[....] Starting enhanced syslogd: rsyslogd[ 14.013369] audit: type=1400 audit(1572040973.823:4): avc: denied { syslog } for pid=1924 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.245' (ECDSA) to the list of known hosts. 2019/10/25 22:03:05 fuzzer started 2019/10/25 22:03:07 dialing manager at 10.128.0.26:38231 2019/10/25 22:03:07 syscalls: 1342 2019/10/25 22:03:07 code coverage: enabled 2019/10/25 22:03:07 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/10/25 22:03:07 extra coverage: extra coverage is not supported by the kernel 2019/10/25 22:03:07 setuid sandbox: enabled 2019/10/25 22:03:07 namespace sandbox: enabled 2019/10/25 22:03:07 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/25 22:03:07 fault injection: kernel does not have systematic fault injection support 2019/10/25 22:03:07 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/25 22:03:07 net packet injection: enabled 2019/10/25 22:03:07 net device setup: enabled 2019/10/25 22:03:07 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 22:03:35 executing program 0: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000040)={0x6, 0x80000000, 0x93, 0x7, 0x2}) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) sendmsg$sock(r0, &(0x7f0000001740)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @remote}, 0x80, &(0x7f0000001680)=[{&(0x7f0000000140)="faf5da52f1ed247330d96b22d0569f6fd3f49a019e6f764908ca0c92fc52fe90563abbaec895344f6cb273349f08bb54261a98a42e4af646bafac55126b6bccf4b0fe3a7dd9b2b07632b564a9526161c91d70ea82f48ba490b4729561743297337712f5ed689541ade45a1cb1788eccd2283422c7bf8ee9cb90a4cfb27a4db15", 0x80}, {&(0x7f00000001c0)="ef8a99c4e819ba31838b0c2d1975f46345bfe5fb0d7a874a0c7567117b5d09c29c55aa3aa00db5a25f7dc5a79401153314337cec6f7cd11145b89fe6", 0x3c}, {&(0x7f0000000200)="fd5af5134647a261b8c40cbffb5e8b2189888290f7a195b463c9bc9febdd8bd28e522321bd6d044875fecc21ba670f931e3a2ee43b23b7e18dab6f2d731c233c202b000013a7fd218b90adb88c2a2a97cf79273b2769cc3ad3617fad7365b9c0751568e56cbd0646d0590631e4027559326f91cb2b1478192150a4e2ffa6bdf8ea3f8ec5a941238d55333d0db77dfd0178feb5b2790e6eb1ee439366797372772eeea63925cd9892272470c4e32ca5431b890b17cabd5ff71c12803ed06073506484842104cd683ad714af9a1dd5401aef754b45c05058a6a93dcd894d2ec82cb4c5493b0b646e6368a31e6e460d4f5dd6b0d9bcc2ddfd1cfa", 0xf9}, {&(0x7f0000000300)="9a66db3aedc0351b426ee4dc4d2ea2d926adfaf1ac046a6d5ca53a3bf6aec90006c6bb94866ea33754ac0529c240eb97aa4a2e86ad9184b261d82f1928659f487d7ace0da1c546f95d6367da", 0x4c}, {&(0x7f0000000380)="1efab7db023e7a67c003139da67e9292a43b77b5525e853574f5972c38c8996bb5c419e471ffff1611a34ac36b3a261d12b3f137ab03b3fd03b78b94084f1e2ac5563028709545caf9b5ebaad47c2b44d58db272d7536aecd926a9e7dad4bf9a32d54d670d79cc5e1d832e98a52523766e55396660f2e41e3f663670d22bbb1b3b93f67a0bf492ce7a68bfc82e8bfeca6c6968e423c1cd11764c247caff03f63e3a5de06d7d4e40e038417", 0xab}, {&(0x7f0000000440)="80e647e17e7e7ebbad392ed7a0229fe711ffe219bde91e6668b923b7fb7831d774d37eee6a3737e1369d2f55755f6cbe81baf71a7bba1eda46539e44ce34503637a8fd120754f122023bbe526f8ed278a52b46dd7f900222d4413369d9357820316f9196d0b0d95d338dae08a575566a8a528d03c7983edbe1162c158b4c8f028438569250eb72c32320d47ea892386a0747d77ac38555e6319838266f6c22b3bf4b9ee17a6c499b9645dea1b20d35652ae3d000b84941517a", 0xb9}, {&(0x7f0000000500)="f2e3bb3b536c0d978e0ddd23e2b2cbda897569fe2b555b70ca9299cf83af4a53df509122d09d1be250ee644b825778bb8b4c1e61c90b82e9676a5c2276808a85bad66b", 0x43}, {&(0x7f0000000580)="dd57185634c57b1e34d11da9d3bc2945c97487c29907c6c404ec36973eb16750d0428c0d4da2ea8abdf120365045860ff0532f8427ac2c7b5e7fae1b09a98b0b0826e2a76fe423815f02b3319df355a5ef0a61642ba1fcbffe9b508b884a6ef1c6acb8ba7ec357f084a14eb682a7c30a953f90c25cddc8a1ea5342e16b04338a5853be5c1fac7e186ad91bb50ed0ee1ce3a1c1d6980347d582acaec2ba9e0950c55248d027", 0xa5}, {&(0x7f0000000640)="f59c8d4ae4f25ede4655bc7cabc3035749f23f588bc8f7cf1f48b50aa7c786ef9baa6f2bac54a60930267b", 0x2b}, {&(0x7f0000000680)="3af356159df4b08f1b3e094da876954dcd8767d5e8e89fb04d95f44b0ac084aa167c0d636560c949a69f99345b3ebdc70e50a6336d95aa2a8eb67b2abf26d0012498a16369c3cef733989b02dbe8b47d25062b3b5d09c3facca3e3c7bd9802e07065f27dba4ec24e10f27959375345f4bea3c782fc5e0c480d6fb1e72cb97c54f2260576ae4bea1dd99d876d89df20d8db2b969fbeef73994a500a8396d721e77c7ba87f197f8ef77b41f90077c7a3937bf7f65fb3af9fedbf2ba5d30edc3665001c5d380d6beb4578eb2eeaf6b2f89b3f0528f13a813a60c94f2e45e34af2fc5c6094cfd1066b1662f074160596dade51b15fef6795c2151a85d2e7e1f4e589ddb30427f7ff2e318dfd9c8012eec330fd0e72fea8d65eb7d7f3b9cdd3fe5dc7e506add6410b9b5efbeb766eb8535c1aeff41ebf709bc5f32c779f517d9c8f386d2193981728d0fe969c4d0a389c49b2b4ef732bd8d2c2fa4d8e08669575b8382d705a0b8bee2c9398e78534b522e38538e9207ec9d8b08b5992dce0c39475bc7448298259675290eeebc6c93d617ff77227f8232081071462a3110f2f23e6e79ddf17cc36fda0dbe91a939791e3790c713a6dc9b66ac514066b9429849e74d00ed977a57abd592bf8c751877b7dc059e7601e116aaa5e40eb67f68f4f2154f55a3da1787dc2cba95290fce700620d4aede002e38553ae2e21f83005d86274a27f3b05a1d0d39af6a072d9904300a164a2488c1fdc05cf1c4e709f5d56aaf10a0680ba21c0637467089c46019dfa198bf2dba23b2126fdfa3d414133eb63175f7139e75d18fc63bdc24cbf555c2564152709cc03c4c47d7707c6c3c90a457883a60a04111f8862de3956dbb1dc2ac285bf954542f32a9f7a288c3390f53accf902454d86de9222572bf3c7371e815b840c1b7c97180492e046691685ef0d63a490148a62e6ef783aacfea5edf7e4a10cedc81a74d6faf76d7fcde1502f93c4ea7164b7271778b8d5077fc4cc7cc9933273d65c74048705669aa9ae7e41f7d1b380edd6cd5d55c838dd73d57f6f70fa2f20f0dc5f68f15b15f95d1492be21498ac595601c62134a29701af8a7cd7cf5ef9a769ab95170c05a214546e86d7966a18000809a8bc74a48087c5b950f4f4530102e71f4a2fbc33eb736e22a4c90f675eb87ab73418c3c5febb15846cac5426811d0284ef3db117e429533a04942ae41c92c30c302f2f60a75a447d5b7cd7676921809ade77e4039d2f224aeaf3af1a88b6c6c874e8e899a659ffbebe45154bcee2005be22a3854fceca4444d4aebac8a69fb394c0e902287d94734e2139c01893033f6234a9e9c6c9b5643a62af1cce7d47d3a663028d8f55050197721319fcd392e28100c8041268e3608860f285087b9d59b6dc5617f4516073ecdfc1ef44da7810f74e65692bdcef8205a25657970f38bd135c09cc45308cf4a575372ebac5325f16862828519505447c45414c04c9111c1576aa9bb92173cdc1652dd24d029f11eb45ea0836affe0caab76444a06db1a7efb76ea516ceb41ee28c5adae356ed6b31c7f0bb5d581bb631a93e68c2a31772f8228dd2b2f11c2576a1eaa65189554c0cc9d10f447b14019d7fa9d87cf64c3aca105ce648d618f4c1a9c8c5e4842da78dae4b89c7dca7d2e64ffbb0c6f5d57e1eba8561489b8e1fa06a38c4e2d173a378583d600aee405e7e949abd662398145feb9787231ca56641652534db64c38ac6d1027cb51c8895f6d13e0d1b422019c013221f2f06301b7e0abb779223f73471ba6e375e5d67e663fa43657f5865daf7e6c7a0152982dc79e94362455f2aac930d54764c1211dd24393a21a01e7c5a768f3ffe30d05ad1c046d974c0db2686209c7c113663d0f10fb937e1533ad96c6f400d23e5a9857e7b1ab19364904a110fe012849f73e246dc03d5e49f79b70ace44111a2c7850c283ae9e2d02393dd0c468e3e7f4f8380492ef078c26510aefd8d4141918c0d6a911ecc5d9e8ab6841dcc6d49a9e7fb84341519f3eb16c2fa1e919ebab757835ed9cab9163c2971d2471f9cc04a4ddce2e68e3187a8d0f0237a56b4e48d5ae3515154b0a104f7f2c45fcde2bd059164054157b57cdc048d04bd8555b9de25517747a4826fafb3b47de3b649971eef94a74ef2dc4841d32d78bf45abd96b4f2d1b6079cba5bf88298c80fa0cf8d69ca8dbd3f290512e08d33d010969ae4cc5114a94f375236f53200fd5b3f9352661431e231b3cce1ef5e34dc6277b3706297d7bcd1d0a87cbbcb4bd0bbd4a938ffd42b8a20d17248a39d4d5d6e19ad58b42c6888bc133290a9d2d8ce90f66d63af31bccd08c5fba3f7145552466e049d0967c5f96ac0c2558ec663f635c2dc4ac917cd8161753165479a5257f84b6bea69529d9acf9b2c83959fd76068dad54903902f6697da145407d90a1646fecc7ff5c00345cf53896a03e35b0f00777b93c3e9b0d395be2386079cb9f75558c474a7720a02fdde413b51eeef5df924df227a8927fdc376f9ecefd0b96599c1c5e10d7c19ebde27f2a75691d54fe431bbc785f5504f4aa259217e9197f8b3a727f3aa0e31ce22645ee076a318f9a11312500055e70a7a8e446e78154bc1117d5fc258972fafeced2a5e04e792a696d0ae12cdca7d3ab6143627d421a642b68274bf6281b1a5736334b7a8cd49e16ac290f96ac6098cc2f635d2ae262d4f5dcff49e3409037d13e23abb7e1d9a76eec27f3a00d958d5b3a1a1158f6732d23642e5c2f34f95489c120896f591ab62380bcf0a5d4c987a9ea580ccfd4ca9a5a57af401c25453b3153608178d45a9ce7f2ae6c0772dc49635d7dfb0bb0ed334e3149193549a93c1c05a980c3170dd96bd2af263f460b54c549d1cf3a8818fd977e5d0549ab077c4a955dabb840df52a5f65c569bfdbaa81cef7a180b658c97bbb327a9176bb0a669b54b3a9a0abd693d6de788009eb63464a79321e2946eef14ffcb1f5a518c96152a18940a9c0f48625aaef4dbba30c1eddb1714890db728601536662059f8185d671702faa6de9b6e28510dd8aef3ef0cf78761445db9d5a7705a65c4a7e6f59c4152c2a04af24888ef0215bb265ec3430dfc3291ab3f9fdeda232e2d2d79629a65b1d5de1db37eea6e07be4971fd9b5190e5bac3343ee1a7ce5638337c5d5558ed0352a9fd51b399c13dea3327f215c7910d9ff2be297f03c83c7ef283d272f56f82c6e761f0408f6bf5f5baa211bf436f2c0dfa684c8d6e129145cb592fa85e78021b19280e1f8b34c2ed4e4ca160e9fbda9e1948e243c292be4ba2ac2217ad55861a5631267c9f236c63d7a268ea025bedbba455aa32cec9b531ff314ee60258bb5840c18a3e8152e1e2b7ecd158dd74b8d791163258d47eb8cfccad48eeb46d058c7d9662b56b8bc1bec5755efcb273092efc042659c5d0a79bbecbbbe60542d59ecb75dd53f6d8a55a7b13189eae70883a54050713506eeb279f2e115d9225b3ec710ac5990cd9bb500ad50114d3edc83f27e871ded711b9fdd6648c54c194ec603797d2558dc0cdece4a4052974bc3a2e451cc24780990b112ad36fc343eb3cb581dc65986b3bcbec7c98012dad1f80dbcd5a9f23b4adc8252aa3f69b7073f88b67052e700e1b03471a84e0c992a684d1efe3c268673a74df129387d2b45a8d536263e5ca36610ec5be8ef585651b4081db436464ade84c91ad80ee74ffbbdca0d2b22f16057dffe477fa86042fe417e5d059cf21acde682b9dbf692bfe3b1071186068e85f20d544bd875565de2e7500e20a2e1e689324d92a762bc8a20dbd9339b97d63c7bd58b82a64f0208da874b8232a54e243c1e7ffbbf7b93dc8b70492d6634d797e0f53c6e1dfe00f38a93a3cfa383335ae434febaa02ed5e8beaf0c2e60683e007381f82acda43994c58f620bdf17d79c5e8368294db99916ad78eda7947655b3682beb63779a6a2d1401dde50b16c34629e69f919f5faab836ee55ef970d97991bc6c1197284f583c662ebbcf95f6c63e545346b377da39a6a6093ecf31976c299514b80704a95f63b1ea80019be2f99272d001498101eaf4f7e227f3db83f3d0a3ddf743bf3031e41bb9d7192f3f8d28a6b3bb4da7a2d48c31ff311dee695a567fcbb6783f204327d8c939ba0aa42b8b1d7c87e0df9ef2cb6448db320876cd41c4f70c8b83603e248fb961e8e3ec4c2d7cff47e9795b027948f0b579bd68e64525a4afdc9d4086a2819e95a918cc11f826cf20643ace946c3e35b7d35cedaeb17ff2056108ffafd18519ecd70c6049b0aed3ce5e68b058dc11f7c1a68b4564526b32a1a5ad6a4801f301e2df705ab5ca21ba5dd458d738c8853c9ee9264a791e2dee74ce1b1ade895bae1d477b4fb09b4bba3276238d10fd28c6664391fb84970c4137eab8915ef5e0d44e4b918917f524b64f9b66d7fd3a90776c5c77345e355e6f5c995abebefa75d3af8292ff38a198d908ab4a5ab0a5dca710dc47af3da83bedde303e61358b1103df14d046d084db4ede4a0001e4ada52c3badafc4ea8c89d32b06d665041e0bf6241ea67d24b58e66a48d7a086fe9f1308c1417f9f1ba1d6177427f7d7ae6912ed10f48ef15b4ad41426f35b94eb1c2f2b70602011b42cd7b7ca7b9a09cc2e13f17b1f16b4641e6591c8b9cc191ad8f1853a6446028070956fe334e993df140ca2afc0b6d89264a5afe995edb330f1685e8462cf9c8c51de89c2dc4580fd202b226c71c5bf8bc5e199877bb79a6b98a1e8413cb5b46f8aade570cc9bcc969e3497457c11bb16ccd8ed603845a0c2684bb4d85a0eccfaaa3eaedb93219a94d587ed81dc8bb96fc9f47794293f6321defd4cd106c1c80f50daa6030eaa28716d49866b6d30ded91fb72a1461a7817eb844fc310bc3c6075a99345d2e35f75a688253dd780a9575d5c8b2cbc18c159fc0033e9ffa2aa4dd88375ba53cdabfc7b93d859bb43a512987dd8af1ee55409bcd5c24cbf789335857053c9718f88e1178b0cbcb1aa3d8c28bf456c5c46bc6c011bbc712028cead0b38e2e4affbcaf62166e1013782909d94f65130778e511276f20643d864e1a2aedaea378be9e58db4adac2ef1023ee1ff844e4cc6ec58b43e17ba8573b4cb1d78be637a91775b4b2bd366e58074151bf5cc792ccfbd2298eb61b4f00f9d357e2c9f6f24837ddc6bff38679acde066a6e164f1cf46806ae22e79f7580e6831c9c4eb1415946d628f9dcbfd2c38601ca7ccaf302083bdfb9fafdd3aec08a257a4e9d3236d69e7696df8bfc29b54a9d431952be92eacaad08a162df471a50beedeb5ccb924777ac7bbdfcfafc67cfeeb4bd6a19c10f4be7e51d912b4a4915a814d5e864c18ed802adf1ac0b4e71cf6492810d45eadc98374268643b6aa5c8694ba160bea5c42b15ada67f73fcb179d5d742b71ed705eb85ba4e751f3051921745abb067da3bfe50937a3a5c3059cc77a965ff01d597d45289750a764a230f21d71af7b00e60667891b956d2f6c86defb0cf3c1daff17630908da44270d39f0ac2c254ccaac7b58fb13e9a58ca0fb7d266bb8779e08835eb0eb727510adc7b7b92bc4ca012f839e804ce4e090ce645a50fe27de738bc10e042c09ac4010f793b705429b064cfa30776582f95182ad2463b46278b936f1b3e38fe2b40d583c41697ed57019a250c6541de28506124a50a2db6e0d35fbc86dbce59ba49cc022997fd0498111cd0ba735952661897b77af381348d1378223559816536a83c5935966cec1b42a218118f92abebb719e3af", 0x1000}], 0xa, &(0x7f0000001700)=[@timestamping={{0x10, 0x1, 0x25, 0x1}}, @txtime={{0x14, 0x1, 0x3d, 0x80000000}}], 0x24}, 0x20000000) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000001780)={'veth0_to_hsr\x00', @ifru_addrs=@tipc=@name={0x1e, 0x2, 0x0, {{0x2, 0x4}, 0x4}}}) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000017c0)) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000001800)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000001840)='/dev/full\x00', 0x101000, 0x0) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000001880), &(0x7f00000018c0)=0x4) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001940)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000001b00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001980)={0x110, r3, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa35}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xa8, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x5, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x532d, @mcast2, 0x9}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8000, @loopback, 0xe0}}, {0x20, 0x2, @in6={0xa, 0x1ff, 0x2, @ipv4={[], [], @local}, 0x7ff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'bond0\x00'}}]}, @TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x110}}, 0x800) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$LOOP_GET_STATUS(r4, 0x4c03, &(0x7f0000001b40)) pipe(&(0x7f0000001c00)) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TIOCGSERIAL(r5, 0x541e, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/1}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000001cc0)={@multicast2, @rand_addr, 0x0}, &(0x7f0000001d00)=0xc) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000001d40)={@dev={0xfe, 0x80, [], 0x23}, 0x1a, r6}) r7 = openat$keychord(0xffffffffffffff9c, &(0x7f0000001d80)='/dev/keychord\x00', 0x480, 0x0) sendmsg$TIPC_NL_PUBL_GET(r7, &(0x7f0000001f00)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e00)={0x94, r3, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x68, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x48deeeed}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x69}]}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80}]}]}, 0x94}, 0x1, 0x0, 0x0, 0xb87a90e277ff8b71}, 0x4000000) pipe2(&(0x7f0000001f40)={0xffffffffffffffff}, 0x4000) pipe2(&(0x7f0000001fc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) renameat(r8, &(0x7f0000001f80)='./file0\x00', r9, &(0x7f0000002000)='./file0\x00') r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1100, 0x4) getdents64(r11, &(0x7f0000002080)=""/129, 0x81) fsetxattr$security_smack_transmute(r10, &(0x7f0000002140)='security.SMACK64TRANSMUTE\x00', &(0x7f0000002180)='TRUE', 0x4, 0x2) ioctl$BLKFLSBUF(r7, 0x1261, &(0x7f00000021c0)=0x3) ioctl$sock_ifreq(0xffffffffffffffff, 0x896b, &(0x7f0000002200)={'veth0\x00', @ifru_names='syz_tun\x00'}) 22:03:35 executing program 2: timerfd_create(0x0, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f0000000080)={{r1, r2+10000000}, {0x77359400}}, &(0x7f00000000c0)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x200000, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000140)={0xb, 'syz0\x00', 'syz1\x00', 'syz1\x00', 0x43, 0x7f, 0x8, 0x4c, 0x3c91, 0x341f3525, "2be29353ca3fc4b1e32a2c16e67a5212e74678e5907665d00bb49def049e2447de33af8cbd07767ae873048629dc77df1e1275e02423704fc4462cafb4bc6e18acf975"}, 0x15b) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$BLKROTATIONAL(r4, 0x127e, &(0x7f0000000300)) r5 = accept4(0xffffffffffffffff, &(0x7f0000000340)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f00000003c0)=0x80, 0x80000) write(r5, &(0x7f0000000400)="52d00dde8bd44c15696176cf0aec1cceaace2333", 0x14) prctl$PR_SET_DUMPABLE(0x4, 0x1) ioctl$EVIOCSFF(r3, 0x402c4580, &(0x7f0000000440)={0x52, 0xd6, 0x0, {0x9, 0xff}, {0x4800, 0x3}, @ramp={0x4, 0xd2d, {0x7, 0x3, 0x1, 0xfffd}}}) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) utimes(&(0x7f0000000480)='./file0\x00', &(0x7f0000000540)={{r6, r7/1000+30000}, {r8, r9/1000+10000}}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000580)=0xf, 0x4) r10 = openat$keychord(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/keychord\x00', 0x400400, 0x0) ioctl$TUNGETSNDBUF(r10, 0x800454d3, &(0x7f0000000600)) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000640)={0x0, @initdev}, &(0x7f0000000680)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000006c0)={'team0\x00', r11}) r12 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BLKGETSIZE(r12, 0x1260, &(0x7f0000000700)) r13 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000740), 0x469f8b121b7b5207) setsockopt$inet6_tcp_TCP_CONGESTION(r13, 0x6, 0xd, &(0x7f0000000780)='reno\x00', 0x5) signalfd(0xffffffffffffffff, &(0x7f00000007c0)={0x7f}, 0x8) r14 = syz_genetlink_get_family_id$nbd(&(0x7f0000000840)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x28, r14, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}}, 0x41) r15 = openat$cgroup_ro(r0, &(0x7f0000000940)='cpuacct.usage_user\x00', 0x0, 0x0) r16 = signalfd4(0xffffffffffffffff, &(0x7f0000000980)={0x1}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r15, 0x1, r16, &(0x7f00000009c0)={0x4}) 22:03:35 executing program 1: rt_sigprocmask(0x1, &(0x7f0000000000)={0x1}, &(0x7f0000000040), 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000140), &(0x7f0000000180)=0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f00000001c0)=0x5, 0x4) r2 = dup2(0xffffffffffffffff, r0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r3, 0xa10, 0x70bd29, 0x25dfdbff, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4048800) r4 = socket$inet6(0xa, 0x3, 0x8c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000340)={{0xa, 0x4e23, 0x2, @local, 0x7f}, {0xa, 0x4e21, 0x0, @loopback, 0x7}, 0x4, [0xbb, 0x100, 0x80, 0x40, 0x7, 0x5, 0x7fffffff]}, 0x5c) ioctl$TCSETS(r1, 0x5402, &(0x7f00000003c0)={0xf0, 0x1, 0x401, 0x2, 0x15, 0xdd, 0x4, 0x1f, 0x7fffffff, 0x3, 0x4, 0x5}) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/checkreqprot\x00', 0x4002, 0x0) ioctl$EVIOCGBITSND(r5, 0x80404532, &(0x7f0000000440)=""/52) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = accept4$unix(0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000540)=0x6e, 0x80000) splice(r6, &(0x7f0000000480), r7, &(0x7f0000000580), 0x1ff, 0xc) r8 = getpid() ptrace$setopts(0x4206, r8, 0xf53, 0x2) pselect6(0x40, &(0x7f00000005c0)={0x80, 0x7, 0x8, 0x48, 0x400, 0x0, 0x5, 0x7}, &(0x7f0000000600)={0x7f, 0x8, 0xef, 0x7f, 0xffffffffffffff50, 0x8001, 0x9, 0x7}, &(0x7f0000000640)={0x2, 0x80, 0x9, 0x5, 0x7fffffff, 0x400, 0x5, 0x8}, &(0x7f0000000680)={0x0, 0x1c9c380}, &(0x7f0000000700)={&(0x7f00000006c0)={0x40}, 0x8}) ptrace$setregs(0xffffffffffffffff, r8, 0x0, &(0x7f0000000740)="1eeb8b6f6fca60e452757c761c726d06458866a1f40303572a6d33d8253b90e0dc418922458835d5a7fbdc668d0c9310ec48f682f2cb5eccdb3f90d38d80fd87c96400f6ee93aeda9718c6f27e7fecb4cb14e433f87385a06560255cd171b890a5f23b008a9df2370d1e77cf66436ac5a98cd45f6a9955befa21ecd0ad374eaf7d34c847f79b218d939240941555f4a27b8400dd50ffe82a7ec500b5d379fbf5ddc63ca365f5") r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000800)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(r9, 0x29, 0x40, &(0x7f0000000840)={'raw\x00'}, &(0x7f00000008c0)=0x54) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r5, 0xc080661a, &(0x7f0000000900)={{0x0, 0x0, @descriptor="9c576f05dab3b11e"}}) r10 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000980)='/dev/keychord\x00', 0x440040, 0x0) stat(&(0x7f0000000e00)='./file0\x00', &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000f40)=0x0) stat(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r15 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000001040)='/selinux/user\x00', 0x2, 0x0) r16 = gettid() fstat(r2, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000001180)=0x0) getresgid(&(0x7f00000011c0), &(0x7f0000001200)=0x0, &(0x7f0000001240)) r21 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000001280)='/selinux/access\x00', 0x2, 0x0) socketpair(0x5462614bd8c0fcdc, 0x80000, 0x3f, &(0x7f00000012c0)={0xffffffffffffffff}) r23 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001300)='/dev/rtc0\x00', 0x20200, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000001340)={0x2b, 0x1c, 0xf1712f4682c4b65b, r2}) r25 = getpid() r26 = geteuid() lstat(&(0x7f0000001380)='./file0\x00', &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r28 = getpgid(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001440)={0x0, 0x0}, &(0x7f0000001480)=0xc) getgroups(0x1, &(0x7f00000014c0)=[0x0]) sendmsg$unix(r10, &(0x7f0000001600)={&(0x7f00000009c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000a40)="0731972185d5475ea1c17ce72695f4c54ebca4a9fbcb537976f5c1da3fece360e645ed31d9889f6df9e94eacaa8dd1aa2e52fe4d6539f736659e64083de52f22dfe0829a165c95546216291b4c6f39c4ea228b9bbc83da06df68b067b5140999d3c9ae1c76c81c621d937ebc24e608224f3149d944c55ffa91df8466ad223d164bae9027de3e3ecf67979705c70bc161227ce26333c29d25031d3511358fb92406a8ffec24230ae2e1b024a08703f459", 0xb0}, {&(0x7f0000000b00)="58f996bda88d4652d357c90e23f9de93c01a8f9e3853380989d7eb3861bb97b55224e26999e5caa6d853f113d11e905825d7bfe7db0b19e93b732d5a9920944e79967014a3a8e56b6740d1f9f929965abd58d3133163abc2f172", 0x5a}, {&(0x7f0000000b80)="843d482c02a168bf2f29ee8f82d6346b27812b4e3973ebf342049d5b0be38feaddfc069ee838b823bf760cb25f47777de3010c9083c33ad18fa9a60c9568741cfe35141f6bbd7a80dfd285f47c31c1ae41603efd09c3c9636c805db36a0d3e76cdabefeaad56a45deb40d906f1f98e04feb5bf566d55b2a7", 0x78}, {&(0x7f0000000c00)="4fc57afe7da71f3c11256608a2cf5d852bb4a2a3da2814fb624fe78db1093615a897d6f5194a637971a5b4c9fd1ee13ac192be1013d107b49dc3be40497decb1eb2916c43010c98ccb0eca0cd2009b30a4aa657ecba24fad0b46c65eed99c31ba6c07d70d9d1d363d120cd9cae17af7fdeef74fccbff6f924b2e87d77d8e98feb9aa171a530f1f5e3844e9217c76f206c38fe6b1f9c142056008a16e855b77c7bfce05d9d0c396870502ea920e588c0a25b3f145f79a4ed52f8cd8da2a2f9348d4597a8733951afb5568086f746779ab51", 0xd1}, {&(0x7f0000000d00)="7b4d96569af4b21b1b415cb9ac8970f6106ae50a39c95c3d3f", 0x19}, {&(0x7f0000000d40)="9c9f4e6d25bbbbdcc8724cc49e473aed8494c3a4bc56fd03248f648c1746551c0f35f49ddd5d29b9526dbaba6ab8f979d29bed678dfdb3b0b7e52aed6c1ab99ecabda16fc8e2f980ef39c117e6919c9d5fa89ae15f451be1f96322", 0x5b}], 0x6, &(0x7f0000001500)=[@cred={{0x18, 0x1, 0x2, {0xffffffffffffffff, r11, r12}}}, @cred={{0x18, 0x1, 0x2, {0x0, r13, r14}}}, @rights={{0x10, 0x1, 0x1, [r2]}}, @rights={{0x10, 0x1, 0x1, [r15]}}, @cred={{0x18, 0x1, 0x2, {r16, r17, r18}}}, @cred={{0x18, 0x1, 0x2, {r19, 0xffffffffffffffff, r20}}}, @rights={{0x30, 0x1, 0x1, [r21, 0xffffffffffffffff, r2, r6, r7, r22, r23, r24, r9]}}, @cred={{0x18, 0x1, 0x2, {r25, r26, r27}}}, @cred={{0x18, 0x1, 0x2, {r28, r29, r30}}}], 0xe0, 0x20}, 0x40408d1) 22:03:35 executing program 3: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000140)=@get={0x1, &(0x7f0000000040)=""/227, 0x1}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, r1, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x90, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x90}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc682}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x54, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x73e711b1}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x80}, 0x8841) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x488e55259888f93e, 0x0) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000400)={0x18, 0x1, 0x0, {0xcde}}, 0x18) r3 = syz_open_dev$mice(&(0x7f0000000500)='/dev/input/mice\x00', 0x0, 0x8000) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000540)=0x80, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'team_slave_0\x00'}) r4 = open(&(0x7f00000005c0)='./file0\x00', 0x200000, 0x10) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f0000000600)={'filter\x00', 0xba, "2b90d6634c6a88505c9a9fea3f1b87aa90f33ec7b0a82bf2dabb26cfcb0c41b05f0a5ce39eb612f6e4a39136014b806b1feab772c7206984a34f16de0e1f80a09480b4a95b1a45dc2f85396ba2f0ca2bd2d7cdb90ef30df01b82c37845db37f27e8a21fea18272496888b1f0d3bbfd3f7e62c99632e97346c3f3532a0a4f9e60e885ba39d7ff5ccfde4f078ef0eb2c1de0ad1da385049820f80ceaf66a9c9d9a039e3293e90e59e6802ebff9b792f06ef75796795fcdb97ecb0d"}, &(0x7f0000000700)=0xde) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000740)={'veth0_to_bridge\x00', {0x2, 0x4e24, @rand_addr=0x9b83}}) getpeername$packet(r3, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000007c0)=0x14) prctl$PR_GET_FP_MODE(0x2e) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) getpeername$packet(0xffffffffffffffff, &(0x7f0000003240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000003280)=0x14) sendmsg$inet6(r5, &(0x7f00000053c0)={&(0x7f0000000800)={0xa, 0x4e23, 0x1, @rand_addr="d6cbc7c825b8c3b71047e2c737ec9105", 0x7}, 0x1c, &(0x7f0000000b80)=[{&(0x7f0000000840)="6410b009ae789ee1a3c91478d9254eb5d093700da116cd3ebdbfd5b1ce052dee832d8933b963e5a6d8d4c454c0a8b1bc6bedfe17e66c57fc70945fb20318c1f8852355898c2dae043200b8dd5b6589716211f599dcd4e7be1c707db2b6cafb0bc2baca349ea249173631f7f02b42287b0321a3632ec0a8ceac1ec42299533583663d2f56c06614b316d3f18c05e02813f4c2d1b19aec2d019aa035cd88a68ad87b18a109cc729279d0ac8cac4d8847af5eda269082edfe842b732ec72d8e1f158a636deed8296f6c7b32cd", 0xcb}, {&(0x7f0000000940)="d10c08a863fac8926c87fde95b59d97f2a1b73770f8fcba875756e0c1c8f64750730efcf553de3a7b2ed80f188a74bc63cd4f91a23f49a5b22141b3e6b9ee34bb938a06e9a82f7d24ea0a9c697fc3f78637c50a357b8d9ac6ee23ced0cfe47ad9c740fbab426250b70473c4fd752e40f4ca4b50f3d51d7c4bf5818ef4cfa43be4451cfe96fbf11dc8a49a41d3fd36506f57db029c19ec5ceaea3e5ec3b8af3662a0568a559804795", 0xa8}, {&(0x7f0000000a00)="6c3243719661123276e9c3ccb263f7e48b2ce4a23ae7b5370f994a9b9d9699ed8176e15631b3ffe0add0c4bf8a08b0c513e510047b2415fa7ab9247c15db1b2bc07f47aa8d07aa79f40d0f03c9b1f1d8567d7e668e76a4d0c43b6d4aa708bf730922b97522887e29ab2d6892e88a7871f453f7f77483c84e07611de8b129a33468c4ae80d36c5ec7682f23f76273bff0b1be5e58b0192449400041741f2cfe6f7f95233fce9dc2eb", 0xa8}, {&(0x7f0000000ac0)="7aabb820077ddfb5c530b88f506aaf00edd03abf5c7d91256ea1740c9dc67dda3a7de23c0e04748f159b1f93867c462ae3dd12dea568cdef72b389a8627ff21e38afbe2d13b89518f9b3bcc510203763b4920d6c62ba9e098f2054ae32f1d913e42d3c5fc16dc1f2ec2352cd00308dcf3024afd48c433d30fc64336dd98c9925774aa2c99aa55fd246e0a31510d547ac99a649242042c59bdb0086e7cfc4ae58c6c52d114c23b1aa8ad2080a", 0xac}], 0x4, &(0x7f00000032c0)=[@rthdrdstopts={{0x209c, 0x29, 0x37, {0x0, 0x410, [], [@generic={0x3, 0x1000, "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"}, @generic={0x21, 0x5d, "43f6b200e5186e3ec2bacb867040b258a614cd7abc16350cefe381b58ee76c8471ae0ce87abf68771bb9f2ce11e7e2a6f825b95ce0ddf6e8c630c416cdb6c0746c07ec7e3af95f73afbb097321e23a334b565b6e7f5c36f7b1f0f1aef0"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0x1000, "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"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1]}}}, @hoplimit={{0x10, 0x29, 0x34, 0x2}}, @pktinfo={{0x20, 0x29, 0x32, {@ipv4={[], [], @empty}, r6}}}], 0x20cc}, 0x40) r7 = socket$netlink(0x10, 0x3, 0xa) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000005440)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r7, &(0x7f0000005580)={&(0x7f0000005400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000005540)={&(0x7f0000005480)={0xb0, r8, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x84, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x114}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2048ec2d}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x10000) dup(r7) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000055c0)={@local, @broadcast}, &(0x7f0000005600)=0xc) finit_module(r5, &(0x7f0000005640)='udp\x00', 0x2) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000005680)) r9 = socket$netlink(0x10, 0x3, 0x9) r10 = syz_genetlink_get_family_id$net_dm(&(0x7f0000005700)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r9, &(0x7f00000057c0)={&(0x7f00000056c0)={0x10, 0x0, 0x0, 0x240002}, 0xc, &(0x7f0000005780)={&(0x7f0000005740)={0x14, r10, 0x200, 0x70bd2a, 0x25dfdbfb, {}, ["", ""]}, 0x14}}, 0x8000) fcntl$setpipe(r4, 0x407, 0x3) r11 = openat$keychord(0xffffffffffffff9c, &(0x7f0000005800)='/dev/keychord\x00', 0x188200, 0x0) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000005880)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r11, &(0x7f0000005bc0)={&(0x7f0000005840)={0x10, 0x0, 0x0, 0x400808}, 0xc, &(0x7f0000005b80)={&(0x7f00000058c0)={0x28c, r12, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_SOCK={0x4c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000000}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_MEDIA={0xbc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc7c}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x85fa}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f2e12e2}]}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0x8000}, 0x8840) 22:03:35 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x12, &(0x7f0000000000)={@loopback, @loopback}, 0x8) prctl$PR_SET_DUMPABLE(0x4, 0x0) exit(0x80000000) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x400440, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x115000, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f00000000c0)=0x25e, 0x4) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x401, 0x2000) signalfd4(r3, &(0x7f0000000140)={0x8}, 0x8, 0x800) symlinkat(&(0x7f0000000180)='./file0\x00', r1, &(0x7f00000001c0)='./file0\x00') timer_create(0x6, &(0x7f0000000200)={0x0, 0x35, 0xc}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x0) flistxattr(r5, &(0x7f00000002c0)=""/168, 0xa8) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xa600000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r7, 0x0, 0x70bd2d, 0x25dfdbfc, {{}, 0x0, 0x4101, 0x0, {0x20, 0x17, {0x5, 0x5, @l2={'eth', 0x3a, 'bond_slave_0\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0xbad1534c63a4691e}, 0x0) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000540)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@local}}, &(0x7f0000000680)=0xe8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000006c0)={@multicast1, @multicast1, 0x0}, &(0x7f0000000700)=0xc) accept4$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000780)=0x14, 0x0) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000002800)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000002900)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002940)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000002a40)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000002a80)={@rand_addr, 0x0}, &(0x7f0000002ac0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002b00)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000002c00)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f0000002ec0)={&(0x7f0000000500), 0xc, &(0x7f0000002e80)={&(0x7f0000002c40)={0x224, r8, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8, 0x1, r9}, {0x78, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r11}, {0xb8, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r12}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r14}, {0xc8, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r15}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x81, 0x0, 0x2, 0x6}, {0x7, 0x2, 0x80, 0x8001}, {0x6, 0x5, 0x8, 0x10000}]}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0xff, 0x1f, 0x5, 0x400}]}}}]}}]}, 0x224}, 0x1, 0x0, 0x0, 0x4040001}, 0x240c1) r16 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000002f00)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getpeername$unix(r16, &(0x7f0000002f40)=@abs, &(0x7f0000002fc0)=0x6e) 22:03:35 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RSTAT(r0, &(0x7f0000000040)={0x55, 0x7d, 0x1, {0x0, 0x4e, 0x8, 0x7, {0x68, 0x3}, 0x0, 0x4, 0x1f, 0x4, 0x10, 'loeth1@\\trusted\xbb', 0x0, '', 0x0, '', 0xb, 'proctrusted'}}, 0x55) getpeername$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000100)=0x1c) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000180)={0x40002001}) write$P9_RFLUSH(r0, &(0x7f00000001c0)={0x7, 0x6d, 0x1}, 0x7) write$P9_RREADLINK(r1, &(0x7f0000000200)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) r3 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x2002, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000280)=0xa57b, 0x4) r4 = request_key(&(0x7f00000002c0)='id_resolver\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)='$md5sum!vmnet1nodev\x00', 0xffffffffffffffff) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000380)={r4, 0x7f, 0x98}, &(0x7f00000003c0)={'enc=', 'raw', ' hash=', {'tgr128\x00'}}, &(0x7f0000000440)="3a4ed9437fd7097488aa1b0226c6228a6e4f91da0f96bfa17aa907af8fd18d941e1cd657de3c2d32d88201ccf4ca3e8af16fe7acdecf5c8d5059644f039d564e6c900dec6426c16083856fc36551a129167e2ba2d5c15f62ebc758a5496532567131180f6bcfab2245f3ecca7f452559137e6b1fbbd84bfc69a45c26500c4f", &(0x7f00000004c0)="806bb73329260be70c53b9e5acc6ffaea1c72901135430730d598f0a84e848259b773fe80e12ad054bf80110abf17308ad5d49cbf9cf0e5b6b484d5775b2daeba374b76cc25618f644674926aac748e1b0644df8560c069af919394c77d29d9b2cb4af520b78a454d7fd2f18014654d8b161877987de1c3fbe9e79de6bb1613f10c51e640c37222ea9fce32ba71d594a099979f716ba14bf") r5 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0x0, r5) r7 = memfd_create(&(0x7f0000000680)='/selinux/enforce\x00', 0x4) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/vga_arbiter\x00', 0x484080, 0x0) fcntl$dupfd(r7, 0x605, r8) socketpair(0x2, 0x80000, 0x4, &(0x7f0000000700)={0xffffffffffffffff}) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000740)=@req3={0x4, 0xdf, 0x1, 0x1, 0xfffffffd, 0xeb1d, 0x3}, 0x1c) socketpair(0x11, 0x5, 0x3, &(0x7f0000000780)={0xffffffffffffffff}) recvmsg(r10, &(0x7f00000009c0)={&(0x7f00000007c0)=@hci, 0x80, &(0x7f0000000880)=[{&(0x7f0000000840)=""/40, 0x28}], 0x1, &(0x7f00000008c0)=""/194, 0xc2}, 0x40000120) r11 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000a00)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r11, 0x541b, &(0x7f0000000a40)) setsockopt$inet6_MCAST_LEAVE_GROUP(r11, 0x29, 0x2d, &(0x7f0000000a80)={0x80000001, {{0xa, 0x4e21, 0x3, @mcast2, 0x5b1c}}}, 0x84) r12 = socket$inet6(0xa, 0x3, 0x4e) connect$inet6(r12, &(0x7f0000000b40)={0xa, 0x4e23, 0x9, @ipv4={[], [], @multicast1}, 0x7fffffff}, 0x1c) add_key$keyring(&(0x7f0000000b80)='keyring\x00', &(0x7f0000000bc0)={'syz', 0x1}, 0x0, 0x0, r6) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c40)={0x110, 0x0, 0xb33eac0c900b5c6e, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xc0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'bond0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3f}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'eql\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x401}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r13 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/uhid\x00', 0x802, 0x0) fcntl$setown(r13, 0x8, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000e40)='keyring\x00', &(0x7f0000000e80)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) syzkaller login: [ 56.797941] audit: type=1400 audit(1572041016.603:5): avc: denied { create } for pid=2253 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 22:03:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet(0x10, 0x80000, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r2, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000007867d984fa3cc4d80000000000000000"], 0x14}}, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r4, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r4, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000140)={0x8}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x17c, r5, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0xfffffff8}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nlmon0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x81}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="59ec6c00c2099d3267267f50b80351bf"}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hwsim0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xbb}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000800}, 0x20044000) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000300)="390000001300094700bb61e1c31f057a37000000060000000000000020699e0019002700ae2490356bf199bcce3aeda4cb0d0000000000280f", 0x39}], 0x1) [ 56.830770] audit: type=1400 audit(1572041016.633:6): avc: denied { write } for pid=2253 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 56.870824] audit: type=1400 audit(1572041016.673:7): avc: denied { read } for pid=2253 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 57.006500] audit: type=1400 audit(1572041016.813:8): avc: denied { create } for pid=2275 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 22:03:36 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0xfffffffffffffffe, 0x4) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_SET_PHYS(r2, 0x4008556c, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2) write$P9_RREADLINK(r3, &(0x7f00000000c0)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x1, &(0x7f0000000080)=""/62, 0x3e}}], 0x80000000000032c, 0x0, 0x0) [ 57.035199] audit: type=1400 audit(1572041016.843:9): avc: denied { create } for pid=2273 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 [ 57.087962] audit: type=1400 audit(1572041016.873:10): avc: denied { connect } for pid=2275 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 57.122422] audit: type=1400 audit(1572041016.933:11): avc: denied { write } for pid=2275 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 57.158137] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket 22:03:37 executing program 2: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xb2a}, 0x14) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000140)=ANY=[], &(0x7f0000000580)='.\x00', &(0x7f00000002c0)='sysfs\x00', 0x2000000, 0x0) mount(0x0, &(0x7f00000003c0)='./file0/bus\x00', &(0x7f0000000400)='sysfs\x00', 0x0, &(0x7f0000000480)) lstat(&(0x7f0000000100)='./file0/bus\x00', 0x0) fchdir(r1) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="0801000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000229b99477910e9ee2e7a388bbe9af454f806136a33381c3ff080"], 0x22c) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) sendfile(r3, r4, 0x0, 0x5a92) write$input_event(r2, &(0x7f0000000000)={{}, 0x16, 0x4}, 0x10) sendfile(r4, r4, &(0x7f00000000c0), 0xbf99) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') fcntl$getownex(r4, 0x10, &(0x7f0000000480)) sendmsg$netlink(r0, &(0x7f0000000500)={&(0x7f0000000280)=@kern={0x10, 0x0, 0x0, 0x840000}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x4000000) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x20000084) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, 0x0, 0x0) [ 57.215950] input: syz1 as /devices/virtual/input/input4 22:03:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x10000000, 0x1fffff}, 0xc) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000500)="51894164f9f6bd0b8af6513f1d83513dd5901d78827ec67ee852fd4f0a3aec6c52223ca37ab648fff35a3175f61534ff3a1a4bbb4b3bf34c8fb08b3f3b08df4961460987ac428daa8d1048efbb", 0x4d) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000640)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000380)={0x2a5}, 0xfffffffffffffd27) write$cgroup_int(r1, &(0x7f0000000180)=0x3, 0xffffffffffffff31) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000480)={0x0, {0x2, 0x4e24, @loopback}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}, {0x2, 0x4e21, @multicast1}, 0x284, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)='ip_vti0\x00', 0x5, 0xffff, 0x800}) fcntl$setstatus(r4, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) ioctl$EVIOCGPROP(r4, 0x80404509, &(0x7f0000000140)) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000b80)=ANY=[@ANYBLOB="01000400ffffffffffffaaaaaaaaaaaaaaaaaaaaaaaab883b1bf38c3b22a233f52b3e05987200e00000000000000ff7bb8e97c7cc71191b5f64eef3ff34829b43bd82d7305f2536cdd3aeb9761e2cd376213d12faa1cf4d3e1caf276b80a2572f12da577cf3f9b28f8d6a66db80105d3c7aad1a3c9ed927b25c0ef20740a04f9e9d35a0101ff1e4e88a2d3f5914904000000d402fb8fb43aa0d60c242d72bb005b704966f699423d1780e15564e4f5abe9817ca6379989f5076e5fd5dae78a4f5bd41331e4b30f47fd759be076a064922803a9672698268d227152a8fec8b0146aa5e3f84059a6681ff0d7bb8ead57cee82ed12d1b6b0b00b9a46c41f6c02c43e3192dd3976fd9808b076f343e9b1566e54cb1ec5e0420cd6db89555fca4c24e211321b1984c06771c3a7f4d1ded0bedd24d9d3233bfe7d43344b7fee2f071cebfbaff9d504e18bd571c9d00024fdb6fbdc8977db22c10be8f72ffac2df04a9f2b06ec689af036bcd15c8a51d68fda8e270d5b47fded5ac7615c8410bdfd8bffdef359bd651713cf2954352afcd102b355e69a976c8748637ea84cd0fd556d92bf4920e881858a9db58f09cd871e916131b29aeb18ce572fa20000000000259a0b4d3b5a9e00ded9da2b7d28ac5e9527d57dabd035a1ba419c9724877dd9df8ca41c893ef48af3e6e634307b3063ff7a2c22b6de3dae5c29787922ff1ffa59e29016218acb23ea7a054fe11b90997c827bc084ef6dd8363d2d14d69429a73eaac2cd01e34579531d852a3c3b4bf1f542cb35e31cdcf96eaa91880e55994b84cee98530cfcfcd9e5e88d89b2ff355b3650713ab05cdabe891968de315aa37b6ba262d3c1480963a6679e10ba3a9a0492a4e85c11db8be0661553268c0535d32ce1a7b8acfd7f90fa4e873d9999f1fb28c824f962b955a70819050bc1051e899aec6deeffefa15fcbdf15d062bc2f6934df44a"]) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000140)=0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000680)={0x1, r6}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@remote, 0xbd}) fstat(0xffffffffffffffff, &(0x7f00000005c0)) socket(0x11, 0x6, 0xe2) 22:03:37 executing program 4: socketpair$unix(0x1, 0x2004005, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x8000, 0x100) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x1ffff) add_key$keyring(&(0x7f00000007c0)='keyring\x00', &(0x7f0000000800)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000300), &(0x7f00000004c0)=0x8) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$eventfd(r3, &(0x7f0000000040), 0x8) close(r3) prctl$PR_SET_PDEATHSIG(0x1, 0xd) fcntl$getownex(r4, 0x10, &(0x7f0000000540)={0x0, 0x0}) getpgid(r5) rmdir(&(0x7f00000006c0)='./bus\x00') openat$pfkey(0xffffffffffffff9c, &(0x7f0000000580)='/proc/self/net/pfkey\x00', 0x40000, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f00003b9fdc)) r7 = syz_open_pts(r6, 0x4000000000002) dup3(r7, r6, 0x0) ioctl$TIOCGSOFTCAR(r7, 0x5419, &(0x7f00000005c0)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f00000002c0)="5c01000000000000060000") getsockname(r0, &(0x7f0000000400)=@l2, &(0x7f0000000480)=0x80) r8 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(r8, 0x400454d4, &(0x7f00000001c0)=0x14a) r9 = creat(&(0x7f0000000600)='./bus\x00', 0x200000000020004) lsetxattr$security_smack_entry(0x0, &(0x7f0000000000)='security.SMACK64EXEC\x00', 0x0, 0x0, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r10, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) getsockopt$inet_buf(r10, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000000200)=0x91) chroot(&(0x7f0000000500)='./bus\x00') rmdir(&(0x7f0000000700)='./bus\x00') fallocate(r9, 0x28, 0x1, 0x80000001) r11 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r9, r11, &(0x7f00000000c0), 0xdd) [ 57.307432] audit: type=1400 audit(1572041017.113:12): avc: denied { write } for pid=2273 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 [ 57.335350] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket [ 57.339282] input: syz1 as /devices/virtual/input/input5 22:03:37 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x202000) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/dev\x00\xf8\b\xbe\xdeRB\x10d\x9b5\xe0\xa42NTr\x9e\xb6\x97\xd1\x0f\x04\xf7N]\xa2\x02B35\xbb\xedv\x8f\xad\xa6# \x11\x9chB\xd7\xefu_S\x81\xf6s') fcntl$getownex(r3, 0x10, 0x0) ioctl$BLKPBSZGET(r3, 0x127b, &(0x7f00000001c0)) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000000180)=0x13e) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000300)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40046602, &(0x7f0000000380)=0x400000) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, 0x45c) ioctl$UI_DEV_CREATE(r7, 0x5501) ioctl$UI_SET_PHYS(r7, 0x4008556c, 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff]}, 0x45c) ioctl$UI_DEV_CREATE(r8, 0x5501) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) fcntl$F_GET_RW_HINT(r8, 0x40b, &(0x7f0000000480)) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4000000004e24, @local}, 0x10) connect$inet(r6, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r6, r6, 0x0, 0xffffffff80000001) lseek(r2, 0x0, 0x2) sendfile(r2, r9, &(0x7f0000000040), 0x8000fffffffe) sendfile(r2, r9, 0x0, 0xa5cc554) openat$pfkey(0xffffffffffffff9c, 0x0, 0x42602, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) gettid() ioctl$TIOCGSID(r9, 0x5429, &(0x7f0000000940)) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/policy\x00', 0x0, 0x0) 22:03:37 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = socket$inet(0x10, 0x80000, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r2, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r4, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r4, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000140)={0x8}) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) recvfrom$inet6(r5, &(0x7f0000000240)=""/175, 0xaf, 0x10000, &(0x7f00000000c0)={0xa, 0x0, 0x8, @mcast1, 0x7}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r6, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r6, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) ioctl$EVIOCGREP(r5, 0x80084503, &(0x7f0000000480)=""/131) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000058000000000000001800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="852a627300633bf6c8b9de6cb10000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a6273"], @ANYPTR64=&(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000180000000000000040"]], 0x0, 0x0, 0x0}) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x54, 0x0, &(0x7f0000000280)=[@release, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 57.521336] audit: type=1400 audit(1572041017.323:13): avc: denied { set_context_mgr } for pid=2344 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 57.553667] binder: 2344:2347 Release 1 refcount change on invalid ref 0 ret -22 [ 57.562562] binder_alloc: 2344: binder_alloc_buf, no vma [ 57.575997] binder: 2344:2347 transaction failed 29189/-3, size 0-0 line 3137 [ 57.585101] binder: release 2344:2347 transaction 2 out, still active [ 57.595480] binder: unexpected work type, 4, not freed [ 57.606211] binder: BINDER_SET_CONTEXT_MGR already set [ 57.611401] binder: unexpected work type, 4, not freed [ 57.611404] binder: undelivered TRANSACTION_COMPLETE [ 57.625513] input: syz1 as /devices/virtual/input/input6 [ 57.669784] binder: 2344:2355 ioctl 40046207 0 returned -16 [ 57.669803] binder: undelivered TRANSACTION_ERROR: 29189 [ 57.669901] binder: send failed reply for transaction 2, target dead [ 57.678014] input: syz1 as /devices/virtual/input/input7 [ 57.680258] binder: 2344:2361 Release 1 refcount change on invalid ref 0 ret -22 [ 57.680267] binder: 2344:2361 got transaction to invalid handle [ 57.680275] binder: 2344:2361 transaction failed 29201/-22, size 0-0 line 3014 22:03:37 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000240)=""/175, 0xaf, 0x10000, &(0x7f00000000c0)={0xa, 0x0, 0x8, @mcast1, 0x7}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r2, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) sendto$inet6(r1, 0x0, 0x0, 0x400806e, &(0x7f0000000180)={0xa, 0x4e20, 0xfffffffd, @mcast1, 0x4}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="f11d9485945532b02c13b63ecca90bcd5e45aae6c27dcfb60d8f3b82d09721", 0x1f, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) r3 = socket$inet(0x10, 0x80000, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r4, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r4, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x7, 0x1, 0x201}, 0x14}}, 0x0) fcntl$dupfd(r3, 0x0, r4) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000000000)={0x80000001, 0x4, 0x5, 0x5}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x1000001d0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x240, 0x0, 0xffffffffffffff37) [ 57.718890] binder: undelivered TRANSACTION_ERROR: 29201 22:03:37 executing program 3: socket$key(0xf, 0x3, 0x2) r0 = geteuid() setreuid(0x0, r0) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2}, 0xc) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e5e2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x5dd7d56a, 0xfffffffffffffd3d) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x5) sendmmsg(r3, &(0x7f0000007fc0), 0x5654807, 0x0) unshare(0x40040000) syz_extract_tcp_res(0x0, 0x9, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000004c0)) r4 = socket$inet(0x10, 0x80000, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r5, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) ioctl$UI_SET_PHYS(r6, 0x4008556c, 0x0) sendmsg$nl_netfilter(r5, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000019740)={0x1b8, 0x9, 0x1, 0x201, 0x0, 0x0, {}, [@generic, @nested={0x180, 0x5b, [@typed={0x8, 0x70, @u32=0x8}, @generic="07c4f2d45039ea830cd0152e2125ab3ecd95686366fef151e2b3563104cbc8a6256ade9b53a55070abb12febe6eb939d373fb6163cc698bb2d5a7666b9241a0e33b6b3521a5ea5e4df7289b63464e2390fd518ee0583e2590571841529b6b22193d936941dc33af5b0326d3aa89374921e14eb369754cc81765e2c5b7d34c0ad05ded8eb8c4bd5f2b21b4fbeae61e104661fb1fc6a781513c1c2cad07c95bb15c83bb28c9f189d2b5f0aed8583ded0dee7dfc3f1111d229d941dc567a14e754af568e4", @typed={0x8, 0x40, @fd=r6}, @generic="c60516f30325ff87bf610371f6973ee999b3cfd1046625d19826a33d2a32ddffae7fca1af0fb4023085608bfe76d578b48e192198245b2a82a65dfb5052dcf5dd0b3df0626a297eb73b84d1290d8c269935046cb10cdc7e8a6b4816ce532f200e5c382755ada15638de28f21607b39700ea52bb3000ae0f8564d6cf7fe207b6bdcd1d392818b8fdf2a38ef54246bbfd5bfa17b29a651b51951eb000c9c4558a3ddfd33039493db89", @generic]}, @typed={0xc, 0x96, @u64=0x2}, @typed={0x18, 0x76, @str='/dev/loop-control\x00'}]}, 0x1b8}}, 0x0) r7 = fcntl$dupfd(r4, 0x0, r5) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r8, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r8, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, &(0x7f0000000140)={0x8}) r9 = openat(r7, &(0x7f0000000300)='./file0\x00', 0x0, 0x40) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x10000, 0x0) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmh\x00', 0x124c0, 0x0) read(r12, &(0x7f0000000740)=""/102400, 0x19000) r13 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r12, &(0x7f0000000040)={0x15}) ioctl$TIOCSETD(r12, 0x5423, &(0x7f0000000000)=0x7) r14 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r14, 0x1, r13, &(0x7f0000000140)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r15, &(0x7f0000000140)=ANY=[], 0x4240a2a0) epoll_pwait(r15, &(0x7f00000000c0)=[{}], 0x1, 0x7, 0x0, 0xb3) gettid() timer_create(0x1, &(0x7f00000003c0)={0x0, 0x8, 0x1}, &(0x7f0000000540)) [ 58.058672] input: syz1 as /devices/virtual/input/input8 22:03:37 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_PHYS(r0, 0x4008556c, 0x0) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz0\x00', {0x3ff, 0x8, 0xfff8, 0x599b}, 0x43, [0x9, 0x9f, 0x101, 0xb1c5, 0x80, 0x8, 0x400, 0x0, 0x7, 0x5, 0x1f, 0x6, 0x1ff, 0x100, 0x9, 0x5cde2ed8, 0xb4, 0x80, 0x4, 0xff, 0x80000001, 0x2, 0x6, 0x2, 0x1, 0x10000, 0xa21, 0x8001, 0x4, 0x5, 0x0, 0x0, 0x3, 0x67, 0x2, 0x81, 0x7, 0x1, 0x8, 0x6, 0x8, 0x4, 0x6, 0x8, 0xb3, 0x1, 0x8, 0x8, 0x9, 0x6, 0x7c, 0x9, 0x9, 0x1dc, 0x5, 0x3, 0x93, 0xffff, 0x9, 0x5, 0x5, 0x4, 0x5, 0x8], [0x0, 0x7fff, 0x2, 0x1, 0x7, 0x80000000, 0x8, 0x10000, 0xe29, 0x7, 0x2, 0x401, 0x3, 0x6, 0x8, 0xe0, 0x800, 0x3, 0x8001, 0x5, 0x7ff, 0x80, 0x3ff, 0x44, 0x200, 0x700000, 0x5, 0x4, 0x2, 0x3, 0x4, 0x80, 0xfffffffd, 0x6, 0x40, 0x3, 0x1, 0x8000, 0x9, 0x8, 0x1, 0x7a6, 0x6, 0x7, 0x200, 0x80000000, 0x7c, 0x15f3b3bd, 0x3, 0x80000001, 0x9, 0x10001, 0x2, 0x1ff, 0x9, 0x4, 0x7fffffff, 0x76, 0x81, 0x7f, 0x2, 0x80000001, 0x9, 0xf4d], [0x2, 0x1, 0x4, 0xc72, 0x4, 0xfffffff7, 0xc000, 0x7, 0x1f, 0x0, 0xffff, 0x8, 0x0, 0x81, 0x2, 0x1, 0x5, 0x400, 0x8001, 0x0, 0x2, 0x360, 0x1, 0x6, 0x2, 0x3, 0xfffffffd, 0x112, 0x3, 0xf42d, 0x983e, 0x9, 0xff, 0x200, 0x20, 0x800, 0x7fffffff, 0xfe, 0x4, 0x1, 0x80000001, 0x7ff, 0x6, 0x100, 0x7ff, 0x8, 0xff, 0x2, 0x1ff, 0x6, 0x1, 0x2, 0x100, 0x3, 0xfffffff7, 0x3ff, 0xc6, 0x5, 0x0, 0x7, 0x0, 0x7f, 0x9, 0x7f], [0x0, 0xff, 0x4, 0x33, 0x4, 0x3, 0x6, 0x8, 0x3, 0x2, 0x2, 0x7ff, 0x1, 0x5, 0xfff, 0x7, 0x5, 0x8001, 0xb5, 0x6, 0x100, 0x26, 0x7, 0xff, 0x0, 0x80000001, 0x9, 0x3, 0x2, 0xc4, 0x1, 0x4, 0x9bd, 0x0, 0x7f, 0x9, 0x5, 0xff, 0x2, 0x1, 0x2, 0x7, 0x0, 0x5, 0x0, 0x1e, 0x3, 0x2, 0x6, 0x1, 0x0, 0x3, 0xfffffffc, 0xfffffffe, 0x8000, 0x4, 0x3ff, 0x400, 0x6, 0x3, 0x6, 0x3, 0x4, 0x6359]}, 0x45c) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000001fc0)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="100000002900000043000000ff070000ca29e0c99ba5c6d2664247d473a8a5da0f6a8806ca80ab3310c35f284e248a6107d40db66c2baf6244e66197f3d208fe73e00eb3ed4005ad9f517a261c1101f53da6a3833ca678a378c4ea6f9be2889a9d686fb4eda906e0dff491a6e3679510a6ce429626051e75b6eefba6b26fb3e457fcdd041ccdf3ffaa72dd80103fa61c6c0b95e881b8f92e0158160db47b03e538b4a66198b14e00cdffe7a2ebe2f3b8e6b4a5fc0a38033828118ac3d031bac7b6401eb05220def815"], 0x10}}], 0x2, 0x0) [ 58.248226] input: syz1 as /devices/virtual/input/input9 22:03:38 executing program 5: r0 = memfd_create(&(0x7f0000000080)='\vgm1\xc1\xdd\xce\x04J\xa8F\xd2\x1a\xf3zs=\xfd\"\x8dN\xcb\td\x04m\xa9\xea\xf0\xeaB\xe4\xf8E\x95:L\xbc1n\xdf\xa5', 0x0) ioctl$void(r0, 0x5451) write(r0, &(0x7f0000000100)="9eea9b9d8a82e156b8754892f5491a4065cdd4bf8a21b03b8ede8285111f0c24fe4e1016b40d9a6683269a8f92cdba83b489c0df91debcf16a81ccb8f9961db37ca6e2f84a7de91e35343e13005a0e3265691dd2ab0250de11ff7f8c42ea5f1e132ce979794101ab3b8e257885c0302b6b50340455b553f8", 0x78) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000040000000000000000000000040000000000000000000000000000000400"/44], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) getuid() request_key(0x0, &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0xfffffffffffffff9) sendmsg$inet(0xffffffffffffffff, 0x0, 0xf5fcabcb5cd0d604) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) 22:03:38 executing program 4: sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000000040)={0x0, 0x3, 0x40, 0x8a98}) syz_emit_ethernet(0x7ddf0, &(0x7f0000000080)={@local, @empty, [{}], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300002, 0x0, 0x0, @ipv4={[0x88caffff], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x29, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) pipe(0x0) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) [ 58.326820] input: syz1 as /devices/virtual/input/input10 22:03:38 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,') r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) ioctl$VT_ACTIVATE(r2, 0x5606, 0x56) connect$inet(r1, &(0x7f00000005c0)={0x2, 0x0, @broadcast}, 0x6a) sendfile(r1, r0, 0x0, 0x80000003) 22:03:38 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x2, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_SET_PHYS(r1, 0x4008556c, 0x0) readv(r1, &(0x7f00000009c0)=[{&(0x7f00000006c0)=""/230, 0xe6}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/124, 0x7c}, {&(0x7f00000008c0)=""/146, 0x92}, {&(0x7f0000000980)}], 0x5) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000080)) r2 = getpid() setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x2) sched_setscheduler(r2, 0x5, &(0x7f0000000000)) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000001c0)={0x10}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x0, &(0x7f0000000380)=0xffffffff80000001, 0x3) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'team0\x00', 0x2}, 0x18) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @mss, @mss, @timestamp, @timestamp], 0x5) fremovexattr(r4, &(0x7f00000007c0)=@known='system.posix_acl_access\x00') setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000280), 0x7) r5 = open(&(0x7f0000000240)='./file0\x00', 0x101000, 0xc1) getsockopt$inet_mreqn(r4, 0x0, 0x0, &(0x7f0000000340)={@rand_addr, @remote, 0x0}, &(0x7f0000000440)=0xc) connect$packet(r5, &(0x7f0000000480)={0x11, 0x4, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg$sock(r3, &(0x7f0000000680)=[{{&(0x7f0000000240)=@ll={0x11, 0x7, r6, 0x1, 0x80}, 0x80, &(0x7f0000000600)=[{&(0x7f00000002c0)="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", 0xfa}, {&(0x7f00000003c0)="a42bd6201475bb7d844762ff70c6a90559a572a6f9eedd95bdf4c53f32852e15e597ffcb2d459747c50e22cb4409fe336262b268103f75f2c61e75d95b4174a4a86c3d7f5dd415e04430e76d962d6062c18cb2696b21bc083f2fd3b6538986a0db5aed8119e6a9dfdea854ba9a6f5b4f3fdba5dd3332a7ea415554706a2af4f4b38083c96d8fc9cab867c7", 0x8b}, {&(0x7f0000000480)="e33bb841eb01c885da4149df02a8a760f8e41356d62a304f4b99a32d26a328fc731b1686e969a2b3ac1e88a851fb5604e4e4849d26d59a932cad4d598ff332d3e2ace5f6e9edac751947ba05ef10154e6c765629", 0x54}, {&(0x7f0000000500)="c63c16cc8acb24555a236a357a16804568c585d5cb92665b13ece9a95288195c423ce68139adaf050e2ad7c72b0e4bce489f9eb849553725e353f6ebaecd5b702c3d59b8a18dc1871ffee952837953e3a232964bddc0fa7f5f52440fc60ad2655f13f022c81fcbd1482efa0aa383ab5cc26e632ca2364edac7c1fac1bb567f48a40c9e62f271ff4c92349dcf8a79bea90f78962ce223f79cf652c871e2e6cf927acc79028985fdabb3dfa4783809f7a022908fad030c19b32548250f1ed69fa49436fb97b0e59fc8d88555f5c23f55dab20a0d1d874171d96c118001466c97352bf0", 0xe2}], 0x4, &(0x7f0000000640)=[@txtime={{0x14, 0x1, 0x3d, 0x9}}, @mark={{0x8, 0x1, 0x24, 0x401}}, @mark={{0x10, 0x1, 0x24, 0x100}}], 0x34}}], 0x1, 0x4802) 22:03:38 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x20000) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000040)=""/34) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000280)=0x32, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff01c}, {0x80000006}]}, 0x8) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 22:03:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0), 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x4e21, @rand_addr=0xffffffffffff2aa3}}) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'tunl0\x00', r3}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) r4 = creat(&(0x7f0000000380)='./file0\x00', 0x4080044) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000440)={0x15ac, 0x1ffe0000000}) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000340)={0x165, 0x1, 0x0, {0x7f}}, 0xfffffffffffffd27) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0x3, 0xffffff0f) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r5) r6 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) lseek(r6, 0x0, 0x2) r8 = socket$inet(0x10, 0x80000, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r9, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r9, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) r10 = fcntl$dupfd(r8, 0x0, r9) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r11, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r11, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r11, &(0x7f0000000140)={0x8}) write$cgroup_int(r10, &(0x7f0000000500)=0x6, 0x12) sendfile(r6, r7, 0x0, 0xfffffffffffffffc) sendfile(r6, r7, &(0x7f0000000040), 0x8000fffffffe) ioctl$KDSETKEYCODE(r4, 0x4b4d, &(0x7f00000004c0)={0x9, 0x9}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) [ 58.441261] input: syz1 as /devices/virtual/input/input12 [ 58.521355] input: syz1 as /devices/virtual/input/input13 22:03:38 executing program 5: bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xbab230cf) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000100)) write(r0, &(0x7f00000001c0), 0xbab230cf) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x201, 0x0) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xbab230cf) r3 = openat$cgroup_int(r2, 0x0, 0x2, 0x0) creat(0x0, 0xb74cc51dad9cc24a) readv(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000640)={0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r4, 0x40045402, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$TIOCGPGRP(r4, 0x540f, 0x0) r5 = socket$inet(0x10, 0x80000, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r6, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r6, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) r7 = fcntl$dupfd(r5, 0x0, r6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r8, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r9 = socket$inet(0x10, 0x80000, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r10, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r10, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) r11 = fcntl$dupfd(r9, 0x0, r10) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r12, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r12, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r11, 0x3, r12, &(0x7f0000000140)={0x8}) sendmsg$nl_netfilter(r11, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000068c47d8e667b3fc236ee3cc87a36a805"], 0x14}, 0x1, 0x0, 0x0, 0x40060f8}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, &(0x7f0000000140)={0x8}) getsockopt$inet_mtu(r7, 0x0, 0xa, &(0x7f0000000180), &(0x7f0000000300)=0x4) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, &(0x7f0000000140)) openat$cgroup_ro(r4, &(0x7f0000000480)='\xe3group.stat\x00\xccz\x15\v\xb9P\xbc\xaf\x14\xfe\'/\x01\x8b\xe7\x03cm\xca\xfb)\x80\xcaN\x97\xbaz\x95K\xfb\xeaM\x8aa\xc5\xb6\xd9\f\x18t\x97\xf5@\xaci>\xa9\xf3\\\xa2b\xf3\xf4\xf1\x04\xc7nqi\xce\x1dJ\xd1\xc3{\x06S\x00G\xca\x98*Y\xf44p\xfd\xfc\xa4\xaf\xc4\x8f\x10\xea\xb2v\xe5\x84z\xddcQ\xcd\x90\xecI\x90c\xcfHh\xbc\xdf\xc0\x9f\xb5\x8b,\x9c\xf2\x02\xfe\xf3C\xef\x95\x03\xcd(\x12KM\x96\xc8\xa8\v\xc0\xf2\x8b\x0em\xd7\xdejj\x9boS=\x81\x0f\x1d\r.\xeb\xe2\x8f\xc4I\xeb\x92\x00\xb7\xcc<\x94\x99nAh\xe8\b\f\xc98\xbc\x18\x96s\xa78j\xe6{j\xf2\x8f\xf3\xcdq\x85\xcf\xa9\xfb\x1e\xc2\xf5sC\xb0\xac\xe6\xf2\x1a\xa5\xed\xafk\xc2\xd5\x89\xa1\r\\ahNM\xe1R\x99\xd8\x84', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r4, 0x4c09, 0x401) readv(0xffffffffffffffff, 0x0, 0x0) r13 = openat$uhid(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uhid\x00', 0x0, 0x0) ioctl$void(r3, 0x5450) write$UHID_CREATE(r13, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/5, 0x5, 0x20000000000, 0x4, 0x0, 0x0, 0xfffffffd}, 0x11c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:03:38 executing program 1: epoll_create1(0x0) r0 = epoll_create1(0x0) unshare(0x600) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/4\x00') r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000240)=""/175, 0xaf, 0x10000, &(0x7f00000000c0)={0xa, 0x0, 0x8, @mcast1, 0x7}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r3, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100090}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x120, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xd4, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'bond0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x100, @dev={0xfe, 0x80, [], 0x1b}, 0x9}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7d54}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x40}, 0x20000018) fcntl$lock(r0, 0x7, &(0x7f0000000040)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)) r5 = syz_open_pts(r4, 0x4000000000002) dup3(r5, r4, 0x0) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000000)={0x1, 0x7fff, 0x1000}) readv(r1, &(0x7f0000f46000)=[{&(0x7f0000949000)=""/101, 0x65}], 0x1) 22:03:38 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x7f6, 0x4) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000240)=""/175, 0xaf, 0x10000, &(0x7f00000000c0)={0xa, 0x0, 0x8, @mcast1, 0x7}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r2, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) setsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000000)=0xcc1f, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e21}, 0x10) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000000c0)=0x6, 0x40c) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000080)=0x1f, 0x4) recvmmsg(r0, &(0x7f0000000080), 0x400000000000384, 0x12001, 0x0) 22:03:38 executing program 3: socket$key(0xf, 0x3, 0x2) r0 = geteuid() setreuid(0x0, r0) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2}, 0xc) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e5e2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x5dd7d56a, 0xfffffffffffffd3d) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x5) sendmmsg(r3, &(0x7f0000007fc0), 0x5654807, 0x0) unshare(0x40040000) syz_extract_tcp_res(0x0, 0x9, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000004c0)) r4 = socket$inet(0x10, 0x80000, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r5, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) ioctl$UI_SET_PHYS(r6, 0x4008556c, 0x0) sendmsg$nl_netfilter(r5, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000019740)={0x1b8, 0x9, 0x1, 0x201, 0x0, 0x0, {}, [@generic, @nested={0x180, 0x5b, [@typed={0x8, 0x70, @u32=0x8}, @generic="07c4f2d45039ea830cd0152e2125ab3ecd95686366fef151e2b3563104cbc8a6256ade9b53a55070abb12febe6eb939d373fb6163cc698bb2d5a7666b9241a0e33b6b3521a5ea5e4df7289b63464e2390fd518ee0583e2590571841529b6b22193d936941dc33af5b0326d3aa89374921e14eb369754cc81765e2c5b7d34c0ad05ded8eb8c4bd5f2b21b4fbeae61e104661fb1fc6a781513c1c2cad07c95bb15c83bb28c9f189d2b5f0aed8583ded0dee7dfc3f1111d229d941dc567a14e754af568e4", @typed={0x8, 0x40, @fd=r6}, @generic="c60516f30325ff87bf610371f6973ee999b3cfd1046625d19826a33d2a32ddffae7fca1af0fb4023085608bfe76d578b48e192198245b2a82a65dfb5052dcf5dd0b3df0626a297eb73b84d1290d8c269935046cb10cdc7e8a6b4816ce532f200e5c382755ada15638de28f21607b39700ea52bb3000ae0f8564d6cf7fe207b6bdcd1d392818b8fdf2a38ef54246bbfd5bfa17b29a651b51951eb000c9c4558a3ddfd33039493db89", @generic]}, @typed={0xc, 0x96, @u64=0x2}, @typed={0x18, 0x76, @str='/dev/loop-control\x00'}]}, 0x1b8}}, 0x0) r7 = fcntl$dupfd(r4, 0x0, r5) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r8, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r8, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, &(0x7f0000000140)={0x8}) r9 = openat(r7, &(0x7f0000000300)='./file0\x00', 0x0, 0x40) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x10000, 0x0) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmh\x00', 0x124c0, 0x0) read(r12, &(0x7f0000000740)=""/102400, 0x19000) r13 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r12, &(0x7f0000000040)={0x15}) ioctl$TIOCSETD(r12, 0x5423, &(0x7f0000000000)=0x7) r14 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r14, 0x1, r13, &(0x7f0000000140)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r15, &(0x7f0000000140)=ANY=[], 0x4240a2a0) epoll_pwait(r15, &(0x7f00000000c0)=[{}], 0x1, 0x7, 0x0, 0xb3) gettid() timer_create(0x1, &(0x7f00000003c0)={0x0, 0x8, 0x1}, &(0x7f0000000540)) 22:03:38 executing program 1: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1691) connect$inet6(0xffffffffffffffff, 0x0, 0x52) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000300)=""/17) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000) ppoll(0x0, 0xffffffffffffff90, &(0x7f0000000380)={0x77359400}, &(0x7f0000000180)={0xfffffffffffffffe}, 0xbe) sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={&(0x7f0000000480)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000002000)}, 0xfffffffffffffffc) prctl$PR_GET_SECUREBITS(0x1b) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) fremovexattr(0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000a40)=""/250, 0xffffff72) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000740)={'veth1_to_team\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000040000000000004df80000cb70530000a317"]}) r2 = socket$packet(0x11, 0x3, 0x300) sendfile64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x4) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000200)={0x2, @multicast2, 0x4e22, 0x1, 'lc\x00', 0x17, 0x5, 0x39}, 0x2c) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) r3 = socket$inet(0x10, 0x80000, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r4, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r4, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) r5 = fcntl$dupfd(r3, 0x0, r4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r6, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r6, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000140)={0x8}) recvmmsg(r5, &(0x7f0000005dc0)=[{{&(0x7f0000000540)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/173, 0xad}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000000340)=""/19, 0x13}, {&(0x7f0000000780)=""/228, 0xe4}, {&(0x7f00000003c0)=""/40, 0x28}], 0x5}, 0xc0000000}, {{&(0x7f00000006c0)=@generic, 0x80, &(0x7f0000001e00)=[{&(0x7f0000000880)=""/65, 0x41}, {&(0x7f0000000900)=""/70, 0x46}, {&(0x7f0000000980)=""/15, 0xf}, {&(0x7f0000001b40)=""/152, 0x98}, {&(0x7f00000009c0)=""/109, 0x6d}, {&(0x7f0000001c00)=""/155, 0x9b}, {&(0x7f0000001cc0)=""/255, 0xff}, {&(0x7f0000001dc0)=""/35, 0x23}], 0x8, &(0x7f0000001e40)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000002e40)=@hci, 0x80, &(0x7f0000003480)=[{&(0x7f0000002ec0)=""/111, 0x6f}, {&(0x7f0000002f40)=""/2, 0x2}, {&(0x7f0000002f80)=""/221, 0xdd}, {&(0x7f0000003080)=""/43, 0x2b}, {&(0x7f00000030c0)=""/70, 0x46}, {&(0x7f0000003140)=""/56, 0x38}, {&(0x7f0000003180)=""/193, 0xc1}, {&(0x7f0000003280)=""/121, 0x79}, {&(0x7f0000003300)=""/234, 0xea}, {&(0x7f0000003400)=""/84, 0x54}], 0xa, &(0x7f0000003500)=""/163, 0xa3}, 0x7ff}, {{0x0, 0x0, &(0x7f0000005a00)=[{&(0x7f00000035c0)=""/155, 0x9b}, {&(0x7f0000003680)=""/45, 0x2d}, {&(0x7f00000036c0)=""/166, 0xa6}, {&(0x7f0000003780)=""/21, 0x15}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/4096, 0x1000}, {&(0x7f00000057c0)=""/145, 0x91}, {&(0x7f0000005880)=""/73, 0x49}, {&(0x7f0000005900)=""/200, 0xc8}], 0x9, &(0x7f0000005a80)=""/232, 0xe8}}, {{&(0x7f0000005b80)=@can, 0x80, &(0x7f0000005c80)=[{&(0x7f0000005c00)=""/2, 0x2}, {&(0x7f0000005c40)=""/13, 0xd}], 0x2, &(0x7f0000005cc0)=""/247, 0xf7}, 0xe438}], 0x5, 0x10000, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = getpid() ioprio_get$pid(0x1, r8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) waitid(0x2, 0x0, 0x0, 0x8, &(0x7f00000000c0)) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) fcntl$F_SET_RW_HINT(r0, 0x40c, 0x0) r9 = syz_genetlink_get_family_id$net_dm(&(0x7f00000002c0)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000500)={&(0x7f0000000240), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r9, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x1861c292254f9b0a}, 0x4000000) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) 22:03:38 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) bind(0xffffffffffffffff, &(0x7f0000001080)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x3b, @local}}, 0x80) bind(r3, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x2, 0x2, 0x2, 0x3, {0xa, 0x4e23, 0x2, @loopback, 0x8}}}, 0x80) write(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(r0, &(0x7f0000000180)=0x7, 0x396) r4 = socket$inet6(0xa, 0x400000000001, 0x0) getrlimit(0x2, &(0x7f0000000240)) r5 = dup(r4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000500), &(0x7f0000000940)=0xffffff01) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="021380fa72b8dbc862dd50392f3017c060083f35f24dd768be6256126c23020000000002005a7c129c080012000000000000000000000000058710000900000001ac010000000000000000000500000000000000b550075649e48881d17f3c3adcc11a9b3924f84f460f633decddfd98b1d95994976fe96ccaf300a5a29e8ee9516a5d06551a59c483095d838105d027076d5113937b562b67f9df6190751d5514636e59c184f8233dbea6534c11c40dfe69906ac3de9b0300f2ba983fff3d9cfe60dda1a3a704a6807184c69b5128ff71feed2e80ce14c0f7c86aaa404669ce687818626ebe2bc009000000000000002a35619b49135765dce3ce15bcfe2242f161fae5eea2c4f6d667732ecbe6116cc2677af8e8cfd150138988542d01440d3941b24b16e8478936d40c7e6e402ee055bb9b1fd224b71468af19c1ccc2e45b3e91a2e1c34c654829f281e571341d3753f36cae1ff96310aabeb94eb96d633a4675248dcac1bb73ebf33d1aa85e79aba72b13d2cf74ca711ab06bf6015fd37d600040ab54b4962d012a26660fcda17f6eeedeea470f599f499e8a7e172fd3486b087b5c99975c13070e9b93aa05d66cdfdcb0431c552f9b4a9d64491391d98005a59365b5c03bd176a007088cd3b7d663ec206d387386f003e5a31fad9beb036a12032e01747223e68fc42395836afb35189110c95316dfa321daa39e25f0c2dedda6b4ccd87495b339ebcd5fb8fbab76c404776c6306000147283234b7293e352c6c687a9ea45394dcdbab3b55f6e70889ff09f45381d2d3b48def309c682aeb98458073e5eb6ab22adb29908e0bead584f35e44fdde1fa93d15a12f828c7299ae89e995a3620828a85d9f2257bd68d26033730000000000000075af2f57071b3f14e5a9f27d269e4289c283372116c95a7758ac19eb91513063a5eb530e1e54fcb804571c7d06ebdf5b3107dd62ca85be6e63b2449a6ac6eff9f9f3e94492dbba8ea630c21b0d9cc2b3151509d832488c28fcf245e8559a40d6a517323c0c74ce4cbefd6a1d9ba2e23639f8f789ec328650570ec7e63b6c5bf033ade884adf9a312dd5bc942ab7b834d59bc9acc03569890f0b001a2bc56825f8078cadf1641d7f841ddd55daf97cb704ef11db230247d151973ff481930e9c147fcf4f2ed127cb86f5e0790ad8f3232377641d6ada8d2a26a979dc8e4b0ceeef56a9e8741919c1c104dfbdbad916da7498320e1dbd47b3952927c6fa604bb2b002fd18a546afb7005286f3e29c851aff2bf0b8768ad00000000000000000025ab0fa7c00d3a33"], 0x45}}, 0x1) ioctl$FS_IOC_SETFLAGS(r5, 0x40046602, &(0x7f0000000640)=0x1) r7 = inotify_init() lseek(r7, 0x4, 0x4) ioctl$UI_SET_SNDBIT(r5, 0x4004556a, 0x0) r8 = socket$inet6(0xa, 0x1200000002, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000080)=0x581, 0x4) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r8, 0x29, 0x0, &(0x7f0000000140)=0x8, 0xfd73) recvmsg(r8, &(0x7f00000000c0)={0x0, 0xfffffffffffffe14, 0x0, 0x0, &(0x7f0000000040)=""/36, 0x24}, 0x2002) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r9, 0x6, 0x18, &(0x7f0000000100)=0xffffffff80000001, 0x4) bind$inet(r9, &(0x7f0000738ff0)={0x2, 0x4e21, @local}, 0x10) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r9, 0x6, 0x16, &(0x7f0000000580)=[@mss={0x2, 0x3f}, @sack_perm], 0x200000000000045c) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f00000000c0), 0x4) dup2(r9, r9) fcntl$setpipe(r9, 0x407, 0x7ff) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r5, r10, 0x0, 0x8000fffffffe) [ 59.072754] input: syz1 as /devices/virtual/input/input15 22:03:39 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000140)={0xa, 0x45, 0x0, @ipv4={[], [], @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r2) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000200)={0x200, 0x0, 0x0, [{}, {{}, {0x0, 0x0, 0x13, 0x0, 'user+selfppp1em1\\}]'}}, {{}, {0x0, 0x0, 0xd, 0x0, 'md5summd5sum-'}}]}, 0x200) [ 59.537661] nf_conntrack: automatic helper assignment is deprecated and it will be removed soon. Use the iptables CT target to attach helpers instead. 22:03:39 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet6(0xa, 0x2, 0x0) fadvise64(r2, 0x0, 0x1, 0x0) socket$inet6(0xa, 0x0, 0x5) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00005d5ff3)={0x2, 0x4e20}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00005d5ff3)={0x2, 0x4e20}, 0x10) fsetxattr$security_ima(r2, &(0x7f0000000300)='security.ima\x00', &(0x7f0000000480)=ANY=[@ANYPTR64=&(0x7f00000024c0)=ANY=[@ANYBLOB="de572c1d2267b6d8374c5c457251ecd8b68fd2fa29d29364164153b7e62493b2c3d186af30411d413d7c5c32c9f6bf027221268c4a2cc6454a03ce00a2e0dec55c87e5689ce2f4b2cf11d275897ef2ce5c6bf48edac6eda6a8db116fd5e9ae6663b713b85399aa1156fb97a897a1eca5cd9d655b6d5ffd0ee4154dc69efed5a703f1e5ea008e96ff9af24f0e5193e7109dc0d2b897e5cdefcb4b0d", @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYRES16=r3, @ANYRESHEX=0x0, @ANYBLOB, @ANYBLOB="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", @ANYRES64=r4], @ANYBLOB="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", @ANYRES64]], 0x1, 0x1) syz_open_dev$sndtimer(&(0x7f0000000400)='/dev/snd/timer\x00', 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f00005d5ff3)={0x2, 0x4e20}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f00005d5ff3)={0x2, 0x4e20}, 0x10) fcntl$addseals(r6, 0x409, 0x4) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) recvfrom$inet6(r7, &(0x7f0000000240)=""/175, 0xaf, 0x10000, &(0x7f00000000c0)={0xa, 0x0, 0x8, @mcast1, 0x7}, 0x1c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r8, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r8, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$LOOP_SET_FD(r7, 0x4c00, r8) r9 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000013c0)='/selinux/checkreqprot\x00', 0x216800, 0x0) getsockname$packet(r9, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001380)=0xffe1) sendmsg$key(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[]}}, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r10, &(0x7f00005d5ff3)={0x2, 0x4e20}, 0x10) lseek(r10, 0x0, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) statfs(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000340)=""/36) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) openat$cgroup_ro(r1, &(0x7f0000002480)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x8002, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000180), 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000440)='./bus\x00', 0x0, 0x3100082, 0x0) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x41000001, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x100) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) [ 59.584300] input: syz1 as /devices/virtual/input/input16 22:03:39 executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup2(r0, r0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) splice(0xffffffffffffffff, &(0x7f0000000400), r2, &(0x7f0000000440), 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r2) r5 = creat(&(0x7f0000000840)='./file1\x00', 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000004c0)={@ipv4={[], [], @loopback}, 0x71}) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0x0, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) ioctl$FS_IOC_RESVSP(r5, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r5, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r6 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r6) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') fsync(r5) r7 = socket$inet(0x10, 0x80000, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r8, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r8, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) r9 = fcntl$dupfd(r7, 0x0, r8) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r10, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r10, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000005b1ad30db00"/20], 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r10, &(0x7f0000000140)={0x8}) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r11, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1f]}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) ioctl$UI_SET_PHYS(r11, 0x4008556c, 0x0) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r12, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r12, 0x5501) ioctl$UI_SET_PHYS(r12, 0x4008556c, 0x0) r13 = dup2(r11, r12) write$P9_RSTATu(r13, 0x0, 0xed) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, &(0x7f0000000500)={0x2, 0x80000001, {0x56, 0x2, 0xfffffffffffffc00, {0xf6, 0x2a}, {0x4, 0x1}, @period={0x58, 0x100, 0x3f, 0x0, 0x7ff, {0x94bc, 0x2, 0x5, 0x1f}, 0x0, 0x0}}, {0x53, 0x100000001, 0x6, {0x4}, {0x6c8, 0x401}, @ramp={0xf38, 0x3, {0x80, 0x0, 0x0, 0x8}}}}) r14 = socket$key(0xf, 0x3, 0x2) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0) clock_getres(0x6, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) r15 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_int(r1, 0x0, 0x16, 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r15, 0x29, 0x41, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)=0x1) ioctl$int_in(r4, 0x0, &(0x7f00000001c0)) write$binfmt_script(r5, &(0x7f00000008c0)=ANY=[@ANYBLOB="2321202e2f66696c6531202e2f6367726f75703185b72d19af52b965742f74756e00202f73656c696e75782f636f6e7465787400202f70726f632f7468726561642d73656c662f617474722f63757272656e74000a1e8ec38316ccf5ff955251d3eb59cf53ecc234a9022b4427ab8fb09f168703659f67de74b1068eafd6a41f87d3efc15ed4bf73b1795eade13cd7b0c50dea996283cee3f5f423a8f1853eff6241d09c16e934f32391b84f5f5e1d1b9fbdeaa789d961f6186bda548a82f59c4989ddaab226b1866258aefeee0c34a31d1544c633384b1d68b9dbb9eb8adebcb017ebfed692b4383807602ecaf48da22f2cb5d3c0a5d812685d09d105e32e2d6eea761b7c9a134955ecfbac0c0f06034d7a5c9e0309a9f68488444cdc81b277839af8eb3926297d"], 0x128) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r14, 0x0) [ 60.033954] input: syz1 as /devices/virtual/input/input18 22:03:40 executing program 2: r0 = socket(0x18, 0x0, 0x4) accept4$unix(r0, 0x0, 0x0, 0x0) syz_open_dev$loop(0x0, 0x4000001, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_CREATE_OPEN(r1, 0x0, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0x7530}}, {{0x0, 0x2710}}], 0x30) openat$selinux_access(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/access\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000640)={0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) fchdir(r2) r4 = creat(&(0x7f0000000780)='./file1\x00', 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000380)={0xbd, @rand_addr=0x4, 0x4e20, 0x0, 'lblcr\x00', 0x4}, 0x2c) openat$cgroup_type(r3, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) r5 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) write$P9_RFLUSH(r5, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) close(r4) pipe(0x0) 22:03:40 executing program 1: openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0) sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={0x0, 0x0, &(0x7f0000002000)=[{0x0}], 0x1}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000240)=""/175, 0xaf, 0x10000, &(0x7f00000000c0)={0xa, 0x0, 0x8, @mcast1, 0x7}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r2, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000040)={&(0x7f00000004c0)={0x13c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_NET={0x58, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1b03}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}]}, @TIPC_NLA_LINK={0xc4, 0x4, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x1, 0x1, 0x400007}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa7}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x44}, 0x1) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 60.542463] input: syz1 as /devices/virtual/input/input19 22:03:40 executing program 0: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f00003fe000)="24000000280007003200000800367700fbffffff010000000000bead000000000000ff10", 0x24) r1 = syz_open_pts(0xffffffffffffffff, 0x100) ioctl$KDADDIO(r1, 0x4b34, 0x2) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000040)={'L+', 0x800}, 0x28, 0x1) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_SET_PHYS(r2, 0x4008556c, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0xcaf, 0x6}) [ 60.769354] input: syz1 as /devices/virtual/input/input20 22:03:41 executing program 5: pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) fcntl$addseals(r1, 0x409, 0xb) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = open(&(0x7f0000001e80)='./file0\x00', 0x50000, 0x28) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000001ec0)="520f66a64af00559fd24dac93690da47", 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'vlan0\x00', 0x100}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 22:03:41 executing program 0: readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sync() ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000180)) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x20, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) lsetxattr$trusted_overlay_redirect(&(0x7f0000001340)='./file0\x00', &(0x7f0000001380)='trusted.overlay.redirect\x00', &(0x7f00000013c0)='./file0\x00', 0x8, 0x0) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_int(r2, 0x29, 0x0, 0x0, 0x0) r3 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write(r3, &(0x7f0000001280)="8ee12a2b567ef4ce02000000728ca3f1f210d331d35f3efe3b84cbad82fb11e6a74f4c89210570b8653b8897f3d9f8b79e470e56a40cb36200001500"/79, 0x4f) sendto$inet(r2, &(0x7f0000000400)="fc3ee0370d3cc500215953cff3ed8cf211cbc098d8f084adad33ce1ebda4764dc24cdb4cc7c9aa05ca458eb5856a23d8f585e7c42a9febab4f427d84180803ced2afa723d5db7d12052bd0348a8885a2af61cba5d11edb56943f7e4fe43e5c90be322c3092db07c37af6ee4b7f31", 0x6e, 0x4004, 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x89ee, &(0x7f0000000300)="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") r4 = socket$inet6(0xa, 0x400000004805, 0x8) ioctl(r4, 0x801000008912, &(0x7f0000000340)="0a5c2d023c126285718070") ftruncate(r4, 0xffffffff) ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f0000001300)={'syz_tun\x00', 0xffffffff}) ppoll(&(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$PPPIOCSACTIVE(r1, 0x40087446, &(0x7f00000001c0)={0x3, &(0x7f0000000140)=[{0x4, 0xff, 0x2, 0x9}, {0x2, 0x7, 0x8, 0x8}, {0xfffa, 0x0, 0x20, 0x51}]}) lseek(0xffffffffffffffff, 0x0, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x27}, 0xa}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) 22:03:41 executing program 1: r0 = socket$inet(0x10, 0x1, 0xe) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x13, &(0x7f00000000c0)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000100401d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 22:03:41 executing program 3: socket$key(0xf, 0x3, 0x2) r0 = geteuid() setreuid(0x0, r0) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2}, 0xc) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e5e2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x5dd7d56a, 0xfffffffffffffd3d) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x5) sendmmsg(r3, &(0x7f0000007fc0), 0x5654807, 0x0) unshare(0x40040000) syz_extract_tcp_res(0x0, 0x9, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000004c0)) r4 = socket$inet(0x10, 0x80000, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r5, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) ioctl$UI_SET_PHYS(r6, 0x4008556c, 0x0) sendmsg$nl_netfilter(r5, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000019740)={0x1b8, 0x9, 0x1, 0x201, 0x0, 0x0, {}, [@generic, @nested={0x180, 0x5b, [@typed={0x8, 0x70, @u32=0x8}, @generic="07c4f2d45039ea830cd0152e2125ab3ecd95686366fef151e2b3563104cbc8a6256ade9b53a55070abb12febe6eb939d373fb6163cc698bb2d5a7666b9241a0e33b6b3521a5ea5e4df7289b63464e2390fd518ee0583e2590571841529b6b22193d936941dc33af5b0326d3aa89374921e14eb369754cc81765e2c5b7d34c0ad05ded8eb8c4bd5f2b21b4fbeae61e104661fb1fc6a781513c1c2cad07c95bb15c83bb28c9f189d2b5f0aed8583ded0dee7dfc3f1111d229d941dc567a14e754af568e4", @typed={0x8, 0x40, @fd=r6}, @generic="c60516f30325ff87bf610371f6973ee999b3cfd1046625d19826a33d2a32ddffae7fca1af0fb4023085608bfe76d578b48e192198245b2a82a65dfb5052dcf5dd0b3df0626a297eb73b84d1290d8c269935046cb10cdc7e8a6b4816ce532f200e5c382755ada15638de28f21607b39700ea52bb3000ae0f8564d6cf7fe207b6bdcd1d392818b8fdf2a38ef54246bbfd5bfa17b29a651b51951eb000c9c4558a3ddfd33039493db89", @generic]}, @typed={0xc, 0x96, @u64=0x2}, @typed={0x18, 0x76, @str='/dev/loop-control\x00'}]}, 0x1b8}}, 0x0) r7 = fcntl$dupfd(r4, 0x0, r5) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r8, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r8, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, &(0x7f0000000140)={0x8}) r9 = openat(r7, &(0x7f0000000300)='./file0\x00', 0x0, 0x40) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x10000, 0x0) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmh\x00', 0x124c0, 0x0) read(r12, &(0x7f0000000740)=""/102400, 0x19000) r13 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r12, &(0x7f0000000040)={0x15}) ioctl$TIOCSETD(r12, 0x5423, &(0x7f0000000000)=0x7) r14 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r14, 0x1, r13, &(0x7f0000000140)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r15, &(0x7f0000000140)=ANY=[], 0x4240a2a0) epoll_pwait(r15, &(0x7f00000000c0)=[{}], 0x1, 0x7, 0x0, 0xb3) gettid() timer_create(0x1, &(0x7f00000003c0)={0x0, 0x8, 0x1}, &(0x7f0000000540)) 22:03:41 executing program 2: r0 = socket$inet6(0xa, 0x0, 0xfc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) 22:03:41 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r0) r3 = socket(0x80000000000010, 0x802, 0x0) write(r3, &(0x7f00000001c0)="240000001a0025f004", 0x9) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x1) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f00000014c0)={'yam0\x00', {0x2, 0x4e20, @empty}}) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000003900)='/selinux/context\x00', 0x2, 0x0) write$P9_RFLUSH(r4, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) read(r2, &(0x7f0000000300)=""/191, 0xbf) getsockname$packet(r3, &(0x7f0000003a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000003a40)=0x14) sendmsg$inet(r3, &(0x7f0000003ac0)={0x0, 0x0, &(0x7f0000003880)=[{&(0x7f0000001500)="4bc3e226539ebaaca2a41f15f85dc47d6aaf5e04c3f1e5ae3295ba4a86d129eeeb7f600ae816c0bb052c9b1625b41bcf6b5fe1a80ce7e86e734570acabf0ac7289ace04e3a49fa20802fff83c9b5798f545456f6739eaec89b099863321fe318f7dc07ad5a9399dbaf9297a4b4381136ee28c4c4321d9f9f449f311623443f4d8aeb74de8beee59441a67c4bc2d88642ecdd37d0dadb7f092903b18b934e37cca082c456f49676e5e998a9d54f87c6c68e144165e80a1fef377354d66ac32dd912e3a318eac2d58fcec81da225dbdd45601ea0fb52", 0xd5}, {&(0x7f0000000280)="8adf5f0847578d2685e53531ae98", 0xe}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000002600)="8c444f7397cc485883b85ca986979d67271567d0182c61c74e6147e9007bc0f95029dc21a75243671712a280655cfd06610bf05be152f75033ace0f357bfeb32e220bef919fe4a3f179a3fa29cfde2f20b8bfc4f30392f508c863083388fbcd6e5678f3965c7d094e23ab971845975fa857deb05781c", 0x76}, {&(0x7f0000002680)="8b48da1a804a7c85c2fef46bb5706270b4029b0351b335fe71e5c39c1fed114c75355ffb7b4a0bcf2ec884de7ae54c51c523d8c1d84e4f28017dde759853fc8c9a2a9c71aa70fc7048cebe71623f6668fa4636125cf62b1852fede47d1097fda43b531476eb2864bea097ea1c68b411b1de1d433a1d603c53ddb9edc36de123bddf325382d02406cbc92d7f8e25dbc3e3871129a74af2ad281bc527002ffcd9eefe5a0c2eb78142deb564f3ef10364cf4c0f8557fcc88c714d52badda2c76c2f216c54f9bdf5acbc1e1155c76f15f3bdedc365b8bfd8f814b62b4cc2e484b6564871352ddb953fb1f2c4a9c8219d7b073408f693e71dd11bdd041372b484188285852c269888dc33fc2d18ce8095af9c195916c98c9f1c058ba8618407a1cd6e10d3ef92564ee20718e49e815f732ba5c782df1d4a5d8bbcb63b379053ba11db0b18df166ec870bacb0c6d6b4628cc635e3ce06e5b7c25fd6d7997d124acb8432c0ced3ce3870ca39b1e69bda05c2c0aa66f7832198822e6d11dbcf0047bc1779812423a60191e19658cc1f14052a4cdb607ab8600f39aaf123b655367be52525211b5705b6e99f1b0f7eef4a627021ee9affee8699f29b1634c3f246e0a63dd76992c1e07bddd4c4ddb92f121a442e4309a4d299a0c09722281a5b79c315e0669c6cdd13336653c6429c3180b3c086fb3f1f7cccb42bd5418c3dcd62ae9ecdc4f1d097153e16dfbf7feab65b61c9b2b2506ea89239ee9e823580e6bc6d0c95c7d0db1d6b5bf823cc484c25fcf46b867aeb36fed74495a6e036715d7b0b0ffb2d54bba6eda2142f24cf0a1ff60e89c4c957d9c388c694eeda6d1858a1f74cb57ac385760b8d802e7fc61e54d41871c6c45c80f3ff019857e885fbb88abb1a9a23f056af37c255750ae55fc36d650cd869b71d31b88af411f9643015a443cde3ff7537856f6fd64e27ed1adc892cd274c99892411678787ecf08e3ec0fe260245d31af76d9aefeb13bbe2ee05afb02581bf4acccef40a831b27ebb8c8d033df20d855d27a2cda78c605fa7a8815587097777b6142815d08e7f9b79ac617d8daf85453b4e245df70a8aa6801ceda8eb938ebd575053ae053bb4db2dc4d2d224bbc9779ffa87ed05b07f9791f7d80b98db71fe2c571aeadd338681047a6e4869d00d8e4e04a83b3fb4d32ad3037752bb834bbcbdfa28cab3c20f660625583786a22d1c1a435c1689c4b1abfa00520cf10e5b0c201e3ffd4dd8d905de6ecee0ef62d40355a668ed3209d6327e01bfbd75671241e23b55008e10e8ce6e64ff1e72cd99f7a8742e3f86a0d2c04af478210a03c7cd7c1d4d31cfad15c16a2d2744b11545987c60899742a220a594cde1d2b30a9b54b4d11f6bdd6bd3177d3f2817027be9301842ce81224e8a7e8dcf81a7500962884dcd36ec68a8b016a4de14767abc2a92decbdb11a4fb9dee8ac41ee1af6c3a8533b1e826e91d3f5ea8c70d83e6c2fd218f37cc3182ca097e0a3fdf270067c56e5a299b488437d899f31bcafdfc0f67dedb4f8a714ea38622c2852e2ecf550f2d0b0ac8d400813100f835a2062080752c43d3283f9a7341ea2c518711fa38f28bc4ac7d4ab50c0a3292a66d6e92c8df26298b7a28111a11252bcb533a776a5e0af22ceb0e841240578fe90cbfb892cbddf8dfdd693fb2dff2de546378e33c1573bb314ab32e610dfb28fcfbc4d684c75d4377aacd604f6334163e45991b8561c69c6b6221ef2b382c5e1f790c7cd6fae203fca364e0d84132daea9424ff7c330661c0ddc2a32ba2ca9422135f9b4f8eaa1dad2d0d3a9095caf32e0af6eb3444cce3f544539073f471da9aa67f160cade9fc1d60d6e814cb5e3ef3b20fdbf2b7a9ee7e8874633538b4fa87431d190dfd22960ce742d4e4877032746151f773872df303556affbe3effcf3402bbde44aa3a7b2f58cfde8b27b11dd5de9da9bf4dcc7ca7712d6b5f5e6fbf0f33bbddc3b082864c9982fb34a39c3a7ab2064a04c6fb7d3476476ba7ab15af9a03bd0a84f89c1faa582ab3574d236b074bc842f44f89c8119a913b3f28d628369bfa2b00583fb71747c487d01cf7fb8af9ecd32190e77b8374f8a649453192e52f350bef88c76cf548942bc56da62e1ddcee738f28ed2d590d2175c9a6bf97d9f906f28963db8a9000646375fbfdbf1c432d53531cfab75aeeecaa4051fff81a72bc0c30dcb12d6d8c8705b119893fcc6d5979a15162bb1b793e42bb3c388d571ac48bc522dfecbcffbac2edb3b6848c2e93268b863aefccf95feb850b2c5e46fadc0e220655f9ce150a568d9cc9b3de15a22808d9edfc535641dd1dd9c0882b59b55096d0dd0448e8f3e764cd58af9e26342393320abc11852dbac3ce96a7f568ae05b1e3924b07a5b4eaf1ca6daacdc8d31219b1f3a6d87e58bbf46845590d0d6c48b810836cf05135047d294537bf4896231d9c1cec3451fcd08202afae68e98cb5a247ba62e5bb9612b76e710cf61fa6af59fa8af45803dcb67c2cfd9f3add85714f5d21cd0ab23ce455cc8503fb42ec4307fd2f0cc5433ed5716114eaaad129b21ab0507262285f3c1d74683e4db39e417df7691c9f8f6bb23ded77a8a8c8da307493555f5e705a1693ee0723218c0a30becb94a0ca7f92e665a847e897dbb9e2a52593e80cca23e0815ffe5a594dd61042eefa5b3e21a57e5b0f77646a4d2baec5f2d5fb5d3a4e56987c08c43a3b35a81830bf4b8ccd5c392029c7dfe2ab3f4210b5d817a3646a023244011b194760119cefd6959062a56329f18991bd899727bc442d230fa85ce3d3b5761b37aab72b96849d3aee2dbc8452dcd8447b6b1659e3a0225975c74d21741e3d1a506f33917cadc4fee92d173dbddd0e1b10a32a2b97f60a254c82c724039f87f4daf31079b0c9254357abfd6c0d3be4bbafe57dfc9b47b4364489cb0ee2696c9fe497a44b52f22bd3f76ace98815f175d6d82bf8dca35645e6533bb311fd40b8585974c696961c0ae5c8ff623bd4385d12c387e93a48a4624b13ee318d26367542bc53f1cffafecfec6f9746442814818cd154a06ed041c57e7b5276697e43f33c1c3b6cd0028ade1648b7cf982d1096fef0eb70adaf82d6c4b478039ecd6ae540e75d1bac84b959500f34fef1d6e925805f5458227f2d9a4ba9ac9230fe3b557b75fa1aff1aa30808941756acda43da174fcfb4dfc6398d613e2052151bb8c666aaf8eb99bfe5c33eea37210f01ac63272fe74e5750ee8cc949e0819082b77dbd3e3c533dd8b9ce2a3a53ebb8c48f88502474bd89a443615949cb06a955273940446188b98b823e888416a5d118217c589614d56930d65018f8d7d8607025c0d6d042219785529cc6231ea275e0d6336630b088bc69b2ecb6099745be042577124087b8690c3971b77e0045489f75e0235457749cd40224f27262591e8babf95cc5b66c80e5620abe7536755440f8ce80cac043b6055880c51bea200e799f42aebe93f75d66f98f7ebee2df5e234cf463fc86886e06c23926f24e3d14f1bc8fb95ec059861124e07c65009143287481fa4e30e7792c7959dbac7981de6c67877dcba95138eabbf25a3601b354b298b7f11a9e1af6f64060fa848a5b454f125ef89d31001c55ba4893f3a01220a81cd25556b1b81880aae9c9af09912710264202fb962d26d277f1433412103476da6ef0f1a900c3bbb01a9afd572de7b4eac6834bd02ba0457fc4e3ea6cb2b53151d7cb0973fba0f827a765f2965fdc6d6024e297384c954ebde76676e058187d4fdf76691f516ce4509eba542fee6cde68732a9e990ca4be92429a9f5bea6e0f0082d188bd920fd72a485df928487395f95027f49157d9d2103e49c57d25f546d7b10536a8ce4002c845a26cf06f0595998eb0b6ed55836cd6afa9be399265287248600dff2f2ac7d7a25bcfdc6a0f861bb19d35ba01ea040a8fa1937b12afee026577693c5700bac180a6d33aa081bf97d99f4f364b9eaf50906f2f837c322e7492bd4cf6538049f005f13f86d1115bfe97485070b0d2bc89b27de106b56c6beb3e91d2b075f45f60d82f6487272cec3d4019e8dc43bfa97fef04d21f662e941812f66b9a277c8fd2490ec46bfc356daf0e15075cb1d359c651e2b9de4f246bf6b0485754c1f0d8b01630317c89ad3fb68f23d8f2d9dcee23d922d0f900078d5ac10a3f74033d7b0faa3a7178bc5b94cfd75213aa55176273f16b7c9c9d2949c85f81d87c4dc08bbec747e00a3b291abee9f28dee11db79737fc4a2b2380e7a76bce3082a8a2a8590c9220c17571e1022cf0e16797f148cd29518924431aa08559c7c5e7871064284d0ab8bb48a8c4e30b1240b6099bdfa4a3f3f88b299c3cdb3fad525d7a45261e97683bd6c976deebe2df17ea67c65a4296c6bf2d1c9f986dcf9e57937eadc4b15655ef762e422d4f2680a3b24e860b051bb0f3117dbd9c4a32f5bb802d339000979738e2e64b641f210b0276cb67c37d7663caed78ca551400465c7bf75317e438f01eb4a06604aaef9acdf847a9467caf44b4242b00087aea781cdd8b6948d08bdd77afee0b5f153de0cda6b1449bd40f395a7242eedac6b9be0c50f4a4d3f0ad8e402db790b896eabf7b924129c7d73253d283822b979fa355312de5bf52b172dd3f3911e1677eea05b7d15cf49bcc72b687df786661e93f358cca989573fd52f8f40dab7c6a4597d900eb552431781ce9529b1a9d1630035e7cdd9a09b8640ecac2ff8b82e5c5c64b1c37a5a1028119235bc50d1c0e0371e3bf0add0443d47853c485ce15014387a2fa07a21eee7dbb7f8da0911d2253a6ad2469225a32230f78e49d1999b719e427e9203a182899179a8f70b60932ad4af5da67bec006c3dc8a6c280e8e7a4e98955d6779131ba31c07008a1b7714b893fcc5c5579daf540f959d26a6e9d3dc8c78f5e11975f137d0c90f6e02d75cd034949a701e8a31c064fb700a45a9b9cba81a23d76e3a41391ec91c25100e4013ab7024b7b14eb4d94a457bab1e6626f081e0e46ebbb4a18053afecdf398ab7139f8e0d081524b5967029de039521a36f5e5060222c1ecca3141ac2cde03018f04da550d5c75dd02dfc9afa065dbc4904df3c2d6deb41a0e06048e5e670733a4193f6ddc4da4e0a1f2339f4c136fe2e2b04635b570c25d16d35f18807907e9a5b0b4d8a812816473b88743ad65966003d65f7532df5020ed616f8041e295664f6c7367563656036c001437148e784f5158c52d0423e1912ad9a8bb778b796fc49dcf038cc054dd472090b8d3edc38b64b4937bf044b5292bb14f2b70ae4433416d247f92314b97698cf19bbe5b976e67ddb371b55d7e1f7a8242fd8e8d49acdca1204862b2a861e8a392d8dcc9b14b92fae69687c6107cb541dfe79a6bb16e10168aece6fc7f4952d6dcb4fcaea889ff4f46d24be4ca0f8b4cfca9c10e27fe86d1d6ab154d6f01f6a3154388a5e98d6f3afb947a1ff8f350281df1e8c31e55bec6a006a131d4e0313cdaf71f7c7e7f214575bd82ab9761a7cc5ab196d27a8d75d50812df3fc702324662a0f2383fac422341c38dfa5599e5424db0f55736f96139be2c4fd37ad660d90e9f78f911f2c2b41d37e2b0477f14ff36d188e64f59867094b6dbd4681ed9b015f01858db8ea73fcc707eadaf3bb9ff196ac2e5c0e8c5ce86da0e15e8d759233f98fd0a4ab6d183ebb68334b4d529e235e8a61feec143173b5aeca15eeb5c4328057d7775ee9566f6f6c0f3e46393a9149b79943afcd4d2c643eb00a006bc", 0x1000}, {&(0x7f0000003680)="510908ef37d7a6e8fd7e5b93c75f67d2952a23758d4998edd43388e616da03fd4d1baac3b908741422f8f28392e334d894888aeac7273d470f8f0b4687f480d7a2ce258d5dddd4e6f15d7bece56c3aa7eab828efb81a25453ed5f6f0c8aa693bebe8edb1835bdc0b34a02b923373f28f7ef639ceb01d784f1f03d75879aef1ed15d11bc64654fc950a04ed89dd65686c077f2cb50c0221f9858790e971489e82e4f7c83109cca54a279e327ef139c8966a1f", 0xb2}, {&(0x7f0000003740)="5c187482ff1222f44142c6cf5845c3bf2444b9b95e36d539c9a4817b9370992245eb41edd93720d53d1949771f6e401a08443f7dcd3288c505ffa090f7e73a", 0x3f}, {&(0x7f0000003780)="83b614d12c832361e7883c1f9fb1684db788a129cbb70cda0b61963c495c5b5739194816c520b8fb252d2c988b5341bb4d4b5253036859d8928a97c78764d951d6c7cb5ada2725bb11a145d31de5aebdc50d1f0bc08767db1a42533d36a4e7c9bae371a7cec3c22037", 0x69}, {&(0x7f0000003800)="283ffeec712a09e5823dc5532b4a12e774835a06f259a4a1223548b67a356884a909acb1f36f17f6288196a0d9b03326da8ce75a9dc7dee51fc5b75c88e985fe4efb", 0x42}], 0x9, &(0x7f0000003a80)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r5, @remote, @loopback}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x3}}], 0x28}, 0x20040000) fsync(r4) r6 = request_key(&(0x7f0000000080)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x0) keyctl$describe(0x6, r6, 0x0, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000001c0)) readv(r7, &(0x7f00000002c0), 0x0) r8 = dup2(r7, 0xffffffffffffffff) ioctl$TIOCMBIC(r8, 0x5417, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, 0x0, 0x200401, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000700)={'bcsh0\x00', {0x2, 0x0, @local}}) creat(0x0, 0x2000000001e) r9 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r9, 0x10e, 0x9, 0x0, 0x0) unshare(0x48020200) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) sched_setscheduler(0x0, 0x3, &(0x7f0000000000)=0x3) 22:03:41 executing program 2: socket$packet(0x11, 0x2, 0x300) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x0) ioctl$RTC_PLL_SET(r0, 0x401c7012, 0x0) getpeername(0xffffffffffffff9c, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commi\xfb\x00', 0x1, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000001680), 0xfffffffffffffe63) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) syz_emit_ethernet(0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) fcntl$setownex(r3, 0xf, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = socket$inet6(0xa, 0x2, 0x0) sysinfo(&(0x7f0000008c00)=""/4096) bind$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e22}, 0x6e) get_robust_list(0x0, &(0x7f0000000580)=0x0, &(0x7f00000005c0)) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000a00)=ANY=[@ANYRES32], 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) r5 = socket$inet(0x10, 0x80000, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r6, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r6, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) r7 = fcntl$dupfd(r5, 0x0, r6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r8, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r8, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140010000501010200"/20], 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, &(0x7f0000000140)={0x8}) perf_event_open$cgroup(&(0x7f0000000400)={0x4, 0x70, 0x6, 0x1, 0x1, 0x48, 0x0, 0x8, 0x80200, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x3, @perf_config_ext={0x3, 0x364773b3}, 0x484, 0x7fffffff, 0x8, 0x1, 0xd7, 0x3, 0x8}, r3, 0x4, r7, 0x2) getsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 61.481902] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40531 sclass=netlink_route_socket [ 61.529162] input: syz1 as /devices/virtual/input/input22 22:03:41 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="c546f929d54792d7c5fc5906ee3d48f51c3872b78193776bcf88ab83ea0e36804690611f045a72422eba34ee19654c2340ff016d5fec163a5521452065afbd1cb9fe60f3e33ccfc0a17994e237653b72b6bcbf96db4a34b7c6604965911d8c532933c5cc524f98428f107bf0079657fe352892ab316000e8629a25cc277a42a40dfd78b4333cc4bac6b25ef5a6b014ab85d706220286d932e8dae5126183cb90d4cec6ae5601394947e379ba8b1901baf8fbcc0cc3582024cb4fde6d63d5457088"]}) r1 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x0) ioctl$RTC_PLL_SET(r1, 0x401c7012, &(0x7f0000000400)={0x6, 0x0, 0x5, 0x0, 0x7}) getpeername(0xffffffffffffff9c, 0x0, &(0x7f0000000680)=0x8c) bind$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x9) openat$ashmem(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ashmem\x00', 0x800, 0x0) r2 = syz_open_procfs(0x0, 0x0) sendfile(r2, r2, &(0x7f0000000180)=0x74000000, 0x2) fstat(0xffffffffffffffff, &(0x7f0000000340)) syz_open_procfs(0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000001680), 0xfffffffffffffe63) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) fcntl$setownex(r4, 0xf, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = socket$inet6(0xa, 0x2, 0x0) sysinfo(&(0x7f0000008c00)=""/4096) socket$nl_route(0x10, 0x3, 0x0) r6 = fcntl$getown(0xffffffffffffffff, 0x9) get_robust_list(r6, &(0x7f0000000040)=&(0x7f0000000180), 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) getsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000000), 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000300)=@get={0x1, &(0x7f00000006c0)=""/175, 0x7ff}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x82, 0x0) 22:03:41 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c46000000000000000081000000030003000000000000000000380000000000000000abc4101d720f78f4ca83c198000000000020000100000000000000000000000300000000000000000000000000000006000000576adacfc686e97da33f"], 0x58) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000002) dup3(r2, r1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="be", 0x1}], 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) [ 62.127131] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40531 sclass=netlink_route_socket 22:03:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x8080f, 0x21) r1 = socket$inet(0x10, 0x80000, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r2, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r4, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r4, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000140)={0x8}) accept4(r0, &(0x7f0000000040)=@xdp, &(0x7f00000000c0)=0x80, 0x1400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6gretap0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'team_slave_0\x00', r6}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@mcast2, 0x0, r7}) 22:03:42 executing program 0: bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0xdfedf534d1677a51) ioctl$EVIOCSABS2F(r1, 0x401845ef, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x8000) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40047602, &(0x7f0000000680)=0x10006) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB='d\x00', @ANYRES16=r5, @ANYBLOB="02002dbd7000fcdbdf25030000000c00020008000100f4010000800c000900080001004e18cd4ccddbc3f5ceed66411f0000002800010008000300c67a000010000100e03177ba8ac7c38502000800040001000000100002a743de73"], 0x3}, 0x1, 0x0, 0x0, 0x4000011}, 0x40000) syncfs(r2) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0xfffffffffffffffb) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in=@dev}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0)='TIPCv2\x00') lstat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_ENTRY(r3, 0x0, 0x0) fchownat(r3, &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, 0x1800) sendfile(r3, r4, &(0x7f0000000040), 0x2) 22:03:42 executing program 5: openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="39000000110009cdd19b012abd7ae0000700fd3f03000000450001070000001419001a000600000000000900"/57, 0x39}], 0x1) recvmmsg(r0, &(0x7f00000047c0)=[{{&(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000004c0)=""/171, 0xab}], 0x1, &(0x7f0000000580)=""/187, 0xbb}, 0xfa}, {{&(0x7f0000000400)=@xdp, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000640)=""/21, 0x15}, {0x0}, {&(0x7f0000000680)=""/228, 0xe4}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000000780)=""/41, 0x29}], 0x5, &(0x7f0000001900)=""/4096, 0x1000}, 0x5}, {{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000002900)=""/111, 0x6f}, {&(0x7f0000002980)=""/65, 0x41}, {&(0x7f0000002a00)=""/36, 0x24}, {&(0x7f00000048c0)=""/121, 0x79}], 0x4}, 0x8}, {{&(0x7f0000002c00)=@can, 0x80, &(0x7f0000000480)=[{&(0x7f0000004940)=""/162, 0xa2}, {&(0x7f0000002c80)=""/65, 0x41}, {&(0x7f0000002d80)=""/71, 0x47}, {&(0x7f0000002e00)=""/74, 0x4a}, {&(0x7f0000002e80)=""/124, 0x7c}], 0x5, &(0x7f0000002f40)=""/150, 0x96}, 0x80000001}, {{&(0x7f0000003000)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000004700)=[{&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004080)=""/109, 0x6d}, {&(0x7f0000004100)=""/247, 0xf7}, {&(0x7f0000004200)=""/79, 0x4f}, {&(0x7f0000004280)}, {&(0x7f00000042c0)=""/236, 0xec}, {&(0x7f00000043c0)=""/77, 0x4d}, {&(0x7f0000004a80)=""/198, 0xc6}, {&(0x7f0000004540)=""/217, 0xd9}, {&(0x7f0000004640)=""/165, 0xa5}], 0xa, &(0x7f0000004780)=""/34, 0x22}, 0x3ff}], 0x5, 0x22, &(0x7f0000004880)={0x77359400}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000040)="39000000110009cdd19b012abd7ae0000700fd3f03000000450001070000001419001a000600000000000900"/57, 0x39}], 0x1) writev(r2, &(0x7f0000002b40)=[{&(0x7f0000004a00)}], 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f00000000c0)) bind$inet(r3, &(0x7f0000dc9ff0)={0x2, 0x4e20}, 0x10) setsockopt$sock_int(r3, 0x1, 0xd, &(0x7f0000000100)=0x8, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='lo\x00', 0x10) sendto$inet(r3, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000200)) fcntl$setstatus(r1, 0x4, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) creat(&(0x7f0000000080)='./bus\x00', 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x208200) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x1) sendfile(r5, r6, 0x0, 0x8000fffffffe) r7 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x488400, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000140)={0x9, 0x0, 0x1}) r9 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r10 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r10, 0x280080) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000100)={0x0, r9}) 22:03:42 executing program 5: r0 = open(&(0x7f0000000080)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_SET_PHYS(r1, 0x4008556c, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0x1}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0) 22:03:42 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, 0x0, 0x28002, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000000380)=0xffffffff80000001, 0x3) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'team0\x00', 0x2}, 0x18) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @mss, @mss, @window={0x3, 0x6, 0x1}, @timestamp, @timestamp], 0x6) fremovexattr(r1, &(0x7f00000007c0)=@known='system.posix_acl_access\x00') open(&(0x7f0000000240)='./file0\x00', 0x101000, 0xc1) connect$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000300)={0x1}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[]) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) bind$unix(r2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, 0x0) setns(0xffffffffffffffff, 0x12000000) r3 = socket$inet(0x10, 0x80000, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r4, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r4, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) fcntl$dupfd(r3, 0x0, r4) sendmsg(r3, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000000340)}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) read(r5, &(0x7f0000000200)=""/250, 0xfffffffffffffe2e) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x475e, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000b00)) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000000c0)=0x0) getpgid(r8) geteuid() lstat(0x0, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000001f80)) fstat(r6, &(0x7f0000002100)) connect$inet6(r7, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) [ 62.821949] input: syz1 as /devices/virtual/input/input23 22:03:42 executing program 5: bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000030307031dfffd944ef20c0020200a0040000100021d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) accept4(r2, &(0x7f00000004c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000540)=0x80, 0x1000) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000040)=0x3ff, 0x4) read(r0, &(0x7f0000000200)=""/250, 0xdfedf534d1677a51) ioctl$EVIOCSABS2F(r1, 0x401845ef, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) write$uinput_user_dev(r1, &(0x7f0000000900)={'syz0\x00', {0x77, 0x5, 0x7f, 0xc20}, 0x4, [0x0, 0x8, 0x3, 0x3, 0x3, 0xffffffff, 0x2, 0x80000000, 0x10001, 0x91, 0x3f, 0x1000, 0x8, 0x5, 0x1, 0x4, 0x0, 0x3, 0x3, 0x5, 0x1, 0x8, 0x3, 0x5, 0x1, 0x2, 0x6, 0x7, 0x4, 0x8, 0x0, 0x7, 0x5, 0x800, 0x8, 0xfff, 0x80000001, 0x5, 0x2, 0x5, 0x80, 0xeaa, 0xffff6793, 0x1, 0xd4, 0x4, 0x7, 0x81, 0x7f, 0xffffffff, 0x7, 0x3ff, 0x9, 0x400, 0x3, 0x2, 0x4, 0x1f37bfa, 0x8, 0x7, 0xffffffff, 0x1, 0x8, 0x40], [0x9, 0x7ff, 0xd75, 0xf74, 0x1, 0x5, 0x4, 0xc86, 0x7fffffff, 0x5, 0xce, 0xfff, 0xffffffff, 0x1, 0xffffffff, 0x8, 0x5, 0x0, 0x7fff, 0x6, 0x2, 0x7, 0x8, 0x2, 0x2, 0x800, 0x80, 0x12900000, 0x2, 0x9, 0x401, 0x6, 0x1, 0x20, 0x3, 0x7fffffff, 0x6, 0x7, 0x8, 0x6, 0x5, 0x3, 0x9, 0x4, 0xfcbd, 0x6, 0x9, 0x7f, 0x3, 0x7, 0x3, 0x6, 0xb70, 0x3, 0xfffffffa, 0x35, 0x80000000, 0x3, 0x2, 0xa83, 0x3ff, 0x101, 0x1a, 0x924], [0x401, 0x80, 0x7, 0x8, 0x8, 0xffffffff, 0xfffffffb, 0x5, 0x4, 0xffffffff, 0x1, 0x1ff, 0xffffffff, 0x9, 0x245, 0xfff, 0x81, 0x1, 0x1f, 0x7c75, 0xffffff98, 0x6000000, 0x6, 0x9, 0x3, 0x0, 0xe55, 0x6, 0x5, 0x0, 0x2, 0x7570, 0x400, 0x1000, 0x3, 0x5, 0x5, 0x7ff, 0x100, 0x8, 0xbe6a, 0x76, 0xfffffff9, 0x9, 0x0, 0x10001, 0x8, 0x5, 0x3, 0xffff, 0x9, 0x4d, 0xfff, 0x6, 0x391, 0xe0a, 0x101, 0x4, 0xfff, 0x3, 0x7, 0x7, 0x6b7, 0x2], [0xd2b, 0x382, 0x7ff, 0x9, 0xc3, 0xfff, 0x1000, 0x3, 0x100, 0x1, 0x9, 0x5, 0x156, 0x9, 0x100, 0x0, 0x6d1, 0x10001, 0x8, 0x7, 0x80000001, 0x400, 0x3, 0x0, 0x1ff, 0x77, 0x1b, 0x2, 0xf4b, 0x6, 0x24f1, 0x8, 0x3, 0x4, 0x4e6a1e42, 0x20, 0x8, 0x105, 0x1000, 0xfffffeff, 0x6c835d07, 0x3, 0x4, 0x5, 0x80, 0x1ff, 0xef, 0x9, 0x4, 0x1, 0xd846, 0x3, 0x6, 0x1, 0x1, 0x0, 0x1f, 0x30, 0x6, 0xb, 0x5, 0x3f, 0x83c]}, 0x45c) r4 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x8000) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x1) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) ioctl$PPPIOCSACTIVE(r1, 0x40087446, &(0x7f0000000180)={0x6, &(0x7f0000000140)=[{0x0, 0x3f, 0x20, 0x906}, {0x8, 0x9, 0x0, 0x1}, {0x4, 0x7, 0x8, 0x3}, {0x2, 0x2, 0x69, 0x40}, {0x5, 0x81, 0x8, 0x8}, {0x77b3, 0x0, 0x20, 0x5}]}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000800)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000a61ca133000005000000aa85000000000006000000000000000000000000000000000000000000000000f91ace8b9200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009a044d3357b0685ca15b011997b9171921e2d265a4ee279cb0af00c5da0daaf381df721618c85cdbf0486eac071e5dba0229bda626fff08357c3dc38c167777a86de03cb76372102a3f898ee9de283d123f88f7f338b14a3535d0e2264cbbc7181fa"], 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@loopback, @in=@dev}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0)='TIPCv2\x00') lstat(&(0x7f0000000080)='./bus\x00', 0x0) r6 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) sendfile(r6, r6, 0x0, 0x80003) pwrite64(r6, &(0x7f0000000300)="e54e77d103565b113288c65f38a22a25b637db56783e677cb932bbfc301d860ae5c69cb5c454ea010bc2fec87e7b768cde79d897b1ee9c85e76c4940107fe0fb82a2d93874732c08198baecbb06f6b920001d462f75bbca6dc40e794afe797eba6b0b8b36f91bab095160e12eb8a3e61fad4d0cebe56b210cb258618b0e488b00e2933feb30487da77303bcc2cf7a122ef9937032dea5f98d057f8e411fddbcafe2605fc7895a8e4d44fea8a80f0d9cc83ebca0d86388bd9", 0xb8, 0x0) write$FUSE_ENTRY(r4, 0x0, 0x0) fchownat(r4, &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, 0x1800) [ 63.100395] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 22:03:44 executing program 3: socket$key(0xf, 0x3, 0x2) r0 = geteuid() setreuid(0x0, r0) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2}, 0xc) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e5e2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x5dd7d56a, 0xfffffffffffffd3d) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x5) sendmmsg(r3, &(0x7f0000007fc0), 0x5654807, 0x0) unshare(0x40040000) syz_extract_tcp_res(0x0, 0x9, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000004c0)) r4 = socket$inet(0x10, 0x80000, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r5, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) ioctl$UI_SET_PHYS(r6, 0x4008556c, 0x0) sendmsg$nl_netfilter(r5, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000019740)={0x1b8, 0x9, 0x1, 0x201, 0x0, 0x0, {}, [@generic, @nested={0x180, 0x5b, [@typed={0x8, 0x70, @u32=0x8}, @generic="07c4f2d45039ea830cd0152e2125ab3ecd95686366fef151e2b3563104cbc8a6256ade9b53a55070abb12febe6eb939d373fb6163cc698bb2d5a7666b9241a0e33b6b3521a5ea5e4df7289b63464e2390fd518ee0583e2590571841529b6b22193d936941dc33af5b0326d3aa89374921e14eb369754cc81765e2c5b7d34c0ad05ded8eb8c4bd5f2b21b4fbeae61e104661fb1fc6a781513c1c2cad07c95bb15c83bb28c9f189d2b5f0aed8583ded0dee7dfc3f1111d229d941dc567a14e754af568e4", @typed={0x8, 0x40, @fd=r6}, @generic="c60516f30325ff87bf610371f6973ee999b3cfd1046625d19826a33d2a32ddffae7fca1af0fb4023085608bfe76d578b48e192198245b2a82a65dfb5052dcf5dd0b3df0626a297eb73b84d1290d8c269935046cb10cdc7e8a6b4816ce532f200e5c382755ada15638de28f21607b39700ea52bb3000ae0f8564d6cf7fe207b6bdcd1d392818b8fdf2a38ef54246bbfd5bfa17b29a651b51951eb000c9c4558a3ddfd33039493db89", @generic]}, @typed={0xc, 0x96, @u64=0x2}, @typed={0x18, 0x76, @str='/dev/loop-control\x00'}]}, 0x1b8}}, 0x0) r7 = fcntl$dupfd(r4, 0x0, r5) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r8, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r8, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, &(0x7f0000000140)={0x8}) r9 = openat(r7, &(0x7f0000000300)='./file0\x00', 0x0, 0x40) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x10000, 0x0) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmh\x00', 0x124c0, 0x0) read(r12, &(0x7f0000000740)=""/102400, 0x19000) r13 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r12, &(0x7f0000000040)={0x15}) ioctl$TIOCSETD(r12, 0x5423, &(0x7f0000000000)=0x7) r14 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r14, 0x1, r13, &(0x7f0000000140)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r15, &(0x7f0000000140)=ANY=[], 0x4240a2a0) epoll_pwait(r15, &(0x7f00000000c0)=[{}], 0x1, 0x7, 0x0, 0xb3) gettid() timer_create(0x1, &(0x7f00000003c0)={0x0, 0x8, 0x1}, &(0x7f0000000540)) 22:03:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) keyctl$session_to_parent(0x12) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000080)='.\x00', 0xfe) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000140)={'filter\x00'}, &(0x7f0000000040)=0x44) r4 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, 0x0, 0xfffffffffffffe5c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c) r6 = dup2(r5, r5) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000140), 0x1325e1) setsockopt$sock_int(r6, 0x1, 0x0, &(0x7f0000000000), 0x4) fcntl$setstatus(r6, 0x4, 0x42803) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) r7 = syz_genetlink_get_family_id$SEG6(0x0) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) ioctl$TCSETAW(r8, 0x5407, &(0x7f0000000540)={0x6, 0x1, 0x7, 0x5, 0x3, 0x2, 0x3f, 0x5, 0x2, 0x80}) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)={0x53, r7, 0x100, 0x70bd25, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x8]}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr="1bd541eee331e15b5c9e00"}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x54}}, 0x8041) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000340)=0x1000) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x8040, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) r9 = open(&(0x7f0000000400)='./file0\x00', 0x200c2, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='map_files\x00') write$binfmt_elf64(r9, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYPTR], 0x18) sendfile(r9, r9, &(0x7f00000001c0), 0xa198) 22:03:44 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) r2 = dup2(r0, 0xffffffffffffffff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[]}}, 0x0) fchdir(r3) r6 = creat(&(0x7f0000000740)='./bus\x00', 0x10) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, &(0x7f00000005c0)) ioctl$FS_IOC_RESVSP(r6, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r6, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) getegid() pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000280)) fsync(r6) write$P9_RSTATu(r6, &(0x7f0000000580)=ANY=[], 0x87) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000400)={0x1, 0x0, 0x1000, 0xfee, &(0x7f0000000cc0)="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", 0x3, 0x0, &(0x7f00000000c0)='ZKP'}) sendmsg$TIPC_NL_MON_SET(r5, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2001000d}, 0x0) clock_getres(0xe, 0x0) r8 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$inet6_int(r8, 0x29, 0x46, 0x0, &(0x7f0000000140)) r9 = openat(0xffffffffffffffff, &(0x7f0000000040)='./bus\x00', 0x4000, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f0000000140)=0x10) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100002}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1c, 0x0, 0x3e065fae0c0394b, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24010010}, 0x40) 22:03:44 executing program 4: r0 = open(&(0x7f00000003c0)='./file0\x00', 0x80, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000340)='pids.events\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000500)={0x0, @multicast2, 0x4e21, 0x1, 'ovf\x00', 0x9, 0x7fffffff, 0x5d}, 0x2c) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/status\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r6, 0x40045402, 0x0) write(r5, &(0x7f00000001c0), 0xbab230cf) ppoll(&(0x7f0000000140)=[{r1, 0x100010452}, {r3}], 0x2, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000580)={0x2}, 0x8) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = gettid() rt_tgsigqueueinfo(0x0, r8, 0x0, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$TIOCGPGRP(r4, 0x540f, 0x0) syncfs(0xffffffffffffffff) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) ustat(0xa9, &(0x7f00000004c0)) r9 = syz_open_dev$mice(&(0x7f0000000600)='/dev/input/mice\x00', 0x0, 0x100) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x2}) openat$cgroup_ro(r2, &(0x7f0000000400)='pids.current\x00', 0x0, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000680)=""/171) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000380)={0x9, 0x7, 0x2000}, 0x4) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x800, 0x0) r10 = getpid() ptrace(0x10, r10) ptrace$setopts(0xffffffffffffffff, r10, 0x800, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) 22:03:44 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, 0x0) fcntl$getown(r0, 0x9) r1 = getpgid(0x0) r2 = syz_open_procfs(r1, &(0x7f0000000080)='net/unix\x00') readv(r2, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x80000, 0x6) syncfs(r3) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r3, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) socket(0x1, 0x80005, 0x1800000000009) r4 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r4) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r6 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r6, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f0000000400)={'syz1\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x7, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r8, 0x5501) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) ioctl$UI_DEV_SETUP(r7, 0x5501, &(0x7f0000000300)={{0x62, 0xec, 0xffff}, 'syz1\x00', 0x38}) ioctl$UI_SET_PHYS(r7, 0x4008556c, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000043c0)=ANY=[@ANYBLOB], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0x3f, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, 0x0, 0x442, 0x10000, 0xffffffffffffffff, 0x9, 0x7ffffffffffffffd, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x8, 0x3}}, 0x77) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r5, r6, 0x0, 0x180003) 22:03:44 executing program 5: prctl$PR_CAPBSET_READ(0x17, 0x6) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000040)="071f080000000000972e00c6fe76cf075768acd251e36def2300020000", 0x1d) r0 = socket$inet(0x10, 0x80000, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r1, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_SET_PHYS(r2, 0x4008556c, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000240)=""/175, 0xaf, 0x10000, &(0x7f00000000c0)={0xa, 0x0, 0x8, @mcast1, 0x7}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r4, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r4, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000300)={{0x1, 0x0, @reserved="1ba82fc7c782fe8d285c0616472bb71df7b92016ea3254ad7a49c6f4976be249"}}) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) r6 = fcntl$dupfd(r0, 0x406, r5) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r7, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r7, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000005ffffff00"/20], 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000140)={0x8}) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000140)={{{@in=@dev}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000000240)=0xe8) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r8, 0x5501) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) fstat(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x189) r12 = getegid() setregid(r11, r12) fsetxattr$system_posix_acl(r8, &(0x7f0000000380)='system.posix_acl_default\x00', &(0x7f0000000440)={{}, {}, [], {0x4, 0x1}, [{0x8, 0x5, r9}, {0x8, 0x6, r11}], {0x10, 0x64fb048afdcd5a7c}, {0x20, 0x2}}, 0x34, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000000)=0x1c9) r13 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x0, 0x1, 0x1, 0x0, 0x7, 0x6}, &(0x7f0000000100)=0x20) [ 64.407670] input: syz1 as /devices/virtual/input/input24 [ 64.441248] input: syz1 as /devices/virtual/input/input25 [ 64.482432] input: syz1 as /devices/virtual/input/input27 [ 64.542706] input: syz1 as /devices/virtual/input/input26 [ 64.620315] input: syz1 as /devices/virtual/input/input28 [ 64.638565] input: syz1 as /devices/virtual/input/input29 [ 64.690361] input: syz1 as /devices/virtual/input/input30 22:03:44 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = creat(&(0x7f0000000740)='./bus\x00', 0x10) pipe(&(0x7f0000035ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = creat(&(0x7f0000ccb000)='./bus\x00', 0x0) dup3(r6, r5, 0x0) write$selinux_create(r6, &(0x7f0000000400)=@access={'system_u:object_r:tetex_data_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x4}, 0x47) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f00000005c0)) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000640)={@dev={0xfe, 0x80, [], 0xd}}) ioctl$FS_IOC_RESVSP(r4, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r4, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) fsync(r4) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000007c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000cc0)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4000) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/user\x00', 0x2, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000002c0)={0xd6, 0x29, 0x2, {0x9, [{{0x40, 0x0, 0x1}, 0x8, 0x3e, 0x5, './bus'}, {{0x40, 0x0, 0x6}, 0x38, 0x13, 0x5, './bus'}, {{0x5, 0x1, 0x8}, 0x1, 0x0, 0x5, './bus'}, {{0x21f822ceda2cbc0e, 0x2, 0x2}, 0x2, 0x20, 0x5, './bus'}, {{0x4, 0x0, 0x3}, 0x8000000, 0x3, 0x5, './bus'}, {{0xa70b8002e5547ced, 0x1, 0x5}, 0xa, 0x40, 0x5, './bus'}, {{0x12, 0x2, 0x2}, 0x7, 0x0, 0x5, './bus'}]}}, 0xd6) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000040)=0xfffffffffffffdff) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x8) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x200000c, 0x32, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r7, 0x29, 0x45, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000001080)=0x1e) close(r1) [ 65.202756] input: syz1 as /devices/virtual/input/input32 [ 65.247154] input: syz1 as /devices/virtual/input/input31 22:03:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x8031, r0, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x4, &(0x7f00000000c0)={0x77359400}, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x101040, 0x1a0) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x7) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x300000001}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000140)=@get={0x1, &(0x7f0000000380)=""/171, 0x6}) read(r3, &(0x7f0000000200)=""/240, 0x24) fchdir(r0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000340)={0x3da}, 0xfffffffffffffd27) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0x3, 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r6) r7 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) lseek(r7, 0x0, 0x2) sendfile(r7, r8, 0x0, 0xfffffffffffffffc) mkdirat(r5, &(0x7f0000000180)='./file0\x00', 0x18) 22:03:45 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x202000) r2 = socket$inet(0x10, 0x80000, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r3, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) fcntl$dupfd(r2, 0x0, r3) getsockopt$inet_opts(r2, 0x0, 0x0, &(0x7f0000000540)=""/159, &(0x7f0000000480)=0x9f) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) r5 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) read(r6, &(0x7f0000000200)=""/250, 0x50c7e5e2) r8 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$F_GET_RW_HINT(r6, 0x40b, &(0x7f00000001c0)) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RLERRORu(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000070000707573651d0000800000000000004d3d000000"], 0x18) sendfile(r8, r8, 0x0, 0xffffffff80000001) timer_create(0x3, &(0x7f0000000380)={0x0, 0x6, 0x0, @thr={&(0x7f0000000300)="fe02611ffad8a192251791b2b7de81726636623bc8d8fa0ed11ddd1a585da74365c333cc6466349f583a652d434de9d21a13fd3c4958872565a9db3172fe770d39214696d19558bbc034b464d30e", &(0x7f0000000180)="d6c64abb5861c3827889732ca8bbaa4da7713f4f0524d25de74c10dfa830e624fa422d4bd13728f927f13f"}}, &(0x7f00000003c0)=0x0) timer_gettime(r10, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r9, &(0x7f0000000040), 0x8000fffffffe) socket$inet6(0xa, 0x80004, 0x0) sendfile(r4, r9, 0x0, 0xa5cc554) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$TIOCGSID(r9, 0x5429, &(0x7f0000000940)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000980)=ANY=[@ANYBLOB="0000000000000000070000000000000000000000000000000000000000000000001b00000000000000000000000000000000000000000000000000000000000002000000070000000000000000000000001000000000000008000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000001000100000000000100000000000000040000000000000002000000000000000000000000000000000000000000000000000000000000000000000000974000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500"/640]) 22:03:45 executing program 2: socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff}) syz_open_dev$mice(0x0, 0x0, 0x0) getresuid(0x0, &(0x7f0000000180), &(0x7f0000000440)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) socketpair(0x2, 0x0, 0x5, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in, @in6=@remote}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000080)=0x4ff) lsetxattr$trusted_overlay_nlink(0x0, 0x0, 0x0, 0x0, 0x3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000000c0)) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x20000040) inotify_init() getrusage(0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @mcast2, 0x1}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000040000000006a5763af841c07d429e49e4756552dcd026f1b67a2d4e020006000fafe77f08cd89518e9711f66ecb31b5aed1f03027d7a45d8febde333a72b37f000000000000006d5a6dd0e490cf594f704a6811bb9d02a3e0f18ef6345a56"], 0x1) sendmmsg(r2, &(0x7f0000003f80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000004740)="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", 0x17a}], 0x1, &(0x7f0000004080)=[{0xe8, 0x111, 0x2, "414d945dddee6b832a53c8122af1bcfed4bf0acd777d2da1a3fe0bf33a879213a047a39aaa5c631d26b0e020bf97f9b620236a15d7090a59f69b31d37c9e2c06f6ef1e30fad7fadd649b161b2e46e0265bfdbf60cdc30ff78ae0e4cc8b4d5aad6db4c1bf26e0488e1ef5b691eb5653063361b3b191ca9a8223db78f4a930341aed5ad7ffef8af2d2df4f673b8c9337bf66087fd51f35c94f4f8000b4bdaaab0036f305b8876b2ea2af7f10d059f242dbcbfa7de9aaa5562efc51045096e4753f26e70c207514554da30037dba4b734cff1adaed07319a25339"}, {0x1c, 0x100, 0x1, "29ef2106ac93f8e4889e61362d"}, {0x100, 0xff, 0x888c, "00037c5ef97cf72674977e68258a00c88a032f27a960defe321e83c647f726793b352142d88d955ddcba4fc1d9115e4985a94efc1da7eb83f1e81bec25beec1c8a917e9044164270bcddb5513e6111d97b371a10c9380307f1409e8162165fb00dc40636e2f61b2cabbc0fe4942dc64a9d91d04aad5e8f5af68df3f296753107b9bad9eca357353c2b251256730415ac757904f4a3f653bfb489920169510f0f34fd05e8bd4747071c155e03971e8dca5e3b8c7c4cb60c8303edd0257147ddd2318d7b146b3926b5985e8e8644303cfc6a8ee20e48ff02d07452d57e7af83789332bfdfc47b2f973632db2b93e728a87c20f"}, {0xb0, 0x45, 0x676, "1aabe899e51779ac6bf5536ddd3b3b1694bcd2bcd75711d716e38d9f068bc8041177ddacf4e7cd0a9f41e9b0af5147a058ab96ad1ceb98b1237fc630e1fbd9b5c244121484d7615bb4e9031361905a635a2506917e794ea2733c880d63b22e592ed291036cd7815bdca1b70821b04de9af4a25eb6ad353d4f5b28ecc1c45c3c6610b3c570430f2ab37592575dc2fcef09a27ec7d24fc0d89722ceae0607bbafc82de"}], 0x2b4}}, {{&(0x7f00000006c0)=@caif=@rfm={0x25, 0x6, "0d0686bd4e232adaf6c16597b8cdbb50"}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000000480)="43303eee7b6993a8121f26cad02dc1f41f8d", 0x12}, {&(0x7f0000000d00)="71d9b0beab8475fcc164f722dd6898e3a035e9dc608d852429752f871cbe649cb865ad3bdce9eed5a55db9bf043518a0d1d568ef21418060dee136295f36b7c73a9b97153ce21ecc31b5b6630aa44f72eb186378eb7cf4f64c2f653ff0d7e5a3ccde5f4cb7272d7ee94457b689e8a37eac516b2261db3d5ff7dc722432d41cd0187cd85319eb6b9bb359f657da0e1da55598635ab9083aad0bbdcae8ac31b3b8a7b6d96117d6e4bf44748f2ff177b82d0142aa734df2fc8d51e557c1ce435a84f8de980dd606a6ca5013769fe12655312877cc04ead0eb6e8ddcd146f71983bc43a692a744f7c2d655d63e4ed8e885a1c29b8abd8643bc23a32bb623148a313156348e25fcc9cb21ff2912f970236743d098c0bcdf2199ca4965642ffe821fccb291e298add4a7287863974b06e5655724174e014906d910db52f0b2a48dd379d6fffb33405a010d5a21cdd7f1061cd8a73d18f60eb8da4541c8331e88deb118fdee488a224c5bf3296ab22b87e7fd5fe69a8cf67b66f33b08397a4b5345fd2fcf84929b5caa00e07aa3c40c094a4ec93b0ecf45315426812f6f2cb22f3120f4bb3826026144d03ebe839b76dd93ffbe58e8a08911691d8518f00b3d4cdc1069518008da5549cbb14f95f76b46a5a4b638e2e2ac6e67600a24761a081e5b75f7a564ffda679cff459d5f6ed5b3ce9ade99e55e9bc9f444ab86a0fb2ab9ac3b5a97742a56d9cb068385ae680e28447cdc68af5903022c98bbbb2616901e6c31f1b5fd83a01d5bdc964c2821f01f83065f56da00ba25badb2de6c787c126fda7cbeedde50a513e065547ee9621f093083c0d7f121b5a0a2b2ece4f405a5bbf978eb158fcc37b84b59ba939eb118620c1524ee7cba917a870856858f2cfeaec84b6c494d569e06a3c9998c1f97e816be5cf053874b3dcdc0adfc1b0cc2342c1118864d3230b2850215736e6d236567fa40b0c1fb1117f553b1d6e24c38b4dc237cc9cb73557b03ee806ca6fa69426ef5bbcbabca26ab593a8c38ec2ba2a406375bd321036fb97d90213641bcef4163b01ca9009bfb8e2a1490a0367481a066687419472467571adb4892015d0eca171d93c9c42e87748d6585868dc70365182c975bb01bc300aa8f7e9cf32c6f8b7739e596881016d7109c969731e6e1809a2404a05e98245b1e791310324155faaab9f6a66799b6b4d0e62aa80fd12aaab22c45e719ba50fe5252b2b58e048b17ec20267267114dbe5154eff000e68ea93a6ed73e4317f787dbed0e9e900a4f9b54f44a9ce13951f6fb97a18ec89739e0c54e4bbcf006cb50edde965008e88be2a5e99b9c57dc932c4029562206a045b140897a1fa55a9d35ddb49658720504b734b221d6629aeb0bea479f04044bbfada241f2a414c58ff14b673236652cec4748e2db1cb01566850be5a328390cdfd263630bd03b60b20fdb3e0088e9ede25ae0624df2a34fb57df8f33cc792b531cc9b2da2bbca51c3ec01488a8ee6048b7dbf63901589eae2a986ab21c60ea3ae5532c6b43bd685c6809704e66c9e1f321e7a481d92f64844b3af59317d1fe4ece0be50636de90cf74375491e859e80b3aef28ff2d0ecb9fa73b7de1e7516f70661eafb4b764a9123237c1ac9b2721ff886d9a05434ee5eba53358ebb6b070c2caf75c1b3386b31ee75d760fc10782aa64311491f23be11cc6c0390cb7b441e9e37dc1ec4b11c14045b67a9d3f9c0b7b8b7cd65ae688c5fec07bce61b2be7aef3a38f702e7b13c928e1afa3e12b23ac33c66bff42463b60034dc1f9535d33276118586169284ef0d7eb87216911856c6247dca423ddcb4c88b7639d04e2c522a2be8e5d2c1965f8cac96c796fd3c20c0790c246f95e85f0fd2d169d7166ba98a881a51b36b118e9945049a7e16372ede502154f6fb4c7d213f0a537b51ce12fcfa876fe6154b76d9f6f9ee7fb32da2ebf03fe522a278c708184b8facfac4c91e5dbdb89eba2fcafba9503266b11a186728dabc081d396516833b002b1fba953a092aaee50b2cd12a9c8cc48aefdbc5cf6c7696c682ac211f6cf5c0208fbf192d5686f673038ee0f001ecec646498fdf268a67f2913bc269d265a05799e4d04f50f3169493e17083e7b7f4cb74ab26274a48a7ca0d0fa475b024895132b9b26d8cf914a7bc324cf6b0e11c58496c45cf0a1701f3fdc0f4e21d2814dd536fb1db2db2d156b3c9285872567bf9f586e7d9d9d770a0238eb45104a510fb8d641f71a9a9d2b4fb0e2405e2389458c3e683a6dff1647027f6d67f6ea045fcc02a7042c04875111f9b2589e1ff2ea5b0af0ac37aa00ac4e104a47ceb8852cbbf8df80bfb5a21a11df489505c82dd3389b5a0d80fa53f6baf658ddf59314024fc69b54fdba544500c68595ce20f48a67f501aeb622adac88156fb11d659220dc5cee2994db517ccca5137c9656c187a87978cb531c7e862381ce2d882c7eced4b6d3096410175b378dbccf58d4e706a1a0c04c8c63a937ac982402ad71d46b0368ba742d6b01a5b02683192fb97857571aae468b0ae4233db6a541952c481e7d39d7ad3f6d635d6a519d5093d84c1f8d714277a92eb187fbf402904603f4c8725dd35eb7d59579f1b4747ed32b4590226a11053380599150b267e2753a431f7a6070df4bf3852dd9866e7be6af5c1af0e5586d29a9cfca8eedae7be41458c339885c1ad8208fd26ee570d7f364801c2af7189ff9ccd911aff93e5768d63205e9a344e4959b4b0662cb84f223fa2e921986f57aa51e0f4b414c43a6d5d87370dc3507fda93e9193c2d38b49a7165311d409fed91ad4c0741f456c1b95e1e56e816d43972811d51c40524ccad6d85fe580eecf3b313ecc1f7871f3d35294d513265b36fa55b7128f42d9694f9f3a365e5ade2e8ae0a401c8285c48a286257999e71633db9c11005726cb9796428218ad821636c916e6ed8c7026773b76eeddc5bdda753886da98fbc612fc400bc54fac1324c0470342523549ecfccf801cc058bbbe90ead5c5cbd4557582d3f18700c7b53ebc6180bb12c509e9d58f4d67fc3150ec020a4956be3b06207336a04bd4f81ca805f9b74f2b920b592a8021457438f26cef333997f829c2923a9d7bf21cbe4352ddb1e3ace24d86cf337bdd2759fb95c08b217f2c702045f4a5e1c5c8c3ce7acce13fa7a9ebdfa40c1b59022d430f0ab389be8ebdeed15367db72e4c2b41d09db7ac3917b088f139930415eebdaaeab1b42cdf58684cde6fd07c1f3471f3c082709ec1c03639aa4b18a86b4315a12ba4808c2653221ce6d3bd9def847ac221260e187f71b9824d8f4f81fc2c150ec6456209ad92d41251a2cf6d0105ef47e667d27029c30124593eb15aab2e0305314cd98edb304e8025ccd062b88f974187269041bf4b9e8088bfab618ff39a57e008cecfccfe3187c16a73968689a878aa29363ab39fadeb92f08b0b93995144655f006bccf4dc91d467fd7feac67d596a3047123b4932948dc2a75afd8be12961eb43128a469dabcd4f44b1a2a39414ae1ed2eb4ca4ef6fe0ef36f89f61e8bfd56d6e7b960377c59c514e40fbe82496e062353838a68cf9ecb92bf434916c79ec14dc0105edd826a5b988c533b8d7ef434a096e7ec05d1c61929a4dc9a66b7fb711025b22bad96266e2ffa329d08432f1bb922229725a64013da566ebfdeb52e8f55f70a98cc38d87724bfcff722a6d0da339151d9a64db9960dff4865e5711bda9c777dbaaebf541efd3ab4e4e83f8b3142577991b4cc105fa46f8c5002925c2fa644a12df5100ed42291f89a17e62795375602e2bd7088a38ee2af56455f446418cbea86d1f5a5cc2c49bc7f8941276a15380aff22821309424e571a6dc0915533ee47e880687ebd5ffd6636d986c7d5db15b2e4b72ee3a5a9849882276b9237e3f8770a8989fd1f822910d5ca16a8a55cd09f098bc987b2ef95055432ba3cdaf6568c1b8292913005303a3665d50af09effa3bd412b083a8e13697a958813b5bfc215145c2516bbbf0b69a45e3531c8524fcd5c168d3a328989fd60e1174ee2a577b0df85f7faa8ee4d3b3074fcbe090a198985a15c4b72a7661dbad2d052ec1c0187d85d7333b79ecff39084217a43e38994801e486306a984eee63ffafad43905bdabb2833a4b388368d3fd24a5bc112e3cbcc619e903cc4153b9ea034a7eb5d12f3024e28ab5995ff20e4bc4c6c28c1b681a98168990e1d6fc9dafdd55f50303eb0ee724dfe0106dd7518f8532fb594fe200d088f3797377fc9fdb588754c2d7e596fd33458adf12ec3209b10e259a8f3171e942b806d03b63a5ea116c98ac199fecd2a80f068aee416d2ac95e404c190b2044ca6ebba6b509f948fbf4bf22c7a40c97fe00fc85a93ea3bcdf6900e3748c630b5b340a2a490188305b8c08af0caf04d970524f1798477faa4f1e7135290119ae24c28c67329652f813bd0cc91b7867070bb7e3fffba2aa39c605f38204ed8ca9248d5d5b7a6959487f938b6896b5421644b79301db22f62a6e16b3f65c9ce352f39615a2a64346882bb3fab31bc609f59e900ec29c397660bbdd7e0f06aad67dde7997b5e2c4d880669e623909d516d9ed3487ca96bae4dc3b0e984d7c95a0daf78484509cbed9e3ebb5d93ffa7dd811de5d160a6c11138603edbeaac5baa20685d7d36d8f6832924d1626f1851602678e0fe4508dbaede6117c82d0b618c16fe6b25255e209ae2dbb1e922f93018b88c388cdb90cebe27f0fd1cfd5d5ab5b3b7ba4a9811e2b660f4e164df95a7f16ec097bb6333b1ecc9ed901e8d84e153bcd602341e41ded7a3ae62914c8c24484ab4055c8bda268fb2702045c0b6dd8ba92104645f7697537334c7cc5b597184ab2bfdf4d68c41fc78e7a47e6da35f3cbcf5177401cfe3b030e7851bc2ba73c22da4c9c8562ddd7b7434735be143da0686541113874e0570b47b2a7fa7f97df084ab1951767a87348f9fba982ecce89f45f3df3dd0cb87dfadfd60f489e0a2748231443bc07b96fbcfd88a8c6077cb743f1fae22a585e26fc17d181a290daf5df85913b7132609db4f6590fa241599fae18f11ef1bb4c2a6aca3c077f85bcc5ffe64ec6c2c02d33983460b678e11293d1147b3cfc44b5acc73a066493a7ba6ba88e800583bb6d5034181d73b1dc2acc6859a50f4bf297e008de0a71ae01783ae8e4dd67ad30268a17449827762ed3e2894f1afcfb7dc69bb0f61bc22623af7a70b8920ccbee350d31169d4d5f3942fa24a6e6c909966a4c4f231b82f7f28a3acc3c21a08ed9647de5522dea86e52cc0eb479dd904b8f82fcfca0053ffd98da4a8731d241133178b90d24da52afe6d23882cd80ef092d002bbc78d861218a110a03816d1f4b92eafa768f58a05a53bed7a3cba2ae5634a00f8e7b1835ce1ce86ade28208a4c691d486b7f55091a93ab173bdff29f153f6381d1a94bb49ac1770799b4d79e988763007a5d9d554fc1b5c9ff76ad2175f7e061684e939f6735feaa5b07192476856c932ca28c40f59615d712e66537312249fe3822e436536f22d34f7688a60d8ac85c71a5a8c4265193aaace962fbd8f39d5b7d3632a57092f5e6b4dd7e7b50768a81bc0c8eb97fbcf0ab5eb5d3c8ee91a9c1c802dea46bab958e72d219dfd44b437eb2824035b4607c6072d5f6385abc7dfb8cc7c41b2492ab16b2b9c6596a620f357d2cf5c5f6db14736b8b9631c7aa94ebedc4e125ac117b8d5480b2577b4b19891350f7360470c6ddff1af57edf2f431be20b9b1b5ade15dc7c6d8408cc3", 0x1000}, {&(0x7f0000000900)="401d6f97998236eceef4ba7d851e9d1c385fefcf288843fb245216909ac63f3218c416a718360bcfb78f2b85a2057010ddb522735e246480b43a27dad0cf3a049f2cb0", 0x43}, {&(0x7f0000000980)="a3db9f929beaa58e52e0044cca54e94f41e2036ad786d3afd8963c92d185bfd6a14526165a45ac02175004", 0x2b}, {&(0x7f0000001d00)="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", 0x1000}, {&(0x7f00000009c0)="a9d8f5552a5d72819de1743f38d82cf7f49b17136b62a3a6d2146d1294fa0072ffe564236f7d60934fea48fd9e627686eff7e3297aeb898922f285ca020b285cbed8a817d040b30163eb8d6d7a73f934e05eac961e95d6a6b6bec269dbdc62c2a2eb5dd750", 0x65}, {&(0x7f0000000a40)="09fcf5c16ed0313f922edb6d450b38e7f8501d73761f90eb2c86baace0", 0x1d}, {&(0x7f0000002d00)="1f1c3ab857d90a41a7f79e3b31b1e98e8560c1b3a5cd1e02bbd12e46f8c5b3ebff6eb853aceb1626d2e22997f63fcd55e33947054eeaefa90cd2e97114164eddaf68368ad60ad45587a1a319fa73b7fb3f01d49934261149ea591a734f159e6b1da57ac5f487194949c132d5cadc20f460acc707938bb6406ddd2075ad694746e1cf57bbe9fb94351ae2208556910b56da42c71dd37de863e349b0b2f402e70542d20d00e1c4f4184883d1b74141f7157a8a665e268b1391bbdfb916a1c4d42a6a8c68c754267cacf79aa643be275e6dbd27cbb9483a5d13137e59d0a7b82c49e35e4198633f1f0ad87b5eedbffdf85ec78066aba6450449fdf8ce", 0xfb}, {&(0x7f0000000a80)='H', 0x1}], 0x9, &(0x7f0000002e80)=[{0x88, 0x101, 0x1, "eaeae660db961e5c46bd9cedafa62e61e6bac795508e5cd1c72f5194fd1d07e7fc7939d9a370d921827de9ac010894744bdbdb38f6c7128573b1b068a05e3c2680f3ed4eaa786fae19d3e9d64399c46ce043f046ffd5cd27c03f8812ffcca50fdd13289bbabb5eb3a9e7d6a2adf29216a4044bd1ba6642953dc2"}, {0x7c, 0x115, 0x69, "9b1a77053ab241a2c02540396d2cb009359144704203d35bbd0325d4b80ab730659d3722e9f39f2bf7cf9f274d29ddf5e9b26dbca709bcfeca4a6569cba5e34123aff30d8c2684edefd0a130a9fb4f32670391743252af2a92c4334a5ffe5d5071d59263b11fef3d9ece6b1f9148"}, {0xec, 0x114, 0x1, "214813408a6bbf86961d77f26bc8dd212720ba9eeb494b690398d040f27c4c5b3d4cf6bc607e5412f837ae2af2f3805af458ccf99642d6983248f2b4bd7bdbdc76d98084c3d389143a89a4039ddcef5a0b1d65b5ee0c6ae431c787241590cee2d4f61dc9d276a7c18873f5df4243e42e129ed590ff280a720e0a9fc00ea885d789895571592f0a016b907f2d6c5d98cf388a131024724b74f871244c5bc153e5bbbb98f735ad2e84a269b856b92c5deecf0c19c43fd5af31f55a25516c33b4d100c2acc01cadd5a5fc7c3e24fd14e7dd7477b4acafad753bfd0daa8742a709a5"}, {0xe4, 0x117, 0xbdc, "159b60dd87c71b4fa1d06a51529a877bf9a2c1f4e00f63340bd2af6fa39021ad87d3f9f7c20ce76af5f8274dea44f49f62628364e648190ca97117224bd32e5305fba52ce405220643dc95ab5b77cd34ca6fdf48b456c5585ec33c43d88df7fdba73a9042cdac951c49fa4800497ae0815ed3ed5f6074c16caa2884178852411c537fd43bbb1e55f2205039350a346743f60ec150f170e69a298e3949188896c0fb11a4cd56431aa4ff61c86de422f960cbcd5f5b87e005fcfebba2212450d239f5a18519cfe893e3582fcac63a94068b9f903fdac204260"}, {0x34, 0x103, 0x0, "47e7a5c6f891d614173a3a3f90eae3dc5dda36bf778fed1b11557513e43a8449cacab37fcf"}, {0xb8, 0x10f, 0x9, "705964025c7f2507d136088875847a1a259a9193075d8c1200bb62dd60372b6a869d445c2cd88d4e371cd741f7d01a244f52540517f1145bdbd81bb4c0058003308e6a5f2f642163944d6b3ebe28ec24080dadb3d4e70da16f404151f459ea3d9b95f1186c6534104a35c2f8f70376e636145e9094f3966133a62112b877a15d21754a3a781163b335fd3b417a953af59a5544e209ae51403bca2c8745460547ec27f4cc592804336430a5"}, {0x7c, 0x0, 0x7, "6c0dc9b41c82aa365b9ef2812f0f6e65d000e5f60a6fa143ec844de70ba1d23c1f6a6a6ca018855f50a479f1afd03d161f279bd77fa8ba68abed82b215e7ee47e3e9da6114837ac26ea68e69058563aab57c07bd2fdd61eb64f1db993f667dc79c55d439c7912dd9e1b72fec255c"}, {0x10, 0x105, 0x4, '^'}, {0x10, 0x0, 0x2, "893429"}, {0x80, 0x29, 0xe323, "2c139c2e981b1c630d15317b7f06f1cee6a006c539228fe5fcedbd1608f2e050dee4d273a2e1be379358fe00d75a2d38982007ed9666d96a9bfaa6a9a09d077856f1f5400c7c9d034d5a4f5d7e554049e058b20eae60a9d4e20a9aa7610d147d7ea2b97e420079f1f153ce96aaeca4d8e534"}], 0x4dc}}, {{&(0x7f0000003380)=@l2={0x1f, 0x0, {0x7, 0x91, 0x20, 0x80, 0xd4, 0x6}, 0x7, 0x83}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003400)="6f1eb75e5deaeafeb8a957a8ce65eea6b3d4958426c887e60d00a6baa184ede9eafe03699387a2541deade96ec86bf2796e6e21f67d329cdfbdd77d3ca2336e5f91f79f2377731ec41296f2231d47099c9a114deaa3c6603bec1ee947519858bd702c51bc0be61ac438c75c71071b1a087d728d76e158a4054472a7790f51aa21bf39cb3bc450a9e0c675c7cef84d68e2591490fd917d808bab52bbea11198bdfb78e0930bb1fac00fad2b6dad89b47ee2ea8eb51f17dbfbd268b78296de81b5", 0xc0}, {&(0x7f00000034c0)="bed0971369809c0ee209c034cbbb37da9bdd2c404fd22b0e22cd52ed3ee66b5673074d7e71a6414b390063d2b778280225cbd5a822acc63a7dde246732e6fecd7a8876e714144c7d870adf5d73f4d34f5d8940c9f7", 0x55}, {&(0x7f0000003540)="4a043cd2fc7067f1172f5c2426d88f2fb6280755edcfe009720bd67326a105f67f6928a62a910287faa5c723ce47ec8c4811e1425e80d19e22ada0231e6ef43e571079b85a732bb597586cab0c9127c774f71fce02929531a27dac235387dccbdb45d70d0674c09fb90448f74270406d86", 0x71}, {&(0x7f00000035c0)="2504d3f0d455bda457b054627175f9605b91aec67291a252", 0x18}, {&(0x7f0000003600)="77c57453b00d0f6ea4f4303a4a15dd73bb419e2809ba70b1d02ebbe550fe8ab865a53face77495535b3a914339f427b82f66e009988ff8f3cffaa2cbc2a6293cc609c976f28a465ec248694859fb0ea98fa5895ee228f7c2095bd8da8408cc81a9441886867446637d6f3407b9e88d053dd156a0894a17cdb8839a622bbef1485c2f44", 0x83}], 0x5, &(0x7f0000004340)=[{0x100, 0x290, 0x80, "b96b6585f38d9e0bda01113849cf692ce004b89cb4938224da2a127e7fa2b27c382ffc0c989fdbc8c69c0cbdff1f6b2f09afdc60e052b80d38e168f8e509b80095fec4291f00413d6673b86205fea4ed57e0068c2e16f21fe71438aaebca11447ec5284c86a9e68020769446e6922afda68d70aff7a610121b17ecdefade880fd58a65b292e68da1523acbb350c8909298883f444525a546b52ff59a5a4e02683107177f9ce1465c83341feab698be214102a8127ad37c5c55fb681b6134ee0326f2cdf9630968a83a163c2f3dddc41286772873b3d6577084033f239a3b89f19b224d0747703a849be846928b6b4581f16896"}, {0xd8, 0x11, 0x800, "75023665d49d6f4a864802557d48334471f5de363b2d163a654658e036a07cb667fa5a8c2f83c8a8cfa16234f1dcf39786cb95b93cd69023fb3910a0498ffb90d32021df3985072b473cee0a6f4dd3d8990a080a9a9c46a14634e6dce1082f90a7745285cdaffc5ddfac2f251aec4a4ae3e3a073c870a518dabe78870dfe400655b23ee6dd5a043838d98f0f0cacfc711d41770712d6e56e6a6d2e80a3c1563d5131518d883b88f3b76cc66acfe5f4f7f39575f02c34b252fe1902f428d857b49fa548407574ede9e2"}, {0xe4, 0x119, 0x5, "59065cd524f3929abef5aa184b12296ce7b4934b64cbffffd41a70bbcc6f435da81a23074479e6db637cb56439f74d76e3b5320dc4b16010d62943eb0a0fd1dc4dd6b491403b98f2b401c8502a1a643850ec0a617282dc3ab00934a073bc3105374a9fad2d997ef415ed8bb35f712b067a51b611bf35e3bc0e8b7067bc15c21ae46a8e94e96b55ae0c72b9d47b260a643e4f301c6895816c5768544d0a9aa85330a740dddeca04f39c5765863b96c692046f8efe283b517c47451f26b0715c70ab2dee3a6132203709beada5bc9fc78312dfad0b67"}, {0x14, 0x62ba0cba3c5fad7, 0x4, "8f9fc72f13"}, {0x14, 0x110, 0x8, "1c06a126121722"}, {0xc8, 0x119, 0xe81, "9e2ea77cfaece6d1a4c5c4d29b8153e37f0a73b311523b90ab750fd0fa58648bf274dd1a17c1f86a9a547f19e70ecdb5edd21b38162f2f052dc989e6ff23f9783369f71640ccc49d3a0c7702e46555507286981b27d4ec7fe8e83ba63af9fe8534eedf3135192496d462c057f8054403b69642b90b521dc9902483b17da3c56ae717a667c04dae0aa245075e3c3171d60423f0f19653044440c0a7fccdd5ff0bcf667f81d781ea8638b10fab89957bde4d29504cf5f1d4aeba7f07"}, {0x44, 0x101, 0x400, "5c71020901c29a3daf899854259319cb1c849b8b46a8ef1815c582bd3d9031e4c824ce5a5b4e5f24b2d5c8effd071026a03d6cb45d57baba"}], 0x3f0}}, {{&(0x7f0000003b00)=@isdn={0x22, 0x0, 0x7, 0x7d, 0x5}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000003b80)="2b99603ad1b1cbc20fe135be8f2aadb6aa26cea5660c71c090ee20a49a5c3d896697d2f15c6b1bbb388cab3500c84fab5225", 0x32}, {&(0x7f0000003bc0)="8de2d009403a7a4405215611d1ec38911255235ace45625034eeb44ba6", 0x1d}, {&(0x7f0000003c00)="18bf68721b", 0x5}], 0x3, &(0x7f0000003c80)=[{0x30, 0x110, 0x9, "5434f1c3b1129c16a5f35ea32e5ea5f8f8e8d837728eaba0308a0b215e4269b747f6"}, {0x2c, 0x3a, 0x40, "e585820e274c6af1f820af22468f38d56581bdc059cc46dd58b70e3453122b"}, {0x50, 0x100, 0x91aa, "651f5f2b106e3871c2a7eed24ef8a5c5abed6c8e8102779e25c979be31a59cd9e1b70a11a2b8e6d5f266bfd83317125ac5c372e372ba87201ab20ff7775cfe601f8da441"}, {0x28, 0x84, 0x602, "e40a64138ec6311533bbbd301baff61c7457a0004df316474a63a8"}, {0x68, 0x115, 0x7fffffff, "24ba84b7b832a94d6298aea1e3507bbe5937d72e4f057544106f448431a77740d1fa5b98d589d565c7e5204ac49a8a6029e4f2135e674956a173c5917606ba8a413638aab83d79dfde8c179a4b33f2e65d6c606ddcd649afa1f5c003"}, {0x34, 0x105, 0x0, "b957493558a3960325d39233829860e07cd151327edcc3beef312fd06ace494d61399753eb58a086"}, {0x108, 0x102, 0x8, "ca9ed16fd69a03b44f10d03f1f43e97a73656d744af23d225a3a2d1a5606ce1899831ee3686df04347f470c19ace54c2e45e1897768c86a3a4b63e569f66751325a24ae2d2f3b61ad377c02eeffbebab07e3d4086c23b5676f82e71914ebd6b68fd2a66459e706f9a3fe4671fcf2699f0b123ae58ad38c9d20ad526aeae3cb0988334a7a63f231b07de96184e4f92c44e9777bb645c19597e46b5798213c20a85723503b06fd2636952aac41bfb08cefcebf01a7628047f505863b5901ca0f66186f9f6cbda5013749aea04e21287c1da0a60e806b33cb59c4aa96b25fbbe970ad0a13f30afdb3d65cae7ba915f2e436896ba6a131f8afb2e3416d"}, {0x5c, 0x289, 0x1, "895e7155e3628bc82ada42590d0788b6ccc4465ec7dceda659c48eae934bf2f65819898d4b334dc9794c5e516ee99fa028c7bc89244d27cfce2167ed9402d1fb59d56e28bed435f5b0abda3385cd5b50"}], 0x2d4}}], 0x4, 0x4000) r3 = open(&(0x7f0000000380)='./file0\x00', 0x200c2, 0xfffffffffffffffd) accept4(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80000) pipe2(&(0x7f0000004000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$VT_GETMODE(r4, 0x5601, &(0x7f0000004040)) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00e126bd7000ffdbdf25010000000000000008410000004c00180000000269620000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a9d948b1000000000000000000"], 0x3}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000428bd7000fbdbdf2501000000000000000c4100000014001462726f6164636173742d6c696e6b0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x80) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYPTR], 0x18) sendfile(r3, r3, &(0x7f00000001c0), 0xa198) 22:03:45 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_PHYS(r0, 0x4008556c, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x8031, r0, 0x2) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock2(&(0x7f0000558000/0x3000)=nil, 0x3000, 0x0) munmap(&(0x7f00007ba000/0x3000)=nil, 0x3000) clone(0x0, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) [ 66.248023] input: syz1 as /devices/virtual/input/input33 [ 66.329321] input: syz1 as /devices/virtual/input/input34 22:03:46 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f0000002280)='ns/pid\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000002cc0)='ns/pid\x00') set_thread_area(&(0x7f0000000000)={0x40, 0x20001000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 22:03:47 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x1cd, 0x0, 0x1dc}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x6300) fremovexattr(r0, &(0x7f0000000040)=@known='trusted.overlay.redirect\x00') 22:03:47 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) r1 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3e, &(0x7f0000000540)=0x6, 0x45e5d2626e90a9af) sendto(r1, &(0x7f0000000040), 0xfe4c, 0x0, 0x0, 0x8b) 22:03:47 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfedd, &(0x7f00000000c0), 0x4c}, 0x0) ustat(0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x4000, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000100)=0x1) getdents(r0, &(0x7f0000000000)=""/46, 0x152) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x300081, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$UI_SET_PHYS(r3, 0x4008556c, 0x0) r4 = dup2(r2, r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') r7 = dup(r4) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f00000001c0)={0x80002000}) 22:03:47 executing program 2: socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff}) syz_open_dev$mice(0x0, 0x0, 0x0) getresuid(0x0, &(0x7f0000000180), &(0x7f0000000440)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) socketpair(0x2, 0x0, 0x5, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in, @in6=@remote}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000080)=0x4ff) lsetxattr$trusted_overlay_nlink(0x0, 0x0, 0x0, 0x0, 0x3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000000c0)) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x20000040) inotify_init() getrusage(0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @mcast2, 0x1}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000040000000006a5763af841c07d429e49e4756552dcd026f1b67a2d4e020006000fafe77f08cd89518e9711f66ecb31b5aed1f03027d7a45d8febde333a72b37f000000000000006d5a6dd0e490cf594f704a6811bb9d02a3e0f18ef6345a56"], 0x1) sendmmsg(r2, &(0x7f0000003f80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000004740)="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", 0x17a}], 0x1, &(0x7f0000004080)=[{0xe8, 0x111, 0x2, "414d945dddee6b832a53c8122af1bcfed4bf0acd777d2da1a3fe0bf33a879213a047a39aaa5c631d26b0e020bf97f9b620236a15d7090a59f69b31d37c9e2c06f6ef1e30fad7fadd649b161b2e46e0265bfdbf60cdc30ff78ae0e4cc8b4d5aad6db4c1bf26e0488e1ef5b691eb5653063361b3b191ca9a8223db78f4a930341aed5ad7ffef8af2d2df4f673b8c9337bf66087fd51f35c94f4f8000b4bdaaab0036f305b8876b2ea2af7f10d059f242dbcbfa7de9aaa5562efc51045096e4753f26e70c207514554da30037dba4b734cff1adaed07319a25339"}, {0x1c, 0x100, 0x1, "29ef2106ac93f8e4889e61362d"}, {0x100, 0xff, 0x888c, "00037c5ef97cf72674977e68258a00c88a032f27a960defe321e83c647f726793b352142d88d955ddcba4fc1d9115e4985a94efc1da7eb83f1e81bec25beec1c8a917e9044164270bcddb5513e6111d97b371a10c9380307f1409e8162165fb00dc40636e2f61b2cabbc0fe4942dc64a9d91d04aad5e8f5af68df3f296753107b9bad9eca357353c2b251256730415ac757904f4a3f653bfb489920169510f0f34fd05e8bd4747071c155e03971e8dca5e3b8c7c4cb60c8303edd0257147ddd2318d7b146b3926b5985e8e8644303cfc6a8ee20e48ff02d07452d57e7af83789332bfdfc47b2f973632db2b93e728a87c20f"}, {0xb0, 0x45, 0x676, "1aabe899e51779ac6bf5536ddd3b3b1694bcd2bcd75711d716e38d9f068bc8041177ddacf4e7cd0a9f41e9b0af5147a058ab96ad1ceb98b1237fc630e1fbd9b5c244121484d7615bb4e9031361905a635a2506917e794ea2733c880d63b22e592ed291036cd7815bdca1b70821b04de9af4a25eb6ad353d4f5b28ecc1c45c3c6610b3c570430f2ab37592575dc2fcef09a27ec7d24fc0d89722ceae0607bbafc82de"}], 0x2b4}}, {{&(0x7f00000006c0)=@caif=@rfm={0x25, 0x6, "0d0686bd4e232adaf6c16597b8cdbb50"}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000000480)="43303eee7b6993a8121f26cad02dc1f41f8d", 0x12}, {&(0x7f0000000d00)="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", 0x1000}, {&(0x7f0000000900)="401d6f97998236eceef4ba7d851e9d1c385fefcf288843fb245216909ac63f3218c416a718360bcfb78f2b85a2057010ddb522735e246480b43a27dad0cf3a049f2cb0", 0x43}, {&(0x7f0000000980)="a3db9f929beaa58e52e0044cca54e94f41e2036ad786d3afd8963c92d185bfd6a14526165a45ac02175004", 0x2b}, {&(0x7f0000001d00)="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", 0x1000}, {&(0x7f00000009c0)="a9d8f5552a5d72819de1743f38d82cf7f49b17136b62a3a6d2146d1294fa0072ffe564236f7d60934fea48fd9e627686eff7e3297aeb898922f285ca020b285cbed8a817d040b30163eb8d6d7a73f934e05eac961e95d6a6b6bec269dbdc62c2a2eb5dd750", 0x65}, {&(0x7f0000000a40)="09fcf5c16ed0313f922edb6d450b38e7f8501d73761f90eb2c86baace0", 0x1d}, {&(0x7f0000002d00)="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", 0xfb}, {&(0x7f0000000a80)='H', 0x1}], 0x9, &(0x7f0000002e80)=[{0x88, 0x101, 0x1, "eaeae660db961e5c46bd9cedafa62e61e6bac795508e5cd1c72f5194fd1d07e7fc7939d9a370d921827de9ac010894744bdbdb38f6c7128573b1b068a05e3c2680f3ed4eaa786fae19d3e9d64399c46ce043f046ffd5cd27c03f8812ffcca50fdd13289bbabb5eb3a9e7d6a2adf29216a4044bd1ba6642953dc2"}, {0x7c, 0x115, 0x69, "9b1a77053ab241a2c02540396d2cb009359144704203d35bbd0325d4b80ab730659d3722e9f39f2bf7cf9f274d29ddf5e9b26dbca709bcfeca4a6569cba5e34123aff30d8c2684edefd0a130a9fb4f32670391743252af2a92c4334a5ffe5d5071d59263b11fef3d9ece6b1f9148"}, {0xec, 0x114, 0x1, "214813408a6bbf86961d77f26bc8dd212720ba9eeb494b690398d040f27c4c5b3d4cf6bc607e5412f837ae2af2f3805af458ccf99642d6983248f2b4bd7bdbdc76d98084c3d389143a89a4039ddcef5a0b1d65b5ee0c6ae431c787241590cee2d4f61dc9d276a7c18873f5df4243e42e129ed590ff280a720e0a9fc00ea885d789895571592f0a016b907f2d6c5d98cf388a131024724b74f871244c5bc153e5bbbb98f735ad2e84a269b856b92c5deecf0c19c43fd5af31f55a25516c33b4d100c2acc01cadd5a5fc7c3e24fd14e7dd7477b4acafad753bfd0daa8742a709a5"}, {0xe4, 0x117, 0xbdc, "159b60dd87c71b4fa1d06a51529a877bf9a2c1f4e00f63340bd2af6fa39021ad87d3f9f7c20ce76af5f8274dea44f49f62628364e648190ca97117224bd32e5305fba52ce405220643dc95ab5b77cd34ca6fdf48b456c5585ec33c43d88df7fdba73a9042cdac951c49fa4800497ae0815ed3ed5f6074c16caa2884178852411c537fd43bbb1e55f2205039350a346743f60ec150f170e69a298e3949188896c0fb11a4cd56431aa4ff61c86de422f960cbcd5f5b87e005fcfebba2212450d239f5a18519cfe893e3582fcac63a94068b9f903fdac204260"}, {0x34, 0x103, 0x0, "47e7a5c6f891d614173a3a3f90eae3dc5dda36bf778fed1b11557513e43a8449cacab37fcf"}, {0xb8, 0x10f, 0x9, "705964025c7f2507d136088875847a1a259a9193075d8c1200bb62dd60372b6a869d445c2cd88d4e371cd741f7d01a244f52540517f1145bdbd81bb4c0058003308e6a5f2f642163944d6b3ebe28ec24080dadb3d4e70da16f404151f459ea3d9b95f1186c6534104a35c2f8f70376e636145e9094f3966133a62112b877a15d21754a3a781163b335fd3b417a953af59a5544e209ae51403bca2c8745460547ec27f4cc592804336430a5"}, {0x7c, 0x0, 0x7, "6c0dc9b41c82aa365b9ef2812f0f6e65d000e5f60a6fa143ec844de70ba1d23c1f6a6a6ca018855f50a479f1afd03d161f279bd77fa8ba68abed82b215e7ee47e3e9da6114837ac26ea68e69058563aab57c07bd2fdd61eb64f1db993f667dc79c55d439c7912dd9e1b72fec255c"}, {0x10, 0x105, 0x4, '^'}, {0x10, 0x0, 0x2, "893429"}, {0x80, 0x29, 0xe323, "2c139c2e981b1c630d15317b7f06f1cee6a006c539228fe5fcedbd1608f2e050dee4d273a2e1be379358fe00d75a2d38982007ed9666d96a9bfaa6a9a09d077856f1f5400c7c9d034d5a4f5d7e554049e058b20eae60a9d4e20a9aa7610d147d7ea2b97e420079f1f153ce96aaeca4d8e534"}], 0x4dc}}, {{&(0x7f0000003380)=@l2={0x1f, 0x0, {0x7, 0x91, 0x20, 0x80, 0xd4, 0x6}, 0x7, 0x83}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003400)="6f1eb75e5deaeafeb8a957a8ce65eea6b3d4958426c887e60d00a6baa184ede9eafe03699387a2541deade96ec86bf2796e6e21f67d329cdfbdd77d3ca2336e5f91f79f2377731ec41296f2231d47099c9a114deaa3c6603bec1ee947519858bd702c51bc0be61ac438c75c71071b1a087d728d76e158a4054472a7790f51aa21bf39cb3bc450a9e0c675c7cef84d68e2591490fd917d808bab52bbea11198bdfb78e0930bb1fac00fad2b6dad89b47ee2ea8eb51f17dbfbd268b78296de81b5", 0xc0}, {&(0x7f00000034c0)="bed0971369809c0ee209c034cbbb37da9bdd2c404fd22b0e22cd52ed3ee66b5673074d7e71a6414b390063d2b778280225cbd5a822acc63a7dde246732e6fecd7a8876e714144c7d870adf5d73f4d34f5d8940c9f7", 0x55}, {&(0x7f0000003540)="4a043cd2fc7067f1172f5c2426d88f2fb6280755edcfe009720bd67326a105f67f6928a62a910287faa5c723ce47ec8c4811e1425e80d19e22ada0231e6ef43e571079b85a732bb597586cab0c9127c774f71fce02929531a27dac235387dccbdb45d70d0674c09fb90448f74270406d86", 0x71}, {&(0x7f00000035c0)="2504d3f0d455bda457b054627175f9605b91aec67291a252", 0x18}, {&(0x7f0000003600)="77c57453b00d0f6ea4f4303a4a15dd73bb419e2809ba70b1d02ebbe550fe8ab865a53face77495535b3a914339f427b82f66e009988ff8f3cffaa2cbc2a6293cc609c976f28a465ec248694859fb0ea98fa5895ee228f7c2095bd8da8408cc81a9441886867446637d6f3407b9e88d053dd156a0894a17cdb8839a622bbef1485c2f44", 0x83}], 0x5, &(0x7f0000004340)=[{0x100, 0x290, 0x80, "b96b6585f38d9e0bda01113849cf692ce004b89cb4938224da2a127e7fa2b27c382ffc0c989fdbc8c69c0cbdff1f6b2f09afdc60e052b80d38e168f8e509b80095fec4291f00413d6673b86205fea4ed57e0068c2e16f21fe71438aaebca11447ec5284c86a9e68020769446e6922afda68d70aff7a610121b17ecdefade880fd58a65b292e68da1523acbb350c8909298883f444525a546b52ff59a5a4e02683107177f9ce1465c83341feab698be214102a8127ad37c5c55fb681b6134ee0326f2cdf9630968a83a163c2f3dddc41286772873b3d6577084033f239a3b89f19b224d0747703a849be846928b6b4581f16896"}, {0xd8, 0x11, 0x800, "75023665d49d6f4a864802557d48334471f5de363b2d163a654658e036a07cb667fa5a8c2f83c8a8cfa16234f1dcf39786cb95b93cd69023fb3910a0498ffb90d32021df3985072b473cee0a6f4dd3d8990a080a9a9c46a14634e6dce1082f90a7745285cdaffc5ddfac2f251aec4a4ae3e3a073c870a518dabe78870dfe400655b23ee6dd5a043838d98f0f0cacfc711d41770712d6e56e6a6d2e80a3c1563d5131518d883b88f3b76cc66acfe5f4f7f39575f02c34b252fe1902f428d857b49fa548407574ede9e2"}, {0xe4, 0x119, 0x5, "59065cd524f3929abef5aa184b12296ce7b4934b64cbffffd41a70bbcc6f435da81a23074479e6db637cb56439f74d76e3b5320dc4b16010d62943eb0a0fd1dc4dd6b491403b98f2b401c8502a1a643850ec0a617282dc3ab00934a073bc3105374a9fad2d997ef415ed8bb35f712b067a51b611bf35e3bc0e8b7067bc15c21ae46a8e94e96b55ae0c72b9d47b260a643e4f301c6895816c5768544d0a9aa85330a740dddeca04f39c5765863b96c692046f8efe283b517c47451f26b0715c70ab2dee3a6132203709beada5bc9fc78312dfad0b67"}, {0x14, 0x62ba0cba3c5fad7, 0x4, "8f9fc72f13"}, {0x14, 0x110, 0x8, "1c06a126121722"}, {0xc8, 0x119, 0xe81, "9e2ea77cfaece6d1a4c5c4d29b8153e37f0a73b311523b90ab750fd0fa58648bf274dd1a17c1f86a9a547f19e70ecdb5edd21b38162f2f052dc989e6ff23f9783369f71640ccc49d3a0c7702e46555507286981b27d4ec7fe8e83ba63af9fe8534eedf3135192496d462c057f8054403b69642b90b521dc9902483b17da3c56ae717a667c04dae0aa245075e3c3171d60423f0f19653044440c0a7fccdd5ff0bcf667f81d781ea8638b10fab89957bde4d29504cf5f1d4aeba7f07"}, {0x44, 0x101, 0x400, "5c71020901c29a3daf899854259319cb1c849b8b46a8ef1815c582bd3d9031e4c824ce5a5b4e5f24b2d5c8effd071026a03d6cb45d57baba"}], 0x3f0}}, {{&(0x7f0000003b00)=@isdn={0x22, 0x0, 0x7, 0x7d, 0x5}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000003b80)="2b99603ad1b1cbc20fe135be8f2aadb6aa26cea5660c71c090ee20a49a5c3d896697d2f15c6b1bbb388cab3500c84fab5225", 0x32}, {&(0x7f0000003bc0)="8de2d009403a7a4405215611d1ec38911255235ace45625034eeb44ba6", 0x1d}, {&(0x7f0000003c00)="18bf68721b", 0x5}], 0x3, &(0x7f0000003c80)=[{0x30, 0x110, 0x9, "5434f1c3b1129c16a5f35ea32e5ea5f8f8e8d837728eaba0308a0b215e4269b747f6"}, {0x2c, 0x3a, 0x40, "e585820e274c6af1f820af22468f38d56581bdc059cc46dd58b70e3453122b"}, {0x50, 0x100, 0x91aa, "651f5f2b106e3871c2a7eed24ef8a5c5abed6c8e8102779e25c979be31a59cd9e1b70a11a2b8e6d5f266bfd83317125ac5c372e372ba87201ab20ff7775cfe601f8da441"}, {0x28, 0x84, 0x602, "e40a64138ec6311533bbbd301baff61c7457a0004df316474a63a8"}, {0x68, 0x115, 0x7fffffff, "24ba84b7b832a94d6298aea1e3507bbe5937d72e4f057544106f448431a77740d1fa5b98d589d565c7e5204ac49a8a6029e4f2135e674956a173c5917606ba8a413638aab83d79dfde8c179a4b33f2e65d6c606ddcd649afa1f5c003"}, {0x34, 0x105, 0x0, "b957493558a3960325d39233829860e07cd151327edcc3beef312fd06ace494d61399753eb58a086"}, {0x108, 0x102, 0x8, "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"}, {0x5c, 0x289, 0x1, "895e7155e3628bc82ada42590d0788b6ccc4465ec7dceda659c48eae934bf2f65819898d4b334dc9794c5e516ee99fa028c7bc89244d27cfce2167ed9402d1fb59d56e28bed435f5b0abda3385cd5b50"}], 0x2d4}}], 0x4, 0x4000) r3 = open(&(0x7f0000000380)='./file0\x00', 0x200c2, 0xfffffffffffffffd) accept4(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80000) pipe2(&(0x7f0000004000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$VT_GETMODE(r4, 0x5601, &(0x7f0000004040)) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00e126bd7000ffdbdf25010000000000000008410000004c00180000000269620000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a9d948b1000000000000000000"], 0x3}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000428bd7000fbdbdf2501000000000000000c4100000014001462726f6164636173742d6c696e6b0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x80) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYPTR], 0x18) sendfile(r3, r3, &(0x7f00000001c0), 0xa198) 22:03:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000002) dup3(r2, r1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000002) dup3(r4, r3, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f00003b9fdc)) r6 = syz_open_pts(r5, 0x4000000000002) dup3(r6, r5, 0x0) r7 = syz_open_pts(r6, 0x40) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000080)=0x1) io_setup(0xa8, &(0x7f0000000000)=0x0) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r9, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r9, 0x5501) ioctl$UI_SET_PHYS(r9, 0x4008556c, 0x0) r10 = dup(r7) io_submit(r8, 0x2, &(0x7f0000000140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0xff80, r9, &(0x7f0000000040), 0x0, 0x4, 0x0, 0x0, r10}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x8001, r7, &(0x7f00000001c0)="8aa04704392253acfd2f0858974d45a5e2f8157155f33f7ba81288c5fd62b87b14c9b95df6e18433ee490f2ad2207567ec8328e80e438d23de6f6f3c6e5e72679181173b1f8df987d80d7312496209df5b893b6052b9974a2b486d3a114a02e928230a79f939c5563fa93b10e862aed49ad9f67aeeb455b4395af17af075bda68fc06a291abdcfa06cd9094b", 0x8c, 0x7, 0x0, 0x1}]) syz_open_pts(r0, 0x0) r11 = dup3(r7, r0, 0x0) write$FUSE_BMAP(r11, 0x0, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat\x00') ioctl$TIOCLINUX2(r12, 0x541c, &(0x7f0000000280)={0x2, 0x7f, 0xbc, 0x6, 0x4, 0x401}) 22:03:47 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mi\xc7\x16\x00', 0x0, 0xc94c992d3f222145) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) inotify_init() ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0xffffffffffffffff, 0x0, &(0x7f0000000500)=""/199) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000006c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r3 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = dup2(r3, 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0xafa430f91dcdb023}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="00000400", @ANYRES16=r5, @ANYBLOB="02002bbd7000fcdbdf2502000000080001000000000008000100000000000c00060001008100"/47], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2010085}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x68, r5, 0x191, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) fcntl$setstatus(r1, 0x4, 0x6100) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x11) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000600)='/proc/self/net/pfkey\x00', 0x8020, 0x0) write(r7, &(0x7f00000001c0), 0xfffffef3) rt_sigaction(0x0, &(0x7f0000000340)={&(0x7f00000001c0)="0f617900660f10c1c4e1fc2b4a0d6636d9f8c4e1c651daf082a700000000002e36f30f38f65c5bcc803700daba840000000f942a", {0x1}, 0x2, &(0x7f0000000300)="0f15c90f65eb65dc2fc4c185effef20f5c18ddccf0806b1b14c4c3456bae0000008050f2366567d9dc0f1d800d000000"}, &(0x7f0000000400)={&(0x7f0000000380)="646526f082610a07824c2d2104c017da6426f33e0f18810d0000000f4bd2660f2cd7c000fbc4e14758c026d133c4c1a9def9", {}, 0x0, &(0x7f00000003c0)="f30fbdf4660f382262bdc4c2f902e2c4e27597a2b191911e0fc70c9ad87fc6670ff7d8c4e1edeb499fc4c28139b4f3feefffff8fc858ec54280032"}, 0x8, &(0x7f0000000480)) read(r6, &(0x7f0000000200)=""/250, 0x50c7e5e2) r8 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000640)='/selinux/checkreqprot\x00', 0x400000, 0x0) write$FUSE_INTERRUPT(r8, &(0x7f0000000680)={0x10, 0xfffffffffffffff5, 0x4}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='pids.current\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000180)) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r9, &(0x7f0000000040), 0x8000fffffffe) socket$inet6(0xa, 0x80004, 0x0) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000333f88)=ANY=[@ANYBLOB="02010009080000000000005900000000030006000000000002000000e0000001000000000000f4e20005000000000000"], 0x40}}, 0x0) [ 67.922935] input: syz1 as /devices/virtual/input/input35 22:03:47 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r0) r3 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) request_key(&(0x7f00000001c0)='logon\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000140)) ioctl$FS_IOC_RESVSP(r4, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r4, &(0x7f0000000180)={0x10035, 0x6d, 0x100}, 0xffffffffffffff3d) write$P9_RREADDIR(r3, &(0x7f0000000740)=ANY=[@ANYBLOB="7a000000120800000100080000000000001700080000000200000000000010000000000700000200000000df843c55104331c8f7b7307ebf2a5493e4544623af7359616e02dd03e026e155658590f2292ee786e5814654b1d85a04002e2f6275730800400000020004000e0010000400000000000000070000040300000004000000000000000001000000000000000500272f627573000055103f6c945507e5a90a0af85d4463342309ff0254c0aca663f10fee521ee1ff0638434f6abbc3a82a063a81f256bf4c7c13b38c4759f0c43f91d9aea6b5fe6eb700d1e140a961681f4ff0b19cc28f4a35b57dc15874e4d67542338d6942fd5f83d0864fbbf6dbc7367ef916f3be5eac47d36517be1013d7b0d9565fc40ba7c3cbd43d57f2b7c9f79975791a375c968d1361cce80000000000000000"], 0xd6) write$FUSE_IOCTL(r4, &(0x7f0000000500)={0x20, 0xfffffffffffffffe, 0x5, {0xffffffff, 0x4, 0x3, 0x3ff}}, 0x20) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/mls\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000540)='./bus\x00', 0x40) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) read(r0, &(0x7f0000000280)=""/124, 0x7c) openat$keychord(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/keychord\x00', 0x4a841, 0x0) getsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000040), &(0x7f00000001c0)=0x4) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000300)=0x0) syz_open_procfs(r6, &(0x7f0000000380)='net/snmp6\x00') sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="0000001008000000001000cf6a"], 0x1}}, 0x20000000) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) getsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x4) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000), 0x0) syz_extract_tcp_res(&(0x7f0000000580), 0x7, 0x4f) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) 22:03:47 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UI_SET_PHYS(r4, 0x4008556c, 0x0) write$binfmt_misc(r4, &(0x7f00000001c0)={'syz0', "1205a094f0dc7af29254974bcc3951ba360d17771ab6c68cf9c4c69cd9299f3712a7fc13b7c209eba8b4ba737cbaf9e1995be3b5cdf0af32354b4e5e062657edcae36e3488b6908796970b4c547842e3e178e081a668fa244f64c01edf4210a46643c9ace3655b21333d038534f21441c66ca2d8159cc5c674e8c46fd841b7884583a3d42185b75f77a5dda6407270feff01b00b3f349fb6a91b3f1ee7a5f48bb3b80f20314f3c1cb772bf84e7252678815a859931d1ff8504f9faae10e4b18159ef9050116677eaaf6ac47b294e2fa8a48f22ba1ff618a9d3b76407398d5e6f17f606e08ce3b679bf042f6a765ead5f452915330686c1f4d2ee460b9da43456832786b9616f3cc44ca37620e7b707d5359779575f11cff0c11f574ac7cb20c1dcda913750e3163a6edab2643d3e4a64d1bfdcdf9b2678bed3c9c9ee96c3344d26d268ea1022a5a460c409381fbb94187aa9b3ba14d5c86fe3b949f62314ded2aecdf0567544e9c414334cf4f6611be407d942718bab37d8bf7a8919b353b360de2f6917d78b23acde754191b0d21a73c3714345827a541500b6d4edd926a366d3344a2ccfecb3afcca17f180c721cbba3f71702e8e9caf778e39162d8377197b740db3b888b3fcbce1c793d3db4dd9392e4ae328e9103de545e1a448889fe6e7064a89436ca793ffe770c02ecfcbc363b999397387d85bd6914688d586faaf92681dfee8036e20124209d8431669db20c018875ec9aa4e4f24c1d3ec7c54572bc9867831c2b9f92023227a2acf8d467b2a51157a52f7a013202ab1299e7051fc87a2279c0dc1fed0b4579bdcf4fb8e3c12702a3fedf4d5db8f1fa3bb555b1a71d1a3ea3978fc75ac37a04163074cf15e0c5450a0c3bd0e288dbcf251e95982d8b03ecf9349596df8c79ee06d3ac344cbbc2e5360887bd58f72dd348b708bfe55631a6ccfc1201ebac0b0228651c0a84dfb4b5f095ca1102148cc05e5b1c1682fe6ca3fb68440bfe357b68c554ed7838045919f0d84e52b4b4938b517ff43c231735b9cfb845f17a8331055bb7f987fe70216fe7c9d580235b3e96f3a8e08770ee4bb9c5e775993d2f299950b27fe82b53ab1b10bf80bbe7fb1fcead69e2e8f6a19d519adc6484544eb6c8468cf66dea01df52867935d573496639612f0b67ec5db8869d3b5ca83906616c227146474a48ddad280081d1f1db5250176203a53b0a48e063133ba399012e12e1f2bc2ae63e97719eb5667f897a1bc5cbe25036acef71fc96ed23753fbd3b400d6369f96aed68e28720ad5469a8566884c907fa5b1f24acf658ae2b1d1c0166f2044c213a8e0aecbba1c482e4a4f602263d44eeb852cf0b2b357e8e25366081b6c077001d5b40de2fa69f1dcb79bf951c18084d57676d71f07bfbfa3029f6253c239967ff945a7b3b490d5bf130571edf825a5f5b33ba4d3fd47d844cc4da56a265c49b2a67064ea1afb26d1120c18b728724179f6b2fe7a49cfe4c8a03745d0b6146767adb50d0e02bdf42d9b269fb51cf8b65dd4faa748950f374d3ea5569255dec42a285f150be1ac01a124e6feec5911b406ecc27cb2e5ee282f61179d6827effb6b23d93becdfdb71f96e61e6cdaa6382fe77fa61b8ec955f882bba2bd71c4b7b8e85100c8a2c56825a841684ed9f56989c1e40fe2a2643f9b5faf221337d481eabc8221c7abd5a60be30f173c1b48b5f33e54cdad844a691f465ea80d329b0c59cf7d98d917660561170105859f4b58a48c21473a13c43c7fa94567c568c94d5409194ca379773953f25efd3edd45e27fbe313b27774e4af808fd338084fb8ddf3f10e8abe209e57f98d98538b2bf7c4799970a01b6e6bab0a28d8986e05f005c1bf9851fc0f2eeb2011d8fc5dc009e698db0951f88261d5ac60ab7c5b24a578ad6ffbf923d5ed116cf1180491106e45c30ee3eb63734b4fe4a3be8bfa1447947941ae8388baf1ac97e15e0263f6566f6584f8f2d9b31820b6e4caf64f9d1132330c7d22c95c39ec842e8f503ed7d2ba416a1d79d03ff6ea22b0aae8abf203cb4d19f9238e224353177b10039753b7abdf5056385dbe679400d1222f82fd8729c32d6c66b63eacaf299612474ef83d1b849407a2ec73adc441e524113e90945c392f504cf5bc119a62800adec8e70c3a9732dc642fb27a25770f3c4ef4229661c0ec81ef6c83cd02f9cfeff59bdc9ea45320f1b14e061980bb6f85a3cf829c09aa2da763aa8560385296223a59fe8ac57c3886a759bbbed1fdcf743cbe876679efee82bd06896810e8b1d2996480daab3bd914cfe66bae21edba96823afd6a10fc3373ce065eaa1c61f0bc75a46c55c19b3c3018cd48afba4cdf273eb8885dce1d2a82070597b735bbed84700348436f172da3b5b7d883772b398521b60d9bfcd2a07f296b8c41980f09bf9731bdb61aa80f96ac096c5a72b43f08882b775f22dfb88c3318393050f272b7efc9e67075a1bd8f25434b8e34cae3b1f9538a63bba0949091df32f60858687a11b08529206a8a1d7a7339a5c78554a13e5c1105b802c94f57118a2338666872fdf37f81da571db76a241325b178d450b31f4c922b9c3cae9327ae5c3af0dbb7efa8851ce4dbcea1589fee5d6adca91278b6eed3cb570102ce3ecd50fdf7dd9362010cbf526d03910a21eb38e890cbe9ead92d5ece9c3a63c2f074c3a7bf861e21be32c1d3ba7ce39f3c7209a4454a892a7b94622771238e3c27fc23dfdc25cb84fec26ee6a9167c8a99676d53966769dfa4a8c0e0df0316d79b94f9f068434e163214436f0bc68be2aca6cc364bcd85a9ab89522f5c46932f670b08e25412316c7e81e6b4a7c8ab55f62069f745cd69077cdb28a3721ee058718d3812535a43f0c13644b525ce1e70c1c62d18c8f3511603c440664a53ad9bacb68ccd32a558489203cce50859019d05791e2409888805fb8aa95507b3846da8d0b25f578b1bafbb5c6826bf93df9b06d572ae2024ecf6703cd156042c0b9704a178bfead787eb6fb3296b0e33753270b8f2c80d241c9794a76e803efee30d9dfefe22b880b185b767c1a1ff8deba1c91a058f074529ddb45a3c6c0151d08e149caa6c4a6774e3190669ee5ff7dad7e7d6de219f40628a0c653c5ed53bd37303f188560578f0ce607f43fcc9e3d2fd4349c6e7aafed58903ac354fa27f94924146c32e26f8332a16014aed6b8c6f606806c555b18b40e9f4cc4ff3df39dfa0edad5625d4ca4d6c5fc04a3fc125d4983104f4634bd87c09fe6d231755a4e77a0d136e3c22788a92d3b9def875d10fb707f72940fc3b2d83cfe1369c9d849c19d635da1096b17851ec6bf05b1296d8d7b937057d3319747f3a2f1808bb5025aeddfcedcb169a36ad7ba96d3bd021a67ec0ba690e149c15e40c656b2c244d8a86bca3e16920802210172681c5ade6591710b3b077070943d0d249935dee9e1113402545065acf24d252d13f183aa2ba607c720787155ce02bc1fcc1c0ff62b619a538d4c5ff32a26396cbb7a9526636056e4cea2911ff53d9ebbf4de0372db6d37216e1766db92083bbc57fefbc960ec1044afb0868b012bece8828cc10e9b8876c9bd6918b7d004fac53b2f91a4bb469185b00fc8d3ea9e21510b11942e80d602d2af56cb699eebe1e41cc2eedd1878420c949a9f9a822362c25e93b3f190066b210d98d632da79c15a6a5de6548ea923a302d1fddffc8f52d151f7269f2ef5a54f14958c7870a45b57ed43dd6d9d0f774fb15a6be77b04a71cc1fa79f7dcd43255d77abb36cd4a7f7c94a638525ea9fffdac7eaf1b8861d9ac07b8979225401e7c30307f222b8ff2d4a6052f1be3917f8b2d3752b47b5a51f342743343649bf11f531e25e9d484feefb57dff4649536c2a800e1fa0bca471b054bf6984563c3f46c6f92a9d3850b31ad613d6e22cf8fed7795f8bb9796d4ddf83171419d24236dbea7357fdda33bb5286688b3ebc1a06e3abd65d1ee070ca4e8b28824edcec85a90a116758e0d0a51590d7b0d15d540a9f412a06b8c12f25a53917e9e7273d8dae3f770a23cd23847671344b7ae79686d77769b08b4179c6865aa750834e9d83f905601ea1b6c18c56754d0a83e8b205f59549531438108a2d89629d2be43de0ad327381f490a840450b495889f24c53a5eae63e6d0f094992e55e7f8213fb0d5c9fb5eac6a0a72898b1b8e1051fa0d38fd40462176a1e32e35532ba3176d0714d68dfa0f61f5315e7c6ff764dab51a698af3467e648144b55a278c1d8eeb51dab40131622c2bd16d9ccae9ecf15c8477a4d3769bfda46754c50b4fdb8f461fa5327de0c7e069e9a61d006c23fbfd90956535cc925009752886e965eb79f576e942f0bc9884519dd86c9204fe5ae33d0534b9b315d957f8c9af4934a8b3f957579b7a70598c1fceb7ca334e04ad438813c5fc6020c4fb90c07023243e7025d6043408f21808f3c3f02b5eb4c0cc9df223409cd330940d7129768097c8a59eb85b54b60b2f1ff1af4a7f07740b6a427497448d20e0317f26b9fd8bf3ae88f5e6e613ec01918e7d064b3efccb20d2b379f0f2e9d94e756f3787990d75710fbc5efe825617cd2bcc5751f2732a05741ee1f22a8d3c61bfbc66fd6e23ff75322dea77d126b6b3531c791e0fcdacb2081eeb3ca2aef2e9e839b691d916341c30f344577abcd59944fcd1a1c527fd0e04a74ed288a7a9387d85791dcd6044a27dab1f85c7579469daaff8608056ddca80b0c81eea24fac862cb6c9314632a4a621ed7a974c763869ae489a62adcb7677833d6deed842607e050fdc6f94b84eb28d0a146cafb6c3dc3f0a0c926f8e71000109400c1a9eae01f15a8bca2b373929f84f892c45702513dae5eda36f18dbd9de648ac6df5119732124bf2dbeda5f68f331d589eb52f5dc279c69ddd3243a217f1635e5cbee4c5b92ae57be5b404f01abaf30a4704d3e4aa8e24aedc79a5b40c200ba85327875b5e346f2ff81c55e8495229b529629c757c43b0c7b1f3ac9ea9f7684916450d97a3f7b59763e7b5ddf1c8e4b527f15b6cf45ac341bd573696064e3c4197c0de5c3b381b1704f0cb146b0bbc155072a71b2dbed3f58dc4d51f5788149a891dd5f8eb1f5542880c745cb5d29b7c201b8716e44428f95e0e401b96e6968c7ceb63513b02395ea17ab836ad87e9095cde5c1671da070ac7657f70e8c966168c878dcc47492937a28ce4610576f9d7017e327f31acee154ea7a1de85dc9a3d4c876cdba926680e137b9a41a6f54dd426de5e9da700da163629f2433a0756d354fee5e449633a36c0f170b3c7fdf597675ec6fdc97d1b10caaa84d19e1cde33971a3577f22bb7ab2f74324b42b47b605e6e46a75d0d8ede276c17b02acdf96e424a52ddf4a2fdae43b5a2259480ed8c2527d69c14ba42e4942f0898816bb9e7aef14fc0cc2be25c4f22d84642554cbe97bf8e0a18829a0d8a2ef64f234d0de6929ce466c794bc32198d3a074d31ffe5c14fc12915542d550034ce8c6b910f4e1b23057f50aad6021f921a811eeb3e01395284b84e0cb40e769e78bcddec6a61a0f616c99beaf7c46b0c07ed2bf85f3d6e10f1586c3fa9a99e70576521dd95e3fc0c36953a9e40027878e203ed5d760f04b00e07b032cc92eacad302758dc42b685ce64efea4c7c361bb152b13db5e21dec13cb9e4fa2c613fa80170d46c0ec731523ed6136239cdc44e4d245686afa28aa97b731640f5fe9cbd31d0319b60e9557ff588b998f05acbcd5296f34816882361a81557bb30cae09757ca2"}, 0x1004) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) [ 68.004811] input: syz1 as /devices/virtual/input/input36 22:03:47 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x1cd, 0x0, 0x1dc}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x6300) fremovexattr(r0, &(0x7f0000000040)=@known='trusted.overlay.redirect\x00') [ 68.156608] input: syz1 as /devices/virtual/input/input38 22:03:48 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000002180)=[{{&(0x7f00000002c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000340)=""/17, 0x11}, {&(0x7f0000000380)=""/238, 0xee}, {&(0x7f0000000480)=""/101, 0x65}], 0x3, &(0x7f0000002200)=""/140, 0x8c}, 0x7fff}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000600)=""/133, 0x85}, {&(0x7f0000000740)=""/203, 0xcb}, {&(0x7f0000000840)=""/194, 0xc2}, {&(0x7f0000000940)=""/210, 0xd2}, {&(0x7f0000000a40)=""/254, 0xfe}, {&(0x7f0000000b40)=""/95, 0x5f}, {&(0x7f00000006c0)=""/6, 0x6}, {&(0x7f0000000bc0)=""/4096, 0x1000}], 0x8, &(0x7f0000001c00)=""/93, 0x5d}, 0x7d}, {{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000001c80)=""/245, 0xf5}, {&(0x7f0000001d80)=""/222, 0xde}, {&(0x7f0000001e80)=""/243, 0xf3}, {&(0x7f0000001f80)=""/46, 0x2e}, {&(0x7f0000001fc0)=""/161, 0xa1}, {&(0x7f0000002080)=""/26, 0x1a}, {&(0x7f00000020c0)=""/84, 0x54}], 0x7}, 0xc44}], 0x3, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000100)=0x400, 0x4) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x202000, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = socket(0x80000000000000a, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20055, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x3}, 0x1}, 0x1c) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000080)=@gcm_256={{0x304}, "5e157a457f1a0416", "e77c22624398ab2f7c21b1d47e36d918c312e75be6a18fbfc3b013556202d4e8", "631e8ac9", "7619a2ea7c19a296"}, 0x38) fcntl$getown(0xffffffffffffffff, 0x9) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0) listen(r5, 0x40) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) ioctl$EVIOCGSW(r6, 0x8040451b, 0x0) ioctl$FS_IOC_SETVERSION(r6, 0x40047602, 0x0) r7 = fcntl$dupfd(r5, 0x406, r6) getsockopt$inet6_mtu(r7, 0x29, 0x17, &(0x7f0000000140), &(0x7f0000000180)=0x4) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r9, 0x40045431, &(0x7f00003b9fdc)) r10 = syz_open_pts(r9, 0x4000000000002) dup3(r10, r9, 0x0) ioctl$TIOCGSOFTCAR(r10, 0x5419, &(0x7f0000000240)) sendto$inet(r8, 0x0, 0xfffffffffffffffa, 0x20000802, &(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) dup2(r8, r8) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x20010, r8, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 68.498823] input: syz1 as /devices/virtual/input/input39 22:03:48 executing program 5: pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000002) dup3(r3, r2, 0x0) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f00000005c0)=""/101) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) socket(0xa, 0x800, 0x0) fchdir(r4) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) sendmsg(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000380)=@generic={0x0, "ff80f096dc909d329774e6a8dade60ee2bdaabb4abb857eb5baec14815f0a69bd69feee1c43c775ac38e40b47b092d7cc165e503fe31d4a94a66d3c1b3b41af77425d24669a3ca462de284e1169bd5babd3312ebf023fe460ed630e38452416f2d51ff14660be2eed6bba6e5352188bd025b6f60cc8bc400a25a3350e207"}, 0x80, &(0x7f0000000440)=[{&(0x7f00000004c0)="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", 0xfa}, {&(0x7f0000000080)="5c854701969bf896", 0x8}, {&(0x7f0000000400)="ff8d", 0x2}], 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x10c}, 0x40) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) fcntl$setsig(r4, 0xa, 0x25) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r5, 0x0, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r8, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) sendmsg$nl_netfilter(r8, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400545f257fffff0000deffffff00000000aa24"], 0x14}}, 0x0) fremovexattr(r7, &(0x7f0000000840)=ANY=[@ANYBLOB="196fb0e5f8f2005563b198a8dd350724219f65"]) sendfile(r5, r6, 0x0, 0xfffffffffffffffc) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) [ 68.811934] input: syz1 as /devices/virtual/input/input40 22:03:48 executing program 4: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') setrlimit(0x1, &(0x7f0000011000)) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/create\x00', 0x2, 0x0) fchmodat(r0, &(0x7f0000000080)='./file0\x00', 0x150) ftruncate(r1, 0x429) 22:03:48 executing program 2: r0 = socket$inet(0x10, 0x80000, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r1, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r3, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x5, 0x201}, 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)={0x8}) sendmmsg$inet6(r2, &(0x7f0000000a00)=[{{&(0x7f0000000180)={0xa, 0x4e24, 0xffff8000, @remote, 0x7ff}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000200)="1e680787e6adeadeff82f2ccf7bf79d1e0ea2d086ede218e4d9b2c5b2c277bc024be53ebdb57519729b1c746f4bd8cbf485d039bd5e84f27defcf17c877eec6eed5a", 0x42}, {&(0x7f0000000280)="db5c284ddae544f854cf695ae5185abc529e1ef74acc851b36fb304489a218d79c1f0a00f02e036bea5ee521a97f04e833f3d309932355e5e044c8d69ad62376966ea7b741605c38f7a62c5d192ba5ba2272f493ca0a4385a9fa238ed26a51a0b648811ccaed16257001edf53172011b71212a70b98cb0e71a43f9d356fb52b4d2ce1317f5da58ec62", 0x89}, {&(0x7f0000000380)="441c5b7fa170637f2c4192b0624a3121b3e742ec43995e675e086dabe77692093eb80ea017be751b65cdcb5d55a98db410ce3e8857812964e09f695ff6b3d8699c68a7b39b94910f6088756610646bdb2375ead558fe5c408f70758ec40daee9182e687ff84e82c2a26ec830609e046c90b2ceb41792f84de82867d8e1e74a5b8aa060974342f5fbe10b134150efd693a6e08bba6b07fafca528c173ddecba3f37594fd73c094c1b62bb0e289127bbd05f6224ab91de75e8ecc28f63b769e24f571c35c7339cbaca56476714", 0xcc}, {&(0x7f0000000480)="abba6a171f7a84c512fdf478a9289cf13f2ca6817787bc70a5f8610b96a409b731ea3fb6d0e7d0dbef7e1668c22b78e4487d2a6b6f291f6ee2bef5be1b5147014e90ca18bdb24abe8294881dccf6250a9ab681903f8e4ee13bd6468104b4859ffefdcaa46f40ed0ed0d934ae60bff05ba87b360b6ce151d0587505b7d4b477e38137ad4e0ca787009bbfe03d451f45fd815b284374dd7a04ee6b369d008003aff7a8c72f", 0xa4}, {&(0x7f0000000540)="19319905b72aed329af06f277e68a4dbca9b90f52d9cad2406b36311870d82214278edad02d3bb22cfc1c1af4f6adcf95595290055e8ef9d1179932334a628d332fee3a8afcbb4507018d3fb380dfab8bd72da69490e5026573d3662a610245ce995b09b40bbe31c0f8ac4152669bd997b", 0x71}], 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x3e8}}], 0x1, 0x4000000) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r4) fsetxattr$trusted_overlay_redirect(r4, &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x0) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x101000, 0x0) ioctl$UI_GET_SYSNAME(r5, 0x8040552c, &(0x7f0000000080)) r6 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r6, 0x402c5828, &(0x7f00000001c0)={0x0, 0x0, 0x200000000}) r7 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz'}, &(0x7f0000000280)="80", 0x1, 0xfffffffffffffffd) keyctl$search(0xa, r7, &(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, 0x0) r8 = add_key$keyring(&(0x7f00000009c0)='keyring\x00', &(0x7f0000000a00)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000300)='encrypted\x00', &(0x7f0000000880)={'syz', 0x3}, &(0x7f00000008c0)="90e73cedbe844bdda8570833395d493a1aac3238b7a34f24f9cd39785d5c", 0x1e, r8) r9 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000640)={'syz', 0x1}, &(0x7f0000000680)="8def4c1ffa542b6f3088f1a30ffebbe5d614e0c25261414e20d33296285eb564ba9bec18cc843ea8963dfa75f90ac629188bf71fd176a22e87e414b86a14bc74ac0fa8dfe6d3aea8ffb8589ca174abc4e117e3492317d90af1c7a0582dc59955b0bc905f64441a75ec088c9e5d93a8703f35fce42d181ff621c6802094dbdcd352d2de9ea789e99c46928335d57dd0f6d5d3b11d91d86a1d3bf4e3f8ca201fd7688cab3f3bf2facbc39e155030acf14584a8433a2440dd967e18148cb9bdb49de96574daeea43a2e11", 0xc9, r8) keyctl$dh_compute(0x17, &(0x7f0000000780)={0x0, r7, r9}, &(0x7f00000007c0)=""/222, 0xde, &(0x7f0000000f00)={&(0x7f00000008c0)={'sha512-generic\x00'}, &(0x7f0000000900)="56027d4a2f5d55e52d079bac612a5c2d98a81157a725158ccb4709ef56d339ba737762086ffe59e151573af8ad629c296a4ae27c59a24ac20eec700cd4de1320ce45b709844c8035f9ea90eb93d7a7bb1922f482cde63ffa7cc9e2bd89e08a11b41c5cd7a6d5ba24e2b671276b490733ac573ff81049c9f45c6aa54a41e13b639c48171047089cc3828253ae926ccfe3728d5e238930d0565491818144ecf29a39ac3d69bb0af0a9f56548c129829699f6387354cad86824ff5f511bb36f5329ac9e29893f64f57d53c6c0bb4e2931cabc8db7b12d57dc4df1956b6087444e4e0b8ef9b2fd0e7dda7e3ce9fdd2a3a41c9b1cb58d", 0xf4}) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000a40)={0x10001}) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r10, 0x5411, &(0x7f00000000c0)) bind$inet(r10, &(0x7f0000dc9ff0)={0x2, 0x4e20}, 0x10) setsockopt$sock_int(r10, 0x1, 0xd, &(0x7f0000000100)=0x8, 0x4) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000040)='lo\x00', 0x10) sendto$inet(r10, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) setsockopt$inet_MCAST_MSFILTER(r10, 0x0, 0x30, &(0x7f0000000f40)={0x2, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x6, [{{0x2, 0x4e23, @empty}}, {{0x2, 0x4e22, @rand_addr=0xff}}, {{0x2, 0x4e24, @empty}}, {{0x2, 0x4e24, @broadcast}}, {{0x2, 0x4e22, @empty}}, {{0x2, 0x4e24, @remote}}]}, 0x38c) write$FUSE_LSEEK(r6, &(0x7f0000000040)={0x18}, 0xff79) lseek(r6, 0x0, 0x4) 22:03:49 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) readlinkat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=""/205, 0xcd) r2 = dup2(r1, r0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132217) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x80000000001, 0x31, 0xffffffffffffffff, 0x0) clone(0x4020002102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='vegas\x00', 0x6) 22:03:49 executing program 2: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x13f1b0a2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) inotify_add_watch(0xffffffffffffffff, 0x0, 0xfe) getpgrp(0xffffffffffffffff) ptrace$setregset(0x4205, 0x0, 0x4, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) r3 = socket$inet(0x10, 0x3, 0xc) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000030307031dfffd944ef20c0020200a0040000100021d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) accept4(r3, &(0x7f00000004c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000540)=0x80, 0x1000) getsockopt(r3, 0x9, 0xed, &(0x7f0000000400)=""/4096, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x182) r5 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) fcntl$setlease(r5, 0x400, 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r4, 0x4c01) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r4, &(0x7f0000000300)={0xf}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x8) sendto$inet6(r2, &(0x7f0000000300), 0x0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x10) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) socket(0x4000e, 0x8000000000004, 0x5) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000001c0)={0x1, 'veth0_to_team\x00', 0x100004}, 0x365) socket$inet6(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000002000)}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x1b, 0xb, 0x0) 22:03:49 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r0) r3 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) request_key(&(0x7f00000001c0)='logon\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000140)) ioctl$FS_IOC_RESVSP(r4, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r4, &(0x7f0000000180)={0x10035, 0x6d, 0x100}, 0xffffffffffffff3d) write$P9_RREADDIR(r3, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0xd6) write$FUSE_IOCTL(r4, &(0x7f0000000500)={0x20, 0xfffffffffffffffe, 0x5, {0xffffffff, 0x4, 0x3, 0x3ff}}, 0x20) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/mls\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000540)='./bus\x00', 0x40) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) read(r0, &(0x7f0000000280)=""/124, 0x7c) openat$keychord(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/keychord\x00', 0x4a841, 0x0) getsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000040), &(0x7f00000001c0)=0x4) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000300)=0x0) syz_open_procfs(r6, &(0x7f0000000380)='net/snmp6\x00') sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="0000001008000000001000cf6a"], 0x1}}, 0x20000000) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) getsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x4) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000), 0x0) syz_extract_tcp_res(&(0x7f0000000580), 0x7, 0x4f) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) [ 69.471693] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 69.538138] audit_printk_skb: 9 callbacks suppressed [ 69.548530] audit: type=1400 audit(1572041029.343:17): avc: denied { getopt } for pid=2837 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 22:03:49 executing program 1: socket$netlink(0x10, 0x3, 0x4) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000100)={0x9, 0x1, 0x9}) 22:03:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socket$unix(0x1, 0x2, 0x0) socket(0x5, 0xb, 0x0) socket$inet(0x2, 0x3, 0xef) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r2, &(0x7f0000000080)=[{&(0x7f00000003c0)="390000001000050468fe07002b00e8ff4000ff07030000000000000003a2881419001200120001000300"/57, 0x3eb}], 0x1) r3 = socket$inet(0x2, 0x80e, 0x80) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000000000)) fstat(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, r4, 0xee01) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010009081000414900000004fcff", 0x58}], 0x1) 22:03:49 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f00000077c0)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001dc0)=""/98, 0x62}, {0x0}, {0x0}], 0x8}}], 0x1, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) write(r0, &(0x7f00000000c0)="260000002200476baacdddf260d85f660005006d20002b00000031c96aee719251b3e4d427c9", 0x26) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000100)={{{@in=@remote, @in=@dev}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000000)=0xe8) recvmmsg(r0, &(0x7f0000000780), 0x26b99c3d088ebb1, 0x2, 0x0) 22:03:49 executing program 4: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000002, 0x400002172, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/175, 0xaf, 0x10000, &(0x7f00000000c0)={0xa, 0x0, 0x8, @mcast1, 0x7}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r1, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) write$P9_RRENAMEAT(r0, &(0x7f0000000040)={0x7, 0x4b, 0x2}, 0x7) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mmap(&(0x7f00008da000/0x1000)=nil, 0x1000, 0x0, 0xb4972, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x2344, &(0x7f0000000100)=0x0) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:03:49 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) unlink(&(0x7f00000002c0)='./bus\x00') r1 = getpid() ptrace(0x10, r1) sched_setparam(r1, &(0x7f0000000000)=0x8) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}) r3 = socket$inet6(0xa, 0x400000000001, 0x0) openat$keychord(0xffffffffffffff9c, 0x0, 0x400000, 0x0) close(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x169042, 0x0) ftruncate(r4, 0x200005) sendfile(0xffffffffffffffff, r4, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40046602, &(0x7f0000000140)=0x8) r5 = open(&(0x7f0000000240)='./bus\x00', 0x8000, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r5, 0x0, 0x8000fffffffe) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f00000000c0)) bind$inet(r6, &(0x7f0000dc9ff0)={0x2, 0x4e20}, 0x10) setsockopt$sock_int(r6, 0x1, 0xd, &(0x7f0000000100)=0x8, 0x4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='lo\x00', 0x10) sendto$inet(r6, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000140)) 22:03:49 executing program 3: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r0, r0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r1) r4 = creat(&(0x7f0000000840)='./file1\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f00000004c0)={@local, 0x71}) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) ioctl$FS_IOC_RESVSP(r4, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r4, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r6 = getegid() fcntl$getflags(0xffffffffffffffff, 0x401) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r6) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') write$P9_RSTATu(r4, 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0) r7 = socket$key(0xf, 0x3, 0x2) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0) clock_getres(0x6, &(0x7f0000000100)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) r9 = dup2(r8, r8) setsockopt$inet_int(r9, 0x0, 0x32, &(0x7f00000001c0)=0x1000000, 0x4) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000c00)=ANY=[@ANYBLOB="66690312ee0a395e1919c2cdced96c74657200000000000000000000001b2254895e378301be0c77640000000000000000000000000000007f000000eb17d49fda68dde5b05aaf59c01dd8b2cf3d576114fa182311e4f4a088656c030720fe8a3d75debad48d390f38aae7c3a3ac864f8017a7a4f680923517d76415116cf56c2f3f54d190ca4d5fa5cd7033f8b4ef42644d97f4d7bc41718cf62ba1aad730a5b708e87a363cbf6063707b75a6127dfa037b8e70914e6b36e5e5571020e020ecf7b27ad704b01c74b42bfbd5aa5a031af218a3e9c64e57066abc1fcf735501b4a2031350aebd724ed2a93a6ddd6bc0080cba9d6a96bbab59b6106509537adb17b171192c360df5dcd089f65ed4560666db4813ae515a4fe90548d15006ce31ff98c9a2f7c3fca43753366490081f9368205a8f745702818b02000000000000003cd99e85276600be5c57b71a6e4fec901aaacd524fccfb1e244f000000000000000000000000000000000000000000005a4e7386ec7aaa0f39d3398f46041f4cc8fd8abbcf65ad34e010c8fb125672995c022499a5967ce256068a13c64cbd0b4bde9831199017fd23c42275b3d5115e98c27145589d4e13b18c233b14"], &(0x7f0000000040)=0xa3) ioctl$int_in(r3, 0x0, &(0x7f00000001c0)) write$binfmt_script(r4, &(0x7f0000000dc0)=ANY=[@ANYBLOB="2321202e2f66696c6531202e2f6367726f75703185b72d19af52b965742f74756e00202f73656c696e75782f636f6e7465787400202f70726f632f7468726561642d73656c662f617474722f63757272656e74000a1e8ec38316ccf5ff955251d3eb59cf53ecc234a9022b4427ab8fb09f168703659f67de74b1068eafd6a41f87d3efc15ed4bf73b1795eade13cd7b0c50dea996283cee3f5f423a8f1853eff6241d09c16e934f32391b84f5f5e1d1b9fbdeaa789d961f6186bda548a82f59c4989ddaab226b1866258aefeee0c34a31d1544c633384b1d68b9dbb9eb8adebcb017ebfed60ff08992b4383807602ecaf48da22f2cb5d3c0a5d812685d09d105e32e2d6eea761b7c9a134955ecfbac0c0f06034d7a5c9e0309a9f68488444cdc81b277839af8eb3926297d81c8bff586c95c7a214e8d26000000000000a2d5c0df18d85d1bb4d16b9b7587c12bab7d5c2712f8fc43a50167b81488bf3946e4a1797e40a76921696e20d635728319f64f418bba1d8ac2812df3d9786c74ada0c62338fc23ad9158b75f17d25f2521b13af741745be18d96745da4c9aecfba725abf4bf15a34fb95c6c67d24293dd6465f438ba3794b2f1b72809dedb975153b42b71e1ed63719d01a1f1200967c5b89a380becc469d0a1d79ed3f1c5aa7264514a85cbd5389129e9f832576c4d583cc199ed07d95425b43b1434e9ad0bac1f82e"], 0x13b) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r7, 0x0) 22:03:49 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='comm\x00(\xb6u\x86S\xca\xe6\x12n\xa1\x80u\xba|\xb8\xeaI\xcd\x88,\xaa\tE\x10x\xfc\xf6\xbc\x93\x8a\x05\x00\x00\x00\x02rI\xe2\xd5\xc7\xdbl+\x8d\x9da\xd8\x87') ftruncate(r0, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='comm\x00(\xb6u\x86S\xca\xe6\x12n\xa1\x80u\xba|\xb8\xeaI\xcd\x88,\xaa\tE\x10x\xfc\xf6\xbc\x93\x8a\x05\x00\x00\x00\x02rI\xe2\xd5\xc7\xdbl+\x8d\x9da\xd8\x87') ftruncate(r1, 0x2005) r2 = socket$inet(0x10, 0x80000, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r3, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) recvfrom$inet6(r4, &(0x7f0000000240)=""/175, 0xaf, 0x10000, &(0x7f00000000c0)={0xa, 0x0, 0x8, @mcast1, 0x7}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r5, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) setsockopt$sock_void(r5, 0x1, 0x16, 0x0, 0x0) sendmsg$nl_netfilter(r3, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) r6 = fcntl$dupfd(r2, 0x0, r3) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet(0x10, 0x80000, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r9, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r9, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) r10 = fcntl$dupfd(r8, 0x0, r9) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r11, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r11, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r11, &(0x7f0000000140)={0x8}) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r12, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r12, 0x5501) ioctl$UI_SET_PHYS(r12, 0x4008556c, 0x0) epoll_ctl$EPOLL_CTL_DEL(r10, 0x2, r12) connect$netlink(r7, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r7, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000140)={0x8}) ioctl$EVIOCGKEY(r6, 0x80404518, &(0x7f0000000000)=""/246) 22:03:49 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000700)='/dev/uhid\x00', 0x400000002, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) r2 = socket$inet(0x10, 0x80000, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r3, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r5, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000140)={0x8}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000000)={'lo\x00', 0x500}) [ 70.060639] input: syz1 as /devices/virtual/input/input41 [ 70.071031] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 22:03:49 executing program 4: socket$packet(0x11, 0x20000003, 0x300) open(&(0x7f0000000000)='./bus\x00', 0x109800, 0x20a) r0 = socket$inet(0x10, 0x80000, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r1, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r3, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)={0x8}) setsockopt$packet_tx_ring(r2, 0x107, 0x5, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchdir(r4) pipe(&(0x7f0000000280)={0xffffffffffffffff}) ioctl$KDENABIO(r5, 0x4b36) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='cdg\x00', 0x4) r6 = creat(&(0x7f0000000180)='./bus\x00', 0x103) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x502, 0x0) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, 0x0) r7 = socket$inet6(0xa, 0x400000000001, 0x0) close(r7) r8 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x200005) sendfile(r7, r8, 0x0, 0x8000ffffffff) ioctl$FS_IOC_RESVSP(r6, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}) ioctl$FS_IOC_SETFLAGS(r6, 0x40046602, &(0x7f0000000140)=0x8) r9 = open(&(0x7f0000000240)='./bus\x00', 0x8000, 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, r9, &(0x7f0000000040), 0x8000fffffffe) 22:03:50 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000000)=""/11, 0xb}, 0x11c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r1, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_SET_PHYS(r2, 0x4008556c, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = fcntl$dupfd(r2, 0x80c, r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r5, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000140)={0x8}) r6 = openat$cgroup_ro(r4, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) ioctl$TCSETAF(r6, 0x5408, &(0x7f0000000080)={0x67, 0x4, 0xa4dc, 0x8000, 0x10, 0x9, 0x9, 0xeb, 0x2, 0x20}) r7 = socket$inet(0x10, 0x80000, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r8, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r8, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) r9 = fcntl$dupfd(r7, 0x0, r8) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r10, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r10, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r10, &(0x7f0000000140)={0x8}) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r9, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0xd8, r11, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xfc11}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lapb0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x542}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xb8e0}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, [], 0xb}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0xfbdf5f837c30adf4}, 0x20) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000002200)=""/4096, 0x1000}], 0x296) [ 70.173384] input: syz1 as /devices/virtual/input/input42 22:03:50 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200000, 0x6e) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netlink\x00') preadv(r3, &(0x7f0000000700), 0x31f, 0x10400003) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000003}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x13c, r2, 0x6ad2ecdfd07da3a, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x776}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}]}, @TIPC_NLA_LINK={0x90, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x230}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe31a}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x78}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff8}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40802}, 0x80) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, r2, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x14, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20040004}, 0x44) ioctl$RTC_PIE_ON(r0, 0x7005) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 70.296537] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 70.345737] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 70.357747] input: syz1 as /devices/virtual/input/input43 [ 70.390563] syz-executor.1 (2872) used greatest stack depth: 23456 bytes left [ 70.426435] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 22:03:50 executing program 0: r0 = socket$inet6(0x10, 0x0, 0x3) r1 = openat$selinux_member(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000580), 0x4) sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={&(0x7f00000004c0)=@generic={0x6a4fa76d6c53d08d, "b80846c5ca8fe87fc7c0540e1a6dd154bed788a4f30ecaf9542e8076dc119ca353d7b7aca4606081f42377e3cdb88d6f2df9ed2a6f48e0a9d506278a58132121494cad693d094524c48e7fb4a1ee47164a04c0e6cf55f5c9aab37c1ab428da300d594c4a1d37ef92c3bd5d76b6fd560cf6e52f4276ee1cfe26db92a35c5d"}, 0x80, &(0x7f0000000400)=[{0x0, 0xffffff9e}], 0x1}, 0x10) fallocate(r0, 0x8, 0xe2, 0x7) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) poll(&(0x7f0000000140), 0x0, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000340)=@known='security.apparmor\x00') read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = socket$inet6(0xa, 0x2, 0x0) add_key(0x0, 0x0, &(0x7f00000007c0)="4ff33f25152878f47a067f4930e02814e7786836bf9b51f474908236b9a5fee472c76e22ab0ab4b80e7c9358dece03a3e05043e5426408b1b56139a703689c40617eb20bae08e7efdff8fd3c4ce95ffa1b8afaac23bd3adbd6439469c036e4c59608438f56d705429761de1f80820f5eea666fe848684f7a6422def1a0c4094e9c9bb4708d855c35e99c94c190205bb345e9168cabb7c2566ec2db8911b316e4b380a8e906e8085d56fa4b8421ba8eb521aca65ec476ef39fe037742c6a5134415e3e58e", 0xc4, 0x0) request_key(&(0x7f0000000480)='cifs.spnego\x00', &(0x7f0000000540)={'syz', 0x3}, 0x0, 0xffffffffffffffff) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) socket$unix(0x1, 0x1, 0x0) r5 = getpid() sched_setscheduler(r5, 0x5, 0x0) r6 = add_key$keyring(&(0x7f00000009c0)='keyring\x00', &(0x7f0000000a00)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000300)='encrypted\x00', &(0x7f0000000880)={'syz', 0x3}, &(0x7f00000008c0)="90e73cedbe844bdda8570833395d493a1aac3238b7a34f24f9cd39785d5c", 0x1e, r6) r7 = request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000440)='yam0\x00', 0x0) r8 = add_key$keyring(&(0x7f00000009c0)='keyring\x00', &(0x7f0000000a00)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r6, r7, r8, 0x2) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000180)={'yam0\x00', {0x2, 0x4e24, @local}}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000044c0)) flock(r3, 0x3) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, 0x0) fchown(r4, 0x0, 0x0) sendmmsg(r4, &(0x7f00000092c0), 0x800000000000205, 0x0) flock(r1, 0x0) 22:03:50 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000040)={'gre0\x00', 0xa000}) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000440)) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={0x0, 0x0, &(0x7f0000002000)=[{0x0}], 0x1}, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet(0x10, 0x80000, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r6, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r6, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000005010102000000000000000000000074"], 0x14}}, 0x0) fcntl$dupfd(r5, 0x0, r6) setsockopt$netlink_NETLINK_CAP_ACK(r6, 0x10e, 0xa, &(0x7f00000000c0)=0x3, 0x4) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x15acc76c) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x1}, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0, 0x0}, &(0x7f0000000780)=0xc) r9 = openat$zero(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/zero\x00', 0x10000, 0x0) ioctl$EVIOCGPROP(r9, 0x80404509, &(0x7f0000000600)=""/192) r10 = socket$inet6(0xa, 0x2, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000140)=""/119, 0x77, 0x0, &(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x6e) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000004c0)=0x4) r11 = socket$inet(0x10, 0x80000, 0x4) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r12, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r12, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) r13 = fcntl$dupfd(r11, 0x0, r12) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r14, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r15 = socket(0x3, 0x5, 0x81) sendmsg$nl_netfilter(r15, &(0x7f0000000200)={&(0x7f0000000040), 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0xff84, 0x800005, 0x1, 0x10, 0x0, 0x25dfdbfb}, 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r13, 0x3, r14, &(0x7f0000000140)={0x8}) sendmmsg(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0) socket$inet6(0xa, 0x5, 0xff) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0xfffffffffffffd9e) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x6) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000080)=0x800000) setregid(r8, r8) 22:03:50 executing program 5: ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000300)={'veth0_to_team\x00', {0x2, 0x4e20, @rand_addr=0xacc}}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000240)=""/175, 0xaf, 0x10000, &(0x7f00000000c0)={0xa, 0x0, 0x8, @mcast1, 0x7}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$mice(&(0x7f0000000340)='/dev/input/mice\x00', 0x0, 0x42) connect$netlink(r2, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x4080}, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000000)=0x8) r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x8000) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x180) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x480002, 0x0) ioctl$ASHMEM_SET_NAME(r5, 0x41007701, &(0x7f0000000180)=')\x00') r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) recvfrom$inet6(r6, &(0x7f0000000240)=""/175, 0xaf, 0x10000, &(0x7f00000000c0)={0xa, 0x0, 0x8, @mcast1, 0x7}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r7, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r7, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$LOOP_SET_FD(r6, 0x4c00, r7) write$P9_RRENAME(r6, &(0x7f0000000380)={0x7, 0x15, 0x2}, 0x7) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) ioprio_set$pid(0x2, 0x0, 0x741e) sendfile(r3, r4, 0x0, 0x8000fffffffe) [ 70.463934] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 70.483309] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 70.539525] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 70.563912] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 70.574948] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 70.582722] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 70.589780] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 70.597427] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 70.611989] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz1 [ 70.688914] hid-generic 0000:0000:0000.0002: unknown main item tag 0x1 [ 70.709330] input: syz1 as /devices/virtual/input/input44 [ 70.726161] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 70.773786] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 70.821387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 70.859891] hid-generic 0000:0000:0000.0002: item fetching failed at offset -1164897109 22:03:50 executing program 3: 22:03:50 executing program 2: [ 70.903326] hid-generic: probe of 0000:0000:0000.0002 failed with error -22 22:03:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000003c0)="7e6b2e79bebc35695d88ec572883ef18082933f813", 0x15}], 0x1}, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) ioctl$TCSETA(r0, 0x402c542d, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff}) 22:03:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) dup(0xffffffffffffffff) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000002) fcntl$dupfd(r3, 0x0, r4) r5 = dup3(r4, r3, 0x0) write(r3, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$char_usb(r5, 0x0, 0x0) tkill(r2, 0x1000000000016) 22:03:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fstatfs(r1, &(0x7f00000000c0)=""/157) 22:03:50 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000180)='security.evm\x00', &(0x7f00000002c0)=@sha1={0x1, "56c48e53ce6ea4018000003e126ed45a53d958a8"}, 0x15, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x2c3, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x2c3, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000240)={0xffffffffffffffff, 0x10, 0x1, 0xffffffffffffffff}) lseek(r3, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) personality(0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0) pipe(&(0x7f0000000080)) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0x323) creat(&(0x7f0000000380)='./bus\x00', 0x0) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000040)) r7 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) r8 = socket(0x10, 0x80002, 0x0) bind$netlink(r8, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r8, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r8, &(0x7f0000000340), 0xac, 0x0, 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/keychord\x00', 0x8c00, 0x0) write$UHID_INPUT2(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="3f663639309d5f6d2fb010f8f8b962f3c902940be68391ac7333b580d6adeb7659e0bc4990117ce65f113e5a5980b3daeefce87d77e14ff8233729872310b7ca712bc4aaf1b538302bbf76dc91e921a7422d4da6d8a61cf410444341bd8c11dfdfdbf13822b34d53e595b36508cbf69d19f04abb04e71f73f6e2f06321b46b8e46577a7ccca24b3c8a697e1ca6e4ef32638f6b4091eadd19ee1aeafc2def7db3efed99799c36697f80f52b27d68956338c322a3fc91addd1e12e16e4bee116fe1d3dfe0e0f82ac52f2788b7cf3e298e93cec532d7bc3e40cb0c927d8339d74a82d019e7e050cfdf6c189dcbd8f1bc466cf29d01f3cb3a2f864771caffaa211ed7073dd39295f579460aea9b431e6fb9edb9b8b840b0f23215612648b4b9f2dc99e23a4ac58ac9a14304bbcdf11de7c95eb9c812d1e21a97ee74e52b84d85516d928c2bbd78a99263725be57299"], 0x1) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000540)={0x8, {{0xa, 0x4e27, 0xffff0, @ipv4={[], [], @loopback}, 0x36af}}, {{0xa, 0x4e23, 0x7ff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x101}}}, 0x5f) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1) recvmmsg(r8, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$PPPIOCSCOMPRESS(r5, 0x4010744d) sendfile(r5, r7, &(0x7f0000000140), 0x8fff) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000200)="e5", 0x1}], 0x1) lseek(0xffffffffffffffff, 0x0, 0x4) 22:03:51 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(r2, 0x0, 0x0, &(0x7f0000000100)={@local}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) syz_open_procfs(0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, &(0x7f0000000340)) pipe(0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) eventfd2(0x0, 0x0) getegid() ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x3c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000280)=ANY=[]], 0x0, 0x0, 0x0}) 22:03:51 executing program 2: mlockall(0x3) clone(0x1080000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) 22:03:51 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x0, 0x0, 0x0) [ 71.292940] binder: 2955:2956 got transaction with invalid offsets ptr [ 71.313511] binder: 2955:2956 transaction failed 29201/-14, size 96-24 line 3164 [ 71.315610] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 71.361675] binder: undelivered TRANSACTION_ERROR: 29201 22:03:51 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x11, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000600)=0x209, 0xfffffffffffffdae) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x27, &(0x7f0000000000)=0x1, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000300)={0x0, 0x0}, 0x10) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x0) pipe(&(0x7f0000000400)) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x408000000000004, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000180)) r3 = open(&(0x7f00000002c0)='./bus\x00', 0x40000141041, 0x402) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0x323) mlockall(0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') r4 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000040)) r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) getsockopt$SO_COOKIE(r6, 0x1, 0x39, 0x0, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) write$FUSE_POLL(r3, &(0x7f0000000540)={0xffffffffffffffc0, 0xfffffffffffffffe, 0x1}, 0x18) r7 = socket(0x10, 0x80002, 0x0) timer_create(0x1, &(0x7f0000000340)={0x0, 0x34, 0x0, @thr={&(0x7f0000000640)="601d1e17eb296e55f0ec6d9277c5c6654ed7a8ee981313fec5693e3690775664bf63427aca99c38daa1d9dc465d3d4898030a2fe009556a5dd1685a2121e22a84d398c76b6d986168275a78b26ba017393fbb24dcd8a1724c197a528ede6774d33c9a95271aa4c1d35f1436b877397508b1ed8ae099d9d2e59f233fda89e2c45d54607dd66b7858a8796ca6cb47ed35a214fe5658b8920433a1403a74c4b3520883786632d15fe06e841dec5283f8a1a26a0", &(0x7f0000000300)="5dd1fe141a30375709aa184e1f1d"}}, &(0x7f00000003c0)) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r4) bind$netlink(r7, &(0x7f0000177ff4)={0x10, 0x0, 0x1, 0x8001002}, 0xc) connect$netlink(r7, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fuse\x00', 0x2, 0x0) write(r7, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) times(0x0) connect$netlink(r7, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000b4bffc)=0x7, 0x4) sendto(r7, &(0x7f0000000340), 0xac, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000000780), 0x2bb1f36c7597d46, 0x2, 0x0) sendfile(r3, r6, &(0x7f0000000140), 0x8fff) 22:03:51 executing program 4: mlockall(0x3) clone(0x1080000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) 22:03:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000002) fcntl$dupfd(r3, 0x0, r4) r5 = dup3(r4, r3, 0x0) write(r3, &(0x7f0000c34fff), 0xffffff0b) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x6}, 0xa) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$char_usb(r5, &(0x7f00000002c0)=':', 0x1) tkill(r2, 0x1000000000016) 22:03:51 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) recvmsg(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}}, 0x80, 0x0}, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x0, 0x0, 0x0) 22:03:51 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) write$P9_RREMOVE(r0, &(0x7f0000000200)={0x7}, 0x7) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) truncate(&(0x7f0000000180)='./file0/bus\x00', 0x0) 22:03:51 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ne0\x00'}) sysinfo(&(0x7f0000000000)=""/50) socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 22:03:51 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0xa, 0x300) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) keyctl$session_to_parent(0x12) getpgid(0x0) perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0) quotactl(0x0, 0x0, 0x0, 0x0) 22:03:51 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') read$eventfd(r0, 0x0, 0x0) 22:03:52 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000140)='./file0\x00', 0x0, r2) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000400)={{}, {}, [], {}, [{}, {}, {0x8, 0x0, 0xee00}, {}, {}, {}, {}]}, 0x5c, 0x0) 22:03:52 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000180)='security.evm\x00', &(0x7f00000002c0)=@sha1={0x1, "56c48e53ce6ea4018000003e126ed45a53d958a8"}, 0x15, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x2c3, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x2c3, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000240)={0xffffffffffffffff, 0x10, 0x1, 0xffffffffffffffff}) lseek(r3, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0) pipe(&(0x7f0000000080)) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0x323) creat(&(0x7f0000000380)='./bus\x00', 0x0) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000040)) r7 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) r8 = socket(0x10, 0x80002, 0x0) bind$netlink(r8, &(0x7f0000177ff4), 0xc) write(r8, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r8, 0x1, 0x0, &(0x7f0000b4bffc), 0x4) sendto(r8, &(0x7f0000000340), 0xac, 0x0, 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/keychord\x00', 0x8c00, 0x0) write$UHID_INPUT2(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000540)={0x8, {{0xa, 0x4e27, 0xffff0, @ipv4={[], [], @loopback}, 0x36af}}, {{0xa, 0x4e23, 0x7ff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x101}}}, 0x5f) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1) recvmmsg(r8, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$PPPIOCSCOMPRESS(r5, 0x4010744d) sendfile(r5, r7, &(0x7f0000000140), 0x8fff) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000200)="e5", 0x1}], 0x1) lseek(0xffffffffffffffff, 0x0, 0x4) 22:03:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet(0x2, 0x3, 0x0) vmsplice(r0, &(0x7f00000013c0)=[{&(0x7f0000000000)="8f", 0xfffffe73}], 0x1, 0x0) 22:03:52 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x60, 0x0, &(0x7f0000000500)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)}}], 0x0, 0x0, 0x0}) [ 72.323007] binder: 3007:3008 BC_INCREFS_DONE u0000000000000000 no match [ 72.330299] binder: 3007:3008 got transaction with invalid offset (0, min 0 max 0) or object. [ 72.339937] binder: 3007:3008 transaction failed 29201/-22, size 0-24 line 3199 [ 72.349551] binder: undelivered TRANSACTION_ERROR: 29201 [ 72.350764] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 72.360253] binder: BINDER_SET_CONTEXT_MGR already set [ 72.360262] binder: 3007:3016 ioctl 40046207 0 returned -16 [ 72.360628] binder: 3007:3016 BC_INCREFS_DONE u0000000000000000 no match [ 72.360705] binder_alloc: 3007: binder_alloc_buf, no vma [ 72.360747] binder: 3007:3016 transaction failed 29189/-3, size 0-24 line 3137 [ 72.410117] binder: undelivered TRANSACTION_ERROR: 29189 22:03:52 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, 0x0) 22:03:52 executing program 3: syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0xe}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @local, @dev={0xac, 0x38}}, '\x00\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0) 22:03:52 executing program 4: pipe2(&(0x7f0000003780)={0xffffffffffffffff}, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) getsockname$inet6(r0, 0x0, 0x0) 22:03:52 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) getpgid(0x0) quotactl(0x0, 0x0, 0x0, 0x0) 22:03:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000002) fcntl$dupfd(r3, 0x0, r4) r5 = dup3(r4, r3, 0x0) write(r3, &(0x7f0000c34fff), 0xffffff0b) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x6}, 0xa) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$char_usb(r5, &(0x7f00000002c0)=':', 0x1) tkill(r2, 0x1000000000016) 22:03:52 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)) dup3(r0, r1, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) 22:03:52 executing program 4: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x2c3, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000240)={0xffffffffffffffff, 0x10, 0x1}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) personality(0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0) pipe(&(0x7f0000000080)) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0x323) creat(&(0x7f0000000380)='./bus\x00', 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000040)) r5 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) r6 = socket(0x10, 0x80002, 0x0) bind$netlink(r6, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r6, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r6, &(0x7f0000000340), 0xac, 0x0, 0x0, 0x0) write$UHID_INPUT2(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000540)={0x8, {{0xa, 0x4e27, 0xffff0, @ipv4={[], [], @loopback}, 0x36af}}, {{0xa, 0x4e23, 0x7ff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x101}}}, 0x5f) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1) recvmmsg(r6, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) ioctl$PPPIOCSCOMPRESS(r3, 0x4010744d) sendfile(r3, r5, &(0x7f0000000140), 0x8fff) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000200)="e5", 0x1}], 0x1) lseek(0xffffffffffffffff, 0x0, 0x4) 22:03:52 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000280)='[\'posix_acl_access\x00', 0x0) write$UHID_INPUT(r2, &(0x7f0000004240)={0x8, "a4695c532a8840cd6fab5414a4526f2c79702ae7d3c6501814b0f7c64161e134364c387ed362863f529d0903deef786d215310eaa4c13c41250db8794e3f0bf1be5e5d1aac357c8b6d3f43c2219de07cd2219aa3c3f251252b86ebd758fdaf0e156ad88b2e624d1e405363aebe4aa0f31ce7f0e51706273ea3b7c2cbd7d77d314a4adb25485c5e5bde9b998ae95c0581836fa841e241749ca8b55b9c4705c4a8714bd7165f7d0999adb658a9507fa64c7a41e58fc346dca457710f13e9699b0e175c7523b55aa74a54e6cccfb463a2d6a89451f85ebd962b042418e5cc266abd4f41bad18eb2639379b55aaf6e89d92d01bfd995274711f8e72094b45a4b79b0995e38b28f6633237f105a7ec050896f833de886c1d31e3c14f48ba185043d7f3ee7231fbfd2cbd31ef3454027c26940714dca40c74dda73812edb9d2adc7354ce2633aeeadbc6c14e169d994d7ac1b68043fc1b3727b2f96706da8c3f3b3771d5beba69188fca57852785f46cb373c19a3374d8c041f92ab3820d2a1eb525237cce0f7a99e0c66cf681e7ea950e062cfaf0e8d8d834da0443703ea2b63568d29cd2d7199b6ef6784e0dc8a8979841d4ddea77b998619e8eae45a9ea9bb1464ad2aa2df228e60a65b5e83ad369bc367b69a8207d8f0904b4c389c973ec705b73b666e2f298d10f57f098ed0af810231358dd151ea5bc03675bf1c9fe6ac570ad628152c8a2b8570d849c8a0460b617fabda499cd10aa0e366b8320e14b1bec56c6a96165d23b9806c0c4f86d2d4677a95a6c0e627aae99c235b06bf1432e7c81dd827e43fff9ecd24f7531ca4cfacf478f66ed764fcf53d773f4b9abe8185a661fdc9727a478f422a4bb1a7edeaf68b1e2ffa68e3068a7de077cedc7554de7a90dd2b2483a47814cc7bc85eb1a972246778db8b33bd522ec79aefa3529a000c58b570b940e55c0484386325f4097b13bf337759b0bec9321fe39e521a546a7563eb675a61ce680dee112f368343ca56332c28f44f95024ae1d77b411abe6ed80c645ce69daee65e2505d13b2d0f2f1dfe35ea7c5340c6eb70c4c34350fbcb9945e2ff4759baf55b01db49b1a7d1011eaee4811150e7f5caf7e93b0746efbc52f5733c74e27b8f4631d3852d544eef295eb18a2bf2369679c2bd9a9c5939803c6ea153d9c15dd4112789060da7b1d5b7e41b718a68a10f1d4f3e3298c16c5ab69a6c7187ddc82f2d3e8cd737afb7187dea3076359fac2b40917305d9f831b2ea698051f6560fc3cc6d24dbd148abe8e58f7d8127a9615ba027aa35aafc88debf06dab3ca38e01977102164747b0eb568009887342bbc14e274e1d12729b770887f9aea18d2ad6441849842d51d41907428ab28e36e815103360ef3c121d5a602231413d2825c0bc1a2f04614920b113e871ae1da79eb4f3a8528effc9e738c48eb2ba7843332b85bcc4d4f4cbce5090967fd6e88cd63a3d03f5c79f36ccc45be3941b3b39fb19e51298b8671930a5772ed878b057572b6db8ece6ac3f46a062a8fccd0a3b9133c0573419e3a2d5b7ab5ca40033e35918449d04428ecb9febcabeff937fba5ee21e75707de789432ec0680d3f952927ebb85e5609aebf96e8c84d88056d369493c875ce0f9e8ae5fac48912a7689914f9be71773d3f004306406cdb761c127382e70a77ac6da6aa98d57a575b218b72e2d90a66bcc130600b52765da0b017bab0e3f3e3689cf1220329ea86a03cd2f6d2b54c95364c839ebbc315153dfbc97d6961d7f0e6db56a93fa1d7afeaf479fe47ac35c92a398be921769f3f7c422cfd5ffc372f85ee3f619974b8c627568430c64d84f6aaf69a1276a7cf4cf57c057257181f15e82fd37271278da6235f34891fc702894cca12001e263d74a6e18a45bc0ebd1600987c3237804507a4923f4700ebcca3684ef35f8e4c0a8b9875cf92aec862519f5c0cdcb1d5b90710a88d39bb919c0820f25685085d179bd48ebce21c4ed697a9def3ad887eb4652ac5919ffb2ff34e78d53123e9c1ae9e50447d77560c3702d818ba1e9f848123f31ca6236457daeda138846b55017b426fd8fe0e65b5c1d8d936bda2e7e9f67ec0faaada6ebafb2440071f0c50aac2f0a5059dce32998799524bd6412c13bbee27b891de386bdc7b4a96a3e495300e82ec8d837b95b9af4b1171ea7640a27f27b3befeed4b864b5442f889b769206d6767b5815a74df960824fbcab31ab93281db2b651a838b790e52fb4c2ed29358cfe44c85f5453af706eb96ebc3140697eb914e803f3965614c15ca7fb5f6c632007fe7c56acdbdb0a197341d44f024cbe174244c0acfb1bd29f0d628d037956ad4434aa3a71ecd29556f3a23fbfc3735904c2ce5e84fd53bbc43e924940f307a81706556c45f53630c311aaae9ce4565aed2339d95bbf3107a90a3b8a6e95e8415a2ae7b8841dac758d52b7bb22cbe0ebad79900e9c7c40cca8799cca66b3571fbecf68e3ea2e3880bc2cbed1ad1dabd69593e1a968da410c5d8538fdc8199ee310a3a2b14c642e388e9f1413bb90f876aa478006554a01f6b0d41d2f5c8b7ff20d7cb79afd13f6ab3f1331a8de154a60da33aac5310c174cd54a79985772fce707da4a9ce7c5b7b60e9a9a58cd0aa4343c45d4acca17b04214076800d3ab346142ebe4bdf3c7094e73a552b1929af8c5a5603188cb751b35a98314694ecbf71c05e7997a322eec7a659c44899f7c53c8d3477d3c36f21577620813b41223aabdc72d772a2f60deb3b55bf1b5c1455371f14b0ad57af2cf6cc5b25793935d9d1fe24a2c54b5d1e45b0d69c7f697ba26595bd30e8361adee3e84b2bb08410435ae348947b1c389d5bb5a97b4654241f9b9bc07d968a6d963200e0f4eed7dc80780dadd6b570a2c5a6e9dd93712e6103bce24db15d906ba03085c06d5d963d3452f742a386661b1679f9a2cae3b9debf35c01a82a5e869cc63aabb113f6a37a3454b134108dfec975ac6192be9c699321ef5280e82e13a58d6c6f68d8d3abcde2d2fd047d8e08650c715932bedc0afbadbfad32dab976687c4d7dfc40d95399716f410d75e8d6b4e5ad85562e5604d1e414cecc3941b2e9cfd1aa2a6f31b2d509420dab96d19fe6627420c0c454f48b9263d2af216ab0858590005d57412234755b706da1a7a145fce8e007969695d00bb462270ac95fd1b483686ff6db7ffe576a8df61d80604443452236e27adbb46d4a70f2e7ccbf1735a9e9fce0f56859fa00c011742f5ded1a3631a8addbd1c412f4b404a6c7164b33f378c95395b8ce6185f90c93a9f6b33f905b03c2089554bef2991428d4d2b27e001926e714eef50ba21b7a9c048cbf2d72576a82b1145f40c9e8a2dd79684fd5c3319a8076b5f88632930542348241ee0c0b737c9474a4448d2a7d1ad2d81a5bcd4566520b678aedbb3c54cdc7dd6d03bb60af951eee9dfa5b92ebd2b6e4edf1cae7feee75c901b8fbef195921076aafce7c34732c3c67093587e25860e94028768b98c1980038fce54fb76d2531b9c3f945630ee9ec1afa2acba1e66d2ccc8b966c0470d5528cfc119c0ba14cf84c5c2a2fbcf99657c3c73ab20b32547275bba54d45eaf49e86622467e82d173d8dcaeaf5eba2a24abbdbeb5bcae6ff222d49eff8994c31297ee3f53ed0595ca90aa6315d30cffb5fdf27bd68f78ff547d4e1b443161c130cdb02f38bd0c5fc5eb86dc8a7cd9c3956d8aec7b9f4d342edffef3b819657f0891be01b974409e7a5b2ae63ac68bd7696e1b6ab1da8ee48ee955a3a12d14ce067c9c3c8b752e37c843fa9f5e9f3a1fff75ad6ff6366b34464a397bf6c74a6488912f2bb8fb379d1806a9a635d969b5818eaf11b7cd7377cc684d71f3745082efa2f49f64a057050c5f5c171b93a64dc93bdf89a181a70d38dae0731e5863c62735d7a4b28419abd22126a00fc9a5a75a74691caddc54d5426b81df6448efebc6b5105c4d648dcc23ae4f9ec7611aaef8030ea44d38952dd9cb32ddb484d3cd4e6b0174c58fd7288352f1639f78f2fd2113523462c4999a92e5d9e0ea1541c3ff9b749b5a37687f0499b1a13fb2590f7c76a1573f673ad8503845257c588c3049350e97ed93e24312ff82620d42f7229c4ac1094203e0b2022e9a6173d000e7644f867bfb7a142d4fc2e35a54de4e9e23516cc5cdce027b62ef24fc32cd10890e4f2fcf26a0f7b40039225ff19ff35ba97d9ecdb6e6d2cd211663dcc0dee1d41409f2d8410bf0bc9ceb490d292a3d97cc34ebc647354d8487b21c306e80b45dc57816924fee5e24e30915967e18a952b007da91d270af88fab23dd420fdb102387503280d436f644ced6868a2ab7ab2b1374969db72ea9c612636b858547a9bb187d2639fc30be948760bc634e572718efd0dad2fe4f6aaf44b0c5823e6854726f1d46bf41dd8691e58a77bdcb9afa63f3b0e1fbb0e5cafa7605406769d62a3f7e399e7d6c138adb02de7f4843783b0dc06f4c4539b02d565e79e81eba20609ba8a8914f74899ab42ac92b03580cfb5e457ca5d0b747a69ab9edd278cb59f7e6bd381a483d92dc866e9ccaf780b91a6f6993bab6f73d52593fe2cda79561ffbed677f5742f7844d284cfd9da34cb64b423073a4b3cff07fa6f18eea3a3ef843146870763c766d16c782517acfa89fb3d273e70dc8ba22a56f1d840c5dc87c31e4df33938c0a0dc78ea35872ae89b23290e786baf581ba3bcd995e5bddf22e6a54a6d6ae093278f6fbbd3e514cfea144d6901073e547d143c329ea2a1f97ab9aa766a2c0324890c8cb1aec1b21c88edfbb8f0d814848f31bd4a0370cc3cba4765c50975c8349da805df6fe1b67904b5aa70687e61f6bef1179e30a9b795704d11bdd7aba532bc48528574a3dfadd9f281c0cbfecd991e32c901b8d7cc57744ce5158f2259473f37e025c3f1ddae6c51cf50c2bc10bbdb17d01ac0f4807043cdadb0530283e52b6e82516603a1d7079bb45ae71c15b23a9877bc2ae706da4331b9ac9ab6e1ec8fd4041894ce2c989dc1c95802e3d443ff2cf05ec7e8348df32ae0202420dadbf6e23de917c76ab512426af82adea7a5fd72fdef2801851905ec73b83bfc8c6e63e572616a687851b8afa9e3f6c1ee357b6ffa917eeacd1005c67bced235f61436cb44dd9bf6842c8ea5ba281f77531e1d08a7a09ef0c19d2cac655bfb81ac4b7ad40083d09d9b83e7d56ada5b972cf6ee53ca693af576fe22cfde1796927aa2b54378884a93e80ecc992cf298ba99e4ad5b9d135af6e237f24c519f078b30ab1fa028438976935751d840a6078ad33f1229adf5663b5ba3c8abcff8ff30183446a62aae8a0937f8bb418e0d0c984c441271ccfc3984cdc23793346cfc36809f5ceec330e73e4f13d5a17726526b6e39931a8de1fb1d998680747f01724b117710759b9d29bf68fda8529473eaeb28182e502220a6bf5cdca4c118d2edaefe1ffac007bdb8f246407dba1f7ae277298b765e448b501e1c57e5f9e620fb6a894506d7e81fa92bd5571b32edaa3fbeb1a84e9dbd2d2e61d31bfface3ad615837f3fa95f2ed37c9e96cc045baedb79ad9c7ff37bd96798e6cce6a8d2fc8453c3a44865e1fae5e5fb551126038ef2ed4f6f7b6e186072aec9d62b8670f972eabdf12f13a1d3be51d037b25ee0552772c1fcfecccfa2bb445a34daeb79d4a1bcfbf70e718091dd72ca46069731c38775136d7256e445b58419ea845dd0f65a8a1daf88c750731a0092297c4c964005bc9cf9ec215f07c18a395b350cab70658bbb", 0xfffffffffffffdd1}, 0xfffffe48) sendfile(r0, r2, 0x0, 0x20020102000007) ioctl$int_in(r1, 0x5452, &(0x7f0000000480)=0x845) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930000) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x332, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x80401, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) sendmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) dup(r3) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000060c0)={{{@in=@remote, @in6=@rand_addr="20bbcbd1865253e3e58aa219d6ca6440", 0x4e24, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x67}, {0x0, 0x183, 0x3, 0x7f, 0x61553a0b, 0x9, 0x1, 0x4}, {0x20, 0x80000001, 0x2000000000000, 0x9}, 0x9, 0x6e6bba, 0x0, 0x1, 0x1, 0x3}, {{@in=@empty, 0x4d3, 0xff}, 0x0, @in=@loopback, 0x3504, 0x0, 0x3, 0xfffffffffffffffc, 0x0, 0x5, 0x6}}, 0xe8) mount$fuse(0x0, 0x0, &(0x7f00000000c0)='fuse\x00', 0x200800, 0x0) 22:03:52 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}}) [ 72.706232] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 72.789714] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 22:03:52 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000180)='security.evm\x00', &(0x7f00000002c0)=@sha1={0x1, "56c48e53ce6ea4018000003e126ed45a53d958a8"}, 0x15, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x2c3, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x2c3, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000240)={0xffffffffffffffff, 0x10, 0x1, 0xffffffffffffffff}) lseek(r3, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0) pipe(&(0x7f0000000080)) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0x323) creat(&(0x7f0000000380)='./bus\x00', 0x0) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000040)) r7 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) r8 = socket(0x10, 0x80002, 0x0) bind$netlink(r8, &(0x7f0000177ff4), 0xc) write(r8, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r8, 0x1, 0x0, &(0x7f0000b4bffc), 0x4) sendto(r8, &(0x7f0000000340), 0xac, 0x0, 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/keychord\x00', 0x8c00, 0x0) write$UHID_INPUT2(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="3f663639309d5f6d2fb010f8f8b962f3c902940be68391ac7333b580d6adeb7659e0bc4990117ce65f113e5a5980b3daeefce87d77e14ff8233729872310b7ca712bc4aaf1b538302bbf76dc91e921a7422d4da6d8a61cf410444341bd8c11dfdfdbf13822b34d53e595b36508cbf69d19f04abb04e71f73f6e2f06321b46b8e46577a7ccca24b3c8a697e1ca6e4ef32638f6b4091eadd19ee1aeafc2def7db3efed99799c36697f80f52b27d68956338c322a3fc91addd1e12e16e4bee116fe1d3dfe0e0f82ac52f2788b7cf3e298e93cec532d7bc3e40cb0c927d8339d74a82d019e7e050cfdf6c189dcbd8f1bc466cf29d01f3cb3a2f864771caffaa211ed7073dd39295f579460aea9b431e6fb9edb9b8b840b0f23215612648b4b9f2dc99e23a4ac58ac9a14304bbcdf11de7c95eb9c812d1e21a97ee74e52b84d85516d928c2bbd78a99263725be57299"], 0x1) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000540)={0x8, {{0xa, 0x4e27, 0xffff0, @ipv4={[], [], @loopback}, 0x36af}}, {{0xa, 0x4e23, 0x7ff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x101}}}, 0x5f) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1) recvmmsg(r8, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$PPPIOCSCOMPRESS(r5, 0x4010744d) sendfile(r5, r7, &(0x7f0000000140), 0x8fff) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000200)="e5", 0x1}], 0x1) lseek(0xffffffffffffffff, 0x0, 0x4) 22:03:52 executing program 0: mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) 22:03:52 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)}, 0x1800}], 0x0, 0x0, 0x0}) 22:03:52 executing program 3: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 22:03:52 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)}, 0x1800}], 0x0, 0x0, 0x0}) [ 73.002268] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 73.019161] binder: 3065:3066 got transaction with invalid offset (0, min 0 max 0) or object. [ 73.028391] binder: 3065:3066 transaction failed 29201/-22, size 0-24 line 3199 [ 73.046438] binder: undelivered TRANSACTION_ERROR: 29201 22:03:52 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)}, 0x1800}], 0x0, 0x0, 0x0}) [ 73.086531] binder: 3070:3071 got transaction with invalid offset (0, min 0 max 0) or object. [ 73.096253] binder: 3070:3071 transaction failed 29201/-22, size 0-24 line 3199 [ 73.111368] binder: undelivered TRANSACTION_ERROR: 29201 22:03:53 executing program 3: mlockall(0x3) clone(0x1080000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) creat(0x0, 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) [ 73.159848] binder: 3074:3075 got transaction with invalid offset (0, min 0 max 0) or object. [ 73.174723] binder: 3074:3075 transaction failed 29201/-22, size 0-24 line 3199 [ 73.198238] binder: undelivered TRANSACTION_ERROR: 29201 22:03:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') preadv(r1, &(0x7f00000017c0), 0x33d, 0x0) 22:03:53 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)}, 0x1800}], 0x0, 0x0, 0x0}) [ 73.434080] binder: 3082:3084 got transaction with invalid offset (0, min 0 max 0) or object. [ 73.444230] binder: 3082:3084 transaction failed 29201/-22, size 0-24 line 3199 [ 73.476643] binder: undelivered TRANSACTION_ERROR: 29201 [ 73.559469] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 22:03:53 executing program 4: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x2c3, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000240)={0xffffffffffffffff, 0x10, 0x1}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) personality(0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0) pipe(&(0x7f0000000080)) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0x323) creat(&(0x7f0000000380)='./bus\x00', 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000040)) r5 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) r6 = socket(0x10, 0x80002, 0x0) bind$netlink(r6, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r6, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r6, &(0x7f0000000340), 0xac, 0x0, 0x0, 0x0) write$UHID_INPUT2(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000540)={0x8, {{0xa, 0x4e27, 0xffff0, @ipv4={[], [], @loopback}, 0x36af}}, {{0xa, 0x4e23, 0x7ff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x101}}}, 0x5f) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1) recvmmsg(r6, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) ioctl$PPPIOCSCOMPRESS(r3, 0x4010744d) sendfile(r3, r5, &(0x7f0000000140), 0x8fff) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000200)="e5", 0x1}], 0x1) lseek(0xffffffffffffffff, 0x0, 0x4) 22:03:53 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001480)={{{@in6=@mcast1, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, 0x0) fchownat(r0, 0x0, r1, 0x0, 0x0) 22:03:53 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000000380)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x900) 22:03:53 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)}, 0x1800}], 0x0, 0x0, 0x0}) 22:03:53 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000180)='security.evm\x00', &(0x7f00000002c0)=@sha1={0x1, "56c48e53ce6ea4018000003e126ed45a53d958a8"}, 0x15, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x2c3, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x2c3, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000240)={0xffffffffffffffff, 0x10, 0x1, 0xffffffffffffffff}) lseek(r3, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) personality(0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0) pipe(&(0x7f0000000080)) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0x323) creat(&(0x7f0000000380)='./bus\x00', 0x0) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000040)) r7 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) r8 = socket(0x10, 0x80002, 0x0) bind$netlink(r8, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r8, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r8, &(0x7f0000000340), 0xac, 0x0, 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/keychord\x00', 0x8c00, 0x0) write$UHID_INPUT2(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000540)={0x8, {{0xa, 0x4e27, 0xffff0, @ipv4={[], [], @loopback}, 0x36af}}, {{0xa, 0x4e23, 0x7ff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x101}}}, 0x5f) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1) recvmmsg(r8, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$PPPIOCSCOMPRESS(r5, 0x4010744d) sendfile(r5, r7, &(0x7f0000000140), 0x8fff) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000200)="e5", 0x1}], 0x1) lseek(0xffffffffffffffff, 0x0, 0x0) 22:03:53 executing program 1: 22:03:53 executing program 1: 22:03:53 executing program 1: [ 73.763127] binder: 3094:3101 got transaction with invalid offset (0, min 0 max 0) or object. [ 73.795482] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 73.798479] binder: 3094:3101 transaction failed 29201/-22, size 0-24 line 3199 22:03:53 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)}, 0x1800}], 0x0, 0x0, 0x0}) 22:03:53 executing program 5: 22:03:53 executing program 1: [ 73.799216] binder: undelivered TRANSACTION_ERROR: 29201 22:03:53 executing program 5: [ 73.859118] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 73.880231] binder: 3109:3110 got transaction with invalid offset (0, min 0 max 0) or object. [ 73.896129] binder: 3109:3110 transaction failed 29201/-22, size 0-24 line 3199 [ 73.910337] binder: undelivered TRANSACTION_ERROR: 29201 22:03:54 executing program 4: 22:03:54 executing program 1: 22:03:54 executing program 3: 22:03:54 executing program 5: [ 74.668189] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 22:03:54 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x80000001) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) creat(0x0, 0x0) io_setup(0x0, &(0x7f0000000140)) 22:03:54 executing program 5: 22:03:54 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)}, 0x1800}], 0x0, 0x0, 0x0}) 22:03:54 executing program 4: 22:03:54 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x40000000050000}]}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) 22:03:54 executing program 1: 22:03:54 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000001780)='/selinux/load\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200055, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[]}}, 0x0) write$selinux_load(r2, &(0x7f0000000040)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f030002000000"}, 0xff) 22:03:54 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0x5, &(0x7f0000000380), 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, &(0x7f0000000200)) 22:03:54 executing program 5: socket$key(0xf, 0x3, 0x2) setreuid(0x0, 0x0) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x6}, 0xc) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e5e2) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x5dd7d56a, 0xfffffffffffffd3d) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r2 = openat$cgroup_subtree(r1, &(0x7f0000000440)='cgroup.subtree_control\x00', 0x2, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x9) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x5654807, 0x0) syz_extract_tcp_res(0x0, 0x9, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x10000, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x342121753875fb3b, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) statfs(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)=""/20) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xffffffff00000000) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000080)=0x4) ioctl$TCGETS(r0, 0x5401, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='ZT\x00\x01\x00') getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000044c0)={'ip6gre0\x00'}) 22:03:54 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) setitimer(0x2, &(0x7f0000000000)={{0x0, 0x7530}, {0x0, 0x7530}}, &(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x3b, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000680000000000000018000000000000", @ANYPTR, @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) [ 74.859540] binder: 3127:3132 got transaction with invalid offset (0, min 0 max 0) or object. [ 74.895723] binder: 3127:3132 transaction failed 29201/-22, size 0-24 line 3199 22:03:54 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000001780)='/selinux/load\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200055, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[]}}, 0x0) write$selinux_load(r2, &(0x7f0000000040)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f030002000000"}, 0xff) 22:03:54 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)}, 0x1800}], 0x0, 0x0, 0x0}) [ 74.912048] binder: undelivered TRANSACTION_ERROR: 29201 [ 74.955889] binder: 3148:3150 got transaction with invalid data ptr [ 74.986989] binder: 3148:3150 transaction failed 29201/-14, size 104-24 line 3155 [ 75.023473] binder: undelivered TRANSACTION_ERROR: 29201 22:03:55 executing program 2: eventfd2(0x2, 0x80000) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000340)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000580)=0x6) write(r3, &(0x7f0000000140), 0xffffff0b) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000700)={{{@in6=@ipv4={[], [], @remote}, @in6}}, {{@in=@empty}, 0x0, @in=@multicast1}}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000600)={'filter\x00', 0x4}, 0x68) r7 = socket$inet6(0xa, 0x400000000001, 0x6) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f00000001c0)=0xffffffffffffff5f) ioctl$RTC_VL_READ(r3, 0x80047013, &(0x7f0000000400)) sendmmsg(r2, &(0x7f0000004180)=[{{&(0x7f0000000680)=@ax25={{}, [@remote, @remote, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80, 0x0}, 0x10001}], 0x1, 0x0) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, 0x0, 0x0) r8 = dup(r7) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"]}}, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x12, &(0x7f0000000380)=0x83, 0x1fb) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x2000, @loopback}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0xdaf5, @loopback, 0x1}, 0x1c) write$binfmt_aout(r7, &(0x7f0000000300)=ANY=[@ANYRES64=r6], 0x8) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) 22:03:55 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)}, 0x1800}], 0x0, 0x0, 0x0}) 22:03:55 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev, 0x0, 0x0, 0x0, 0x100000000000001, 0x3, 0x4}, 0x20) close(r0) 22:03:55 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet(0x10, 0x80000, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r2, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r4, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r4, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000140)={0x8}) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$UI_SET_PHYS(r5, 0x4008556c, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r5) sendto$inet6(r0, 0x0, 0x0, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000780)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000b40)=[@ip_ttl={{0x10, 0x0, 0x2, 0x6}}], 0x10}}], 0x2, 0x0) 22:03:55 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_SET_PHYS(r1, 0x4008556c, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_SET_PHYS(r2, 0x4008556c, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$UI_SET_PHYS(r3, 0x4008556c, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UI_SET_PHYS(r4, 0x4008556c, 0x0) accept4(r0, &(0x7f0000000040)=@nfc, &(0x7f0000000140)=0x80, 0x40000) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$UI_SET_PHYS(r5, 0x4008556c, 0x0) r6 = dup2(r4, r5) sendto$inet(r6, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f00000000c0)=0x2, 0x143) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 22:03:55 executing program 5: r0 = getpid() ptrace(0x10, r0) sched_setparam(r0, &(0x7f0000000040)=0x3f) r1 = socket$inet6(0xa, 0x4000000080002, 0x88) socket$inet6(0xa, 0x80000, 0x7) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0x800}, 0x162) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x2, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x0, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40001ab, 0x9400) rt_sigreturn() 22:03:55 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)}, 0x1800}], 0x0, 0x0, 0x0}) 22:03:55 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) ioctl$UI_END_FF_ERASE(r0, 0x4004556a, &(0x7f0000000080)) r2 = socket(0x5, 0x5, 0x5) r3 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r3) setsockopt$inet6_tcp_int(r3, 0x6, 0x0, 0x0, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000200)=@dstopts={0x87, 0x0, [], [@ra]}, 0x10) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000240)=0xc) setfsuid(r4) sendmsg$nl_netfilter(r2, &(0x7f0000001380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x50000c2}, 0xc, &(0x7f0000001340)={&(0x7f0000000140)={0x11d4, 0x1, 0xc, 0x1, 0x70bd28, 0x25dfdbfd, {0x3, 0x0, 0x9}, [@generic="76150866148d6528d7334d", @nested={0x188, 0x7c, [@typed={0x4, 0x66}, @typed={0x8, 0x21, @u32=0x20a9}, @typed={0x8, 0x38, @ipv4=@broadcast}, @typed={0x70, 0x82, @binary="1bc443f5f35a48a7ecdd49cd35c93eaa475803e39304288219caedb9cec2096bdd615ad4ff35dd4b3b8fd83ee5a84963ab1be90ccf669185ba2071d4fce1c5c6a6b4b6f498a5a680150fe19feb5cd7c6ffc92f28a6f04de2cbf2a52913f9948f952195f84e7bbd4076c755"}, @generic="b540410c012533bf1d239c5ae19959c8a9da5640d048b7ae71cd8289b7386061a6a2e2aa1836c951ec8e6c9653aba389f8ebaafe707b8d9c0f7c2a88fe66e761c14193ee60fafceaedc184f7f0423743d138c3cb0b6d719d790b38a87fe8c62cc66115e19a7d338717cea1dfe17e", @generic="804cd1432e48a32ac7862e77842f22b6c90489a325f64746c07df5ae74198319746381edee4ab9ad5ea671ee8986df60ad6bd6fc9ee37e36035c57f3711b3c21bf7309a007e915891bc22fe1e4b259e8cc166597c707918052b05a776483b90e2710baf5dc7b2bf75f0a387c522425ae6163d43278d39047db69877f024884dab66ab99786289aaf43", @typed={0x8, 0x21, @u32}]}, @nested={0x102c, 0x1a, [@generic="de5e743ee3938253", @generic="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", @typed={0x8, 0x2c, @uid=r4}, @generic="097b485f8d01f6d6beed2b59898d74cadd45c2ce23"]}]}, 0x11d4}}, 0x840) [ 75.375031] input: syz1 as /devices/virtual/input/input45 [ 75.395456] input: syz1 as /devices/virtual/input/input46 22:03:55 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)}, 0x1800}], 0x0, 0x0, 0x0}) 22:03:55 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x1e7b02) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000001e80)='/dev/keychord\x00', 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000001ec0)={@initdev}, &(0x7f0000001f00)=0x14) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2400c0, 0x0) write$P9_RVERSION(r1, 0x0, 0xfffffffffffffe76) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'nr0\x01\x00', 0x4005}) write$cgroup_subtree(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="aa27a5886a9e8ffd4a30ae7aa24b86871384f19ca38eb91b1b0400000000000000a148e3357c2527f366437025beafbfba031d1fa4"], 0x5) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r3, 0x107, 0x6, &(0x7f00000005c0)="f8f550e694010801d5b7bf7014aa640c3292017b4cb5a0fb9fb214412c093f5eedac09e42fcd5450a078ded0382ad71440e1a84db649bd74f35ec7ad5c5a169483afde1c3820af0ce5369d6a59447529e2da8a4bab0a7c9cd593d4b345c4d824f86176f1b5ace7d03efd198aafdbe86b79d86e6915e21fd167b1b2a7124661d653851b3d02e19e29c9bed253c7874501f3c7e0b10feea69587c1e5e1713f230e48861f71794a555dd8d55ff41faf6066b93b0e9e011f985702215bd5854dc986c79ed6989240712362a3758223e59312ee3c41a28f4fb0ce46f500e127c92e480f6b91eaf3be571f76954c27e514678b34613b99b4ea5cfb459196afdc822ade413150638f4f18a8110e5f42209ba6fc97a7a4943ce00f408ae75c05ed99c07c62625f46e5a8eb825e399ee37066d8e4fb618cce976df1d92dfe57c98443fbc7df37b721290737121c481506a9bd837d622e7948ea448bbfcabbe96128c6350b", 0x0) read(r3, &(0x7f0000000100)=""/254, 0xfe) ioctl$sock_SIOCSIFBR(r1, 0x8941, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r0, r2) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) fstat(r6, &(0x7f00000003c0)) r7 = getegid() r8 = getgid() r9 = getegid() setgid(r9) setresgid(r9, r7, r8) bind$unix(r5, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) close(0xffffffffffffffff) write$P9_RLOPEN(0xffffffffffffffff, 0x0, 0x0) eventfd2(0x20000fff, 0x180000) r10 = open(&(0x7f0000000040)='./file0\x00', 0x20141042, 0x40) ioctl$sock_SIOCOUTQ(r10, 0x5411, &(0x7f00000001c0)) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendto$unix(r5, &(0x7f00000004c0)="e4be6e36c9240fd5d17aa006fcaca71353d6e87ee862cde2b2d3dc7a80e59c668f3cbc0a0791e48ea98025599c3ffed9f659486c5332e8e70e0e17476ede54956aa70cc9bfd65c51402639b1b297bf058b79cea6def6373622b5adfc3af2c793c340bab25a18ad6a61def257f551c0279d3f4d6884ebb105b9efda7a02bc20d6577401d6a9ccc6e0276e64403792cbda04a25f662d557716a28b99117f517a2a6d44e10204776c8aae6afb02a6ec4b9c49922482edf5d8c038e3a51581a62f4212e7a6256097a70fcdbcd2bcb0a0", 0xce, 0x0, 0x0, 0x0) write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0xff91) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') [ 75.420542] input: syz1 as /devices/virtual/input/input47 [ 75.492319] input: syz1 as /devices/virtual/input/input49 [ 75.552846] input: syz1 as /devices/virtual/input/input50 [ 75.559919] binder: 3201:3203 transaction failed 29189/-22, size 0-24 line 3014 [ 75.572448] input: syz1 as /devices/virtual/input/input51 22:03:55 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)}, 0x1800}], 0x0, 0x0, 0x0}) 22:03:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) listen(r0, 0x80) close(0xffffffffffffffff) ptrace$getregset(0x4204, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) shutdown(r1, 0x1) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, &(0x7f0000000080)=0x1c, 0x80000) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0), 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) [ 75.604617] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.614994] input: syz1 as /devices/virtual/input/input52 [ 75.676387] binder: 3214:3215 transaction failed 29189/-22, size 0-24 line 3014 [ 75.825009] binder: undelivered TRANSACTION_ERROR: 29189 22:03:55 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0xd8}}, 0x0) clock_settime(0x3, &(0x7f0000000040)) r0 = socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet(0x10, 0x80000, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r3, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r5, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000140)={0x8}) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) recvfrom$inet6(r6, &(0x7f0000000240)=""/175, 0xaf, 0x10000, &(0x7f00000000c0)={0xa, 0x0, 0x8, @mcast1, 0x7}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r7, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r7, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$LOOP_SET_FD(r6, 0x4c00, r7) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0x8, 0x10, 0x3, r6}) r8 = socket$inet(0x10, 0x80000, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r9, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r9, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) fcntl$dupfd(r8, 0x0, r9) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f0000000b80)={'filter\x00', 0x7, 0x4, 0x4a4, 0x280, 0x0, 0x140, 0x3c0, 0x3c0, 0x3c0, 0x4, &(0x7f0000000100), {[{{@arp={@loopback, @broadcast, 0xff000000, 0xff000000, @mac=@random="859cdda3c1b8", {[0x80, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff]}, 0x1, 0x9, 0x2, 0x4b7d, 0x29e, 0x3, '\x00', 'ifb0\x00', {}, {}, 0x0, 0x12}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={[], 0xb}, @empty, @remote, @dev={0xac, 0x14, 0x14, 0x12}, 0xf}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @remote, @remote, 0x2, 0xfffffffe}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0x4, 0xffffffff}}}], {{[], 0xc0, 0xe4}, {0x24}}}}, 0x4f0) read(r1, &(0x7f0000000200)=""/250, 0xfffffffffffffef6) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000000)=0x96f) sendmmsg(r0, &(0x7f0000000180), 0x400024c, 0x0) 22:03:55 executing program 4: mkdir(&(0x7f00000004c0)='./file0\x00', 0x2) r0 = socket(0x10, 0x2, 0x0) syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f) open(&(0x7f0000000e00)='./file1\x00', 0x0, 0x0) mount(&(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='mountstats\x00') sendfile(r0, r1, 0x0, 0x80000008000000b) socket$inet6_udp(0xa, 0x2, 0x0) 22:03:55 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)}, 0x1800}], 0x0, 0x0, 0x0}) 22:03:55 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)}, 0x1800}], 0x0, 0x0, 0x0}) [ 76.030922] binder: 3225:3227 transaction failed 29189/-22, size 0-24 line 3014 [ 76.053594] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25955 sclass=netlink_route_socket [ 76.067331] binder: undelivered TRANSACTION_ERROR: 29189 [ 76.089797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25955 sclass=netlink_route_socket [ 76.118506] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12380 sclass=netlink_route_socket [ 76.133702] binder_alloc: 3231: binder_alloc_buf, no vma [ 76.151103] input: syz1 as /devices/virtual/input/input56 [ 76.167172] binder: 3231:3233 transaction failed 29189/-3, size 0-24 line 3137 22:03:56 executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x400000004805, 0x8) ioctl(r4, 0x801000008912, &(0x7f0000000340)="0a5c2d023c126285718070") ftruncate(r4, 0xffffffff) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0xb75100, 0x0) bind(r5, &(0x7f0000000940)=@un=@abs={0x0, 0x0, 0x4e20}, 0x80) bind(r3, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x2, 0x2, 0x2, 0x3, {0xa, 0x4e23, 0x2, @loopback, 0x8}}}, 0x80) write(r1, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(r0, &(0x7f0000000180)=0x7, 0x396) r6 = socket$inet6(0xa, 0x400000000001, 0x0) getrlimit(0x2, &(0x7f0000000240)) r7 = dup(r6) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000500), &(0x7f0000000540)=0x14) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x45}}, 0x1) ioctl$FS_IOC_SETFLAGS(r7, 0x40046602, &(0x7f0000000640)=0x1) r9 = inotify_init() lseek(r9, 0x4, 0x4) ioctl$UI_SET_SNDBIT(r7, 0x4004556a, 0x0) r10 = socket$inet6(0xa, 0x1200000002, 0x0) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f0000000080)=0x581, 0x4) sendto$inet6(r10, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r10, 0x29, 0x100000031, &(0x7f0000000140)=0x8, 0xfd73) recvmsg(r10, &(0x7f00000000c0)={0x0, 0xfffffffffffffe14, 0x0, 0x0, &(0x7f0000000040)=""/36, 0x24}, 0x2002) r11 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/status\x00', 0x0, 0x0) getsockname(r11, &(0x7f00000001c0)=@rc, 0x0) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r12, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r12, 0x6, 0x9, &(0x7f0000000100)=0x7fffffff, 0xfeef) bind$inet(r12, &(0x7f0000738ff0)={0x2, 0x4e21, @local}, 0x10) connect$inet(r12, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r12, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @timestamp, @mss={0x2, 0x8}], 0x3) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r13 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r13, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x12, &(0x7f0000000380)=0x83, 0x9) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r14 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r14, 0x2007fff) sendfile(r7, r14, 0x0, 0x8000fffffffe) 22:03:56 executing program 4: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r2 = gettid() recvmmsg(r1, &(0x7f0000000600)=[{{&(0x7f0000000980)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0xffffffffffffffb9, &(0x7f0000000080)=[{&(0x7f00000007c0)=""/99, 0x60}, {&(0x7f0000000000)=""/54, 0x36}], 0x2, &(0x7f0000000840)=""/191, 0xbf}, 0x8001}, {{&(0x7f0000000900)=@x25={0x9, @remote}, 0xffffffffffffff70, &(0x7f0000000140)=[{&(0x7f0000000740)=""/86, 0xffffffffffffff3e}], 0x1, &(0x7f0000000540)=""/153, 0xfede}, 0x5}], 0x2, 0x2000, &(0x7f0000000040)) write$P9_RRENAMEAT(r1, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup3(r0, r1, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000240)=""/175, 0xaf, 0x10000, &(0x7f00000000c0)={0xa, 0x0, 0x8, @mcast1, 0x7}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r4, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r4, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000700)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x288e0940ae625689}, 0xc, &(0x7f00000006c0)={&(0x7f0000000300)={0x64, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000000}, 0x2008001) r6 = socket$inet(0x10, 0x80000, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r7, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r7, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) fcntl$dupfd(r6, 0x0, r7) recvmmsg(r7, &(0x7f0000000640)=[{{&(0x7f0000000380)=@l2, 0x80, &(0x7f0000000500)=[{&(0x7f0000000400)}, {&(0x7f0000000440)=""/170, 0xaa}], 0x2, &(0x7f0000000a00)=""/215, 0xd7}}], 0x1, 0x100, &(0x7f0000000680)) tkill(r2, 0x1004000000013) 22:03:56 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)}, 0x1800}], 0x0, 0x0, 0x0}) [ 76.194253] binder: undelivered TRANSACTION_ERROR: 29189 22:03:56 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)}, 0x1800}], 0x0, 0x0, 0x0}) [ 76.272205] binder_alloc: 3243: binder_alloc_buf, no vma [ 76.277900] binder: 3243:3244 transaction failed 29189/-3, size 0-24 line 3137 [ 76.291734] binder: undelivered TRANSACTION_ERROR: 29189 22:03:56 executing program 0: mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)}, 0x1800}], 0x0, 0x0, 0x0}) [ 76.316012] binder_alloc: 3250: binder_alloc_buf, no vma [ 76.321847] binder: 3250:3251 transaction failed 29189/-3, size 0-24 line 3137 [ 76.330088] binder: undelivered TRANSACTION_ERROR: 29189 [ 76.420489] audit: type=1400 audit(1572041036.223:18): avc: denied { read } for pid=3247 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 22:03:56 executing program 5: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffffffffffe94) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000700)={'yam0\x00', {0x2, 0x4e23, @remote}}) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, 0x0, 0x5) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000e80), 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) inotify_init() clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000380)) r3 = getpid() wait4(r3, 0x0, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffffffffffebe) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r4) r7 = creat(&(0x7f0000000300)='./file0\x00', 0x84) write$P9_RCREATE(r7, &(0x7f0000000100)={0x18, 0x73, 0x1, {{0x8, 0x1, 0x5}, 0x7}}, 0x18) unlinkat(r6, &(0x7f0000000240)='./file0\x00', 0x200) creat(&(0x7f00000000c0)='./file1\x00', 0x20) setxattr$security_ima(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='security.ima\x00', &(0x7f00000001c0)=@sha1={0x1, "034932f5749bd3bb8a79dc5a9e98ea4d42c16af9"}, 0xffffff3a, 0x1) 22:03:56 executing program 0: mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)}, 0x1800}], 0x0, 0x0, 0x0}) 22:03:56 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000040)) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x40, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000000280)=0xff, 0x4) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x44e20, 0xfffffffd, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000140)="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") write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000300)="2ee602640d2e2a2a971e0066a0440b6d51b49a22247489b25f7cb192154a56f31ca0b313022ae4fcda564052be1e", 0x18361769}], 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000240)=0x7ff, 0xfffffec3) creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x208200) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20040000, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1b) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) write(r4, &(0x7f00000008c0), 0x0) connect$unix(r4, 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, 0x0, 0x0) ioctl$TIOCMBIS(r4, 0x5416, 0x0) renameat(r4, &(0x7f00000000c0)='./file0\x00', r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/policy\x00', 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) 22:03:56 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, 0x0, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) connect$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000004c0)={0x18, 0x7, 0x2, {{0xb, 'cpusetwlan0'}, 0x5}}, 0x18) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r4 = dup(r2) openat$cgroup_subtree(r4, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) timer_create(0x0, &(0x7f0000000380)={0x0, 0x6, 0x2, @thr={&(0x7f0000000300)="fe02611ffad8a192251791b2b7de81726636623bc8d8fa0ed11ddd1a585d", &(0x7f0000000180)="d6c64abb5861c3827889732ca8bbaa4da7713f4f0524d25de74c10dfa830e624fa422d4bd13728f927f13f63d09af05742"}}, &(0x7f00000003c0)) lseek(r1, 0x0, 0x2) sendfile(r1, r3, 0x0, 0x8000fffffffe) socket$inet6(0xa, 0x80004, 0x0) sendfile(r1, r3, 0x0, 0xa5cc554) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) gettid() 22:03:56 executing program 0: mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)}, 0x1800}], 0x0, 0x0, 0x0}) 22:03:56 executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x400000004805, 0x8) ioctl(r4, 0x801000008912, &(0x7f0000000340)="0a5c2d023c126285718070") ftruncate(r4, 0xffffffff) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0xb75100, 0x0) bind(r5, &(0x7f0000000940)=@un=@abs={0x0, 0x0, 0x4e20}, 0x80) bind(r3, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x2, 0x2, 0x2, 0x3, {0xa, 0x4e23, 0x2, @loopback, 0x8}}}, 0x80) write(r1, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(r0, &(0x7f0000000180)=0x7, 0x396) r6 = socket$inet6(0xa, 0x400000000001, 0x0) getrlimit(0x2, &(0x7f0000000240)) r7 = dup(r6) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000500), &(0x7f0000000540)=0x14) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x45}}, 0x1) ioctl$FS_IOC_SETFLAGS(r7, 0x40046602, &(0x7f0000000640)=0x1) r9 = inotify_init() lseek(r9, 0x4, 0x4) ioctl$UI_SET_SNDBIT(r7, 0x4004556a, 0x0) r10 = socket$inet6(0xa, 0x1200000002, 0x0) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f0000000080)=0x581, 0x4) sendto$inet6(r10, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r10, 0x29, 0x100000031, &(0x7f0000000140)=0x8, 0xfd73) recvmsg(r10, &(0x7f00000000c0)={0x0, 0xfffffffffffffe14, 0x0, 0x0, &(0x7f0000000040)=""/36, 0x24}, 0x2002) r11 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/status\x00', 0x0, 0x0) getsockname(r11, &(0x7f00000001c0)=@rc, 0x0) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r12, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r12, 0x6, 0x9, &(0x7f0000000100)=0x7fffffff, 0xfeef) bind$inet(r12, &(0x7f0000738ff0)={0x2, 0x4e21, @local}, 0x10) connect$inet(r12, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r12, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @timestamp, @mss={0x2, 0x8}], 0x3) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r13 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r13, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x12, &(0x7f0000000380)=0x83, 0x9) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r14 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r14, 0x2007fff) sendfile(r7, r14, 0x0, 0x8000fffffffe) 22:03:56 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)}, 0x1800}], 0x0, 0x0, 0x0}) 22:03:56 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)}, 0x1800}], 0x0, 0x0, 0x0}) 22:03:57 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, 0x0, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) connect$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000004c0)={0x18, 0x7, 0x2, {{0xb, 'cpusetwlan0'}, 0x5}}, 0x18) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) timer_create(0x3, &(0x7f0000000380)={0x0, 0x6, 0x2, @thr={&(0x7f0000000300)="fe02611ffad8a192251791b2b7de81726636623bc8d8b90ed11ddd1a585d", &(0x7f0000000040)="d6c64abb5861c38278cb1725fbbbaa4da771050000005589b824c8000000e62406574a822d634bd13728f927f13f20d00258c1579e1f1fc5ff"}}, &(0x7f00000003c0)) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x8000fffffffe) socket$inet6(0xa, 0x80004, 0x0) sendfile(r1, r2, 0x0, 0xa5cc554) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) gettid() 22:03:57 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)}, 0x1800}], 0x0, 0x0, 0x0}) 22:03:57 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)}, 0x1800}], 0x0, 0x0, 0x0}) 22:03:57 executing program 3: socket$key(0xf, 0x3, 0x2) r0 = socket$inet6(0xa, 0x400000004805, 0x8) ioctl(r0, 0x801000008912, &(0x7f0000000340)="0a5c2d023c126285718070") ftruncate(r0, 0xffffffff) r1 = socket$inet(0x10, 0x80000, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r2, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r4, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r4, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000140)={0x8}) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000780)={{{@in=@multicast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f00000000c0)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000100)={@local, 0x2f, r5}) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) read(r6, &(0x7f0000000200)=""/250, 0x50c7e5e2) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000000)=0x5dd7d56a, 0xfffffffffffffd3d) connect$inet(r8, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r9 = openat$cgroup_subtree(r7, &(0x7f0000000440)='cgroup.subtree_control\x00', 0x2, 0x0) syz_extract_tcp_res(0x0, 0x9, 0x0) stat(&(0x7f0000000900)='./file1\x00', &(0x7f0000000880)) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x20881, 0x0) ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r11 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r12 = ioctl$LOOP_CTL_GET_FREE(r11, 0x4c82) ioctl$LOOP_CTL_REMOVE(r11, 0x4c81, r12) ioctl$LOOP_CTL_ADD(r11, 0x4c80, r12) ioctl$LOOP_CTL_REMOVE(r11, 0x4c81, r12) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r12) clone(0x20000000, &(0x7f0000000500)="f35e8fdd0dce633a241a37faec12072bb9085225665989cadec04819beca21ef419c8e90549a941d2c1cacf4f87b785c756fb973410347a0f0975ecc5caee8bbf1c9779987a02c27d4f6", 0x0, &(0x7f00000005c0), &(0x7f0000000600)="64411adeaac9c9295a423ce94b2d484c807c13431bd8293271f4124a5c19c90aba601fd546c905533b65a1b19b761404a1db00f1c65d67c108da8f5328fe9892ed81d61484387db401fa45f99ffc8306236611b27ca1b2f4bd234790a4bb93b740161fd377f891ef519519a4c6086fdcc7b3d1586bd0792e5f65961170085417d533e54d9549502cf412828c77bd86e61eae411dd7583e203cce01b271e86921d745c29fe7473c17d064430cb65269a27d159db5ce2285795b20fefba014a1821d82f9fa4a579b015dba3669bbf82718973031b82585565fcf0d72b5cfc88c6276def2c55d1ce188c13fd8ca5b90ebb2") statfs(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)=""/20) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/member\x00', 0x2, 0x0) ioctl$TCGETS(r6, 0x5401, &(0x7f0000000140)) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000740)=0x5, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='iPVS\x00') getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000044c0)={'ip6gre0\x00'}) [ 77.310873] binder_alloc: 3302: binder_alloc_buf, no vma [ 77.325037] binder: 3302:3303 transaction failed 29189/-3, size 0-24 line 3137 [ 77.343153] binder: undelivered TRANSACTION_ERROR: 29189 [ 78.111322] syz-executor.4 (3307) used greatest stack depth: 23088 bytes left 22:03:58 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000040)) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x40, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000000280)=0xff, 0x4) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x44e20, 0xfffffffd, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000140)="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") write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000300)="2ee602640d2e2a2a971e0066a0440b6d51b49a22247489b25f7cb192154a56f31ca0b313022ae4fcda564052be1e", 0x18361769}], 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000240)=0x7ff, 0xfffffec3) creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x208200) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20040000, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1b) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) write(r4, &(0x7f00000008c0), 0x0) connect$unix(r4, 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, 0x0, 0x0) ioctl$TIOCMBIS(r4, 0x5416, 0x0) renameat(r4, &(0x7f00000000c0)='./file0\x00', r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/policy\x00', 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) 22:03:58 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)}, 0x1800}], 0x0, 0x0, 0x0}) 22:03:58 executing program 3: sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x1) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) ftruncate(r2, 0x208200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/enforce\x00', 0xec3d6fc6ab82553c, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syncfs(r1) r6 = open(&(0x7f0000000140)='./file0\x00', 0x20141042, 0x0) ftruncate(r6, 0x280080) exit(0x0) lstat(0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000100)={0x0, r5}) 22:03:58 executing program 2: r0 = inotify_init() r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x80000002) r2 = socket$inet(0x10, 0x80000, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r3, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r5, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000140)={0x8}) bind$unix(r4, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) write$binfmt_elf64(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000000000004000cfa05b000000000000000000000000000000007a12e1471c3d5ee549ea388a261a06000000003800"/138], 0x78) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 22:03:58 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="003900000057e438e2d4d30118eec98cdcf5a423a697e19ecca20b8d97301ded5cab5dced9a1bf251ed270c1a38f1f4b9cc362dfeffde008000000b440c877bd16f73b7d2c084258fc4fe042cacee677abe9898bc76d7eeb8aa2ca7ccc72457baf66bb917ac719d0dda2ff9c79a501b61fb94a1f7ec087b1fad87e2bafaf4b"], 0xc}}], 0x2, 0x0) 22:03:58 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) r1 = socket$inet(0x10, 0x80000, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r2, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r4, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r4, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140001000501010200"/20], 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000140)={0x8}) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$UI_SET_PHYS(r5, 0x4008556c, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc60]}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) ioctl$UI_SET_PHYS(r6, 0x4008556c, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r7, 0x5501) ioctl$UI_SET_PHYS(r7, 0x4008556c, 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c) ioctl$UI_DEV_CREATE(r8, 0x5501) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r9, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r9, 0x5501) ioctl$UI_SET_PHYS(r9, 0x4008556c, 0x0) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r10, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r10, 0x5501) ioctl$UI_SET_PHYS(r10, 0x4008556c, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r11, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) ioctl$UI_SET_PHYS(r11, 0x4008556c, 0x0) write$selinux_load(r0, &(0x7f00000003c0)=ANY=[], 0xffffff9d) 22:03:58 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)}, 0x1800}], 0x0, 0x0, 0x0}) 22:03:58 executing program 2: pipe(&(0x7f0000000080)) fcntl$getown(0xffffffffffffffff, 0x9) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0xfffffffffffffef6) r0 = socket$inet(0x10, 0x80000, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r1, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r3, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)={0x8}) sendmsg$TIPC_CMD_GET_NETID(r2, 0x0, 0x40044) lseek(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000580)=[{0x48000015, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}]}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) ioctl$sock_ifreq(r4, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) syz_open_dev$evdev(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x200000, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x20}) [ 78.497394] binder_alloc: 3336: binder_alloc_buf, no vma [ 78.506000] binder: 3336:3338 transaction failed 29189/-3, size 0-24 line 3137 [ 78.517711] binder: undelivered TRANSACTION_ERROR: 29189 [ 78.539374] input: syz1 as /devices/virtual/input/input58 [ 78.567983] input: syz1 as /devices/virtual/input/input59 [ 78.619772] input: syz1 as /devices/virtual/input/input60 22:03:58 executing program 5: [ 78.660728] input: syz1 as /devices/virtual/input/input61 [ 78.680445] binder_alloc: 3351: binder_alloc_buf, no vma 22:03:58 executing program 5: openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/policy\x00', 0x0, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) read$FUSE(0xffffffffffffffff, &(0x7f0000000840), 0x1000) r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) readv(r1, &(0x7f0000000240)=[{&(0x7f00000013c0)=""/135, 0x87}], 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = socket$inet(0x10, 0x80000, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r3, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r5, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000140)={0x8}) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r6, &(0x7f0000000080)={0x20000002}) read(r1, &(0x7f0000001cc0)=""/254, 0xffffffffffffffef) socket$inet6(0xa, 0x2, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r7) r8 = socket$netlink(0x10, 0x3, 0x28d7b4a841aa4290) fgetxattr(r8, &(0x7f0000000180)=@known='system.posix_acl_access\x00', &(0x7f0000000600)=""/141, 0x1f) r9 = creat(&(0x7f0000000700)='./bus\x00', 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x10001000a00) chroot(&(0x7f0000000140)='./bus\x00') openat$selinux_user(0xffffffffffffff9c, 0x0, 0x2, 0x0) r10 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r11, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000c80)={0x8, "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", 0xf05}, 0x1006) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2008000fffffffe) lseek(r9, 0x0, 0x2) sendfile(r9, r10, 0x0, 0xfffffffffffffffc) [ 78.711053] binder: 3351:3358 transaction failed 29189/-3, size 0-24 line 3137 [ 78.714451] input: syz1 as /devices/virtual/input/input62 [ 78.741404] input: syz1 as /devices/virtual/input/input63 22:03:58 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)}, 0x1800}], 0x0, 0x0, 0x0}) [ 78.816712] input: syz1 as /devices/virtual/input/input64 [ 78.822882] binder: undelivered TRANSACTION_ERROR: 29189 22:03:58 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)}, 0x1800}], 0x0, 0x0, 0x0}) [ 78.865924] binder: 3372:3373 transaction failed 29189/-22, size 0-24 line 3014 [ 78.875914] binder: undelivered TRANSACTION_ERROR: 29189 [ 78.954600] binder: 3375:3377 transaction failed 29189/-22, size 0-24 line 3014 [ 78.994520] binder: undelivered TRANSACTION_ERROR: 29189 [ 79.167627] input: syz1 as /devices/virtual/input/input65 [ 79.239427] input: syz1 as /devices/virtual/input/input66 [ 79.298136] input: syz1 as /devices/virtual/input/input67 22:03:59 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000040)) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x40, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000000280)=0xff, 0x4) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x44e20, 0xfffffffd, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000140)="1423a63388ecb1d7ad8834bc17ad277b888b12c97c08bf78a1e10966c80eb2300d88409c733acd0086ba1b8dd91a1919d3584c4211bc508e187fe326f54131d1bd94dedc48439b1adf39c5d455deed28e869d06999b56707d5ccd4aed256359f27ee3deceb87b7a899de0253ff9d510544e4014896c2312775e8ba0bc5c0379a6ff868919c874f4c5253ddb618236797a4208a56080e7e5598afc4deec2ccf7783daef74543af0c45778c735709562ded18117eb863067ae7410324025e0b7a67bc8f4271bfc7741283b88ee6ca77b27882f97291014df389241eb85e88017f9ee0c4fe028567b86c1af10b5df1f42019262bc0b19c863406f408e282f8e3f92") write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000300)="2ee602640d2e2a2a971e0066a0440b6d51b49a22247489b25f7cb192154a56f31ca0b313022ae4fcda564052be1e", 0x18361769}], 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000240)=0x7ff, 0xfffffec3) creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x208200) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20040000, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1b) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) write(r4, &(0x7f00000008c0), 0x0) connect$unix(r4, 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, 0x0, 0x0) ioctl$TIOCMBIS(r4, 0x5416, 0x0) renameat(r4, &(0x7f00000000c0)='./file0\x00', r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/policy\x00', 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) 22:03:59 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)}, 0x1800}], 0x0, 0x0, 0x0}) 22:03:59 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x40000000000000) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendfile64(r1, 0xffffffffffffffff, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) unlink(&(0x7f0000000480)='./bus\x00') write(r3, &(0x7f00000001c0), 0xffffffe0) read(r2, &(0x7f0000000200)=""/250, 0xfffffffffffffef6) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f00000003c0), 0x4) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) recvfrom$inet6(r4, &(0x7f0000000240)=""/175, 0xaf, 0x10000, &(0x7f00000000c0)={0xa, 0x0, 0x8, @mcast1, 0x7}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r5, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) ioctl$BLKRAGET(r4, 0x1263, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x400000000001, 0x0) close(r6) socket$netlink(0x10, 0x3, 0x10) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f00000004c0)=""/182, &(0x7f0000000180)=0xb6) personality(0x2c738011bc2bd17c) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r7) write$P9_RWRITE(r7, 0x0, 0x0) r8 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ftruncate(r8, 0x200005) sendfile(r6, r8, 0x0, 0x8000ffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0xec38ed91f9c7494a}) io_setup(0x7fff, &(0x7f00000000c0)) io_destroy(0x0) 22:03:59 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) r1 = socket$inet(0x10, 0x80000, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r2, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r4, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r4, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140001000501010200"/20], 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000140)={0x8}) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$UI_SET_PHYS(r5, 0x4008556c, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc60]}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) ioctl$UI_SET_PHYS(r6, 0x4008556c, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r7, 0x5501) ioctl$UI_SET_PHYS(r7, 0x4008556c, 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c) ioctl$UI_DEV_CREATE(r8, 0x5501) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r9, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r9, 0x5501) ioctl$UI_SET_PHYS(r9, 0x4008556c, 0x0) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r10, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r10, 0x5501) ioctl$UI_SET_PHYS(r10, 0x4008556c, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r11, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) ioctl$UI_SET_PHYS(r11, 0x4008556c, 0x0) write$selinux_load(r0, &(0x7f00000003c0)=ANY=[], 0xffffff9d) 22:03:59 executing program 2: setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000000)={0x7, 0x3, 0x23}, 0x161ac83420c750b8) r0 = openat$keychord(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000001c0)={0xffeffffffffffffa}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[]) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) open(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, 0x0) setns(r0, 0x12000000) sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={&(0x7f0000000300)=@nl=@proc, 0x80, &(0x7f00000003c0)}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0xfffffffffffffe2e) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000400)=0x37, 0x80) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x475e, @dev={0xfe, 0x80, [], 0x8}, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000140)={{0x32, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x4, 'sed\x00', 0xa, 0x6, 0x3f}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x4e23, 0x1, 0xffff, 0x0, 0x7}}, 0x44) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000b00)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000000c0)=0x0) getpgid(r3) geteuid() stat(0x0, &(0x7f00000015c0)) r4 = syz_open_procfs(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000800)={'team_slave_0\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001680)={{{@in=@local, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000001780)=0x2585) lstat(0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) r5 = socket$inet(0x10, 0x80000, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r6, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r6, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201, 0x1000}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = fcntl$dupfd(r5, 0x0, r6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r8, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r8, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, &(0x7f0000000140)={0x8}) perf_event_open$cgroup(&(0x7f0000000540)={0xc, 0x70, 0x7f, 0x7, 0x1, 0x3f, 0x0, 0x3f, 0x4000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x10000, 0x0, 0x1, 0x2, 0x6, 0x4, 0x5a15}, r7, 0x7, 0xffffffffffffffff, 0x2) fstat(0xffffffffffffffff, &(0x7f0000000640)) connect$inet6(r2, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000b40)=ANY=[@ANYBLOB="6d616e676c650000000000000000000000000000000000001000000000000000620000008148901fc57539f4533a1ebaf5835831060000000000000064e03d9841649aebc898f5bafd61cf05497861494cb00928b809877bf88716edba37c9f3321c48e181340ef5dece5e0314110de51f402d1c1efcbbe218cd12e61216028c5a030490264eababbe05bb78b9474eaf4d9ad3f8d256b4d8671586e6ca1d6668262001edcc04c14805c9a746ad0baf576805af02ba1618a729f27f7212f3b9bb7e8bfacdf77f13bd430ba7f0000000000000008f6ce656c92259292a681d714350c093c31c6cce59d3e15dd03f063062b6b681b53cb47b0e4df11ee15da78b5055b023a2cfd4aa0baac0337f57a2c9d24d18d69fe644e6ccf41af86d838bb58884a1c91159b74d18720f341dbc209ae0d8ca4bbe9c4de44605a76e5804b187f1c2450ee5fc472193226e6cb8ec6550893acf99c1434bfc7bad516d65fd354f15c6ba6ec452a34d928c47bba1da92be47e3df29509c4cc9ca070b9c8bc7b22ae09b92eb1fbff83541ecdfb3a0b833233442ed848272de03f45ec9285721b940e7f8e47b0eb98f46770793668ef1419fefda961106f05ce995a36b129523d2c23b96d72337c03fd7d1f899545f5fa83f8688848ef0ca0bb80eb58f5b6c00001f313f8ee26f33131ba8082a40bdd66fc39caced565989b5dda63f2ecc5427042f229e45aec2004c91c521d51f4e447c3bfda65f46a95b16cc96130236adef982953875f7f16f56be4b9ed65e138d74a3bc6ef290c11dc7dfbd33e5404048280e72d2fb119394c2645d2d63d100447b51e0ebf3676ed2ee3227f34c60a9535c989368966dfd929b48a77b02821d3c7de5927ab8952ee16ac5f0a14583824d0c0c22e19a5d3bc6298f8a2a0aac5fd0500110695e3ecac029d35af6b3e2e96dd5a4f99862198ae58d39fe5a0df679dff722bb0ea5aaf0750643215032f608efc8967f5"], &(0x7f0000000080)=0x1) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) [ 79.569957] input: syz1 as /devices/virtual/input/input72 [ 79.581053] binder: 3386:3392 transaction failed 29189/-22, size 0-24 line 3014 22:03:59 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)}, 0x1800}], 0x0, 0x0, 0x0}) [ 79.613193] input: syz1 as /devices/virtual/input/input73 [ 79.620051] binder: undelivered TRANSACTION_ERROR: 29189 [ 79.659962] input: syz1 as /devices/virtual/input/input74 [ 79.694803] input: syz1 as /devices/virtual/input/input75 22:03:59 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)}, 0x1800}], 0x0, 0x0, 0x0}) 22:03:59 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) dup3(r0, r1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x444801, 0x0) [ 79.772648] input: syz1 as /devices/virtual/input/input76 22:03:59 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r1, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r3, 0x2081fc) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r6, 0x0) read(r4, &(0x7f0000000000)=""/250, 0xedf1d44) fcntl$setstatus(r2, 0x4, 0x6100) fdatasync(r1) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0xf642e7e) pipe(&(0x7f0000000640)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r7, 0x8941, 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000180)=0x2) ioctl$UI_DEV_CREATE(r8, 0x5501) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) read(r8, &(0x7f0000000200)=""/223, 0xdf) r9 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r9, 0x4, 0x6100) ftruncate(r9, 0x208200) r10 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r9, r10, 0x0, 0x8000fffffffe) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40046602, &(0x7f0000000340)=0x5) 22:03:59 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)}, 0x1800}], 0x0, 0x0, 0x0}) [ 79.843778] input: syz1 as /devices/virtual/input/input77 [ 79.898741] input: syz1 as /devices/virtual/input/input78 22:03:59 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 22:03:59 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) [ 80.070438] binder: 3424:3425 ioctl c0306201 0 returned -14 [ 80.181588] binder: 3428:3429 ioctl c0306201 0 returned -14 [ 80.369774] input: syz1 as /devices/virtual/input/input79 22:04:00 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000040)) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x40, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000000280)=0xff, 0x4) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x44e20, 0xfffffffd, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000140)="1423a63388ecb1d7ad8834bc17ad277b888b12c97c08bf78a1e10966c80eb2300d88409c733acd0086ba1b8dd91a1919d3584c4211bc508e187fe326f54131d1bd94dedc48439b1adf39c5d455deed28e869d06999b56707d5ccd4aed256359f27ee3deceb87b7a899de0253ff9d510544e4014896c2312775e8ba0bc5c0379a6ff868919c874f4c5253ddb618236797a4208a56080e7e5598afc4deec2ccf7783daef74543af0c45778c735709562ded18117eb863067ae7410324025e0b7a67bc8f4271bfc7741283b88ee6ca77b27882f97291014df389241eb85e88017f9ee0c4fe028567b86c1af10b5df1f42019262bc0b19c863406f408e282f8e3f92") write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000300)="2ee602640d2e2a2a971e0066a0440b6d51b49a22247489b25f7cb192154a56f31ca0b313022ae4fcda564052be1e", 0x18361769}], 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000240)=0x7ff, 0xfffffec3) creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x208200) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20040000, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1b) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) write(r4, &(0x7f00000008c0), 0x0) connect$unix(r4, 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, 0x0, 0x0) ioctl$TIOCMBIS(r4, 0x5416, 0x0) renameat(r4, &(0x7f00000000c0)='./file0\x00', r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/policy\x00', 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) 22:04:00 executing program 4: r0 = socket(0x18, 0x0, 0x4) accept4$unix(r0, 0x0, 0x0, 0x81400) syz_open_dev$loop(0x0, 0x4000001, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000400)={{0x10b, 0x0, 0x7, 0x83, 0x30b, 0x5, 0x28e, 0xa5}, "85609a0e139be66a14b89dcc75b4a814138f3d3280d79042d97f257c9dcea0d91df2f7823627bfa13f893d5b87f72e94473c180b4f28077cb111c9b33d2970fe1250926922203efb2104b0e7eec82f6449c88ef463d20ea85178f764ac4667604eb58b893b0efec73d3a66c639075430c244d00f5062e217fc1ed127baacd04f8ffb78536c0f4e33b1aa77a6ab0a7a110f070baf4ce716865b3059dd6b920db5e58d5155243e039a1f8f52eb1611837b3b0c488318e1aa3658b816b731e4f9fff4102bcd", [[]]}, 0x1e4) write$FUSE_CREATE_OPEN(r1, 0x0, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0x7530}}, {{0x0, 0x2710}}], 0x30) openat$selinux_access(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/access\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000640)) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000780)='./file1\x00', 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000380)={0xbd, @rand_addr=0x4, 0x4e20, 0x0, 'lblcr\x00', 0x4}, 0x2c) r4 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) write$P9_RFLUSH(r4, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) close(r3) pipe(0x0) 22:04:00 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 22:04:00 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000001080)='net/tcp6\x00') read$FUSE(r0, &(0x7f0000000000), 0x1000) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) timer_create(0x4, &(0x7f0000000400)={0x0, 0x20, 0x0, @thr={&(0x7f0000000340)="96fcdbd2a1d95cb3fbb73db0a9cc41", &(0x7f0000000380)="be3176118f7d8894daf20486cda26e51486a693e7e04edd030374dd4df7640a0ef5b60a74064fa0ebc78f2721973f233ae6d59de41"}}, &(0x7f0000000440)) memfd_create(0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000700)={'yam0\x00', {0x2, 0x4e23, @remote}}) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000e80), 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000010c0)=ANY=[@ANYBLOB="a5105cdcf349fa12aad3d7a2421733685af13832a0fb29a7e90e0ec38ff3df623cdd946e0e9d007764ed542ebf0eefd2b449307a4196efaab0d78b25c171f25c4defbded67154f1ecd821472b71e61d1038cad87c7a9fd237a0eefd1df992013953c9538da759a06167f30c0f0dc584168619d2f141a711f60c6a4972625e71d2e4c838c06"], 0x0) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) inotify_init() clone(0x100020040004101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000640)) wait4(0x0, 0x0, 0x3, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = getpid() wait4(r4, 0x0, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000500)={{{@in=@initdev, @in=@broadcast}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6=@loopback}}, &(0x7f0000000140)=0xe8) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r5) creat(&(0x7f0000000100)='./file0\x00', 0x80) 22:04:00 executing program 3: rt_sigsuspend(&(0x7f0000000180)={0x4}, 0x8) creat(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2) openat$cgroup_subtree(r3, &(0x7f0000000440)='cgroup.subtree_control\x00', 0x2, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(0x0, 0x25) ptrace$setsig(0x4203, r5, 0x80000001, &(0x7f0000000100)={0x3d, 0x0, 0x851d}) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'trusted.', '/dev/loop-control\x00'}, &(0x7f00000000c0)=""/28, 0x1c) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 22:04:00 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:04:00 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 80.575974] binder: 3442:3444 ioctl c0306201 0 returned -14 22:04:00 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:04:00 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0}) 22:04:00 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x2000000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000200)={0x0, 0x7530}, 0x10) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000180)={0xa, 0x4e20, 0x2000, @dev={0xfe, 0x80, [], 0x29}}, 0xe8) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x110000141042, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000000), 0x43578cf5) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@mcast1, @in=@remote}}, {{@in6=@local}}}, &(0x7f0000000140)=0xe8) r5 = socket$inet6(0xa, 0x400000000001, 0x0) close(r5) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0xe5) ftruncate(r6, 0x2007fff) sendfile(r5, r6, 0x0, 0x800000000024) accept4$packet(r6, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000004c0)=0x14, 0xc00) r7 = socket$inet6(0xa, 0x2000000000002, 0x0) setsockopt$inet6_int(r7, 0x29, 0x19, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0) 22:04:00 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0}) 22:04:00 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0}) 22:04:01 executing program 1: setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000000)={0x7, 0x3, 0x23}, 0x161ac83420c750b8) r0 = openat$keychord(0xffffffffffffff9c, 0x0, 0x28002, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f0000000380)=0xffffffff80000001, 0x3) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'team0\x00', 0x2}, 0x18) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @mss, @mss, @window={0x3, 0x6, 0x1}, @timestamp, @timestamp], 0x6) fremovexattr(r1, &(0x7f00000007c0)=@known='system.posix_acl_access\x00') setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000280), 0x7) r2 = open(&(0x7f0000000240)='./file0\x00', 0x101000, 0xc1) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000340)={@rand_addr, @remote, 0x0}, &(0x7f0000000440)=0xc) connect$packet(r2, &(0x7f0000000480)={0x11, 0x4, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000300)={0x1}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[]) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, 0x0) setns(r0, 0x12000000) sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000002000)}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0xfffffffffffffe2e) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000400)=0x37, 0x80) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x475e, @dev={0xfe, 0x80, [], 0x8}, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000140)={{0x32, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x4, 'sed\x00', 0xa, 0x0, 0x3f}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x4e23, 0x1, 0xffff, 0x2}}, 0x44) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000b00)) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f00000000c0)=0x0) getpgid(r7) geteuid() stat(0x0, &(0x7f0000000740)) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000001680)={{{@in=@local, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000001780)=0xe8) lstat(0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001f80)) fstat(r5, &(0x7f0000002100)) connect$inet6(r6, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) 22:04:01 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1800}], 0x0, 0x0, 0x0}) 22:04:01 executing program 4: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x5, 0x3, 0x4, 0x5}, {0xb22, 0x1, 0x3, 0x2}]}) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f00000000c0)=""/33) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') [ 81.425660] audit: type=1326 audit(1572041041.233:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=3482 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf777abf9 code=0x0 [ 81.445994] binder: release 3481:3483 transaction 67 out, still active [ 81.445999] binder: undelivered TRANSACTION_COMPLETE [ 81.446075] binder: send failed reply for transaction 67, target dead 22:04:01 executing program 3: rt_sigsuspend(&(0x7f0000000180)={0x4}, 0x8) creat(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2) openat$cgroup_subtree(r3, &(0x7f0000000440)='cgroup.subtree_control\x00', 0x2, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(0x0, 0x25) ptrace$setsig(0x4203, r5, 0x80000001, &(0x7f0000000100)={0x3d, 0x0, 0x851d}) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'trusted.', '/dev/loop-control\x00'}, &(0x7f00000000c0)=""/28, 0x1c) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 22:04:01 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1800}], 0x0, 0x0, 0x0}) 22:04:01 executing program 5: rt_sigsuspend(&(0x7f0000000180)={0x4}, 0x8) creat(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2) openat$cgroup_subtree(r3, &(0x7f0000000440)='cgroup.subtree_control\x00', 0x2, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(0x0, 0x25) ptrace$setsig(0x4203, r5, 0x80000001, &(0x7f0000000100)={0x3d, 0x0, 0x851d}) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'trusted.', '/dev/loop-control\x00'}, &(0x7f00000000c0)=""/28, 0x1c) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 22:04:01 executing program 2: getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x0, 0x0, &(0x7f0000001400)) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x81, 0x4) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000001500), 0x4) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) io_cancel(0x0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x7, 0x4, 0xffffffffffffffff, &(0x7f0000001700)="cdfab2e9a729f3e6945d6e6e4296a3e487635d63d7d7e2c5f90150c0f35172da3525dfcc2c29eea03625f67ea78f199b04e88dc73ecc08818db10774681b635104255ca4fde57d75e4e795160f4a1404c3dc318c07944fb76dd0dff51a121fac65927b7b863c08aaebc8a0f340f61b836cbfdb9e61c05fefac2aac02abce40e54a799ac6fc4ad07a357c870d92dc2eb563e2a6d6ea7557616adf9e0179f0b9f1bbb61974b94af81c8a8aaf9ccdd9fdfef3c3fd63c673634007b411e17685e43c", 0xc0, 0xe, 0x0, 0x1}, &(0x7f0000001800)) prctl$PR_CAPBSET_READ(0x17, 0x2000d) recvmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$TIOCGDEV(r0, 0x80045432, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001440)) getresuid(&(0x7f0000001480), &(0x7f00000014c0), &(0x7f00000017c0)) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000001880)) write$eventfd(r1, &(0x7f00000001c0)=0x9, 0x8) pipe(&(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x15acc76c) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000480)={0x40000008}) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x40000002) dup(r3) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvfrom$unix(r5, &(0x7f0000000140)=""/102, 0x66, 0x0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x323) connect$inet(r5, &(0x7f0000001900)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000001540)=@req={0x20, &(0x7f0000000000)={'nlmon0\x00', @ifru_addrs=@ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x8}}}) 22:04:01 executing program 1: setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000000)={0x7, 0x3, 0x23}, 0x161ac83420c750b8) r0 = openat$keychord(0xffffffffffffff9c, 0x0, 0x28002, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f0000000380)=0xffffffff80000001, 0x3) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'team0\x00', 0x2}, 0x18) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @mss, @mss, @window={0x3, 0x6, 0x1}, @timestamp, @timestamp], 0x6) fremovexattr(r1, &(0x7f00000007c0)=@known='system.posix_acl_access\x00') setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000280), 0x7) r2 = open(&(0x7f0000000240)='./file0\x00', 0x101000, 0xc1) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000340)={@rand_addr, @remote, 0x0}, &(0x7f0000000440)=0xc) connect$packet(r2, &(0x7f0000000480)={0x11, 0x4, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000300)={0x1}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[]) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, 0x0) setns(r0, 0x12000000) sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000002000)}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0xfffffffffffffe2e) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000400)=0x37, 0x80) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x475e, @dev={0xfe, 0x80, [], 0x8}, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000140)={{0x32, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x4, 'sed\x00', 0xa, 0x0, 0x3f}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x4e23, 0x1, 0xffff, 0x2}}, 0x44) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000b00)) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f00000000c0)=0x0) getpgid(r7) geteuid() stat(0x0, &(0x7f0000000740)) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000001680)={{{@in=@local, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000001780)=0xe8) lstat(0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001f80)) fstat(r5, &(0x7f0000002100)) connect$inet6(r6, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) 22:04:01 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1800}], 0x0, 0x0, 0x0}) 22:04:01 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)}}], 0x0, 0x0, 0x0}) [ 82.054315] binder: release 3500:3507 transaction 69 out, still active [ 82.061039] binder: undelivered TRANSACTION_COMPLETE [ 82.068834] binder: send failed reply for transaction 69, target dead [ 82.084465] binder: release 3508:3509 transaction 71 out, still active [ 82.091419] binder: undelivered TRANSACTION_COMPLETE 22:04:01 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)}}], 0x0, 0x0, 0x0}) [ 82.108016] binder: send failed reply for transaction 71, target dead [ 82.122627] binder: 3513:3515 got transaction with invalid offset (0, min 0 max 0) or object. [ 82.135873] binder: 3513:3515 transaction failed 29201/-22, size 0-24 line 3199 [ 82.144514] binder: undelivered TRANSACTION_ERROR: 29201 [ 82.205939] binder: 3520:3522 got transaction with invalid offset (0, min 0 max 0) or object. [ 82.228493] audit: type=1326 audit(1572041042.033:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=3482 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf777abf9 code=0x0 22:04:02 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)}}], 0x0, 0x0, 0x0}) [ 82.244577] binder: 3520:3522 transaction failed 29201/-22, size 0-24 line 3199 [ 82.260454] binder: undelivered TRANSACTION_ERROR: 29201 [ 82.332569] binder: 3532:3534 got transaction with invalid offset (0, min 0 max 0) or object. 22:04:02 executing program 4: r0 = socket(0x10, 0x802, 0x0) r1 = socket$inet(0x10, 0x80000, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r2, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r4, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r4, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000140)={0x8}) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000000)=0xfffffff9) write(r0, &(0x7f0000000200)="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", 0xfc) [ 82.392294] binder: 3532:3534 transaction failed 29201/-22, size 0-24 line 3199 22:04:02 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0}) [ 82.465746] binder: undelivered TRANSACTION_ERROR: 29201 22:04:02 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/avc/hash_stats\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000e, 0x10, r1, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x2000) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$UI_SET_PHYS(r5, 0x4008556c, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x100, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="11634840020000000000000000000000000000000000000001000000000000000000000050000000000000001800000000000000", @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r3, @ANYBLOB="0000000000000000000000008561646600000000070000000000000000000000000000001500000000000000852a6273000000000200"/68], @ANYPTR64=&(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000018000000000000003800000000000000"], @ANYBLOB="60000000000000000e630c4000000000000000000000000011634840020000000000000000000000000000000000000010000000000000000000000068000000000000001800000000000000", @ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000fd00"/184], @ANYBLOB="b80000000000000000000000000000000300000000000000852a68730001000003000000000000000000000000000000852a747001000000", @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/18], @ANYBLOB="120000000000000001000000000000000200000000000000"], @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000012634840000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000380)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r4, @ANYBLOB="000000000000000000000000852a6466006bc701", @ANYRES32=r5, @ANYBLOB="000000000000000000000000852a68778a00"/36], @ANYPTR64=&(0x7f0000000400)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"], @ANYBLOB="0020000000000000106308400000000000000000"], 0x1000, 0x0, &(0x7f0000000740)="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"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000001800"/60, @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000009fd9b8c939a5db16a5e61edf0cfa528668cb4858425918fde333ced475622be75e0095d510b14cff084d4d04b8b38d7e7a6f68d2ac0c22cfcd81e7ac4b99b6988a7edaa2d4094d4c84e2bbce00311e14b8196a89175b7f9d4da3ac84fc1450936352e683b5"], @ANYBLOB="0018000000000000"], 0x0, 0x0, 0x0}) [ 82.636186] input: syz1 as /devices/virtual/input/input80 [ 82.665125] binder: 3545:3547 got transaction to invalid handle [ 82.679421] binder: 3545:3547 transaction failed 29201/-22, size 80-24 line 3014 [ 82.697820] binder: 3545:3547 got transaction with invalid offset (0, min 0 max 0) or object. [ 82.735321] binder: 3545:3547 transaction failed 29201/-22, size 0-24 line 3199 [ 82.760198] binder: undelivered TRANSACTION_ERROR: 29201 22:04:02 executing program 3: rt_sigsuspend(&(0x7f0000000180)={0x4}, 0x8) creat(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2) openat$cgroup_subtree(r3, &(0x7f0000000440)='cgroup.subtree_control\x00', 0x2, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(0x0, 0x25) ptrace$setsig(0x4203, r5, 0x80000001, &(0x7f0000000100)={0x3d, 0x0, 0x851d}) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'trusted.', '/dev/loop-control\x00'}, &(0x7f00000000c0)=""/28, 0x1c) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 22:04:02 executing program 4: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000480)) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000002300)="a0", 0x1}], 0x1) write$P9_RFLUSH(r0, 0x0, 0xe96c541b0bf25a30) r1 = socket$inet(0x10, 0x80000, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r2, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r4, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r4, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000140)={0x8}) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x7fffffff, @empty, 0x8}, 0x1c) openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0) sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc={0x10, 0x0, 0xfffffffc, 0x10}, 0x80, &(0x7f0000002000)}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f00000001c0)={0x77359400}, 0x8) ioctl$SIOCGSTAMPNS(r5, 0x8907, &(0x7f0000000580)) socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, 0x0) ioctl$TIOCLINUX3(0xffffffffffffffff, 0x541c, &(0x7f0000000140)) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40047705, &(0x7f0000000080)) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x2, @dev, 0x2}, 0x1c) ioctl$TIOCMBIS(r6, 0x5416, 0x0) connect$inet6(r7, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) unshare(0x100) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) 22:04:02 executing program 5: rt_sigsuspend(&(0x7f0000000180)={0x4}, 0x8) creat(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2) openat$cgroup_subtree(r3, &(0x7f0000000440)='cgroup.subtree_control\x00', 0x2, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(0x0, 0x25) ptrace$setsig(0x4203, r5, 0x80000001, &(0x7f0000000100)={0x3d, 0x0, 0x851d}) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'trusted.', '/dev/loop-control\x00'}, &(0x7f00000000c0)=""/28, 0x1c) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) [ 82.837801] input: syz1 as /devices/virtual/input/input81 [ 82.845946] binder: 3545:3551 got transaction to invalid handle [ 82.857729] binder: 3545:3551 transaction failed 29201/-22, size 80-24 line 3014 22:04:02 executing program 2: getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x0, 0x0, &(0x7f0000001400)) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x81, 0x4) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000001500), 0x4) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) io_cancel(0x0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x7, 0x4, 0xffffffffffffffff, &(0x7f0000001700)="cdfab2e9a729f3e6945d6e6e4296a3e487635d63d7d7e2c5f90150c0f35172da3525dfcc2c29eea03625f67ea78f199b04e88dc73ecc08818db10774681b635104255ca4fde57d75e4e795160f4a1404c3dc318c07944fb76dd0dff51a121fac65927b7b863c08aaebc8a0f340f61b836cbfdb9e61c05fefac2aac02abce40e54a799ac6fc4ad07a357c870d92dc2eb563e2a6d6ea7557616adf9e0179f0b9f1bbb61974b94af81c8a8aaf9ccdd9fdfef3c3fd63c673634007b411e17685e43c", 0xc0, 0xe, 0x0, 0x1}, &(0x7f0000001800)) prctl$PR_CAPBSET_READ(0x17, 0x2000d) recvmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$TIOCGDEV(r0, 0x80045432, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001440)) getresuid(&(0x7f0000001480), &(0x7f00000014c0), &(0x7f00000017c0)) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000001880)) write$eventfd(r1, &(0x7f00000001c0)=0x9, 0x8) pipe(&(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x15acc76c) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000480)={0x40000008}) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x40000002) dup(r3) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvfrom$unix(r5, &(0x7f0000000140)=""/102, 0x66, 0x0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x323) connect$inet(r5, &(0x7f0000001900)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000001540)=@req={0x20, &(0x7f0000000000)={'nlmon0\x00', @ifru_addrs=@ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x8}}}) 22:04:02 executing program 1: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) write(r1, &(0x7f00000001c0), 0xbab230cf) ppoll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x100010452}, {0xffffffffffffffff, 0xb62385f370c17594}], 0x2, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000100)={0x2}, 0x8) read(r0, &(0x7f0000000200)=""/250, 0x50c7e5c0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = gettid() rt_tgsigqueueinfo(0x0, r3, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}, 0x419a}, 0x1c) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) syncfs(0xffffffffffffffff) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) syz_open_dev$mice(&(0x7f0000000600)='/dev/input/mice\x00', 0x0, 0x100) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='pids.current\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x6) fcntl$setstatus(r4, 0x4, 0x0) ioctl$EVIOCGPROP(r4, 0x80404509, &(0x7f0000000140)) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r5, &(0x7f0000000040), 0x8000fffffffe) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000480)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000340)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@remote, 0x61, r6}) openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000680)=""/171) seccomp(0x1, 0x0, &(0x7f0000001980)={0x2, &(0x7f00000000c0)=[{0x25, 0x0, 0x0, 0xfffffffffffffffc}, {0x6, 0x0, 0x0, 0xfffffffffffffffd}]}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000380)={0x9, 0x7, 0x2000}, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 22:04:02 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_FP_MODE(0x2d, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000001800"/60, @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB='\x00'/24], @ANYBLOB="001b000000cad800"], 0x0, 0x0, 0x0}) [ 82.989721] binder_alloc: 3566: binder_alloc_buf size 61020696318319384 failed, no address space [ 82.998918] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 83.009639] binder: 3566:3567 transaction failed 29201/-28, size 0-24 line 3137 [ 83.021688] binder: undelivered TRANSACTION_ERROR: 29201 [ 83.043658] binder_alloc: 3566: binder_alloc_buf size 61020696318319384 failed, no address space [ 83.093831] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 83.148178] binder: 3566:3574 transaction failed 29201/-28, size 0-24 line 3137 22:04:03 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_SET_PHYS(r2, 0x4008556c, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x44, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff06, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1001, 0x2}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x8, 0x1, 0x16}}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f00000000c0)) bind$inet(r3, &(0x7f0000dc9ff0)={0x2, 0x4e20}, 0x10) setsockopt$sock_int(r3, 0x1, 0xd, &(0x7f0000000100)=0x8, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='lo\x00', 0x10) sendto$inet(r3, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) setsockopt$inet_tcp_buf(r3, 0x6, 0xa7fdbe02b6eaea9a, &(0x7f0000000100)="1a8ea7ba8d7bcb8941dc1acd7240c0fd58d33eecbf5b920617cc1ecc54ad87aa2354", 0x22) [ 83.204675] binder: undelivered TRANSACTION_ERROR: 29201 [ 83.373512] input: syz1 as /devices/virtual/input/input82 [ 83.427939] binder: 3590:3591 got reply transaction with no transaction stack [ 83.471409] binder: 3590:3591 transaction failed 29201/-71, size -250-24 line 2922 [ 83.523294] binder: undelivered TRANSACTION_ERROR: 29201 [ 83.564040] binder: BINDER_SET_CONTEXT_MGR already set [ 83.569799] binder: 3590:3593 ioctl 40046207 0 returned -16 [ 83.607306] input: syz1 as /devices/virtual/input/input83 [ 83.651594] binder: 3590:3596 got reply transaction with no transaction stack [ 83.692104] binder: 3590:3596 transaction failed 29201/-71, size -250-24 line 2922 22:04:03 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000001800"/60, @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\t\x00'/24], @ANYBLOB="0018000000000000"], 0x0, 0x0, 0x0}) 22:04:03 executing program 3: r0 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) memfd_create(0x0, 0x1) memfd_create(0x0, 0x2) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) connect(r1, 0x0, 0x0) lsetxattr$trusted_overlay_nlink(0x0, 0x0, &(0x7f0000000480)={'\x06\x1b', 0xd5a}, 0x28, 0x3) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) r4 = inotify_init() getrusage(0x0, 0x0) inotify_add_watch(r4, &(0x7f0000000080)='.\x00', 0x220) r5 = socket$inet(0x10, 0x80000, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r6, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r6, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) r7 = fcntl$dupfd(r5, 0x0, r6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r8, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r8, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, &(0x7f0000000140)={0x8}) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000100)={0xa, 0xeffc, 0x0, @mcast2, 0x5}, 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) tee(r11, r10, 0xa5, 0x6) write$selinux_load(r10, &(0x7f0000000500)={0xf97cff8c, 0x8, 'SE Linux', "c34bb9bc802259f3c9b9e6d6b88b4203ff47459c828f1cc5046c03a1e649548ef0fb4a9be05c51a931be2aa22f63326b20c6ddf062df6a7e444f6edf530ef9692ae38c358359d5b27f239565514b12cba65967445bd989e8e5d08337a576176b11ea9ac4ce8a588d08566d7e5b138be58ca6550e3fb27724a3a916c0f67ea98187274c80a5df12b42c065fcb765fca2b6de570676fa6d75bc56424b4a0d2d95c62607f0c7a4a402cd6c52c9b2d4114c6984a199eac0d92b389da8e8ac6c9b9a199ca7cd7cccdf639d9d41c6c65ccdadbf30657ae61c4a2b588eb3c5c"}, 0xec) sendmmsg(r9, &(0x7f00000092c0), 0x170, 0x0) r12 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x100400, 0x0) ioctl$FIBMAP(r12, 0x1, &(0x7f00000000c0)) inotify_init() r13 = open(0x0, 0x200c2, 0xfffffffffffffffd) write$binfmt_elf64(r13, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYPTR], 0x18) r14 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r14) bind$inet6(r14, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r14, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r15 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x0) ftruncate(r15, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r14, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7558}]}, 0x8) sendfile(r14, r15, 0x0, 0x8000fffffffe) sendfile(r13, r15, &(0x7f00000001c0), 0x800a198) [ 83.733288] binder: undelivered TRANSACTION_ERROR: 29201 22:04:03 executing program 5: rt_sigsuspend(&(0x7f0000000180)={0x4}, 0x8) creat(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2) openat$cgroup_subtree(r3, &(0x7f0000000440)='cgroup.subtree_control\x00', 0x2, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(0x0, 0x25) ptrace$setsig(0x4203, r5, 0x80000001, &(0x7f0000000100)={0x3d, 0x0, 0x851d}) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'trusted.', '/dev/loop-control\x00'}, &(0x7f00000000c0)=""/28, 0x1c) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) [ 83.841966] binder: 3600:3602 got transaction with invalid offset (589824, min 0 max 0) or object. [ 83.914285] binder: 3600:3602 transaction failed 29201/-22, size 0-24 line 3199 22:04:03 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000240)=""/175, 0xaf, 0x10000, &(0x7f00000000c0)={0xa, 0x0, 0x8, @mcast1, 0x7}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r2, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000000)) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)}, 0x1800}], 0x0, 0x0, 0x0}) [ 83.956093] binder: undelivered TRANSACTION_ERROR: 29201 [ 84.086619] binder: 3614:3615 got transaction with invalid offset (0, min 0 max 0) or object. [ 84.165002] binder: 3614:3615 transaction failed 29201/-22, size 0-24 line 3199 22:04:04 executing program 2: getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x0, 0x0, &(0x7f0000001400)) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x81, 0x4) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000001500), 0x4) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) io_cancel(0x0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x7, 0x4, 0xffffffffffffffff, &(0x7f0000001700)="cdfab2e9a729f3e6945d6e6e4296a3e487635d63d7d7e2c5f90150c0f35172da3525dfcc2c29eea03625f67ea78f199b04e88dc73ecc08818db10774681b635104255ca4fde57d75e4e795160f4a1404c3dc318c07944fb76dd0dff51a121fac65927b7b863c08aaebc8a0f340f61b836cbfdb9e61c05fefac2aac02abce40e54a799ac6fc4ad07a357c870d92dc2eb563e2a6d6ea7557616adf9e0179f0b9f1bbb61974b94af81c8a8aaf9ccdd9fdfef3c3fd63c673634007b411e17685e43c", 0xc0, 0xe, 0x0, 0x1}, &(0x7f0000001800)) prctl$PR_CAPBSET_READ(0x17, 0x2000d) recvmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$TIOCGDEV(r0, 0x80045432, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001440)) getresuid(&(0x7f0000001480), &(0x7f00000014c0), &(0x7f00000017c0)) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000001880)) write$eventfd(r1, &(0x7f00000001c0)=0x9, 0x8) pipe(&(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x15acc76c) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000480)={0x40000008}) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x40000002) dup(r3) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvfrom$unix(r5, &(0x7f0000000140)=""/102, 0x66, 0x0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x323) connect$inet(r5, &(0x7f0000001900)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000001540)=@req={0x20, &(0x7f0000000000)={'nlmon0\x00', @ifru_addrs=@ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x8}}}) 22:04:04 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_SET_PHYS(r2, 0x4008556c, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x3eb, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="096310400000000000000000000000000000000004630440030000000e630c4000000000000000000000000010630840000000000000000012634840020000000000000000000000000000000000000010000000000000000000000050000000000000001800000000000000", @ANYPTR64=&(0x7f0000000380)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/168], @ANYBLOB="000000000000000001000000000000000500000000000000852a747000000000", @ANYPTR64=&(0x7f0000001780)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000311600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cd15716c3e31cff61a7698588f9294d97867a2a828cab9fe000000000000000000"], @ANYBLOB="000000000000000002000000000000000d000000000000008561646600000000010000000000000002000000000000003b00000000000000"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"], @ANYBLOB="00000000000000000e630c400200"/24], 0x0, 0x0, 0x0}) [ 84.223611] binder: undelivered TRANSACTION_ERROR: 29201 [ 84.370036] input: syz1 as /devices/virtual/input/input84 22:04:04 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_SET_PHYS(r1, 0x4008556c, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v2={0x2000000, [{0xffffffe7, 0x8e}, {0x61, 0xffffffff}]}, 0x14, 0x2) ioctl$TCGETA(r0, 0x402c542c, &(0x7f0000000000)) [ 84.410301] binder: 3626:3629 BC_ACQUIRE_DONE u0000000000000000 no match [ 84.443887] binder: 3626:3629 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 84.489675] binder: 3626:3629 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 84.516958] binder: 3626:3629 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 84.523399] input: syz1 as /devices/virtual/input/input85 [ 84.566087] binder: 3626:3629 got reply transaction with no transaction stack [ 84.596825] binder: 3626:3629 transaction failed 29201/-71, size 80-24 line 2922 [ 84.616200] input: syz1 as /devices/virtual/input/input86 [ 84.634386] binder: undelivered TRANSACTION_ERROR: 29201 22:04:04 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x401c0442, 0x8) r2 = getuid() ioprio_set$uid(0x0, r2, 0x39bb) quotactl(0x1, &(0x7f0000000280)='./bus\x00', r2, &(0x7f00000002c0)="f9bcec3eae796426947bfb946ca42e8f4a69ae6bbc9cb0a5758353120f403465bed0") mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7fffff, 0x11, r1, 0x0) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000240)=0x1) r4 = socket$inet(0x10, 0x80000, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r5, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000be000102000007820000000000000000"], 0x14}}, 0x0) r6 = fcntl$dupfd(r4, 0x0, r5) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r7, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r7, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000140)={0x8}) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f0000000300)=0x2) ftruncate(r1, 0xffff) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0xfffffffffffffcbc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000001c0), 0xfffffef3) write$cgroup_int(r8, &(0x7f0000000380)=0x8003, 0xffffff31) sendmsg(r9, &(0x7f0000000180)={0x0, 0xef62d5202b9a2af6, 0x0, 0xffffffffffffff6d, &(0x7f0000000440)=ANY=[], 0x1f1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, 0xffffffffffffffff, 0x0) setxattr$security_smack_entry(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='security.SMACK64\x00', &(0x7f00000000c0)='threaded\x00', 0x9, 0x2) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 22:04:04 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000004f40)=[{{&(0x7f0000000180)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x20e, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e1f, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_u8={{0x0, 0x0, 0x1, 0x4c}}], 0x14}}], 0x2, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000040)=0x400002) ioctl$sock_netdev_private(r0, 0x5, &(0x7f00000001c0)="c909925ad54ba1e06268d902421e3b69c26ea96b51a3ca347b3f5e99a691b3c9996c56af3b6ce492aee705c0919acb128487cad455af71a6acec2811208af220f2fa72dc9c69eaa53233370ba865f2452a6ae9421d1e35f566ebbbb9edacb345d65a23da4122581b8a4939e05eb50f8b63ed1980814d1bf55fd3cc005fd41efb05e46235d7f6393bcfbb778a") write(0xffffffffffffffff, &(0x7f0000000080)="6e87e4e7085f24eec3d86e2631cb6f97d93dc5b329d2c181325d74b450461af0500f266fa408c9cc7b835a8e02253ea035f5a927e0bb017ffc363a2782c856febb498187aa287f4f53bbb1407bb16c4bc95f4cac69f4ae76646ba65687bcc81ad116e1504f108f026da80a945464986b26ccd215a6ce626133ae6d235b6af7827d5aa7cc69b986355e6b497e1b40fb61e91c5f11fef1c503a8edd326825d665c130d26adda97", 0xa6) [ 84.687121] binder: BINDER_SET_CONTEXT_MGR already set [ 84.697228] binder: 3626:3629 ioctl 40046207 0 returned -16 [ 84.751131] input: syz1 as /devices/virtual/input/input87 [ 84.786509] binder: 3626:3647 BC_ACQUIRE_DONE u0000000000000000 no match [ 84.816981] binder: 3626:3647 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 84.875811] binder: 3626:3647 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 84.931789] binder: 3626:3647 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 84.961498] binder: 3626:3647 got reply transaction with no transaction stack [ 84.968816] binder: 3626:3647 transaction failed 29201/-71, size 80-24 line 2922 [ 85.021639] binder: undelivered TRANSACTION_ERROR: 29201 22:04:05 executing program 1: open(&(0x7f00000001c0)='./file0\x00', 0x80, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='pids.events\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r4, &(0x7f00000001c0), 0xffffffe1) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = gettid() rt_tgsigqueueinfo(0x0, r6, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x4}, 0x4) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, &(0x7f0000000280)) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000380)={'nlmon0\x00', {0x2, 0x4e23, @multicast1}}) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000180)={'s4\x00', 0x0}) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) timerfd_gettime(r3, &(0x7f0000000100)) syncfs(0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r1, 0x0, 0x1) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f00000003c0), 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x22a) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) 22:04:05 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000240)=""/175, 0xaf, 0x10000, &(0x7f00000000c0)={0xa, 0x0, 0x8, @mcast1, 0x7}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r2, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'yam0\x00'}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x80040, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)}, 0x1800}], 0x0, 0x0, 0x0}) 22:04:05 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="1a000000000000000000000000000000e066f1d0c5fe21475b918a0c595ee8fe2e8868c51b39427fb300"/56]}) r1 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x0) ioctl$RTC_PLL_SET(r1, 0x401c7012, &(0x7f0000000400)={0x6, 0x0, 0x5, 0x0, 0x7, 0x0, 0x6}) bind$unix(r1, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x9) syz_open_pts(0xffffffffffffffff, 0x0) r3 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/create\x00', 0x2, 0x0) write$selinux_access(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a8770646174655f6d6f64756c65735f657865635f743a733020756e636f6e66696e6564203030303030303030303030303030303030303030006414cef73721059be1b9c4349a08f0bb52eacbeba062c6b16d7bf533a4e1d7095882dd1303310f0e7c92dc1ce932818e3dc7b2c5ab6230365051073f390d2ecb1ce6823508d39fe17e0f92fa9a1750d669e61b441a634e987e28d621075d2040742b44eb5115b25478f5a0c58b553eb65308c9983921440000000000"], 0x39) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) dup3(r4, r3, 0x0) fstat(r0, &(0x7f0000000340)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000001680), 0xfffffffffffffe63) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) fcntl$setownex(r6, 0xf, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz0\x00', 0x1ff) r7 = socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sysinfo(&(0x7f0000008c00)=""/4096) socket$nl_route(0x10, 0x3, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x5cb4e168, 0x4) get_robust_list(0x0, &(0x7f0000000580)=&(0x7f0000000180), &(0x7f00000005c0)=0xc) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) getsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000000), 0x0) 22:04:05 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) write$UHID_CREATE(r0, &(0x7f0000001480)={0x0, 'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000380)=""/109, 0x6d, 0x9, 0x0, 0x1f, 0x0, 0x2}, 0x11c) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) memfd_create(0x0, 0x0) r2 = inotify_init() ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000000c0)={0x0, 0x6, 0x8001, 0x9, 0x4, "da79b2015a705760ffe9866df7c7fc77cba0de", 0xff, 0x5}) inotify_add_watch(r2, &(0x7f0000000080)='.\x00', 0xc00000fe) add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000440)="385aa4486675f4c392b1ce84e3df6464d764d27b86f2eab5069682730ce9cf3bc918ae7702f7b89a9ff1e79611a3fc1dbb5166e0b90ce2cd5ab743453e32396b0c31f365c1edd3ee8a3e8830abf5e304a52e09bf9c34f2f31282893b8986ccc861386188b33c331e69642ebdabafeaf1c01b56780e34b1642fa636b0c5841c4541bbce749a9a6d63be6ea6c4ad3c8f6b95a339ee3ed0187c74", 0x99, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000180)='big_key\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000500)='%bdev-\x00', 0x0) keyctl$get_security(0x11, r3, 0x0, 0xfffffcee) socket$inet6(0xa, 0x12, 0x24) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$reject(0x13, 0x0, 0x800000, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r4 = open(&(0x7f0000000400)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r4, &(0x7f0000000280)=ANY=[@ANYRESDEC], 0x14) sendfile(r4, r4, &(0x7f00000001c0), 0xa198) 22:04:05 executing program 2: getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x0, 0x0, &(0x7f0000001400)) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x81, 0x4) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000001500), 0x4) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) io_cancel(0x0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x7, 0x4, 0xffffffffffffffff, &(0x7f0000001700)="cdfab2e9a729f3e6945d6e6e4296a3e487635d63d7d7e2c5f90150c0f35172da3525dfcc2c29eea03625f67ea78f199b04e88dc73ecc08818db10774681b635104255ca4fde57d75e4e795160f4a1404c3dc318c07944fb76dd0dff51a121fac65927b7b863c08aaebc8a0f340f61b836cbfdb9e61c05fefac2aac02abce40e54a799ac6fc4ad07a357c870d92dc2eb563e2a6d6ea7557616adf9e0179f0b9f1bbb61974b94af81c8a8aaf9ccdd9fdfef3c3fd63c673634007b411e17685e43c", 0xc0, 0xe, 0x0, 0x1}, &(0x7f0000001800)) prctl$PR_CAPBSET_READ(0x17, 0x2000d) recvmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$TIOCGDEV(r0, 0x80045432, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001440)) getresuid(&(0x7f0000001480), &(0x7f00000014c0), &(0x7f00000017c0)) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000001880)) write$eventfd(r1, &(0x7f00000001c0)=0x9, 0x8) pipe(&(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x15acc76c) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000480)={0x40000008}) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x40000002) dup(r3) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvfrom$unix(r5, &(0x7f0000000140)=""/102, 0x66, 0x0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x323) connect$inet(r5, &(0x7f0000001900)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000001540)=@req={0x20, &(0x7f0000000000)={'nlmon0\x00', @ifru_addrs=@ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x8}}}) 22:04:05 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7, 0x0, &(0x7f0000000340)}, 0x1800}], 0x0, 0x0, 0x0}) [ 85.498741] binder: 3659:3663 got transaction with invalid offset (0, min 0 max 0) or object. [ 85.513763] binder: 3659:3663 transaction failed 29201/-22, size 0-24 line 3199 [ 85.522819] binder: undelivered TRANSACTION_ERROR: 29201 22:04:05 executing program 4: r0 = openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') preadv(r1, 0x0, 0x0, 0x6c00) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x5dd7d56a, 0xfffffffffffffd3d) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000002e80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[@rights={{0x10, 0x1, 0x1, [r5]}}], 0x10}], 0x1, 0x0) dup2(r8, r6) dup2(0xffffffffffffffff, r7) r9 = open(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x12201, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) recvfrom$inet6(r12, &(0x7f0000000240)=""/175, 0xaf, 0x10000, &(0x7f00000000c0)={0xa, 0x0, 0x8, @mcast1, 0x7}, 0x1c) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r13, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r13, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$LOOP_SET_FD(r12, 0x4c00, r13) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r14, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r14, 0x5501) ioctl$UI_SET_PHYS(r14, 0x4008556c, 0x0) sendmsg$unix(r12, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYPTR64=&(0x7f0000000440)=ANY=[], @ANYPTR64, @ANYRES32=r6, @ANYBLOB="56a0c7931c6c833d9b", @ANYRESDEC=r1, @ANYBLOB="d3a05bbe9a3e4a67b3fe61d4ea096fa1e69a3e67d7ed7168c609cfd929a59f5cbc6731cd9cd091bbbfc17ae82dda03608b9b32d4ad8db695a85689b93998a5d6b1d43cca27c5ff4e07ad33a3d0c5942aac96be6df5cbc699f20297afa8489bb11020cbb4e99d0e1c872baa28f2c02b0ba040cc651ce1a338fe0c0ccbb87d2362a070715ac7cf2df96230aed28c3328f288f64dfcf66b79d985f1c031bc2d7a", @ANYRES32=0x0, @ANYPTR64=&(0x7f0000000640)=ANY=[@ANYBLOB="a8b3a5436dcaf5586cd899059cac3a7d28d2bd71f314dc503dd3af6bad4370980ba1ad70b969ef98d5084526876fee9c0d7d644ce572d11c456c2516d868860b502a3a491f4c59ba0e3d4c98b174c7cda49b", @ANYRES16], @ANYBLOB="b5ff31893ea0b81b055c7ee1ad9bf08660e858ea952933a50b2715f48ac339d133a042e2742994131e665fd999b4f264e6f795b863071c14d9642592421e3dd859472d17ca07582b2fdf7db09b5708", @ANYRES16], 0x12d}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r15, &(0x7f0000002e80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[@rights={{0x10, 0x1, 0x1, [r10]}}], 0x10}], 0x1, 0x0) dup2(r16, r11) dup2(r16, r15) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r18, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rights={{0x10, 0x1, 0x1, [r18]}}], 0x10}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r19, &(0x7f0000002e80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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", @ANYRES32=r17], 0x10}], 0x1, 0x0) dup2(r20, r18) dup2(r18, r17) r21 = socket$packet(0x11, 0x3, 0x300) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000100)=[{r8, 0x80c1}, {r9, 0xc}, {r1, 0x1002}, {0xffffffffffffffff, 0x20}, {r0, 0xc502}, {r15, 0x358ed9cdd3ea45e6}, {r17, 0x1}, {r21, 0x8}], 0x8, &(0x7f0000000300)={r22, r23+30000000}, &(0x7f0000000340)={0x8}, 0x8) r24 = request_key(&(0x7f0000000600)='ceph\x00', &(0x7f0000000400)={'\x00', 0x1}, &(0x7f00000005c0)='/dev/binder#\x00', 0xfffffffffffffffe) keyctl$instantiate_iov(0x14, r24, &(0x7f0000000800), 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r25 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$UI_SET_LEDBIT(r25, 0x40045569, 0xb) sendmmsg(r4, &(0x7f0000007fc0), 0x5654807, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x2) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000380)={0xe10b, 0x37d, 0xb2, 0x8, 0xb, 0x6f, 0x5, 0x1, 0x76ce02ea}) [ 85.584320] binder: 3674:3676 got transaction with invalid offsets size, 215 [ 85.640783] binder: 3674:3676 transaction failed 29201/-22, size 0-215 line 3172 [ 85.702486] binder: undelivered TRANSACTION_ERROR: 29201 [ 85.724774] binder: 3674:3693 got transaction with invalid offsets size, 215 [ 85.770448] binder: 3674:3693 transaction failed 29201/-22, size 0-215 line 3172 22:04:05 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)}, 0x1800}], 0x0, 0x0, 0x0}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x10800, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f00000000c0)={{0x1, @rand_addr=0xbd, 0x4e21, 0x0, 'lc\x00', 0x18, 0x8, 0x7c}, {@empty, 0x4e20, 0x10000, 0x3f, 0x9eab, 0x7}}, 0x44) [ 85.825699] binder: undelivered TRANSACTION_ERROR: 29201 [ 85.841713] input: syz1 as /devices/virtual/input/input88 [ 85.950783] binder: 3700:3701 got transaction with invalid offset (0, min 0 max 0) or object. [ 86.009811] binder: 3700:3701 transaction failed 29201/-22, size 0-24 line 3199 [ 86.052055] binder: undelivered TRANSACTION_ERROR: 29201 [ 86.063333] binder: BINDER_SET_CONTEXT_MGR already set [ 86.068877] binder: 3700:3702 ioctl 40046207 0 returned -16 [ 86.102478] binder: 3700:3702 transaction failed 29189/-22, size 0-24 line 3014 22:04:06 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet(0x10, 0x80000, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r2, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r4, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) recvfrom$inet6(r5, &(0x7f0000000240)=""/175, 0xaf, 0x10000, &(0x7f00000000c0)={0xa, 0x0, 0x8, @mcast1, 0x7}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r6, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r6, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) connect$netlink(r6, &(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x2}, 0xc) sendmsg$nl_netfilter(r4, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000140)={0x8}) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x8) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)}, 0x1800}], 0x0, 0x0, 0x0}) [ 86.157576] binder: undelivered TRANSACTION_ERROR: 29189 [ 86.272948] binder: 3704:3705 got transaction to invalid handle [ 86.295895] binder: 3704:3705 transaction failed 29201/-22, size 0-24 line 3014 [ 86.325580] binder: undelivered TRANSACTION_ERROR: 29201 22:04:06 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000006c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) fchdir(r0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0xaa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000440)={'veth0_to_bond\x00', {0x2, 0x4e24, @local}}) fchdir(r0) r3 = creat(&(0x7f0000000600)='./bus\x00', 0x1000000000000000) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, 0x0, &(0x7f0000000280)) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) r4 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000340)=0xa4) syz_open_procfs(r6, &(0x7f0000000640)='net/igmp\x00') write$P9_RWRITE(r3, &(0x7f0000000380)={0xb, 0x77, 0x1, 0x1}, 0xb) write$P9_RFLUSH(r4, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) syz_emit_ethernet(0x0, &(0x7f0000000300)=ANY=[], 0x0) fsync(r4) write$UHID_SET_REPORT_REPLY(r3, &(0x7f0000000700)={0xe, 0x4, 0x40, 0x100000000, 0xd1, "2fd681117a8442cf5839260aecb6c045bffdca1ccaca4002ef0e2a071cbf1de2f6d5a8113d8033378dfdd3dece62aa2a1802c3af2afd49c304121929b460b8fa0c37f70000de3e3318f5fa2e1fa67cbe615556f117685828b586901da42cc62828c5f8bf9ec3968c866b8c24148f18a92035fee5ebe0eb5f3c80ac02dfad1eda3a257bde87c329eebad6e7225a45482fc52fe3b0f4f70a9f010e3148201bbeaaf438eb2468579b03e8d054eb837993fce52e1f5e0cb2175644b8da7c37c7be8054a2208c07b11344547c53ce16d2e72275"}, 0xdd) clock_getres(0x7, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000480)={0x0, 0x0}) rt_sigprocmask(0x1, &(0x7f00000001c0)={0x2}, &(0x7f0000000240), 0x8) fchmod(r5, 0x1) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000800)={'filter\x00', 0x4}, 0x68) ptrace$setregs(0xf, r7, 0x7fffffff, &(0x7f0000000500)="eb1ef0739b6749522c35d67a594026aea593f01da7eef2830ab5e68c76eb0b7830eb49e3af268ef114f779d8c4d0692ab3ffea4280cc907e389266e55e41864e5b35f7b954371f3546ee188417adcda30a498a58618069c1290e8a44747dc728dd1751878638080e98eee7fde832c668997e306fddac6a110b0742c21e2de3f7ca60fd81f64241804eecb1db42ac7ca5e72786f5973b9fa6b427d8a1a6ee4e09c7963f2abd866210c3426bf37e0070ece4c985997e8f17764f2b244687dcccd92f1e4c72d65bda228f57aa598a30446da7e347f9212f68c092801fe17cafe57042400ec43d5b2734") r8 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$namespace(r6, &(0x7f0000000140)='ns/cgroup\x00') sendmsg$nl_netfilter(r8, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000030101ff4a07887c81136984000000008cbf5fbe4e85cfdf3bec3a6a8522b97c1feb"], 0x14}}, 0x0) 22:04:06 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040), 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000640)='/dev/zero\x00', 0x800, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000580)=0x1b4) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[]}}, 0x0) getsockname$packet(r7, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x39e) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB]}}, 0x0) getsockname$packet(r9, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x39e) r12 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCCONS(r12, 0x541d) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000340)={'team0\x00', r11}) r13 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r13, 0x0, 0x0) getsockname$packet(r13, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) r15 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCCONS(r15, 0x541d) ioctl$ifreq_SIOCGIFINDEX_team(r15, 0x8933, &(0x7f0000000340)={'team0\x00', r14}) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000980)={0x4a8, r4, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r6}, {0xe0, 0x2, [{0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0x2, 0x48, 0xff}, {0x379c, 0xa, 0x0, 0x8000}, {0x13a, 0x0, 0x4, 0x3}, {0x40, 0x0, 0x0, 0x6}, {0x0, 0xff, 0x1f, 0x4}, {}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x8001}}}]}}, {{0x8}, {0x100, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x44, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xfc, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}]}}, {{0x8}, {0xb4, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r14}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x4a8}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5001080}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r4, 0x100, 0x70bd26, 0x25dfdbfc, {}, [{{0x8}, {0x40, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}]}, 0x5c}}, 0x0) r16 = socket$inet6(0xa, 0x400000004805, 0x8) ioctl(r16, 0x801000008912, &(0x7f0000000340)="0a5c2d023c126285718070") ftruncate(r16, 0xffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r16, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) r18 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r18, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r18, 0x6, 0x0, &(0x7f0000000380)=0xffffffff80000001, 0x3) setsockopt$IP_VS_SO_SET_STOPDAEMON(r18, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'team0\x00', 0x2}, 0x18) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r18, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @mss, @mss, @timestamp, @timestamp], 0x5) fremovexattr(r18, &(0x7f00000007c0)=@known='system.posix_acl_access\x00') setsockopt$inet_tcp_TCP_REPAIR(r18, 0x6, 0x13, &(0x7f0000000280), 0x7) r19 = open(&(0x7f0000000240)='./file0\x00', 0x101000, 0xc1) getsockopt$inet_mreqn(r18, 0x0, 0x0, &(0x7f0000000340)={@rand_addr, @remote, 0x0}, &(0x7f0000000440)=0xc) connect$packet(r19, &(0x7f0000000480)={0x11, 0x4, r20, 0x1, 0x0, 0x6, @broadcast}, 0x14) r21 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r21, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r21, 0x6, 0x0, &(0x7f0000000380)=0xffffffff80000001, 0x3) setsockopt$IP_VS_SO_SET_STOPDAEMON(r21, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'team0\x00', 0x2}, 0x18) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r21, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @mss, @mss, @timestamp, @timestamp], 0x5) fremovexattr(r21, &(0x7f00000007c0)=@known='system.posix_acl_access\x00') setsockopt$inet_tcp_TCP_REPAIR(r21, 0x6, 0x13, &(0x7f0000000280), 0x7) r22 = open(&(0x7f0000000240)='./file0\x00', 0x101000, 0xc1) getsockopt$inet_mreqn(r21, 0x0, 0x0, &(0x7f0000000340)={@rand_addr, @remote, 0x0}, &(0x7f0000000440)=0xc) connect$packet(r22, &(0x7f0000000480)={0x11, 0x4, r23, 0x1, 0x0, 0x6, @broadcast}, 0x14) r24 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r24, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r24, 0x6, 0x0, &(0x7f0000000380)=0xffffffff80000001, 0x3) setsockopt$IP_VS_SO_SET_STOPDAEMON(r24, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'team0\x00', 0x2}, 0x18) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r24, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @mss, @mss, @timestamp, @timestamp], 0x5) fremovexattr(r24, &(0x7f00000007c0)=@known='system.posix_acl_access\x00') setsockopt$inet_tcp_TCP_REPAIR(r24, 0x6, 0x13, &(0x7f0000000280), 0x7) r25 = open(&(0x7f0000000240)='./file0\x00', 0x101000, 0xc1) getsockopt$inet_mreqn(r24, 0x0, 0x0, &(0x7f0000000340)={@rand_addr, @remote, 0x0}, &(0x7f0000000440)=0xc) connect$packet(r25, &(0x7f0000000480)={0x11, 0x4, r26, 0x1, 0x0, 0x6, @broadcast}, 0x14) r27 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r27, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r27, 0x6, 0x0, &(0x7f0000000380)=0xffffffff80000001, 0x3) setsockopt$IP_VS_SO_SET_STOPDAEMON(r27, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'team0\x00', 0x2}, 0x18) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r27, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @mss, @mss, @timestamp, @timestamp], 0x5) fremovexattr(r27, &(0x7f00000007c0)=@known='system.posix_acl_access\x00') setsockopt$inet_tcp_TCP_REPAIR(r27, 0x6, 0x13, &(0x7f0000000280), 0x7) r28 = open(&(0x7f0000000240)='./file0\x00', 0x101000, 0xc1) getsockopt$inet_mreqn(r27, 0x0, 0x0, &(0x7f0000000340)={@rand_addr, @remote, 0x0}, &(0x7f0000000440)=0xc) connect$packet(r28, &(0x7f0000000480)={0x11, 0x4, r29, 0x1, 0x0, 0x6, @broadcast}, 0x14) r30 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r30, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r30, 0x6, 0x0, &(0x7f0000000380)=0xffffffff80000001, 0x3) setsockopt$IP_VS_SO_SET_STOPDAEMON(r30, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'team0\x00', 0x2}, 0x18) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r30, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @mss, @mss, @timestamp, @timestamp], 0x5) fremovexattr(r30, &(0x7f00000007c0)=@known='system.posix_acl_access\x00') setsockopt$inet_tcp_TCP_REPAIR(r30, 0x6, 0x13, &(0x7f0000000280), 0x7) r31 = open(&(0x7f0000000240)='./file0\x00', 0x101000, 0xc1) getsockopt$inet_mreqn(r30, 0x0, 0x0, &(0x7f0000000340)={@rand_addr, @remote, 0x0}, &(0x7f0000000440)=0xc) connect$packet(r31, &(0x7f0000000480)={0x11, 0x4, r32, 0x1, 0x0, 0x6, @broadcast}, 0x14) r33 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r33, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r33, 0x6, 0x0, &(0x7f0000000380)=0xffffffff80000001, 0x3) setsockopt$IP_VS_SO_SET_STOPDAEMON(r33, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'team0\x00', 0x2}, 0x18) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r33, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @mss, @mss, @timestamp, @timestamp], 0x5) fremovexattr(r33, &(0x7f00000007c0)=@known='system.posix_acl_access\x00') setsockopt$inet_tcp_TCP_REPAIR(r33, 0x6, 0x13, &(0x7f0000000280), 0x7) r34 = open(&(0x7f0000000240)='./file0\x00', 0x101000, 0xc1) getsockopt$inet_mreqn(r33, 0x0, 0x0, &(0x7f0000000340)={@rand_addr, @remote, 0x0}, &(0x7f0000000440)=0xc) connect$packet(r34, &(0x7f0000000480)={0x11, 0x4, r35, 0x1, 0x0, 0x6, @broadcast}, 0x14) r36 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r36, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r36, 0x6, 0x0, &(0x7f0000000380)=0xffffffff80000001, 0x3) setsockopt$IP_VS_SO_SET_STOPDAEMON(r36, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'team0\x00', 0x2}, 0x18) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r36, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @mss, @mss, @timestamp, @timestamp], 0x5) fremovexattr(r36, &(0x7f00000007c0)=@known='system.posix_acl_access\x00') setsockopt$inet_tcp_TCP_REPAIR(r36, 0x6, 0x13, &(0x7f0000000280), 0x7) r37 = open(&(0x7f0000000240)='./file0\x00', 0x101000, 0xc1) getsockopt$inet_mreqn(r36, 0x0, 0x0, &(0x7f0000000340)={@rand_addr, @remote, 0x0}, &(0x7f0000000440)=0xc) connect$packet(r37, &(0x7f0000000480)={0x11, 0x4, r38, 0x1, 0x0, 0x6, @broadcast}, 0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in=@multicast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@initdev}}, &(0x7f0000000300)=0xe8) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x80) r43 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r43, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r43, 0x6, 0x0, &(0x7f0000000380)=0xffffffff80000001, 0x3) setsockopt$IP_VS_SO_SET_STOPDAEMON(r43, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'team0\x00', 0x2}, 0x18) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r43, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @mss, @mss, @timestamp, @timestamp], 0x5) fremovexattr(r43, &(0x7f00000007c0)=@known='system.posix_acl_access\x00') setsockopt$inet_tcp_TCP_REPAIR(r43, 0x6, 0x13, &(0x7f0000000280), 0x7) r44 = open(&(0x7f0000000240)='./file0\x00', 0x101000, 0xc1) getsockopt$inet_mreqn(r43, 0x0, 0x0, &(0x7f0000000340)={@rand_addr, @remote, 0x0}, &(0x7f0000000440)=0xc) connect$packet(r44, &(0x7f0000000480)={0x11, 0x4, r45, 0x1, 0x0, 0x6, @broadcast}, 0x14) r46 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r46, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r46, 0x6, 0x0, &(0x7f0000000380)=0xffffffff80000001, 0x3) setsockopt$IP_VS_SO_SET_STOPDAEMON(r46, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'team0\x00', 0x2}, 0x18) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r46, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @mss, @mss, @timestamp, @timestamp], 0x5) fremovexattr(r46, &(0x7f00000007c0)=@known='system.posix_acl_access\x00') setsockopt$inet_tcp_TCP_REPAIR(r46, 0x6, 0x13, &(0x7f0000000280), 0x7) r47 = open(&(0x7f0000000240)='./file0\x00', 0x101000, 0xc1) getsockopt$inet_mreqn(r46, 0x0, 0x0, &(0x7f0000000340)={@rand_addr, @remote, 0x0}, &(0x7f0000000440)=0xc) connect$packet(r47, &(0x7f0000000480)={0x11, 0x4, r48, 0x1, 0x0, 0x6, @broadcast}, 0x14) r49 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) recvfrom$inet6(r49, &(0x7f0000000240)=""/175, 0xaf, 0x10000, &(0x7f00000000c0)={0xa, 0x0, 0x8, @mcast1, 0x7}, 0x1c) r50 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r50, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r50, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$LOOP_SET_FD(r49, 0x4c00, r50) getsockname$packet(r49, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000600)=0x14) r52 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r52, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r52, 0x6, 0x0, &(0x7f0000000380)=0xffffffff80000001, 0x3) setsockopt$IP_VS_SO_SET_STOPDAEMON(r52, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'team0\x00', 0x2}, 0x18) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r52, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @mss, @mss, @timestamp, @timestamp], 0x5) fremovexattr(r52, &(0x7f00000007c0)=@known='system.posix_acl_access\x00') setsockopt$inet_tcp_TCP_REPAIR(r52, 0x6, 0x13, &(0x7f0000000280), 0x7) r53 = open(&(0x7f0000000240)='./file0\x00', 0x101000, 0xc1) getsockopt$inet_mreqn(r52, 0x0, 0x0, &(0x7f0000000340)={@rand_addr, @remote, 0x0}, &(0x7f0000000440)=0xc) connect$packet(r53, &(0x7f0000000480)={0x11, 0x4, r54, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10400040}, 0xc, &(0x7f0000000640)={&(0x7f0000000740)={0x64c, r4, 0x400, 0x70bd29, 0x25dfdbfb, {}, [{{0x8}, {0x1a8, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x3800000}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r20}}}]}}, {{0x8, 0x1, r23}, {0xc0, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r26}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r29}, {0x1f0, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xfff}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r32}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r35}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r38}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x1000}}, {0x8, 0x6, r39}}}]}}, {{0x8, 0x1, r40}, {0x4}}, {{0x8, 0x1, r41}, {0xac, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xb86}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xe5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r42}, {0x7c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r45}}, {0x8}}}]}}, {{0x8, 0x1, r48}, {0x7c, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r51}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r54}}}]}}]}, 0x64c}, 0x1, 0x0, 0x0, 0x800}, 0x20040080) r55 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r55, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)}, 0x1800}], 0x0, 0x0, 0x0}) [ 86.664324] input: syz1 as /devices/virtual/input/input89 [ 86.805636] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 22:04:06 executing program 2: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x1044, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r0 = gettid() r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RSETATTR(r1, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000008ff8)=0x3f) recvfrom$unix(r3, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setown(r2, 0x8, r0) write$P9_RWALK(r1, 0x0, 0x0) fcntl$setsig(r2, 0xa, 0x12) dup2(r2, r3) tkill(r0, 0x16) [ 86.902653] binder: 3717:3720 got transaction with invalid offset (0, min 0 max 0) or object. [ 86.960545] binder: 3717:3720 transaction failed 29201/-22, size 0-24 line 3199 [ 87.103261] binder: BINDER_SET_CONTEXT_MGR already set [ 87.109925] binder: 3717:3723 ioctl 40046207 0 returned -16 [ 87.187645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 87.327551] binder: undelivered TRANSACTION_ERROR: 29201 22:04:08 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) clone(0x0, &(0x7f00000001c0), 0x0, &(0x7f00000002c0), &(0x7f0000000300)) ioctl(r0, 0xc0084905, &(0x7f0000000080)) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) r4 = syz_open_dev$binderN(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x1) read(r4, &(0x7f00000008c0)=""/235, 0xeb) fchdir(0xffffffffffffffff) r5 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r6) r7 = creat(&(0x7f0000000480)='./bus\x00', 0xfffffffffffffffd) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) fcntl$setstatus(r7, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) lseek(r7, 0x0, 0x2) sendfile(r7, r8, 0x0, 0xfffffffffffffffc) sendfile(r7, r8, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r5, &(0x7f0000000340)='./bus/file0\x00', 0x10) syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') openat$cgroup_ro(r6, &(0x7f0000000140)='cpuacct.usage\x8f\xb1\xa3{\xcf', 0x0, 0x0) setrlimit(0x8, &(0x7f0000001240)={0x1, 0x4}) 22:04:08 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_SET_PHYS(r2, 0x4008556c, 0x0) fcntl$dupfd(r1, 0x0, r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0xce, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="116348400000004a00000000000000000000000000000000000000000000000000000000000000001800000000020000000000000000000004027523d5262a4e1d797228fdc8f7eb07e657a6545239267930de0b29f62a62e09f8c254df8288578994fa5dfdc86b1d9d7c183387a86d2d44f0ad9c986516bee99778293bfde9d8a457cbeda209ae6dd416caef087847d2a732a71134a905cbf719acde0e28b1d14f317e68ae08ae603208f396f11aeb562ebca68a3e8acb85fe700000000", @ANYPTR64=&(0x7f0000000000)=ANY=[], @ANYBLOB="0018000000000000"], 0x0, 0x0, 0x0}) 22:04:08 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0xfffffffffffffef6) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000380)={'veth1_to_hsr\x00', 0x9}) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getpeername$inet(r2, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f00000000c0)=0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000580)=[{0x48000015, 0x0, 0x0, 0x4}, {0x6, 0x0, 0x0, 0xfffffffffffffffd}]}) munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) ioctl$sock_ifreq(r6, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r6) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/92, 0x5c}, {0x0}, {&(0x7f0000000100)=""/9, 0x9}], 0x3, 0x0) dup3(r5, r7, 0x0) readahead(r3, 0x401, 0x0) 22:04:08 executing program 2: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/153, 0x99}, {&(0x7f0000000600)=""/88, 0x58}, {&(0x7f0000000740)=""/218, 0xda}, {&(0x7f0000000840)=""/189, 0xbd}], 0x4, 0x0) ftruncate(r3, 0x2081fc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) r6 = open(&(0x7f0000000940)='./bus\x00', 0x141042, 0x8) ioctl$FS_IOC_SETFLAGS(r2, 0x40046602, &(0x7f0000000280)=0x40) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r6, 0x27) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000400)=""/165) read(r4, &(0x7f0000000000)=""/250, 0x128b9372) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='fd/3\x00') r8 = socket$nl_generic(0x10, 0x3, 0x10) vmsplice(r8, &(0x7f0000000100)=[{&(0x7f0000000980)="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", 0x1000}], 0x1, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r7, 0x1, 0x1, &(0x7f0000000500), 0x4) madvise(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x9) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0xf642e7e) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x100000001}, 0xfffffe2d) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_ADD(r9, 0x40246608, &(0x7f0000000140)={0xfffffffffffffff8, 0xffffffffffffff01, 0x0, 0x6, 0xffff, 0x2}) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f0000000240)={0x2, 0x5, 0xffffffffe8c40d75, 0x6, 0x80, 0x1}) gettid() 22:04:08 executing program 5: syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x2000) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) splice(r0, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1d7, 0x0) fchdir(r0) r3 = creat(&(0x7f0000000240)='./file1\x00', 0x10) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000140)={@empty, 0x33}) ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/create\x00', 0x2, 0x0) write$P9_RFLUSH(r3, &(0x7f0000000300)={0x12}, 0x7) getegid() write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYRES32], 0x4) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, &(0x7f0000000500)={0x3, 0x80000001, {0x56, 0x2, 0xfffffffffffffc00, {0xf2, 0x2a}, {0x0, 0x5}, @period={0x0, 0x0, 0x3f, 0x9, 0x7ff, {0x94bc, 0x2, 0x5}, 0x2, &(0x7f0000000480)=[0x5, 0x85e]}}, {0x53, 0x100000001, 0x6, {0xa22}, {0x0, 0x401}, @ramp={0xf38, 0x3, {0x80, 0x0, 0x0, 0x8}}}}) memfd_create(&(0x7f0000000340)='\x00', 0x1) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)={0x0, @multicast2, 0x4e24, 0x0, 'rr\x00'}, 0x2c) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000004c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = epoll_create1(0x0) dup2(r6, r5) recvmmsg(r4, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000680)) r7 = getpid() syz_open_procfs(r7, &(0x7f00000006c0)='net/ip6_tables_targets\x00') pipe(0x0) socket$inet6(0x10, 0x480000000801, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="550000001e007f5300fe01b2a4a280f20006000000a8430891000000080009000a000c0000dc9b131338d54400009b84136ef75afb83de448daa7227c43ab8221000060cec4fab91d400"/85, 0x55}]}, 0x0) sendmsg(r3, &(0x7f0000000100)={0x0, 0x33c, &(0x7f0000000340)=[{&(0x7f0000000400)="550000001e007f5300fe01b2a4a280f20006000000a8430891000000080009000a000c0000dc9b131338d54400009b84136ef75afb83de448daa7227c43ab8221000060cec4fab91d400"/85, 0xfffffeae}], 0x1}, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x8) 22:04:08 executing program 3: ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x9f, 0x0) ppoll(0x0, 0x0, &(0x7f0000000380)={0x77359400}, 0x0, 0x0) prctl$PR_GET_SECUREBITS(0x1b) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) fremovexattr(0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000a40)=""/250, 0xffffff72) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) sendfile64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x12) getpid() ioprio_get$pid(0x0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) waitid(0x2, 0x0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCDELDLCI(r3, 0x8981, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x8}) syz_genetlink_get_family_id$net_dm(&(0x7f00000002c0)='NET_DM\x00') r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\b\xf0\x89\xff\xa0\x19\xdc\xd5\xa3n\xe5j', 0x3a1240, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x90800, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'veth0\x00', 0x200}) close(r4) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685, &(0x7f0000000040)={0x1, 0x4, 0x1000, 0x0, &(0x7f0000000100), 0x6d, 0x0, &(0x7f0000000200)="7c240924e66f27cd6ce6f45a480645675869ebf38a473bb1ca38889079379c593f13f8c5835310d233e5e3d073bbf7015a2b1b233db6021e10f10f4f53c3d45d4fed876617541cf219149119f92951dcc3bd933fe117c90b0eb69ca7f8842a370b98f04dabb70d3772eed05d28"}) preadv(0xffffffffffffffff, &(0x7f0000000700), 0x31f, 0x10400003) [ 88.232682] input: syz1 as /devices/virtual/input/input90 [ 88.258486] binder: 3742:3750 got transaction to invalid handle [ 88.290412] binder: 3742:3750 transaction failed 29201/-22, size 103079215104-512 line 3014 [ 88.364303] binder: undelivered TRANSACTION_ERROR: 29201 [ 88.403855] input: syz1 as /devices/virtual/input/input91 22:04:08 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84400) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000040)={0x80, 0xdb, 0x6, 0x4}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)}, 0x1800}], 0x0, 0x0, 0x0}) [ 88.654430] binder: 3780:3781 got transaction with invalid offset (0, min 0 max 0) or object. [ 88.718277] binder: 3780:3781 transaction failed 29201/-22, size 0-24 line 3199 [ 88.760000] binder: undelivered TRANSACTION_ERROR: 29201 [ 88.775766] binder: 3780:3782 got transaction with invalid offset (0, min 0 max 0) or object. 22:04:08 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)}, 0x1800}], 0x0, 0x0, 0x0}) [ 88.809948] binder: 3780:3782 transaction failed 29201/-22, size 0-24 line 3199 [ 88.840731] binder: undelivered TRANSACTION_ERROR: 29201 [ 88.926575] binder_alloc: binder_alloc_mmap_handler: 3784 20ff4000-21000000 already mapped failed -16 [ 88.954308] binder_alloc: 3784: binder_alloc_buf, no vma [ 88.997271] binder: 3784:3785 transaction failed 29189/-3, size 0-24 line 3137 [ 89.084954] binder: undelivered TRANSACTION_ERROR: 29189 [ 89.117978] binder_alloc: binder_alloc_mmap_handler: 3784 20ff4000-21000000 already mapped failed -16 22:04:08 executing program 1: getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)={'broute\x00'}, &(0x7f0000000180)=0x50) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) listen(r0, 0x80) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x62, &(0x7f0000000340), &(0x7f0000000380)=0x8) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="1900008807012557a253849cd0b8006282c0000000000000000000780100e9fff7a320f6c7a760c9020000000d93750ac9afb62fd22028490e215ed1274370b4af55fd1d781b26263e2d75c487c9a1b2c6601371ef2b1bf77936d549bc06c752f16ad6742c2bed95b1cb0a6024fb74b1396a2704dd"], 0x19) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TIOCSIG(r3, 0x40045436, 0x15) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0x2df, &(0x7f0000000340)={&(0x7f00000000c0)={0x1c, r4, 0x200, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x86}, 0x4000) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x102}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r4, 0x800, 0x70bd27, 0x25dfdbfe, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) recvfrom$inet6(r5, &(0x7f0000000240)=""/175, 0xaf, 0x10000, &(0x7f00000000c0)={0xa, 0x0, 0x8, @mcast1, 0x7}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r6, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r6, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = socket(0x4000e, 0x0, 0x5) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r7, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x5}, 0xc, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB="34000000e821af4ebf79b8cb5da03d47dab221348904f070f41d098a437d9db42503082e509234a6edf9787e9c0793ea6bab4e267379e399d23f1fb0bc5bfb7dbb25dd3bcbc3c4f8133c82b191dd02efd8620f00f83c58725dbc14167450221229c99c5bf5bc4538341b334f57702f254b043f09be96386e39d0352a704db70a35cdd4cf5f13cc27d7af9d6da2c139aca38e8281006393fd4e3e8337f9a1c367d9fe1d68f995c44fc9a76c40769959678c30c275689a44e5dd5baba8466d2640a0c5ee74373c308c06b7dad3d9f21daef41ece80445c3cb29b759ce3cb60476509", @ANYRES16=r8, @ANYRES16], 0x3}, 0x1, 0x0, 0x0, 0x50}, 0x20044014) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x94, r8, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff7}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3f}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x47}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3e, 0x1}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @loopback, 0x1}, 0x1c) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0xfc64) write(r3, &(0x7f00000004c0)="427bad1ba58676143d84a1846d8901929893", 0x12) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r10 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r10, &(0x7f00000002c0)="2059ae6e6dbba3a79ffe", 0xfffffffffffffe56, 0x0, 0x0, 0x0) 22:04:09 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)}, 0x1800}], 0x0, 0x0, 0x0}) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) [ 89.265079] binder: 3794:3797 got transaction with invalid offset (0, min 0 max 0) or object. [ 89.315276] binder: 3794:3797 transaction failed 29201/-22, size 0-24 line 3199 [ 89.351127] binder: undelivered TRANSACTION_ERROR: 29201 [ 89.356786] binder: BINDER_SET_CONTEXT_MGR already set 22:04:09 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0xfffffffffffffef6) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000380)={'veth1_to_hsr\x00', 0x9}) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getpeername$inet(r2, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f00000000c0)=0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000580)=[{0x48000015, 0x0, 0x0, 0x4}, {0x6, 0x0, 0x0, 0xfffffffffffffffd}]}) munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) ioctl$sock_ifreq(r6, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r6) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/92, 0x5c}, {0x0}, {&(0x7f0000000100)=""/9, 0x9}], 0x3, 0x0) dup3(r5, r7, 0x0) readahead(r3, 0x401, 0x0) [ 89.372145] binder: 3794:3801 ioctl 40046207 0 returned -16 [ 89.396821] binder: 3794:3801 transaction failed 29189/-22, size 0-24 line 3014 22:04:09 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) write$P9_RWSTAT(r2, &(0x7f0000000040)={0x7, 0x7f, 0x1}, 0x7) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)={0x0, 0x0, 0xffffffffffffffee}}}], 0x0, 0x0, 0x0}) [ 89.434143] binder: undelivered TRANSACTION_ERROR: 29189 [ 89.504774] binder: 3809:3810 got transaction with invalid offset (0, min 0 max 0) or object. [ 89.541111] binder: 3809:3810 transaction failed 29201/-22, size 0-24 line 3199 [ 89.580316] binder: undelivered TRANSACTION_ERROR: 29201 [ 89.595885] binder: 3809:3813 got transaction with invalid offset (0, min 0 max 0) or object. 22:04:09 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="eca93c71809d18bb0cd91d7c2af7d69f29534e7b52bd861aaf6a90fdd0c4c7a6d5372c4a5d672a20cdd026dbcb054a29c6bf0b61f3ff55830d6d0e7d801518e6979abcbe88b3dd6936216e9a8129855fb17ee53c9d9f2550a2655cd9381cb0ab43381c01e4a113d2218bad4af55ca3c7ff", 0x71}, {&(0x7f00000001c0)="1cf0d95c5a0b8964", 0x8}, {&(0x7f0000000740)="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", 0x1000}], 0x200000000000026e, 0x33) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000bb1f7b00000000001800"/63, @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB='\x00'/24], @ANYBLOB="0018000000000000"], 0x0, 0x0, 0x0}) [ 89.647109] binder: 3809:3813 transaction failed 29201/-22, size 0-24 line 3199 [ 89.684248] binder: undelivered TRANSACTION_ERROR: 29201 22:04:09 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000001800"/60, @ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], @ANYBLOB="0018000000000000"], 0x0, 0x0, 0x0}) [ 89.766171] binder: 3816:3817 transaction failed 29201/-28, size 0-0 line 3137 [ 89.798546] binder: undelivered TRANSACTION_ERROR: 29201 [ 89.900794] binder: 3819:3820 got transaction with invalid offset (1048576, min 0 max 0) or object. [ 89.954441] binder: 3819:3820 transaction failed 29201/-22, size 0-24 line 3199 [ 89.997402] binder: undelivered TRANSACTION_ERROR: 29201 [ 90.021675] binder: 3819:3821 got transaction with invalid offset (1048576, min 0 max 0) or object. [ 90.068683] binder: 3819:3821 transaction failed 29201/-22, size 0-24 line 3199 [ 90.096447] binder: undelivered TRANSACTION_ERROR: 29201 22:04:10 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'vet\x00\x00\x00_b\x1f\x1cC\xa5e\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x1, 0x6, @broadcast}, 0x10) pipe(&(0x7f0000000040)) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UI_SET_PHYS(r4, 0x4008556c, 0x0) dup3(r2, r4, 0x80000) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$UI_SET_PHYS(r5, 0x4008556c, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) ioctl$UI_SET_PHYS(r6, 0x4008556c, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r7, 0x5501) ioctl$UI_SET_PHYS(r7, 0x4008556c, 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r8, 0x5501) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r9, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r9, 0x5501) ioctl$UI_SET_PHYS(r9, 0x4008556c, 0x0) close(r2) 22:04:10 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0xfffffffffffffef6) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000380)={'veth1_to_hsr\x00', 0x9}) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getpeername$inet(r2, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f00000000c0)=0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000580)=[{0x48000015, 0x0, 0x0, 0x4}, {0x6, 0x0, 0x0, 0xfffffffffffffffd}]}) munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) ioctl$sock_ifreq(r6, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r6) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/92, 0x5c}, {0x0}, {&(0x7f0000000100)=""/9, 0x9}], 0x3, 0x0) dup3(r5, r7, 0x0) readahead(r3, 0x401, 0x0) 22:04:10 executing program 1: r0 = memfd_create(&(0x7f0000000300)='/selinux/commit_pending_bools\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/psched\x00') close(r0) r2 = socket$inet(0x10, 0x80000, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r3, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UI_SET_PHYS(r4, 0x4008556c, 0x0) r5 = dup3(r4, r2, 0x100000) readv(r5, &(0x7f00000002c0)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000080)=""/88, 0x58}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000000240)=""/71, 0x47}, {&(0x7f0000002380)=""/253, 0xfd}, {&(0x7f0000000180)=""/7, 0x7}], 0x6) r6 = fcntl$dupfd(r2, 0x0, r3) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r7, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r7, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000140)={0x8}) ioctl$RTC_ALM_SET(r6, 0x40247007, &(0x7f0000000000)={0x2e, 0x39, 0x14, 0xf, 0x5, 0xaae, 0x4, 0xc8}) sendfile(r0, r1, 0x0, 0x40000000009) [ 90.898502] input: syz1 as /devices/virtual/input/input92 [ 90.922607] device vet entered promiscuous mode [ 90.957300] input: syz1 as /devices/virtual/input/input93 [ 90.976546] input: syz1 as /devices/virtual/input/input94 [ 91.077550] input: syz1 as /devices/virtual/input/input95 [ 91.113717] input: syz1 as /devices/virtual/input/input96 [ 91.151347] input: syz1 as /devices/virtual/input/input97 [ 91.195425] input: syz1 as /devices/virtual/input/input98 [ 91.236268] input: syz1 as /devices/virtual/input/input99 [ 91.316520] device vet left promiscuous mode 22:04:11 executing program 5: r0 = gettid() r1 = getpid() ptrace(0x10, r1) timer_create(0x7, &(0x7f0000044000)={0x0, 0x12, 0x1, @thr={&(0x7f0000000100)="b83c8ae436df9fcd7b17f1342f40f94dfdef95b201b69fd22ec22db7daaf7d2754974a16673b4259507b6312c84fc3a1337ad282a3062ff1c745bea8c82b10c6c2f0d4428fd1e492b9e7a56b34c0e00503e7c1597795b157f852b7daca7ec6743f372936fb238624a547117a5a4d49a16525c0e51ace4bb00e75caf1cd4dae339c0fb2814082245e11783fc452ceda545dbb2f35ab381db3273f6904f135a5a032a6ed4a25dedc03623ded72830ddaa878c01c38e326ded84166b1ec235c0d77f8dab7", &(0x7f0000000200)="f2a2c91f1a85ef7c46f46ec4d3413799af69baca4cd556e365a063fb1b00544691c9aff354ca822b9002bda619abd3b00542ed612f62455aef1e943b688ab90c83167cf23dca4211c91c78975648009e154005053de55299e3c5725845a20eeeb87acfd80bb280c0c9bb7cd5db33bdac468dbd7e5d5b173e70f5be40d28eec962b906c892c036d498a2ca5bb5e5c9684e3a9683af6d5ff4143c17f2d076ff92a0b4ef81fc77f26472521c0ee"}}, &(0x7f0000000080)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) fcntl$dupfd(r2, 0x0, r2) readv(r2, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/54, 0x36}], 0x1) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x1) socketpair(0x8, 0x80000, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) write(r2, &(0x7f00000002c0)="72449254e00ce30b39cd437300fd26a08840007be3d3313ad092a97b6ed23ae01c336ece30740d5d06398e44147f25762eaafc9cc04e33e9f1e63623b63e", 0x3e) write(r5, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 22:04:11 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0xfffffffffffffef6) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000380)={'veth1_to_hsr\x00', 0x9}) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getpeername$inet(r2, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f00000000c0)=0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000580)=[{0x48000015, 0x0, 0x0, 0x4}, {0x6, 0x0, 0x0, 0xfffffffffffffffd}]}) munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) ioctl$sock_ifreq(r6, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r6) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/92, 0x5c}, {0x0}, {&(0x7f0000000100)=""/9, 0x9}], 0x3, 0x0) dup3(r5, r7, 0x0) readahead(r3, 0x401, 0x0) 22:04:11 executing program 2: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={&(0x7f00000008c0)=@nl=@proc, 0x80, &(0x7f0000002000)=[{0x0, 0xfffffffffffffd9d}], 0x1}, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f00000003c0)=0x3, 0x4) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x15acc76c) r3 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000480)={0x40000008}) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x1}, 0x4) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0, 0x0}, &(0x7f0000000780)=0xc) prctl$PR_GET_FPEXC(0xb, &(0x7f00000001c0)) r6 = socket$inet(0x10, 0x80000, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r7, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r7, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000050101020000000000002000000000001a654f1f0710d848121df929fd1f9008fcd4005263dd47ee74d886f7c8b899624ecd0bf083718898e5d44be2a141e154bd0e7f000950edf69b88f3b004ef2047cd69fb0425416ee69c829e5e6fd8082365e56f46e007bb832af90df8b2ec8c1b52ab87f793313e29341f0a5b32501629a2e2e6fab0d2587c253ccc7e884581a6a5b7621a469a8c36"], 0x14}}, 0x0) r8 = fcntl$dupfd(r6, 0x0, r7) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r9, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r9, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="53fffff4"], 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r9, &(0x7f0000000140)={0x8}) ioctl$PERF_EVENT_IOC_ID(r8, 0x80042407, &(0x7f00000004c0)) r10 = socket$inet6(0xa, 0x2, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000140)=""/119, 0x77, 0x0, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) sendmmsg(r10, &(0x7f00000092c0), 0x4ff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev}, 0x1c) connect$inet6(r1, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f00000000c0)={0x5, 0x40, 0x94a, 0x9, 0x0, 0x1, 0x8}, &(0x7f0000000300)={0x6, 0x82, 0x222, 0x9, 0x5, 0x7, 0x8, 0x9}, &(0x7f0000000400)={0x0, 0x989680}, &(0x7f0000000500)={0x0, 0x188}) ioctl$TCGETS(0xffffffffffffffff, 0x5401, 0x0) waitid(0x2, r4, &(0x7f00000007c0), 0x80000000, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) setregid(0x0, r5) futex(&(0x7f0000000080)=0x1, 0x8b, 0x1, &(0x7f0000000340), &(0x7f0000000440), 0x2) 22:04:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet(0x10, 0x80000, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r3, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r6 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r7 = open(&(0x7f000000fffa)='./bus\x00', 0x1, 0x84) r8 = dup3(r6, r5, 0x0) io_setup(0x75, &(0x7f0000000240)=0x0) io_submit(r9, 0x2, &(0x7f0000000480)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x1, r8}]) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r10, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r10, 0x5501) ioctl$UI_SET_PHYS(r10, 0x4008556c, 0x0) r11 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000600)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$P9_RCREATE(r11, &(0x7f0000000ac0)={0x18, 0x73, 0x1, {{0x10, 0x2, 0x8}, 0x4}}, 0x18) r12 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./file0\x00', 0x50480, 0x9) io_submit(r9, 0x3, &(0x7f00000005c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000240)="83469e6d6bcf493b7354ae1cf1bca50aac61996b1879eb011c7868ba6eb4b5df0db530918f43a4adb4e2f018873c9d32b22bcb5b91c12b9721cfd21b7c59763eecdcff3812de36c64bc52f6bc8972d69646b5161b588dad89c1a56d8cb1bbaf1bb6b9f1c670a5e993c04c6d29acdb0de1bab42c7c578c21e5c32ab7dfb03934e30b27bdc9966186e83d904906e0d3b89466c0d68cd09e92e96ee3745c70117846d4869bbc18c4d9010103e46e9e7308d5bbe3b005f9620aca4c4f2c730210b15e16a5152be254b8e50cda95cd914caf0dc14459162fe9826e8a0f0cea97dacb7565256747884feb93ade344dcc01", 0xee, 0x3, 0x0, 0x2}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x101, r3, &(0x7f0000000380)="f4b5284fdb822697af6d140c5960b2236a1b1d579ff64183520a4caae9ed3948405e461b336f9af0b79400e447ac7566fb9ec4e380a76528ce0e96c1a55c8d1e51256e70d43901b9ce986c8bb8cee99e888c7a77979ed94b9792c8e2f0700a73beecb88960ee425511a9e546b9dfd67b37cf143f96e54357050e0c4acdc832d76fd36a96f3d5c623c7f83714441efc3f08ce18b2ed0d6863058a31a5b7db231b868d", 0xa2, 0x1, 0x0, 0x3}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x9, r10, &(0x7f0000000440)="ddde4ff0622c44064b76bfdda90d5e8a2d604925dcd0c1ef7b900bca2cb6769d0b6fd0bd6f2293260bf1a9c67d76175471323721ca92a8b0451e4dc81cd935865b6235d05235aeef072fbf3d90f4b7fa370e2a4b391ed3893c41c7a8daaaa0222737010548f45ffa21a31e3bd76654d17a87bca61775031848d5efb99f88f611c5b2ca8e10ce0b81e89b8aa2a98b6b9015ed7016d21faaaa58454e633aa86dadb3577a7f340d07ac761eb55cb722c0bbe86e1cd012489185d18526b82c149f5a5dadbffe45059f6aecd71ec8c8dedc4c64f1b4b5ddbe", 0xd6, 0x881f, 0x0, 0x0, r12}]) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r13, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r13, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r13, &(0x7f0000000140)={0x8}) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000000)) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000400400000", 0x58}], 0x1000000000000256) 22:04:11 executing program 1: bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0xdfedf534d1677a51) ioctl$EVIOCSABS2F(r1, 0x401845ef, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x8000) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000340)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeb1de9b4ed546000000000000000000"], 0x1) r5 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='sched\x00') shutdown(r5, 0x0) sendfile(r5, r6, 0x0, 0x88001) ioctl$sock_ifreq(r5, 0x89e6, &(0x7f00000004c0)={'veth0\x00', @ifru_ivalue=0x2cf}) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) recvfrom$inet6(r7, &(0x7f0000000240)=""/175, 0xaf, 0x10000, &(0x7f00000000c0)={0xa, 0x0, 0x8, @mcast1, 0x7}, 0x1c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r8, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r8, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$LOOP_SET_FD(r7, 0x4c00, r8) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000700)={{{@in6=@loopback, @in=@dev}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0)='TIPCv2\x00') lstat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='sched\x00') shutdown(0xffffffffffffffff, 0x1) sendfile(0xffffffffffffffff, r9, 0x0, 0x88001) ioctl$sock_ifreq(r9, 0x89a2, &(0x7f0000000300)={'eql\x00', @ifru_map={0x5, 0x7, 0x5, 0x4, 0x1f, 0x9}}) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) 22:04:11 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_PHYS(r0, 0x4008556c, 0x0) r1 = dup(r0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) r2 = request_key(&(0x7f0000000040)='ceph\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='system,\x00', 0x0) keyctl$invalidate(0x15, r2) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x13) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x104, r4, 0x100, 0x70bd27, 0x25dfdbfd, {}, [{{{{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{{{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{{{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{{{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{{{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{{{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x104}, 0x1, 0x0, 0x0, 0x40001}, 0x40015) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000000000000000000000000000000001800"/60, @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB='\x00'/24], @ANYBLOB="0004f38f50070684f10181fa00003dbb73d800"], 0x0, 0x0, 0x0}) [ 92.035239] input: syz1 as /devices/virtual/input/input106 [ 92.044792] input: syz1 as /devices/virtual/input/input107 [ 92.088923] binder_alloc: 3854: binder_alloc_buf size -8933444767846300672 failed, no address space [ 92.107931] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 92.140343] input: syz1 as /devices/virtual/input/input108 [ 92.179133] binder: 3854:3856 transaction failed 29201/-28, size 402653184-0 line 3137 22:04:12 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r1, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r3, 0x2081fc) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r6, 0x0) read(r4, &(0x7f0000000000)=""/250, 0xedf1d44) fcntl$setstatus(r2, 0x4, 0x6100) sendfile(r5, r4, &(0x7f0000000380), 0x0) fdatasync(r1) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0xf642e7e) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RNDADDTOENTCNT(r8, 0x40045201, &(0x7f0000000180)=0x81) read(r7, &(0x7f0000000200)=""/250, 0x50c7e3e3) r9 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r9, 0x4, 0x6100) ftruncate(r9, 0x208200) r10 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r9, r10, 0x0, 0x8000fffffffe) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) removexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@random={'btrfs.', 'em0\x00'}) ioctl$PPPIOCSFLAGS1(r8, 0x40047459, &(0x7f0000000300)=0x4010822) ioctl$FS_IOC_SETFLAGS(r1, 0x40046602, &(0x7f0000000340)=0x5) [ 92.294553] binder: undelivered TRANSACTION_ERROR: 29201 [ 92.347929] input: syz1 as /devices/virtual/input/input109 [ 92.368568] audit: type=1400 audit(1572041052.173:21): avc: denied { getattr } for pid=3854 comm="syz-executor.0" path="socket:[13986]" dev="sockfs" ino=13986 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 92.412703] audit: type=1400 audit(1572041052.223:22): avc: denied { ioctl } for pid=3854 comm="syz-executor.0" path="socket:[13993]" dev="sockfs" ino=13993 ioctlcmd=6201 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 22:04:12 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) keyctl$describe(0x6, 0x0, &(0x7f00000000c0)=""/138, 0x8a) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)}, 0x1800}], 0x0, 0x0, 0x0}) [ 92.599416] binder: 3893:3894 got transaction with invalid offset (0, min 0 max 0) or object. [ 92.634875] binder: 3893:3894 transaction failed 29201/-22, size 0-24 line 3199 22:04:12 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)}, 0x1800}], 0x0, 0x0, 0x0}) [ 92.662631] binder: undelivered TRANSACTION_ERROR: 29201 22:04:12 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) keyctl$describe(0x6, 0x0, &(0x7f00000000c0)=""/138, 0x8a) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)}, 0x1800}], 0x0, 0x0, 0x0}) [ 92.752240] binder: 3898:3899 got transaction with invalid offset (0, min 0 max 0) or object. [ 92.798668] binder: 3898:3899 transaction failed 29201/-22, size 0-24 line 3199 [ 92.813554] binder: 3901:3902 got transaction with invalid offset (0, min 0 max 0) or object. [ 92.830123] binder: undelivered TRANSACTION_ERROR: 29201 [ 92.836174] binder: BINDER_SET_CONTEXT_MGR already set 22:04:12 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x8000, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1008000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x104, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_NODE_ADDR={0x18a, 0x1, 0x3f}]}]}, 0x25}, 0x1, 0x0, 0x0, 0x40040}, 0x4045) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = inotify_init1(0x81000) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0xc080661a, &(0x7f0000000000)={{0x2, 0x0, @reserved="2d329a5a843977697118bdfea8390dba86cfa0ea15fd801be44addad1608b8c8"}}) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000700)={0x13d, 0x0, &(0x7f0000000580)=ANY=[@ANYRESDEC, @ANYRESOCT, @ANYBLOB="00180000e100000028750ea923f7b9e03b6bfb90a2c4b82cf2a7b99c3f4b9e7f47eeaa57c8fb636c7d795aa0cda2df35156decb499fb63bd1f733104190b6391bb9c591bf27a16c8e56d12042f6e479f234571a3014343d0aabd08c7bc668d52530e9e53c300ef0b59ecd3e6e5187ca9b6e66fe8a47066b96338b5ec5d4ae091c0ba3186e3530fab52f0156605f63eac118a0c7d79a5f1908c96258538d46637a05bbbb3957ed43a40579c49255cbf23bbe5208f6dbd80ff2e60ffdeab7067156be4a7094cfb694bc1c7842eb92f31ac2864dd3ff37b5ed6aac45c32441db92e341c6cdf55f67396c891cae678bdb33fd1ec1428035ffcdded6d82f7b926d83c939feabf9aae9815a110a3881f558f6a0c23"], 0x0, 0x0, 0x0}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f00003b9fdc)) r6 = syz_open_pts(r5, 0x4000000000002) dup3(r6, r5, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)="be", 0x1}], 0x2f7) ioctl$TIOCLINUX4(r5, 0x541c, &(0x7f00000000c0)) [ 92.845128] binder: 3898:3903 ioctl 40046207 0 returned -16 [ 92.855863] binder: 3898:3903 transaction failed 29189/-22, size 0-24 line 3014 [ 92.872097] binder: undelivered TRANSACTION_ERROR: 29189 [ 92.905829] binder: 3901:3902 transaction failed 29201/-22, size 0-24 line 3199 22:04:12 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r0, 0x407, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r4 = socket$inet(0x10, 0x80000, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r5, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000050101020000000000000000ed000000"], 0x14}}, 0x0) r6 = fcntl$dupfd(r4, 0x0, r5) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6(0xa, 0x400000004805, 0x8) ioctl(r8, 0x801000008912, &(0x7f0000000340)="0a5c2d023c126285718070") ftruncate(r8, 0xffffffff) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000000440)={0x3b5, {{0xa, 0x4e24, 0x401, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x290}}}, 0x84) connect$netlink(r7, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r7, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000140)={0x8}) getsockopt$EBT_SO_GET_INIT_ENTRIES(r6, 0x0, 0x83, &(0x7f0000000180)={'nat\x00', 0x0, 0x3, 0x7b, [], 0x6, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/123}, &(0x7f0000000000)=0x50) socket$packet(0x11, 0x0, 0x300) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) r9 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r10, 0x40045431, &(0x7f00003b9fdc)) r11 = syz_open_pts(r10, 0x4000000000002) dup3(r11, r10, 0x0) ioctl$TIOCSSERIAL(r11, 0x541f, &(0x7f0000000240)={0x3ff, 0x892, 0x80, 0x5, 0x7, 0x40, 0x3, 0xff, 0x4, 0xff, 0x40, 0x7ff, 0x3, 0x1, &(0x7f0000000380)=""/146, 0x8, 0x8d30}) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) [ 92.948022] binder: undelivered TRANSACTION_ERROR: 29201 [ 92.970798] binder: 3905:3908 unknown command 875837489 [ 92.984762] binder: 3905:3908 ioctl c0306201 20000700 returned -22 22:04:14 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ipv6_route\x00') sendfile(r0, r1, 0x0, 0x100000008005) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x100000008005) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ipv6_route\x00') sendfile(r4, r5, 0x0, 0x100000008005) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ipv6_route\x00') sendfile(r6, r7, 0x0, 0x100000008005) r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ipv6_route\x00') sendfile(r8, r9, 0x0, 0x100000008005) socket$netlink(0x10, 0x3, 0x3) r10 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r11 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ipv6_route\x00') sendfile(r10, r11, 0x0, 0x100000008005) sendfile(r9, r10, 0x0, 0x3) connect$inet6(0xffffffffffffffff, 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) ustat(0x6, 0x0) r12 = socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r15, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r15, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000001980)=ANY=[@ANYBLOB="000000000a004e2100000007fe8000000000000000000000000000bb02000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c750000000020000000a004e2200000003000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a1bdd4150000000000000000000000000000000000000000000000000000000a004e22000000050000000000000000000000000000000105000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000039655f1228d1b3a62bec37b3de39dc8f0000002000ff0000000000000000000000000000000000000000000000decf937425251c2991889608bd0eb9036530e84addeb1ad74467e85acd8992edc3c7b10d426830a0953b35525fc05a6f2616f98e41b014e0092598fc391125d7a22ea36f7ab80a05cde9e7f225401e9edd12a9010259aba8a3681909d70bdb82077c69c8"], 0x18c) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) ioctl$VT_ACTIVATE(r14, 0x5606, 0x85) sendto$inet(r15, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) clone(0x8001200, &(0x7f0000000140)="74d487f5e2da0ec6f05206525712f90a", &(0x7f00000001c0), &(0x7f0000001400), 0x0) setsockopt$sock_int(r15, 0x1, 0x8, &(0x7f0000000000), 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) tee(r17, r16, 0x8, 0x0) connect$unix(r17, &(0x7f0000000380)=@file={0xfd1fb7bbf091c218, './file0\x00'}, 0x6e) write$binfmt_elf64(r15, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) shutdown(r15, 0x1) recvmsg(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa4756f}, 0x100) write(0xffffffffffffffff, &(0x7f00000017c0)="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", 0x1a0) write$eventfd(r14, &(0x7f0000000340)=0x2, 0x8) getsockopt$inet_pktinfo(r15, 0x0, 0x8, &(0x7f0000001480)={0x0, @empty, @dev}, &(0x7f00000014c0)=0x1) read(r13, &(0x7f0000000200)=""/250, 0xfffffffffffffee3) setsockopt$packet_fanout(r12, 0x107, 0x12, &(0x7f0000001440)={0x1, 0x6, 0x1000}, 0x4) 22:04:14 executing program 1: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r0, r0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) splice(0xffffffffffffffff, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r1) r4 = creat(&(0x7f0000000840)='./file1\x00', 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71}) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f00000000c0)={0xf736, 0x9, 0x7, 0xa, 0x13, 0x0, 0xc0000000000000, 0x7fff00000000, 0x6}) ioctl$FS_IOC_RESVSP(r4, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r4, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) fcntl$getflags(0xffffffffffffffff, 0x401) syz_genetlink_get_family_id$tipc2(0x0) fsync(r4) write$P9_RSTATu(r4, 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, &(0x7f0000000500)={0x3, 0x80000001, {0x1, 0x2, 0xfffffffffffffc00, {0xf5, 0x2a}, {0x4}, @period={0x58, 0x100, 0x3f, 0x9, 0x7ff, {0x94bc, 0x2, 0x5, 0x1f}, 0x2, &(0x7f0000000480)=[0x0, 0x0]}}, {0x53, 0x0, 0x6, {0xa22}, {0x0, 0x401}, @cond=[{0x2, 0x6, 0x7f, 0x3468, 0x8, 0x3ff}, {0x8, 0x4, 0xffff, 0xaff9, 0x400, 0x8}]}}) r5 = socket$key(0xf, 0x3, 0x2) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0) clock_getres(0x6, &(0x7f0000000100)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) r7 = dup2(r6, r6) setsockopt$inet_int(r7, 0x0, 0x32, 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"/357], &(0x7f0000000040)=0x1) ioctl$int_in(r3, 0x0, &(0x7f00000001c0)) write$binfmt_script(r4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r5, 0x0) 22:04:14 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x100000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x0, &(0x7f0000000380)=0xffffffff80000001, 0x3) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'team0\x00', 0x2}, 0x18) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @mss, @mss, @timestamp, @timestamp], 0x5) fremovexattr(r4, &(0x7f00000007c0)=@known='system.posix_acl_access\x00') setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000280), 0x7) open(&(0x7f0000000240)='./file0\x00', 0x101000, 0xc1) getsockopt$inet_mreqn(r4, 0x0, 0x0, &(0x7f0000000340)={@rand_addr, @remote, 0x0}, &(0x7f0000000440)=0xc) r6 = socket$inet(0x10, 0x80000, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r7, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r7, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) r8 = fcntl$dupfd(r6, 0x0, r7) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r9, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r9, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[]}}, 0x8000) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r9, &(0x7f0000000140)={0x8}) connect$packet(r8, &(0x7f0000000480)={0x11, 0x4, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) bind(r3, &(0x7f0000001080)=@ll={0x11, 0x1a, r5, 0x1, 0x2, 0x6, @remote}, 0xfffffffffffffe69) bind(r0, &(0x7f00000002c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x7, 0x80000001, 0xffffffff, "85b0ff682d8a93111061e90699d29ec6b4b62e60a4bf72c6909a50f5f41cd9e11a1140781ef034c6b81b49a99d138e07cf96445d46972c166745cf4aa8cf20", 0x11}, 0x80) write(r2, &(0x7f00000001c0), 0xfffffef3) socket(0x4, 0x1, 0x81) r10 = creat(&(0x7f0000000480)='./bus\x00', 0x1) fcntl$setstatus(r10, 0x4, 0x6100) r11 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r10, 0x0, 0x2) sendfile(r10, r11, 0x0, 0xfffffffffffffffc) sendfile(r10, r11, &(0x7f0000000040), 0x8000fffffffe) setsockopt$inet6_tcp_TCP_REPAIR(r11, 0x6, 0x13, &(0x7f0000000400)=0x1, 0xfffffffffffffe9f) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000180)=0x3, 0x12) r12 = socket$inet6(0xa, 0x400000000001, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) getrlimit(0x2, 0x0) r13 = dup(r12) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r13, 0x6, 0x1d, &(0x7f0000000500), &(0x7f00000004c0)=0x14) r14 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYRES32=r14], 0x4}}, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x4000) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000780)=@rc, &(0x7f0000000080)=0x31a) setsockopt$inet6_tcp_int(r13, 0x6, 0x12, &(0x7f0000000380)=0x83, 0xffffffffffffff8a) bind$inet6(r12, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r12, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r12, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r15 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x1) ftruncate(r15, 0x2007fff) sendfile(r13, r15, 0x0, 0x8000fffffffe) 22:04:14 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000018000000000000000000000000e0ffffffffffffff0000779e6fe9ec2899967fef25479b38bce39780dce9508a55bd908ac9976eb0456ef2d5cd7c4b3b3100a557090c69e95d593a00000000281c7374ac334276c40a0dfd306ed2336260e9df5287bfb148f28fc8ae1d6ce8afec9a0a63d70c03aff46a50ea54265b937a7fd3210c04b8c11f22de95e5d1d499785009fe7b57dfdfcb8f8f22d1f71dc4e29b25b60a347f2505fc602d2428de8b7689e1a53d3e2321656fbf860d8211", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000300"/24], @ANYBLOB="0018000000000000"], 0x0, 0x0, 0x0}) 22:04:14 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r1, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r3, 0x2081fc) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r6, 0x0) read(r4, &(0x7f0000000000)=""/250, 0xedf1d44) fcntl$setstatus(r2, 0x4, 0x6100) sendfile(r5, r4, &(0x7f0000000380), 0x0) fdatasync(r1) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0xf642e7e) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RNDADDTOENTCNT(r8, 0x40045201, &(0x7f0000000180)=0x81) read(r7, &(0x7f0000000200)=""/250, 0x50c7e3e3) r9 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r9, 0x4, 0x6100) ftruncate(r9, 0x208200) r10 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r9, r10, 0x0, 0x8000fffffffe) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) removexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@random={'btrfs.', 'em0\x00'}) ioctl$PPPIOCSFLAGS1(r8, 0x40047459, &(0x7f0000000300)=0x4010822) ioctl$FS_IOC_SETFLAGS(r1, 0x40046602, &(0x7f0000000340)=0x5) 22:04:14 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x200800, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) memfd_create(0x0, 0x1) memfd_create(0x0, 0x2) getresuid(0x0, &(0x7f00000005c0), &(0x7f0000000540)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) listen(r4, 0x80) r5 = accept4(r4, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000007c0)={{{@in, @in6=@remote}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000000)=0xe8) connect(r1, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) lsetxattr$trusted_overlay_nlink(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000480)={'L\x1a', 0x2800000000}, 0x28, 0x3) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) syz_genetlink_get_family_id$SEG6(&(0x7f0000000680)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r2, 0x0, 0x0) inotify_init() getrusage(0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0x20) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r6, 0x29, 0x3b, &(0x7f0000000600)=ANY=[@ANYBLOB="0000040000000006a5763a41c07d429e49e475655207f826f1b67a2d4e020006000fafe77f08cd89518e9711f66ecb31b5aed1f03027d7a45d8febde333a72b37f0000000000000000"], 0x8) sendmmsg(r6, &(0x7f00000092c0), 0x170, 0x0) r7 = open(&(0x7f0000000780)='./file0\x00', 0x200c2, 0xfffffffffffffffd) write$binfmt_elf64(r7, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYPTR], 0x18) 22:04:14 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000400000000000000000000000000000000000000000000000000000000000000000000001800"/60, @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB='\x00'/24], @ANYBLOB="0018000000000000"], 0x0, 0x0, 0x0}) [ 95.036611] binder: 3920:3927 unknown command 0 [ 95.041602] binder: 3920:3927 ioctl c0306201 20000700 returned -22 [ 95.050429] binder: 3920:3931 unknown command 0 [ 95.055983] binder: 3920:3931 ioctl c0306201 20000700 returned -22 [ 95.102684] binder: 3935:3937 got transaction with invalid offset (0, min 0 max 0) or object. [ 95.131977] binder: 3935:3937 transaction failed 29201/-22, size 0-24 line 3199 [ 95.176991] binder: undelivered TRANSACTION_ERROR: 29201 [ 95.192516] binder: 3935:3944 got transaction with invalid offset (0, min 0 max 0) or object. [ 95.238209] binder: 3935:3944 transaction failed 29201/-22, size 0-24 line 3199 22:04:15 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000001800"/60, @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB='\x00'/24], @ANYBLOB="0018000000002000"], 0x0, 0x0, 0x0}) [ 95.299745] binder: undelivered TRANSACTION_ERROR: 29201 [ 95.357560] binder_alloc: 3957: binder_alloc_buf size 9007199254747160 failed, no address space [ 95.369161] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 95.379817] binder: 3957:3958 transaction failed 29201/-28, size 0-24 line 3137 [ 95.393956] binder: undelivered TRANSACTION_ERROR: 29201 [ 95.395971] binder: BINDER_SET_CONTEXT_MGR already set 22:04:15 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)}, 0x1800}], 0x0, 0x0, 0x0}) 22:04:15 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x0, 0x0) write(r0, &(0x7f0000000080)="e4d68e8da0c6f8824cd262c24c1151debd3bf29d7ed59a972c3361b5117e46c7da2826", 0x23) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETSNDBUF(r0, 0x400454d1, &(0x7f0000000040)) [ 95.395981] binder: 3957:3959 ioctl 40046207 0 returned -16 [ 95.397630] binder_alloc: 3957: binder_alloc_buf, no vma [ 95.397672] binder: 3957:3959 transaction failed 29189/-3, size 0-24 line 3137 [ 95.425251] binder: undelivered TRANSACTION_ERROR: 29189 [ 95.487271] binder: 3962:3964 got transaction with invalid offset (0, min 0 max 0) or object. [ 95.517827] binder: 3962:3964 transaction failed 29201/-22, size 0-24 line 3199 [ 95.538042] binder: undelivered TRANSACTION_ERROR: 29201 [ 95.552805] binder: 3962:3965 got transaction with invalid offset (0, min 0 max 0) or object. [ 95.576277] binder: 3962:3965 transaction failed 29201/-22, size 0-24 line 3199 22:04:15 executing program 0: r0 = socket$inet(0x10, 0x80000, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r1, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r3, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)={0x8}) write$apparmor_exec(r2, &(0x7f0000000100)={'exec ', '\x00'}, 0x6) r4 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) recvfrom$inet6(r5, &(0x7f0000000240)=""/175, 0xaf, 0x10000, &(0x7f00000000c0)={0xa, 0x0, 0x8, @mcast1, 0x7}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r6, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r6, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0}) [ 95.594629] binder: undelivered TRANSACTION_ERROR: 29201 22:04:15 executing program 2: r0 = socket$inet(0x10, 0x80000, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r1, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r3, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)={0x8}) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) setsockopt$inet6_tcp_int(r4, 0x6, 0x0, 0x0, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f0000000200)=@dstopts={0x87, 0x0, [], [@ra]}, 0x10) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000240)=0xc) setfsuid(r5) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x189) r8 = getegid() setregid(r7, r8) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='fuse\x00', 0x8000, &(0x7f0000006d00)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xf000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x24}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize'}}], [{@smackfsroot={'smackfsroot', 0x3d, ']selfppp1'}}]}}) r9 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x80000000000003}, 0x1c) sendto$inet6(r9, 0x0, 0x0, 0x8000, &(0x7f0000000040)={0xa, 0x200000004e21, 0x0, @ipv4={[], [], @initdev}}, 0x1c) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) r10 = socket$inet(0x10, 0x80000, 0x4) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r11, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r11, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) r12 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r12) setsockopt$inet6_tcp_int(r12, 0x6, 0x0, 0x0, 0x0) bind$inet6(r12, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r12, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r12, 0x29, 0x36, &(0x7f0000000200)=@dstopts={0x87, 0x0, [], [@ra]}, 0x10) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000240)=0xc) setfsuid(r13) ioprio_get$uid(0x3, r13) fcntl$dupfd(r10, 0x0, r11) recvmmsg(r10, &(0x7f0000008140)=[{{&(0x7f0000000080)=@isdn, 0x80, &(0x7f0000000100)}, 0x401}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000007040)=""/146, 0x8f}, {&(0x7f0000006e00)=""/223, 0xfffffffffffffdba}, {&(0x7f0000000540)=""/31, 0x1f}, {&(0x7f0000000580)=""/232, 0xe8}, {&(0x7f00000002c0)=""/70, 0x3f}], 0x5, &(0x7f0000000780)=""/236, 0xec}, 0x4}, {{&(0x7f0000000880)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000007100)=""/4103, 0x1000}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/100, 0x64}, {&(0x7f0000006f00)=""/266, 0xfc}, {&(0x7f0000000700)=""/57, 0x39}, {&(0x7f0000002a80)=""/205, 0xcd}, {&(0x7f0000002b80)=""/116, 0x74}], 0x7, &(0x7f0000002c40)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000003c40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000005100), 0x0, &(0x7f0000005140)=""/231, 0xe7}, 0x316e0058}, {{&(0x7f0000005240)=@ax25={{0x3, @bcast}, [@netrom, @netrom, @default, @netrom, @netrom, @remote, @rose, @rose]}, 0x80, &(0x7f0000005540)=[{&(0x7f00000052c0)=""/5, 0x5}, {&(0x7f0000005300)=""/90, 0x5a}, {&(0x7f0000005380)=""/212, 0xd4}, {&(0x7f0000005480)=""/45, 0x2d}, {&(0x7f00000054c0)=""/115, 0x73}], 0x5, &(0x7f0000005580)=""/141, 0x8d}, 0x7000000}, {{&(0x7f0000005640)=@x25={0x9, @remote}, 0x80, &(0x7f0000005840)=[{&(0x7f00000056c0)=""/110, 0x6e}, {&(0x7f0000005740)=""/168, 0xa8}, {&(0x7f0000005800)=""/48, 0x30}], 0x3, &(0x7f0000005880)}, 0xffffffe1}, {{0x0, 0x0, &(0x7f0000005a80)=[{&(0x7f00000058c0)=""/168, 0xa8}, {&(0x7f0000005980)=""/34, 0x22}, {&(0x7f00000059c0)=""/158, 0x9e}], 0x3}, 0x7}, {{&(0x7f0000005ac0)=@ipx, 0x80, &(0x7f0000005b80)=[{&(0x7f0000005b40)=""/48, 0x30}], 0x1, &(0x7f0000005bc0)=""/4096, 0x1000}, 0x7fffffff}], 0x8, 0x80000040, &(0x7f0000006cc0)={0x77359400}) connect$inet6(r9, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c) sendmmsg(r9, &(0x7f0000000240), 0x5c3, 0x0) [ 95.687169] binder: BINDER_SET_CONTEXT_MGR already set [ 95.697428] binder: 3967:3969 ioctl 40046207 0 returned -16 22:04:15 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000240)=""/175, 0xaf, 0x10000, &(0x7f00000000c0)={0xa, 0x0, 0x8, @mcast1, 0x7}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$UI_SET_PHYS(r3, 0x4008556c, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x40480, 0x0) write$uinput_user_dev(r4, &(0x7f0000000ac0)={'syz1\x00', {0x4, 0x5, 0x0, 0x4}, 0xd, [0x2, 0x5, 0x10000, 0x10001, 0xfffffff8, 0xff, 0x8001, 0x8001, 0x1, 0x7f, 0x3, 0x9, 0x7, 0x66ee673e, 0x4, 0x20, 0x8000, 0xd2, 0x4769, 0x0, 0x7ff, 0x6, 0x7fffffff, 0x81, 0xffffb0a4, 0x100, 0x2, 0xfd4, 0xff, 0x46, 0x4, 0x3f, 0x7, 0x2bae, 0x2, 0x1, 0x0, 0x200, 0x1ff, 0x3, 0xfffffffe, 0x1, 0x4, 0x8, 0x65e, 0xe80b, 0x1f, 0x7fffffff, 0x5ac, 0xc4, 0x9, 0x0, 0x3, 0x7ff, 0x0, 0x200, 0x6, 0x1ff, 0x3ff, 0xad, 0x1, 0x18100000, 0x2, 0x2], [0x2, 0x0, 0x317, 0x8, 0x4, 0x4, 0xf501, 0x2, 0x5, 0x6, 0x1ff, 0xcc, 0x8, 0x7ff, 0x80, 0xff, 0x45d, 0x80000000, 0xffffffff, 0x2a, 0x40, 0x800, 0x9, 0x0, 0x9, 0x30, 0xfff, 0x5, 0x4, 0xa0000000, 0x0, 0x4a53, 0x101, 0x5, 0xde, 0x9, 0x80000000, 0x401, 0x6, 0x2, 0x586, 0x7ff, 0x8001, 0xf8, 0x7fffffff, 0x0, 0x7, 0x4, 0xfff, 0x1ff, 0x2, 0x161d29ff, 0x4, 0x8001, 0x94d, 0x0, 0x1, 0xffffffff, 0x5, 0x8000, 0x101, 0x0, 0x1, 0x6], [0x200, 0x1, 0xffffffff, 0xec, 0x100, 0x1000, 0x4, 0xa8d3, 0xa9, 0x4, 0x7, 0x0, 0xfa, 0x20, 0x7, 0xff, 0xb753, 0x5, 0x4, 0xb1, 0x0, 0x10000, 0x7ff, 0x3, 0x1f, 0x1ff, 0x3, 0x4fe8e300, 0x7f, 0x3ff, 0xa0000, 0x6, 0x1, 0xfff, 0x4af5, 0x3, 0x2, 0x1ff, 0xff, 0x10000, 0x9, 0x9, 0x4, 0x2, 0x168, 0x10001, 0x8001, 0x7, 0x800, 0xfffffffa, 0x6, 0x4, 0x79b1, 0xff, 0x7ae, 0xa0c, 0x1000, 0x7, 0x101, 0xf32, 0x3, 0x81, 0x6, 0x3], [0x9, 0x80, 0x20, 0x200, 0x2, 0x199, 0x7, 0x2, 0x800, 0x8, 0x2, 0x64e, 0x6, 0x80000000, 0x3, 0xfffffbff, 0xfa71, 0x81, 0xfffffff9, 0x9, 0x0, 0x7, 0x7, 0x1, 0x3, 0x6, 0x2800000, 0x0, 0x400, 0x5, 0x6, 0x4, 0x8000, 0x718, 0xfb, 0x800, 0x2, 0x8, 0x3, 0x9, 0x3, 0x6, 0x40, 0x3, 0x0, 0x2, 0xfffffff8, 0x2, 0xc7c7, 0xfa0a, 0x0, 0x4, 0xb6f7, 0x1ff, 0x10000, 0x80, 0x7f, 0x59ec, 0xd88e, 0x5, 0x6, 0x9, 0x9000, 0x9]}, 0x45c) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000180)=0x3) connect$netlink(r2, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) r5 = socket$inet(0x10, 0x80000, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r6, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r6, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) r7 = fcntl$dupfd(r5, 0x0, r6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x2a, 0x4, 0x4, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r9, 0x6612) connect$netlink(r8, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r8, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, &(0x7f0000000140)={0x8}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x4000000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r10 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)}, 0x1800}], 0x0, 0x0, 0x0}) 22:04:15 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x1000000008031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000012c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r0, &(0x7f0000000240)='pids.events\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/4\x00\x15\x16oU\x8a;\x1a\xc13\x83\x1dU1ze\xd3\xe6\xba[=\xbd\xd0/\xe8,:\x02h\xd3\x86\xa4\xbd\xf1\x99\v\xedP\xdaX\xb2\xcb\xa6\x93oR1\x80B\xcfW:\xc7W\x826\x9e\xde,\xb57\x95R\x84\xb0I\xfe\xe3\xc4\x9e9\xce\xa6\x8c\xaaM\xfe\x8dd\xd3\x9e\xc02\xb7],\xb1#\xce\x17\x87\x99V\xd2\x14\xfb\f\x84\xee\x93\x94o\xa6\x95nS\x16l\xec\x14r\xa9%fY\x12\xec\xb5\f\xd5\x87\x88JF)\xcb\b\xa9\xafp\x82\xa4\xa3o\xbf\xe0\xf8Y_\xfc\xbeZ=\tVD\xd4ey\xe3\xc1\xf0\xa3\xc8\xa4Q`Nj\x04\x1a.\xdd\xe0X\xa1\xaah\x83\xd72\xd5\xa2:\x8ec\x01') lseek(r1, 0x20400002, 0x0) socket$inet6(0xa, 0x806, 0x5) write$P9_RXATTRWALK(r1, &(0x7f0000000000)={0xf}, 0x20000327) r2 = socket$inet(0x10, 0x80000, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r3, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000000501010200"/20], 0x14}}, 0x0) fcntl$dupfd(r2, 0x0, r3) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='lp\x00', 0x3) 22:04:15 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) r4 = dup3(r1, r1, 0x40000) r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x2) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000040), 0x0) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000640)='/dev/zero\x00', 0x800, 0x0) getsockname$packet(r8, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020300021b000000020000000000000005000600000000000a00000000000000000000997f669900000000000000000000000000000000000d000800e0020000b89c0fa2997da12ba71996d8ee000000809ac1ec3d95c9a0af6fa7fe171ac34721f755b088c2a08594e391798e4fd4959ba9b5a7b0588736a57525a30d463ea43084dc1840039649673b733890eb3db522d9e747871a86cc8c8dda87000000000200"], 0xa2}}, 0x0) getsockname$packet(r10, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) r12 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCCONS(r12, 0x541d) r13 = socket$key(0xf, 0x3, 0x2) getsockname$packet(r13, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) r15 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r15, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020300021b000000020000000000000005000600000000000a00000000000000000000997f669900000000000000000000000000000000000d000800e0020000b89c0fa2997da12ba71996d8ee000000809ac1ec3d95c9a0af6fa7fe171ac34721f755b088c2a08594e391798e4fd4959ba9b5a7b0588736a57525a30d463ea43084dc1840039649673b2102000000000000e747871a86cc8c8dda870000000002000100000000000000030080ffffff05000500000000000a000000def7bd3e10c05ce000"], 0xc5}}, 0x0) getsockname$packet(r15, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) r17 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCCONS(r17, 0x541d) ioctl$ifreq_SIOCGIFINDEX_team(r17, 0x8933, &(0x7f0000000340)={'team0\x00', r16}) socket$key(0xf, 0x3, 0x2) r18 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCCONS(r18, 0x541d) r19 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r19, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r19, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00'}) r20 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r20, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0200000000"]}}, 0x0) r21 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000580)='/selux/policy\x00', 0x0, 0x0) ioctl$TIOCCONS(r21, 0x541d) ioctl$ifreq_SIOCGIFINDEX_team(r21, 0x8933, &(0x7f0000000340)={'team0\x00'}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) getpeername$packet(r22, &(0x7f0000000400)={0x11, 0x0, 0x0}, &(0x7f0000000480)=0x14) sendmsg$TEAM_CMD_NOOP(r6, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000980)={0x658, 0x0, 0x0, 0x0, 0x25dfdbfd, {}, [{{0x8, 0x1, r9}, {0xe0, 0x2, [{0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0x2, 0x48, 0xff}, {0x379c, 0xa, 0x0, 0x8000}, {0x13a, 0x9, 0x4, 0x3}, {0x40, 0x0, 0x0, 0x6}, {0x0, 0xff, 0x1f, 0x4}, {}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x8001}}}]}}, {{0x8}, {0x138, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x44, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x134, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xffff8000}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}]}}, {{0x8}, {0xb4, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}]}}, {{0x8}, {0x180, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xfff}}, {0x8}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r23}, {0x4}}]}, 0x658}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r24 = socket(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r24, 0x1, 0x1a, &(0x7f00000005c0)={0x0, &(0x7f0000000100)}, 0x8) getsockopt$sock_buf(r24, 0x1, 0x1a, &(0x7f00000003c0), 0x0) getsockopt$inet_mreqn(r24, 0x0, 0x20, &(0x7f0000000240)={@remote, @multicast1}, &(0x7f0000000280)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5001080}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [{{0x8}, {0x40, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x810) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r25, 0x0, 0x0) getsockopt$inet_pktinfo(r25, 0x0, 0x8, &(0x7f0000000280)={0x0, @remote, @multicast2}, &(0x7f00000002c0)=0xc) r27 = socket(0x200000000000011, 0x4000000000080002, 0x0) r28 = socket(0x11, 0x800000003, 0x0) bind(r28, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r28, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) bind$packet(r27, &(0x7f0000000000)={0x11, 0x0, r29, 0x1, 0x0, 0x6, @local}, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r30, &(0x7f00000001c0), 0xfffffef3) getpeername(r30, &(0x7f0000000300)=@hci={0x1f, 0x0}, &(0x7f0000000380)=0x80) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x540}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="ec00000073a94cd3aa93c9c7578782906a86626676584b290df2f5275fe75c42c7f730a8354ba65a6ab392603f23e5416162afe77dbbd7e14062bd7e28adb144c56943085212e5faf73d7458f7e5543283dc37fd4b64130bf3bf4bd94d50c75fd4359b223d65b9868decea23819a7c9e9afe286b1c2b8628716f6613a9d59857e3e467c65468590470", @ANYRES16=r7, @ANYBLOB="00022abd7000ffdbdf250000000008000100", @ANYRES32=r26, @ANYBLOB="8800020040000100240001006d6f646500000000000000000000000000000000000000000000000000000000080003000500000010000400726f756e64726f62696e000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004006163746976656261636b75700000000008000100", @ANYRES32=r29, @ANYRES32=r31], 0x7}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) pselect6(0x40, &(0x7f00000000c0)={0x10}, 0x0, &(0x7f0000000100)={0x1fe}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) r32 = openat$selinux_user(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/user\x00', 0x2, 0x0) write$selinux_user(r32, &(0x7f0000000040)={'unconfined_u:system_r:insmod_t:s0-s0:c0.c10-%', 0x20, 'user_u\x00'}, 0x35) fchdir(0xffffffffffffffff) read(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 22:04:15 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write(0xffffffffffffffff, 0x0, 0x0) read(r0, &(0x7f0000000200)=""/250, 0xdfedf534d1677a51) write$cgroup_int(r0, &(0x7f0000000140)=0xffffffff7fffffff, 0xfffffffffffffec5) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000002) dup3(r3, r2, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="be", 0x1}], 0x1) ioctl$TCGETA(r2, 0x5405, &(0x7f00000000c0)) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) lseek(r0, 0x0, 0x3) fchdir(r4) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000040)='./bus\x00', 0x6, 0x2) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f00003b9fdc)) r7 = syz_open_pts(r6, 0x4000000000002) dup3(r7, r6, 0x0) ioctl$TIOCSIG(r7, 0x40045436, 0x26) fcntl$setstatus(r5, 0x4, 0x6100) truncate(&(0x7f0000000080)='./bus\x00', 0x8001) r8 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r5, 0x0, 0x2) sendfile(r5, r8, 0x0, 0xfffffffffffffffc) r9 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') r10 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r10, r9, 0x0, 0xdd) 22:04:15 executing program 3: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000001c40)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000000)) sendmmsg(0xffffffffffffffff, 0x0, 0x139, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/enforce\x00', 0x418680, 0x0) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000040)={0x4, 0x7}) syz_open_dev$mice(0x0, 0x0, 0x0) memfd_create(0x0, 0x0) memfd_create(0x0, 0x1) getresuid(0x0, &(0x7f0000000180), &(0x7f0000000440)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in, @in6=@remote}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000600)=0x3ab) lsetxattr$trusted_overlay_nlink(0x0, 0x0, &(0x7f0000000480)={'L-', 0x2800000000}, 0x28, 0x3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f00000000c0)) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x189) r7 = getegid() setregid(r6, r7) getgroups(0x3, &(0x7f0000000000)=[0xffffffffffffffff, r6, 0xee00]) ioctl$TUNSETGROUP(r4, 0x400454ce, r8) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x20000040) r9 = inotify_init() getrusage(0x0, 0x0) inotify_add_watch(r9, &(0x7f0000000080)='.\x00', 0xfe) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)) r10 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r10, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @mcast2, 0x5}, 0x1c) [ 95.926322] input: syz1 as /devices/virtual/input/input110 [ 95.974716] binder_alloc: 3983: binder_alloc_buf, no vma [ 95.996208] binder: 3983:3984 transaction failed 29189/-3, size 0-24 line 3137 [ 96.053218] binder: undelivered TRANSACTION_ERROR: 29189 [ 96.069981] input: syz1 as /devices/virtual/input/input111 [ 96.100383] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 22:04:16 executing program 1: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) ustat(0x0, 0x0) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000140)=0x8) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x85) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockname(r3, &(0x7f0000001600)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000380)=0x80) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001680)='/dev/vga_arbiter\x00', 0x12002, 0x0) shutdown(r2, 0x1) r4 = socket$inet(0x10, 0x80000, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r5, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) fcntl$dupfd(r4, 0x0, r5) recvmsg(r4, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000015c0)}, 0x40010162) write(r1, &(0x7f00000001c0), 0xfffffef3) poll(0x0, 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') preadv(r6, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) getpeername$unix(r0, &(0x7f0000001540)=@abs, &(0x7f00000001c0)=0x6e) writev(0xffffffffffffffff, &(0x7f0000001500)=[{&(0x7f00000003c0)="056d18be878f6f9c6a38e1ea0bc5", 0xe}, {&(0x7f0000001400)="277fa908f7bf7b0191f920cba67130e2372c40a89752c9134da9bdd25b738e2f67fcd21537f50463d162dde29212ce55086867e9178887794f0b1e69c31e3c73a184f701d573484614829c64b8c6d1defc7da11967f24ce46b60ba8e36f6de93435703be0a1d1d798111f6400050083e770330fbc3dbf37a5d4aeddc926b91ff4df54fa2", 0x84}, {&(0x7f00000014c0)="005843ef3fc692b1792db5d2be9e901e7d4356b3b0e847f7a1a8", 0x1a}], 0x3) write$eventfd(r1, &(0x7f0000000340)=0x2, 0x8) read(r0, &(0x7f0000000200)=""/250, 0xfffffffffffffee3) 22:04:16 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2) r3 = socket$inet(0x10, 0x80000, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r4, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r4, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) r5 = fcntl$dupfd(r3, 0x0, r4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r6, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r6, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000140)={0x8}) getdents64(r5, &(0x7f00000001c0)=""/180, 0xb4) ioctl$TIOCCONS(r2, 0x541d) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r7, 0x5501) ioctl$UI_SET_PHYS(r7, 0x4008556c, 0x0) read(r7, &(0x7f00000000c0)=""/203, 0xcb) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)}, 0x1800}], 0x0, 0x0, 0x0}) 22:04:16 executing program 4: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000018c0)='clear_refs\x00\xb0Ix\xe6\fK\xa3/\xd7\xb9IqK\xcb\xe8\fW\xafYt|a\xa3\x16\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xcaPx\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\x98\xfc\xbfX\x12\x97\xb3\x1b\xea\xfa\xff\xb7gx\xa1\x96\xad\x93\xaa=-z\x06r\b\'\f\x03U\b\xbc\xc8v\x14\xae\x8d3\"\xfc\\\x86\xc8\xe5\xe8\x14&.\xf7\xc1\x1fY\x9d\xa4\xb5\xefF\xe9\xeex\x80\x86$\xadw\xef\xd8o\\O<;%\x14\xdc(YW\xf0,\xd8\xf2d;\x86NK\\\xa3/Z\xd9)LvEYe\xd9\x97\xb3^\xe5H\x96\xe2p\xc7\xe3\x1d\xd1_\x8f\xf0\xce\x00\x97Sn\x83\xd1\x92\xd4\xa1\xcck\x1d\x93`\xc6e\xa5rw\x9a\xc4\xd6&') r1 = syz_open_procfs(0x0, &(0x7f0000000080)='syscall\x00\a\xa5B') sendfile(r0, r1, 0x0, 0x1) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) clone(0x80000100, &(0x7f00000000c0)="ecbeb2af5783271a32d08219f5727d202c1f54248d4fdca053", &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000200)="4ca452665aa2f53f5fe72e970192d550010dd39c8c87e86e9732c18db3a042fe0162157a") 22:04:16 executing program 3: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r0) r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) recvfrom$inet6(r5, &(0x7f0000000240)=""/175, 0xaf, 0x10000, &(0x7f00000000c0)={0xa, 0x0, 0x8, @mcast1, 0x7}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r6, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r6, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bcsf0\x00'}) r7 = socket$inet(0x10, 0x80000, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r8, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r8, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x800005, 0x1, 0x201}, 0x14}}, 0x0) fcntl$dupfd(r7, 0x0, r8) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000580)={{{@in=@initdev, @in=@multicast2}}, {{}, 0x0, @in=@remote}}, &(0x7f0000000140)=0xe8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r9, 0x6, 0x0, &(0x7f0000000380)=0xffffffff80000001, 0x3) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'team0\x00', 0x2}, 0x18) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r9, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @mss, @mss, @timestamp, @timestamp], 0x5) fremovexattr(r9, &(0x7f00000007c0)=@known='system.posix_acl_access\x00') setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000280), 0x7) r10 = open(&(0x7f0000000240)='./file0\x00', 0x101000, 0xc1) getsockopt$inet_mreqn(r9, 0x0, 0x0, &(0x7f0000000340)={@rand_addr, @remote, 0x0}, &(0x7f0000000440)=0xc) connect$packet(r10, &(0x7f0000000480)={0x11, 0x4, r11, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000180)={@mcast2, 0x70, r11}) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) r12 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r12) syz_genetlink_get_family_id$tipc2(0x0) fsync(r3) write$P9_RSTATu(r3, 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, &(0x7f0000000500)={0x3, 0x80000001, {0x0, 0x2, 0xfffffffffffffc00, {0xf6, 0x2a}, {0x4, 0x5}, @period={0x58, 0x100, 0x3f, 0x9, 0x7ff, {0x94bc, 0x2, 0x5, 0x1f}, 0x3, &(0x7f0000000480)=[0x0, 0x5, 0x0]}}, {0x53, 0x100000001, 0x6, {0xa22}, {0x6c8, 0x401}, @ramp={0xf38, 0x3, {0x80, 0x0, 0x0, 0x8}}}}) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0) clock_getres(0x0, &(0x7f0000000100)) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7fff}, 0x1d0) r14 = dup2(r13, r13) setsockopt$inet_int(r14, 0x0, 0x32, &(0x7f00000001c0), 0x4) ioctl$int_in(r2, 0x0, &(0x7f00000001c0)) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000380)='./file1\x00', 0x82, 0x0) r15 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) fchown(r15, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 22:04:16 executing program 5: r0 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x100000000a, &(0x7f0000000240)=0x9, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x8800, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040)={0x3f, 0x2, 0x8, 0xfffffffb, 0xa, 0x1, 0x2, 0x81, 0x2000021, 0x109, 0xccbe, 0x2}) r1 = eventfd(0x5) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000000080)={{0x2, 0x0, @descriptor="3d5f2ee1cb4486c3"}}) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 22:04:16 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x81, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000640)={'syz1\x00', {0x0, 0x400}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_SET_PHYS(r1, 0x4008556c, 0x0) fcntl$setstatus(r1, 0x4, 0x40000) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) shutdown(r0, 0x1) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa4756f}, 0x100) [ 96.433594] input: syz1 as /devices/virtual/input/input112 [ 96.486000] input: syz1 as /devices/virtual/input/input113 [ 96.504840] binder: 4017:4036 got transaction with invalid offset (0, min 0 max 0) or object. [ 96.514685] binder: 4017:4036 transaction failed 29201/-22, size 0-24 line 3199 22:04:16 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x208200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) unshare(0x600) write$P9_RREMOVE(r4, &(0x7f0000000280)={0x7}, 0xff7f) syncfs(r1) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$UI_SET_PHYS(r5, 0x4008556c, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f00000002c0)={0x0, r5}) 22:04:16 executing program 4: r0 = socket(0x18, 0x0, 0x4) accept4$unix(r0, 0x0, 0x0, 0x0) syz_open_dev$loop(0x0, 0x4000001, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_CREATE_OPEN(r1, 0x0, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}}, {{0x0, 0x7530}}, {{0x0, 0x2710}}], 0x30) openat$selinux_access(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/access\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000640)={0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) fchdir(r2) r4 = creat(&(0x7f0000000780)='./file1\x00', 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000380)={0xbd, @rand_addr=0x4, 0x4e20, 0x0, 'lblcr\x00', 0x4}, 0x2c) r5 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) write$P9_RFLUSH(r5, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000000)={0x7f, 0x1, 0x75, 0x2b0c47d0, 0x0, 0x6}) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) close(r4) pipe(0x0) [ 96.739722] input: syz1 as /devices/virtual/input/input114 22:04:16 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x208200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) unshare(0x600) write$P9_RREMOVE(r4, &(0x7f0000000280)={0x7}, 0xff7f) syncfs(r1) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$UI_SET_PHYS(r5, 0x4008556c, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f00000002c0)={0x0, r5}) 22:04:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty, 0xff}, 0x1c) writev(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./bus\x00', 0x0, 0x43) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40046607, 0x0) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(r0, &(0x7f0000000140)='syz1\x00', 0x1ff) r2 = memfd_create(&(0x7f0000000080)='posix_acl_accesslovmnet1wlan0/-[vboxnet0\x00', 0x0) write$P9_RFSYNC(r2, &(0x7f0000000240)={0x7}, 0x7) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @empty}, 0x80000}, 0x1c) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000e11ff0)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fffffe181004e22000075a9bdee0521d283945f64009400050028925aa8000000000000ff7f00f0fffeffe809000000fff5dd001b2f0f000100070abd00000078b75bff3ec6", 0x58}], 0x1) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) ioctl$int_out(r3, 0x0, &(0x7f0000000000)) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) write(0xffffffffffffffff, &(0x7f0000000600)="b2cf791ae07fcba019ebbd2764b345fa475d494fbe60cf259fd297b6a2fdd1ea01970074f98d272cf8d67d88f966abb43192f5914c3a07cc27be2b22f5fffb76de823d144210", 0x46) select(0x40, &(0x7f0000000040), &(0x7f0000000400), &(0x7f00000001c0), &(0x7f0000000280)={0x77359400}) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f00000002c0)=""/89) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) listen(0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 22:04:16 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, &(0x7f0000000240), 0xffffffffffffffff, &(0x7f0000000440)=0xfffffffffffffffc, 0x4, 0x4000000000) write(r3, &(0x7f0000000640)="8004e1d20253c63e9b9251103110b37fffffffbfa2c62e308bfcb0d49b4a178db670d6bee2fa779f09d39b390d7900ce8be96ca132b1b9bfc2227d8a3f72324b544f462c4b191fe538eaad7195a85a0d143a0b750d5d0b20d556c721f25a4f679f9b3303000000000000001dc9b164003d14b071ac5084e8314ced35ff3dd2c54bd82459f5d517b446d1ff03000000000000000000001173101ec74bcea32d7c3ea09c3ce6c3829a6e9cdfd0344bf0fe07", 0xb1) fchdir(r0) r4 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000080)=0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000200)={0x14}, 0x14) io_submit(r5, 0x1, &(0x7f00000001c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffffffffffffff9c}]) r6 = creat(&(0x7f0000000480)='./bus\x00', 0xfffffffffffffffd) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r6, 0x40106614, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) sendfile(r6, r7, 0x0, 0xfffffffffffffffc) sendfile(r6, r7, &(0x7f0000000040), 0x8000fffffffe) r8 = openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$setstatus(r8, 0x4, 0x6100) r9 = creat(&(0x7f0000000480)='./bus\x00', 0xfffffffffffffffd) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r9, 0x40106614, &(0x7f0000000080)) r10 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r9, 0x0, 0x2) sendfile(r9, r10, 0x0, 0xfffffffffffffffc) sendfile(r9, r10, &(0x7f0000000040), 0x8000fffffffe) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYRESHEX=r3, @ANYRESDEC=r7, @ANYPTR64=&(0x7f0000000840)=ANY=[@ANYBLOB="f94ea5e0f325d653c0bf9f0cfd4ccb98d1de0a63fdd3149fcc87094c8df16915a7e8f379d19386e5ec0291fb4c38e84d34ebbd56aecc3b5f9a5b57458534e4d82015e62e5029219d8f65a9d0cb26755db435f247794effeaf7cb7e3ce7270ba6374244da821dc4ecd5754a605fa9e465971c2b170386e49f021e69115925cf315058ceedf5ec3b27905de00f0cc52d1f923338d18512345b5ea0d41518a0", @ANYBLOB="4c949d01017939f7fa0aa71cfac5ebebdb4e4ff623c25fda9becb7f2ec7ccbdf7743da26", @ANYRES16=0x0, @ANYPTR=&(0x7f0000000700)=ANY=[@ANYRESOCT=r8, @ANYPTR, @ANYRES32=r5, @ANYRES64=r10, @ANYBLOB="4f1bb5247b8ee9c5416acbefc62686db19999426e19822c6be29860f22645abbd694270f21c7fcd333986d5437", @ANYRESHEX=0x0]]], @ANYRES16, @ANYRES32, @ANYPTR64, @ANYRES16=r3, @ANYPTR64], 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000500)) r11 = creat(&(0x7f00000002c0)='./bus\x00', 0x43) write$P9_RREAD(r4, 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000400), &(0x7f0000000540)=0x4) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r11, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) lgetxattr(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000780)=ANY=[@ANYBLOB="dbed4c681ebcc32e01dcb9d3661167581fd97725d8d81dd9abd80a77f01e81de403a5933c91a3f06ad5ceb7788da1571978b83fc4bdf54f84b9bf4416c16b4952ca0b6c24e641eada15bf900abaecb09e34387e7b8f08e5bd951acf022c3bb334314db7b02113df859e027ecea6dade58d0d2b6efa8d7f1d634cfad5b810193801ddb239af566a6952b45869ccf0b95fa308314c09483e960db7407a317373ae04bb7d0abbfb12d4f304692a"], &(0x7f0000000300)=""/119, 0x77) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r12, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000000301ffff00000000804bb423e70712f3"], 0x14}}, 0x0) socketpair(0x9, 0x6, 0xff, &(0x7f0000000100)) r13 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r14 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r14, r14, &(0x7f00000002c0)=0x202, 0xdd) 22:04:16 executing program 1: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000480)) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) write$P9_RFLUSH(0xffffffffffffffff, 0x0, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000240)=""/175, 0xaf, 0x10000, &(0x7f00000000c0)={0xa, 0x0, 0x8, @mcast1, 0x7}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r3, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={0x0}}, 0x80) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={0x2}) pipe(0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0) getsockname$netlink(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f00000001c0)={0x77359400}, 0x8) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000500)={0x2000}) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000580)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, 0x0) write(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, 0x0, 0x0) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000380)={0x0, @loopback}, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000380)={0x0, @loopback}, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, 0x0, 0x0) r10 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r10, 0x0, 0x23, &(0x7f0000acc000)={@multicast2, @multicast1, 0x2}, 0xc) setsockopt$inet_mreqsrc(r10, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r10, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @multicast1, @multicast1}, 0x9) r11 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r11, 0x0, 0x23, &(0x7f0000acc000)={@multicast2, @multicast1, 0x2}, 0xc) setsockopt$inet_mreqsrc(r11, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r11, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @multicast1, @multicast1}, 0x9) getsockopt$inet_pktinfo(r11, 0x0, 0x8, &(0x7f0000000000)={0x0, @loopback}, 0x0) ioctl$TIOCLINUX3(r9, 0x541c, &(0x7f0000000140)) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$TIOCMBIS(r5, 0x5416, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000380)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r12 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1100082) pipe(&(0x7f0000000540)) ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x9, 0xffffffff, 0x0, 0x0, 0xf, 0x4, "7001e0f57c8cf6270b24e415e96042a8e51d871554c11cd59cc8fb47081025bad6b39d778066f9d1ac8a570e3a42f70a7c0f30f66157a96aae15813f0dceb297", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e89046550fa2d2d25b60361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a3410334", "7b090214e70bfed06d00f97c976477b88c00", [0x5]}) sendfile(r12, r12, 0x0, 0x3d) ioctl$LOOP_CLR_FD(r12, 0x4c01) sendfile(r1, r12, &(0x7f00000000c0), 0x3) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) [ 97.064482] input: syz1 as /devices/virtual/input/input116 22:04:16 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') readv(r0, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xbc1}], 0x2000000000000024) readv(r0, &(0x7f0000000580), 0x3c1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)) r1 = socket$inet(0x2, 0x2, 0x2000000003) syncfs(0xffffffffffffffff) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$addseals(r2, 0x409, 0x0) r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) signalfd4(r4, &(0x7f00000004c0)={0xffffffff}, 0x8, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendfile(r5, r4, &(0x7f0000000540)=0x1, 0x7fdeffff) getsockopt$netlink(r4, 0x10e, 0x0, &(0x7f0000000580)=""/150, &(0x7f0000000380)=0x96) ioctl$TIOCGPTPEER(r4, 0x5441, 0x6) pipe(&(0x7f0000000640)={0xffffffffffffffff}) read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3) r7 = syz_open_pts(r6, 0x10040) ioctl$TCGETX(r7, 0x5432, &(0x7f0000000200)) setsockopt$inet_tcp_int(r1, 0x6, 0x35, &(0x7f0000000100)=0x400, 0x162) clock_getres(0x3, &(0x7f00000001c0)) openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0xc0000, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) clone(0x207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x80003, 0x1800000000009) r8 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r8) r9 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x6, 0x105082) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') r10 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x1) pwritev(r10, &(0x7f0000000440)=[{&(0x7f0000000480)}], 0x1, 0x81001) ioctl$LOOP_CHANGE_FD(r9, 0x4c00, r10) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000003380)=ANY=[@ANYBLOB="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"], 0xfc7) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r8, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(0x0, 0xfffffffffffffe1b, 0x0, 0x0, 0xcc) fcntl$setstatus(r8, 0x4, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r12, &(0x7f0000000a00)="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", 0xffffff5d) read(r11, &(0x7f0000000340)=""/250, 0x14df5a54151c3a26) sendfile(r9, r8, 0x0, 0x7ffff) [ 97.205056] binder: undelivered TRANSACTION_ERROR: 29201 [ 97.279544] input: syz1 as /devices/virtual/input/input118 22:04:17 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0xc, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0363fc3f", @ANYRES64=0x0], 0x0, 0x0, 0x0}) 22:04:17 executing program 5: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f00004c2a03b300000600010008000100010423dcffdf0000000000000000", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110600f30501000b000100020423ca0000cf", 0x1f) 22:04:17 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) fadvise64(r0, 0x0, 0xbb, 0x3) close(r0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x8000fffffffe) 22:04:17 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, &(0x7f0000000240), 0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffffc, 0x4, 0x4000000000) write(r4, &(0x7f0000000640)="8004e1d20253c63e9b9251103110b37fffffffbfa2c62e308bfcb0d49b4a178db670d6bee2fa779f09d39b390d7900ce8be96ca132b1b9bfc2227d8a3f72324b544f462c4b191fe538eaad7195a85a0d143a0b750d5d0b20d556c721f25a4f679f9b3303000000000000001dc9b164003d14b071ac5084e8314ced35ff3dd2c54bd82459f5d517b446d1ff03000000000000000000001173101ec74bcea32d7c3ea09c3ce6c3829a6e9cdfd0344bf0fe07ecb5", 0xffffffffffffffb9) getegid() vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r0) creat(&(0x7f00000004c0)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000080)=0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$P9_RMKNOD(r6, &(0x7f0000000200)={0x14}, 0x14) io_submit(r5, 0x1, &(0x7f00000001c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffffffffffffff9c}]) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f0000000640)={'syz1\x00'}, 0x45c) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f0000000040)=0x200, 0x4) ioctl$UI_DEV_CREATE(r7, 0x5501) ioctl$UI_SET_PHYS(r7, 0x4008556c, 0x0) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x1) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r8, 0x5501) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf64(r8, &(0x7f0000001100)=ANY=[@ANYBLOB="7f454c461f7f0608020000000000000003003e0000010000c10300000000000040000000000000001300000000000000000000000400380001000200ff7f020051e574640600000009000000000000002a06000000000000d4000000000000000800000037c100000300000000000000ff070000000000001869628d490d1d122a278f6cc5ac1d60e2cf05fe8f3c3661881d1ad19cc9c0641c9f237b22ddf018867d656c9cbd8b46c42f9b69d8007a93529624d4a8e6f0cbdee0300ba8c4fe449a27dda12adca845d1a8b1cad4b019f91f35df1e4040012162314010ab3c56a505c2a392a52df015b0d0080a025f2320dec6d15a287e83fe683d55722d7b4b2eacb66169f407d5f194098d952560d117dfbecee81edfecb754a8aa0ad8dfe97f8565c1ea4f4110c9675a92ca47d6a1f2e7803812c397af3c2e83864991a3a53dfc4f82a912088ff5c78ba2291ba23d4ac0dab66856f01b48a14c00000000000000000000000000000000000000000000000000000000000000000000d9f3ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000fffffffa000000000000000000000000000000000000000000000000000000000000000000000000000000000000fff90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000fbff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef0ce1a800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000038c6dfcb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000c18197b911d0b1294a187b54dc87b500"/2149], 0xffffffffffffffa4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'irlan0\x00'}) r9 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r9, r9, &(0x7f00000002c0)=0x202, 0xdd) [ 97.546036] binder: 4096:4097 unknown command 1073505027 [ 97.567027] binder: 4096:4097 ioctl c0306201 20000700 returned -22 [ 97.584726] binder: 4096:4101 unknown command 1073505027 22:04:17 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000001800"/60, @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB='\x00 \x00'/24], @ANYBLOB="0018000000000000"], 0x0, 0x0, 0x0}) [ 97.590503] binder: 4096:4101 ioctl c0306201 20000700 returned -22 22:04:17 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x267, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ddd44f9]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_PHYS(r0, 0x4008556c, 0x0) fchmod(r0, 0x28) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') preadv(r3, &(0x7f0000000700), 0x31f, 0x10400003) pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r4, &(0x7f0000000200)=""/250, 0xdfedf534d1677a51) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}}}, &(0x7f00000001c0)=0xe8) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000580)={0x78, 0x0, 0x8, {0x0, 0x9, 0x0, {0x81, 0x8, 0x0, 0x8, 0x1, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0xf9, r5, 0x0, 0x100000001, 0x7}}}, 0x78) r6 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r6) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000400)={0xffffffffffffffa3, 0x0, 0x0, {{0x2, 0x2, 0x9faf, 0x4, 0x7f, 0x1, {0x1, 0x8, 0x7fff, 0x10001, 0x0, 0xfffffffffffffffb, 0x1ff, 0x9, 0x5, 0x0, 0x1, r5, r6, 0x0, 0x40}}, {0x0, 0x8}}}, 0xa0) sendto$inet(r2, &(0x7f0000000300)="68d3cff884a2cc80e05904569a660434fb76a37350fc1b7be6d649a73670f1987f6ca51406a0db928554f5632ffa2c99298cd60a315a12afc4af7bad770f2d9c3379d2694c41fd9dac7106b8d360130caaa68780ad045efbb1e69b03f15cbc2b14cf25b37a3c28608d1578fba9651ae45323f3873bd7f02334f050b0e0cc06ec709e889ab09a76546ac836b5ede5c4533219bfaade595c6107eb496fcbba17ba125884b1f93b17e4e9bc2a5724cbf38d2a9a50a717ce1d761b2242033742061d2cb9ba6515819fc45efc5c59e44c319d863be013d6575b5d09be996851fbf30e7e066988a8cfaafa68", 0xe9, 0x44810, &(0x7f0000000080)={0x2, 0x4e22, @broadcast}, 0x10) clock_adjtime(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000500)) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="09b24503195aeb5b5084b9e77996e2d1a61f33f086f8062b757668cde3e391454bc6c58f103f4393f7291821046be7725aab558659d02b9778fe409ca0f2295b1d06f47310716f842e35c30677452f1bb36af4b44f069ab40553c074f07bdf2422d685e3b22e148638c547727c57c799cdd7075e8018e230ddec9f645bd89350cfa2"], 0x82) r7 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x2, 0x0) r8 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000700)) write$P9_RLERRORu(r7, &(0x7f0000000ac0)=ANY=[@ANYBLOB="00000000000000000000060000002f4df70fe815b17ba93a4fdceb6545000000f01301946040eb8fbb86ddeadec5628bc9d149a35c07b6aa7507d36dd685d12411a90c2394ecda50650bd8dae6299b562d04c3b79ba5d2182d8997c07d12541d4cb780364962155054c103ed41aa1dc5f76da64f0534e5177c5e4ef90a02c917acee8d19744b814cc5315f22be0a44d9381cfb589cb36afe62ad70c42ceb31a8b6f88dce3f85551f04adcd7e4361d35f24de2a1d49ddf2a16ec82ee246112dd8da5402531ea4f7"], 0xe) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') lseek(r3, 0x0, 0x2) [ 97.623266] binder: 4103:4104 got transaction with invalid offset (8192, min 0 max 0) or object. [ 97.632863] binder: 4103:4104 transaction failed 29201/-22, size 0-24 line 3199 [ 97.641388] binder: undelivered TRANSACTION_ERROR: 29201 22:04:17 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f0000000000)={{0x0, 0x0, @reserved="a49cc1cef62f4ce88a63b547b7d79e0c3b2e22aaadb4a67a3a62b5f4367b8338"}}) r1 = syz_open_dev$binderN(0x0, 0x0, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)}, 0x1800}], 0x0, 0x0, 0x0}) [ 97.666865] binder: 4103:4105 got transaction with invalid offset (8192, min 0 max 0) or object. [ 97.681127] binder: 4103:4105 transaction failed 29201/-22, size 0-24 line 3199 [ 97.689687] binder: undelivered TRANSACTION_ERROR: 29201 [ 97.692171] input: syz1 as /devices/virtual/input/input119 [ 97.711343] input: syz1 as /devices/virtual/input/input120 [ 97.730546] input: syz1 as /devices/virtual/input/input121 22:04:17 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x12000, 0x0) write$eventfd(r1, &(0x7f0000000040), 0x8) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000001800"/60, @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB='\x00'/24], @ANYBLOB="be18000000000000"], 0x0, 0x0, 0x0}) [ 97.803564] binder: 4112:4113 got transaction with invalid offset (0, min 0 max 0) or object. [ 97.818923] binder: 4112:4113 transaction failed 29201/-22, size 0-24 line 3199 [ 97.832934] binder: undelivered TRANSACTION_ERROR: 29201 [ 97.872879] binder: 4118:4119 got transaction with unaligned buffers size, 6334 [ 97.880704] binder: 4118:4119 transaction failed 29201/-22, size 0-24 line 3181 [ 97.889749] binder: undelivered TRANSACTION_ERROR: 29201 [ 97.898290] binder: 4118:4120 got transaction with unaligned buffers size, 6334 [ 97.906428] binder: 4118:4120 transaction failed 29201/-22, size 0-24 line 3181 [ 97.914631] binder: undelivered TRANSACTION_ERROR: 29201 22:04:17 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000240)=""/175, 0xaf, 0x10000, &(0x7f00000000c0)={0xa, 0x0, 0x8, @mcast1, 0x7}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r2, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000000)={0x3c, @empty, 0x4e22, 0x4, 'sed\x00', 0x2cf1242b657c6f7b, 0x8, 0x19}, 0x2c) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000700)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000001800"/60, @ANYRESHEX=r0, @ANYBLOB="9dc9ba5e7bb01200"], 0x0, 0x0, 0x0}) 22:04:17 executing program 0: mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000100)={0x29, 0x4, 0x0, {0x5, 0x2, 0x1, 0x0, [0x0]}}, 0x29) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)}, 0x1800}], 0x0, 0x0, 0x0}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000240)=""/175, 0xaf, 0x10000, &(0x7f00000000c0)={0xa, 0x0, 0x8, @mcast1, 0x7}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r2, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000000c0)={@rand_addr="489192572ca0aed6de1b4bc6da12572c", 0x0, r7}) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr="d214c0e12eb5e6ea076cca63e0537907"}, 0x1c) sendmmsg(r4, &(0x7f000000ac80), 0x271, 0x8042) r8 = socket$inet6(0xa, 0x2, 0x0) dup3(r8, r6, 0x0) sendmmsg$inet(r4, &(0x7f00000056c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x54, r3, 0x2, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x64f8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100}]}, @TIPC_NLA_NET={0x14, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9e}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x51}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8880}, 0x41) [ 98.047761] binder_alloc: 4128: binder_alloc_buf size 3472328296227680328 failed, no address space [ 98.059815] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 98.069300] binder: 4128:4131 transaction failed 29201/-28, size 0-24 line 3137 [ 98.081252] binder: undelivered TRANSACTION_ERROR: 29201 [ 98.274027] ================================================================== [ 98.281441] BUG: KASAN: use-after-free in ip6t_do_table+0x1545/0x1860 [ 98.288281] Read of size 8 at addr ffff8801d690c000 by task syz-executor.0/4140 [ 98.295736] [ 98.297382] CPU: 1 PID: 4140 Comm: syz-executor.0 Not tainted 4.4.174+ #17 [ 98.304418] 0000000000000000 ebacb167fb373eec ffff8800a6577028 ffffffff81aad1a1 [ 98.312496] 0000000000000000 ffffea00075a4300 ffff8801d690c000 0000000000000008 [ 98.320577] dffffc0000000000 ffff8800a6577060 ffffffff81490120 0000000000000000 [ 98.328653] Call Trace: [ 98.331234] [] dump_stack+0xc1/0x120 [ 98.336601] [] print_address_description+0x6f/0x21b [ 98.343270] [] kasan_report.cold+0x8c/0x2be [ 98.349233] [] ? ip6t_do_table+0x1545/0x1860 [ 98.355298] [] __asan_report_load8_noabort+0x14/0x20 [ 98.362052] [] ip6t_do_table+0x1545/0x1860 [ 98.367931] [] ? mark_held_locks+0xb1/0x100 [ 98.373905] [] ? nf_conntrack_in+0x13ef/0x1c20 [ 98.380129] [] ? __nf_ct_refresh_acct+0x1d2/0x280 [ 98.386626] [] ? ip6t_alloc_initial_table+0x680/0x680 [ 98.393483] [] ? trace_hardirqs_on+0x10/0x10 [ 98.399541] [] ip6table_mangle_hook+0x2d6/0x710 [ 98.405992] [] nf_iterate+0x186/0x220 [ 98.411526] [] nf_hook_slow+0x1b6/0x340 [ 98.417154] [] ? nf_iterate+0x220/0x220 [ 98.422775] [] ? nf_iterate+0x220/0x220 [ 98.428408] [] ? memset+0x32/0x40 [ 98.433513] [] __ip6_local_out+0x309/0x4b0 [ 98.439398] [] ? ip6_find_1stfragopt+0x260/0x260 [ 98.445891] [] ? icmpv6_send+0x1b0/0x1b0 [ 98.451596] [] ? ip6_output+0x520/0x520 [ 98.457215] [] ? __ip6_append_data.isra.0+0xc73/0x33f0 [ 98.464137] [] ip6_local_out+0x29/0x180 [ 98.469770] [] ip6_send_skb+0xa2/0x340 [ 98.475300] [] ? csum_ipv6_magic+0x2b/0x80 [ 98.481195] [] udp_v6_send_skb+0x438/0xe90 [ 98.487082] [] udp_v6_push_pending_frames+0x245/0x360 [ 98.493925] [] ? udp_v6_send_skb+0xe90/0xe90 [ 98.499978] [] ? mark_held_locks+0xb1/0x100 [ 98.505968] [] ? ip_reply_glue_bits+0xc0/0xc0 [ 98.512114] [] udpv6_sendmsg+0x1a37/0x24f0 [ 98.519992] [] ? ip_reply_glue_bits+0xc0/0xc0 [ 98.526133] [] ? udp_v6_flush_pending_frames+0xe0/0xe0 [ 98.533064] [] ? sock_has_perm+0x2a8/0x400 [ 98.538974] [] ? sock_has_perm+0xa6/0x400 [ 98.544781] [] ? selinux_msg_queue_alloc_security+0x2e0/0x2e0 [ 98.552396] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 98.559142] [] ? check_preemption_disabled+0x3c/0x200 [ 98.565977] [] ? check_preemption_disabled+0x3c/0x200 [ 98.572815] [] ? inet_sendmsg+0x143/0x4d0 [ 98.578611] [] inet_sendmsg+0x202/0x4d0 [ 98.584240] [] ? inet_sendmsg+0x76/0x4d0 [ 98.589939] [] ? inet_recvmsg+0x4d0/0x4d0 [ 98.595733] [] sock_sendmsg+0xbe/0x110 [ 98.601272] [] ___sys_sendmsg+0x369/0x890 [ 98.607071] [] ? copy_msghdr_from_user+0x550/0x550 [ 98.613650] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 98.620408] [] ? check_preemption_disabled+0x3c/0x200 [ 98.627246] [] ? check_preemption_disabled+0x3c/0x200 [ 98.634088] [] ? __fget+0x13b/0x370 [ 98.639357] [] ? __fget+0x162/0x370 [ 98.644639] [] ? __fget+0x47/0x370 [ 98.649825] [] ? __fget_light+0xa3/0x1f0 [ 98.655532] [] ? __fdget+0x1b/0x20 [ 98.660718] [] ? sockfd_lookup_light+0xb4/0x160 [ 98.667037] [] __sys_sendmmsg+0x1d6/0x2e0 [ 98.672831] [] ? SyS_sendmsg+0x50/0x50 [ 98.678430] [] ? __might_fault+0x95/0x1d0 [ 98.685095] [] ? SyS_clock_gettime+0x118/0x1e0 [ 98.691324] [] ? SyS_clock_settime+0x220/0x220 [ 98.697559] [] ? __compat_put_timespec.isra.0+0xce/0x140 [ 98.704694] [] ? compat_SyS_clock_gettime+0x162/0x1f0 [ 98.711537] [] ? compat_SyS_clock_settime+0x1b0/0x1b0 [ 98.718372] [] compat_SyS_sendmmsg+0x32/0x40 [ 98.724534] [] ? compat_SyS_sendmsg+0x40/0x40 [ 98.730686] [] do_fast_syscall_32+0x32d/0xa90 [ 98.736834] [] sysenter_flags_fixed+0xd/0x1a [ 98.742882] [ 98.744503] Allocated by task 4124: [ 98.748112] [] save_stack_trace+0x26/0x50 [ 98.754036] [] kasan_kmalloc.part.0+0x62/0xf0 [ 98.760318] [] kasan_kmalloc+0xb7/0xd0 [ 98.765980] [] kasan_krealloc+0x60/0x80 [ 98.771733] [] ksize+0x8a/0xf0 [ 98.776701] [] __alloc_skb+0x139/0x5d0 [ 98.782366] [] alloc_skb_with_frags+0xb0/0x4f0 [ 98.788730] [] sock_alloc_send_pskb+0x640/0x7d0 [ 98.795183] [] sock_alloc_send_skb+0x32/0x40 [ 98.801426] [] __ip6_append_data.isra.0+0x1ff5/0x33f0 [ 98.808401] [] ip6_make_skb+0x247/0x3f0 [ 98.814148] [] udpv6_sendmsg+0x1e0a/0x24f0 [ 98.820153] [] inet_sendmsg+0x202/0x4d0 [ 98.825901] [] sock_sendmsg+0xbe/0x110 [ 98.831556] [] ___sys_sendmsg+0x369/0x890 [ 98.837495] [] __sys_sendmmsg+0x1d6/0x2e0 [ 98.843416] [] compat_SyS_sendmmsg+0x32/0x40 [ 98.849601] [] do_fast_syscall_32+0x32d/0xa90 [ 98.855870] [] sysenter_flags_fixed+0xd/0x1a [ 98.862064] [ 98.863704] Freed by task 4124: [ 98.866964] [] save_stack_trace+0x26/0x50 [ 98.872898] [] kasan_slab_free+0xb0/0x190 [ 98.878825] [] kfree+0xf4/0x310 [ 98.883885] [] skb_release_data+0x2e6/0x380 [ 98.889980] [] skb_release_all+0x4d/0x60 [ 98.895814] [] kfree_skb+0xf7/0x400 [ 98.901217] [] vti_tunnel_xmit+0x318/0x13b0 [ 98.907662] [] dev_hard_start_xmit+0x7c1/0x11e0 [ 98.914099] [] __dev_queue_xmit+0x164b/0x1bb0 [ 98.920367] [] dev_queue_xmit+0x18/0x20 [ 98.926106] [] neigh_direct_output+0x16/0x20 [ 98.932316] [] ip6_finish_output2+0x9c7/0x1dc0 [ 98.938679] [] ip6_finish_output+0x2f3/0x750 [ 98.944858] [] ip6_output+0x1b4/0x520 [ 98.950425] [] ip6_local_out+0x9c/0x180 [ 98.956353] [] ip6_send_skb+0xa2/0x340 [ 98.962008] [] udp_v6_send_skb+0x438/0xe90 [ 98.968036] [] udpv6_sendmsg+0x1e3d/0x24f0 [ 98.974044] [] inet_sendmsg+0x202/0x4d0 [ 98.979796] [] sock_sendmsg+0xbe/0x110 [ 98.985460] [] ___sys_sendmsg+0x369/0x890 [ 98.991397] [] __sys_sendmmsg+0x1d6/0x2e0 [ 98.997323] [] compat_SyS_sendmmsg+0x32/0x40 [ 99.003512] [] do_fast_syscall_32+0x32d/0xa90 [ 99.010042] [] sysenter_flags_fixed+0xd/0x1a [ 99.016220] [ 99.017835] The buggy address belongs to the object at ffff8801d690c000 [ 99.017835] which belongs to the cache kmalloc-512 of size 512 [ 99.030485] The buggy address is located 0 bytes inside of [ 99.030485] 512-byte region [ffff8801d690c000, ffff8801d690c200) [ 99.042174] The buggy address belongs to the page: [ 99.211592] kasan: CONFIG_KASAN_INLINE enabled [ 99.216038] kasan: GPF could be caused by NULL-ptr deref or user memory accessgeneral protection fault: 0000 [#1] PREEMPT SMP KASAN [ 99.229104] Modules linked in: [ 99.232449] CPU: 0 PID: 4106 Comm: syz-executor.5 Not tainted 4.4.174+ #17 [ 99.239472] task: ffff8801bb8a5f00 task.stack: ffff880000148000 [ 99.245562] RIP: 0010:[] [] __ip_route_output_key_hash+0x5a6/0x2080 [ 99.255474] RSP: 0018:ffff8801db607918 EFLAGS: 00010203 [ 99.260925] RAX: dffffc0000000000 RBX: ffff8800b50bada8 RCX: ffff8801bb8a67c8 [ 99.268198] RDX: 09ebe8eaa84bea45 RSI: ffffffff823a3e7f RDI: 4f5f4755425f522e [ 99.275484] RBP: ffff8801db607a08 R08: 0000000000000006 R09: 0000000000000001 [ 99.282772] R10: 0000000000000000 R11: 0000000000000002 R12: 4f5f4755425f4d56 [ 99.290136] R13: ffff8800a647b5f0 R14: ffffffff82891be0 R15: ffff8801db6079e0 [ 99.297415] FS: 0000000000000000(0000) GS:ffff8801db600000(0063) knlGS:00000000f5573b40 [ 99.305726] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 99.311610] CR2: 00007ffe86e94fbc CR3: 00000001d60fa000 CR4: 00000000001606b0 [ 99.318887] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 99.326160] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 99.333428] Stack: [ 99.335577] ffffffff823a3bcc ffffffff810e1a8a ffff00028271b24e ffff8800ba7cad00 [ 99.343675] ffff8800b50badd4 0000000080000000 ffff8800b50badd0 1ffff1003b6c0f2c [ 99.351758] ffff8800a647b300 0000000041b58ab3 ffffffff82ca12ae ffffffff823a3910 [ 99.359889] Call Trace: [ 99.362471] [ 99.364623] [] ? __ip_route_output_key_hash+0x2bc/0x2080 [ 99.372036] [] ? irq_exit+0x10a/0x150 [ 99.377504] [] ? rt_set_nexthop.constprop.0+0xcd0/0xcd0 [ 99.384557] [] ? __asan_report_load4_noabort+0x14/0x20 [ 99.391640] [] ip_route_output_flow+0x2a/0xa0 [ 99.397803] [] ip_queue_xmit+0x1174/0x1ab0 [ 99.404215] [] ? ip_queue_xmit+0x3f/0x1ab0 [ 99.410199] [] ? tcp_options_write+0x226/0x930 [ 99.416442] [] __tcp_transmit_skb+0x1904/0x2cf0 [ 99.422998] [] ? __tcp_select_window+0x520/0x520 [ 99.429437] [] tcp_xmit_probe_skb+0x3ba/0x4a0 [ 99.435711] [] tcp_write_wakeup+0x187/0x5c0 [ 99.441880] [] tcp_send_probe0+0x26/0x3c0 [ 99.447707] [] tcp_write_timer_handler+0x61b/0x700 [ 99.455437] [] tcp_write_timer+0xbd/0xd0 [ 99.461171] [] call_timer_fn+0x18d/0x850 [ 99.466892] [] ? call_timer_fn+0xde/0x850 [ 99.472704] [] ? tcp_write_timer_handler+0x700/0x700 [ 99.479473] [] ? process_timeout+0x20/0x20 [ 99.485379] [] ? _raw_spin_unlock_irq+0x28/0x60 [ 99.491718] [] ? trace_hardirqs_on_caller+0x260/0x5a0 [ 99.498576] [] ? tcp_write_timer_handler+0x700/0x700 [ 99.505339] [] ? tcp_write_timer_handler+0x700/0x700 [ 99.512101] [] run_timer_softirq+0x51f/0xb70 [ 99.518169] [] ? call_timer_fn+0x850/0x850 [ 99.524073] [] __do_softirq+0x226/0xa3f [ 99.529724] [] irq_exit+0x10a/0x150 [ 99.535041] [] smp_apic_timer_interrupt+0x7e/0xb0 [ 99.541654] [] apic_timer_interrupt+0x9d/0xb0 [ 99.547803] [ 99.549886] [] ? lock_acquire+0x1a9/0x450 [ 99.556699] [] __might_fault+0x14d/0x1d0 [ 99.562710] [] ? __might_fault+0xe7/0x1d0 [ 99.568523] [] input_event_from_user+0x134/0x2b0 [ 99.574971] [] ? input_devices_seq_start+0x110/0x110 [ 99.581736] [] ? _raw_spin_unlock_irqrestore+0x45/0x70 [ 99.588676] [] ? input_event+0x7b/0x90 [ 99.594254] [] uinput_write+0x942/0xf60 [ 99.599891] [] ? trace_hardirqs_on+0x10/0x10 [ 99.605962] [] ? uinput_ioctl+0x60/0x60 [ 99.611621] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 99.618414] [] __vfs_write+0x116/0x3d0 [ 99.623965] [] ? uinput_ioctl+0x60/0x60 [ 99.629623] [] ? __vfs_read+0x3c0/0x3c0 [ 99.635256] [] ? check_preemption_disabled+0x3c/0x200 [ 99.642108] [] ? check_preemption_disabled+0x3c/0x200 [ 99.648977] [] ? avc_policy_seqno+0x9/0x20 [ 99.654902] [] ? selinux_file_permission+0x2f5/0x450 [ 99.661666] [] ? security_file_permission+0x91/0x1e0 [ 99.668435] [] ? rw_verify_area+0x103/0x2f0 [ 99.674529] [] vfs_write+0x182/0x4e0 [ 99.679904] [] SyS_write+0xdc/0x1c0 [ 99.685207] [] ? SyS_read+0x1c0/0x1c0 [ 99.690675] [] ? do_fast_syscall_32+0xd6/0xa90 [ 99.696917] [] ? SyS_read+0x1c0/0x1c0 [ 99.702430] [] do_fast_syscall_32+0x32d/0xa90 [ 99.708586] [] sysenter_flags_fixed+0xd/0x1a [ 99.714664] Code: df 48 c1 ea 03 80 3c 02 00 0f 85 27 18 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 26 49 8d bc 24 d8 04 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 f7 17 00 00 4d 8b a4 24 d8 04 00 00 48 b8 00 [ 99.742826] RIP [] __ip_route_output_key_hash+0x5a6/0x2080 [ 99.750279] RSP [ 99.753965] BUG: unable to handle kernel paging request at fffffffb8d2facf0 [ 99.761376] IP: [] cpuacct_charge+0x14e/0x360 [ 99.767597] PGD 2e0d067 PUD 0 [ 99.771155] Oops: 0000 [#2] PREEMPT SMP KASAN [ 99.776227] Modules linked in: [ 99.779584] CPU: 0 PID: 4106 Comm: syz-executor.5 Tainted: G D 4.4.174+ #17 [ 99.787817] task: ffff8801bb8a5f00 task.stack: ffff880000148000 [ 99.793874] RIP: 0010:[] [] cpuacct_charge+0x14e/0x360 [ 99.802593] RSP: 0018:ffff8801db6070e8 EFLAGS: 00010046 [ 99.808067] RAX: 1ffffffff05d2a33 RBX: 00000000000181a8 RCX: fffffffb8d2facf0 [ 99.815344] RDX: fffffbff71a5f59e RSI: 0000000000000000 RDI: ffffffff82e95198 [ 99.822627] RBP: ffff8801db607128 R08: 0000000000000000 R09: 0000000000000001 [ 99.829921] R10: ffffffff82836880 R11: ffffffff831a5078 R12: ffffffff82e950c0 [ 99.837206] R13: dffffc0000000000 R14: 000000004bd54eb6 R15: ffffffff8142ac16 [ 99.844506] FS: 0000000000000000(0000) GS:ffff8801db600000(0063) knlGS:00000000f5573b40 [ 99.852739] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 99.858630] CR2: fffffffb8d2facf0 CR3: 00000001d60fa000 CR4: 00000000001606b0 [ 99.865999] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 99.873289] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 99.880562] Stack: [ 99.882715] ffffffff811f4630 ffffffff82ba5a2e 0000000000000066 ffff8801d3fc1820 [ 99.890898] ffff8801d3fc17c0 000000004bd54eb6 ffff8801d3fc1870 0000000000000000 [ 99.898986] ffff8801db607170 ffffffff8117c4a3 0000000000000001 0000000000000000 [ 99.907066] Call Trace: [ 99.909643] [ 99.911724] [] ? cpuacct_charge+0x60/0x360 [ 99.917932] [] update_curr+0x2c3/0x6e0 [ 99.923501] [] enqueue_task_fair+0x10f/0xb6c0 [ 99.929657] [] ? trace_hardirqs_on+0x10/0x10 [ 99.935728] [] ? select_task_rq_fair+0x483/0x2e90 [ 99.942235] [] ? kvm_clock_read+0x23/0x40 [ 99.948045] [] ? sched_clock_cpu+0x14b/0x1c0 [ 99.954146] [] activate_task+0x154/0x280 [ 99.959873] [] ttwu_do_activate.constprop.0+0xbe/0x1e0 [ 99.966901] [] try_to_wake_up+0x6d1/0x1110 [ 99.972797] [] ? update_fast_timekeeper+0x5c/0x70 [ 99.979308] [] default_wake_function+0x35/0x50 [ 99.985553] [] autoremove_wake_function+0x12/0x40 [ 99.992067] [] __wake_up_common+0xc0/0x160 [ 99.997969] [] __wake_up+0x34/0x50 [ 100.003171] [] wake_up_klogd_work_func+0x80/0x90 [ 100.009591] [] irq_work_run_list+0xd8/0x150 [ 100.015572] [] irq_work_tick+0x11c/0x180 [ 100.021293] [] update_process_times+0x6b/0x70 [ 100.027565] [] tick_sched_handle.isra.0+0x4a/0xf0 [ 100.034097] [] tick_sched_timer+0x7a/0x130 [ 100.040002] [] ? tick_sched_handle.isra.0+0xf0/0xf0 [ 100.046679] [] __hrtimer_run_queues+0x34e/0xfc0 [ 100.053016] [] ? hrtimer_fixup_init+0x70/0x70 [ 100.059202] [] ? kvm_clock_get_cycles+0x9/0x10 [ 100.065456] [] ? hrtimer_interrupt+0x121/0x450 [ 100.071703] [] hrtimer_interrupt+0x1b6/0x450 [ 100.077792] [] local_apic_timer_interrupt+0x76/0xa0 [ 100.084495] [] smp_apic_timer_interrupt+0x79/0xb0 [ 100.091002] [] apic_timer_interrupt+0x9d/0xb0 [ 100.097161] [] ? add_taint+0x1c/0x50 [ 100.102536] [] ? oops_end+0x4c/0xc0 [ 100.107822] [] die.cold+0x21/0x2b [ 100.113027] [] do_general_protection+0x222/0x2b0 [ 100.119446] [] general_protection+0x25/0x30 [ 100.125444] [] ? __ip_route_output_key_hash+0x56f/0x2080 [ 100.132565] [] ? __ip_route_output_key_hash+0x5a6/0x2080 [ 100.139705] [] ? __ip_route_output_key_hash+0x56f/0x2080 [ 100.146820] [] ? __ip_route_output_key_hash+0x2bc/0x2080 [ 100.153944] [] ? irq_exit+0x10a/0x150 [ 100.159424] [] ? rt_set_nexthop.constprop.0+0xcd0/0xcd0 [ 100.166450] [] ? __asan_report_load4_noabort+0x14/0x20 [ 100.173422] [] ip_route_output_flow+0x2a/0xa0 [ 100.179579] [] ip_queue_xmit+0x1174/0x1ab0 [ 100.185491] [] ? ip_queue_xmit+0x3f/0x1ab0 [ 100.191448] [] ? tcp_options_write+0x226/0x930 [ 100.197689] [] __tcp_transmit_skb+0x1904/0x2cf0 [ 100.204019] [] ? __tcp_select_window+0x520/0x520 [ 100.210456] [] tcp_xmit_probe_skb+0x3ba/0x4a0 [ 100.216632] [] tcp_write_wakeup+0x187/0x5c0 [ 100.222624] [] tcp_send_probe0+0x26/0x3c0 [ 100.228440] [] tcp_write_timer_handler+0x61b/0x700 [ 100.235030] [] tcp_write_timer+0xbd/0xd0 [ 100.240753] [] call_timer_fn+0x18d/0x850 [ 100.246562] [] ? call_timer_fn+0xde/0x850 [ 100.252423] [] ? tcp_write_timer_handler+0x700/0x700 [ 100.259192] [] ? process_timeout+0x20/0x20 [ 100.265091] [] ? _raw_spin_unlock_irq+0x28/0x60 [ 100.271426] [] ? trace_hardirqs_on_caller+0x260/0x5a0 [ 100.278285] [] ? tcp_write_timer_handler+0x700/0x700 [ 100.285244] [] ? tcp_write_timer_handler+0x700/0x700 [ 100.292005] [] run_timer_softirq+0x51f/0xb70 [ 100.298102] [] ? call_timer_fn+0x850/0x850 [ 100.304019] [] __do_softirq+0x226/0xa3f [ 100.309660] [] irq_exit+0x10a/0x150 [ 100.314944] [] smp_apic_timer_interrupt+0x7e/0xb0 [ 100.321473] [] apic_timer_interrupt+0x9d/0xb0 [ 100.327619] [ 100.329699] [] ? lock_acquire+0x1a9/0x450 [ 100.335822] [] __might_fault+0x14d/0x1d0 [ 100.341566] [] ? __might_fault+0xe7/0x1d0 [ 100.347469] [] input_event_from_user+0x134/0x2b0 [ 100.353885] [] ? input_devices_seq_start+0x110/0x110 [ 100.360654] [] ? _raw_spin_unlock_irqrestore+0x45/0x70 [ 100.367607] [] ? input_event+0x7b/0x90 [ 100.373160] [] uinput_write+0x942/0xf60 [ 100.378924] [] ? trace_hardirqs_on+0x10/0x10 [ 100.384997] [] ? uinput_ioctl+0x60/0x60 [ 100.390659] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 100.397475] [] __vfs_write+0x116/0x3d0 [ 100.403025] [] ? uinput_ioctl+0x60/0x60 [ 100.408668] [] ? __vfs_read+0x3c0/0x3c0 [ 100.414315] [] ? check_preemption_disabled+0x3c/0x200 [ 100.421189] [] ? check_preemption_disabled+0x3c/0x200 [ 100.428133] [] ? avc_policy_seqno+0x9/0x20 [ 100.434028] [] ? selinux_file_permission+0x2f5/0x450 [ 100.440789] [] ? security_file_permission+0x91/0x1e0 [ 100.447556] [] ? rw_verify_area+0x103/0x2f0 [ 100.453562] [] vfs_write+0x182/0x4e0 [ 100.458943] [] SyS_write+0xdc/0x1c0 [ 100.464248] [] ? SyS_read+0x1c0/0x1c0 [ 100.469718] [] ? do_fast_syscall_32+0xd6/0xa90 [ 100.475973] [] ? SyS_read+0x1c0/0x1c0 [ 100.481440] [] do_fast_syscall_32+0x32d/0xa90 [ 100.487600] [] sysenter_flags_fixed+0xd/0x1a [ 100.493655] Code: 49 8d bc 24 d8 00 00 00 48 89 f8 48 c1 e8 03 42 80 3c 28 00 0f 85 ba 01 00 00 49 8b 9c 24 d8 00 00 00 80 3a 00 0f 85 8c 01 00 00 <4a> 03 1c fd 40 4c 1a 83 48 89 d8 48 c1 e8 03 42 80 3c 28 00 0f [ 100.521736] RIP [] cpuacct_charge+0x14e/0x360 [ 100.528049] RSP [ 100.531676] CR2: fffffffb8d2facf0 [ 100.535136] ---[ end trace d8576eb7e8090e6f ]--- [ 100.539890] Kernel panic - not syncing: Fatal exception in interrupt [ 100.558312] double fault: 0000 [#3] PREEMPT SMP KASAN [ 100.564143] Modules linked in: [ 100.567451] CPU: 1 PID: 4140 Comm: syz-executor.0 Tainted: G D 4.4.174+ #17 [ 100.575669] task: ffff8801d3fc17c0 task.stack: ffff8800a6570000 [ 100.581705] RIP: 0010:[] [] dump_page_badflags+0x6/0x70 [ 100.590407] RSP: 0018:ffff8800049a3000 EFLAGS: 00010046 [ 100.595848] RAX: 0000000000040000 RBX: 0000000000000000 RCX: ffffc90006161000 [ 100.603113] RDX: 0000000000000000 RSI: ffffffff82891be0 RDI: ffffea00075a4300 [ 100.610365] RBP: ffff8800049a3008 R08: 0000000000000026 R09: 0000000000000000 [ 100.617631] R10: 0000000000000001 R11: ffffffff83fdf174 R12: ffffea00075a4300 [ 100.624894] R13: ffffffff82891be0 R14: ffff8801d690c200 R15: ffff8801d690c000 [ 100.632148] FS: 0000000000000000(0000) GS:ffff8801db700000(0063) knlGS:00000000f552cb40 [ 100.640452] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 100.646324] CR2: ffff8800049a2ff8 CR3: 00000000003b6000 CR4: 00000000001606b0 [ 100.653584] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 100.660837] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 100.668085] Stack: [ 100.670214] ffff8801d690c000 ffff8800049a3028 ffffffff8142ac50 ffffea00075a4300 [ 100.678242] ffffffff82891be0 ffff8800049a3068 ffffffff8142ac16 8000000000e001e3 [ 100.686270] 0000000000000000 ffffea00075a4300 ffffffff82891be0 ffff8801d690c200 [ 100.694413] Call Trace: [ 100.696985] [ 100.699025] Code: 48 69 c0 80 06 00 00 f0 48 ff 80 a8 1b 19 83 5b 5d c3 48 89 df e8 0b a3 05 00 eb dd 66 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 <41> 56 41 55 49 89 f5 41 54 49 89 fc 53 48 89 d3 48 83 ec 08 e8 [ 100.726783] RIP [] dump_page_badflags+0x6/0x70 [ 100.733146] RSP [ 100.736755] ---[ end trace d8576eb7e8090e70 ]--- [ 101.661691] Shutting down cpus with NMI [ 101.666190] Kernel Offset: disabled [ 101.669801] Rebooting in 86400 seconds..