c652c25d4fce3065dc97f2d070c9c434b61721ba1d", 0xa8}, {&(0x7f0000000040)="104729c7f46e545d778ca14bce60337554966dbdb2e87d6dd2e949a1ef094a5e79e763e6183593dcc4d88f5474ec7b71f0e607a3ffc367a8d5a25c", 0x3b}, {&(0x7f00000013c0)="c7729f634977fa438324ea540333917e1cd87d58484d5fb5b501baa63a4709b1a4fcdf3fef0944e1ee468775b3c56776b3e795d0d031a26961351e6d65bba72a45ef31f292b358e3f8b54b918c91c78bb978148e65586fcc5983f43278beef141ca7a65b4221cdd53fe139f9ab4e65bcbc1487a137bed604256571c3f689607e5641f2106a1e57247e8cb1ae8409c884e3a43f14106a049971b9cba2e3d001564315dddaf49455cc30b2b59753780f235d22f24842e403bf23f64bb9d77b6add209d82d2", 0xc4}], 0x6, 0x0, 0x0, 0x4000000}, 0x4000000) connect(r0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80) 10:44:49 executing program 7: setrlimit(0x7, &(0x7f0000000440)={0x0, 0x80000000}) socket$inet6_tcp(0xa, 0x1, 0x0) 10:44:49 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) poll(&(0x7f0000000080)=[{r0, 0x2002}, {r0, 0x100}, {r0, 0x4}, {r0, 0x1}, {r0, 0x102}, {r0, 0x1409}, {r0, 0x4}, {r0, 0xc}, {r0, 0x100}], 0x9, 0x9) sendmsg$key(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)={0x2, 0x15, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x1662161dfc3d56b7, 0x0, 0x0, 0x0, @in6}]}, 0x38}}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x100, 0x0) write$selinux_load(r1, &(0x7f0000000140)={0xf97cff8c, 0x1db, 'SE Linux'}, 0x21a) getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000100)=""/30, &(0x7f0000000180)=0x1e) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000240)=0x6) 10:44:49 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:49 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x4) fcntl$setsig(r0, 0xa, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424ada75af1f02acc7edbcd7a071fb35331ce39c5a00000000") fsetxattr(r1, &(0x7f0000000080)=@known='user.syz\x00', &(0x7f00000000c0)="7f8a0aadcc8b8cdf02dde9c991d8", 0xffbb, 0x0) fcntl$notify(r0, 0x402, 0x1) 10:44:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:49 executing program 3: r0 = request_key(&(0x7f0000000200)='rxrpc_s\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000100)='vmnet0bdevselinux&-.selinuxem0+cpuset{ppp0\x00', 0xfffffffffffffff8) r1 = request_key(&(0x7f0000000140)='.dead\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000001c0)='/dev/usbmon#\x00', 0xfffffffffffffffd) keyctl$link(0x8, r0, r1) r2 = syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000240)=0x17, 0x4) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x8012, r2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x400, 0x4) clone(0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) [ 100.889399] binder: undelivered TRANSACTION_ERROR: 29189 10:44:50 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:50 executing program 7: r0 = socket$inet6(0xa, 0x2000000801, 0x0) sendto$inet6(r0, &(0x7f0000000000)="4919727200ffe0de9942e76326955c60fce36b0d30443d15ee56ba", 0x1b, 0x4, &(0x7f0000000040)={0xa, 0x4e23, 0x7fff, @loopback, 0x2}, 0x1c) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000000c0)={@remote}) [ 100.931790] binder: release 7653:7660 transaction 98 out, still active [ 100.950070] binder: BINDER_SET_CONTEXT_MGR already set [ 100.964816] binder: 7655:7661 ioctl 40046207 0 returned -16 10:44:50 executing program 1: r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200), &(0x7f0000000240)=0x4) creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 100.983703] binder_alloc: 7653: binder_alloc_buf, no vma [ 100.990887] binder: unexpected work type, 4, not freed [ 100.996177] binder: undelivered TRANSACTION_COMPLETE 10:44:50 executing program 0: r0 = socket$inet(0x10, 0xe, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150004001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) 10:44:50 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x1, 0x0) write$FUSE_BMAP(r0, &(0x7f0000000080)={0x18, 0x0, 0x6}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000000)=[{0xbc86, 0xfff, 0x101, 0x800}, {0xfffffffffffffffe, 0x1, 0x0, 0x5}, {0x8, 0x6, 0xffffffffffffffff, 0xfffffffffffffffe}]}, 0x8) [ 101.026551] binder: send failed reply for transaction 98, target dead [ 101.042901] binder: 7655:7670 transaction failed 29189/-3, size 24-8 line 3137 10:44:50 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create1(0x0) ioctl$TCSBRK(r0, 0x5409, 0x1000) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x2) dup3(r2, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)) ppoll(&(0x7f0000000180)=[{r1}], 0x1, &(0x7f0000000240), &(0x7f0000000280), 0x8) 10:44:50 executing program 7: r0 = socket(0x20000000000018, 0x0, 0x2000000001) connect(r0, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000f4, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xe8) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa00f2ea7fdac8afa}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@deltclass={0x148, 0x29, 0x1, 0x70bd2b, 0x25dfdbfd, {0x0, r1, {0x0, 0xffff}, {0xffe0, 0xfff3}, {0x10, 0xfff2}}, [@tclass_kind_options=@c_drr={{0x8, 0x1, 'drr\x00'}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x1}}}, @tclass_kind_options=@c_cbq={{0x8, 0x1, 'cbq\x00'}, {0x64, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0x8, 0x10}, 0x697, 0xffff}}, @TCA_CBQ_RATE={0x10, 0x5, {0x6628618b, 0x2, 0x7ff, 0x5, 0x1, 0x10001}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xe, 0x7}, 0x401, 0x100000000}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x7045c32b, 0x0, 0x0, 0x8, 0x8}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x0, 0x6, 0x6, 0x2, 0xffffffffffff0001, 0x200}}, @TCA_CBQ_RATE={0x10, 0x5, {0x100000001, 0x1, 0x7, 0x6, 0xea95, 0x5}}]}}, @tclass_kind_options=@c_qfq={{0x8, 0x1, 'qfq\x00'}, {0x1c, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x7}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x7f}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x1}]}}, @TCA_RATE={0x8, 0x5, {0x100000000, 0x5}}, @TCA_RATE={0x8, 0x5, {0x5, 0x3ff}}, @tclass_kind_options=@c_atm={{0x8, 0x1, 'atm\x00'}, {0x50, 0x2, [@TCA_ATM_FD={0x8, 0x1, r0}, @TCA_ATM_HDR={0x44, 0x3, "0d1f39c3a6a090f40d7230242feb15439f0ec2863eca9dae7706f1da9e8c6542b3a4f29d1675d06721a8d39478d24ea3ea0ebbccaaed0246dbdcf2002d80"}]}}, @TCA_RATE={0x8, 0x5, {0xcfb, 0x8}}, @TCA_RATE={0x8, 0x5, {0x4, 0x1}}, @TCA_RATE={0x8, 0x5, {0xff, 0x7fff}}]}, 0x148}, 0x1, 0x0, 0x0, 0x40001}, 0x40) dup2(r0, r0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x20000, 0x0) [ 101.088741] binder: release 7677:7681 transaction 103 out, still active [ 101.185090] binder: unexpected work type, 4, not freed [ 101.209157] binder: undelivered TRANSACTION_COMPLETE [ 101.214512] binder: undelivered TRANSACTION_ERROR: 29189 [ 101.289911] binder: send failed reply for transaction 103, target dead 10:44:50 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0xc180, 0x8) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 10:44:50 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:50 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80, 0x0) getsockopt$netlink(r0, 0x10e, 0x7, &(0x7f0000000680)=""/4096, &(0x7f0000000040)=0x1000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1000000007, &(0x7f0000000640)=0x6, 0x4) getsockopt$inet6_tcp_int(r1, 0x6, 0x7, &(0x7f0000000200), &(0x7f0000000180)=0x4) 10:44:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000e5a000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x300, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000040)=0x9762) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000067cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)=0x0) ptrace$setregs(0xf, r3, 0x4, &(0x7f00000000c0)="53716e46c55a3e36bcc6af41ee") ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00003cb000)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000002b90d93c7b702f82e1e91cba506650a3fa23ee55ef5538aaed844a783f1175e7c97f7119cac63e3739df0a6989147eeb63b32ae9fa8e2c7ffb"], 0x0, 0x0, &(0x7f00002f6000)}) 10:44:50 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000018c0)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f00000019c0)=0xe8) sendmsg$netlink(r0, &(0x7f0000001a80)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001a40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="400500001800000409007000fcdbdf25e802590008003100", @ANYRES32=r0, @ANYBLOB="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"], 0x540}, {&(0x7f0000000640)={0x126c, 0x25, 0x104, 0x70bd2a, 0x25dfdbfc, "", [@nested={0x1118, 0x86, [@generic="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", @typed={0x8, 0x8c, @u32=0x8000}, @typed={0x8, 0x3, @u32=0x2}, @typed={0x4, 0x29}, @generic="2255ecb6db6d5d0d1f0e58fb384576058e2d0bd953a26a0f", @generic="fea129862a098e567c81a3e1347d7e0162b6d4c5bbc145986ad21bd26a807814bfeabfd393c0d60aa46dc8d1e9c233da2d897765916c969feb8b5df44bd6d4a04f0c11c75cc9e6ef72e02cef17a927b646a5714cf245492b90e83054d6765a3c4083ff4428248cf5ccfb046e299940b5199920035a5f8f9ad53b9d6ab28fa084117de1b5c45c758cfa801625e96719605805f544fa9bcf24ca7d38c7daf022ad377ce6921c8f2edd07f3c6d0b8424e8e1f5c36489ee2242eb3614f3cd899a670e11768d36a4957335a4ea4b4bd1b40cd4cd4b54f73088664b3e797bd75c0b00a3d0032009e"]}, @generic="a36d70bf56ecae3fc3d6dc5f57435f5092c4e7391705b193a5a5fda60e4aa61faed4982c61774c26065db025131e1cf0ae273083cf2556e65f88d01e0d845931989ab3bf71a3f6", @typed={0x14, 0x3b, @str='/dev/sequencer2\x00'}, @typed={0x8, 0x11, @fd=r0}, @generic="cd2da3f8b10733aae8e427f92785a84830e314699a9a205230287cce5c8ebbd903d09b41e4733c13ec2bd75eb756652d90b33f0063d4674af9bbc48c181d5e0e153e6d83f4789f6d34a0eb344ffd19343c6dfcafcb680ca6001d58cc32cbcea2d84d1db17ae292da5694bdae71c70c54d60df35f1ff389142811cf19e3af187b9131a576c52c0e320613c5752c4076b8622c148f0370363a527d884f4cb594f8df8f9200f14c938951d8c7b7644fff6fb029f765efead979242581b3138e711f17ba154dfea52a93bce45192", @typed={0x14, 0x7b, @ipv6=@ipv4={[], [], @multicast2}}]}, 0x126c}, {&(0x7f0000001a00)={0x30, 0x10, 0x0, 0x70bd25, 0x25dfdbfc, "", [@nested={0x20, 0x6d, [@typed={0x8, 0x1b, @uid=r1}, @generic="b6db", @typed={0x8, 0xc, @fd=r0}, @typed={0x8, 0x26, @uid}]}]}, 0x30}], 0x3, 0x0, 0x0, 0x4000040}, 0x400c0) 10:44:50 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2000006) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x100000) r2 = dup(r1) ioctl$TIOCSBRK(r2, 0x40044591) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1, 0xff}, {{0x2}, 0x0, 0x0, 0x9}], 0x20) 10:44:50 executing program 6: r0 = memfd_create(&(0x7f0000000580)='dev ', 0x3) write(r0, &(0x7f0000000040)="215fbaea8f00", 0x6) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x10000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x4e20, 0x20, @loopback, 0x200}, {0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, [], 0x13}, 0x7fff}, 0xe356, [0x2, 0x3, 0x140000000000, 0xffffffff7fffffff, 0x8000000000, 0xd6, 0xfffffffffffff895]}, 0x5c) fcntl$addseals(r0, 0x409, 0xa) setsockopt(r1, 0x80000000, 0x6a71, &(0x7f0000000140)="3c81541613bd89681a4c26baac83e5b89d790668a4a840790bfdc149534059a14ad30399d76c55c175a59b09ada3825328871baf925b4715bc55e1253832af580d6d57ed8b14acc4e3533046c01002dd88a34e6039ddd41d1f691d96b3a1d53306fa5ecac24314182ddb6eed2c7856a0f358563b03abe7616ed75f35a0fa330ae7149d7be3805f3e841f3667a2ef6c510d8f9cee454bfc1e55dc8b4b5ed5a6df464c4dfb6cd7fdcd50ade2b6921c43b3546292906aff94c9bc84a7d35c78d4360758b6e7999f", 0xc6) 10:44:50 executing program 3: r0 = timerfd_create(0x7, 0x80000) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r0) fstat(0xffffffffffffff9c, &(0x7f0000000880)) getresgid(&(0x7f0000000940), &(0x7f0000000980), &(0x7f0000002c80)) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x82) r2 = memfd_create(&(0x7f0000000240)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728407ef76b30544d7ba92dcfd756f184dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) mkdirat$cgroup(r2, &(0x7f0000000140)='syz1\x00', 0x1ff) pwritev(r2, &(0x7f0000000900)=[{&(0x7f0000002d00)="1ffdad572174763ddaf9b2a1e5f8e339d828062a0c6d4e09fd04df268d03c56ee2ed7af46fccf5f84978902f933e78872e2435e55aef4d5bfa2ae75c638505936959deb41760694af58f5d37da4e723942c873ca8d4868a8b8ab3a30793216d80fd0eb34f563607bf9944a79fb3a924e104544ae4c9a64665fc8d6707033a4dbf658079cf47624a3ec1926867efacca004e7f95f0f224ea14874903cb79bd2766bd8c0d201d3dcb3195a5fc24c1b818c0e7119f060f1a2e426970328b699d20c00ac41385e", 0xc5}], 0x1, 0x81a06) flock(0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) socket(0xf, 0x6, 0x2) close(0xffffffffffffffff) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f00000007c0)=""/130) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000780)=@req={0x4730, 0xffffffffffffffea}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f0000000740)={0x2, 0x0, 0x0, 0x1}) futex(&(0x7f0000000080)=0x1, 0x1, 0x2, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000100)=0x2, 0x1) sendfile(r1, r1, &(0x7f0000000000), 0x20000102000007) 10:44:50 executing program 7: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f00005c5ff3)='/dev/net/tun\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x802) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000030fb4)={0x0, 0x0, 0x207}) dup2(r1, r0) write$sndseq(r0, &(0x7f0000000000), 0xfffffffffffffda8) [ 101.413721] binder: 7707:7713 got transaction with invalid offset (0, min 0 max 24) or object. [ 101.451845] binder: 7707:7713 transaction failed 29201/-22, size 24-8 line 3200 10:44:50 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)="6d61705f66696c657300fae64997ae35e056cf22504e41431b2bbe560aea2d2a0d9b5aa85cfdbbc8af4bbbe9e8e948d97dd7ef390dacf3ba59d8361ebe408a58bf8fc6a1cb60b5fc6d4ca7c25cc756b65025bcd70d0eff52515defb3cbae32fdb50fa74b22707bd933c7d248baf01628033fb935442a29b34cba35a986be2641bfcaf3012b7cdf7c620c81185594b58835b3eb122ed9fa00") fchdir(r1) acct(&(0x7f00000000c0)='./file0\x00') userfaultfd(0x800) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) 10:44:50 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x44000, 0x0) splice(r1, &(0x7f0000000080), r0, &(0x7f00000000c0), 0x101, 0x1) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000040)={0x3, 0x3, 0x0, 0x0, 0x7}) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0401273, &(0x7f00000001c0)) write$binfmt_elf64(r1, &(0x7f0000001280)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffff8, 0x10000, 0x0, 0xfffffffffffff309, 0xed, 0x3, 0x3e, 0x0, 0x129, 0x40, 0xa1, 0x3238, 0x4, 0x38, 0x1, 0x0, 0xffffffffffffffff, 0x8}, [{0x7, 0x800, 0x1c, 0x7, 0x6, 0x7b8, 0x7ff, 0x6}, {0x70000000, 0x3, 0x20, 0x2, 0x1, 0x10000, 0xffffffff80000000, 0x6}], "6fddcf7462d9dd47cfa39e8412c3c26eaccc3550ed623ce1d0ffaff837c0dc058db7ba8c108f6ff5c3bd3868a1a1be77b6e34a8c503381f27c02972ba4f9991a3508098530b8e32251a70074ca45d71bc9961f0b4d3738f5d2aa95d0f192472143c4cb2d72df49d6e651ede8ecb22aac3c4f4acda844ef3df96393bc34e6e612520ddf0af40cdcb1de9e1953f54ffb9d911e6296775309c929c20b3fde7949118a77169c5bfde8dcecfee2985364c7aa0b9066e72803c9e099f826d105c3d36713178439765867", [[]]}, 0x277) r2 = dup(r0) write$tun(r2, &(0x7f0000000240)={@val={0x0, 0x9300}, @val={0x1, 0x83, 0x7, 0x80000000, 0xffffffff, 0x2}, @x25={0x1, 0x100000000, 0x1b, "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"}}, 0x1011) [ 101.482554] binder: BINDER_SET_CONTEXT_MGR already set [ 101.521437] binder_alloc: 7707: binder_alloc_buf size -6181094902627163136 failed, no address space [ 101.531134] binder: 7710:7721 ioctl 40046207 0 returned -16 [ 101.546721] binder: undelivered TRANSACTION_ERROR: 29201 10:44:50 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x1, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000140)={0x87, 0x0, 0x0, "25a735afd45df7fbce7dd4c6d49016e3da19178f5a3beeb8fa9eecdd38cea1509ee8430aef09a696f199d892f6e8fcf403f2db74170b9c6dad244df52e6553de9f05845597d4b6b4609b710e484e400bf2f4e7a0dc2e95997da52242d86a7b491670d84bbe591f1aee84f9cada7251d9dd12445f8af29b0eaee3ca7c6a02474f99a4c49bc2c788"}) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[], 0x3c5) 10:44:50 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) [ 101.563525] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) 10:44:50 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c00000000000000020000020009004000000000000000000000000300060000000002000000e0000054d81458186fe8b90090b2bf183c9a11830000000200000000030005000000000002000000e00000010000000000000000"], 0x60}}, 0x0) fcntl$setpipe(r0, 0x407, 0x4) 10:44:50 executing program 6: r0 = socket(0x800000000000a, 0x80002, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', 0x81}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x4300}) 10:44:50 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000001b207f5c5eeb08004500005800000000002c9078ac1414aaac1414aa0420880be1ca000000000800000086dd080088be00000000100000000100000008000000080022eb000000003800000002000000000000000000000008007558000000004d3dbbb900"], &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) [ 101.628491] binder: 7710:7730 transaction failed 29201/-28, size 1099511627775-0 line 3137 [ 101.667143] binder: 7750:7754 got transaction with invalid offset (0, min 0 max 24) or object. [ 101.698594] binder: BINDER_SET_CONTEXT_MGR already set [ 101.733465] binder: 7710:7763 ioctl c0306201 203cb000 returned -14 [ 101.745935] binder: 7750:7754 transaction failed 29201/-22, size 24-8 line 3200 [ 101.756899] binder: 7710:7730 ioctl 40046207 0 returned -16 [ 101.764239] binder: undelivered TRANSACTION_ERROR: 29201 [ 102.091759] binder: undelivered TRANSACTION_ERROR: 29201 10:44:51 executing program 4: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x402280, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x242, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') preadv(r0, &(0x7f0000000700), 0x31f, 0x10400003) syz_open_pts(r0, 0x200) 10:44:51 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000008000)={0xfffffffffffffffe, {{0x2, 0x4e25, @multicast2}}}, 0xfffffffffffffe3a) socketpair(0xf, 0x6, 0x8, &(0x7f0000000040)={0xffffffffffffffff}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000080)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x14) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0x10) mprotect(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x2) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000000140), &(0x7f0000000000)=0x596) mknod(&(0x7f0000000140)='./file0\x00', 0xe000, 0xfff) 10:44:51 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x1, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000140)={0x87, 0x0, 0x0, "25a735afd45df7fbce7dd4c6d49016e3da19178f5a3beeb8fa9eecdd38cea1509ee8430aef09a696f199d892f6e8fcf403f2db74170b9c6dad244df52e6553de9f05845597d4b6b4609b710e484e400bf2f4e7a0dc2e95997da52242d86a7b491670d84bbe591f1aee84f9cada7251d9dd12445f8af29b0eaee3ca7c6a02474f99a4c49bc2c788"}) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[], 0x3c5) 10:44:51 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:51 executing program 5: r0 = accept4(0xffffffffffffffff, &(0x7f0000000180)=@nfc_llcp, &(0x7f0000000200)=0x80, 0x80800) getsockname(r0, &(0x7f0000000240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x80) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r1, 0x40085112, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x338a057c}) socketpair$inet6(0xa, 0xa, 0x8, &(0x7f0000000140)) renameat(r1, &(0x7f0000000000)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00') fcntl$getownex(r1, 0x10, &(0x7f0000000100)) 10:44:51 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/unix\x00') openat$cgroup_subtree(r0, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000000)=0x7fffffff, 0x4) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000080)) readv(r0, &(0x7f0000000580), 0x3c1) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000040)={'bridge_slave_0\x00', {0x2, 0x4e21, @remote}}) openat$cgroup_procs(r0, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x3) 10:44:51 executing program 6: r0 = socket(0x800000000000a, 0x80002, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', 0x81}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x4300}) 10:44:51 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x200) flock(r0, 0x2) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x10002000000005, 0x0) 10:44:51 executing program 1: r0 = socket$inet(0x2, 0x801, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000134000)={0x2, 0x3, @broadcast}, 0x10) connect$inet(r0, &(0x7f00000e5000)={0x2, 0x3, @loopback}, 0x10) socketpair$inet(0x2, 0x0, 0x9, &(0x7f0000000080)) connect$inet(r0, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x181800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000100)={0x4, 0x1, {0x2, 0x3, 0x6951, 0x3, 0x4}}) connect$inet(r0, &(0x7f00000dcff0)={0x2, 0x3, @loopback}, 0x10) connect(r0, &(0x7f0000000000)=@un=@abs, 0x80) 10:44:51 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f000018effc)=0x1c, 0x4) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f000066fff4)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) r2 = dup(r1) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000000)) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) [ 102.383379] binder: 7785:7789 got transaction with invalid offset (0, min 0 max 24) or object. 10:44:51 executing program 6: kexec_load(0x1000, 0xa, &(0x7f0000001740)=[{&(0x7f0000000000)="8808ccc0007c5cb13b09bcf161b510f75003f8649a4a5a82bba82a871e628f21eafbfa5db2eb7fd288e99d4dd7d9e6a1360b761d52f0eb9b4decad2fd1a5e0cb84e4408e6a923e2bc5d1198558bed699bdb401e726e7c009fefb18839d73ed6ec6f3b028a282033fd49916948f0ef6573250f033f075d8c124423ea3e128fe3d054d5b32d2969c9bb31e6c1b7b29cfe8e39d7d4c1bf4013b7e123dbf5b1a6df425f63b2d12d1ba27fa43bfa4594982ed00bb", 0xb2, 0x4, 0x80000000}, {&(0x7f0000000100)="9a2827f4dea2890f648386218721286fe757521e71fc08b2f99737e35dc0a266067eaaa842a24c4907cb109fbcc63bed1a811832b26701778c37bf2c3f29e5324b1143ab160997fbb88f98d06aee0ba466d2b3b624906dcdce23edbd5ed2051f3e79129d2ab2111e2f132034af932bc7a2092ce7bd43b1f245201c5bed3625432fa717dba67fcbf6733ec4d5085cc22cecf687dac565c79d429738332906116c6a9a7d11e547a837e99e91a24979bc7a470a8e2f1047dc44583745cef7e057d3220f850ebedd5f68cb79b57d9979a68c0f5f", 0xd2, 0x8, 0xffff}, {&(0x7f0000000200)="fefb880d6c02d4e5ee0a6152490eae2b04a7168b490181868be8779a6d4791bb1030464f3ead9eb0d15aed1870820926352d6664e5ac9cb2fe01e39b8adfd86fbbc8439695c43e67019417fb88fdc2db42b60307db359854fa9bcae7d8ea1012c636bada29aa6c4daca4f948cc73d06976c2c57f242ebb149ebbffc68bd51ecd99c4eaadc5a677f4acfe93d736bcca45b0a49640f6bb4fa8dc8afb98c0f02674eae48c8a299327a05ada7281fb60d93e36b96d9af12db8005f7dc05b03b053ad6bd3df74fe549bc6e2234e7ea1f5258abc2264bb9e75757f9202baa547bc2968db4c9b3106888dc2", 0xe8, 0x7fff, 0x1}, {&(0x7f0000000740)="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", 0x1000, 0x4, 0x7}, {&(0x7f0000000300)="143ecbac60420cb06a239ddac8fbafc09e79531668d837d38dea28ae339015a9725db57886d3dced037c0bbcb9cbc17160a2ec80c34f822c8897985c0bf436311bae73959e3cdf60345d1b8c7c2b658a1b7a1f1e4345f8ed064b18f6a0129de0ebe31eaf5769f38cfd3eb2d33177e98dda1e6820f1825eae038f7d85164501b408a95d3542a8c3e46909c930f02190b5eba48241fe62fa095a3d1b964ae89cc3bd79ed3d2c633fdf5866ab1e08004637c265c5", 0xb3, 0x40, 0x400000000000}, {&(0x7f00000003c0)="d9216f037357965815379a27c8a1bb45ed5a0d58d4d8b270ff5228653304ba667b07f0163660313e2522c364aeca2eb5e18ae42d64c98665b5f831b69dbecc23f0abaa51ee5c452ce2d698561f5f31e2d4137ac4b4eec00e8d5843334b98fde4c850f62edb2157321d571def8e24e98ed9315e12fe253a83ef", 0x79, 0x40, 0x1}, {&(0x7f0000000440)="b01c752fb171177642d93ebadcbde230affed9fc8ceb2c43e654e76d41daa3e692afc99b3e5b43ff9d086cdde0e5", 0x2e, 0x3, 0x10000}, {&(0x7f0000000480)="a309c41fffd35cbf8903d19c925c941101a64246d9c52542777298c6ad6cec3a6d326e0ff4303e1e895e075589d961ad86054029db78b9838fb5b4d514e23002e0098495ea4369f79fbf45b30d515f8d7acb102d3c4800ad70f287201073f07973841e1751ec6d8ab3655b52a191f72c14575447b1f3cdb93ce922c6a4b35c05b33afa43985472d664013c2f9133c0d70894418e6ecdba1ed5b7f48d1ec94ab4bb376b62c61fb9dbf49f982e9307a29fc3b85daf2f4ca22f784b5b657d4a8c2b22e55fe4026bc4406a5da7c56056f4f8528121cdd38e22ec9d6d49be242cb5", 0xdf, 0x1, 0x3}, {&(0x7f0000000580)="a1f83caccabc396b504678ad31d1bb5dfd2c5405b65d5381f3b0bcd2253f239d6bd2d3ebef6cd65f6659464c886bf51c95f708cdae0b07a69fe321a70d2340cef39efd50c9e70c58b07767fcfb7c57152a70a43674bd805cdd6e34b6d9b76b57c02c9e63ee019822d28ce244edd3e77cb605476816fbbdc2bc73d411a652c9dd611318d6fc1773ba72e61921ac2a8921fe4df8155e0be56a40bb9426095979d844e969fe67192242b67d5e6a916ff5e59a80b50c0b0ce1470b079925c7e3f2b8fc7f964964b6a4c2130b4315361e0b0359d29de8f983a98f", 0xd8, 0x2}, {&(0x7f0000000680)="93322b1710504a296a6720bd7221fa659183479fa3a36f7d13ff70f885f38da8f00700c8894a", 0x26, 0x2, 0x10000}], 0x2a0001) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x2081fc) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) signalfd(r1, &(0x7f0000001a40)={0x1}, 0x8) madvise(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x2) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f00000048c0)={{}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) recvfrom$unix(r1, &(0x7f00000018c0)=""/253, 0xfd, 0x40000100, &(0x7f00000019c0)=@file={0x0, './bus\x00'}, 0x6e) getsockname(r1, &(0x7f0000001800)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001880)=0x80) acct(&(0x7f00000006c0)='./bus\x00') madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 10:44:51 executing program 7: r0 = socket$packet(0x11, 0x400000003, 0x300) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2, 0xd9056224080f1aae) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f00000000c0)) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) sendto$inet6(r0, &(0x7f0000000280)="040005000500000000000000ffb25bc20900000000000000398d5375c5f73f2e55067d2780e99e33e3c2e7725f5861f7402810fadc5712f29508c008e265090000008f5972eaecff8b30ac32030e80fa91480fa3b472f77bccadd5d535f0c6c1c14c", 0x62, 0x0, &(0x7f0000000000)={0xa, 0x100200000800, 0x8000000000009}, 0x1c) [ 102.449885] binder: 7785:7789 transaction failed 29201/-22, size 24-8 line 3200 10:44:51 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000680)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000380)}}], 0x0, 0x0, &(0x7f00000007c0)}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x7f, 0x101800) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000040)=""/96) 10:44:51 executing program 3: r0 = socket$inet(0x2, 0x4, 0x7ff) recvmmsg(r0, &(0x7f0000001ec0)=[{{&(0x7f0000000000), 0x80, &(0x7f0000001100), 0x0, &(0x7f0000001140)=""/195, 0xc3, 0x3}}, {{&(0x7f0000001240)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000001340)=[{&(0x7f00000012c0)=""/81, 0x51}], 0x1, &(0x7f0000001380)=""/165, 0xa5, 0x73c00835}, 0x8}, {{&(0x7f0000001440)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000001880)=[{&(0x7f00000014c0)=""/253, 0xfd}, {&(0x7f00000015c0)=""/22, 0x16}, {&(0x7f0000001600)=""/252, 0xfc}, {&(0x7f0000001700)=""/250, 0xfa}, {&(0x7f0000001800)=""/2, 0x2}, {&(0x7f0000001840)=""/56, 0x38}], 0x6, &(0x7f00000018c0)=""/116, 0x74, 0x2}, 0x3}, {{&(0x7f0000001940)=@nfc_llcp, 0x80, &(0x7f0000001e00)=[{&(0x7f00000019c0)=""/173, 0xad}, {&(0x7f0000001a80)=""/244, 0xf4}, {&(0x7f0000001b80)=""/182, 0xb6}, {&(0x7f0000001c40)=""/113, 0x71}, {&(0x7f0000001cc0)=""/180, 0xb4}, {&(0x7f0000001d80)=""/128, 0x80}], 0x6, &(0x7f0000001e40)=""/127, 0x7f, 0xffff}}], 0xd0, 0x4, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x2) setsockopt$inet6_buf(r2, 0x29, 0x7f, &(0x7f00000000c0)="9d687df27ee421cb158804e8fb6c86cac24f4e4ecaf101d37f", 0x19) connect$packet(r2, &(0x7f0000000100)={0x11, 0x9, r1, 0x1, 0x5, 0x6, @dev={[], 0x10}}, 0x14) [ 102.492066] binder: undelivered TRANSACTION_ERROR: 29201 10:44:51 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:51 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x8000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={'ip_vti0\x00', 0x201e}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r0) 10:44:51 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setsockopt$inet_int(r0, 0x0, 0x21, &(0x7f0000000240), 0x4) sendto$inet(r0, &(0x7f0000c95ffd), 0x1c00, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x2, 0x2e8, [0x20001280, 0x0, 0x0, 0x200012b0, 0x20001508], 0x0, &(0x7f0000000080), &(0x7f0000001280)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x18, 0xed7c, 'teql0\x00', 'bcsh0\x00', 'tunl0\x00', 'veth1_to_bridge\x00', @broadcast, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], @remote, [0xff, 0x0, 0x0, 0x0, 0xff], 0x100, 0x158, 0x188, [@physdev={'physdev\x00', 0x6c, {{'gretap0\x00', {0xff}, 'dummy0\x00', {0xff}, 0x4, 0x7}}}]}, [@common=@AUDIT={'AUDIT\x00', 0x4}, @arpreply={'arpreply\x00', 0xc, {{@remote, 0xfffffffffffffffd}}}]}, @snat={'snat\x00', 0xc, {{@remote, 0xffffffffffffffff}}}}, {{{0x0, 0x0, 0x809b, 'teql0\x00', 'syzkaller0\x00', 'gretap0\x00', 'veth0_to_team\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0x0, 0xff], @local, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x70, 0x70, 0xa0}}, @snat={'snat\x00', 0xc, {{@local, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0x338) finit_module(r0, &(0x7f0000000040)="6370757365742e3a2f9400", 0x1) getcwd(&(0x7f0000000280)=""/4096, 0x1000) [ 102.559122] binder: 7829:7830 got new transaction with bad transaction stack, transaction 114 has target 7829:0 [ 102.582088] binder: 7829:7830 transaction failed 29201/-71, size 0-0 line 3041 10:44:51 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x400445a0, &(0x7f0000013000)) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000012000/0x3000)=nil, 0x3000}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000000c0)="84e7d198b0b0ab96de46158926dc1051", 0x10) close(r0) write$binfmt_script(r2, &(0x7f0000000100)={'#! ', './file0', [{0x20, '/dev/input/event#\x00'}, {0x20, '/dev/input/event#\x00'}, {0x20, "766d6e657431fe2f6574683176626f786e65743174727573746564"}, {}, {0x20, '+[em1'}], 0xa, "986794cacee62b62ee8185d29239f6ba2cc1c51da1ca8c5bb08f9a00d74e9e9d6817734bbc88183daa8687762c7961fadd8b71c6a83c99bbf65bf7c42e3dbef43abd0f9fdec7ff1d13e729e1ee5c362e8722e8bb73220cecf709d6e2d5"}, 0xb1) [ 102.598602] binder_alloc: binder_alloc_mmap_handler: 7829 20001000-20004000 already mapped failed -16 [ 102.631393] binder: BINDER_SET_CONTEXT_MGR already set [ 102.654359] binder: BINDER_SET_CONTEXT_MGR already set 10:44:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000), 0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000002500)=[{{&(0x7f0000002040)=@generic, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000002440)=""/73, 0x49}}], 0x1, 0x0, &(0x7f0000002640)) pwritev(0xffffffffffffffff, &(0x7f0000001400), 0x31f, 0x0) 10:44:51 executing program 3: syz_open_procfs(0x0, &(0x7f0000000040)='attr/fscreate\x00') openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x20000, 0x0) socket(0x200, 0x0, 0x0) [ 102.660741] binder: 7829:7830 ioctl 40046207 0 returned -16 [ 102.680079] binder: 7838:7841 ioctl 40046207 0 returned -16 [ 102.685946] binder_alloc: 7829: binder_alloc_buf, no vma [ 102.707357] binder: BINDER_SET_CONTEXT_MGR already set [ 102.716892] binder: 7838:7850 transaction failed 29189/-3, size 24-8 line 3137 [ 102.731020] binder: 7836:7849 ioctl 40046207 0 returned -16 [ 102.736985] binder_alloc: 7829: binder_alloc_buf, no vma [ 102.744402] binder: 7836:7854 transaction failed 29189/-3, size 24-8 line 3137 [ 102.752901] device ip_vti0 entered promiscuous mode 10:44:51 executing program 1: r0 = epoll_create1(0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x6000, 0x0) openat$cgroup_ro(r1, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x0, 0x0) r2 = epoll_create1(0x0) r3 = socket(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000000)={0xfffffffe8000201f}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)) [ 102.759268] device ip_vti0 left promiscuous mode [ 102.773047] binder: undelivered TRANSACTION_ERROR: 29189 [ 102.790850] FAULT_FLAG_ALLOW_RETRY missing 30 [ 102.795532] FAULT_FLAG_ALLOW_RETRY missing 30 10:44:51 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000001c0)={&(0x7f0000000180), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x4, 0x800000000a, 0xfffffffffffffff9, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x104004}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r2, 0x420, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x6c}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}]}, 0x4c}}, 0x20000000) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') [ 102.807498] CPU: 0 PID: 7860 Comm: syz-executor7 Not tainted 4.4.146-g1396226 #15 [ 102.815129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 102.821989] binder_alloc: 7829: binder_alloc_buf, no vma [ 102.822061] binder: 7829:7830 transaction failed 29189/-3, size 0-0 line 3137 [ 102.837189] 0000000000000000 0cce421315a5d65a ffff8800b00f7690 ffffffff81e1292d [ 102.845252] ffff8800b47a2d80 ffff8800b00f7818 1ffff1001601eedf 0000000000000002 [ 102.853342] 0000000000000000 ffff8800b00f7840 ffffffff81c157f4 ffffffff812312c0 10:44:51 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000680)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000380)}}], 0x0, 0x0, &(0x7f00000007c0)}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x7f, 0x101800) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000040)=""/96) [ 102.861423] Call Trace: [ 102.864032] [] dump_stack+0xc1/0x124 [ 102.869391] [] handle_userfault.cold.18+0x22/0x27 [ 102.875884] [] ? debug_check_no_locks_freed+0x210/0x210 [ 102.882895] [] ? userfaultfd_ioctl+0x2090/0x2090 [ 102.889297] [] ? handle_mm_fault+0xb58/0x30b0 [ 102.895435] [] ? handle_mm_fault+0x2680/0x30b0 [ 102.901670] [] handle_mm_fault+0x269a/0x30b0 10:44:51 executing program 1: mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) r0 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x72109c5fef5d34d3) r1 = gettid() fcntl$setown(r0, 0x8, r1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x2000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000012c0)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f00000013c0)=0xe8) getpeername$packet(0xffffffffffffffff, &(0x7f0000004980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000049c0)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000005f80)={0x0, @loopback, @loopback}, &(0x7f0000005fc0)=0xc) r6 = dup2(r0, r0) sendmmsg(r2, &(0x7f000000ecc0)=[{{&(0x7f0000001400)=@can={0x1d, r3}, 0x80, &(0x7f0000003740)=[{&(0x7f0000001480)="32c36e77fd27f4b36e3f83000a5830d467e42a3eadd9003c1e168301a41c55269912e1ba04d11eaa81b04da4d8bf3133431892a8bb04a50c61e59c4474c6c3a45047c4f36b4bf1c5c221", 0x4a}, {&(0x7f0000001500)="b40ccaa2bde41deceb9dae41cd75702846ea9459dd3ed2c9cace864d43482417af46303aa37d70dbbbdc832640d508fe7b33271206b9465995d943fe2b31153c78e80c54f531dabbadf9fb07fb4511fe0920bca99735272eb49e99f82bb6ce", 0x5f}, {&(0x7f0000001580)="797409a6f01de7bf5c499e783ac54f2ec342c5d6feb2c733203d69ff27b082fbb8b311fd44c8edee84ef19e39417330ae45ba9041b51279c56ce5f1b1c00424ad1a975b8b6da39ee9470888fc37a9d0f8432b48fbf76e6a5938a10eba148c1bf4e9f9641239870de981395a9092bf2f90d95757ed3fe547dcb16381f199309631db52db86e3ee11df1982844af140ca658f6a592d984de7cb7c7f018cb699ae0b3", 0xa1}, {&(0x7f0000001640)="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", 0x1000}, {&(0x7f0000002640)="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", 0x1000}, {&(0x7f0000003640)="324c9ba89079668001c6f250da425fc40a29a979fa42fc9e81f675a99ea3f9eeb2a003", 0x23}, {&(0x7f0000003680)="f8478eaa3cc5b019493b44c2dee01bdbfb770cf023001487e76d62b4984641d4b8c0b7bedb660b5a4554aaf5642070b829f2b46678778cfa4b0b6532e76bb78a6510aa825d8bb7dd1d023b62e71f453f72dc9f1f265f8474edc4e88089e42e7e967a175a29658d2409cfe85cf16cd061f53b5f590199234c0c84cc0d9ff61980a12c8c956ad74236d30780b074dfd0ba9ee6a8b00c2c03646bb560cec8d89f3e8252f2d47342c528f93d94cedf", 0xad}], 0x7, &(0x7f0000003780)=[{0xac, 0x1ff, 0x0, "1e0cd8f662a513f04eead792ebd9c880bcb9d0c48c025f66237fa2ec2bc95bfe4d07feb4657446cfc9c56845b6433827c96d7701d8485ca4677393b851d7786b455899d2ebdf1615865bdb63486ed6b28a4ec3fffe633f5cf6782f9a8ec877319f5d6ceee902ed8729d3c96273dcd038305dbe46fd48b8b0aeed44728b4621b7bb7e71d8d4752d661292aac0575457ce53df26ef1d7b53dc0fbb34df97874b"}, {0x100c, 0x111, 0x5, "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"}], 0x10b8, 0x40}, 0x481}, {{0x0, 0x0, &(0x7f0000004840), 0x0, &(0x7f0000004880)=[{0x48, 0x117, 0x4, "4b8e7bc65a0dca6f4d7a199d7bb040390d8f85373853fc4d8d51e4e4349177928d73e7de8a619c781dfa47e7f07b149f1fee757a304724e9be297c1b"}, {0x7c, 0x110, 0x0, "faa931af9469898045cdddaa130f681d2b293c8db8df4df3bae5d085bb04fa30f44136b79e569b9f16d4047bb6556724f9eba600f18f8f78d751ab8d683d2735b23e0bb8206af8c5c33567ca1cef87951a9026583dc98bc6ed1eae04ef61a3219d82eafded8c1a52ad38c1e14309dfbd"}], 0xc4, 0xc800}, 0x7e0}, {{&(0x7f0000004a00)=@xdp={0x2c, 0x4, r4, 0x6}, 0x80, &(0x7f0000005a80)=[{&(0x7f0000004a80)="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", 0x1000}], 0x1, &(0x7f0000005ac0)=[{0xe4, 0x0, 0x1, "de9b09cff1fba9d1fcd02507a7e14bca289096d9f58bce6bb694392fae835a49639e2fbad8c3b97a369adc78cf7996db06c3b5029fef2d3da36206d20e60e957f24924d2bbc2e4c05a0417cbf5ab04caf0bbc9654bb3e0c33e6dbfc8c1bdafa2844e9fecbd0a21d6c7fe6074c9a9bd2ceb2dd4f361f7828a18f9d8f9db09904b482b4045812bd643269d2a32336c5a513d311219a3f9fb0d733a5143e5730bbc9f4ee684329e3983ba8dbc4eb186e5919ce218da363deb3f2e2539f11175894851682cb3003b23f25fc1676b89c661e1e8477dc0c1649b17"}], 0xe4, 0x2000c000}, 0x100}, {{&(0x7f0000005bc0)=@rc={0x1f, {0x3ff, 0x9, 0x3ea, 0x80, 0x1, 0x7}, 0x4}, 0x80, &(0x7f0000005c40), 0x0, &(0x7f0000005c80)=[{0xd0, 0x11b, 0x1, "21a7fe4c40688f31a9dc77a92dbe539bd73472ca5464e56496429468ecc65f2d50527de211bd3f491b3efd46bee5106ec8a7925a26d2878f022b564983906463cbcaa30771f672a9997210a84a16f74d0f28a8c644e2673b435572fbbb0f67becd4d5c820d194605e0699d175e942064a33091c6a163a0618fd5be0c6783ebf543d233558190d8ed76b1e9e99562f9bef4ac77c05ef2921f181e2eca08f57409f44dc2fb3384bca82eb78148b661228512267ff6678fe3361ea34903ca2a27b8b5"}, {0x108, 0x102, 0xdb0, "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"}, {0x2c, 0x110, 0x400, "81948e808867d7fc75df6f44519eab284a7862220149127d655994295b9f"}], 0x204, 0x240088c0}}, {{&(0x7f0000006000)=@ll={0x11, 0x1b, r5, 0x1, 0x7ff, 0x6, @random="e5d9734051b0"}, 0x80, &(0x7f00000060c0)=[{&(0x7f0000006080)="1f59792f6d729e2b24b5c1bced5f34ab55c7aa376a1a2ea7d8b7150708820985964181306abfec5661cb30e5f9382c9d679d8264", 0x34}], 0x1, &(0x7f0000006100)=[{0xe4, 0x0, 0xffff, "1ffa96b37fd9b09d5ef83b05c617af666fbecec90cb74da523aff089941c32312554cd6440ee2d921ce515636ab0e0a321e0e02e7bae0acb1e84877ed1e45e088dc122da4005996d2393fa39a80d97f334ff2b10b5d173e2114af939ac36a332e60c231e3fa0126c7bf63a51c091d8d82d38fd156c873c0a813a2078dd855bcd9d1ea86289a6fca3fb855ebed036e7dd360287dd9b814a071f8adabccddc2392f19fe5fac2d433e0041efa4ae1ca5d15e9fb763f6a75d6bcfe0571e86feb2ad0da75a242fdc25968d691934a392bdb5b8cec1d604a"}, {0xcc, 0x199, 0x1, "67baf3e8d120e9067fbf078c1f7666d09b934d88fc57698cac36b5e05679ccfb945b76e1c0493d1cd1f0734d2216ceeaac1ee742fb6c59c04addbf116349a44c680da640bbbb3682a31689ae9b92ba90c678521288b39b9e7413427eb18bd49f9e8c318b568a6114a19fa947d6084cc35eeacd9e1976692b135303fd0f8d1a6cb0bd8bd36520a7449692db79f82b35a644a1565f135e0eceb99f1b6c65a891b4ee673dd06b7d3c8d1049c77e554fa21bdba0e2b0c5af3598150ec1a406"}, {0x14, 0x119, 0x7, "2a9b2aa9dc"}, {0x64, 0x11, 0x6, "62b3696cf5f6c0c139a16787a79e89e3d8f8be4817ef4dc880542b790315bae515af0f131913d0f4ddcbbcea92371c6ef40f6d5649aa8bd27147a8913deb9f5e9ebc18ba174e131e1b5436667f4d95efc121ea2526be"}, {0xc, 0x11, 0x80}, {0x10c, 0x11b, 0x1, "581ebd1366b02d16adaa126a662af4dbb6833c4d1973d13e8b25200f45dd14ebfa8664a97453e48198ad3fe0e54e0d398e268d988063a23b9f26a59c1cf603e277dec37e3b776ea431d96bb2647f4be835bd74d87988cf98ce2aae0eab1d7f020a858f83f12f442332244ffc10868871e36915479b8902c30be22e2686e211c5f61ca57c1ee9432fd1bd1b58983a4203c6a58860bf425024d4d6e08047b3f807fbc9a38ec3deaaa3bdb688989a67d9649d1326c6ee5a33dec0f574a9951e72d4db8cbcb78811356ed1e949b7d113cd44c82db86675149948131787af6563e78d8cffbfd33fa3db1205f9187034054faca6eac26babbf275c0e96a9f0b7"}, {0x3c, 0x0, 0x1f, "3813a6de03f868ad5ea22960494a2fc6a814e36fe024e85b96aa6c0e6d027a50fe93b24085acadb07f480f6001de"}, {0x14, 0x11e, 0x80000001, "4de2bd7f742c1273"}], 0x390, 0x4008005}, 0x8}, {{&(0x7f00000064c0)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e23, @rand_addr=0x8}, 0x0, 0x4, 0x1, 0x3}}, 0x80, &(0x7f0000007800)=[{&(0x7f0000006540)="babff288155683d4bb2ae5b2a6f2c05178ed806787e7b6b04fd8ac7c5a3da85128b7edd2ad6443d922ed412b1cc8cbdbe491442ae744288773caf838394e74be3d8266bda94a7c928d4ffaaac9bdfbb50bea6ca0afc3f1f02c549b493f719108562287a80fd109c5ba51119b8df64b2fcd9a6469083e4b5b5e2a44e2bd68e87b867949c73eab41080883a9c0e3fae47a101e6fb6a1787033e755b789b6254636090acb85bd919e11b2ce94bc132dfd1437d082ec04074f7d34f885892fed43d5545d4e", 0xc3}, {&(0x7f0000006640)="59ee2ebae04341e939cebe72866e18abe664945a52f9f0e38238332816a365ee9798cf671e27b552a8cde0070c6b1b0e65667654884f951db44d8cae76cf75393dca085246fb31b51d4d7242f536612d4630ee871faa319bdcaf3529f27650ff561165bffbf52c7f65c238d41ae632f5df8893d53274c99dff32e123801b46edf32656aefaac0afe306a1a3a5b6ba9ed7a0898eb258a3dae8f638315cb2dbdc4849ad171730894513a3a35", 0xab}, {&(0x7f0000006700)="01324ccd87925e54b9eb002a0a71f6bbf49848c834c004f448b7", 0x1a}, {&(0x7f0000006740)="f5a4320e8b7e360f958ac0da977704ab289de1863309feb590f7e24cb89f164225060948aea698c28ab681e6d3e368b917bf80e390a948129df96dec3cea5bf08ea66f0c88e1abe36d940cbdd8abee48dcf81fbbd19ede53fa48043b77e14c7a2ca44296191eb5ed2b4b0feccbd565d1f1dc4108ea4cadc6b3f50cae3a9937b2b955d990334fe965503dd00432dce1b77c6e312d8a6f1baf37", 0x99}, {&(0x7f0000006800)="832775e692b7ad65bda282c3aeaeebaf6061a373fac25a500ca7b4eb2c542b945d1799ef9b15274df67eb9ea50a9505bdccd527aadf324d92de48100714fc3c3d1d831306ee1db719532b4a47b34eaaa1def62d2fa8c63ec84ecae968fa6a97f9f7fd5b3cc06ee033ae5dcdd7150a78afd2c82062c57322699cc34c9b2a222dabb846035ff6033874e26e2cdf0a5bc4c7e96f811a84b7c2990f1bd78a2884408938260dab4e8e45ae54d98e8936dfb23b2cff952446b1420b9d4c78dedec7618b67dbca5d3c3ec168f7173174f87e29ebcc42d0793b035af0d1cd6af53fedd19a4a8de0263e528acc3f4ee53fc44e8ed92386a877a880eb3280ddfa9d8930a1d13461b15af75eef5a04535558043926fb6740bf71ec5e0c40923911a5c7e150ad616b34c40dbc966bc28b61952a3a9b3e3f2354e3d28c39d1c6bb7f7b458fb97570e8370c820361a108e11c83160d6e26d02740de0a40acee8e5310ab6e0f3e59f4a6fc79432607dd2b7e18d1e227cdcf3691cd5e5ad296f1e81d2d003c8fea137072ab27046918e9243baafd14a8d4864f832f0988275feb50ceb6667c216305413e7334bdde2962ac23d8bff34e799c27e828be426dfa04e7d95601c5472ef6b6a869347e89d23ab380ad72277ac50af2e8167cd70a5734a987028a7476a2f575cdb6f2d99b97e5db4b499390a80c4ec8811971922660c3d6d3d01f0f5b1d42a7c945a1521f81a3c0ab9c2166da0c7f6bf3564f1a894a9c63e248950c848cde697c08524c30776dd28d87e45a78e01d5ab7c843d1d1cd25108d57dcd47af58ee7d29e807930153d16b551c48f22800c933ef3aec365263a47faac0ff4d1d5a0ae2e806c58d0ac8706ba9e0b8a18f534643bd6989ef836d2586a20ee24ab7d9f48d59b8ea0dfa1fedd86b23795423db6f8981d8a69520be7213432cff950d5e219528a1d174f40b3069b0679b516c341fb6e5e1bfaec96783d959cd32a9b3861897324f91d32919862b5a06b1c4de701ced70b2ea7a0f36f0e001bd79445267d50f6480c801f8f39a2c6660cd6493e9c54f6d83bba9c34a6f1b2c57217e1313464c62c580fe7c4b59d555d16fec1863a324cfd8c52a41b1ef0397a6af8d855745b2640827debf241b3955741032670492149f533659721593b4d72c7d23c132aab3addf6a66cae0c7405bd2c1b53542905804a47016462a61b0142eb0520f3b46e5499fb0da2bf2a9dad42a0492bdd3cf16da07cca65113ec0185055eceac666af98ffe4553563f96dca0f5b18bfd9acb29db96e0adaa168ba4cf1f7b75eb7be9f2fa49f9dcb0314d84db758cd6787a6195a30845dc42ddf0627467488e360b7e8f7e7a14202c9c1e656677f0ae86a7f0356c17fcbb42479a58fb5eceaf651577479fe1f97c08a179ab8fd307078db6600800fd033dffadff8693ce22e494e8fcad82b9619d40ed0daca62b8b0917d592c9d847eb5f9ecbc9ee367225e1dc84ce29b717c0634dece9fadbb91e5bdd3485c61a3279cc5209bd8b62fdbb7b61be606d84ccedefd7d0c9474e1137fde7adbabb4bc701d072074d04414bc8738a5fbf25b219c5683082341b732b9b501a06fa7b493b474584f130ce6425f34c60a36b8f9cfecad41d2f3cc480cbadeccf8111e67dcd1b6126a7476b596d3c61e3eb17f511e329e2017b82e0c11811a375b5aed92ce67f4b4055b0f744dbc3a930835d4a9b689550a5b34899432d09d8e27d4f3bf8076a978d5123c17349c1a7887a3549ee5624f6db301f067b75b3f28ad59ff92045761a3a7bb5bdd78f681566ae4c88a9d272f8493017b0ee2e208e18b49fe28f41672a05c3c7667ad9d43f8f306dc418691b147924f623f5e7360452f8713edca191d0993eccebb755fe70c3b344ea47e23372c0ec3623eb2f614f64270dcdf13f76b13a47ebf59e70904b102dfa1d81cbc57e1bcbdda3d5b038e0d72d838efd7843061a2086ccc122b821a760b95f8470190669a02b864274575a51f2b70ae3d2583ce9b0e313f1fdee6e1f7a35bfc5e733e642ede8a33e1b2372a474441b9982f96f0d632c970f716b21dfbc9af778dcc1ab3dea2f8522486e807c00993751680fe76491b4ce9fa1fbb53e4c76de3a3d5bc0d7232ec3b625d4bf4253a410dfcf04cf0d66d5ef25f7eb9f6d73c799421922274b88ff91326365e090c743f091efaeb5d53a928c1836bd579a97431d5da36194c724282dde6b885be77f66d9db14255e5c147df282c4969c1ac940111fd61e9a7113e95cbebf5c8c2723bb44e74b203320bf72c9f20e14f63761d48f8652ddb79f48f492202a79a720a2f7d2646c2b6449e4ba1315fa921465a5573aa5bedc91f2031a6185e07d96552d27d392fd3d6c10262b8d84fdf0b918b1603bd7d1c2300cb2f8312529fad51bda368087c7b8a6ed90f129ef068eaed16399f7355eeb2af2427e9fc3aac18528da37e333c021469c6eb893aa1595ce23e88f36351b3c2c16a056359a4c8ecb375033f4ac569f81681e8f8731f387b8ab5949b6f409b2054b8f479607379b60541c4df480c265637cfb80446cf60c9663ed11df59273f54681ed4d5b9210ea0d4e9d33c24c73beee6eae59c77a01210d51cc85430000b008e7c1af96736b72171bac2615796f0581526d1c0eb26d4c33a74ac651759436963387060f8129c2daad64363d1ee7de27b66ae6e6bf56a08d88e670f3c8081a4894008b0fb4cffe40dd6e334dc378e76d0bfefd2b78450414a9a176eb6c670fd58464a17bde54c54e0257f517a4e82fd77f8a796a1b5740b0316f7b74c4d46d471cb34c7d927e765db55f1966f7965054b780e40c17ccb69e6e13abb544cc78be6c8f4fb08026fe6c0dbf273088d5825dcfab3483288baae456d10f8dcdf3ce26f50c1cda255662b2cef75e238ee78bf697727560773597b1cee14c5d1416da24dab81a28ddb768996fd246347680ea3e61dec7377b5d74dec4bc80d7a8088121214ae9cc24b6054647a2da82435d01867636c40f152d525943954057b79bd3be115b704245107648a7e643d55c60e19a3f6c48897b56937c4edf3a00632834407a4938dd9f35051883e68422461dedeb907328b7491e819ad4de8020afad10089b91bad911310786506dfffbad6f990bdcb0f3c25d2dc84b5b5b506a4580621456b8ac8c11a5d95aefae95c2477b190b92cde4ac26c3b4c0a339097554b0b580965da93203f1321960db5ccb991b9d7b1115679f8f8bc87982117ca45cbbe65d7d42bd9712c5ed6887cee97c094862a72617ab1d43103378ec5e6ab4124196b02e716ea01c9f9815554d24786f3880a11063f2cb722a99a7126335a7e839424433c5286bf06800e9d1f3f74631902f031a19cdf9049030baead3021b1d63b1ba8affa74788cb32941e12dd4c8e0dc3937615924fa31e76b519c5ebd64951a773777cc7daaa6563e21972a18684221692eed410a2eec04266d519299432f626d5ad3019ac12bb359d370af3f98fb53e7265a7a07d465d74aec116cf658fd405dc82d2c084ec2ff865af91886f5213b8187f4d9f6bd2b233523150a26dca61b3bd0c2dcda96c1504823ed686ccee3c2db17f838911871805dbcae7c6b93298f111efb28145e454d9dad18729219c7c8355d7f6bcd8ee53862ec7f333ae50668f7f5a62854d8bb96df8d805b5624a72a64e41028d866cd32df62901027944e7e6ed30601482f26096a75649a3be8d7a9701ef785840f7ab4c67cae181b549ffc7241f36f3e35f6742ffb249069102a96a493d00601e7d107d01856a7ff1636832ae4b903e60070ba7e6876ffa6267339019424eb443381f34289eaa5a499f054337edd8a03568e4168a09afab7ce1448cad1c714f2ed9751479227762ab8553734fcde5f9f58dcca61c9514fc1bc6717e4538db6c3beb8f9c4744d9a1fb8796642261b81b3ea0e7dac738c582e87bb84d543034d506c7edafe960bf07367a0e34b9533a6c9a528e9e6639bad36428cba4cdd2d374ee63bc90352631f17ea1fe90da0e8472ce8eb7be65cd6dc57b196972223d4f0eac01307a0121d17b1a230ff33cabea4481779efc9ec185dc9b84d26307f297ffa40ebaea18b8c2fdf07a63c80444ad0f6b16e503c426a46d8b0dac96ed3bba4436f382e02f5e1cfd28d2995988ca9ba07cae0525d24eb9d2ef29e40943024e5ba09a90a2ca49cd17e2aba987d3ee7abaa4ab3909162c85f08be9be086d51abc1a4c5a9aef16d1bcab8d092ff179cb3b8c7fa0c19229c0fc3f0a958e6e96560359d040471cfe270fb457d7de4e5b200b616914f71b5b9e660261dae295306726b0a0ee35eafe06259b5eea28dfa8449e0f7c1fd7ae6f454a886ebb870aa6103a7a2f7c73d6f8cf92063483ea827a09368610e5c124fc6be9143825a070017adf04580c219ffb67fcb8fecdd267e400ae86ab105b2a8e7b8ae694640b162c0250bcb998d7ab776884f0f3475f442ba83dde3f8e895cbafe1f48a6cfdb9affb0185fdce9d03dbc76a42bdf19d2bf15fb0f7cff0617bb835137f479b78d7aa9b48121d5fdbfb5ed3512327c700c149b316c14e1121380913ed8b956d32ab775c36bba24ff7a0c3f7be4b3a8ba0d21794559f110c0899514a63accd624aec2c17fcd225e8670d9e8d1bf12758ebf7328993d03c98bbfb093fece352890d8737246643ee25d5680050143fff3b60e6072ba6a7c3ee157d585f8bdf3afa7b4faa6bd368ba7cd666ad6e66f03dea5f084e905af9356f9de3c2747914f6d4b673d1031cdf43f0aaa3671978aa28e9f68c68c832dca13d5b9942b5396847483a2156b32501a05860ef1357eeef28778afa149d2cbf6e5a27e3b47259ec77dad943c7263f723190991dcbfd91509678fdc7c8347dc004a58cf2d1398ce55c2763bf69306e5cf8f06a62ad99a02da2478eb57384efc999ac4c6accd4afeca7fa2a08c3d1a2bad0090b39f0dc01edf6093546f0245ba1c29753cbc768554958e7229e1dd1d89c82a3ec37e76e379c8f56cbd3a6c7c869802b0e495c48600b1b1b622ef970d5446add4b8634c647df8efc00d165a1df1aef172eeb9496409019ad43ce47b2fd4b6d6d8d16da742a44bfddf992dc6e14ab62b6860902bd2257a986d1486daed5f7fd49e15dd6436fce8274c9ac35e1b923708362606d5d79aec7d7034982eb234ceb948c0b79b50eff56e9d634b590942cd39dc347e3780075dad0e8256b1844dfa725878760ada2bd34a67300e46a8ea0709db2d8e47a9ee4e2e0800def6634b350d6cf7ca941051cc2394de20f6418d91dfeb3135a56481963e308e1859890ab63272703e14523bf212dfe7cc357bf86b3b8aed6e9d2c08c5ae3b2d541f1aa59706fab2f8321ab033af61313edcec9a88cf41fa46d0aed7f28083e666eeee9d5c96c165d2cad6b87d22becabd2104223658c15449a2241dd3cb1a7882dac5d816ad6b7e2e342e18b2bba8f6b629d420e577606ee514e20e7b6faba25aac9404a83c9c414962eae59a0858e13c1f17f1280b934fa8dc326c2478ffbf0c0ac25974945fb62b0719d68da28bd1a652982f72af101e45b059439f9c239709099095e99ba0470a64a683e5039d936c5c6018a4f45194a0be9c2a991eb1a5403f139c2912b4129f26d14c7ced97ce8c62242d5e0ac600221e2b94c54fc5a94a52475b9218eedd67b39457090eeed1d8ea257ff059b0adb863b319b89fa71b59302c9f1275cd66ad47b23570558bb8b19bfc1befefd527c691007072aaea57c444c2bb298f766cd4e1d2", 0x1000}], 0x5, 0x0, 0x0, 0x4000}, 0x7}, {{&(0x7f0000007840)=@rc={0x1f, {0x2, 0x9, 0x1, 0x6, 0x0, 0x40}, 0x22a0}, 0x80, &(0x7f0000009e00)=[{&(0x7f00000078c0)="a624e489d3d3b39c4b233bdfe4c88daa04e72de60fd7332c0658213206cf629c96512b47794a745e9efdc3f79c0c592a5be48616192afb714ae783180090101a7161df6f4cd5274f064b807dc58755a4417f36505eeb5346c051fb3072dd89211b5318246e59bbe0ec43092ff9d7ba8451e5b874035bd14aa46038bae777c0bec9ed212ffd3e96f2e6a7ca7e9c720e200363b21103539415946f4d6d14e7baf104189145835c3820f248d227b8938f86631fd0b561011a34a9eda35cad563601647855", 0xc3}, {&(0x7f00000079c0)="14e631295ce6a0bcd6e2cd9307880b4e06d2549b15c0ab12386368c62df98434a8bfa2baaa919b828558bbb41707908083d1b9ecadb47afd8e1286b2ba9473a9956d2be8fc3de25b0f65bc7208552366bf6d3b6c8d1e82af93a0802b87cd94d5fd748fc2c8bef3fddc88dfbf551be9697d6caab65f520c9ac12a2df6765c09f0df03111eb666b24d2ea8c2d61a57959920f60cc766b96692a796d014ed2190fdf2effb835d9345935dc224297334", 0xae}, {&(0x7f0000007a80)="864ae4ec8092b20b2b43defd51a4c57ec5b446df031764c1014e4d6055bfc782956e09a2f6c5102ef5b6adbd26fbbc1a94e87eb035b658d1bb6aa0f5a2abfda1e374dc14", 0x44}, {&(0x7f0000007b00)="72e654bd28a514c410f5749e44475dff42827fa3b2eefb46e2ccd341453cef5c09bfe86aa81c59b1d35d9561646c8af2275ea78f6c77b4ffd26e5a28b0fb6b5749ff359e105b5b3360c0ad22e32eba1461c2b0c482db3e72450fa6b05d1abe2403745b80d8675d5f1a68287b97cae2f9f263811b9deb9762ed49c185acb01f35f210c67ec0ff83a023c2b62e9071c2bfb4165bc5a9941500d7d285c1069d08df5b66d6f14fe7baa42a694cbd412f02469e2f1f529bb741d33067311ef654a48f9914f6fa597555bbae9fb8e4e9e1af772ebf65569ec38467bef07a36ff", 0xdd}, {&(0x7f0000007c00)="1c17f4d21bc0ae40c40b9da9e5745523748a98839af82cf37759a86ddba9cfac6529355bdc86f40dc619575dc4611f1e73d649a0d90e0e5d89c76cc7bf42a47f17e7ba433d6d9f102b442163c527ec066ef97bcd086e0ccf6bb527f2aaf6d3b9f7070f", 0x63}, {&(0x7f0000007c80)="948409f9822fa77a1bf8cd930fdc8fbc022f2b109462dbe2cbd0d116c1b8f8b129fa31a8205af6d7d9b9015ee1da572814dff068ad203a7d16ac8b8d0c2bc7eae2cae41b97960963405641bbb878688232d8061321a6936f1b3d253dbd4329e178632989a96c3fb0aa02daeb3a6acb9364573dde0ae9d78829ce4e84f631d09f7d2385d5a92edcc1e1be13988d769dd5b9ae903f252b0c62", 0x98}, {&(0x7f0000007d40)="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", 0x1000}, {&(0x7f0000008d40)="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", 0x1000}, {&(0x7f0000009d40)="72dc76648e1a2d5ac89cb42e5bec0c0d3e4bff6a6b399cc6620d4b1751609a458830416b1781831e8a19d2c9ad7cdc32fa68db4f0fb7ffb7f06b73f865d7b4440f61f1a91daeab0781653c0b665ef449c076b9949def905bfd1d5ecb18ec212bca203fdb0d25ff4b2cbb85129ab69724a6b71666894deaa9b63f4aca0fc2f5fb06efe1f500b92208f132a89c580a92d55bfc6be1951b4172d4748e489eefb8f1cf839e883faa07efc090c4", 0xab}], 0x9, &(0x7f0000009e80)=[{0x4c, 0x10d, 0x5, "821a122c9281054ca976cceb7c84c354e54c0731db16469005275c4cff154c61bb0ae787e7f28c16d23f6a31b9e5d42988534ba7ab9a94392e89871979de2d"}], 0x4c, 0x4000}, 0x8}, {{0x0, 0x0, &(0x7f000000a040)=[{&(0x7f0000009f00)="7c566b975b86f047fa819a51262a2138f76fb805938339b005daeff5035af31d649c8de41fcdf9ac049a75feafb7eebae24083bd6820a3859ac13d276a314906898c30a94caf884b3066bdf959d4e2830bb74ad1682c2f779866c09ab414fe124bd2b386b91069d1332f00a270ed50", 0x6f}, {&(0x7f0000009f80)="7dc9785a896cc1839b4444f9d852fec1f71b3abc2297231fa9adc5ac64cef37f70ca7a76dc879881abc5562e1cf2f07e730d88d4a4303e483f17ceb68d3e6cbe04066a6f9d31620fdced2bb89034cce0ce8a90b09c4c6d69c0a735d8569987b73c8adf50164fb7b56943d3", 0x6b}, {&(0x7f000000a000)="bc6e030d0086de15e2cca23dc434d64e600b39a14c089aabeb530218c58a7dc2512cfc14c3c4df037aa2ab5dbc8b61", 0x2f}], 0x3, &(0x7f000000a080)=[{0x58, 0x117, 0x6, "7acbc7fc73b5e61e321d4fd3e74a7513b1b2e47c2a059fc081bbbe41fc648537adbe35f2667b0931e914cb5efa3ad912fbf96e2184cb6a9e661347bf2e340b6be2a14cbf805560811b"}, {0xcc, 0x1ff, 0x8, "213d5d4a3c1fc056d7ccde7e4752020b33d895ace8e1f9dea7f6db5664f2c1d50b4c669c472af1bbda888f92a1129d61a8de557119e82921e309fdbdb62bb52266b2663808ab7865002e5ba70b2fbbd7b8088cfedf14906fe95d1e94ef87e150b5db83f63513de9a4603adb38bb6f7cd51a07699328a99721f40ea5e059cdd9204186a6eef95a12088b740308663248e3f2f8fd72a8bb3a29aace4c79b4f7e25adc2bf0c4ea204611d8dcf3edec1d80ae6399bd55582b7023dfd56365fc05ccc"}, {0xe0, 0x100, 0x80000001, "5d063ec8b6bc943758a556e54694480c31d142f7647ced95830f166119c55fa5f30fd3527d910122d535c199380728b6a6bd08cb6df877c51887af5d25468cd2034297757ade86d9eb2f5cedba03db66537df609f1c61519186a51019c6342b8187dcf230adc95d9974694d979070bef4c8cfbe77fe4b3969f43811458997b6fbe586a40b435b1851abfc2bce236335d5c497b1d0c3c238556763a9dfc306cf863d9e960334e76d39e31f13676be65ac5a78371bc6c1d1104113a967200ba0ebb0b433b9d082838b78f7c43ad25fd0f758"}, {0x50, 0x0, 0x3, "9a28e504aa88d1f253e0b2f18d91499dff3f51ce874d7673b61771919d7625b4a59906b9f36699095ef0183b27dd036c129360d7800d9692dc8c28c2f53683613f01"}], 0x254, 0x4000}, 0x81}, {{0x0, 0x0, &(0x7f000000c6c0)=[{&(0x7f000000a300)="47ee1adcbc71bc617f7043bf2eead2e13751b3905c6272307184043f23de95f735d782456fbba084b62613a07f7d465ba7ee9de91e88121411b3e96f6ccf46022d36affbd63c55b412ecf1a8d546333faa8d5308ae1376d1", 0x58}, {&(0x7f000000a380)="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", 0x1000}, {&(0x7f000000b380)="78dca0008e4a27afda648ec29b06773336b2031563f59559e72385ce01fad69fb4cdc7b489aa7e4ef3f4b88c37e42dbb3fab175484c830d9d30c5855df485c2201595e9c124bef4dc5", 0x49}, {&(0x7f000000b400)="e0d3f16bfac311a0707c69a32bb4994ad0d2d7e0e8348b0624649c16f99eb6561db9c50417208e89748d6f67f5b5b6dd0d4cf0d71e689fef57c9cfc7ad39bd0385fdde11891ab3d785f376c5db0b30afad8dd1ef2e0cabda284ff0f2427e6e683f60ef959aa1c59ff0f65b6ad43e8592d094172cd475986271025d0b00b405b5926c52ccf6f06fa3fe568951a10a8f85d6a637682b6139f5d434d4e172b35b26da0345d53763e9b5b229f242ca2c6ff6cdeb41f9c84bc6412794ca2547", 0xbd}, {&(0x7f000000b4c0)="bec07c9179b914f20211", 0xa}, {&(0x7f000000b500)="b8d8323947027872077013a4626a42373f5851abe227", 0x16}, {&(0x7f000000b540)="70281dfb5c81f36e823dbcb275904d2f3b2367578907b77b61932c70182aa84ba0e2b43807b1d9fc6eef4a1c5b0b2801f05572a0b76339f2159814c19b515f0a48a8e812904c00af8d219274ec6a70b450aed55641c81a02d386e86a55be025044cdb39d4874c05eb34b82bb1a807a", 0x6f}, {&(0x7f000000b5c0)="d70908b8fc04d5542ff3e1ae589b348c1331a9a13a38a2520761d70a715a1e7a6703c0d02cb2ea7c52381c5e581c1b7f2dd4f11d6c9b050299cf608b69e3f8342421632ba47027144c7a6469d238f3653240dc0b43ddaf050f9d98722e28e50c993eff7c57ef940c4de0bdb81e73d9a5a2b71b2e109bfb919758ed22820c617b789550303189de65063102543d15e0e21cc710f8affb8f56e93992f46c93a075a33e68f5bf68c9035d2e2fe4e5b016816b99c794e1b961cbba529e8991251a9419be543996fc00ab4953d9dff712a035270775b61b59ce4bfdbb998f9d4b36a9fd75b0c61af77ffe80154b01234e9e708f5aedabc6904adba79240c035", 0xfd}, {&(0x7f000000b6c0)="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", 0x1000}], 0x9, &(0x7f000000c740)=[{0xac, 0x117, 0x6, "0bc8033c12d817f875f2370d3c4231640d38f1b102d0799b17d5b665db33c58ad25901c33918ebec12297b8df1f2b2b0f0f3061e11417d246f56f1be3eb2a4f9d9daa769d3a7f42cd0844d13b53f26e4941086e3bac992a5b1fe882dd50022fc52fcdf1722a4c7f2640b535541d8340f52e5047448d2f7a97e3d1369e9ae493d68fab4d692a32c117b2325947ada5fe8f9ac907a6b9ec9bb74cb603089a64e"}, {0x100c, 0x139, 0x3ff, "18dbe4611f09caf60a34b8bf91fcd23353090bc1e2a1641f870aedcc2d9f873f3138a65d3f0b3a196a2c0660c196c64b72c0e19ced468f6aa443570201b7055cfda73c02cfd12eba6cd355a5bf6d14431284b89963f13d9651ac99a5e9d390e51946989f4a5b7df613f13edee245706e1df0ccfc87e7f1d02e5ac4e0730fd440b80c65972be76a6dd28cec162e93210762518f0b5954d8b561412ae9e9fa6f867c178e62d9b6657f9df7427f45160186965090ce3a4ed06b5605a24f79c1ee5eace7173e861e6ffcde3220423581fda8eb4bfe18c851eb83ae559a69435421cf224d9f8ad53d3279484fd4e6e03ea91fcab3ffdf1a9ad1e144257c66b2d49843b88c1e42666bc2f92b875bdadf4e6718beafb95ebb264ebda251f6d7100629b14972fb95bd297c1a97a522d50d2193688826a9041223f6081acd41691bd114f23fe0ad55f94469d24ba6206df2df39740dbbb62f114d7954d69b40156992f12d13f4d8a23df99a60b04d8e9725fde91951c37b1882ae9ffdc83139276a852ba59384f594082844073e71cfc28ac48841cf909d8051727c353868d6581b16d46424b947c450ffc028557e62d089f4c373c38fefa55b4ea99d8cda3973e3534ff23898200a6a512387d0323868da4b1af022e500022a9847ea89d024d3f3257404c6fd8c7c3c38a7dc41ed083e631c2fc839f6f493b7a5c27f8dfe8ffbcb754e3003857d9185cb985a0e19269e6305d1785bdb30e534ca77164e6d5f90ea32336b8d0681b007396462278cff40147801dd87db1528a6394ca2ae117f82bd06ce24e3f4c472bf86ee5739a4748f258251dadaac502c169503e827e1467a23cd7c524ff21dd538db4484888f5ad2113cc644371eb6ba43a118216a9d19bb36ad3c1a52f720ba24bdc80a29cf91fbbe30d09e667520e2db9792e94a9673d17a902186e80b936d517f2ce8098d0d96c52f59e7e8dc53aab58e9612d5ef234ca319dadcba5b2e3901d845bc8fcbb91cb853c26ce20495a8f15b2251e29512ac77af8cd3fc877d2ce99405197776e65366142cd6555608e5d115ee081e6cd6f138d2a3abe0c758cd4a1c245f76cf7dd412ccfbe4809453b7df5636ef5fb069a06051647d607219b603a4c756486faf9411e8da1fb68c1f4a01f2bd12b7c1f643953648242a2766eb65d8b395f283f85fc0672699d8e2d3de0c9168337db50b2764bec60a66f8eeb698d98e2e6f83bc26c98be53b010950d8fc8799e7d57f666bd93bee0fb632b473e3c0bbafc68d7226ddca16c541fcfc32dd1bc6e2d86a38adcdd323107f13ca1a27446ade8f6b0365b1b3052f429f3ba4bacbd3038449a27728b75d6ddcc17e90a450ee465f648749498d332b9f3574b1e7a1d50eeec8f323a1e4f955f1d7989ed0356360c2b1589d7100f05b639a07cf9f65c93d814ece02693b7850909c1b59e4913d4487803c60e6fc45663bcf6db31cf4bab139af43602861bf347da09ebd0803dd0721981944eb7a4286636074434f4a8f51266d42a2ba86eca11d43095c83a9ceffffbfff5960c4ff811a1fbb1d9027574094817ec4d40f97291e557458aaa5eb764ca3546e2c353621e596de238110efdd9bcf14a658fcf6734183ba571161eac073d5c07be4da1876ebcc5a5bac30636ac1450f2f2daceff9b9056fbcb9cc72ff874cfa5e301eadfebccf40e1af2a2c92bfd6e627322d0555215f747480ff4f5b93df1bb4b3eefb948c927bc231bd7259e4791fbef686a88623bff0996eb0abffdd80c3b15472835fca12ba7336631eaef73683d22e9287d967f707584ecc4ed3cb8fe49431c322612de347d1e77aa41333aacde07ac1d800c269086e8c61b1497df3ccfcb3eacda138124890192a55bf9d344590f3784e3e0de08d5ed7556406c70dc0a8b6e65d41f82528da7172b2ec6bd6b1382c0370df4973ec063ab587cd1011569090d0f417bd720c54aee1944b27b643b4bf90b29694fe4de2c84966384c4b64258f321cadff61cebc4ace74a1826a1855b12cff439d51b7c0335fc655edb9a5d0965345c7db8de37c4d21ffefb592735e1cf72913f6ab86d9ba3e599c167cfcafb21869075e713871fb1ae624dbf94bf4efa2feb2c740055f83ed6c39e657a0fd880c4be98220f1cdb43492836a162e918478820273952ce1b8a041ae1afa9c348634c1c978a29bc22422cfd31c6d060c4b8e30fe23ab74eb21d6c10377baf4166daeed7735371af00f62709f1270166de1ad40bf78d1b119c67c8b1871f5d2b691e4d3b2d914af2cc3a192e654960f2ae42f37edde137e0d6bafb6396da8379834726aabaeb62709faf467c17d54727ef24f0471b85c3014578ce9b6e440fa2f2f021615f708419c2c579a8da68eed1eac7cd439f009be526518ce746181c37919b0ad1a62596f48e88ba05ad66c7d7adf2e7d641c4fe68e2139974c930a00a09353180eaad5cf07e9aa1bf56b2a2354aca98cab8b18c84ad2e5db5afa9b752fcf0818e97e219bb28fe6572e7ff687cda9770505eef1dcaa9a26341ad064745eaf32763fd1b476db0ce43301840022cf628c89e229ed161cc1737e63b33821bafb4623bc919e6ea5a8942fa67d9778ea9c1634103725d089a1ba614d1fd6216be0640d0ad13345e77ce42b824ef4c8014818bd3ba9e06dfef812745e75382a40ee079164d125e4668810c3e9e43b88b1590c722d14b724b46bab3ee4b449502669bff13d8400ed4a3fad4b86ea29d0eea87d4024f6856619f1915d619a6737a40409becc5e19e32fc41705394a12b9ef7d898ff78e4f5fa9fe6f59b16b2dfd0e4bd4453bd728a3956fb684be03d6bec03046eaac0df7b7985050e26840cf4fb287c8568c0c59d4121947875dc413f0265bcf4bb53b36e2cf12553b45e724c61d21ef3fe193d26d29cb9a16e9ac44c39155d9466ceb578e301a6580497e80b0d4e7cb93e753625f1236a898595dfe2c115cfaf9eafd97fdf19315cd16fd1d9401f7e8ffb73029f385bd333ecb644d67a6e36267809ffe15fd88be93457dea294e350ae135dd45a29120c8e691cb7b4575cf1e06b4104511063c4a133ba4d851f65f4684a7642fa83316db4a5054cbb732d3a97f6a0f3519b3c6cbc5bc7cbcdf61d27c2f1939a5b12abb8477b1f7a9911cd43bf79ce0dd274fdf7a5173e282abee61e7353eadb559599e6531d705deabef5e4f45fd98073dfb21596c69fffd06eec2475ce1b54f94e4efeadd88f62dedfc2f5b024695caac3a2be7bbe8df888c0ad709e9ae0faa7fca5ab3af12b1659ea64c9e545b3079618f6363e6a9f4ace457e56ee7f041bb5f77da365aec73a1d45c7e74761f001cac31f8110292f4d22dfc1a74e3780c98498dd7ea444c0c84eb3e79fdedeea80dd38dacf14d0f30d9ac17d859a2383516da21e2bbbf18469fba8bdbbeec0b23f46164059f2b99c9ed3541bcf2db97537eebba9a6bf091d21dc2ed0c9457bccc35b849ee78296a2676369796e0b4519d541d9698f24d14b145be287a90b7d9faa6a4aa3d2fe2ecea21ea802366a0c9c2c543af5fa36435ae6a3304fad3154af5d16ac405dc4ae521560414af4f8dcafe85517ca86ddf5692d0ecae6b036b52661c6885754d4c77ef2ed2f205ed28606079fa7052312105fb99770994670077fd6e537d3ab3641b3faf73e97a91da2c83d40fd045e722ea80b26c159ecf1bf5e8f853b0c8bd9e9bbbc3545c25d4008378d52fc5797f6fc7a5e5f989cb652a1eaeee675ce213302b70d3a20d2eb8de80c016379f28c2dbfa53f46a01f01ec68d90c346f48763053d98f674a1576ea6406d8207980c9df88997f6ff913bb5ddd82e51707ed06781edaf671fbad50b4b88e5bfbb767d2d448db88d1d19fafd61544fb252a5542b37caffda94f3325cc6951e9d38c57223c1ae682f97ba9f2a1bb00ed4cb80fa73de090d0061934b7f7b7a799e0580a04f2c9fb0d888d7be2eba9c00173818476e295c137232bf2a9b1ca4f81846230aedfe4321814aa72efd89083e87c8daeba3a40387a687d9f0c9a5ad2d56c8f2e36b8b6afaeb9ed239c08f7234c1cf3129b15021e787a12f5cfab1d0447cdc439ba54695c8a9bf83b7271b964e24105bac34684e4f31efd192b51439c92db9c2109225e2910f79eeab82140ffa21a69a030f6ccfa6384b4f70d70f0849f03b212ae24f78df6d53f216ce8da75d19b4ffaa0f30ed5bc5f219061f2de97178de476914b48e729aa598b7c3f9f495b94d6768cb3c746664a4f6729c36966a29d4356014437d6ab9656fb11e67e98980013d649ebc8a9b9e7053ad7ac16f2efa8e65ebeb04b027d0ed6d27a23b47af32e7f3f8c9ba5316e6701fb7727f57f11daed00a9582dba2d19aac4fe174174b9dc28353ecd9e9650c016e0dcec64ccd8237287d50d8536ebbab82ad05139b7f981bcdce2d51acc1fe004d22c78a8df7863e789e0908e3f1d4350c32c74d17edad025290e81d36c39b9cc570e0887b0f4995628ccd3a64e7c73a8338932d11a81caaf37675ae659105f9f37f86ae98e30af2eb8125f9ed82134de91f8bcdf7019ca103dfc87d0b3c33c978c71651067c8cdf2d7f19d6d6d2554ebd7f303edcd8d8d5c15b9a40256114a7d3519544ba0bcc58762a43c59068d1669515392ac75ab11e5c996552dc74df5bbdde575fd56b91190edb5c2754809a30ac098a53f0c09e795fcd6dd8b317468ac379722b21076ba865203c5772e133006b1c19c7cf0a44c202fc426082b536c4cc08157793b4836235a7149b4218fcc6a198287ed5209902319c5b5ae653cf4ef601287f8c398418bb1cfbcd018549d6be7cdc648aa52f9e86e6c8661b55249360a84f6b463033d10c3f8f2c3fb70e42cbc2fae9c702d823800531d1c20a6ea12b4cde415b68700f8e5e01dfa8502fd733b30ef8e259b33b1c9dd247e1752342a9e4d05c1173dedf3ca9255d46b4fcb781a0e3ac9f2b8de78c61e7682507c126e072936a0709919ae554817cd134da02535665a53edcb1665c8597136cc8b421d66d244173b796d2483ee8de314ac7d1718b6cffbcef1f90c31d0b4a831973b436cb3674c4699fe6e37481fb4a4ebddf42877367c0da55d210305db1bdd7862a720853af31f9df7a23173fc0cb3b1aa676eb6ffe0013b6c1c6d4649f36e08950741b5a98adcfafffee1ca00c81b7413d76993d702fbe21771185d74ee3e8f6688e31fc3456a75300a91b69a309edefd0e2421d66b7e3f3b724f91978914bb97c4f998846b6493900a1d1de843f7db6f14e315f79c0f3843dddbcafada0a6517df9fb3e9cef68972bda26a5b538b5ab30747032e84abe75307025c65b21e151c12761295ebce8c1ef745a9b4b50ed42455e74a0a51224b484115a02e60dd72ece82d905fd8948ce9de8817e85967f159e40623a1b4210599ab211bcf41b6514409988dc737b49ce4c0fddf4e21cd86731336709124c9d3f61417db4a65c5ef69130d8cb2e728d33cbfd54f5ed1a8e3d1b3fac321a0ae2173b1389691c34aa96d784ce4a4569922cc49d23fcb820d1103659fe6f4b584c490ecc5cf55424c74105b7e8c45e789b6786984edc493017e86185a7f8cb3f9a6a56fcec7ceb583fb2bbd8f8b9b01a3b46295f39945b918e125a1578185e66504c6b9cfc2bc5d80fccacf377b1ecb3440b405ad989b133ea7d10f9d65fc8411f071d12a38cc10b5c490bd9c3dc78187d8f8270ff5105132f241c83224af061940c41f5a52b5d56bf8e6e913cb5fb0d823342e3123aaa373dae628290d2e756"}], 0x10b8, 0x3b73743b3de18c20}, 0x4}, {{&(0x7f000000d800)=@vsock={0x28, 0x0, 0x2711, @hyper}, 0x80, &(0x7f000000eb40)=[{&(0x7f000000d880)="02a8171c95e17c347c9e08315aadf7461ae9deff48a4c6d1101cde3824b5c3fa86db376149e7967d0a0a24f48f50946761b5ceb0148863eda6d2a0b56079fb689b66fc7c0863f0cd07348922f0e2a96d80d1938547018f7333b4f8322d824e5740a3e1a6848c2b508539cd6e77b7f6", 0x6f}, {&(0x7f000000d900)="21b6415b69d85729c51e148d6d3bac472673e528a648f7bac4d0fd0cfec3d8cb3c1ade86766f11c62e154f3b873d09ac7c194c424531e8e1abd4bc1dc531286d9a29520b41f50ab570951fb1397b4695affa2d2b4ef62a945c0b35b47b8977e251cdac74b60c68013a9b95ad13d42a6ada0cb0dd9ff1b675ee92bf10ff93c0db5189bba85dc02dc250ee685e11e1710115a5eb372fb5f8090a05", 0x9a}, {&(0x7f000000d9c0)="bb093391e4fad844f70adbf1645ff8a5b4494396072c235ebc446be434d162497fb7a9085d0a05e323ec930653d9c1dd11cf19fee1cb6df077c27f30b72b3b677236f083007a3d15903f63495002d632ced68b8a5939c4b9ae0ba2c0d1f35974", 0x60}, {&(0x7f000000da40)="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", 0x1000}, {&(0x7f000000ea40)="18d1cc6eec0ba002003d7139ffb63432f0cf7e37a7351be5ac63a11b707517203cadd0a4fb0ff99c9070298f08fc4844fbcef48e1478c39bac6312a3bac28ac7837962fa721f48b6", 0x48}, {&(0x7f000000eac0)="83879b4bcf010aafd4bbd3ae0dc218625b14e775f4e46945599ca22923b9a07114ed75584b7bb0b81760f7010c2e7de50f23e7a816dd39b58c5e59fbcb73dbb1b08e0285777f7abdd1962a4b450028", 0x4f}], 0x6, &(0x7f000000eb80)=[{0x2c, 0x0, 0x325f4e3d, "474f327b62f7eb4d2c9944c11d5ee0bc3a5e71e5853011afd228972891334e"}, {0x1c, 0x102, 0x5, "f7512593d2949260699ba83325"}, {0xdc, 0x10b, 0x6, "643782d18eb7bf5cbc26435e153f972281badb39d915a308f33656afd91f9c51a341774fb7900f76ffeacc61e4dba4d34dd13c9d0336f8f315c92a7c834133ec7d47e1924e069bdde76bfd5091899bbd500abe2c06cc4c0e5e2d6b3932f2408256434e2b078ac8d551259838002b9fc91e141ca8da45eb0e3c4410f61c1857c1ccbdf844e3ebf397c1c35cbb67e74c0ca41f1834acf8cc7cc45ce407f482211a2fec9fce6f677d3a854f75b089ad0e620887c2be2fb60c5767e02e96a53693e87eedc87050fae45ccea3dac1f5"}, {0x1c, 0x11f, 0x4, "322e8d09d0dd7580922e0f6e4cb9"}], 0x140, 0xc8c0}, 0xf0b4}], 0xa, 0x4890) rt_sigprocmask(0x0, &(0x7f0000000000)={0xbffffffffffffffe}, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x20) inotify_add_watch(r0, &(0x7f00007a7000)='./control\x00', 0xa4000960) r7 = open(&(0x7f00003f5000)='./control\x00', 0x0, 0x0) inotify_add_watch(r7, &(0x7f0000000040)='./control\x00', 0x20000e8) [ 102.907726] [] ? vm_insert_mixed+0x140/0x140 [ 102.913780] [] ? __do_page_fault+0x78a/0xa10 [ 102.915637] binder: BINDER_SET_CONTEXT_MGR already set [ 102.915645] binder: 7880:7882 ioctl 40046207 0 returned -16 [ 102.930800] [] ? vmacache_find+0x57/0x290 [ 102.936593] [] __do_page_fault+0x365/0xa10 [ 102.942321] binder_alloc: 7829: binder_alloc_buf, no vma [ 102.942551] binder: 7880:7882 transaction failed 29189/-3, size 0-0 line 3137 [ 102.955418] [] do_page_fault+0x27/0x30 10:44:52 executing program 4: r0 = socket(0xa, 0x1, 0x0) clock_nanosleep(0x0, 0x1, &(0x7f0000000000)={0x77359400}, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl(r0, 0x5, &(0x7f0000000100)="267045dec22fda6473dfac37cf32911b14") 10:44:52 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x14480) ftruncate(r1, 0x208200) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141041, 0x21000000000000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000005f00)={'filter\x00', 0x4}, 0x68) recvfrom(r1, &(0x7f0000000340)=""/233, 0xe9, 0x0, &(0x7f0000000140)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x80) write$selinux_access(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="73797374656d01003a6f626a6563745f723a64627573645f6574635f743a73302073797374326d5f753a73797374656d5f723a6b02006e06005f740ff92603000000749b1e658b5477d928c53383ae0bc6f2d6527b0c1a73ee886ecae41251b4c9da4458d7d8b56448044bb9ce4825879198725f9220608d3256fa8e0fc14003b1e0e2cbdc88f8879dbc522bcfbc2d7d817f8a77183cd0e335bac492ce9e62bbeb66d056d5828b5b01f7ebacdf1e69f664a6ec363fcb1f528de2dafc20412c148e2dc34d73a678219a6054600bb7fe712d5f63f646a9348f42c4b5f415c1bf2bd89509fbe5b6dc4fb172292a080109c8d7abfccd571953d74646ca01db58718f035278e4a1ab97502484386cd84038e9345e9704aacc04ce83918be2fd8ae3e7a46ac8df81ae10141e91d994bf76727a2b1d0afacb91d81fecdf5bff93f093fd6acf1e3dacda87f33b20b181af4750880f3433384779e5d30d9edc94e5794cf26c77a73204affb12863e38dc407a1a884306f1f28afc36657c1ca55293271c92a6af2f130bca16557cafe8f6ff8b93c017adf8d2180abc4b5dcc8505f411940b0321fa16f9db"], 0x42) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x8c1) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) [ 102.960973] [] page_fault+0x28/0x30 [ 102.966248] [] ? copy_user_generic_unrolled+0x9e/0xc0 [ 102.973081] [] ? evdev_ioctl_handler+0xace/0x17b0 [ 102.979573] [] ? save_stack_trace+0x26/0x50 [ 102.985543] [] ? evdev_event+0xc0/0xc0 [ 102.991078] [] ? selinux_file_ioctl+0x10a/0x590 [ 102.997391] [] ? selinux_capable+0x30/0x30 [ 103.003272] [] ? destroy_inode+0xb0/0x120 [ 103.009063] [] ? __fget+0x16f/0x3b0 [ 103.014331] [] ? __fget+0x47/0x3b0 [ 103.019528] [] ? evdev_ioctl_handler+0x17b0/0x17b0 [ 103.026105] [] evdev_ioctl_compat+0x29/0x30 [ 103.032073] [] compat_SyS_ioctl+0x484/0x2270 [ 103.038127] [] ? putname+0xdb/0x110 [ 103.043399] [] ? compat_SyS_ppoll+0x420/0x420 [ 103.049542] [] ? kmem_cache_free+0x2b4/0x340 [ 103.055592] [] ? putname+0xe0/0x110 10:44:52 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) [ 103.060856] [] ? compat_SyS_futex+0x1e1/0x2f0 [ 103.066987] [] ? compat_SyS_get_robust_list+0x310/0x310 [ 103.073996] [] ? vmacache_update+0xfe/0x130 [ 103.079964] [] ? do_fast_syscall_32+0xdb/0x8b0 [ 103.086187] [] ? compat_SyS_ppoll+0x420/0x420 [ 103.092326] [] do_fast_syscall_32+0x324/0x8b0 [ 103.098480] [] sysenter_flags_fixed+0xd/0x1a [ 103.122890] CPU: 0 PID: 7865 Comm: syz-executor7 Not tainted 4.4.146-g1396226 #15 [ 103.130525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 103.140117] 0000000000000000 5ac321c0eb3ae6d0 ffff8800a3d67950 ffffffff81e1292d [ 103.148183] ffff8800b47a2d80 ffff8800a3d67ad8 1ffff100147acf37[ 103.153265] binder: undelivered TRANSACTION_ERROR: 29189 [ 103.153742] binder: undelivered TRANSACTION_ERROR: 29189 [ 103.165195] 0000000000000002 [ 103.168755] 0000000000000000 ffff8800a3d67b00 ffffffff81c157f4 ffffffff812312c0 [ 103.176808] Call Trace: [ 103.179387] [] dump_stack+0xc1/0x124 [ 103.184755] [] handle_userfault.cold.18+0x22/0x27 [ 103.191258] [] ? debug_check_no_locks_freed+0x210/0x210 [ 103.198264] [] ? userfaultfd_ioctl+0x2090/0x2090 [ 103.204663] [] ? handle_mm_fault+0xb58/0x30b0 [ 103.210800] [] ? handle_mm_fault+0x2680/0x30b0 [ 103.217039] [] handle_mm_fault+0x269a/0x30b0 [ 103.223091] [] ? debug_check_no_locks_freed+0x210/0x210 [ 103.230096] [] ? vm_insert_mixed+0x140/0x140 [ 103.236164] [] ? __do_page_fault+0x78a/0xa10 [ 103.242214] [] ? vmacache_find+0x57/0x290 [ 103.248018] [] __do_page_fault+0x365/0xa10 [ 103.253909] [] do_page_fault+0x27/0x30 [ 103.259454] [] page_fault+0x28/0x30 [ 103.264773] [] ? copy_user_generic_unrolled+0x86/0xc0 10:44:52 executing program 5: clock_gettime(0x0, &(0x7f0000000040)) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1000082) keyctl$describe(0x6, 0x0, &(0x7f0000000240)=""/235, 0xeb) r1 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getgid() write$FUSE_ENTRY(r1, &(0x7f0000000380)={0x90, 0xffffffffffffffda, 0x4, {0x4, 0x0, 0x80000000, 0x7fffffff, 0x1, 0x401, {0x4, 0xfffffffffffff049, 0x4, 0x6, 0x3, 0x6, 0x2e1, 0x9, 0x1f, 0x4, 0x1, r2, r3, 0x401, 0x8}}}, 0x90) flock(r1, 0x6) syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x10000, 0x200) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$LOOP_CLR_FD(r0, 0x4c01) 10:44:52 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendto$inet(r0, &(0x7f0000000180), 0x0, 0x20000000, &(0x7f0000e68000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) shutdown(r1, 0x2) [ 103.271610] [] ? compat_SyS_sigaltstack+0xdb/0x4d0 [ 103.278184] [] ? __save_altstack+0x1f0/0x1f0 [ 103.284350] [] ? do_fast_syscall_32+0xdb/0x8b0 [ 103.290584] [] ? __save_altstack+0x1f0/0x1f0 [ 103.296633] [] do_fast_syscall_32+0x324/0x8b0 [ 103.302763] [] sysenter_flags_fixed+0xd/0x1a 10:44:52 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000040)=0x81) getsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) 10:44:52 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x88) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="61ed32194446c6e0f6104507297766bcba3cbfb461f6e6d4c77bced787451660a84b85f63499434309f4148cfa9a7ae7a1568e9a563d459c9ccdec67ec6ab9b2c2cc91e4154632f6fa57d6d3d785dbbbf4c73f476f06d4ed548d7b55805bc6e6f207b5", 0x63, 0x4000000, &(0x7f0000000140)={0xa, 0x4e21, 0x5, @mcast1, 0x6}, 0x1c) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040), &(0x7f0000000100)=0x4) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000000)=0xb235, 0x4) sendto$inet6(r0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180), 0x1c) 10:44:52 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) [ 103.321836] binder: BINDER_SET_CONTEXT_MGR already set [ 103.342883] binder: 7895:7902 ioctl 40046207 0 returned -16 [ 103.350322] binder: undelivered TRANSACTION_ERROR: 29189 [ 103.355871] binder: send failed reply for transaction 114 to 7829:7830 [ 103.356521] binder: 7895:7906 transaction failed 29189/-22, size 24-8 line 3014 [ 103.382189] blk_update_request: 250 callbacks suppressed [ 103.387678] blk_update_request: I/O error, dev loop0, sector 2048 [ 103.393976] blk_update_request: I/O error, dev loop0, sector 2303 10:44:52 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') lseek(r0, 0x0, 0x3) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x2, 0x0) inotify_init1(0x80800) [ 103.490569] binder: undelivered TRANSACTION_ERROR: 29189 [ 103.500911] binder: 7919:7921 got transaction with invalid offset (0, min 0 max 24) or object. [ 103.525695] binder: undelivered TRANSACTION_COMPLETE [ 103.538005] binder: 7919:7921 transaction failed 29201/-22, size 24-8 line 3200 [ 103.546508] binder: undelivered TRANSACTION_ERROR: 29201 [ 103.554497] binder: undelivered TRANSACTION_ERROR: 29189 [ 103.563696] binder: undelivered TRANSACTION_ERROR: 29201 [ 103.631328] FAULT_FLAG_ALLOW_RETRY missing 30 [ 103.635892] FAULT_FLAG_ALLOW_RETRY missing 30 [ 103.641036] CPU: 0 PID: 7860 Comm: syz-executor7 Not tainted 4.4.146-g1396226 #15 [ 103.648665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 103.658009] 0000000000000000 0cce421315a5d65a ffff8800b00f7690 ffffffff81e1292d [ 103.666063] ffff8800b5c7ef00 ffff8800b00f7818 1ffff1001601eedf 0000000000000002 [ 103.674131] 0000000000000000 ffff8800b00f7840 ffffffff81c157f4 ffffffff812312c0 [ 103.682194] Call Trace: [ 103.684775] [] dump_stack+0xc1/0x124 [ 103.690132] [] handle_userfault.cold.18+0x22/0x27 [ 103.696619] [] ? debug_check_no_locks_freed+0x210/0x210 [ 103.703643] [] ? userfaultfd_ioctl+0x2090/0x2090 [ 103.710054] [] ? handle_mm_fault+0xb58/0x30b0 [ 103.716192] [] ? handle_mm_fault+0x2680/0x30b0 [ 103.722413] [] handle_mm_fault+0x269a/0x30b0 [ 103.728472] [] ? vm_insert_mixed+0x140/0x140 [ 103.734527] [] ? __do_page_fault+0x78a/0xa10 [ 103.740580] [] ? vmacache_find+0x57/0x290 [ 103.746369] [] __do_page_fault+0x365/0xa10 [ 103.752245] [] do_page_fault+0x27/0x30 [ 103.757778] [] page_fault+0x28/0x30 [ 103.763066] [] ? copy_user_generic_unrolled+0x9e/0xc0 [ 103.769898] [] ? evdev_ioctl_handler+0xace/0x17b0 [ 103.776382] [] ? save_stack_trace+0x26/0x50 [ 103.782358] [] ? evdev_event+0xc0/0xc0 [ 103.787891] [] ? selinux_file_ioctl+0x10a/0x590 [ 103.794364] [] ? selinux_capable+0x30/0x30 [ 103.800259] [] ? destroy_inode+0xb0/0x120 [ 103.806047] [] ? __fget+0x16f/0x3b0 [ 103.811316] [] ? __fget+0x47/0x3b0 [ 103.816502] [] ? evdev_ioctl_handler+0x17b0/0x17b0 [ 103.823075] [] evdev_ioctl_compat+0x29/0x30 [ 103.829040] [] compat_SyS_ioctl+0x484/0x2270 [ 103.835102] [] ? putname+0xdb/0x110 [ 103.840371] [] ? compat_SyS_ppoll+0x420/0x420 [ 103.846506] [] ? kmem_cache_free+0x2b4/0x340 [ 103.852560] [] ? putname+0xe0/0x110 [ 103.857834] [] ? compat_SyS_futex+0x1e1/0x2f0 [ 103.863972] [] ? compat_SyS_get_robust_list+0x310/0x310 [ 103.870980] [] ? do_fast_syscall_32+0xdb/0x8b0 [ 103.877205] [] ? compat_SyS_ppoll+0x420/0x420 [ 103.883340] [] do_fast_syscall_32+0x324/0x8b0 [ 103.889479] [] sysenter_flags_fixed+0xd/0x1a [ 103.900647] CPU: 0 PID: 7865 Comm: syz-executor7 Not tainted 4.4.146-g1396226 #15 [ 103.908277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 103.917626] 0000000000000000 5ac321c0eb3ae6d0 ffff8800a3d67950 ffffffff81e1292d [ 103.925680] ffff8800b5c7ef00 ffff8800a3d67ad8 1ffff100147acf37 0000000000000002 [ 103.933744] 0000000000000000 ffff8800a3d67b00 ffffffff81c157f4 ffffffff812312c0 [ 103.941796] Call Trace: [ 103.944377] [] dump_stack+0xc1/0x124 [ 103.949745] [] handle_userfault.cold.18+0x22/0x27 [ 103.956470] [] ? debug_check_no_locks_freed+0x210/0x210 [ 103.963513] [] ? userfaultfd_ioctl+0x2090/0x2090 [ 103.970076] [] ? futex_lock_pi_atomic+0x2b0/0x2b0 [ 103.976576] [] ? handle_mm_fault+0xb58/0x30b0 [ 103.982726] [] ? handle_mm_fault+0x2680/0x30b0 [ 103.988950] [] handle_mm_fault+0x269a/0x30b0 [ 103.994999] [] ? vm_insert_mixed+0x140/0x140 [ 104.001049] [] ? __do_page_fault+0x78a/0xa10 [ 104.007105] [] ? vmacache_find+0x57/0x290 [ 104.012898] [] __do_page_fault+0x365/0xa10 [ 104.018797] [] do_page_fault+0x27/0x30 [ 104.024333] [] page_fault+0x28/0x30 [ 104.029608] [] ? copy_user_generic_unrolled+0x86/0xc0 [ 104.036434] [] ? compat_SyS_sigaltstack+0xdb/0x4d0 [ 104.043022] [] ? __save_altstack+0x1f0/0x1f0 [ 104.049067] [] ? compat_SyS_get_robust_list+0x310/0x310 [ 104.056063] [] ? SyS_read+0x1c0/0x1c0 [ 104.061699] [] ? do_fast_syscall_32+0xdb/0x8b0 [ 104.067921] [] ? __save_altstack+0x1f0/0x1f0 [ 104.073961] [] do_fast_syscall_32+0x324/0x8b0 [ 104.080089] [] sysenter_flags_fixed+0xd/0x1a 10:44:53 executing program 7: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000800)={'lo\x00', &(0x7f0000000700)=ANY=[@ANYBLOB="1600000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]}) 10:44:53 executing program 6: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x4000, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000040)) getrandom(&(0x7f0000000080)=""/44, 0xfd30, 0x0) mq_timedreceive(r0, &(0x7f0000000180)=""/140, 0x8c, 0x5, &(0x7f00000000c0)={0x77359400}) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000100)={{0x32, @rand_addr=0x8, 0x4e21, 0x3, 'rr\x00', 0x4, 0x6, 0x71}, {@rand_addr=0x5, 0x4e24, 0x4, 0x7, 0x7, 0x7}}, 0x44) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x10, r0, 0x0) ioctl$sock_netdev_private(r0, 0x89fc, &(0x7f0000000280)="b536f158d5453d25a9d6222d0bfb2e3e132196c9f1e2562146af04ce9b4827aa5abe78b7bdda73788b6bce8f361e907dd7c6b7e0de57ce8a4b8ef8686f59df2070c44be5a95b2b7dec4dc78dcdb8a9905575bb05c5ba72b7a402295b43202c4aea34ef52b5f858f38b21ad989b0ffa4b095a0ce3cfbe57c2d239c590d8bc7847ab0a27fef3977fa206f4127a95cf69fe73edd323203e") fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000240)=0x7) 10:44:53 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x88) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="61ed32194446c6e0f6104507297766bcba3cbfb461f6e6d4c77bced787451660a84b85f63499434309f4148cfa9a7ae7a1568e9a563d459c9ccdec67ec6ab9b2c2cc91e4154632f6fa57d6d3d785dbbbf4c73f476f06d4ed548d7b55805bc6e6f207b5", 0x63, 0x4000000, &(0x7f0000000140)={0xa, 0x4e21, 0x5, @mcast1, 0x6}, 0x1c) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040), &(0x7f0000000100)=0x4) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000000)=0xb235, 0x4) sendto$inet6(r0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180), 0x1c) 10:44:53 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) capget(&(0x7f0000000240), &(0x7f0000000280)) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x62002, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xffffffffffffffda, 0x4}, 0x10) 10:44:53 executing program 5: clock_gettime(0x0, &(0x7f0000000040)) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1000082) keyctl$describe(0x6, 0x0, &(0x7f0000000240)=""/235, 0xeb) r1 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getgid() write$FUSE_ENTRY(r1, &(0x7f0000000380)={0x90, 0xffffffffffffffda, 0x4, {0x4, 0x0, 0x80000000, 0x7fffffff, 0x1, 0x401, {0x4, 0xfffffffffffff049, 0x4, 0x6, 0x3, 0x6, 0x2e1, 0x9, 0x1f, 0x4, 0x1, r2, r3, 0x401, 0x8}}}, 0x90) flock(r1, 0x6) syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x10000, 0x200) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$LOOP_CLR_FD(r0, 0x4c01) 10:44:53 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a6273"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000280)={0x3b, @multicast1, 0x4e23, 0x2, 'lblcr\x00', 0x19, 0x5, 0x45}, 0x2c) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000e00), 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x24}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@local, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xe8) write$P9_RREMOVE(r0, &(0x7f0000000200)={0x7, 0x7b, 0x2}, 0x7) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x10040, 0x0) getsockname$inet6(r2, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000001c0)=0x1c) 10:44:53 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x200000088) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x27f1}, 0x1c) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0xf}}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x56}, 0x1c) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e23}, 0x1c) 10:44:53 executing program 7: r0 = open(&(0x7f0000000140)='./bus\x00', 0x40, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000100)="000000008c00000001000000008000", 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) sendfile(r1, r1, 0x0, 0x5) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) 10:44:53 executing program 3: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x1, 0x0) pwritev(r0, &(0x7f0000001600)=[{&(0x7f0000001540)='W', 0x1}], 0x1, 0x0) fdatasync(r0) 10:44:53 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4e6546000000007d95c88c1612786908655d4e1d310e524467c8a1648dd3868400080033000000"], 0x2a) r1 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000180)="08957b7f61baf2ba1df9c7b171660e5792b0d52ce8588188956cf897b801d67dc1e18fc20a41bfde7f3c6222d2db4935491c8309f164a2513afa69107a7ac916f4a2eb373059a52079587f4c6f25c2a57c2db4fea2f9ad68a26199396b", 0x5d, 0xfffffffffffffffb) keyctl$read(0xb, r1, &(0x7f0000000200)=""/129, 0x81) readv(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/1, 0x36f}], 0x1) 10:44:53 executing program 1: r0 = socket(0xa, 0x1, 0x0) clone(0x8200, &(0x7f0000000140), &(0x7f00000002c0), &(0x7f0000000280), &(0x7f0000000200)) mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x3) execve(&(0x7f0000000740)='./file0\x00', &(0x7f0000000340), &(0x7f0000000100)) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='personality\x00') pread64(r1, &(0x7f0000001980)=""/4096, 0x3f0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x36, 0x3, 0x0, {0x5, 0x15, 0x0, '!vboxnet1usersecurity'}}, 0x36) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000280), 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x0, 0xb}, 0x8) [ 104.222262] binder: release 7947:7951 transaction 124 out, still active 10:44:53 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup2(r0, r0) ioctl$TUNSETGROUP(r1, 0x400454ce, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x3, @dev}, 0x1c) ustat(0x0, &(0x7f00000000c0)) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000140)={0x100000001, 0x101, 0x975}) 10:44:53 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) [ 104.279403] binder: unexpected work type, 4, not freed [ 104.284928] binder: undelivered TRANSACTION_COMPLETE [ 104.296544] blk_update_request: I/O error, dev loop0, sector 2048 [ 104.303237] blk_update_request: I/O error, dev loop0, sector 2303 10:44:53 executing program 7: link(&(0x7f0000001180)='./file0\x00', &(0x7f00000011c0)='./file0\x00') r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001280)='/selinux/checkreqprot\x00', 0x80, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80042407, &(0x7f0000001300)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00000010c0)={0x77359400}, 0x10) sendto$inet(r1, &(0x7f0000000440), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r1, &(0x7f00005c8000)="c3401c344654f3c7d9fe1ba48c8e399aa4eedc3d6bd8ebd65c856a45d61154adc2b2a976fbffffffffffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x81, &(0x7f0000e66000)={0x2, 0x0, @multicast2}, 0x10) recvmmsg(r1, &(0x7f0000002940)=[{{&(0x7f0000002200)=@hci, 0x80, &(0x7f0000002440)=[{&(0x7f0000002380)=""/133, 0x85}], 0x1, &(0x7f0000002480)=""/112, 0x70}}], 0x1, 0x0, &(0x7f0000002a80)={0x0, 0x989680}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001140)='/dev/rfkill\x00', 0x0, 0x0) write$FUSE_STATFS(r2, &(0x7f0000001200)={0x60, 0x0, 0x4, {{0x67d, 0x7, 0x1, 0x8, 0x6, 0xffffffffffffffff, 0xfffffffffffffffc, 0x29}}}, 0x60) recvmsg(r1, &(0x7f0000002780)={&(0x7f0000001040)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000002740)}, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/self/net/pfkey\x00', 0x20004, 0x0) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000001100)={0x80000004, 0x7, 0x9, 0x0, 0x3, 0xe00000000}) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) gettid() recvfrom(r1, &(0x7f0000000040)=""/4096, 0x1000, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r4 = gettid() tkill(r4, 0x16) [ 104.339688] binder: send failed reply for transaction 124, target dead 10:44:53 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x4, 0x0) ioctl$UFFDIO_COPY(r0, 0x40045565, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil}) ioctl$TIOCSTI(r0, 0x5412, 0x1d) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, 0x6, {0x7, 0x1b, 0xed, 0x1, 0x400, 0x3, 0x8, 0x3}}, 0x50) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000180)=""/132) fchdir(r0) 10:44:53 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) getsockname(r0, &(0x7f0000000180)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000200)=0x80) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) [ 104.395800] binder: 7980:7983 got transaction with invalid offset (0, min 0 max 24) or object. [ 104.456336] binder: 7980:7983 transaction failed 29201/-22, size 24-8 line 3200 [ 104.498806] binder: undelivered TRANSACTION_ERROR: 29201 10:44:53 executing program 6: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x4000, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000040)) getrandom(&(0x7f0000000080)=""/44, 0xfd30, 0x0) mq_timedreceive(r0, &(0x7f0000000180)=""/140, 0x8c, 0x5, &(0x7f00000000c0)={0x77359400}) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000100)={{0x32, @rand_addr=0x8, 0x4e21, 0x3, 'rr\x00', 0x4, 0x6, 0x71}, {@rand_addr=0x5, 0x4e24, 0x4, 0x7, 0x7, 0x7}}, 0x44) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x10, r0, 0x0) ioctl$sock_netdev_private(r0, 0x89fc, &(0x7f0000000280)="b536f158d5453d25a9d6222d0bfb2e3e132196c9f1e2562146af04ce9b4827aa5abe78b7bdda73788b6bce8f361e907dd7c6b7e0de57ce8a4b8ef8686f59df2070c44be5a95b2b7dec4dc78dcdb8a9905575bb05c5ba72b7a402295b43202c4aea34ef52b5f858f38b21ad989b0ffa4b095a0ce3cfbe57c2d239c590d8bc7847ab0a27fef3977fa206f4127a95cf69fe73edd323203e") fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000240)=0x7) 10:44:53 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:53 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x20001, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000140)={0x4e6, 0x10001, 0x3, 0x100000001, 0x3, 0x7}) epoll_create1(0x80000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x400) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000040)={{0x4, 0xfffffffc}, 0x1, 0x2fcd, 0x8, {0xa3a, 0x3}, 0xc, 0x200}) pselect6(0x2e7, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00000000c0), 0x8}) 10:44:53 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a45321, &(0x7f0000000040)={{0xc12, 0x544}, 'port1\x00', 0x80, 0x414, 0x866, 0x9, 0x2100000001, 0x4, 0x3, 0x0, 0x6, 0x38c2ea65}) 10:44:53 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'irlan0\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer\x00', 0x400000, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000004c0)=0x0) r3 = gettid() sendmsg$netlink(r1, &(0x7f0000000440)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbff, 0x2000}, 0xc, &(0x7f0000000400)=[{&(0x7f0000000140)={0x1dc, 0x2b, 0x400, 0x70bd2d, 0x25dfdbfd, "", [@generic="af1aabd4c6b6b710183ad6a8e9ab03a33541baf7da1f9eb38acc771e60b4c0399e451746eaf169e9598b2a102868abf05735c3cecb05d21a92ddc93db61e43c1f8fb1843d193f700db62f35d50147b2c10fee8f1ad96e4d69e5fe8f662b183472f891791949a22c67adc27f289aa458ba94a5b8d00a5dfabff5b8e15811787ff4240f6a62a3dd75544bbe9c957199b14b8ddb3733353222fe38335cd5bc97f59e40426a401b5398f2518e9604b2b683fdb391f3fdb000a3c4ef7cd4948dacdf77cb84bd4e942f1f7e48be0f7970ea46d18f00af56bb7d0d2e6a5e3a67c5f0d8e4353d210", @nested={0xbc, 0x53, [@typed={0x1c, 0x6e, @binary="386820a07c5e86014172c28107a2999ecc70cefb8dde"}, @typed={0xc, 0x16, @u64=0x10001}, @typed={0x8, 0x61, @pid=r2}, @generic="61c277e749f50093c79566b656bc48c892f6677b580606221361cdf253060fd3ff21dced3d7bf81295e93d736a3c688e6d4821edf441cce63258046d8bb8606b2f6d4bc52d413d9f56344620b35d08b2eca94b4c62430ded8ea85ac8dd68f55386fecfa2a49410807a9e2a4e006fdb33ab8bfb786982d82e", @generic="f40c", @typed={0xc, 0xd, @u64=0x3}]}, @typed={0x8, 0x33, @pid=r3}, @typed={0x24, 0x2b, @binary="ac6e1eadecacca27679de392c2a66b5f75c67db6c4ed5a9c6d36ce72be69"}]}, 0x1dc}, {&(0x7f0000000340)={0x94, 0x2a, 0x800, 0x70bd29, 0x25dfdbfc, "", [@generic="67ad17730ce4941dabbaaa5a980db74be9bd341eff85d30752c8b2506317cc728a3b0a15dead55bcad4ca6782533e5b66f9ddd43c89ed3", @typed={0x14, 0x76, @ipv6=@local}, @generic="fdfdee084e96bd9ed70321baa7c6d893fe56b6cebb7f9540169f7d22864867bfa17f0d44", @typed={0x14, 0x95, @ipv6=@local}]}, 0x94}], 0x2, 0x0, 0x0, 0x40}, 0x20000000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 10:44:53 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x800) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r2, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x2b}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x29}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x24000000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000340)=""/47) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x8800, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000040)={0x0, @broadcast, 0x4e20, 0x1, 'dh\x00', 0x1, 0x6, 0x3f}, 0x2c) 10:44:53 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r0, 0x40000000000000) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sw_sync\x00', 0x4020c0, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000040)=0x7) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000140), 0x8) 10:44:53 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000200)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) fcntl$getflags(r0, 0x0) 10:44:53 executing program 4: r0 = dup(0xffffffffffffff9c) write$FUSE_GETXATTR(r0, &(0x7f0000000000)={0x18, 0x0, 0x1, {0x7}}, 0x18) unshare(0x400) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000080)) read$eventfd(r1, &(0x7f0000000140), 0x8) 10:44:53 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x4000, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f00000000c0)=0x5) ioctl$TUNDETACHFILTER(r1, 0x400854d6, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0bc5351, &(0x7f0000000240)) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) [ 104.670994] binder: 8017:8019 got transaction with invalid offset (0, min 0 max 24) or object. 10:44:53 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x214100, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000001340)={0x3, 0xc03, 0x0, 0x0, 0xf}) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) getdents64(0xffffffffffffffff, &(0x7f00000002c0)=""/4096, 0x1000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x22}]}, 0x10) getrlimit(0x0, &(0x7f0000000240)) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x80, 0x0) epoll_pwait(r3, &(0x7f0000000080)=[{}, {}, {}], 0x3, 0x2, &(0x7f00000000c0), 0x8) sendto$inet(r1, &(0x7f0000a88f88), 0x0, 0x20000000, &(0x7f0000e68000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect(r1, &(0x7f00000012c0)=@nl=@unspec, 0x80) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x4002, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000001c0)={0x0, 'gretap0\x00'}, 0x18) 10:44:53 executing program 7: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x19ebcefc) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000040)) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x2) poll(&(0x7f0000000080)=[{r1, 0x3040}], 0x7e, 0x80) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fallocate(r0, 0x31, 0x8d, 0x7) 10:44:53 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'irlan0\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer\x00', 0x400000, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000004c0)=0x0) r3 = gettid() sendmsg$netlink(r1, &(0x7f0000000440)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbff, 0x2000}, 0xc, &(0x7f0000000400)=[{&(0x7f0000000140)={0x1dc, 0x2b, 0x400, 0x70bd2d, 0x25dfdbfd, "", [@generic="af1aabd4c6b6b710183ad6a8e9ab03a33541baf7da1f9eb38acc771e60b4c0399e451746eaf169e9598b2a102868abf05735c3cecb05d21a92ddc93db61e43c1f8fb1843d193f700db62f35d50147b2c10fee8f1ad96e4d69e5fe8f662b183472f891791949a22c67adc27f289aa458ba94a5b8d00a5dfabff5b8e15811787ff4240f6a62a3dd75544bbe9c957199b14b8ddb3733353222fe38335cd5bc97f59e40426a401b5398f2518e9604b2b683fdb391f3fdb000a3c4ef7cd4948dacdf77cb84bd4e942f1f7e48be0f7970ea46d18f00af56bb7d0d2e6a5e3a67c5f0d8e4353d210", @nested={0xbc, 0x53, [@typed={0x1c, 0x6e, @binary="386820a07c5e86014172c28107a2999ecc70cefb8dde"}, @typed={0xc, 0x16, @u64=0x10001}, @typed={0x8, 0x61, @pid=r2}, @generic="61c277e749f50093c79566b656bc48c892f6677b580606221361cdf253060fd3ff21dced3d7bf81295e93d736a3c688e6d4821edf441cce63258046d8bb8606b2f6d4bc52d413d9f56344620b35d08b2eca94b4c62430ded8ea85ac8dd68f55386fecfa2a49410807a9e2a4e006fdb33ab8bfb786982d82e", @generic="f40c", @typed={0xc, 0xd, @u64=0x3}]}, @typed={0x8, 0x33, @pid=r3}, @typed={0x24, 0x2b, @binary="ac6e1eadecacca27679de392c2a66b5f75c67db6c4ed5a9c6d36ce72be69"}]}, 0x1dc}, {&(0x7f0000000340)={0x94, 0x2a, 0x800, 0x70bd29, 0x25dfdbfc, "", [@generic="67ad17730ce4941dabbaaa5a980db74be9bd341eff85d30752c8b2506317cc728a3b0a15dead55bcad4ca6782533e5b66f9ddd43c89ed3", @typed={0x14, 0x76, @ipv6=@local}, @generic="fdfdee084e96bd9ed70321baa7c6d893fe56b6cebb7f9540169f7d22864867bfa17f0d44", @typed={0x14, 0x95, @ipv6=@local}]}, 0x94}], 0x2, 0x0, 0x0, 0x40}, 0x20000000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 10:44:53 executing program 4: r0 = socket(0xf, 0x2, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) write(r0, &(0x7f0000046000)="1f0000000104ff00fdde45c807110000f305f0f00800018001fd00dcffdf00", 0x1f) r1 = socket(0x10, 0x822, 0xc) r2 = socket(0x10, 0x2, 0xc) get_thread_area(&(0x7f0000000040)={0x800, 0xffffffffffffffff, 0x0, 0x6, 0x0, 0x100000001, 0x8000000, 0x2, 0x6, 0x9}) write(r2, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r1, &(0x7f000007e000)="1f0000000104ff00fdde45c807110000f305fcf008000180010002dcffc500", 0x1f) [ 104.773753] binder: 8017:8019 transaction failed 29201/-22, size 24-8 line 3200 10:44:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x2) r2 = syz_open_pts(r0, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000080)=""/167) ioctl$TCFLSH(r2, 0x540b, 0x2) syz_open_pts(r2, 0xfffc) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000180)={0x65020af7, 0x44ae, 0x7}) 10:44:53 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) [ 104.828262] binder: undelivered TRANSACTION_ERROR: 29201 [ 104.867184] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'. [ 104.919821] IPVS: Unknown mcast interface: gretap0 [ 104.958699] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'. [ 104.962293] binder: 8076:8077 got transaction with invalid offset (0, min 0 max 24) or object. [ 104.962358] binder: 8076:8077 transaction failed 29201/-22, size 24-8 line 3200 10:44:54 executing program 6: mkdir(&(0x7f0000cb3ff8)='./file0\x00', 0x0) r0 = open(&(0x7f0000625000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000643ff8)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40000, 0x10) r2 = openat(r1, &(0x7f00006e9ff8)='./file0\x00', 0x0, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00009b9000)="0500de00667300", 0x1008, &(0x7f0000000100)) symlinkat(&(0x7f0000000100)='./file0/file0/file0/file0\x00', r2, &(0x7f000001fff8)='./file0\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x80, 0x0) renameat2(r1, &(0x7f00000001c0)='./file0/file0/file0/file0\x00', r2, &(0x7f0000284000)='./file0/file0\x00', 0x0) 10:44:54 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x214100, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000001340)={0x3, 0xc03, 0x0, 0x0, 0xf}) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) getdents64(0xffffffffffffffff, &(0x7f00000002c0)=""/4096, 0x1000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x22}]}, 0x10) getrlimit(0x0, &(0x7f0000000240)) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x80, 0x0) epoll_pwait(r3, &(0x7f0000000080)=[{}, {}, {}], 0x3, 0x2, &(0x7f00000000c0), 0x8) sendto$inet(r1, &(0x7f0000a88f88), 0x0, 0x20000000, &(0x7f0000e68000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect(r1, &(0x7f00000012c0)=@nl=@unspec, 0x80) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x4002, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000001c0)={0x0, 'gretap0\x00'}, 0x18) 10:44:54 executing program 5: r0 = socket(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) fcntl$setown(r0, 0x8, r1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth1\x00', &(0x7f0000000240)=@ethtool_eeprom={0x43}}) 10:44:54 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x80}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000200)={'tunl0\x00', {0x2, 0x0, @broadcast}}) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa8000000000000008000f0fffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 10:44:54 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000100)=0xfff, 0x4) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000200)={'nat\x00', 0x0, 0x4, 0x1e, [], 0x2, &(0x7f0000000040)=[{}, {}], &(0x7f00000000c0)=""/30}, &(0x7f0000000140)=0x50) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/user\x00', 0x2, 0x0) getpeername$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f00000001c0)=0x1c) 10:44:54 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0x2001007f) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) 10:44:54 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x84800) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) [ 105.099274] binder: undelivered TRANSACTION_ERROR: 29201 [ 105.117512] binder: 8095:8099 got transaction with invalid offset (0, min 0 max 24) or object. 10:44:54 executing program 0: clock_nanosleep(0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000600)) r0 = userfaultfd(0x80000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x20000000008031, r0, 0x1) r1 = memfd_create(&(0x7f0000000040)='$wlan0#vmnet0vboxnet1$vboxnet0#keyringmime_type+\x00', 0x3) write$selinux_load(r1, &(0x7f0000000100)={0xf97cff8c, 0x8, 'SE Linux', "00b0534541133ac806466b5173372e96c340ccc22084351faa13de7196677840b996b61688d584be12b9bb69acfa9b20192c6087cb0fca7e535f48982bb874d24a47d1e6f2c1db2e4679e085ad9b58f88d61ad0c2612f70b6bfcce28"}, 0x6c) clone(0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) socket$inet6(0xa, 0x2, 0x744) 10:44:54 executing program 4: socketpair(0x4, 0x3, 0x981a, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000080)={@empty, @local}, 0x8) r1 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x200800, 0x4000000000000001) write(r1, &(0x7f0000000340)="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", 0x1000) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000300)={0x7, 0x0, 0x0, 0x0, "385a7fedecb632dfa927982cb04c92b06e3a61a377b0d32c8e2b2b5337659c54"}) memfd_create(&(0x7f0000000000)='/dev/input/event#\x00', 0x3) 10:44:54 executing program 6: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sw_sync\x00', 0x80000, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4004700c, 0x187) socketpair(0x17, 0x80000, 0x6, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept4(r1, 0x0, &(0x7f0000000040), 0x800) ioctl$KDGETLED(r2, 0x4b31, &(0x7f00000001c0)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x0, 0xd076, 0x7fffffff, @time={0x77359400}, {0x9, 0x100000000}, {0x9, 0x1}, @connect={{0x3ff, 0x7fff}, {0x6, 0xed}}}, {0x20, 0x9, 0x83, 0xd7c2, @time={r3, r4+30000000}, {0x200, 0x4}, {0x1, 0x3}, @ext={0x53, &(0x7f0000000100)="185316b4ccff8d60476dc782d3fe2bc8ddbadcb6c2a753c21deb44abd40ef40c2395283adecbaf3b4253852738f3568b0d95cbd170ef3e40e1360bd2fcfc884e6fcc6bc8302be0fa9480617d1983a4175fbe1a"}}], 0x38) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000200)=0x80000000) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000000)) [ 105.183048] binder: 8095:8099 transaction failed 29201/-22, size 24-8 line 3200 [ 105.200288] IPVS: Unknown mcast interface: gretap0 10:44:54 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7ff, "7da63c39ca8cee9a0300000000d96f9787471abeb29452e61e6da86cbd459909"}) ppoll(&(0x7f0000000140)=[{r0, 0x8000}, {r0, 0x1094}, {r0, 0x40}, {r0, 0x80}, {r0, 0x400000000002}, {r0, 0x4}, {r0, 0x180}, {r0, 0x20}], 0x8, &(0x7f00000000c0), &(0x7f0000000100), 0x8) 10:44:54 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) setsockopt$sock_void(r0, 0x1, 0x24, 0x0, 0x0) write$P9_RRENAME(r0, &(0x7f0000000040)={0x7, 0x15, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000005a00)='ns/mnt\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000007440)='ns/mnt\x00') 10:44:54 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x214100, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000001340)={0x3, 0xc03, 0x0, 0x0, 0xf}) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) getdents64(0xffffffffffffffff, &(0x7f00000002c0)=""/4096, 0x1000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x22}]}, 0x10) getrlimit(0x0, &(0x7f0000000240)) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x80, 0x0) epoll_pwait(r3, &(0x7f0000000080)=[{}, {}, {}], 0x3, 0x2, &(0x7f00000000c0), 0x8) sendto$inet(r1, &(0x7f0000a88f88), 0x0, 0x20000000, &(0x7f0000e68000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect(r1, &(0x7f00000012c0)=@nl=@unspec, 0x80) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x4002, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000001c0)={0x0, 'gretap0\x00'}, 0x18) 10:44:54 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) [ 105.294351] binder: undelivered TRANSACTION_ERROR: 29201 10:44:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:54 executing program 7: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000200)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000100)={0x0, 0x2}) 10:44:54 executing program 6: r0 = memfd_create(&(0x7f0000000140)="7365e3757269747d2451dc094071773e74656f07", 0x0) write(r0, &(0x7f0000000040)='6', 0x1) sendfile(r0, r0, &(0x7f0000000080), 0xb516) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mlock(&(0x7f000051a000/0x14000)=nil, 0x14000) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) read(0xffffffffffffffff, &(0x7f00000001c0)=""/245, 0xf5) 10:44:54 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) preadv(r0, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$FICLONE(r0, 0x40049409, r0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x80006, 0x31, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) [ 105.442921] binder: 8146:8150 got transaction with invalid offset (0, min 0 max 24) or object. [ 105.470899] IPVS: Unknown mcast interface: gretap0 10:44:54 executing program 7: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000001880), 0x80000000000001b, 0x100, &(0x7f0000000100)={0x0, 0x1c9c380}) getrusage(0xffffffffffffffff, &(0x7f0000000200)) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) timer_create(0x0, &(0x7f0000001a00)={0x0, 0x0, 0x2}, &(0x7f0000000280)=0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f0000000080)={{r3, r4+30000000}, {0x0, 0x9}}, &(0x7f0000000000)) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000140), &(0x7f00000001c0)=0x30) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) tkill(0x0, 0x0) 10:44:54 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x214100, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000001340)={0x3, 0xc03, 0x0, 0x0, 0xf}) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) getdents64(0xffffffffffffffff, &(0x7f00000002c0)=""/4096, 0x1000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x22}]}, 0x10) getrlimit(0x0, &(0x7f0000000240)) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x80, 0x0) epoll_pwait(r3, &(0x7f0000000080)=[{}, {}, {}], 0x3, 0x2, &(0x7f00000000c0), 0x8) sendto$inet(r1, &(0x7f0000a88f88), 0x0, 0x20000000, &(0x7f0000e68000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect(r1, &(0x7f00000012c0)=@nl=@unspec, 0x80) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x4002, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000001c0)={0x0, 'gretap0\x00'}, 0x18) [ 105.497670] binder: BINDER_SET_CONTEXT_MGR already set [ 105.525584] binder: 8146:8150 transaction failed 29201/-22, size 24-8 line 3200 10:44:54 executing program 3: r0 = socket$inet(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="480000001400ff09fffefd956fa283b70aa6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc88", 0x48}], 0x1}, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'nat\x00'}, &(0x7f0000000080)=0x54) [ 105.573908] binder: 8158:8169 got transaction with invalid offset (0, min 0 max 24) or object. [ 105.582961] binder: 8158:8163 ioctl 40046207 0 returned -16 [ 105.605094] binder: undelivered TRANSACTION_ERROR: 29201 10:44:54 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x20}, 0x4}, 0x1c) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000004c0)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@empty, @remote}, &(0x7f0000000140)=0x9) r3 = dup3(r2, r1, 0x80000) setsockopt$inet_tcp_buf(r3, 0x6, 0x1d, &(0x7f0000000180)="9c47ea776f5c4e3f8d0d7aee8fb135dfe47367ac0a68a1176abe6517cae08633509d8b578d2a9b5ac597469f631bd928afc62119d6971cfb868a557d57cb25370d07207f718010081db15cb4265c396ce516e5ceaa3a29983379fa69fa24a7aa30e0ec82a2fef1b7a3694e270c6e17ddeeff1b6d405c6e216ab878c90a727625e14a43ccff65d3037bea54b2680fac0717d5b157c91bf1c55d1f6b0e23931bdfee4e755e18ed36cf9c81ea24d36909aa8e3f779529985b8962b44547b048260ffc614d6779602b383c2743ffe13cadaf94c9d2e12e304c477ba2ee5d3d1ec299adf0f97ae714f1150a90f9d31f", 0xed) umount2(&(0x7f0000000000)='./file0\x00', 0x3) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) 10:44:54 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) [ 105.618168] binder: 8158:8169 transaction failed 29201/-22, size 24-8 line 3200 [ 105.707948] binder: 8186:8189 got transaction with invalid offset (0, min 0 max 24) or object. [ 105.717960] IPVS: Unknown mcast interface: gretap0 [ 105.724264] binder: undelivered TRANSACTION_ERROR: 29201 [ 105.768681] binder: 8186:8189 transaction failed 29201/-22, size 24-8 line 3200 10:44:54 executing program 0: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000011000/0x3000)=nil, 0x3000}) lseek(r1, 0x0, 0x0) write$sndseq(r1, &(0x7f0000000200), 0x0) close(r0) 10:44:54 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3, 0x80040) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_GET_NUM_WAITING(r0, 0x2286, &(0x7f0000000200)) 10:44:54 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = open(&(0x7f0000000000)='./file0\x00', 0x40040, 0x0) mq_notify(r0, &(0x7f0000000200)={0x20000000, 0x8000000000013, 0x2, @thr={&(0x7f0000000080), &(0x7f0000000100)}}) getsockname$unix(r0, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000040)) 10:44:54 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x214100, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000001340)={0x3, 0xc03, 0x0, 0x0, 0xf}) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) getdents64(0xffffffffffffffff, &(0x7f00000002c0)=""/4096, 0x1000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x22}]}, 0x10) getrlimit(0x0, &(0x7f0000000240)) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x80, 0x0) epoll_pwait(r3, &(0x7f0000000080)=[{}, {}, {}], 0x3, 0x2, &(0x7f00000000c0), 0x8) sendto$inet(r1, &(0x7f0000a88f88), 0x0, 0x20000000, &(0x7f0000e68000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect(r1, &(0x7f00000012c0)=@nl=@unspec, 0x80) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x4002, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 10:44:54 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) [ 105.824794] binder: undelivered TRANSACTION_ERROR: 29201 10:44:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) ptrace(0x11, r1) sendto$inet6(r0, &(0x7f0000000280), 0xfffffffffffffedd, 0x20000004, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty={[0xe00000000000000]}}, 0x1c) 10:44:54 executing program 4: r0 = getpid() r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x2000, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000050000002bbf7000fedbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x4000000) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x6) getsockopt$sock_int(r1, 0x1, 0x2d, &(0x7f0000000200), &(0x7f0000000240)=0x4) timer_create(0x0, &(0x7f0000000000)={0x0, 0x2000003f, 0x4, @tid=r0}, &(0x7f0000000040)) 10:44:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x12, 0x4) sendfile(r0, r0, 0x0, 0x100000001) [ 105.962374] binder: BINDER_SET_CONTEXT_MGR already set [ 105.980828] binder: 8220:8222 ioctl 40046207 0 returned -16 10:44:55 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000080)={{0x2, 0x0, @dev}, {}, 0x0, {0x2, 0x0, @multicast2}}) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000100)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000000)=[{}, {}], 0x0, [{}, {}]}, 0x70) [ 105.997017] binder: 8220:8232 transaction failed 29189/-22, size 24-8 line 3014 10:44:55 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") socket$inet(0x2, 0x6, 0x9) fcntl$setstatus(r0, 0x4, 0x6800) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4096, 0x1200}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000300)) 10:44:55 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x214100, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000001340)={0x3, 0xc03, 0x0, 0x0, 0xf}) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) getdents64(0xffffffffffffffff, &(0x7f00000002c0)=""/4096, 0x1000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x22}]}, 0x10) getrlimit(0x0, &(0x7f0000000240)) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x80, 0x0) epoll_pwait(r3, &(0x7f0000000080)=[{}, {}, {}], 0x3, 0x2, &(0x7f00000000c0), 0x8) sendto$inet(r1, &(0x7f0000a88f88), 0x0, 0x20000000, &(0x7f0000e68000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect(r1, &(0x7f00000012c0)=@nl=@unspec, 0x80) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x4002, 0x0) 10:44:55 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x214100, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000001340)={0x3, 0xc03, 0x0, 0x0, 0xf}) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) getdents64(0xffffffffffffffff, &(0x7f00000002c0)=""/4096, 0x1000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x22}]}, 0x10) getrlimit(0x0, &(0x7f0000000240)) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x80, 0x0) epoll_pwait(r3, &(0x7f0000000080)=[{}, {}, {}], 0x3, 0x2, &(0x7f00000000c0), 0x8) sendto$inet(r1, &(0x7f0000a88f88), 0x0, 0x20000000, &(0x7f0000e68000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect(r1, &(0x7f00000012c0)=@nl=@unspec, 0x80) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x4002, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 10:44:55 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x90201, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000080)={{0x1ff}, {0x3ff, 0x8}, 0x3ff, 0x3, 0x4}) r3 = inotify_init() r4 = inotify_add_watch(r3, &(0x7f0000000040)='./file0\x00', 0x20000000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) inotify_rm_watch(r3, r4) ppoll(&(0x7f0000000340)=[{r0, 0x14d8}, {r1}], 0x2, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0), 0x8) inotify_rm_watch(r2, r4) 10:44:55 executing program 5: r0 = socket(0x5, 0x2, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udp\x00') sendfile(r0, r1, &(0x7f0000000040), 0x80000002) [ 106.136590] binder: undelivered TRANSACTION_ERROR: 29189 10:44:55 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x80000, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ifb0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000200)={{{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast2}}, &(0x7f0000000300)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f00000006c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000480)={0x1e8, r2, 0x810, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x138, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x84, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x54, 0x4, [{0x3e4, 0xba, 0x100000001, 0x8}, {0xffff, 0x475dcc56, 0x6c4, 0x2}, {0x8, 0x80000001, 0xffffffffffffd990, 0x100}, {0x0, 0xcf, 0x0, 0xffffffffffff7178}, {0x100000000, 0xf1f, 0xffffffff7fffffff, 0x6}, {0x1000, 0x0, 0x1, 0x3b}, {0xb78, 0x6, 0xffff}, {0x7f, 0x800, 0x80000000, 0x877b}, {0x55, 0x20, 0x2, 0xff}, {0x6, 0x2, 0x5}]}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x40}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r5}, {0x8c, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x1e8}}, 0x801) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth0_to_bridge\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="3800800000010000"]}) 10:44:55 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000100)="6f6f6d5f61646a00000026e7080900000000") sendfile(r0, r0, &(0x7f0000000000), 0x8) sendfile(r1, r0, &(0x7f0000000040)=0x5d, 0x79fffff7ffffff) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=0x1000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180), 0x12) 10:44:55 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x282080, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000040)={0x20, 0x8, 0xffff, 0x7fffffff800000}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x101, 0x2) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xbc, r3, 0x300, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x18, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0xbc}, 0x1, 0x0, 0x0, 0x80}, 0x4040) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000000100)) 10:44:55 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:55 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x80, 0x0) r1 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x60010, 0xffffffffffffff9c, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x30, 0x0, &(0x7f00000001c0)=[@release={0x40046306, 0x4}, @dead_binder_done={0x40086310, 0x3}, @clear_death={0x400c630f, 0x1, 0x4}, @free_buffer={0x40086303, r1}], 0x9, 0x0, &(0x7f0000000200)="9919d6deb1a32475e2"}) utimes(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={{0x0, 0x7530}, {0x77359400}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x10000000004e24, @broadcast}, 0x10) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x101000, 0x0) ioctl$KDSKBLED(r4, 0x4b65, 0x7fffffff) setsockopt$inet6_tcp_int(r3, 0x6, 0x1f, &(0x7f0000000080)=0x5, 0x4) clock_nanosleep(0x0, 0x1, &(0x7f0000000040)={0x77359400}, 0x0) bind$inet(r2, &(0x7f0000dc7ff0)={0x2, 0x2000004e24, @rand_addr=0x20}, 0x10) 10:44:55 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x214100, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000001340)={0x3, 0xc03, 0x0, 0x0, 0xf}) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) getdents64(0xffffffffffffffff, &(0x7f00000002c0)=""/4096, 0x1000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x22}]}, 0x10) getrlimit(0x0, &(0x7f0000000240)) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x80, 0x0) epoll_pwait(r3, &(0x7f0000000080)=[{}, {}, {}], 0x3, 0x2, &(0x7f00000000c0), 0x8) sendto$inet(r1, &(0x7f0000a88f88), 0x0, 0x20000000, &(0x7f0000e68000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect(r1, &(0x7f00000012c0)=@nl=@unspec, 0x80) 10:44:55 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3, 0x42) fsync(r0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr/current\x00') ioctl$VT_ACTIVATE(r1, 0x5606, 0xfffffffffffffffe) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') lseek(r1, 0x0, 0x0) flock(r2, 0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) 10:44:55 executing program 6: r0 = creat(&(0x7f0000001240)='./file0\x00', 0x100) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f00000012c0)) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r1, &(0x7f00000010c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) recvmmsg(r1, &(0x7f0000002940)=[{{&(0x7f0000002200)=@hci, 0x80, &(0x7f0000002440)=[{&(0x7f0000002380)=""/133, 0x85}], 0x1, &(0x7f0000002480)=""/112, 0x70}}], 0x1, 0x0, &(0x7f0000002a80)={0x0, 0x989680}) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f00000010c0)={'rose0\x00', 0xa86b}) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) recvfrom(r1, &(0x7f0000000040)=""/4096, 0x1000, 0x0, 0x0, 0x0) r2 = gettid() ptrace(0x4208, r2) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r3 = gettid() sendto$inet(r1, &(0x7f0000002ac0)="6bb45261ee31941885b7c72472dfdd4494fca7ccc2f0d3cf6af658a8b5739bfc6d21556dda0fa9e904741246e797f463585f0e5e51d76dd129ad930b55b51cbff4c9e479ef1e36d9406f67da1acdbfd04b1904cd5662baa418b19164747b389f4425471c616920979f1937e737ffc8117e87ccb3b5f11bf67c151976962e5ebd539a", 0x82, 0x0, &(0x7f0000002040)={0x2, 0x0, @multicast2}, 0x10) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001100)='/selinux/mls\x00', 0x0, 0x0) mq_timedsend(r4, &(0x7f0000001140)="1898fdbcf6ea718c808d01c143c126716ef28c6e0027df6b956d6b399d70534a3cb185ee165a4673c352f4cb9d1198632ec7328b421c990207ffedc87a96ea132948ec3b01449415a494bc07761c4e263443529b2ea31ae9b97888396ef98095b1966dc807d6c6a6e0e3fae7b9234d8878320ab0867a986d038929052ab14d13d2", 0x81, 0x1, &(0x7f0000001200)={0x0, 0x989680}) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000001280)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001040)='/dev/uinput\x00', 0x680, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r5, 0x5386, &(0x7f0000001080)) tkill(r3, 0x16) 10:44:55 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2013) close(r0) setsockopt$inet6_int(r0, 0x29, 0x3f, &(0x7f0000000040)=0x4, 0x4) 10:44:55 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x241, 0x0) write$eventfd(r0, &(0x7f0000000080)=0x20000100000001, 0x8) close(r0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x154) [ 106.829073] syz-executor3 (8290): /proc/8285/oom_adj is deprecated, please use /proc/8285/oom_score_adj instead. [ 106.855561] binder: 8287:8301 got transaction with invalid offset (0, min 0 max 24) or object. 10:44:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xffffffffffffffbe}, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[]}, 0x1, 0x0, 0x0, 0x200000000801}, 0x8000000c000001) fcntl$setflags(r0, 0x2, 0x1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x20802, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x801) 10:44:55 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x214100, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000001340)={0x3, 0xc03, 0x0, 0x0, 0xf}) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) getdents64(0xffffffffffffffff, &(0x7f00000002c0)=""/4096, 0x1000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x22}]}, 0x10) getrlimit(0x0, &(0x7f0000000240)) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x80, 0x0) epoll_pwait(r3, &(0x7f0000000080)=[{}, {}, {}], 0x3, 0x2, &(0x7f00000000c0), 0x8) sendto$inet(r1, &(0x7f0000a88f88), 0x0, 0x20000000, &(0x7f0000e68000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) 10:44:56 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:56 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.capability\x00', &(0x7f00000000c0), 0x0) sendto$unix(r0, &(0x7f0000000180), 0x0, 0x44094, 0x0, 0x0) [ 106.921538] binder: 8287:8301 transaction failed 29201/-22, size 24-8 line 3200 [ 106.943753] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 106.952910] binder: undelivered TRANSACTION_ERROR: 29201 10:44:56 executing program 7: munmap(&(0x7f0000203000/0x2000)=nil, 0x2000) ppoll(&(0x7f00000001c0), 0x0, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000240), 0x8) 10:44:56 executing program 3: gettid() r0 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1004082) r1 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f00000000c0)) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f0000000100)=0xe8) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) mknod(&(0x7f0000000300)='./file0\x00', 0x0, 0x1) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000140)) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0x10000000}) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) sendfile(r1, r0, &(0x7f0000000180), 0x1000100) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) 10:44:56 executing program 5: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1000000) inotify_rm_watch(r0, r1) capset(&(0x7f00006f5000)={0x19980330}, &(0x7f0000eb4fe8)) capset(&(0x7f0000000180)={0x20080522}, &(0x7f00000001c0)) 10:44:56 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a6273"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:56 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:56 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_to_team\x00', &(0x7f0000001200)=@ethtool_wolinfo={0x5, 0x469e, 0x8, "4b08f6e53bbf"}}) fstat(r0, &(0x7f0000000140)) [ 107.161558] capability: warning: `syz-executor5' uses 32-bit capabilities (legacy support in use) [ 107.165325] binder: 8360:8361 got transaction with invalid offset (0, min 0 max 24) or object. [ 107.165402] binder: 8360:8361 transaction failed 29201/-22, size 24-8 line 3200 [ 107.199044] binder: undelivered TRANSACTION_ERROR: 29201 [ 107.220430] binder: 8359:8365 unknown command 536871424 [ 107.225820] binder: 8359:8365 ioctl c0306201 20000440 returned -22 10:44:56 executing program 0: sysinfo(&(0x7f0000000040)=""/177) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x1, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40047703, 0x81) 10:44:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x8000000000003) 10:44:56 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x214100, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000001340)={0x3, 0xc03, 0x0, 0x0, 0xf}) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) getdents64(0xffffffffffffffff, &(0x7f00000002c0)=""/4096, 0x1000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x22}]}, 0x10) getrlimit(0x0, &(0x7f0000000240)) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x80, 0x0) sendto$inet(r1, &(0x7f0000a88f88), 0x0, 0x20000000, &(0x7f0000e68000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) 10:44:56 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000100)) write(r1, &(0x7f0000000400), 0x0) r2 = epoll_create(0x1) poll(&(0x7f0000000080)=[{r2}, {r0}], 0x2, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000004500)={'veth1_to_bridge\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004700)={{{@in=@broadcast, @in=@multicast2}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000004800)=0xe8) mq_unlink(&(0x7f00000000c0)='veth1_to_bridge\x00') sysfs$3(0x3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x3) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000040)) 10:44:56 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f000067d000)=0x19, 0x4) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e23}, 0xffffffffffffff24) 10:44:56 executing program 6: r0 = creat(&(0x7f0000001240)='./file0\x00', 0x100) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f00000012c0)) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r1, &(0x7f00000010c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) recvmmsg(r1, &(0x7f0000002940)=[{{&(0x7f0000002200)=@hci, 0x80, &(0x7f0000002440)=[{&(0x7f0000002380)=""/133, 0x85}], 0x1, &(0x7f0000002480)=""/112, 0x70}}], 0x1, 0x0, &(0x7f0000002a80)={0x0, 0x989680}) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f00000010c0)={'rose0\x00', 0xa86b}) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) recvfrom(r1, &(0x7f0000000040)=""/4096, 0x1000, 0x0, 0x0, 0x0) r2 = gettid() ptrace(0x4208, r2) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r3 = gettid() sendto$inet(r1, &(0x7f0000002ac0)="6bb45261ee31941885b7c72472dfdd4494fca7ccc2f0d3cf6af658a8b5739bfc6d21556dda0fa9e904741246e797f463585f0e5e51d76dd129ad930b55b51cbff4c9e479ef1e36d9406f67da1acdbfd04b1904cd5662baa418b19164747b389f4425471c616920979f1937e737ffc8117e87ccb3b5f11bf67c151976962e5ebd539a", 0x82, 0x0, &(0x7f0000002040)={0x2, 0x0, @multicast2}, 0x10) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001100)='/selinux/mls\x00', 0x0, 0x0) mq_timedsend(r4, &(0x7f0000001140)="1898fdbcf6ea718c808d01c143c126716ef28c6e0027df6b956d6b399d70534a3cb185ee165a4673c352f4cb9d1198632ec7328b421c990207ffedc87a96ea132948ec3b01449415a494bc07761c4e263443529b2ea31ae9b97888396ef98095b1966dc807d6c6a6e0e3fae7b9234d8878320ab0867a986d038929052ab14d13d2", 0x81, 0x1, &(0x7f0000001200)={0x0, 0x989680}) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000001280)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001040)='/dev/uinput\x00', 0x680, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r5, 0x5386, &(0x7f0000001080)) tkill(r3, 0x16) 10:44:56 executing program 5: r0 = socket$inet(0x10, 0xa, 0x8000000a) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snapshot\x00', 0x20000103201, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000100007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x19d6, 0x0, 0x0, 0xfffffffffffffffc}, 0x4000011) recvfrom$inet6(r1, &(0x7f0000000140)=""/176, 0xb0, 0x2002, &(0x7f00000000c0)={0xa, 0x4e24, 0x3fbb, @loopback, 0x9}, 0x1c) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) recvfrom$inet6(r1, &(0x7f0000000240)=""/224, 0xe0, 0x0, &(0x7f0000000340)={0xa, 0x4e24, 0x8, @local, 0x3}, 0x1c) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000380)={@remote, @mcast2, @empty, 0x7fffffff, 0x4c35, 0xfff, 0x400, 0x8001, 0xa2ed1f703aa4aa65}) 10:44:56 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a6273"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:56 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_tables_targets\x00') fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) 10:44:56 executing program 7: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='\x00\x00\x00\x00\x00', 0x100000, &(0x7f00000002c0)) mkdir(&(0x7f0000000ec0)='./file0/file0\x00', 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x200800, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000240)) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000080)="5a1b80993acf0697bc8e10454ac0f118795a652f85c9f5387d77369c02885bbd8ef03bac86e467d1e200000000000000000000") mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='f2fs\x00', 0x202450, 0x0) 10:44:56 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x2) umount2(&(0x7f0000000100)='.\x00', 0x0) 10:44:56 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x214100, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000001340)={0x3, 0xc03, 0x0, 0x0, 0xf}) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) getdents64(0xffffffffffffffff, &(0x7f00000002c0)=""/4096, 0x1000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x22}]}, 0x10) getrlimit(0x0, &(0x7f0000000240)) sendto$inet(r1, &(0x7f0000a88f88), 0x0, 0x20000000, &(0x7f0000e68000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) 10:44:56 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f00000000c0)={0x0, 0x6, 0x0, 0x0, 0x0, 0x200, 0x10001, 0x0, 0x100000000, 0x0, 0x0, 0x342}) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=@deltfilter={0x22c, 0x2d, 0x800, 0x70bd26, 0x25dfdbfe, {0x0, r2, {0x1b, 0xfff7}, {0xffef, 0x4}, {0xfff7}}, [@TCA_RATE={0x8, 0x5, {0x1, 0xfff}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_RATE={0x8, 0x5, {0xdb1b, 0x8}}, @filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x1d4, 0x2, [@TCA_CGROUP_ACT={0x8c, 0x1, @m_vlan={0x88, 0x1d, {{0xc, 0x1, 'vlan\x00'}, {0x44, 0x2, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x8, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x8, 0x3, 0xea6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x8, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x8, 0x4, 0x89a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x8, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x8, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x8, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x8, 0x4, 0x8100}]}, {0x30, 0x6, "45068f08869236b334269df2cb04f6fbf803f7d5b4b01c0d4a89796fe27e8ca1df6de073c63dd41baf1a4183"}}}}, @TCA_CGROUP_EMATCHES={0x118, 0x3, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0xd0, 0x2, @TCF_EM_META={0xcc, 0x948a, {0xffff, 0x4, 0x0, 0xffffffff, [@TCA_EM_META_HDR={0xc, 0x1, {{0x81, 0x7}, {0x20, 0x5, 0x2}}}, @TCA_EM_META_LVALUE={0x34, 0x2, [@TCF_META_TYPE_VAR="7b4d13444d", @TCF_META_TYPE_VAR="2b0e33eebc29b8", @TCF_META_TYPE_VAR="e72e25ac1714719143", @TCF_META_TYPE_VAR="4a82a9243d84", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="1ef5b0eee65ad342eb", @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_LVALUE={0x24, 0x2, [@TCF_META_TYPE_VAR="e3dfebab316678", @TCF_META_TYPE_VAR="c0ca776c652c", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="7430a8bcf65d8c"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xfffffffffffffff7, 0x0, 0xc9f4a18267300873}, {0x1319bcc8, 0xffff, 0x1}}}, @TCA_EM_META_RVALUE={0x2c, 0x3, [@TCF_META_TYPE_VAR="99747a316b", @TCF_META_TYPE_VAR="d721f89666", @TCF_META_TYPE_VAR="d61a81bbf5a5e57b699e", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR='`']}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_VAR="276ae5ae03b195"]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x10001, 0x2}, {0x1, 0x3, 0x1}}}]}}}, @TCA_EMATCH_TREE_LIST={0x3c, 0x2, @TCF_EM_META={0x38, 0x6, {0x74c, 0x4, 0x4, 0x1, [@TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="a4608d96", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR]}, @TCA_EM_META_LVALUE={0x18, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="2e0fe2978c0d", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="8fa93dd5473008f7545a"]}]}}}]}, @TCA_CGROUP_EMATCHES={0x2c, 0x3, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, @TCF_EM_NBYTE={0x1c, 0x36a1, {0x7, 0x2, 0xfffffffffffffffe, 0x6, {0x8c9f, 0x6, 0x3, "a69d7a"}}}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1ff}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x22c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendfile(r0, r0, &(0x7f0000000240), 0x20000102000007) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000000)) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 10:44:56 executing program 5: r0 = socket$inet(0x10, 0x80000, 0x0) sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000440)="24000000240007031dfffd946f61830020200a0009000000fffcffffffffffffff00ff7e", 0x24}], 0x1}, 0x2) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@l2={0x1f, 0x7af5, {0x6, 0x7fff, 0x3f, 0x7ff, 0xffffffffffffffd9, 0xff}, 0xffffffff, 0x800}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000080)="802f62087dc22875f15e139619e31db49aff6099e850fa1a1be0c8224f254cf3bffe243cf55f036e9bb2bc787bc446cc84d7c2051aeecf3e4ab2f2d4221e2b7ee9af734bdd9a6251035639a31d898ee70dd27660c96b509ebbca7d66a1c3def083fd31a695f369f74cee8657eb5c9a359c3465f5af347fd4265f052953cb", 0x7e}, {&(0x7f0000000100)="f7b7339ed41951c976ff879c9afe7408c4942908c4a475c446dfd2f78e386ca0022040a0a55bbfc82c1775997ce859f790f6dd2984483084352be75a0d5dfd313df0d6d5bad6b375c0b4739cc19dfc9ffa8c794d213072cd8b1bc53c972763dec1d596178c60f7bad68ce9d1fca77e9469311fb537d629f0a01638e869111165d6f02f99cda4c1d88feec621a244ae679c3e60c686ac76f813a4ad36e3e4dcc4c5312778c2147efba368055e28a40473b67028281d8b31ae20be64fffd3247be3f75563385da3a91057ebd0f4f90ba38107be922aee0f15e0ee57a138c0713286ecabff2e2f03628294b782c91b7ce560188a6d326668849253219", 0xfb}, {&(0x7f0000000200)="cabc02338d560e611e86b24c1d66119cc2babb3a233d34ba879211a99c8fc7b30f07962299bc32a93d", 0x29}, {&(0x7f0000000240)="0e67611846a45e3898e12168b0cce817276350db10feac7a8501ff", 0x1b}, {&(0x7f0000000280)="14355fe1e07915cd8d3cbd211d354a4e87d2e4fcdb0b255abb6935fa268145c9eae140e23c817dcb4c506f07d58046aa", 0x30}, {&(0x7f00000002c0)="4ab7f6c7251ebcd7bafa0e9135485f", 0xf}], 0x6, &(0x7f0000000340)=[{0x70, 0xff, 0x8ea, "a7dd71a0dc84f3e82dbcd85ad75c8758f0f5b8e9e3f2e7227cbe8f044d02bdae41f7a574f08ebd7ced7d425e1b4253c6b8b7474bbe3663f778ed14b56d6930b4169fb75b2e9be7090f3b67738467e5d756e2bc227b93f6aabcad27ce64a742dc0b5208f2"}], 0x70, 0x40000}, 0x4) kexec_load(0x2, 0x1, &(0x7f0000000400)=[{&(0x7f0000000480)="1bcf1dd99568e340ad5142f7146898fa859dfadc9ae68bcd02dc2595e236c987b65c1ac43406adba3c38aa3448aeebf6af03b0e85bbfe609cce03c89347555bc0a649f5149e38477a523cec42dc9232f46e93eae271fb53410b538ec528f487526a269513b612c90430e78b468b1", 0x6e, 0x2d2, 0x8000}], 0x2a0000) 10:44:56 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a6273"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:56 executing program 7: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000020ff0)=[{&(0x7f0000000240)="2f0000001c0005c5ffffff000d0000000200001f00130000ec0002c91300010000000000000000005867000043050b", 0x2f}], 0x1}, 0x0) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='security.evm\x00', &(0x7f0000000080)='\'\x00', 0x2, 0x3) 10:44:56 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/binder#\x00', 0x1) mknodat(r2, &(0x7f00000000c0)='./file0\x00', 0x7000, 0x67) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, &(0x7f0000000480)="f2"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000080)}) 10:44:56 executing program 3: sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000001400), 0xc, &(0x7f00000014c0)={&(0x7f0000001480)=ANY=[@ANYRES32, @ANYPTR64=&(0x7f0000001440)=ANY=[]], 0x2}}, 0x0) getpgid(0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) wait4(r0, &(0x7f0000000140), 0x1000000, &(0x7f0000001500)) r1 = fcntl$getown(0xffffffffffffffff, 0x9) r2 = getpgrp(r1) process_vm_writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/247, 0xf7}], 0x1, &(0x7f0000001340)=[{&(0x7f0000000200)=""/145}, {&(0x7f00000002c0)=""/4096}, {&(0x7f00000012c0)=""/87}], 0x359, 0x0) [ 107.868496] binder: 8424:8429 unknown command 536871424 [ 107.903211] binder: BINDER_SET_CONTEXT_MGR already set 10:44:56 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x1, 0x0) ioctl$RTC_WIE_OFF(r1, 0x7010) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00000000c0)={'tunl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) setsockopt$sock_void(r1, 0x1, 0x1b, 0x0, 0x0) [ 107.916272] binder: 8424:8429 ioctl c0306201 20000440 returned -22 [ 107.918631] binder: 8427:8434 ioctl 40046207 0 returned -16 [ 107.919846] binder: release 8427:8434 transaction 148 out, still active [ 107.919851] binder: unexpected work type, 4, not freed [ 107.919854] binder: undelivered TRANSACTION_COMPLETE [ 107.946795] binder: 8427:8439 got transaction to invalid handle [ 107.962711] blk_update_request: I/O error, dev loop0, sector 0 10:44:57 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x214100, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000001340)={0x3, 0xc03, 0x0, 0x0, 0xf}) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) getdents64(0xffffffffffffffff, &(0x7f00000002c0)=""/4096, 0x1000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x22}]}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0x0, 0x20000000, &(0x7f0000e68000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) [ 107.968694] buffer_io_error: 250 callbacks suppressed [ 107.973940] Buffer I/O error on dev loop0, logical block 0, lost async page write [ 107.981689] blk_update_request: I/O error, dev loop0, sector 8 [ 107.987710] Buffer I/O error on dev loop0, logical block 1, lost async page write [ 107.990702] binder: 8427:8439 transaction failed 29201/-22, size 0-0 line 3014 [ 108.003425] blk_update_request: I/O error, dev loop0, sector 16 [ 108.009893] Buffer I/O error on dev loop0, logical block 2, lost async page write 10:44:57 executing program 6: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x214100, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000001340)={0x3, 0xc03, 0x0, 0x0, 0xf}) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) getdents64(0xffffffffffffffff, &(0x7f00000002c0)=""/4096, 0x1000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x22}]}, 0x10) getrlimit(0x0, &(0x7f0000000240)) sendto$inet(r1, &(0x7f0000a88f88), 0x0, 0x20000000, &(0x7f0000e68000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) [ 108.017551] blk_update_request: I/O error, dev loop0, sector 24 [ 108.023981] Buffer I/O error on dev loop0, logical block 3, lost async page write [ 108.031872] blk_update_request: I/O error, dev loop0, sector 32 [ 108.037931] Buffer I/O error on dev loop0, logical block 4, lost async page write [ 108.045617] blk_update_request: I/O error, dev loop0, sector 40 [ 108.052040] Buffer I/O error on dev loop0, logical block 5, lost async page write [ 108.059856] Buffer I/O error on dev loop0, logical block 6, lost async page write 10:44:57 executing program 7: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uinput\x00', 0x400000, 0x0) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000280)) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) connect$unix(r2, &(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e23}, 0xffffffffffffff23) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000140)={0x8, 0x3, 0x6000000000000000}) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x3) sendmmsg$unix(r0, &(0x7f0000005240), 0x3a4, 0x0) connect(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @local}}}, 0x80) 10:44:57 executing program 3: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x200000, 0x0) syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)="8b527cbe0be7fb05f187c21998c8fa41ac14d1189afc9ed0fc0b93853f378845221bfde529b7da2fa8529924276ccdeb9738781fd967e78b9e1f541e1a0b32349c4e8197f015d21c6304120a1d56bcbf14ab352897c2479aa30ec82517ccf62617c2ad2747539b129ac6dceb4527cef3ba5d38", 0x73, 0x4, &(0x7f0000000000)={0xa, 0x4e20, 0x200, @local, 0x2}, 0x1c) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000200)=@get={0x1, &(0x7f0000000100)=""/236, 0x7}) syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) [ 108.067721] Buffer I/O error on dev loop0, logical block 7, lost async page write [ 108.075419] Buffer I/O error on dev loop0, logical block 8, lost async page write [ 108.083190] Buffer I/O error on dev loop0, logical block 9, lost async page write 10:44:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000005a80)={&(0x7f0000000000), 0xc, &(0x7f00000059c0)=[{&(0x7f0000000840)={0x10, 0x13, 0x1}, 0x10}], 0x1, &(0x7f0000005a40)}, 0x0) userfaultfd(0x80000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x43, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000080)={'nat\x00', 0x8d, "a68e7d7cd1e09670ab79c83a0a135bd069876a595f78d26e82df4f4627bcc0d8aeba0e50976c565062fe7c4ee22865d9f5e360e2a8c8d92ed7b63028174b37c3624f214e4118eaff501e54cf1dfcc07be87ae2f7ccb4646b65df288bdc76d42205e65eb85ebaaa7b976adc9dae1de563e966207ae306f4ad67d505f958cd8a62357925f8a68e9af7c357b38976"}, &(0x7f0000000140)=0xb1) 10:44:57 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f00000000c0)={0x0, 0x6, 0x0, 0x0, 0x0, 0x200, 0x10001, 0x0, 0x100000000, 0x0, 0x0, 0x342}) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=@deltfilter={0x22c, 0x2d, 0x800, 0x70bd26, 0x25dfdbfe, {0x0, r2, {0x1b, 0xfff7}, {0xffef, 0x4}, {0xfff7}}, [@TCA_RATE={0x8, 0x5, {0x1, 0xfff}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_RATE={0x8, 0x5, {0xdb1b, 0x8}}, @filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x1d4, 0x2, [@TCA_CGROUP_ACT={0x8c, 0x1, @m_vlan={0x88, 0x1d, {{0xc, 0x1, 'vlan\x00'}, {0x44, 0x2, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x8, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x8, 0x3, 0xea6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x8, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x8, 0x4, 0x89a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x8, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x8, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x8, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x8, 0x4, 0x8100}]}, {0x30, 0x6, "45068f08869236b334269df2cb04f6fbf803f7d5b4b01c0d4a89796fe27e8ca1df6de073c63dd41baf1a4183"}}}}, @TCA_CGROUP_EMATCHES={0x118, 0x3, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0xd0, 0x2, @TCF_EM_META={0xcc, 0x948a, {0xffff, 0x4, 0x0, 0xffffffff, [@TCA_EM_META_HDR={0xc, 0x1, {{0x81, 0x7}, {0x20, 0x5, 0x2}}}, @TCA_EM_META_LVALUE={0x34, 0x2, [@TCF_META_TYPE_VAR="7b4d13444d", @TCF_META_TYPE_VAR="2b0e33eebc29b8", @TCF_META_TYPE_VAR="e72e25ac1714719143", @TCF_META_TYPE_VAR="4a82a9243d84", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="1ef5b0eee65ad342eb", @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_LVALUE={0x24, 0x2, [@TCF_META_TYPE_VAR="e3dfebab316678", @TCF_META_TYPE_VAR="c0ca776c652c", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="7430a8bcf65d8c"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xfffffffffffffff7, 0x0, 0xc9f4a18267300873}, {0x1319bcc8, 0xffff, 0x1}}}, @TCA_EM_META_RVALUE={0x2c, 0x3, [@TCF_META_TYPE_VAR="99747a316b", @TCF_META_TYPE_VAR="d721f89666", @TCF_META_TYPE_VAR="d61a81bbf5a5e57b699e", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR='`']}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_VAR="276ae5ae03b195"]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x10001, 0x2}, {0x1, 0x3, 0x1}}}]}}}, @TCA_EMATCH_TREE_LIST={0x3c, 0x2, @TCF_EM_META={0x38, 0x6, {0x74c, 0x4, 0x4, 0x1, [@TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="a4608d96", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR]}, @TCA_EM_META_LVALUE={0x18, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="2e0fe2978c0d", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="8fa93dd5473008f7545a"]}]}}}]}, @TCA_CGROUP_EMATCHES={0x2c, 0x3, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, @TCF_EM_NBYTE={0x1c, 0x36a1, {0x7, 0x2, 0xfffffffffffffffe, 0x6, {0x8c9f, 0x6, 0x3, "a69d7a"}}}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1ff}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x22c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendfile(r0, r0, &(0x7f0000000240), 0x20000102000007) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000000)) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 10:44:57 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x214100, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000001340)={0x3, 0xc03, 0x0, 0x0, 0xf}) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) getdents64(0xffffffffffffffff, &(0x7f00000002c0)=""/4096, 0x1000) sendto$inet(r1, &(0x7f0000a88f88), 0x0, 0x20000000, &(0x7f0000e68000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) 10:44:57 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000200)=ANY=[], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:57 executing program 0: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) rt_tgsigqueueinfo(r1, r1, 0x34, &(0x7f0000000040)={0x0, 0x0, 0xffeffffffffffffc}) r2 = dup3(r0, r0, 0x80000) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000140)={0x9, 0x691c, 0x1}, 0x10) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000100)={0x3f, 0x65d0, 0xf193, 0xfffffffffffffffd, 0x2, 0x20, 0xb0, 0x1, 0x8ea4, 0x5, 0x7f, 0x100}) ptrace$peekuser(0x3, r1, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000180)={0x8, 0x7, 0x3000}, 0x4) [ 108.209876] binder: send failed reply for transaction 148, target dead 10:44:57 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090a0000000000000000000000030006000000000002000000e00000010000000000020001000000000000000004000000000300050000454a9bfdd105b6ae1ec713463a0e00000002000000e00000010000000000000000000000"], 0x50}}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(r0, &(0x7f00000001c0)={0x78, 0x0, 0x2, {0x1f, 0x100000000, 0x0, {0x6, 0x9, 0x6, 0xec, 0x9, 0x6, 0x6, 0x2, 0x500, 0x920f, 0x800, r1, r2, 0x4, 0xc5}}}, 0x78) 10:44:57 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x22500, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x4) fcntl$getown(r0, 0x9) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000140)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffd, 0x4000000000000031, 0xffffffffffffffff, 0x0) ioctl$fiemap(r2, 0x40046604, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4924924924924a3}) 10:44:57 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x34) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000100)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) setsockopt$inet_int(r2, 0x0, 0x1, &(0x7f0000000000), 0x4) listen(r2, 0x9) renameat(r2, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000080)='./file0\x00') [ 108.315389] binder: 8486:8493 unknown command 536871424 10:44:57 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x214100, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000001340)={0x3, 0xc03, 0x0, 0x0, 0xf}) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) sendto$inet(r1, &(0x7f0000a88f88), 0x0, 0x20000000, &(0x7f0000e68000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) [ 108.362043] binder: 8486:8493 ioctl c0306201 20000440 returned -22 10:44:57 executing program 4: r0 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) write(r0, &(0x7f0000000040)="a85883156f794c05", 0x8) pipe2(&(0x7f0000989000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000080)=[{r1, 0x523}, {r1, 0x200}, {r2, 0x1482}, {r1, 0x8000}, {r1, 0x2048}], 0x5, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000240)={0x20}, 0x8) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') fremovexattr(r4, &(0x7f0000000100)=@random={'user.', 'eql\x00'}) dup2(r1, r3) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000317000), 0xff8) mq_open(&(0x7f0000000000)='\x00', 0x0, 0x0, &(0x7f0000000340)) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000180)={0x3, {{0xa, 0x1, 0x6, @loopback, 0x6}}}, 0x84) 10:44:57 executing program 5: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f2f6e657400000000000000072f6578706972655f6e6f646573b14a8874745f63", 0x2, 0x0) mprotect(&(0x7f000036d000/0x1000)=nil, 0x1000, 0x4) readlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x30e) 10:44:57 executing program 0: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1, 0x3}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}, 0xfffffffffffffffe}}}, 0x104) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) 10:44:57 executing program 3: r0 = memfd_create(&(0x7f00000001c0)="43e385626d2e5a3abeb69bda13139c19fa2b23656d31032b00", 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x8132, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0xc, 0x11, r0, 0x0) r1 = fcntl$getown(r0, 0x9) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ptrace$peekuser(0x3, r1, 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) 10:44:57 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000200)=ANY=[], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) [ 108.668330] binder_alloc: binder_alloc_mmap_handler: 8427 20001000-20004000 already mapped failed -16 [ 108.678090] binder: 8427:8526 transaction failed 29189/-22, size 24-8 line 3014 [ 108.685839] binder: undelivered TRANSACTION_ERROR: 29189 [ 108.686633] binder: 8427:8526 got transaction to invalid handle [ 108.686641] binder: 8427:8526 transaction failed 29201/-22, size 0-0 line 3014 [ 108.720664] binder: BINDER_SET_CONTEXT_MGR already set [ 108.729612] binder: 8530:8532 ioctl 40046207 0 returned -16 [ 108.758707] binder: 8530:8540 unknown command 536871424 [ 108.775994] binder: undelivered TRANSACTION_ERROR: 29201 [ 108.781588] binder: 8530:8540 ioctl c0306201 20000440 returned -22 [ 108.788709] binder: undelivered TRANSACTION_ERROR: 29201 10:44:58 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) keyctl$session_to_parent(0x12) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000600)={{0x2, 0x0, @local}, {0x0, @local}, 0x8, {0x2, 0x0, @rand_addr}, "0000000500000000723000"}) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x4e22, @local}, {0x0, @link_local}, 0x8, {0x2, 0x0, @remote}}) 10:44:58 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090a0000000000000000000000030006000000000002000000e00000010000000000020001000000000000000004000000000300050000454a9bfdd105b6ae1ec713463a0e00000002000000e00000010000000000000000000000"], 0x50}}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(r0, &(0x7f00000001c0)={0x78, 0x0, 0x2, {0x1f, 0x100000000, 0x0, {0x6, 0x9, 0x6, 0xec, 0x9, 0x6, 0x6, 0x2, 0x500, 0x920f, 0x800, r1, r2, 0x4, 0xc5}}}, 0x78) 10:44:58 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x214100, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000001340)={0x3, 0xc03, 0x0, 0x0, 0xf}) sendto$inet(r1, &(0x7f0000a88f88), 0x0, 0x20000000, &(0x7f0000e68000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) 10:44:58 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp6\x00') syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/enforce\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000000), 0x7ffffffe) 10:44:58 executing program 5: r0 = memfd_create(&(0x7f00000000c0)="7dbf2a78892d764fd34a556b884fc44e1d3903c25662e82a6cdc43eba6e41224d1a37a7a85f41eccfcf6b65f5fcaef1b9d0e50771b4e5b81921550c50e06f107c2b4f09cee7ff55ab6e18a401708af0a75d844397a9e52086a50cea96adaf842848d122eeb959a0ab24dc7d1874ec54f7322fc0cfafe", 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x51, r0, 0x0) getpgrp(0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000140)=0xc) r2 = syz_open_procfs(r1, &(0x7f0000000040)="736d61700200") sendfile(r0, r2, &(0x7f0000000000), 0x7ffffffe) 10:44:58 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x80000, 0x0) bind(r0, &(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1_to_bond\x00'}}, 0x80) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000340)=@add_del={0x2, &(0x7f00000002c0)='bond_slave_0\x00', 0x3}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@rand_addr}}, &(0x7f0000000240)=0xe8) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000280)={@loopback, r1}, 0x14) r2 = socket(0xb, 0x2, 0x200) bind(r2, &(0x7f0000000000)=@rc, 0x80) 10:44:58 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000200)=ANY=[], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:58 executing program 7: setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000840)={0x0, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x10}}}, 0x4}, 0x8c) 10:44:58 executing program 5: socket$unix(0x1, 0x5, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x2200, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000200)=0x20000000000000, 0x4) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'bcsh0\x00', {0x2, 0x4e21, @loopback}}) getsockopt(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000340)=""/165, &(0x7f0000000440)=0xffffffffffffff85) read$eventfd(r0, &(0x7f0000000240), 0x8) [ 109.070558] audit: type=1404 audit(1533725098.124:2): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 [ 109.092344] binder: 8558:8567 unknown command 536871424 [ 109.110848] binder: 8558:8567 ioctl c0306201 20000440 returned -22 10:44:58 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x8000, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") inotify_add_watch(r1, &(0x7f00000005c0)='./file1\x00', 0x200) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000200)={@mcast1}, &(0x7f0000000340)=0x14) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000380)={0x9, 0x3}) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r3 = dup3(r0, r2, 0x80000) truncate(&(0x7f0000000580)='./file0\x00', 0x4) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000000)=0x5) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x10) r4 = socket$l2tp(0x18, 0x1, 0x1) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000080)=0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f00000000c0)=r5) ioctl$PPPIOCGMRU(r4, 0x80047453, &(0x7f0000000540)) setsockopt$inet6_buf(r0, 0x29, 0x2f, &(0x7f00000002c0)="c39d3b759b65b30a67a5485f718c185bda60", 0x12) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000300)) write$selinux_access(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7075626c69635f636f6e74656e745f743a7330302f7362696e2f6468636c69656e7420313834343637343430373337303935353136313500ce24740e1a9a056e76ba10ec76513508f2b4280ae4025eac5bb7fbcc9ce07d6f49a1e8d7384a0fcc73b4c7cfd87d81ff6c086269a0da012928d2787765467beeb229086fff1bc829a5b8c55ab27c865b9891126b5eb511fc63892d81340c19079ac6d46c503ff35ec89ebf88dfca08bad5faa7ed2414a44bf435fced2a34108ab979c1367863198f73b4804ac3c0465be77c7f07d6ab537478ad8811884c3ac9eec5263419edf9"], 0x4a) ioctl$PPPIOCSFLAGS(r4, 0x40047459, &(0x7f0000000040)=0x4000) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000003c0)={0xc2, {{0x2, 0x4e23, @remote}}}, 0x84) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000500)=0x6) write$P9_RMKDIR(r1, &(0x7f0000000480)={0x14, 0x49, 0x2, {0x4, 0x0, 0x4}}, 0x14) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f00000004c0), 0x4) writev(r4, &(0x7f0000000600)=[{&(0x7f00000001c0)=')', 0x1}], 0x1) [ 109.228705] binder: 8581:8587 unknown command 536871424 [ 109.257379] binder: 8581:8587 ioctl c0306201 20000440 returned -22 10:44:58 executing program 4: r0 = socket$inet(0x2, 0x6, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c460006610401000000000000000200030002000000120200000000000040000000000000000c02000000000000a6d10000030038000800ffffffff468051e57464030000000300000000000000bc08000000000000f9ffffffffffffffff7f0000000000000600000000000000000800000000000005000000020000006f000000000000000000000000000000ea2b000000000000080000000000000003000000000000000800000000000000f8d1cf6bc8252c025b5f92a84bb4d5efd7201c0b3858f135ee"], 0xc9) shutdown(r0, 0x1) shutdown(r0, 0x1) 10:44:58 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000c00)=[{{&(0x7f0000000400)=@l2, 0x80, &(0x7f0000000480), 0x0, &(0x7f0000000000)=""/117, 0x75}, 0x7}], 0x1, 0x0, &(0x7f0000000cc0)) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000000680), 0x3ba, &(0x7f0000002000)=[{0x10}], 0x10}}], 0x2, 0x8000) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 10:44:58 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00004e8000)=[{&(0x7f0000004980)=';', 0x1}], 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) vmsplice(r0, &(0x7f0000000400)=[{&(0x7f0000000340)='S', 0x1}], 0x1, 0x0) 10:44:58 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x214100, 0x0) sendto$inet(r1, &(0x7f0000a88f88), 0x0, 0x20000000, &(0x7f0000e68000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) 10:44:58 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup3(r0, r0, 0x80000) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000000)) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr}}, 0x1c) 10:44:58 executing program 7: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000280)=0x0) mprotect(&(0x7f000004a000/0x4000)=nil, 0x4000, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000600)='/dev/full\x00', 0x20000, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000400), &(0x7f00000001c0)=0xfffffffffffffe9a) ioctl$TIOCCONS(r3, 0x541d) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r3, 0x8) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0x3ee) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r2, 0x8923, &(0x7f0000000100)={'team_slave_0\x00', @ifru_names='vlan0\x00'}) sendto$inet6(r5, &(0x7f0000000100), 0x0, 0x20000008, &(0x7f00000002c0)={0xa, 0x4e23}, 0x1c) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000540)={0x6, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e20, @rand_addr=0x2}, {0x2, 0x4e20, @multicast1}, 0xa0, 0x5, 0x7, 0xd8c, 0xca3e, &(0x7f0000000440)='bond_slave_1\x00', 0x1000, 0x5, 0x6}) wait4(r1, &(0x7f0000000340), 0x6, &(0x7f0000000380)) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000000c0)={0x2, 0x3}) r6 = socket$inet(0x10, 0x3, 0x4) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000200)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000240)={r7}) ioctl$TCFLSH(r4, 0x540b, 0x6) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) fcntl$dupfd(r6, 0x0, r6) sendfile(r2, r5, 0x0, 0x68) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x8000000000, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) close(r8) 10:44:58 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x8000, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") inotify_add_watch(r1, &(0x7f00000005c0)='./file1\x00', 0x200) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000200)={@mcast1}, &(0x7f0000000340)=0x14) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000380)={0x9, 0x3}) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r3 = dup3(r0, r2, 0x80000) truncate(&(0x7f0000000580)='./file0\x00', 0x4) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000000)=0x5) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x10) r4 = socket$l2tp(0x18, 0x1, 0x1) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000080)=0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f00000000c0)=r5) ioctl$PPPIOCGMRU(r4, 0x80047453, &(0x7f0000000540)) setsockopt$inet6_buf(r0, 0x29, 0x2f, &(0x7f00000002c0)="c39d3b759b65b30a67a5485f718c185bda60", 0x12) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000300)) write$selinux_access(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7075626c69635f636f6e74656e745f743a7330302f7362696e2f6468636c69656e7420313834343637343430373337303935353136313500ce24740e1a9a056e76ba10ec76513508f2b4280ae4025eac5bb7fbcc9ce07d6f49a1e8d7384a0fcc73b4c7cfd87d81ff6c086269a0da012928d2787765467beeb229086fff1bc829a5b8c55ab27c865b9891126b5eb511fc63892d81340c19079ac6d46c503ff35ec89ebf88dfca08bad5faa7ed2414a44bf435fced2a34108ab979c1367863198f73b4804ac3c0465be77c7f07d6ab537478ad8811884c3ac9eec5263419edf9"], 0x4a) ioctl$PPPIOCSFLAGS(r4, 0x40047459, &(0x7f0000000040)=0x4000) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000003c0)={0xc2, {{0x2, 0x4e23, @remote}}}, 0x84) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000500)=0x6) write$P9_RMKDIR(r1, &(0x7f0000000480)={0x14, 0x49, 0x2, {0x4, 0x0, 0x4}}, 0x14) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f00000004c0), 0x4) writev(r4, &(0x7f0000000600)=[{&(0x7f00000001c0)=')', 0x1}], 0x1) 10:44:58 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0x0, 0x20000000, &(0x7f0000e68000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) 10:44:58 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a600800000000000000068354015002c001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) timer_create(0x4, &(0x7f0000000240)={0x0, 0x2, 0x1, @thr={&(0x7f00000001c0)="6e123b608814fccaf58e7abf12fe574fcefc3ffeefa9cd39fd2394cb6e58f75dacf497933dcfc32213c63c2efbae7e8232d990623baccd844146c5f71c598e521988b67ed5963d030f4d84aefd129723d04f19cf653cb76cb03e506bb941986f91428b47d6d757fb35610a98536a8494ed7c6837", &(0x7f00000015c0)="dfcc68e6f52211628be7db4230f6321267fd20154ede2fed1c6f184e900cf78eda5439c49ee4233784f62f5d81da8c81254ce6a57a8de45377878e339ce63f634c29a91b3df6823576bb2d4bb7f22a6f1d1eea3aaf2fcd7b99c396934c854bc476526a08b57632b4a1053ee74a4400fbcdf0c2e6dd4ad1c493f428f239cec34668757534e04b6a0dd23297bcf8fd6f0a9df77617b0247df5c39ac8c81408d26bc1fa89b4a35c101c638e20d04f1f79e32660890bce8096df841670ac4370c6f633280285bdeec453263ddee37236ffb5b4138c466328474864d880bc1c7386f6ff8947bab3a65c7f8008526ed04e6bf67de4a3ef23288dcd5e114ad1ce969be4389b5564e0c24625c6cfafc4cc992a06be566f81567cb6a367bc04e59d95c814b714f2f7f169dfec3a587f2bddb143a94972be2a144234250ead19f1cb36946ca61fe4ff70563393a3d9db85188754f8bb492a6e4dcf75ebf9298b48971eb12a8e0a03e3bb999aa7f03bb1f97bfe351681b08bd344c6ec46a522c429abc8f27b4e86c3bd3aa3fa77fab253d1ed78b437d964eb5f1460059d26da7cd0c1d57323ff5924896a1237492811434008329d0433330ba05ac1c350471cf8b7f097b0e3bdfec61d057425576eb0001525ae7d0d5c8571c1e25ed1c1236f9d94c0caa8149c2286db7b27e3ebbcd3eabc1ca58782c0f418c279c6a4b4cf4f05916cbff839307b0837ba9280842a0a06e1650b665f064c629292dc71c5a8f8a940260745f78aff9d357973d545f68145bb64722b0517c66176a5ee7b770f0ba898fb42eefa15fab10e95ce84cc959fefa539a10eec67dc81ee98c3c1b827915543bc78b933c4242f20905f3100d3d46bbc3fc9311927af1f52c1eb86b617098a4206738d0f6aba7529b867fe703dd57f4604374a18c7342c3e4b1ef672ff88e6efb72cdb01618380285697957c58542533c3eb459042ea94d3b8388ed10cbfa590c653f613569e3cc1178c766556850342fcf0927ed37fe4a467d639b94b97a33ae3e9f4e583d1ba520d4d6ca3f4bb2c969230d4460b133a37fff91ca786859bffc4ee10497d49a9bc1f89e20742f01f54b1e6a21f99ba86d6b75171059b9bb749522c029a8709d11f80572f980286dc1b7726bcf90b1746015ec0bb3a1d773d622eea692a8f5f80151c026efc80617978e767396bdfb8e9d437229ce2dde071bd3cd5864688bd4162b1dee98787d75522dce67e788a34a6859c470399bdd7ba095107dde82d1aa611bba1d8c00f963567f3491cd68229e48a6bec8d0c1e56c74b7c99a3f138ac349c957eb19a4cda0dfe770c25964a8cf1cef7cb828ea5e49dbc527416d39b45ce4f6c52e07e0dbeb9218efb6a78c4e172808803d31b871bafaf0bef6ce105973c1e47624e336b9f6890b29721cd4a6f31cfb212ea937e708ced6b0553d49f309ca549364245b9c9c5a33162f2447c89ea047de3da29233aa70fec62ca5f1d5fd78b4bdda8e0b59bb0ddf7cf3a5e1ff9cab47d51195208a01b9de51f3a591c92f2c22842ab780d07345908b56d291fa722fadbc1b73d4b86f3e538e0a069e6e8efa467b8a7c7ede3c2d7c9a2348d92ea4fd43e23a3918031177c2921de097728691ff8718cf91a02921e7b7c0df5ae8f914cff3718e7cbb72f30aae24432d134377a58f0b823ac0dfb00ed8a850bcdba9bcc5f5637d92ba11dca773140e9bb79ac822d29cc556211a0dc86848e3d83ba978f3bf209f7879700bf941c0bd5323a0b2ae7877410f00761b3e65507331631d6883d3dd44dbb518e20bd8d988351cb988766488e43e8a4a44fd9b09695bf330355ddd7084f045e598cf7287549e3b94a0190f34831af277da3007fe09ede01033f628496f37758d593c7ebb5be30da4cd701eaf50d0e3436adcdba65466c57c9f1bb45e931fda907f94819ffea73c9644284bdc8fa2e6adba4ccdaff39246dbea7f5d8bd4262a52c1403cb3cbc96640ad02b6dbba6175c4c8ea2e61be920bd29c8e0b3acaa715765c108e4a79d542fa4ad4f6e33994945301797e44d24eabb086f9df5d296031ecb37d674d00dc90e1c4cab48debeb081c4fab1f5a9ca1e62fe49ca30c2892d1d1af2e4636cbb582acc533013b3198ebcfef409b1f38efe17c4771674949267b753de4d8a4640e04ace6b07efd82028c950062de224e31042999053e9d634278561f7c4ef8431da8d8370a8bd55150ebd7fe88761a0392b5539d305640fd04c5fd688936c60e6351b204ba1b0b70292e0e9872be8b9002d62aaffeaeb7d747d9a21a2b3208e047609fc1228fe8ba3fbc34d395b3b5d7b735dcde1255ee7ec35d67ac706963a1c99fbf90a849db973dd138223e43d2a5cb56118872144c0c34632f932addd40377b127f520a8b2cbab2a5b16d77760ec7457729806f06ac7e1f3c2b68f7384d340cda5f702744bcc079c5f594d90a0263f818e25b704fda5ef0c7fdee1b8fff21f38781f7ba572add8cc03b956ef1581b4ae977cc8a49fa7fd1beeda9d64de3c4c236921d67cf9841a062b84068d29614fa7b172dc23ec804c24693c8376dcce05cbcc5c7b91f3f3945c861e77b522d08ec721cbe62b2b5ddac0f7d14049336d374367f215a797500d7ae13bdde9aa076170ca45e8976fe73542101a615c46c0acbc5ea1147792e651822e9fa524ab54e387a5ed9e9304e8f01554f4461d0844035be5f5ed56e909714b27a7a46e734191e9d3a5b8e1b9131cbb3a6490f9afc5b3602381a721751cef87de0c6ed1223ac8e45043b98f4bd2a63b99efa8676608290a9b9ad3e3700dae9fae1f743f77272a2cb825448e4861e66a6daf96016c698c702e90ec82cf5f1bb3c569fd536791fde1c5061aa67019c35f281447a168fad4aef97c63abee244c401d5848d2471ce7fcba52f123a659b5f6b998eb539e05f2317c7c276a0fd7985864045bde137ea425b058ff87ca96d565fba454ae80d8532b8c64dd216cb449aab0386c5f82235eb38ae9596ee0cdcb72a8c604725db80c1e578ab4d6196263ca5282e8939a77c4d64563dfa1dad56ea7919ade9d77b90dbbbea06973f465c4d813ed7a6020aaf956e9164c3e53eddf6eb3b0de6a7cd6a343fe8dc0b461e2411b43bd132c89a29bee1012305ef8bcf68191f94e77c179ab58b572c392397b9edb1f2f935e4f2d4df5e8bdf0c262335b063c2e78e7d140b6d9bd607f102576431e8c9bf378b727cfadf8a0a5288ef3c24b56f037d156ef5325e6f5aedd722b341e75ff9ba89ddd424747006cce63c0280f06acdbddb597ea8df3bcd73cefbdf6155007398b79cd9780672381150ffed4182745bd5bc022a72c352c0e7235a362e91f52937a303586ea9845096cd969c028754dad4a8bce46b7d5615652e30ac3f706bf533de39d5fbd8133ae91665596dd06d5f9b55190339122c0f5d3a57f21f4c61950016df6803f87a4cb84d1cf26bcb95436bdcd57ee6158fecde38e5158c09a819a8871de576d89e71520ab97246135b50959ed265efa8f2499c3454a3f2521472de9dca4f141465415d87b3980e3df554cab92527923fbc614d9cbd38e82bde08cfc39632a8a8f7642283332317d832d95933e7a97e33fafc22a457e7b9057c5c16a0c2fd3a3699074eab01866ddfe1e66f1b0b6d7dde22ae3dcdc125fc61e7adc42f4dfb4a2a3384b1faed61853b4f61895f5063db61153b640742ba2997224a924fdce047c225fd28e8bf8f29b0d6703fc6514e48056fbe0e79115b9ed80ce2ff46763cb011ac6850cac99018d9ff202f133d5dedc39b8adbe78feadfad152b40d33f5c5f3fa2248c07a7ad52da91ac7d0d9c1120c9454d638491b79e6f525b3b8d11c0b794ab25daeb159d401869f03e8307decbee84ebd2e931f5176e41e48a3d1a20ca45e6ed67498b3f1d0c00fd4a5a2ea50bfe1bfc80a3e3011a4d159b56d468ba9524a47f468b7ab3232338c4af9c2dcb72918402ab41a745d853aa65a1f35da58a8056ffebad74bf01d99963d82e3b78889263d22be564ef3760d916ca61f0ebcb08bd2ed461027289be49762ad83bbb9620322586095e1f4a4ffa86edfbdb4a43656c68c45443676f999b9f5f01440e3fb61c12d44a9c007688a990f91d9a75c3b80b3ca54b7b924b09a6c9bd58c41f1bebde20374ba92ae5194c98d8cbecb66460fbacdbdad4d06d5409ebe742fdb21fb1ff8947e63ed53f4703c84f80660abba51adc1af921943ef2492603f7717d3d0daa10530b98540eac0e9cce785802b7de296e0238429ec684cddd39a4405332f6554427be3caa8b7ea1001429c2319e864bd3499d964fccb09080782c534ecf251083b82ca106bdcb3ce04bcd82a4a41002d60d64b3ed5833a3400374594c4e7cc9f33440516612154c7801a37e4f8cedd3c15ade7e732c2cb4a3cfef88832a88690acb9299eb9d67c71839c10be4638d8555a8ba2c76f77c2853bad4a4597d3d628e0c1b3cfd6cebf5b14021fe7f45d9bd6bbed5d00ae0576f18ac048b1853e5674909667178f333b66bf80b530f4a4f708f1a24ad2f66357bd6f7282fc817799b60b41d95fe688f9e9b3ac423457444ae28720675678516b7438fa0cfae0f2b6428552b54bf6c4ad5486c7a34228eea75fadb1d9bb02e0dcc3db00cd646c6526904559123224bdcaf0eb07900a092d51be24ccf6c8e851d2a1e0eb13be3fbe3d3ae57db5434be1e0bcb0d89ec0be37a4aeb6ecec9e21f27bc7b6353ac4d9328fcd5bf3e5acb5b9a182e7d1e952392346a303dc0806f72121396d22f488a4ea7ea54653de098c042c80a7838aa1ea7cf08b0964545bc0ed52c77b5678c7e75e7903096500005c9a2e2ca47177a2fd9d43d4e3c80db3dd7064fcee07b9a8711a8abe85022c5086ab96d397a9cf0572111143caa0cd8fa373da9e14433c6ea2f7c75f7997943f77e61bc68d2d273732e84e160b4f8850597032efe9c7fd363fb915783730f07ecf02fa7b1612a1692671b670a74d1bea0c9131393a1319a4f0e6d0aad46854881ca7aa5a5099dc23aa6c1ff44df2962907754c79751ae2c2051925f62c88ba5acd689e67a9f74bbf68815bfeda8786f932708450fc27f072a188d8b9ef60623d88e2dc48af4bc55632cbc96fe0d02dc2050297752d3be72c71ae77991ee796b0cee141328bf9461e610997b34f2fb8cad4850c24037cc877a43b852c1dc374b03884bb67844370b308f77be9e954a3d58386de2e63ea064c8aca3c7728e8ee7ee53237e50715ecb2674e56905c7cf96f2341e5d3d29031f1adf8b1be0ce44f77562ff55e2a250172978b5d11eb1c6f03b74a6b5763d762cf0b19013ed7bf0f6f1f08db56e209bfe183cb9fc15594419e7445f4753b5ec436a78ce647170e54ab2d3807e0b9ef440e49f7efd25d1f4b4afb645519ccd3865dab34121b3627428ca1f15f0025c74f3a06400bbd2693ef22bc28dcd751b6f23cb21ed3e1519fd38dcddfc51b189f7a196158e8866bc91b751e55b6b7497ca031bb695c1ec90312428fd003728cbd35e059d35cac5615b08f029183221d9fa785ccae348d30f47304bcc531cd0ca24d76af58ea3c190a61a6b2a44c71acbf1859e598c4d7edcf01599f3509c6005d3c4f6fd16d304320ffd5a0066b95180bae819ce5f3acf43a7675734fc29d676d421c7eae83bb1261401064b8e760b492fce8c1109e5676eb1cbbadd5770fc8db8a606c4efde4f6e572ecdf8405b95eaba2210c1e8a14d381e4c83a1b299c2f0a543647b8c0a0f7d49e082ef7d61c23f65df70"}}, &(0x7f0000001280)=0x0) timer_delete(r1) recvmsg(r0, &(0x7f0000001580)={&(0x7f0000000000)=@sco, 0x80, &(0x7f0000001440)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001380)=""/176, 0xb0}], 0x2, &(0x7f0000000080)=""/136, 0x88}, 0x0) 10:44:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x40000, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x400000, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$ASHMEM_GET_NAME(r2, 0xc0046209, &(0x7f0000830f3b)=""/197) 10:44:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x8000, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") inotify_add_watch(r1, &(0x7f00000005c0)='./file1\x00', 0x200) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000200)={@mcast1}, &(0x7f0000000340)=0x14) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000380)={0x9, 0x3}) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r3 = dup3(r0, r2, 0x80000) truncate(&(0x7f0000000580)='./file0\x00', 0x4) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000000)=0x5) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x10) r4 = socket$l2tp(0x18, 0x1, 0x1) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000080)=0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f00000000c0)=r5) ioctl$PPPIOCGMRU(r4, 0x80047453, &(0x7f0000000540)) setsockopt$inet6_buf(r0, 0x29, 0x2f, &(0x7f00000002c0)="c39d3b759b65b30a67a5485f718c185bda60", 0x12) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000300)) write$selinux_access(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7075626c69635f636f6e74656e745f743a7330302f7362696e2f6468636c69656e7420313834343637343430373337303935353136313500ce24740e1a9a056e76ba10ec76513508f2b4280ae4025eac5bb7fbcc9ce07d6f49a1e8d7384a0fcc73b4c7cfd87d81ff6c086269a0da012928d2787765467beeb229086fff1bc829a5b8c55ab27c865b9891126b5eb511fc63892d81340c19079ac6d46c503ff35ec89ebf88dfca08bad5faa7ed2414a44bf435fced2a34108ab979c1367863198f73b4804ac3c0465be77c7f07d6ab537478ad8811884c3ac9eec5263419edf9"], 0x4a) ioctl$PPPIOCSFLAGS(r4, 0x40047459, &(0x7f0000000040)=0x4000) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000003c0)={0xc2, {{0x2, 0x4e23, @remote}}}, 0x84) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000500)=0x6) write$P9_RMKDIR(r1, &(0x7f0000000480)={0x14, 0x49, 0x2, {0x4, 0x0, 0x4}}, 0x14) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f00000004c0), 0x4) writev(r4, &(0x7f0000000600)=[{&(0x7f00000001c0)=')', 0x1}], 0x1) [ 109.602798] binder: 8607:8609 unknown command 536871424 [ 109.615576] vlan0: renamed from team_slave_0 [ 109.626407] binder: 8607:8609 ioctl c0306201 20000440 returned -22 10:44:58 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000580), 0xc, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2cff0700000035000000bd4d000277597267942deb40a700000000db0000", @ANYRES32, @ANYBLOB="00000000000000000c000100aaaaaaaaaaaa0000"], 0x2c}}, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040), &(0x7f0000000080)=0x8) 10:44:58 executing program 0: r0 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pktcdvd/control\x00', 0x40, 0x0) ioctl$KDENABIO(r0, 0x4b36) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x100000000004131, 0xffffffffffffffff, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sw_sync\x00', 0x100, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @rand_addr}, &(0x7f0000000180)=0xc) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={r2, @multicast1, @local}, 0xc) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x180, 0x0) 10:44:58 executing program 5: r0 = memfd_create(&(0x7f0000000140)='#em1#+\x00', 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x2) ustat(0x7, &(0x7f0000000000)) openat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1) [ 109.751097] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 109.787864] binder: 8646:8651 unknown command 536871424 10:44:58 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) write$P9_RLOCK(r0, &(0x7f0000000000)={0x8}, 0x8) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f00000000c0)={0x8bc, 0x2, 0x1}) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000100)) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1, 0x11, r0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000340)={0xcb3, 0x0, 0x0, "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"}) 10:44:58 executing program 7: socket$inet6(0xa, 0x80000, 0x4) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='cpuacct.usage_all\x00', 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x6) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f00000000c0)="3ce4435678071176b3b9942f88e1401453ef5ded94e885bbf32db8ca08b56ec83f61c95fe0ef8e9b8e8f942938209e17e9ec05c7c5064aa7f7e725c0a23ae682aab390ce5d543ff23728e2a42f43335b71644177bf7c1d9e1c") read$eventfd(r0, &(0x7f0000000040), 0x8) getrandom(&(0x7f0000000200)=""/11, 0x9a0161f2a4edcb3d, 0x3) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000140)={0x0, 0x79, 0xee0a, 0x1f}, 0x10) 10:44:58 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, &(0x7f0000a88f88), 0x0, 0x20000000, &(0x7f0000e68000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) 10:44:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x8000, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") inotify_add_watch(r1, &(0x7f00000005c0)='./file1\x00', 0x200) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000200)={@mcast1}, &(0x7f0000000340)=0x14) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000380)={0x9, 0x3}) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r3 = dup3(r0, r2, 0x80000) truncate(&(0x7f0000000580)='./file0\x00', 0x4) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000000)=0x5) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x10) r4 = socket$l2tp(0x18, 0x1, 0x1) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000080)=0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f00000000c0)=r5) ioctl$PPPIOCGMRU(r4, 0x80047453, &(0x7f0000000540)) setsockopt$inet6_buf(r0, 0x29, 0x2f, &(0x7f00000002c0)="c39d3b759b65b30a67a5485f718c185bda60", 0x12) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000300)) write$selinux_access(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7075626c69635f636f6e74656e745f743a7330302f7362696e2f6468636c69656e7420313834343637343430373337303935353136313500ce24740e1a9a056e76ba10ec76513508f2b4280ae4025eac5bb7fbcc9ce07d6f49a1e8d7384a0fcc73b4c7cfd87d81ff6c086269a0da012928d2787765467beeb229086fff1bc829a5b8c55ab27c865b9891126b5eb511fc63892d81340c19079ac6d46c503ff35ec89ebf88dfca08bad5faa7ed2414a44bf435fced2a34108ab979c1367863198f73b4804ac3c0465be77c7f07d6ab537478ad8811884c3ac9eec5263419edf9"], 0x4a) ioctl$PPPIOCSFLAGS(r4, 0x40047459, &(0x7f0000000040)=0x4000) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000003c0)={0xc2, {{0x2, 0x4e23, @remote}}}, 0x84) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000500)=0x6) write$P9_RMKDIR(r1, &(0x7f0000000480)={0x14, 0x49, 0x2, {0x4, 0x0, 0x4}}, 0x14) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f00000004c0), 0x4) writev(r4, &(0x7f0000000600)=[{&(0x7f00000001c0)=')', 0x1}], 0x1) 10:44:58 executing program 0: r0 = memfd_create(&(0x7f0000000280)='#em1#+\x00', 0x0) write(r0, &(0x7f0000000080)="075b5ed7", 0x4) sched_yield() sendfile(r0, r0, &(0x7f0000001000), 0x10002) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) nanosleep(&(0x7f0000000040), &(0x7f00000000c0)) ioctl$TIOCNOTTY(r0, 0x5422) [ 109.837512] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 109.874323] binder: 8646:8651 ioctl c0306201 20000440 returned -22 10:44:58 executing program 3: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) lseek(r1, 0x0, 0x0) write$sndseq(r1, &(0x7f0000000200), 0x0) close(r0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000000400)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000003c0)='bdev\x00', 0x100000, &(0x7f0000444000)) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x10040, 0x0) mkdirat$cgroup(r2, &(0x7f0000000040)='syz0\x00', 0x1ff) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x7a00, &(0x7f000000a000)) mount(&(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)="6d736c6f7b0059e32f1ba1370210eea66f21cd546582b1eacd99b5605838cca1131989b9e85cfac320e39266bced3e3e84169ad9728fb5e0389d585f658d000000000000000000", 0x80000, &(0x7f0000000000)) umount2(&(0x7f00000005c0)='./file0\x00', 0x0) [ 109.947994] ================================================================== [ 109.955595] BUG: KASAN: use-after-free in pppol2tp_connect+0x172e/0x1910 [ 109.962436] Read of size 4 at addr ffff8801cbd88300 by task syz-executor6/8671 [ 109.969806] [ 109.971437] CPU: 1 PID: 8671 Comm: syz-executor6 Not tainted 4.4.146-g1396226 #15 [ 109.979590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 109.988936] 0000000000000000 2216ba987241caa1 ffff8801bd14fab0 ffffffff81e1292d 10:44:59 executing program 7: r0 = socket(0x10, 0x80002, 0x0) connect$netlink(r0, &(0x7f0000000040)=@proc, 0x1) open(&(0x7f0000000080)='./file0\x00', 0x0, 0xa0) r1 = dup2(r0, r0) r2 = fcntl$dupfd(r1, 0x406, r1) write$P9_RXATTRCREATE(r2, &(0x7f0000000000)={0x1, 0x21, 0x2}, 0x7) 10:44:59 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) [ 109.997545] ffffea00072f6200 ffff8801cbd88300 0000000000000000 ffff8801cbd88300 [ 110.005642] ffff8801cbd88280 ffff8801bd14fae8 ffffffff81517f76 ffff8801cbd88300 [ 110.013700] Call Trace: [ 110.016285] [] dump_stack+0xc1/0x124 [ 110.022154] [] print_address_description+0x6c/0x216 [ 110.028815] [] kasan_report.cold.7+0x175/0x2f7 [ 110.035060] [] ? pppol2tp_connect+0x172e/0x1910 [ 110.037636] binder: BINDER_SET_CONTEXT_MGR already set 10:44:59 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:59 executing program 7: syz_emit_ethernet(0x110, &(0x7f00000001c0)={@local, @link_local, [], {@ipv6={0x86dd, {0x77, 0x6, "ab8845", 0xda, 0xff, 0x58, @dev={0xfe, 0x80, [], 0x20}, @dev={0xfe, 0x80, [], 0x1a}, {[@fragment={0x7b, 0x0, 0x2, 0x0, 0x0, 0x0, 0x66}], @udp={0x4e23, 0x4e20, 0xd2, 0x0, [@guehdr={0x1, 0xb2d, 0xfff, 0x3ff, 0x100}, @guehdr={0x2, 0x3, 0x20, 0xfffffffffffff0c1, 0x100, [0x80]}], "1cb9b32b531ebcf0ecf440896f1ce740d315c188bea7ac5a4ace4eba1135f2200280b9e4994487021ac64c3703dd7d73d64d2a326168f3bb3415c81d10cb0fb31cc3eb4abf6c1b6adf4900fbb20d229ee975647191b176f6eb7ff246db9b2e4dacf4d9d35c3d2bc0510c550a73154e6a9c253ccf8fc2dd6bf285f6be1630703ef600c8ab848829fd860fe3b5c5a0ff90aefefa31f4bde93edb0ab4409075ea5883514cda104b372e54c9a82644f47588508f2bfc2b8962c26720959cb1b2"}}}}}}, &(0x7f0000000000)={0x0, 0x1}) 10:44:59 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r0, 0x800000000008982, &(0x7f0000000080)) syncfs(r0) [ 110.037644] binder: 8690:8693 ioctl 40046207 0 returned -16 [ 110.037757] binder: 8690:8693 unknown command 536871424 [ 110.037765] binder: 8690:8693 ioctl c0306201 20000440 returned -22 [ 110.064942] [] __asan_report_load4_noabort+0x14/0x20 [ 110.074271] [] pppol2tp_connect+0x172e/0x1910 [ 110.088836] [] ? pppol2tp_connect+0x7fb/0x1910 [ 110.095079] [] ? pppol2tp_recv+0x320/0x320 [ 110.100966] [] ? security_socket_connect+0x8f/0xc0 [ 110.107546] [] SYSC_connect+0x1b8/0x300 [ 110.113165] [] ? SYSC_bind+0x280/0x280 [ 110.116660] binder: BINDER_SET_CONTEXT_MGR already set [ 110.116669] binder: 8701:8704 ioctl 40046207 0 returned -16 [ 110.116785] binder: 8701:8704 unknown command 536871424 10:44:59 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 10:44:59 executing program 7: r0 = gettid() socketpair(0x0, 0x5, 0x39, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000100)=""/143) r2 = syz_open_procfs(r0, &(0x7f0000000080)='loginuid\x00') sendfile(r2, r2, &(0x7f00000000c0), 0x7) [ 110.116793] binder: 8701:8704 ioctl c0306201 20000440 returned -22 [ 110.149363] [] ? __fget+0x16f/0x3b0 [ 110.155115] [] ? compat_SyS_get_robust_list+0x310/0x310 [ 110.162137] [] ? compat_SyS_setsockopt+0x18d/0x2a0 [ 110.168711] [] ? SyS_socket+0x121/0x1b0 [ 110.174340] [] ? scm_detach_fds_compat+0x3b0/0x3b0 [ 110.181411] [] ? _raw_spin_unlock+0x2c/0x50 [ 110.187129] binder: BINDER_SET_CONTEXT_MGR already set [ 110.187137] binder: 8708:8711 ioctl 40046207 0 returned -16 10:44:59 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) [ 110.187731] binder: 8708:8711 unknown command 536871424 [ 110.187739] binder: 8708:8711 ioctl c0306201 20000440 returned -22 [ 110.210596] [] SyS_connect+0x24/0x30 [ 110.215954] [] ? SyS_accept+0x30/0x30 [ 110.221405] [] do_fast_syscall_32+0x324/0x8b0 [ 110.228036] [] sysenter_flags_fixed+0xd/0x1a [ 110.234085] [ 110.235705] Allocated by task 8648: [ 110.239319] [] save_stack_trace+0x26/0x50 10:44:59 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="390000001300090468fe0700000000000700ff3f03000000450001070000001419001a00a93ed4a48930f91d0200000800005d14dfb1150000", 0x39}], 0x130) r1 = socket$netlink(0x10, 0x3, 0x1f) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0xc00, 0x0) connect$l2tp(r2, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x4, 0x1, 0x3, {0xa, 0x4e21, 0x100000000, @mcast2, 0x7}}}, 0x32) 10:44:59 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000ff0)=[{0x20, 0x0, 0x0, 0x4f45}, {0x6}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x5, 0xf7b8, 0x7fffffff, 0xee, 0x0, 0x8, 0x60, 0x2, 0x4, 0x1000, 0x1, 0x8651, 0x4, 0x7, 0x1, 0x8001, 0x9, 0x2f7e252, 0x33f, 0x7, 0x57cb, 0xffff, 0xfa0b, 0x3, 0x4, 0x2498, 0x0, 0x1000, 0x5, 0xee0, 0x5, 0x6, 0x5, 0x401, 0xe3, 0xfffffffffffffffc, 0x0, 0x0, 0x3, @perf_config_ext={0xa071, 0x100000001}, 0x0, 0x400, 0x8, 0x5, 0x1, 0x9, 0x100000001}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40042406, &(0x7f0000000080)="2573797374656d905d00") sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 110.245250] [] save_stack+0x43/0xd0 [ 110.257500] [] kasan_kmalloc+0xc7/0xe0 [ 110.263748] binder: BINDER_SET_CONTEXT_MGR already set [ 110.263756] binder: 8716:8717 ioctl 40046207 0 returned -16 [ 110.264658] binder: 8716:8717 unknown command 536871424 [ 110.264666] binder: 8716:8717 ioctl c0306201 20000440 returned -22 [ 110.290918] [] kasan_slab_alloc+0x12/0x20 [ 110.296860] [] kmem_cache_alloc+0xbe/0x2a0 [ 110.302878] [] dst_alloc+0xb5/0x1a0 [ 110.308295] [] rt_dst_alloc+0x78/0x430 [ 110.314491] [] __ip_route_output_key_hash+0x9ac/0x2380 [ 110.321548] [] ip_route_output_flow+0x29/0xa0 [ 110.327828] [] __ip4_datagram_connect+0x663/0xfe0 [ 110.334471] [] __ip6_datagram_connect+0x1280/0x1960 [ 110.341271] [] ip6_datagram_connect+0x2f/0x50 [ 110.347545] [] inet_dgram_connect+0x117/0x200 [ 110.354362] [] SYSC_connect+0x1b8/0x300 [ 110.360113] [] SyS_connect+0x24/0x30 [ 110.366020] [] do_fast_syscall_32+0x324/0x8b0 [ 110.372307] [] sysenter_flags_fixed+0xd/0x1a [ 110.378496] [ 110.380126] Freed by task 8653: [ 110.383919] [] save_stack_trace+0x26/0x50 [ 110.389862] [] save_stack+0x43/0xd0 [ 110.395277] [] kasan_slab_free+0x72/0xc0 [ 110.401627] [] kmem_cache_free+0xbe/0x340 [ 110.407555] [] dst_destroy.part.6+0x1f5/0x330 [ 110.424257] [] dst_destroy_rcu+0x15/0x40 [ 110.431707] [] rcu_process_callbacks+0x927/0x1440 [ 110.438324] [] __do_softirq+0x22c/0xa1a [ 110.444097] [ 110.445721] The buggy address belongs to the object at ffff8801cbd88280 [ 110.445721] which belongs to the cache ip_dst_cache of size 208 [ 110.458956] The buggy address is located 128 bytes inside of [ 110.458956] 208-byte region [ffff8801cbd88280, ffff8801cbd88350) [ 110.471814] The buggy address belongs to the page: [ 110.493532] BUG: unable to handle kernel paging request at fffffffd6d456880 [ 110.500933] IP: [] cpuacct_charge+0x155/0x380 [ 110.507211] PGD 440f067 PUD 0 [ 110.510669] Oops: 0000 [#1] PREEMPT SMP KASAN [ 110.515712] Dumping ftrace buffer: [ 110.519265] (ftrace buffer empty) [ 110.522971] Modules linked in: [ 110.526298] CPU: 0 PID: 3798 Comm: syz-fuzzer Not tainted 4.4.146-g1396226 #15 [ 110.533648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 110.542987] task: ffff8801d9b78000 task.stack: ffff8801ca370000 [ 110.549024] RIP: 0010:[] [] cpuacct_charge+0x155/0x380 [ 110.557653] RSP: 0018:ffff8801ca377ca0 EFLAGS: 00010046 [ 110.563089] RAX: 1ffffffff089521f RBX: 00000000000185a8 RCX: ffffffff84a16600 [ 110.570361] RDX: fffffbffada8ad10 RSI: fffffffd6d456880 RDI: ffffffff844a90f8 [ 110.577628] RBP: ffff8801ca377ce0 R08: ffff8801d9b78978 R09: 0000000000000001 [ 110.584887] R10: 0000000000000001 R11: ffff8801d9b78000 R12: ffffffff844a9020 [ 110.592180] R13: dffffc0000000000 R14: 0000000002a93400 R15: ffffffffbd148050 [ 110.599480] FS: 000000c42008aae8(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 [ 110.607696] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 110.613580] CR2: fffffffd6d456880 CR3: 00000001d120e000 CR4: 00000000001606f0 [ 110.620840] Stack: [ 110.622978] ffffffff81226e50 0000000000000046 0000000000000003 ffff8801d4f0c860 [ 110.631313] ffff8801d4f0c800 0000000002a93400 ffff8801d4f0c8b0 0000000000000000 [ 110.639404] ffff8801ca377d28 ffffffff811db4c9 0000000000000005 ffff8801db31f558 [ 110.647481] Call Trace: [ 110.650069] [] ? cpuacct_charge+0x60/0x380 [ 110.655947] [] update_curr+0x2c9/0x6d0 [ 110.661491] [] enqueue_task_fair+0x2fa/0x2790 [ 110.667647] [] activate_task+0x14d/0x280 [ 110.673354] [] ttwu_do_activate.constprop.109+0xbf/0x1e0 [ 110.680446] [] try_to_wake_up+0x660/0xf00 [ 110.686250] [] wake_up_state+0x10/0x20 [ 110.691780] [] signal_wake_up_state+0x44/0x70 [ 110.697946] [] zap_other_threads+0x123/0x170 [ 110.703996] [] do_group_exit+0x26c/0x330 [ 110.709702] [] ? lockdep_sys_exit_thunk+0x12/0x14 [ 110.716251] [] SyS_exit_group+0x1d/0x20 [ 110.721892] [] entry_SYSCALL_64_fastpath+0x22/0x9e [ 110.728466] Code: 49 8d bc 24 d8 00 00 00 48 89 f8 48 c1 e8 03 42 80 3c 28 00 0f 85 c4 01 00 00 49 8b 9c 24 d8 00 00 00 80 3a 00 0f 85 8f 01 00 00 <4a> 03 1c f9 48 89 d8 48 c1 e8 03 42 80 3c 28 00 0f 85 be 01 00 [ 110.756485] RIP [] cpuacct_charge+0x155/0x380 [ 110.762920] RSP [ 110.766522] CR2: fffffffd6d456880 [ 110.769961] ---[ end trace c7218c83f4638778 ]--- [ 110.774712] Kernel panic - not syncing: Fatal exception [ 111.957691] Shutting down cpus with NMI [ 111.962099] Dumping ftrace buffer: [ 111.965627] (ftrace buffer empty) [ 111.969309] Kernel Offset: disabled [ 111.972907] Rebooting in 86400 seconds..