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"}], 0x1298}, 0x7f}], 0x1, 0x810)
r5 = syz_open_pts(r0, 0x0)
r6 = dup3(r5, r0, 0x0)
read(r0, 0x0, 0x0)
write(r0, &(0x7f0000000080)="c3529b61b42f3e7cd74a35c3a68cd626049913f155393977bc2e64a302d46330b6d1d123ba3f575b87a3f6194d04326ea717bbfd4067402afbd4db742f9926", 0x3f)
ioctl$EVIOCGABS2F(r6, 0x8018456f, &(0x7f0000000000)=""/121)

04:04:39 executing program 5:
r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0)
getsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f0000000080)=""/92, &(0x7f0000000100)=0x7c)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfdfffffffffffffe, 0x8072, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000140))
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))

[  867.212357] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pig=4029 comm=syz-executor.2
[  867.252802] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pig=4042 comm=syz-executor.2
04:04:39 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
connect$inet(r1, 0x0, 0x0)

04:04:39 executing program 0:
r0 = eventfd2(0x0, 0x0)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x220141042, 0x0)
ftruncate(r1, 0x280080)
preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000100)=""/247, 0xf7}, {&(0x7f0000000200)=""/137, 0x89}, {&(0x7f00000002c0)=""/111, 0x6f}, {&(0x7f0000000340)=""/255, 0xff}], 0x4, 0x0)
prctl$PR_GET_THP_DISABLE(0x2a)
sendfile(r0, r1, 0x0, 0x2008000fffffffe)
syz_open_procfs(0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000040)="42c22737d3c67370f3", 0x9, 0x40, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)

04:04:39 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup3(r0, r0, 0x80000)
setsockopt$inet_tcp_buf(r1, 0x6, 0x1c, &(0x7f0000000000)="f60bfacc7e170d97c7a46d6301f155dfb35baef0baffe741b4ea0368cc0d77127041c7211e708cbec2cad7b0e0fcd01a4dedfaaba370967291d2269648fce0d739d605e046c1e66e4a2ef518fe8864a153e27280fe866b6cf7dfe5ab6e0bb7ebd8bb35b354204063fc659791266f99426b8a263f74aecb30adc3a3f896b1ac60f5cddd74f52653328d8f50fb8361a8b63588c4674f4fc7f307097aa5266a66d25e1ab2c6ff01545601262f23155ac14da91b57f8da7ea872363db633820751858656128c366eb6feea360e6e7c9d5084fd3e98cf0f27ce5a01087ba2df36d808644d29fd97de06ed97281b", 0xeb)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000140)={0x0, 0x11, &(0x7f0000000100)="3bbdc8628401f164236b98800b00852d59"})
clock_adjtime(0xfffffffffffffffb, &(0x7f0000f74f98))

04:04:39 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x7, &(0x7f0000000000)="0adc1f123c123f319bc070")
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, <r2=>0x0}, &(0x7f0000000300)=0x14)
bind$packet(r1, &(0x7f0000000340)={0x11, 0xf, r2, 0x1, 0x1db, 0x6, @dev={[], 0x20}}, 0x14)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @loopback}, {}, {0x2, 0x0, @empty}, 0x115, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf6, 0xea0b, 0x3})
r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
clone(0x100, &(0x7f0000000140)="6cf9030d0b287de3a1ae3b82ca1102c2a9cddb7261614fb11178dbe3ab5760f3ae11a0d611f7e2ff930bad13fe8c94ed73905001e9", &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000380)="0aec5d8f51b63261566a06aa56656c14b9d3082617bce36ef0e0b6dd66e9c232896b52d975f9018c36f1b272ddab55f6dd18c9aa65f952ab43954762aafede43e3d32d351d2c53b9ef42a73044b3689473fa20499c3427c2576a053f1d65c501cae5c1fad6c951e9325006ab5fbb753ffec02c413999d5ef0b0dd2ea36cdcf1d4e7c60fba79bd3efbd03")
setsockopt$packet_int(r3, 0x107, 0xc, &(0x7f0000000100)=0x8, 0x4)

04:04:39 executing program 2:
syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@broadcast, @random="f44337778cba", [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x40000, 0xffffff2f, 0x0, @remote, @local, {[], @udp={0x0, 0x8906, 0x8}}}}}}, 0x0)
syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0)

04:04:39 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000001400)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000090000000000000000000200fd27db7ed08499000000ff02000000000000000000000000000100000000000000000000000000000000a14a5c6bd6284fa9b81ba400000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRES64=r0, @ANYRES64=r0, @ANYRESOCT=r0, @ANYPTR, @ANYRESOCT=r0], @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000000006c000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480003006c7a6a6800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480001007368613531325f6d6200"/312], 0x4}}, 0x0)

04:04:39 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
clock_adjtime(0xfffffffffffffffb, &(0x7f0000f74f98))
r1 = dup3(r0, r0, 0x7fffc)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={r1, &(0x7f0000000000)="4b8707f65fcfe91ea3231aa16bcb68c44c4007b768879e2a9e9e5bd72575abd3ef5abcccb9ff1271756952d2b96834337dc50972f36448cd4f138d42f13d44abf658dc8805990f", &(0x7f0000000080)=""/13}, 0x18)

04:04:39 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="39000000110009cdd19b012abd7ae0000700fd3f03000000f3b759ac35450001070000001419001a00060000000600"/57, 0x39}], 0x1)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='coredump_filter\x00')
fstat(r1, &(0x7f0000000000))
read(r1, 0x0, 0x0)
fdatasync(r1)

04:04:39 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
clock_adjtime(0xfffffffffffffff7, &(0x7f0000f74f98)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})

04:04:39 executing program 3:
r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/access\x00', 0x2, 0x0)
write$binfmt_aout(r0, &(0x7f00000001c0)={{0x108, 0x3, 0x9, 0x2a, 0xd0, 0x9, 0x395, 0x2}, "e465905464", [[], [], [], [], [], [], [], []]}, 0x825)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffe, 0x32, 0xffffffffffffffff, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0)
connect$netlink(r2, &(0x7f00000000c0)=@unspec, 0xc)
ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000100)=""/158)

04:04:39 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000006c0)={<r1=>0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000680)='\x00', 0xffffffffffffffff}, 0x30)
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000700)=r1)
clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socketpair(0x12, 0x5, 0x3, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$inet6_tcp_buf(r2, 0x6, 0x1c, &(0x7f00000002c0)="3618ad3ff33aed0fa5054c4f1ed781d17b1d5d5c4adc0cc5145990d3e4824e4e162d236ebafc87dda50d1299ed629b0b34beee6efa219c32cc67b77e2fbb1d34dc950a16ae94f879073a437cd628626298582237d911563702ef1d9fe4ea343563b9e5a3fee2afc51c63787eae3a505a25e95ef37062c636eeb77b5fc7e247af7d74095d0a473e2a6347d7773e1f58b62faf2041466581599e767fdfa1aefe4a46b1e3a841688039eb4e0b71af1fd663eeaf2704e32b8e772a3be1b0f5b5f19ed409ec1269cac1eb3c1efd6e27b33b180e409fd1f65f7dacb949", 0xda)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000000640)={&(0x7f0000000240), 0xc, &(0x7f0000000600)={&(0x7f0000000400)={0x1c4, r4, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x78, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb1a}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x34, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x994}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfa}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_LINK={0xa8, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
r5 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000280)='net/psched\x00')
fstat(r2, &(0x7f00000001c0))
preadv(r6, &(0x7f00000017c0), 0x1be, 0x400000000074)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000840)={'team_slave_1\x00', &(0x7f0000000740)=ANY=[@ANYBLOB="00040000d700000019819573b1031cddd2637fbb73ab92825f276b3c07af60dd47f2240f326be0abbcf9bd2dac030d5e97755ee041a339023acc0faf1f36741267dacfbed5e783b1582568c8d7946794c3188d049a612d88202428a9313685669c2f8197b937922ea3588fd253faa5fd3d9ea34e560121c73cbdee181e190567f45792851cf4b96bdbbc1a1e93e1edd3c80e468e49a78bcd4b17aa921be89dca204578cd40abdc9e1f1fb3ae5d9bbaeadae7efff21cffbae42af5426f5595080f81868bbad351f3f7e598e40c2f7a655158fe880965b6b82c6a84fecaf03310000ea0000000000"]})
ptrace$setopts(0x4206, r5, 0x1, 0x0)
tkill(r5, 0x20)
ptrace$cont(0x18, r5, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x121})
ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r5, 0x0, 0x0)
accept4(0xffffffffffffff9c, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, <r7=>0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000080)=0x80, 0x80000)
setsockopt$inet6_tcp_int(r7, 0x6, 0x1f, &(0x7f0000000140)=0x4, 0x4)

04:04:39 executing program 2:
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = dup(r0)
mkdir(0x0, 0x0)
prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x100000020000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c)
socket(0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f213c12a41d88b070")
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r3)
r4 = creat(&(0x7f0000000580)='./bus\x00', 0x0)
r5 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0)
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x261c41ec})
setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0)
fchdir(r6)
fallocate(r4, 0x41, 0x1, 0x7)
r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000010000086000000cc6c50a86b27f0e980e9e47fe3471a00bfb71c25e7f0d8710b34c6d2845e7e835577510fea0af1257ad360adff9b08fc0294fec31e791e626ac7c00d5bea708fff688651237541234f0fa1c1b0d350e10dbf8de7cfc6a55fd65dac7b72755c862342d42c91248a0830f829bab52eabb08c281e72ce02762584df7f551d8e3740e6bed95e79a52b7ac00a339493e9779fb8f4ce"]})
creat(&(0x7f0000004b80)='./file0\x00', 0x0)
write$cgroup_type(r7, &(0x7f0000000240)='threaded\x00', 0xfb3f)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)=0x2)

04:04:39 executing program 2:
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3)
getgid()
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0)
ioctl$TIOCCBRK(r1, 0x5428)
write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff76)
fcntl$addseals(r0, 0x409, 0x8)
tkill(0x0, 0x0)

04:04:40 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r1 = socket$inet6(0xa, 0x7fc, 0x3)
sendto$inet6(r1, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000000480)='\x00', 0x0, 0x4011, 0x0, 0xfffffee1)
recvmmsg(r1, &(0x7f0000008880), 0x45b, 0x0, 0x0)
lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'L+', 0x6}, 0x28, 0x0)
sendto$inet6(r1, &(0x7f0000000380)="b4", 0x1, 0x0, 0x0, 0x0)
r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ioctl$PPPIOCGUNIT(r2, 0x80047456, &(0x7f0000000100))

04:04:40 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
splice(r0, &(0x7f0000000000), r0, &(0x7f0000000080), 0x5, 0x2)
pipe2(&(0x7f00000002c0)={<r1=>0xffffffffffffffff}, 0x800)
ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000300))
socket$key(0xf, 0x3, 0x2)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="38010000100013070000000000000000e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}}, 0x0)

04:04:40 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000080)={0x3, {{0x2, 0x4e21, @loopback}}, {{0x2, 0x4e24, @broadcast}}}, 0x108)
ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x7)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
getsockopt$inet_udp_int(r0, 0x11, 0x6f, &(0x7f0000000000), &(0x7f0000000040)=0x4)
clock_adjtime(0xfffffffffffffffb, &(0x7f0000f74f98)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8})

04:04:40 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f000000a000)={&(0x7f0000010ff4), 0xfffffd25, &(0x7f0000012000)={&(0x7f0000a39fc8)=@bridge_getlink={0x38, 0x12, 0x305, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}, @IFLA_LINKMODE={0x8}, @IFLA_EXT_MASK={0x7}]}, 0x38}}, 0x0)
recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/82, 0x52}, {&(0x7f0000000080)=""/17, 0x11}], 0x2}, 0x140)

04:04:40 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'bridge0\x00', {0x2, 0x4e20, @rand_addr=0x2}})
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000100)={'veth0_to_bond\x00', 0x250f})
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2000, 0x0)
write$P9_RRENAME(r2, &(0x7f0000000040)={0x7, 0x15, 0x2}, 0x7)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl(r2, 0x2, &(0x7f0000000180)="c4b151c4de5740350c717eafbe433d306ed679b9c7220b2be3c6")
ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x9)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000300)=0x5, 0x4)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000200)={{{@in=@initdev}}, {{@in6=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000000140)=0xe8)

04:04:40 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x38)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x10})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:04:40 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')
sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x50004840}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x2, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x800b, 0x0, {0x8}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000894}, 0x4)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
clock_adjtime(0xfffffffffffffffb, &(0x7f0000f74f98))

04:04:40 executing program 0:
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
rt_sigtimedwait(&(0x7f0000000040)={0xfffffffffffffff9}, &(0x7f0000000080), 0x0, 0xff83)
fcntl$setsig(r0, 0xa, 0x15)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e)
creat(&(0x7f0000000000)='./file0\x00', 0x0)

04:04:40 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x20100100000009, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f00000018c0)={0x2, 0x4e20, @local}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000000c0), 0x4)
setsockopt$sock_int(r3, 0x1, 0x1d, &(0x7f0000000140)=0x1, 0x4)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, 0x0, 0x0)
recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, 0x0)
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0)
ioctl$sock_proto_private(r1, 0x89ed, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$sock_int(r3, 0x1, 0x23, &(0x7f0000000040), 0x4)
socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$fou(0x0)
sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
recvmsg(r3, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1}, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0xffffffffffffffb0, 0x0, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)
sendto$inet(r3, &(0x7f0000000240), 0x13f698e4b9e296e3, 0x0, 0x0, 0xffffffffffffff06)

04:04:40 executing program 3:
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1000000000000003, 0x12, r0, 0x0)
r1 = socket$inet6(0xa, 0x8000000000001, 0x2)
getsockopt$inet6_buf(r1, 0x29, 0x2, 0x0, &(0x7f0000000040))

04:04:40 executing program 2:
clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = getpid()
rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000180))
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x9)
r2 = getpgid(r0)
syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00')
setpgid(r0, 0x0)
rt_tgsigqueueinfo(r2, r2, 0x5, &(0x7f0000000080)={0xf, 0x6})

04:04:40 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20400900}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4}, 0x20000000)
ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000200))

04:04:40 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x2000000016)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="39000000110009cdd19b012abd7ae0000700fd3f03000000450001070000001419001a000600070000000900"/57, 0x39}], 0x1)

04:04:40 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e20, 0x5, @empty, 0x10000}}, 0x0, 0x7, 0x0, "961e6bd92f7e1b63eb504c3086d2dec469fc691d6a815e918d5a98770977cbedf314a9db2bb197f128420d2169ab854c25525732ee939f2c08fc245f668720a2a0fd29706faefaae150c32dc3fe40c8e"}, 0xd8)
ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000000))
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
clock_adjtime(0xfffffffffffffffb, &(0x7f0000f74f98))

04:04:40 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
fcntl$setstatus(r0, 0x4, 0x80200000004400)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000002200)=""/4096, &(0x7f00000000c0)=0x20b)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
clock_adjtime(0xfffffffffffffffb, &(0x7f0000f74f98)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff})
clock_gettime(0x0, &(0x7f0000000040))
write(r0, &(0x7f0000000200)="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", 0xfffffffffffffe4d)

04:04:40 executing program 3:
r0 = getpgrp(0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
sendmsg$nl_netfilter(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000140000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x26c, 0x2, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {0x2, 0x0, 0x5}}, 0x3c0}, 0x1, 0x0, 0x0, 0x4}, 0x800)
r2 = gettid()
rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8)
sched_getparam(r2, &(0x7f0000000400))
rt_tgsigqueueinfo(r0, r2, 0x12, &(0x7f00003efff0))
rt_sigpending(&(0x7f0000000000), 0x8)
mprotect(&(0x7f0000289000/0x3000)=nil, 0x3000, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
tkill(r2, 0x30)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0)
read(r4, &(0x7f0000950000)=""/128, 0x80)

04:04:40 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
syz_execute_func(&(0x7f0000000100)="f3e100def9575c8ac2c2c9734e424a2664f0ff064a460f3038082e67660e50e94d00c9c9c4625dbae5feabc4aba39ddf4507e50c420fae9972b571112d02")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2000, 0x1de)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x7fff)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000140)={0x0, @aes256, 0x2, "cb2e6914d0a9a454"})
getsockopt$inet_opts(r0, 0x0, 0xfffffffffffffffe, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x4000)
ioctl$TCGETA(r3, 0x5405, &(0x7f0000000200))
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x84200, 0x0)
ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000080)=""/29)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r5, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
r6 = dup(r5)
openat$cgroup_subtree(r6, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$BLKDISCARD(r4, 0x1277, &(0x7f0000000100)=0x1)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, 0x0)
connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

04:04:40 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10)
personality(0x1bb2baf3005ac137)
mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1000001, 0x10, r0, 0x0)

04:04:40 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
clock_adjtime(0xfffffffffffffffb, &(0x7f0000f74f98))
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000040))

04:04:43 executing program 0:
clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x100, 0x0)
ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000080)=0x8)
futex(&(0x7f0000000000)=0x2, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x33)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0154eff1ec6f0600ac087db90001607c000000ba59b3af6e9136a3d0b21016a5e92101be083bac90b8b2d0babd569a890d56b000405353"], 0x39)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0))
ptrace$cont(0x7, r0, 0x0, 0x0)

04:04:43 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x0, 0x0, [{r0, 0x0, 0x3}, {r0, 0x0, 0x9}, {r0, 0x0, 0x80000001}, {r0, 0x0, 0x400}]})
getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000000000))

04:04:43 executing program 5:
mlock(&(0x7f0000001000/0x4000)=nil, 0x4000)
mlock(&(0x7f0000002000/0xb000)=nil, 0xb000)
mlock2(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x1)
r0 = dup(0xffffffffffffff9c)
epoll_wait(r0, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x9da)

04:04:43 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
shutdown(r0, 0x1)
clock_adjtime(0xfffffffffffffffb, &(0x7f0000f74f98)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc})
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2880, 0x0)
ioctl$RTC_VL_CLR(r1, 0x7014)

04:04:43 executing program 2:
r0 = socket$key(0xf, 0x3, 0x2)
flistxattr(r0, 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0xc903bac80c7ed73d, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x30f)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'veth0_to_bond\x00', 0x1})

04:04:43 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
r2 = accept(r1, &(0x7f0000000400)=@l2, &(0x7f0000000480)=0x80)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000004c0)={0x3c, @dev={0xac, 0x14, 0x14, 0xf}, 0x4e24, 0x4, 'fo\x00', 0x6, 0x2046e3cc, 0x33}, 0x2c)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

04:04:43 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
syz_genetlink_get_family_id$tipc(0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
clone(0x20040200, 0x0, 0x0, 0x0, 0x0)
mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x800)
ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000240)={'vcan0\x00', {0x2, 0x4e24, @broadcast}})
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)
r3 = open$dir(&(0x7f0000000200)='./file0\x00', 0x27e, 0x0)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$packet_int(r3, 0x107, 0x1f, &(0x7f0000000280)=0xffffffff, 0x4)
r4 = socket$packet(0x11, 0xa, 0x300)
rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00')
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r5 = dup2(r0, r0)
write$selinux_validatetrans(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a68616c645f736f6e797069635f651865635f743873302073797374656d5f753a6f626a6563745f723a6370755f6465766963655f743a733020303030303030303030303030303030303030303020756e636f6e66696e656400"], 0x6b)

04:04:43 executing program 4:
r0 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000080)={'bcsf0\x00', <r1=>0x0})
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000000c0)={r1, 0x1, 0x6, @local}, 0x10)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
clock_adjtime(0xfffffffffffffffb, &(0x7f0000f74f98))
r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x100000)
ioctl$VT_WAITACTIVE(r3, 0x5607)
r4 = getuid()
setuid(r4)

04:04:43 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r1 = socket(0x4, 0x800, 0xd0)
setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000001480)=0x3d3, 0x4)
r2 = memfd_create(&(0x7f0000000040)='\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00', 0x0)
fcntl$setlease(r2, 0x400, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

04:04:43 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x2, 0xede, 0x6, 0x5, 0x10001, 0x3f, 0x3f, 0x9f64}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={0x6}, 0x8})
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc)
setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000000)={0x1, {{0x2, 0x0, @multicast2}}}, 0x108)

04:04:43 executing program 4:
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x40000, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0xffffffffffffffff, 0x3, 0xffffffffffff4355, 0x2, 0x1f}, 0xfff, 0x8})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
clock_adjtime(0xfffffffffffffffb, &(0x7f0000f74f98))
ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f00000000c0))
ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000100)=r0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00')
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)

04:04:43 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r1 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000540)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r1)
keyctl$link(0x8, r2, r1)

04:04:43 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="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")
add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
request_key(&(0x7f00000001c0)='id_resolver\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='\x00', 0xfffffffffffffffb)
request_key(&(0x7f0000000580)='.request_key_auth\x00', &(0x7f0000000600)={'syz', 0x1}, &(0x7f00000005c0)='%mime_typ\x8f\xd0esystM\xe1\x04\"J\xe9\x9f[\x87K-\xed\xd8\xb1\xd1`O\xb5\x00Xl\xd7\x06\x85\x99\xa0s&!\xee\f;\xb1A*\xbeEb>+\xdf\xee\xc4\xd4\x1f\xe7', 0xfffffffffffffffd)
request_key(&(0x7f0000000340)='big_key\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)='\x00', 0xfffffffffffffffc)
add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$clear(0x7, r1)
r2 = dup(r0)
setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000500), 0x4)

04:04:43 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0)
ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000200))
r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00')
sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x7c, r2, 0x104, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2b}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
close(r0)

04:04:43 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$P9_RWRITE(r1, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x400}, 0xb)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
clock_adjtime(0xfffffffffffffffb, &(0x7f0000f74f98))

04:04:43 executing program 3:
r0 = socket$inet6(0xa, 0xc, 0xfffffffffffffffc)
sendmsg(r0, &(0x7f0000013000)={&(0x7f0000013fe4)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000002904000039f5000027020200000000007efd262b5254726dad6943658c627da00e754d28eb7c67cab4b479cee12e3a14bd52195e8b815934810d27412fc2d085961878e16bfb2a28ba"], 0x18}, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@local}, 0x0, @in=@empty}}, &(0x7f0000000000)=0xe8)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000180)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3b, r1})

04:04:43 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
clock_adjtime(0xfffffffffffffffb, &(0x7f0000f74f98))
r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000240)=0x7, 0x4)

04:04:43 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@ipv4}}}, &(0x7f0000000300)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000540)={{{@in=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{}, 0x0, @in=@loopback}}, &(0x7f0000000380)=0xe8)
stat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setresuid(r1, r2, r3)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000700))
getsockopt$sock_buf(r0, 0x1, 0x3f, &(0x7f0000000200)=""/233, &(0x7f0000000000)=0xe9)
connect$inet(r4, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
ioctl$sock_netdev_private(r4, 0x89fb, &(0x7f0000000740)="612fda351f126ca8b6894a675257f2e795a007b8fed682e24b230dce685f67742a8727c54996344de6b19ed53b24fc2f64146d8a0d5c6935a4cb1ba0a9ff8684b2ff4d262f01b371510198c3f6742521c5c68e1d470eab207441a7a42347af6ed5cdd10b1fedcf92ccb2e986fa243c98f249f5bf71e82136490a1e71ffa17e8bee2c9cb8952042c5258f10daabb95edccf74686912dcc816e97bdc18fb206b16b99e04afdcffc3cc45642c32cc15546e63c6912ef90e5f01a733b5a60b00e9a780b90af39c45cadcc484ea4dbdee24b6716e13a305a9420c2ae067277d")
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
fsetxattr$security_smack_transmute(r0, &(0x7f0000000400)='security.SMACK64TRANSMUTE\x00', &(0x7f00000003c0)='TRUE', 0x4, 0x0)
setsockopt$inet_buf(r5, 0x0, 0x2c, &(0x7f0000000100)="f4cd898f0e2e458cda81b7acb4922c2f18a0b749aa971d51a289b49f12761905b82cf46aee1506a8452841f5ee8aef2a9a39ee5d5af4a85b91f2b8352600f9a2262612546c6b1b8a4cb9bbdc1c8bedad241c9aee5e48868dc07d17fc43117809ba4111e9758cbe02e3c158b36f94109a38ae6fd5341a52b68eb02d5ebac235219e6dc2784f64855f87f5a030", 0x8c)

04:04:44 executing program 0:
r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000140)={0xfffffffffffffffd, 0x1, 0xfffffffffffffff7, 0xffffffffffffffff, 0x9f}, 0xc)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x4, @rand_addr, 0x1000000}, 0x1c)
r2 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$set_timeout(0xf, r2, 0x10001)
sendmmsg(r1, &(0x7f0000007180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[{0x28, 0x29, 0x2, "a496e23c4ea397311abc6896fa89b856b5"}], 0x28}}], 0x1, 0x0)

04:04:44 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net\x00', 0x200002, 0x0)
r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x480000, 0x0)
execveat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[&(0x7f00000001c0)='mime_type\x00', &(0x7f0000000200)='./cgroup.net\x00', &(0x7f0000000240)='posix_acl_access\x00', &(0x7f0000000280)='./cgroup.net\x00'], &(0x7f00000004c0)=[&(0x7f0000000300)='y\x00', &(0x7f0000000340)='./cgroup.net\x00', &(0x7f0000000380)='./cgroup.net\x00', &(0x7f00000003c0)='./cgroup.net\x00', &(0x7f0000000400)='./cgroup.net\x00', &(0x7f0000000440)='\x00', &(0x7f0000000480)='./cgroup.net\x00'], 0x100)
ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000540)=""/148)
ppoll(&(0x7f0000000000)=[{r0, 0x88}, {r0, 0x10}, {r0, 0x80}, {r0}, {r0, 0x2000}, {r0, 0x8}, {r0, 0x406}], 0x7, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x2f51}, 0x8)
fchdir(r1)
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
fallocate(r2, 0x1, 0x0, 0x80000000000)
fallocate(r2, 0x0, 0x0, 0x8001)
openat(r1, &(0x7f0000000500)='./file0/file0\x00', 0x0, 0x41)

04:04:44 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r1, &(0x7f00000000c0)="06", 0x1)
fcntl$setstatus(r1, 0x4, 0x400)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0)
ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040))

04:04:44 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
listen(r0, 0x6)
clock_adjtime(0xfffffffffffffffb, &(0x7f0000f74f98))

04:04:44 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0)
r1 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000380))
getsockopt$sock_int(r1, 0x1, 0x0, &(0x7f00000003c0), &(0x7f0000000400)=0x4)
r2 = gettid()
getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={<r3=>0x0}, &(0x7f0000000300)=0xc)
tgkill(r2, r3, 0x4)
write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r4)
ioctl$LOOP_GET_STATUS64(r4, 0x4c05, &(0x7f0000000ac0))
readv(r0, &(0x7f0000000380), 0x0)
ptrace$setsig(0x4203, r3, 0x7f7, &(0x7f0000000200)={0x11, 0x0, 0x2})
getsockopt(r4, 0x6, 0xff, &(0x7f0000000100)=""/242, &(0x7f0000000000)=0xf2)
syz_open_procfs(r2, &(0x7f0000000080)='net/udp\x00')
r5 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9)
keyctl$revoke(0x3, r5)
write$uinput_user_dev(r0, &(0x7f0000001f40)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
read$eventfd(r4, &(0x7f0000000440), 0x8)

04:04:44 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
vmsplice(r1, &(0x7f00000016c0)=[{&(0x7f0000000000)="4d72eda9f50bb40b748929aea996ea06239102be56cca1f17ed05d0d1f9335ca8d34cd10226d4aa8f61fcfeceb137fbaccc7388d6fe39d9f7fef6201ce683b21661f1e1ff2d96ecde24bc6d6c1c1d8508e8040a83bfa2dfd6e592b8549", 0x5d}, {&(0x7f0000000100)="166c07801bea6f248a877cbf790a8dfad98ddf761e80a05643320bab67fdcdfa751d8181b2d7f417868f52eeb55690410494974c078d24aa6a8c03bebf686a7fa73cea62280224a078d0c5f0aab274304ec7b768078b158e03b39ad4398613581ee750def121ff56a5629da9536bafb1ba1393d463cd47c24a933f9e0aad7d50e4dc53dd8aa279b25913cc781758", 0x8e}, {&(0x7f0000000200)="3096190b02616bc88092ad7f85379efe1ee5ff8cd66031d6fbb1fe3365c885396afdda571a274ff9d2d2b03b6913010266a27ac7100eb2daf45d1c1003548d7efdc8deaa5b1cba7e2a3a22a37ac3ad1987896daf0d515f17cf53e861565edb52e9c27499281af4167a7877a0b88256059fd5dc017f787b527d28efd4c60a3e5d01542fd27e27d2189e6529568b771515397c61e5e3c970a5d958bd5e3ffd", 0x9e}, {&(0x7f0000000380)="28c64f77004107da6ec8a4f916a822455b67f2dd36343fbb8700ffafaa9b612a2970bdde029dc1ce132ab28aea58103e6285090fa81898fba945a09b373b657b78530c79894799eaf77ef8edcb210257ac4a2a3c2cb4d838bfdb56a0cdbf160a6c63b7355cd88e288734e22935945d88ac73320723cd82821e975c5b84fa6a4383113158ecb4a03ac2422c2c742887e19db281621a10f67a8cdda3d8aedddec7eb", 0xa1}, {&(0x7f0000000440)="ff32694c6370bf16ac9799a8de300527c64257834e2f668943bb921f713aa8ce90dfa5fa776df72cb3ac4e3f92b77f4e348e7d4028220d8abfa5e8075e2ca8a270f74cb08b4782099098722b12779d1d271ef2e78b513cd54644dc4ec6eb448383495f07db2725996164b9dfc11a9fbe45e28dceb030897d49a42863ed976220dba48d6a40", 0x85}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="7f47c18e95ca7826b24817c2968929df0e48a727bd358ed7bceb8d64aa9a7cfbd55b6102a2587196fb881da2ab33681614774e7c0e920be1b81c26fbb3d1e4d06e440ac71c3799a9ead908f661f4f302eba659c24501b6afab71a0e6b694641f338ee18ecc8dfdd9414fa710f3fd97739ab87bb3b88d5b5ff0e8f5ac8ddd593ac8f32337eff9dee566e98cb36d14af68e8fea5bd212522e87e4d892928580ccad7a32d1d371e77006284c11ec1b7220b0995a5efbd9f60a3dde3d089fbd6c840356fc3faa7832ab4f04500778b853b857c7af793bad0c097d01b495970aae295e5f308472b9428b5a1db02ab3259", 0xee}, {&(0x7f0000000080)="81462dbaa12f65772a7cb3676e634d83ccf9", 0x12}, {&(0x7f00000002c0)="000e879b0a37d6bc5588f347a0dee7e9f2211e39eaa9657a325ff37781478421b16d719e15c340f9f0f76ab9b3dcf4bfd6e4795b5776ee533e2aaa98fe6af429f8ba1b824b60a158e48b0b62ea47631f264276ec9301768f428f68624235d35007496c93c116feac5eeb3bc7dc26f5e3a395774a58da69d9", 0x78}, {&(0x7f0000001600)="b83fa376bc2634c5460c19cf96660d31c5ed22adfdc52ec00bbc568995e77fd029cc410bd48c07326d2efe8c69e7265a93d5df497090bb8302978462b2ea2c735480d0b96fede54b52f8db5ae13fc9b05c40de728b91a7c284a3f5901d62e8fb9cb177b2ae8a8348a1c5bacfc0ecf2c7f304abbb6e97669898ad682c081a0e23f20ec01ab0732a27d64dfb58f90e7855262910180119dbbb91ceed050d8505211e214d9426f8ade19357", 0xaa}], 0xa, 0x2)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000017c0)=@add_del={0x2, &(0x7f0000001780)='bond_slave_1\x00'})
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

04:04:44 executing program 2:
pipe2(&(0x7f0000000140)={<r0=>0xffffffffffffffff}, 0x4000)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x381000, 0x40)
ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00000001c0)=r1)
r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0)
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781500000000f600000800000007000000c9e61100000000000900000700000000000000000000000038585800000000000000000000000000006dbd0024c900"/92], 0x5c)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00')

04:04:44 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sync_file_range(r0, 0x6, 0x1, 0x1)
fstat(r0, &(0x7f0000000000))
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
clock_adjtime(0xfffffffffffffffb, &(0x7f0000f74f98))

04:04:44 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@ipv4={[], [], @initdev}}, 0x0, @in6=@empty}}, &(0x7f0000000040)=0xe8)
fsetxattr$security_capability(r0, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [{0x7, 0x3f80000000}, {0x5, 0x6bd}], r1}, 0x18, 0x2)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r2 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/create\x00', 0x2, 0x0)
r3 = syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0x0)
setsockopt$inet6_udp_int(r3, 0x11, 0x65, &(0x7f0000000340)=0x4, 0x4)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9, 0x40030, r2, 0x6)
write$selinux_create(r2, &(0x7f00000000c0)=@objname={'system_u:object_r:kmsg_device_t:s0', 0x20, 'unconfined', 0x20, 0x0, 0x20, './file0\x00'}, 0x4b)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000140))

04:04:44 executing program 0:
clone(0x204, 0x0, 0x0, 0x0, 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x103e, 0x0)
execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000240)={0x10, 0x17, 0x4000000000001, {0xffffffffffffff83, './file0'}}, 0x13)
seccomp(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x200000000058fe4}]})
seccomp(0x1, 0x1, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6}]})
execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
creat(&(0x7f0000000480)='./file0\x00', 0x0)

04:04:44 executing program 2:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/mnt\x00')
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000))

04:04:44 executing program 3:
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00')
tkill(r0, 0x33)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc7547570ec523ca67775c56c5c607c000000000000a56e9136a3d0d056b00040c49f8794adc941917ffe247d668f28caa4f8b29d20265d"], 0x39)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0))
ptrace$cont(0x7, r0, 0x0, 0x0)

04:04:44 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
clock_adjtime(0xfffffffffffffffb, &(0x7f0000f74f98))
times(&(0x7f00000003c0))
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e21, @empty}, {0x2, 0x4e23, @rand_addr=0x6}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x800, 0x9})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'nr0\x00', <r1=>0x0})
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x9, &(0x7f0000000080)=@raw=[@ldst={0x1, 0x0, 0x3, 0xa, 0xb, 0x4, 0xfffffffffffffffc}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, @generic={0x9cf, 0x1000, 0x8, 0x2, 0x7af}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @exit, @jmp={0x5, 0xffffffffffffff7f, 0xb, 0x1, 0x7, 0xfffffffffffffffc, 0x10}], &(0x7f0000000100)='syzkaller\x00', 0x8, 0xbb, &(0x7f0000000200)=""/187, 0x40f00, 0x1, [], r1, 0xf, r2, 0x8, &(0x7f00000002c0)={0x2, 0x7ff}, 0x8, 0x10, &(0x7f0000000300)={0x20, 0x1, 0x7, 0x7fffffff}, 0x10}, 0x70)

04:04:44 executing program 5:
r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x5, 0x0)
write$eventfd(r0, &(0x7f00000000c0)=0xa0000100000004, 0xfffffede)
close(r0)

04:04:44 executing program 2:
r0 = socket$key(0xf, 0x3, 0x2)
r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x100, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r1, &(0x7f0000000040)="cce0e346dd91a2461c5cf6432c92a70b1bb5c8ef96da3a2733ad61ec35c9f8d4a51c8563178f3befbe938d510caae2c807b8af79b02cb933efa685ea5ba532d14cdc9b11cd842a39489a742c5486f770526dfa8750e20c0eb4982cdf419a4c5cc731ef025c0e69fedd8708f007d6f639f4a8416d7fda0c84683e9a6de537a266690f3f64a3b90741e366895005e3d6c3e28976f1bdfca9e25cb2f7790411d18264ff5c9702845d021a0b971a631a8b3cfa351cdcfcc1d98b638bd18b8165ffc591b249fa6734aa45e0dbcec82ee5eacf625a557c70103d37d9367d040714f1154e89c37a1a06b8644f6e4d69a29ecb90", &(0x7f00000001c0)=""/198}, 0x18)
fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000180)='trusted.overlay.origin\x00', &(0x7f0000000400)='y\x00', 0x2, 0x3)
sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x28}}, 0x0)
write$P9_RLERRORu(r0, &(0x7f00000004c0)={0xe, 0x7, 0x1, {{0x1, '/'}, 0x56}}, 0xe)
r2 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$unlink(0x9, 0x0, r2)

04:04:44 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
ioctl$sock_proto_private(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)="45cbf907b6e8dd6c1a50eddceba71c2c028e0feba0f3661d9a2534296368042509ec48e6ca59cc0463dccdee6dc60426f681eb3adbcebc9ee64a7656a88480c5d54b8b9e016efc98ba")
clock_adjtime(0xfffffffffffffffb, &(0x7f0000f74f98))

04:04:44 executing program 5:
r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
write$selinux_user(r0, &(0x7f00000004c0)={'system_u:object_r:dhcpd_unit_file_t:s0', 0x20, 'root\x00'}, 0x2c)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev\x00')
readv(r1, &(0x7f0000002340)=[{&(0x7f0000004380)=""/4096, 0x1000}], 0x1)
write$P9_RLCREATE(r1, &(0x7f0000000040)={0x18, 0xf, 0x1, {{0x0, 0x4, 0x8}, 0x4}}, 0x18)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req={0x800, 0x7ff, 0x4, 0x3f}, 0x10)
readv(r1, &(0x7f0000000580), 0x3c1)
readv(r1, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/192, 0xc0}, {&(0x7f0000000180)=""/21, 0x15}, {&(0x7f00000001c0)=""/123, 0x7b}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f00000002c0)=""/130, 0x82}, {&(0x7f0000000380)=""/168, 0xa8}], 0x6)

04:04:44 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0)
accept$inet6(0xffffffffffffff9c, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000180)=0x1c)
r2 = accept$inet6(0xffffffffffffffff, &(0x7f00000006c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000700)=0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, 0x0, 0xfffffffffffffcf6)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
fremovexattr(r2, &(0x7f0000000300)=@known='com.apple.FinderInfo\x00')
r3 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r3, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
getpeername$inet(r4, &(0x7f0000000280)={0x2, 0x0, @multicast2}, &(0x7f00000002c0)=0x10)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
syz_execute_func(&(0x7f0000000040)="363e0fc319c4e3315c8b121b00000fc402f9bb8b0773000067f30f5ec7c4c1795b4b00666566450f3a610c57f48f487887a10008804144420fd85000c482792328f0400fb34500")
connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x487, &(0x7f0000000200), &(0x7f0000000240)=0x30)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x800, 0x0)
r6 = fcntl$getown(r1, 0x9)
setpriority(0x2, r6, 0xdd44)

04:04:44 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_adj\x00')
socket$netlink(0x10, 0x3, 0x6)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000000100)=0xe8)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, <r3=>0x0}, &(0x7f0000000180)=0xc)
r4 = getuid()
mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuseblk\x00', 0x1030089, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r3, @ANYBLOB="2c616c6c6f775f6f746865726f6e745f686173682c012e35514ff900a2636f6e746578743d73797361646d5f752c666f776e657296faf5421498f886ec6dcf4805f099ea42aa36c9f796347090486ed3a130fcb163f89e0a", @ANYRESDEC=r4, @ANYBLOB=',fsmagic=0x0000000000000008,smackfstransmute=+)self\',obj_role=vboxnet0wlan1ppp1,smackfsdef=^&,\x00'])
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
clock_adjtime(0xfffffffffffffffb, &(0x7f0000f74f98))

04:04:44 executing program 5:
rmdir(&(0x7f0000000000)='.\x00')
clone(0x3102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x23)
ptrace$cont(0x18, r0, 0x0, 0x0)
r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00')
sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000180)={0x2a4, r2, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xc8, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x400, @mcast1, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, [], 0x10}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x5, @mcast1, 0x861437}}}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'bond_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x401}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x81}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_MEDIA={0xcc, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x50}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb490}]}, @TIPC_NLA_MEDIA={0xb8, 0x5, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x4081}, 0x1)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0x53})
ptrace$setregs(0xc, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)

04:04:44 executing program 2:
r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000400)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$setperm(0x5, r0, 0x8000000)
r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x400000, 0x0)
ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000080))
r2 = add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$search(0xa, r0, &(0x7f0000000a40)='keyring\x00', &(0x7f0000000000)={'syz'}, r2)

04:04:45 executing program 0:
r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x200001)
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x800, 0x7fffffff, 0x9, 0x7fffffff}, {0x4, 0x0, 0x1f5b, 0x400}, {0x8, 0xfffffffffffffff8, 0x2, 0x2}, {0x7, 0x1, 0x9, 0xd2}, {0x40, 0x7fff, 0x4}, {0x6, 0xa8, 0x10001, 0xfbe}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2'}, 0x48)

04:04:45 executing program 4:
r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x6)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
clock_adjtime(0xfffffffffffffffb, &(0x7f0000f74f98)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000})

04:04:47 executing program 3:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='vmnet0\x00'}, 0x240)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000ac51156ac5196970b69d0000000000040000001c00000036010000e100007fef6fa7190afcff691fc950b5af0c6f7f967965ec55000000"], &(0x7f0000000040)=""/110, 0x1e, 0x6e}, 0x20)
clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000100))
bpf$MAP_CREATE(0x6, &(0x7f0000000740), 0x2c)

04:04:47 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f00000000c0))
timer_create(0x7, &(0x7f0000000280)={0x0, 0x14, 0x1, @thr={&(0x7f0000000140)="486cf1e30896a7cf3c496c62d40733bec58613e93c5ff0840656f6d860e05c4ec867dda260ce123688f7fe568cb0ad01ea6ed1327b02e8c01d977cdb8b1148448b46d44e76eda29987f468bf3948b48b661e89f328135c97ac9b32d52933d06457b64dff56b3e76210368df29bac7d4e94181bb99b00508667bfe07899bfc333619e6733fb6c9cf42ab511785f709d2d5e53ec6d8ac862af0b93b312931f3bef70ca1270c6d2973008487773810a8fbeae88177cf5c431aa5bb587e729f15f1fa5a21ffe87a8ac26d3cd953f509dab5b8d17cf60c5e2fdcf23250bd312e8b0", &(0x7f0000000240)="052636467b"}}, &(0x7f00000002c0)=<r1=>0x0)
clock_gettime(0x0, &(0x7f0000000300)={<r2=>0x0, <r3=>0x0})
timer_create(0x6, &(0x7f0000000500)={0x0, 0x23, 0x4, @thr={&(0x7f0000000380)="854d4bf4fa3274d31e6b53b2be08054e38e50907549b3869eeb6461fb5d22aad79def02421b265636950daea28058503732e7814f5df9227551bf1d0b1dd08a88b8c85643c97b13bda3095804c7323dffa1d899c061009e4085bc2ca9703cfe2bb02a6c9a392b38e7f5ab589076fb7aa857a3756706c1a8af3d94c1439d55b0232badb602e54861182dd6af0ee5069d67faf1596b9e3105a28d97a037c6e26ed59995de3ceb3f110c15101c83ed925a3c896a1b2cd1e95ee06764c2ca0c5389a6c4d61926460f5647671a1a252ad707de3fadc06102cf3284f8b734b34328f4dab17fc756311d25351b7d764506941c103a1993e", &(0x7f0000000480)="8a7cf3c012251889128df073e7a193473c904648b158d7f8a5c92ab32b2a40b36daede3e7c643050ca75ce297cc79fdd57bfeb087d65ef3bb72a389c848755ccec4a7551e409a8e0468faf6a56fcd4c9857c7a553be31abc"}}, &(0x7f0000000540))
timer_settime(r1, 0x1, &(0x7f0000000340)={{}, {r2, r3+10000000}}, 0x0)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000005c0)={0x8, 0xbbc9})
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000580)={0x40, 0x20, 0x3, 0xffffffffffffff24, "7eb14139b470a21957acb358592d38226fb5d726811ae6480708524ed1ed0e06"})
timer_create(0xfffffffffffffff8, 0x0, &(0x7f0000a7e000)=<r4=>0x0)
clock_gettime(0x0, &(0x7f0000000000)={0x0, <r5=>0x0})
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}, {0x0, r5+30000000}}, 0x0)
clock_gettime(0x0, &(0x7f0000000680))
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000700)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000000800)=0xe8)
r7 = getgid()
fchownat(r0, &(0x7f0000000080)='./file0\x00', r6, r7, 0x0)
timer_settime(r4, 0x0, &(0x7f00000006c0)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0)
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000600)='trusted.overlay.nlink\x00', &(0x7f0000000640)={'L+'}, 0x28, 0x1)

04:04:47 executing program 5:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x201, 0x0)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xfffffffffffffe0f)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x101002, 0x4)
write$P9_RLOPEN(r2, &(0x7f0000000180)={0x18, 0xd, 0x2, {{0x81, 0x2, 0x6}, 0x2}}, 0x18)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r3 = eventfd2(0x0, 0x0)
read$eventfd(r3, &(0x7f0000000100), 0xfec3)
keyctl$session_to_parent(0x12)
r4 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x101000, 0x0)
ioctl$FS_IOC_GETVERSION(r4, 0x80087601, 0x0)
r5 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
execve(0x0, 0x0, &(0x7f0000000580))
ioctl$PPPIOCSMRRU(r5, 0x4004743b, &(0x7f0000000040))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$TIOCLINUX6(r1, 0x541c, &(0x7f0000000080)={0x6, 0x59900000000})
write$eventfd(r3, &(0x7f00000001c0)=0x7, 0x8)
open(0x0, 0x0, 0x71)
syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)

04:04:47 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0)
write$P9_RREADDIR(r1, &(0x7f0000000040)={0x68, 0x29, 0x2, {0x5, [{{0x86, 0x0, 0x4}, 0xfffffffffffffffc, 0x7f, 0x7, './file0'}, {{0x10, 0x3, 0x1}, 0x2, 0xe3, 0x7, './file0'}, {{0x2, 0x3, 0x4}, 0x9, 0x8, 0x7, './file0'}]}}, 0x68)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
clock_adjtime(0xfffffffffffffffb, &(0x7f0000f74f98))
openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/exec\x00', 0x2, 0x0)

04:04:47 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB=',fscontext='])
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
clone(0x21a2101ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, &(0x7f0000000040)='\xd3snA&\xdf8\xacA\"o\n\xe5\xf1\xdb\x18u\xd5\x81\x9b\xe1\xd6\x1f\xc6\x12\xe5\a\x828')
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000008, 0x12, r0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}<B\xfc.\x9cia\x14\xa6\xf8\x88\xf0\xda\x85\'v\x83\xcf\xc1\xc4\xd2\xbfq\xc2U\xa3\x13Md\xcc?\xed\x8e\x97y\x8d\xeb\x861\xcb\xf7h,\x9f\xa2\xed\x03\x14e\xaa\x19\x1d\xf9\"\xf7d)|\xba\"\xa8I\x9d\x17\x7fI\xfb\xa9@\xf5[\xbc\x8br?\xd3t\xf1\xfe\xd7\x8c\x8a\xee\xc6\x81\x1d\x9bXyHs\x87\xd5e\x94\xa1L%\x88\'M\xe8O\xa2v\x100+?\xb5Ar\xa8\xc9\x10\xa0~|v\xeaFZ\xa6\x84\x02', 0x0, 0x0)

04:04:47 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0xd472513afd3ccd53)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

04:04:47 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r1 = socket(0x10, 0x803, 0x0)
write(r1, &(0x7f0000000000)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26)
setsockopt$sock_int(r1, 0x1, 0x100000000008, &(0x7f0000d9bffc), 0x30f)
getsockopt$sock_int(r1, 0x1, 0xd, 0x0, &(0x7f0000000100))

04:04:47 executing program 0:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
capset(&(0x7f00000fc000)={0x20000019980330}, &(0x7f000047efe8))
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x121040, 0x0)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000040)={0x2, 0x4, 0x3, 0x2, 0x1, 0x4, 0x1f, 0x400, 0x3, 0x6, 0x3, 0x1})
lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@random={'osx.', '\x00'})

04:04:47 executing program 4:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0)
r1 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/access\x00', 0x2, 0x0)
dup3(r0, r1, 0x80000)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
clock_adjtime(0xfffffffffffffffb, &(0x7f0000f74f98)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe})
r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000000040)=""/110)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/access\x00', 0x2, 0x0)

04:04:47 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f0000000040))
socketpair(0xa, 0x80002, 0x7, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00')
sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400040}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x80, r2, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3a}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x29}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x11}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x1c}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000001}, 0x800)
clock_adjtime(0xfffffffffffffffb, &(0x7f0000f74f98))

04:04:47 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @ppp={{0x8, 0x1, 'ppp\x00'}, {0x9, 0x2, {0x8}}}}]}, 0x38}}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x200000, 0x0)

04:04:47 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bc070")
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
close(r1)
r2 = getpgid(0xffffffffffffffff)
r3 = syz_open_procfs(r2, &(0x7f00000001c0)='net/igmp6\x00')
syz_open_procfs(0x0, &(0x7f0000000580)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\x8e\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4D\x0f\xd3Vtd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\xb7\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4')
setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f00000000c0), 0x4)
accept$packet(0xffffffffffffff9c, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14)
sendfile(r1, r3, &(0x7f0000000080), 0x800)

[  875.504873] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'.
[  875.547532] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'.
04:04:47 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='uid_map\x00')
preadv(r0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/254, 0xfe}, {&(0x7f0000000000)=""/40, 0x28}, {&(0x7f00000001c0)=""/243, 0xfffffffffffffe68}], 0x100002a4, 0x2000000000000)
recvfrom$inet(r0, &(0x7f0000000040)=""/63, 0x3f, 0x10000, &(0x7f0000000300)={0x2, 0x4e22, @loopback}, 0x10)

04:04:47 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x8001000008914, &(0x7f0000000380)="0adc1f123c123f319bc0706ec754ad31e168bdf4776053d459846f49af8ee4a0d3c24f752568c75b53677a4d6cbac2db114d0dc0ddc85f447d66f20aad1dfa4934a83c871eb8300780b88be4995c379fbd4a584b2384562524a91be36a577f3fc1e350fd2a41a5d993207805c8278355beb05e8f9760094f8b2886e1eb5d893c3dc5290874a4f0e92b2d2a1e11f18f1db3f2414b99df6326fee64b2e227d852cec62306cb1")
clock_adjtime(0xfffffffffffffffb, &(0x7f0000f74f98))

04:04:47 executing program 5:
r0 = socket$inet(0x2, 0x2, 0x0)
shutdown(r0, 0x0)
clock_gettime(0x0, &(0x7f0000000000)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f0000000040), 0x3c0, 0x0, &(0x7f0000000100)={r1, r2+10000000})

04:04:47 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
mknod$loop(&(0x7f0000000300)='./bus\x00', 0xa, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000600)}], 0x1)
listen(r0, 0x4006)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500)='TIPC\x00')
sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x1c, r3, 0x100, 0x70bd25, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x810)
mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz0\x00', 0x1ff)
write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000540)={0xfffffffffffffee9, 0x33, 0x2}, 0x7)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}, 0x80000}, 0x28b)
fchdir(r1)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x40000)
write$selinux_context(r4, &(0x7f00000003c0)='system_u:object_r:crontab_exec_t:s0\x00', 0xfffffffffffffda3)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000580)='htcp\x00', 0x330)
ioctl$int_out(0xffffffffffffffff, 0x200000002, &(0x7f00000002c0))
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0xfffffeb3)
write(0xffffffffffffffff, &(0x7f0000000480), 0x0)
select(0x40, &(0x7f0000000040), &(0x7f0000000400), &(0x7f00000001c0), &(0x7f0000000280)={<r5=>0x77359400})
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000600)='/selinux/mls\x00', 0x0, 0x0)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYRES32=0x0, @ANYRES64=r2, @ANYRESOCT=0x0])
listen(0xffffffffffffffff, 0x400000000000)
renameat(r2, &(0x7f0000000340)='./bus\x00', r4, &(0x7f0000000000)='./bus\x00')
r6 = open(&(0x7f00000004c0)='./bus\x00', 0x200, 0x0)
r7 = accept4(r0, 0x0, 0x0, 0x0)
write$P9_RSETATTR(r6, &(0x7f0000000240)={0x7, 0x1b, 0x1}, 0x7)
sendto$inet6(r7, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_buf(r2, 0x6, 0x9b33d7b35497606, &(0x7f0000000840)="a511d63ef4328d3e4e043d386654e7940518d24e0000000079b352ec9c8909e90a6cdabf44890e465b1db35abfcbfc6f5c60e9a494b799dd854f9cfe0219dc6b09bcc13222fcceea199330bcc3685e0d7f579bbaeae9b3c80c207e1ee46495fcfc69c25e3572de6db50200000000000000eaf51570ae28b423d8af1fd4a300bce2e632f181864274e70fc2d0e9b9d7e33bf88e28f9f48abeebac340b1caa14c742603944247b871f9e0b947be71108d7a1d0d8d1b62d3d5ec579ca25a65155820e7bcad8a512c25f1f2b05000000190b51e1d2031e92673bf143239c4acb73cce1dabc2b02a842ae000000000000000000", 0xf1)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4)

04:04:47 executing program 0:
clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x33)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1209fd0d9abbeaa7c12ed9fd95bf270445d5c4390989206ea56e9136a3d05056b4e6673d08a74eb00040efe96000000000000000000000000020"], 0x39)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0))
ptrace$cont(0x7, r0, 0x0, 0x0)
r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, 0xfffffffffffffffd, 0x0)

04:04:47 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0)
write$cgroup_type(r2, &(0x7f0000000040)='threaded\x00', 0x9)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
prctl$PR_CAPBSET_DROP(0x18, 0x12)
fstatfs(r2, &(0x7f0000000100)=""/76)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

04:04:47 executing program 5:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(r0, &(0x7f0000000040)="1f0000000104fffff13b54c007110009f30501000b00044000000000020000", 0x1f)

04:04:47 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
clock_adjtime(0xfffffffffffffffb, &(0x7f0000f74f98))
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x800)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000000c0)={<r2=>0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x7c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="126348400400000000000000010000000000000000000055fb0bab366f03d4d711f0917e290010000000000000000000000020000000000000002000000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="8561646600000000090000000000000003000000000000002600000000000000"], @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="78000000000000004a13dfdb219d8ed3e17b56854c0abe636800000000000000"], @ANYBLOB="001000000000000003630840", @ANYRES64=r2, @ANYBLOB="0e630c400300000002000000000000000e630c400100000003000000000000000b630000"], 0x20, 0x0, &(0x7f0000000180)="38e123ff66da3ea71db06afc6b207d0ac35e81553929f820814d3f1c88beca69"})

04:04:47 executing program 3:
r0 = epoll_create1(0x0)
r1 = dup2(r0, r0)
clock_gettime(0x0, &(0x7f0000004a40)={<r2=>0x0, <r3=>0x0})
ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000004cc0))
recvmmsg(0xffffffffffffffff, &(0x7f00000048c0)=[{{&(0x7f0000000180)=@can={0x1d, <r4=>0x0}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000200)=""/216, 0xd8}, {&(0x7f0000000300)=""/86, 0x56}], 0x2, &(0x7f00000003c0)=""/236, 0xec}, 0x80}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000540)=""/149, 0x95}, {&(0x7f0000000600)=""/42, 0x2a}, {&(0x7f0000000640)=""/227, 0xe3}, {&(0x7f0000000740)=""/179, 0xb3}, {&(0x7f0000000800)=""/246, 0xf6}, {&(0x7f0000000900)=""/52, 0x34}, {&(0x7f0000000940)=""/184, 0xb8}, {&(0x7f0000000a00)=""/183, 0xb7}], 0x8}}, {{&(0x7f0000000b40)=@can, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000bc0)=""/4096, 0x1000}], 0x1, &(0x7f0000001c00)=""/13, 0xd}, 0x2}, {{0x0, 0x0, &(0x7f0000004100)=[{&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/206, 0xce}, {&(0x7f0000002d40)=""/4096, 0x1000}, {&(0x7f0000003d40)=""/106, 0x6a}, {&(0x7f0000003dc0)=""/146, 0x92}, {&(0x7f0000003e80)=""/75, 0x4b}, {&(0x7f0000003f00)}, {&(0x7f0000003f40)=""/246, 0xf6}, {&(0x7f0000004040)=""/68, 0x44}, {&(0x7f00000040c0)=""/20, 0x14}], 0xa, &(0x7f00000041c0)=""/191, 0xbf}, 0x6}, {{&(0x7f0000004280)=@l2, 0x80, &(0x7f0000004480)=[{&(0x7f0000004300)=""/167, 0xa7}, {&(0x7f00000043c0)=""/150, 0x96}, {0xfffffffffffffffe}], 0x3, &(0x7f00000044c0)=""/212, 0xd4}, 0x5}, {{&(0x7f00000045c0)=@vsock, 0x80, &(0x7f0000004880)=[{&(0x7f0000004640)=""/210, 0xd2}, {&(0x7f0000004740)=""/115, 0x73}, {&(0x7f00000047c0)=""/185, 0xb9}], 0x3}, 0x5}], 0x6, 0x0, &(0x7f0000004a80)={r2, r3+10000000})
connect$packet(r1, &(0x7f0000004ac0)={0x11, 0xff, r4, 0x1, 0x40000000000005, 0x6, @remote}, 0x14)
r5 = socket$packet(0x11, 0x3, 0x300)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r5, &(0x7f0000000040))
r6 = open(&(0x7f0000000100)='./file0\x00', 0x404200, 0x2)
ioctl$IOC_PR_PREEMPT_ABORT(r6, 0x401870cc, &(0x7f0000000140)={0xfffffffefffffffe, 0xc4c3, 0x8, 0x4})
r7 = socket(0x10, 0x3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r7, &(0x7f0000000080))
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000004b00)='TIPCv2\x00')
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r7, &(0x7f0000004c80)={&(0x7f0000003f00)={0x10, 0x0, 0x0, 0x80bbf35d03082a34}, 0xc, &(0x7f0000004c40)={&(0x7f0000004b40)={0xd8, r8, 0x414, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x84, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6dc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x77f3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}, @TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x494}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000080}, 0x20008850)
r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
sendfile(r7, r9, 0x0, 0xe6)
write$FUSE_NOTIFY_INVAL_INODE(r9, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x4, 0x7ff, 0x80}}, 0x28)

04:04:47 executing program 0:
r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000080))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6)
connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10)
sendto$inet(r1, &(0x7f0000000b40)="ae", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), 0x14)
recvmmsg(r1, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)=""/191, 0xbf}], 0x1}}], 0x1, 0x6, 0x0)

04:04:47 executing program 2:
r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/member\x00', 0x2, 0x0)
r1 = fcntl$getown(r0, 0x9)
r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x80000, 0x0)
ioctl$VT_RELDISP(r2, 0x5605)
r3 = accept(r2, &(0x7f0000000100)=@xdp={0x2c, 0x0, <r4=>0x0}, &(0x7f0000000180)=0x80)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@getqdisc={0x2c, 0x26, 0x400, 0x70bd2a, 0x25dfdbfd, {0x0, r4, {0x0, 0x9}, {0xffff, 0x9}, {0xf, 0xb}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4805}, 0x15)
r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
r6 = syz_open_procfs(r1, &(0x7f00000002c0)='net/snmp\x00')
getpriority(0x2, r1)
ioctl$UI_SET_PROPBIT(r5, 0x4004556e, 0x16)
write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000300)={0x2a, 0x6, 0x0, {0x0, 0x5, 0x1, 0x0, '\x15'}}, 0x2a)
ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xf}}, {0x2, 0x4e24, @broadcast}, 0x4, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)='dummy0\x00', 0x2, 0x7, 0x2})
ioctl$BLKRAGET(r5, 0x1263, &(0x7f0000000400))
ioctl$BLKSECDISCARD(r6, 0x127d, &(0x7f0000000440)=0x97)
ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000480)={0x1f, 0xef7, 0x1ff, 0xffffffff, 0x401})
r7 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/context\x00', 0x2, 0x0)
setsockopt$inet_MCAST_LEAVE_GROUP(r5, 0x0, 0x2d, &(0x7f0000000500)={0xffffffff, {{0x2, 0x4e21, @local}}}, 0x88)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.net/syz1\x00', 0x1ff)
close(r0)
fsetxattr$security_selinux(r3, &(0x7f0000000600)='security.selinux\x00', &(0x7f0000000640)='system_u:object_r:syslogd_var_run_t:s0\x00', 0x27, 0x1)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000680), 0x4)
r8 = add_key(&(0x7f00000006c0)='cifs.spnego\x00', &(0x7f0000000700)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
r9 = add_key$keyring(&(0x7f0000000740)='keyring\x00', &(0x7f0000000780)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$negate(0xd, r8, 0x2, r9)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r7, 0x40106614, &(0x7f00000007c0)={0x0, @speck128})
ioctl$EVIOCSMASK(r5, 0x40104593, &(0x7f00000008c0)={0x1f, 0xa4, &(0x7f0000000800)="3f15c514c147b20f119736d38a0740d35e91d255e9eae4ef7c317383ebc13d250b3d2369cb3d9b72f7cb9ac5bd4a6f2016e9ba7331a427c02e57ae20849c6f1151fe132ac882fbbf9a2bbbbb6c15d11e5276768f36c6c74426d8485ee79bcc1f096a0f5b91b21ea0964f1dd6e0d7476b0923778139b31456f94ea4d500658ab5a134d2a5ddc512b4e2ea0b040c41112a7ce786d0b860a0126f83397d9a5959df48f28651"})
ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x8)
ioctl$PPPIOCGDEBUG(r2, 0x80047441, &(0x7f0000000900))
openat$keychord(0xffffffffffffff9c, &(0x7f0000000940)='/dev/keychord\x00', 0x40, 0x0)
dup(r6)

04:04:47 executing program 0:
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x303082, 0x0)
mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x20, 0x7fffffff)
write$P9_RVERSION(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1190ee6301000000ea000008003950323030302e4c7445e1895e7294a426e1e4bd0c82aa5b8d87d770fe9dcf6bf7ba9708b41d18140cd1c3caf56fd466a4a455a651d69105993a394d24992830f80f01c33879ddc93016d09c169a3218aeebcd815ce3c2ca78903cb6af3420f0c2dae9bdb609b0c804bafab5313bb9917b7a"], 0x15)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0)
lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:faillog_t:s0\x00', 0x1f, 0x0)

04:04:47 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000003380)=<r1=>0x0)
sched_getattr(r1, &(0x7f0000003280), 0x30, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bc070")
r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x20001, 0x0)
ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000100)=0xff7c)
clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = gettid()
getxattr(&(0x7f0000003100)='./file0\x00', &(0x7f0000003140)=@known='system.advise\x00', &(0x7f0000003180)=""/144, 0x90)
futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x3f)
ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000032c0)={0x8})
pipe2$9p(&(0x7f0000000000), 0x4800)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x1, 0x1ff)
sendmsg$nl_route_sched(r4, &(0x7f00000030c0)={&(0x7f00000001c0), 0xc, &(0x7f0000003080)={&(0x7f0000000200)=@newtaction={0x2e48, 0x30, 0xc02, 0x70bd26, 0x25dfdbff, {}, [{0xdc, 0x1, @m_csum={0xd8, 0x17, {{0xc, 0x1, 'csum\x00'}, {0x20, 0x2, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x8733, 0x6, 0x5, 0x9}, 0x34}}}, {0xa4, 0x6, "e4f84bdf5e071d18ed65a074ca12cf79bbf3bcc525a14943686d246d3d8a5a9dc2f6a28894efbd627656e678f4459e072788366b77c69e8bbfd23cf52293532a0b18331b68230cd3f4a1263c2d0915845aeaf62e3517dd298a66219ef0b9fb7166d2064da688c57e86e8854f7573fd205ece879a720c3318a0e683fa9e3b60cc86af6ff2868ff6a8479ac05050cb6beab89f308a9e235ff7411ccce915a60e85"}}}}, {0x8c0, 0x1, @m_police={0x8bc, 0xd, {{0xc, 0x1, 'police\x00'}, {0x850, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xb79}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xa2, 0x4, 0x400, 0xfffffffffffffffa, 0x0, 0x401, 0x8001, 0xae00000000000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x3, 0x1, 0x6, 0x5, 0x1, 0x5, 0x1ff, 0x0, 0x8, 0x0, 0x1, 0x2, 0x9, 0x100000000, 0x8, 0x356c, 0x6, 0x400, 0x59, 0x7, 0x0, 0x80, 0x5, 0x100000001, 0x1a, 0x10001, 0x9, 0x5a, 0x2, 0x1, 0x101, 0x80000000, 0x7f, 0x6, 0x401, 0x6, 0x9, 0x7, 0x0, 0xff, 0x0, 0x40, 0xfffffffffffffff9, 0x3f, 0xe46, 0x9, 0x80000001, 0x1000, 0x5, 0x2, 0x5, 0x400, 0x4, 0x7, 0x1000, 0xffff, 0x1ff, 0x4, 0x7ff, 0x1000, 0x4, 0x1ff, 0x8, 0x8, 0x800, 0x100000001, 0x7, 0x5, 0x400, 0x0, 0x5, 0x7fffffff, 0x2, 0x7, 0x3, 0x6, 0x7ff, 0x1, 0x7f, 0x100000001, 0x9, 0x9, 0x20, 0xfffffffffffffffd, 0x3, 0x7f, 0x0, 0xfffffffffffffff8, 0x9, 0x9, 0x100000000, 0x2, 0xffffffffffffffe0, 0xfffffffffffffffb, 0x1, 0x759, 0x8, 0x20, 0x2, 0x1f, 0xcea, 0x8, 0x3, 0x5, 0x101, 0x3, 0x3, 0xee, 0x200, 0x4800000000000000, 0xffff, 0x3ff, 0xcb1, 0x1, 0x5, 0x0, 0x9, 0x10000, 0x80000000, 0x0, 0x2, 0x7, 0xa2ef, 0x24, 0x10001, 0x7, 0xc8, 0x5, 0x80, 0x101, 0xffff, 0x7, 0xffff, 0x1, 0x4, 0x5, 0x1, 0x6, 0x7, 0x100, 0xe5, 0x6, 0x5, 0x9, 0x401, 0x8000, 0x1, 0x4, 0x81, 0x200, 0x0, 0x4, 0x4, 0xfd, 0xf845, 0x6d2, 0xfffffffffffffff8, 0x5, 0x20000, 0x5, 0x80000000, 0x4, 0x40, 0x5, 0x800000, 0x4, 0x61, 0x9, 0x5, 0x7fffffff, 0xa578, 0x10000, 0x40, 0x800, 0x9, 0x6, 0xffffffff, 0x2, 0x2, 0x100000001, 0x800, 0x6, 0x3f, 0x5, 0x8001, 0x5, 0x7ff, 0x2800, 0xff, 0x1, 0x800, 0xaf2d, 0x100000000, 0xffffffffffff0000, 0x291c, 0xffff, 0xfff, 0x0, 0x5, 0x5, 0x5, 0x6, 0x5d3000000000, 0xe8, 0x7, 0x5, 0x6, 0x7fff, 0x0, 0x2, 0x4d6b, 0x1ff, 0x2b037a2, 0x80, 0x3, 0x8000, 0x0, 0x220, 0xffffffffffffffc0, 0x3, 0x280, 0x3d, 0x2, 0x0, 0x1ff, 0x6, 0x1, 0x3f, 0x0, 0x7, 0x5, 0x4, 0x0, 0x9, 0xffffffffffffffff, 0x1, 0x8, 0x3, 0x101, 0x5, 0x9, 0x8, 0x10000, 0x9, 0x1f, 0xffffffffffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffffffffc01, 0xffffffffffffffff, 0x2, 0x0, 0x7, {0x95e9, 0x0, 0x7, 0x2, 0x32d}, {0x2, 0x0, 0x80000001, 0x4, 0x1004000000000000, 0xfffffffffffffffd}, 0x7ff, 0x9, 0x1ff}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x3, 0x47, 0x8, 0x7, 0x0, 0x4, 0x1, 0x200, 0x2, 0x1, 0x7, 0xfff, 0x7, 0x5ee6, 0x1, 0x1, 0x6, 0x5, 0xfffffffffffffffb, 0x2, 0xf8, 0x3, 0x7, 0x7652, 0x5fc, 0x24000, 0x1ff, 0xfffffffffffffff9, 0x1, 0xce, 0x75c, 0x4, 0x53c, 0x7fff, 0x2, 0x1, 0x0, 0x6, 0x4c5649ea, 0x1, 0xffffffffffffff81, 0x800, 0x9, 0x0, 0xdf, 0x2, 0xfffffffffffff801, 0x18d40ee4, 0x80, 0x8d, 0xa82, 0x9, 0x3, 0x101, 0x0, 0x9cd5, 0x8, 0x9, 0x6, 0x23, 0x80000000, 0x4, 0x6, 0xffff, 0x5, 0x2, 0x3, 0x6, 0x8, 0x4, 0x50, 0x1, 0x4, 0x1, 0x77b, 0x9, 0x3, 0x0, 0x2, 0x6, 0x1, 0x2, 0x4, 0x7, 0x0, 0x39, 0x187f0925, 0x72a, 0x3, 0x8, 0x6a81, 0x24, 0x80000000, 0x9, 0x80000001, 0xcb, 0x9, 0x1f5, 0x6, 0x36, 0x1ff, 0x10000, 0x5, 0x8, 0x9, 0x5, 0x4c, 0x800, 0xffff, 0xfffffffffffffff7, 0x100000001, 0x0, 0x6a25, 0x80000001, 0x1700, 0x4, 0x21, 0x8, 0x2, 0x7, 0x4, 0x10000, 0x3f, 0x3, 0xcd1, 0x120000, 0x0, 0x5, 0xc219, 0x6, 0x8, 0x8, 0x8, 0x400, 0x5, 0x10001, 0x9, 0xbe6, 0x1, 0x5, 0x9, 0x3, 0x81, 0xa035, 0xa144, 0x2, 0x20, 0x101, 0x6, 0x7, 0x4, 0x8, 0x7, 0x4, 0xfffffffffffffffa, 0xbaca, 0x7, 0x0, 0x95e8, 0x8000, 0x0, 0x200, 0x1, 0xc4, 0x80, 0x8, 0x9, 0x8000, 0x2, 0x4, 0x4, 0x2, 0x7, 0x10001, 0x4, 0x10, 0x7, 0x40, 0x5, 0x40, 0x0, 0x8, 0x5, 0xffffffff, 0x8000, 0x7, 0x80000000, 0x6, 0xb79, 0x10000000, 0x1, 0x5, 0xff, 0x3ff, 0x200, 0x4, 0x3, 0xfffffffffffffff9, 0x7fffffff, 0x6, 0x193, 0xffffffffffff000a, 0x1000, 0xb3, 0x2, 0x4651, 0x0, 0x0, 0x3, 0x10000, 0x7, 0x4, 0x1, 0x101, 0x9, 0x2000000, 0x6, 0x3, 0x4cc, 0x8, 0x9, 0x80, 0xf158, 0x4, 0x26f4, 0xff, 0x6, 0x5, 0x7, 0x1, 0x0, 0x4, 0x0, 0x2, 0xffffffffffff11ba, 0x1, 0x3, 0xe4, 0xffffffffffffff34, 0x7, 0x2, 0x5, 0x10000, 0x7fff, 0x7fff, 0x9, 0x1, 0x7, 0x81, 0x7, 0x9, 0x3ff, 0x8000, 0x1, 0x4]}]}, {0x58, 0x6, "e2b1f9a7fe93c6619f60a8c00da86c6f7e43ed6f25a7b1a3efbd42f95d5022193743e96338bdac622399155e580c95d10a9f60f0040c2417d8b549f5c607a3b63c6aa2b4ccd5488a24bfb0a14520b9f654a5e0"}}}}, {0x1044, 0x1, @m_nat={0x1040, 0x1d, {{0x8, 0x1, 'nat\x00'}, {0x2c, 0x2, @TCA_NAT_PARMS={0x28, 0x1, {{0xffff, 0x7, 0x3, 0x81, 0x1}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, 0xff000000, 0x1}}}, {0x1004, 0x6, "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"}}}}, {0x130, 0x1, @m_vlan={0x12c, 0x1f, {{0xc, 0x1, 'vlan\x00'}, {0x9c, 0x2, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x8, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3, 0x80000001, 0xffffffffffffffff, 0x200, 0x2}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xffffffffffffb172, 0x0, 0x4, 0x3, 0x200}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x200, 0x3, 0x8, 0x8}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xbad, 0x0, 0x10000006, 0x6}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x8, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x8, 0x3, 0x34a}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x8, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x8, 0x4, 0x8100}]}, {0x7c, 0x6, "b3e5da64ef7a1ea088ca8615f3126d00ecdbfcda12f061f33e6760b36d702c5c392a2e0cab19931703d66b00eead743b069ca3f3ff55b213d8402328b1a3f58d7bb2312954cfc28e480e3ce01188ddf2677565e9db1bcc5d520b1cd52385775d4ef674f0b7cbc3d85d303ac511f62be3ced4b2b3cb11ea2b"}}}}, {0x1040, 0x1, @m_ife={0x103c, 0x11, {{0x8, 0x1, 'ife\x00'}, {0x28, 0x2, [@TCA_IFE_SMAC={0xc, 0x4, @local}, @TCA_IFE_DMAC={0xc, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, @TCA_IFE_DMAC={0xc, 0x3, @link_local}]}, {0x1004, 0x6, "7030bd6a7dc0b879d184817c6a26eafd99affb198434e20d202cc92aa86c70b64b91b320835d2d637f96d6ee61eceff9729d82759fe23bb205ba0e7466ab941e4c9365d6422394139d02541b3e0e77aa13101ffd92c0220cacd6b03c5a5f6a793a18ca5430839b8f5f78902b4af09ea8481780b643120f4dd3d1721bd2c3784a7c054df8e04ead6b58454ff6b6b0a8320c208d03d6dc291b5f7c2317d07bd052f4aee0eec557e0ea7b70acf83d3f4c8b3e06a386917c35e657f0e50cde49aae8a31ec20f9d72b874ba87b9f102ccff4f0f5b041fb3c2ef8ddf890ecce8efc4fdb1fbb4c510b9d5c54b57454913480af1361b33a1f78b78ece24d0b546bf6dd29bf48ee8ba49c0621e4915a1df5e5eca1d3d96924a06ca79234ff57a0f280c41f30ce63a0d2f040544e686a630afd6e500503c338a813ba7a7c302e97522d2ce3ec071b0aef7280a6c2c7a6252773b2f7f72b621448bfe9c1dd18a4876d49cb3316d8406a33c8660fcb44cebd6998670ca4f71f61f63541272eac7987766f9efcb2803e1ed8542e0741dd2e1b1a8b69aefdb84c380ec5164e4913a28595f79dfd3e9fe4f74c5d3d3562f0bdc0b9e30dccc6235eff71dbe44c8f01a5aa3e414625ffd0e91fff44620f4a466b04ad661330fe97313010894db44fcc771be441345f027dcb307cecec1e9a8aa3a2e3ebc630fe9fa92900165578b84aacf75cec882d19e7be282f733eaa16371dcde2b4041909d1d1cc7e0c126b0abfac267b47f00876f65fe082ef631c82ebcb1b794fb0fee442c48e83a1c4f208197a548f1e86f21b561097a5a356b9876f856ec683e181b2a5493d567477bd6164dc6502bc792328b595e0d50039bb455f940ead574664e312f2c49f16d6873b946f7729da4fb29d5718a3bf2499c1be049adb746668119934f6dd00140734c24f5295c6aeaab641628f8e5ca2d8b3509e2fe1940ca1b10d5e9c76b76e6aea0c122d1720235d47e491778e820d6b43c41f2cef9bddea8f3c7f862c310e9135e0bd623dc725b090364b8f117ebef5a6fa9ec32ecc8c7341809080a20ca6084c9abda2731db43ebadede8e6e80e100d1e96543ea37a977c734bc6e4fa46459959bfc43fb178d9da838cce16e3e3680cdf3c4b0aef37a9700647a1512a3717c43a591b8b30b3d4d61fa9807d447596710494d638e9d9910bc0e4ef807231e90380792c4f164a3aca1caa031eeda5d965b4ebb82d14aee5d4cfc91d9354d7c926dba9dff868f7276773246b3c5b4df6b25f0a6f87974982a54b66190c0b6799e16f2ed9cec09a0495419b53ee55081bbc9fc68757a0878a6a1e1a477d84e4664b6cbf5259c2a5f40b88a4dc9d03f1e7e352fdbcf96b08730013f04f26dc4c4359aef3ea7a35e3ada9c107a9d5f816016d3130fd87cc831d4ae4882849ed7940c3eba9c2459256a89b2e06487cdff49dc6a3c577e5b572a8104dd3cdd004a652d8fd28e10822c7ece77971edc6d930774a3dc0600f1612abe9b3f69fcf1f88cebd09a6ae095f027da997d30ab92ff909017ce49339c9fd16e4b01a3c208ea9dd2205bf645c07a26c72aa4cc77287b61c8a66f2460a6a569bdb6729b6cb0faecc8a01bfae2fe183bf7d4425b725c24b198155986b978d63f715bbaf7d5376779d2733e6afa8798fb8a46abc6f835640c332686775c626fea22fcfa62f3955ac73e1d2ed8cd7736829cce5776854cd88701aa156004d3f471c423ca7d1268e615a6bac99e52f971003acd5957a7b2925d86f49f8a191b09c74b74d006589e738895d82366a59e2b73e81610d810e041af475ddde97eb866c71c97107dda3e3b6933e87d696f9e7fb472659655cb600db6a9f2affe7dab5f160d0af61e4b0e7c253c55613f43c81712bbf4e7cf7b7aafed33e56e5d98ad2163695a29fed2b73807dc2ad471bd5151dd8c4c2a901243e9eb6ebb859ee07c69f2edfce7131c1c8cd4f763a2b32077334311f682530aabe67bb9bb65cca9d579af3b5c4f586d15cea1f43ea6113ac4b623a16bf4c1cb1d90ce891bc0a2f89720a9b89894a3ce1c54f4453ab84a68c0061c8ced9c2c50cef2f0238cd8b1a9186694cf986030acd2c86bf5bc4714e693456be9f76a7d42c748513a9660c118c7919c54f12fe9185e2b317478e23b7722bc531c642a0feba8202e52914198e1ae17d115c9ba87b05e26a56513520286a818a67fa6e5d94d195dba9f62c44d002026afb6b26a89c38f254350993056a2dce63ab21e85947dcc6e93f8506539bc0cfaebc003766b6d520ebb2ced8293b6be17aa154abeb0cbd2011471198252cc147bd2e2698908905ca8167a404995200cfa3869841bc380b0230178d46aa3a581a2f1df50607e450338d24b5326456199fd5349b98cfaea6da55eb8c387daadd995246fa30fb6c9b5ba63efe512066272bde8d35c650ccb497d1d9ab55f18f00e29c3d3ff8909dc4bbaba903f86bbafc2545d6812f4d38dd08461814e42008dbdd2b7c6a3ee3fb4aa401ac479015b48b1c21be200b7271f7c6b5e57faef3e9de70ddf4f17c71da446705e4b80690e101730b4a06c4040d389e628507a7456d67a19dcca4923f742342f0374680116467120607d0f09113b55edab38ef234972aca332ae8324de33f155036c1bb70ad8e780e201d1dc874baf02561909d6004b1c85334226c799ef073c35fdee82f2f14cc9ee3879bf55699e1251092a3fc741802308435fa366d1fdd56056d913ad6cbc945de6c61fdbf9f4f16bb7bab1bff282fd66ae73b85fb2237482888c34442bfeb721719a3321f9b2a0281f7483f282cc64abe5bb6f8128581d75813d697f9024523bba555393b5c3c67476f60b3091287290b9b86b62e85b71799f27607cc444e17422ba64b95c4578ca36851cf9f3695a7bb477a386437370b0990f4458ffa3039accec4317eb963694ea2431122776ac004c009dec129cf5dbe4978f5be91ce502d334c766be8a866a99d52a19ded70e7552acf92170668662231a2a9a6c2effbf97d89210865320a794adb498b8f0b895acbc588ce67255686a6c0c5ca963c305da27ff15b34cc1db98c13b831217fb80a0a20282e58ee162ea3980e1a327bad526c8f321324090cdb1bc12cfba66a755615d318d2e08b01d593a4d687d0a2d12b06c238431b337e69b0bdf0159a7d09a8bfba2c37da1c91b69680aa4ff7d04cd2f007ef0314b5a9649ebe10e013316318b1ad49896ee9512c89d3b6cc98e7cbb4945b255cf8eb9293c27020d565a68511832702e6f17a967af488b7e6cb0522ed71a836fcfc1910b66f82835672867d79955f62062a651c7d371e0e1d47bd4151241d42abd97fe762a27981c18bcd3aca6c2747c10ffa44be39a3073cba1f3f07509d3189edbc5de5c1358c8817a0e4fd65ef63656f7b16c28febcc4b0e9a45801edfc2c16cd9aa5e2dec2e3d7c3408d4ffd1f414ae24f354499d882f53278788faab43dd7d33a19520e83f38d475969594aa627128744fde968c6ebb63a49a8263ee47d3d315fc927303a9985033e6f387806138b6ee835d51efdd14d239609134a510b6190f3d245a9304b252285472dd36650ee06acb06f5c994dca9591fcf7abf6ce8d875a4dcd7a5c2eefc6f52a2e02a56478441042b6716c2d0c0d7bdaeb4b536ae11040c8dc333b0e4bd15b37e9479bacc8ed371249d078b959b963222cede9ace4291bc7bddfa1710a470c8dcd7da3bc852e109e9e8aa45c61fa31f6660a7bd1c288c9dbd0009423dc251ca8671990178c0e8c5eeda16c576c8515da3c1a75e1cc8c8b9b905910e33b5ce9f1599eda0fc90ba87f3d7239acffbdc513c21663deccd04ce90a6eb3b65903a8ca2488cc24a45e355e347da8ef228d06f042eb5b2d7a322ed9aa9d007fdb6fcff6647fcbcbef9399c935348de4fd49081897388db9604d4a80f611a110e849a336ab15cc369a43f3de0cc68ad372dff8ab1021f499917fd45d6c822c53b472ebf259293925d63da5b3871be3d9381dd9a6975286d617b02aab4d9673c6d5dda806d68e0fd10cab2ca931e6d73b8b509f8b376838cdf8228380fd2ade79ec70ebef3d0185809b7a3ce465f84c6a00870256d37fd3734b3f584dc5a098fab7c94b4928d739ebe96bf079235c7e00d42f54f4c2eb885fd91d1af25716d6d480d45cae30333bd8881d545f0d713be55f0f71fc322dc997a6c781d3a6d58f5269d2696cd6379373dd701b30833be17e574df41dd4f8a16aff693c92728c452a6a30dddd4e3821b2252b9e56d76662b0697fc8d1e361abe1988a387ca8f81764a73dd65715b77ad89bb0838e1ace93974361c233e15f53a40ad45d45ec8fb9181bcc4951f6b7480620d67cbdc5336de38dfe1a11303ea677563507cde4c2b469dd768d121f9e66124500e500ca4b67c1e96be6bb5127997061ff7e71526131fd5d1198cc5f9eb926d4a4d3f3dd9678a90f7e6de29b34cf1208f5c7095fc1273b31f5b2315878e44cb75c810ebe32cda50832a436957c421afb2933cdac5f6acad12f663d3c5e97514d102f63c2cfd0308ee4f6899c1ae01f01a4e5113eaee2462d6b9d3e7ad6ea4fc5b6651f5e4b32f04c9bc8d077520855fca64bec30175ebea474f55c3664102d798bc82a33dee4b1b07f0b1af7c419ee3fb1c72fb0e84a9d0d52702170bd7074ec410975eee1a516216d51996e799546a8e8998efdcd84ec9aeb2ce6bbad84f8033f3291c2957fdba521bd8b3c52e5c2394faf265bc6b349525df47f90fb09960aefff3d0271a7b1b2e58f254aac57c65f8f81db116b5c500a8da192d11e5e34b454dd8a38dd35a4dc55bca9ed53374aa5a901407509ea2c1bfa70c70cd459a650ada94f24429b5f580a9c4984de4ffcfce207cfa532f8a283b1397ac5a44d4ec627d365b3849af61a71bb9ea6742c9073d1912d8ea148bda179d4348b219a7b993e884b0a8a19e2cd2fc170be4d49358e1e042bbff645e9ba97e4f1a7b03df1c1ed206f49af1832edf868b747bfc4ea4a937e1f410ab364860c2e3b4d329ca20c9310d5a0eccea9ad7e4fa34f3954163c6e14b04b7e330fe98bd927d001ed72b7c4181dc9de4cdc398f0900df5d17846240d1a41e08bfe90b83ff0cc35e040aeed8a6878cbd771cc81a2fd7e03cdda220426ca73519d54eee883da4dcc485f376e21d9baaa4029fb2ccc082f225c26808129ac919f2f5507126a7b360365a58202167c773e3ed782a360ba105b24bb0db577b8d12d9ab78d6e61cbbe8eaf194fce2e2d11a0cf3e10d696c8ba25e15af4e449926c6e581f707b33d1a3d5f9b003446c46ec3064a573b0e5c6f685b34a2706147e70c31c64bd87f611ae9a39901920f2cc25d8d9c4e1c5ece796deacb391bf5bbccceb37aea625435a416df1012fb7af741ee123b42497c96ca562d529e46f2a44e838232fb154abdc9793a891acda18d72fb7d6e80aab15b5079d857e91902b04935289df0512feb4065f08a90102a6a058302ba7069179df6d0dd4d43bbb6075770d65b846f393c9f9551b1c9e32ab85a89db30f7bb3f22ab1e710a2ddb10711a692f909d8bdeb37c30761dc6a83aa45d5e98cd9b722eb1e40546f994a8d048c28d272c3fd51fb59c9d0f4955a0db947dfeb98b5e5e650b67683fb150247dbef33d765dfd6faffc3ea90093c9032bcfd203fb8a5e4dc45c2b6e74a940aa36863a78ae336652acd56844c201855019b06c2aa7911f5574c9e5f9399f96e39aded2f455301f0055d9931ebb389161ee5a6e5068aa945b1ef3dc1942"}}}}, {0x78, 0x1, @m_vlan={0x74, 0x20, {{0xc, 0x1, 'vlan\x00'}, {0x20, 0x2, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x100, 0x8, 0x6, 0x977, 0xc9}, 0x2}}]}, {0x40, 0x6, "72faf94d5a8ae8b9e633ff29dad5248e4aac0f3667407d9753eb296d7f5ad6cc8ba8443e800802bedc8cd9ea68ed37f7da03d8bcea19839467"}}}}, {0x114, 0x1, @m_csum={0x110, 0x4, {{0xc, 0x1, 'csum\x00'}, {0x20, 0x2, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x6, 0x2}, 0x100000000}}}, {0xdc, 0x6, "800543f55a05f796d87ab169980c82ca97d4077ae79b0ae72bed3328334119689840160fca2f32ee636c699bdc9ef5e9c4f94cfb84f477bd61c8cdca6211fefa1d65265e9c5d4edb1b9072dddccca7c246d62067057230b1d0eacd9c78c66cf9dee8373e896ce17cf2336a86d6fa152154d260b1489939303bb443a4caa7fb6b8c2e8f0bea188d197c2193194d24b649e09fe83d7f8df1a41fb1c3022766942ada05908287e60910edccf0e50e920641ad7338bddf1e5efd13103bd5501cd039be4b79b0bc1362a9197c0cc64c7b1b0f2b763a9652"}}}}, {0x158, 0x1, @m_bpf={0x154, 0x20, {{0x8, 0x1, 'bpf\x00'}, {0x44, 0x2, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0x1, 0x8, 0x28, 0x61a}, {0x9, 0x3, 0x7, 0x2}, {0x9330, 0x2a8, 0x8, 0xa1a}, {0x0, 0x3, 0x10001, 0x5}]}]}, {0x100, 0x6, "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"}}}}]}, 0x2e48}, 0x1, 0x0, 0x0, 0x20048804}, 0x4040800)
write$P9_RREAD(r4, &(0x7f0000000180)=ANY=[], 0x0)
ptrace$cont(0x7, r3, 0x0, 0x401)
removexattr(&(0x7f0000003300)='./file0\x00', &(0x7f0000003340)=@known='com.apple.FinderInfo\x00')
ptrace$cont(0x7, r3, 0x0, 0x0)
sched_getparam(r3, &(0x7f0000000180))

04:04:47 executing program 5:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
connect$unix(r0, &(0x7f000066fff4)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)

[  875.826632] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'.
[  875.847197] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'.
04:04:47 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bc070")
mkdir(&(0x7f00000002c0)='./file0\x00', 0x10000)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mount(&(0x7f00000001c0)=ANY=[@ANYBLOB="03362c83265fc75d632fe2ff99124e5b86b2702cdbb40e4cd30c9494ceb15b51dc38a1a49c87edd9a769f83b2c7ecfb2877b2c5f3f783eaae87a01ad75dd5fe4a9348a196e4a7e6a2ddbda12dd1c1fe6edc10d8598369ff539476141c3374cfa62e9df7c850641f744d4870524ac2d3c01c6f9293cbdb041c842eddd1bed240a0f95e9826aabaa0b17088002f05c719770fdabd360e13d6bba2c2f1a186f96a501d05bab3162cf8646e2a8454605256201513ca133e21490b6367ac828392e8282d79129f7f75907fc1123a8"], &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0)
ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f00000000c0)={0x3, 0xf7a})
chdir(&(0x7f0000000340)='./file0\x00')
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}<B\xfc.\x9cia\x14\xa6\xf8\x88\xf0\xda\x85\'v\x83\xcf\xc1\xc4\xd2\xbfq\xc2U\xa3\x13Md\xcc?\xed\x8e\x97y\x8d\xeb\x861\xcb\xf7h,\x9f\xa2\xed\x03\x14e\xaa\x19\x1d\xf9\"\xf7d)|\xba\"\xa8I\x9d\x17\x7fI\xfb\xa9@\xf5[\xbc\x8br?\xd3t\xf1\xfe\xd7\x8c\x8a\xee\xc6\x81\x1d\x9bXyHs\x87\xd5e\x94\xa1L%\x88\'M\xe8O\xa2v\x100+?\xb5Ar\xa8\xc9\x10\xa0~|v\xeaFZ\xa6\x84\x02', 0x0, 0x0)
pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000540)='./file0\x00')

04:04:47 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
clock_adjtime(0xfffffffffffffffb, &(0x7f0000f74f98))
r1 = dup(r0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='/id \acpu '], 0x9)

[  875.883249] audit: type=1400 audit(1555041887.757:167): avc:  denied  { associate } for  pid=4464 comm="syz-executor.0" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:faillog_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=filesystem permissive=1
04:04:47 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000080)=0x10)
clock_adjtime(0xfffffffffffffffb, &(0x7f0000f74f98))
getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f00000000c0)={'IDLETIMER\x00'}, &(0x7f0000000100)=0x1e)

04:04:47 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x800, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

04:04:47 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r1 = open(&(0x7f0000000000)='./file0\x00', 0x80000, 0x8)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="0089e100", @ANYRES16=r2, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x10)
write$UHID_CREATE(r3, &(0x7f0000000200)={0x0, 'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000100)=""/94, 0x5e, 0x9, 0x4, 0x5, 0x8, 0x7fffffff}, 0x120)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0)=0x7f6, 0x4)
sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e21}, 0x10)
bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc)

04:04:47 executing program 5:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x4022)
mount(0x0, &(0x7f0000000880)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000000), 0xffffff0c, 0x3)

04:04:47 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
mkdir(&(0x7f0000000000)='./control\x00', 0x0)
r1 = inotify_init()
inotify_add_watch(r1, &(0x7f0000000040)='./control\x00', 0x8)
dup2(r0, r1)
shutdown(r0, 0x1)

04:04:47 executing program 2:
socket$packet(0x11, 0x3, 0x300)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
unshare(0x400)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000300)='cgroup.procs\x00\v\x81iI\x10\x04ES\x14\x97\xcd\xb3\xbc\xf1\x8c\xfa{\xef\xd9!\x97H:\xb2;f/\xbd\x96\x15\xb5r(\xcf\xe5\xfc\x88\x1e\xd9\x93\xba\xac\x96\x1b\xd7\xd3\xb4\xc1\xd3\x8b\xf0s\xc4\x1a#\xe5\xac\x82\xebt%\xe3cP\t\xc0\xceR\x1d\x98u\xe6??\x8bO\xf5\xde>#\x86\x1f\xecc\bd\x9a\xc9^.\xb7\xe5\xad\xe9\xe2\xfc\x9a\xf8\x05i', 0x2, 0x0)
epoll_create(0x2)
pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000040)={0x7f}, 0x0, 0x0)

04:04:47 executing program 4:
r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000200)=""/4096)
accept4$unix(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x80000)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getdents64(r0, &(0x7f0000001200)=""/4096, 0x1000)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
clock_adjtime(0xfffffffffffffffb, &(0x7f0000f74f98))

04:04:47 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@dev, 0x0, 0x0, 0x0, 0xee, 0x2, 0x0, 0x3}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x33}}}, 0xe8)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
unlinkat(r1, &(0x7f0000000140)='./file0\x00', 0x200)
sendmmsg(r0, &(0x7f0000000000)=[{{&(0x7f0000000580)=@in={0x2, 0x4e21, @multicast2}, 0x80, 0x0}}], 0x1, 0x0)
seccomp(0x1, 0x1, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x9, 0x0, 0x36, 0x1}, {0x101, 0xfffffffffffffff9, 0xfffffffffffffffb, 0xa917}, {0x1c00000000000000, 0x7ff, 0x9, 0x10001}]})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x5, &(0x7f0000000180)=[{0x4, 0x4c1, 0x0, 0x1f}, {0x1ff, 0x275a, 0x9, 0x3}, {0x0, 0x3, 0x2, 0xff}, {0x4, 0x1, 0x8, 0x1}, {0x7, 0x6, 0x100000000, 0x8186}]}, 0x10)

04:04:48 executing program 3:
r0 = epoll_create1(0x80000)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x80000000})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)={0x16})
write$UHID_CREATE(r1, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120)
ppoll(&(0x7f0000000100)=[{r0}, {r1, 0x2f69d3b7cbfec9df}], 0x2, 0x0, 0x0, 0x0)

04:04:48 executing program 0:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x2f)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="9bf5d2c316ce781d081aa400109e7b095b4f6705f2a27f9a0d73e510000085e9ede138db2479cdb200a59fcac48a41c936c8f37d4c391762d9"], 0x39)
ptrace$cont(0x18, 0x0, 0x80000000, 0x0)
r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)="65baf453dc2803196d43f23d1a", 0xd, 0xfffffffffffffffc)
keyctl$set_timeout(0xf, r0, 0x94f)
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f00000000c0))
r1 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000)
ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000000)={'netdevsim0\x00', {0x2, 0x4e21, @loopback}})
ptrace$cont(0x1f, 0x0, 0x0, 0x0)

04:04:48 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000040)={{0x2, 0x4e20, @multicast1}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x8, {0x2, 0x4e20, @rand_addr=0x100}, 'ip6gretap0\x00'})
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240))
r1 = gettid()
r2 = getpgrp(r1)
sched_setaffinity(r2, 0x8, &(0x7f0000000000)=0x401)
r3 = syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x206801)
ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000002c0)=0x100)
fcntl$getflags(r0, 0xb)
clock_adjtime(0xfffffffffffffffb, &(0x7f0000f74f98))
set_robust_list(&(0x7f0000000200)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x4, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18)

04:04:48 executing program 5:
r0 = epoll_create1(0x80000)
r1 = epoll_create1(0x0)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280))
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x401, 0x0)
ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000080)={0x0, 0x3ff, 0x2, 0x0, 0x10, 0xa4ca, 0x4, 0x7, 0x200, 0x9})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x4})
epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0)

04:04:48 executing program 0:
r0 = getpid()
waitid(0x1, r0, &(0x7f0000000040), 0x0, &(0x7f0000000140))
r1 = socket$nl_route(0x10, 0x3, 0x0)
getpid()
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_delrule={0x34, 0x21, 0x1, 0x0, 0x0, {0xa, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @mcast1}]}, 0x34}}, 0x0)

[  876.195568] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  876.212149] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  876.242143] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  876.265481] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
04:04:48 executing program 1:
socketpair(0xd, 0x5, 0x1, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
accept$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000080)=0x1c)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x2000, 0x0)
ioctl$EVIOCGID(r3, 0x80084502, &(0x7f0000000140)=""/70)
connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

04:04:48 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=<r1=>0x0)
ioprio_get$pid(0x1, r1)

04:04:48 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r1 = open(&(0x7f0000000140)='./file0\x00', 0x80000, 0x8)
write$binfmt_aout(r0, &(0x7f0000000200)={{0xcc, 0x8ed, 0x2, 0x33c, 0xce, 0x80000000, 0x225, 0x7}, "23642daa7a41fcf198420fdcd433df5c52959f4722a7c5be3b991d0a801c8f89c09596b726a95937d456bef728b329240527f185f8147f0541f3abcf274e8f4a1e7d604d409620a859a862f12e214547ea836461767f6619a98e83697e8744", [[]]}, 0x17f)
ioctl$TCGETS(r1, 0x5401, &(0x7f0000000180))
r2 = add_key$keyring(&(0x7f0000001500)='keyring\x00', &(0x7f0000001540)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000014c0)={'syz'}, 0x0, 0x0, r2)
keyctl$read(0xb, r3, 0x0, 0x32)
clock_adjtime(0xfffffffffffffffb, &(0x7f0000f74f98)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3})
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r1, &(0x7f0000000380)="1dd7c57712ed0664bfb6b9c314653eefa890332efca6cc411daa337f6cb8bbccdbed5c4179cf11d66943fa46673695c79807576cc4d870a7b33ca264db29ce16dc256a60eb399df1c5a28354e50d4109622cfdc71322e0f01d98b6282861eb1a49ed7da746b702d3f9ce7887c0a528fc38a4e9b37b5f4fd47f083f9270b54d8b14cb6bbef69ca339de3d36b1bdb70b7662d5870302ac8c0a4be4cc69d4d6708ec1bdd26fc31f8cb57413bf1ec9755dd8febd66aed9bb873298ed", &(0x7f0000000440)=""/214}, 0x18)
socketpair(0x14, 0x2, 0xffffffff80000000, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup\x00')
ioctl$PPPIOCATTACH(r5, 0x4004743d, &(0x7f0000000100)=0x2)
setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000040), 0x4)

04:04:48 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x200000c, 0x32, 0xffffffffffffffff, 0x0)
prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000040))
getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000001080)=0x1e)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x8000, 0x0)
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000140)={{0x2, 0x4e21, @broadcast}, {0x0, @local}, 0x18, {0x2, 0x4e24, @local}, 'ip6tnl0\x00'})
getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000080)={'IDLETIMER\x00'}, &(0x7f00000000c0)=0x1e)

04:04:48 executing program 2:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x400040000000001, 0x0)
bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8)
listen(r1, 0x8000009d17)
connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00')
write(r0, &(0x7f0000000000)='2', 0x1)
accept$unix(r1, 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x800000bf)

04:04:48 executing program 0:
r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000000080)=0x5, 0x4)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{&(0x7f00000002c0)=@in={0x2, 0x4e21, @broadcast}, 0x80, 0x0}}], 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r1, &(0x7f0000000440), 0x400000000000211, 0x810)

[  876.286612] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  876.302294] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  876.313269] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  876.326730] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  876.335930] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
04:04:48 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
r3 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x80800)
ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000140)={'bpq0\x00', 0x4})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
fcntl$getflags(r0, 0x408)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

[  876.364499] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  876.383590] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  876.421377] hid-generic 0000:0000:0000.0018: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[  876.461145] binder: 4563:4566 ERROR: BC_REGISTER_LOOPER called without request
[  876.461687] binder: 4563:4566 got reply transaction with no transaction stack
[  876.461695] binder: 4563:4566 transaction failed 29201/-71, size 0-0 line 2921
[  876.466722] binder: BINDER_SET_CONTEXT_MGR already set
[  876.466732] binder: 4563:4569 ioctl 40046207 0 returned -16
[  876.473022] binder: 4563:4569 ERROR: BC_REGISTER_LOOPER called without request
[  876.473354] binder_alloc: 4563: binder_alloc_buf, no vma
[  876.473375] binder: 4563:4569 transaction failed 29189/-3, size 0-0 line 3136
[  876.564013] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  876.573863] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  876.587174] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  876.594411] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  876.601541] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  876.608857] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  876.616045] binder: undelivered TRANSACTION_ERROR: 29189
[  876.621642] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  876.628342] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  876.635546] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  876.642566] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  876.649364] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
04:04:48 executing program 3:
sendmsg(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5500000018007f5800fe01b2a4a280930a06000000a84599910000003900090008000c0001000000190015000600fdaa000000dc1338d54400009b84136ef75afb83de44b2ee3b2733c9237f8d621a4559e65517b3", 0x55}], 0x1}, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40040, 0x0)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00')
r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r1, 0x120, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r2}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c845}, 0x84)

04:04:48 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
close(r0)
fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@mcast2}, 0x0, @in=@initdev}}, &(0x7f0000000300)=0xe8)
r3 = getuid()
getresuid(&(0x7f0000000340), &(0x7f0000000380)=<r4=>0x0, &(0x7f00000003c0))
stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
fstat(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
fstat(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
fstat(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0})
stat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0})
r12 = getgid()
getgroups(0x4, &(0x7f0000000880)=[0xee01, <r13=>0x0, 0xee01, 0xffffffffffffffff])
lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000008c0)={{}, {0x1, 0xc8990d68c29e5a4e}, [{0x2, 0x4, r1}, {0x2, 0x2, r2}, {0x2, 0x1, r3}, {0x2, 0x6, r4}, {0x2, 0x4, r5}, {0x2, 0x1, r6}, {0x2, 0x0, r7}, {0x2, 0x4, r8}, {0x2, 0x1, r9}], {0x4, 0x7}, [{0x8, 0x2, r10}, {0x8, 0x4, r11}, {0x8, 0x1, r12}, {0x8, 0x1, r13}], {}, {0x20, 0x1}}, 0x8c, 0x2)
clock_gettime(0x0, &(0x7f0000000040)={<r14=>0x0, <r15=>0x0})
utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{r14, r15/1000+30000}, {0x77359400}})

04:04:48 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f00000001c0)=0x3ff, 0x4)
pipe2(&(0x7f0000000080)={<r2=>0xffffffffffffffff}, 0x800)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0xc)
recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xffffffffffffff70, 0x0, 0x146}, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000040), 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

04:04:48 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
r3 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x80800)
ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000140)={'bpq0\x00', 0x4})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
fcntl$getflags(r0, 0x408)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

04:04:48 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x6, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)
syz_open_dev$evdev(0x0, 0x0, 0x0)

[  876.656348] binder: send failed reply for transaction 188 to 4563:4566
[  876.656451] binder: undelivered TRANSACTION_COMPLETE
[  876.656459] binder: undelivered TRANSACTION_ERROR: 29189
[  876.682554] hid-generic 0000:0000:0000.0019: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[  876.728542] input: syz1 as /devices/virtual/input/input178
[  876.752408] binder: 4583:4587 ERROR: BC_REGISTER_LOOPER called without request
04:04:48 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x80000)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x108, r3, 0x309, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_MEDIA={0x90, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x841}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x60}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5c}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x1}, 0x800)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

04:04:48 executing program 2:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020e00001000000000000000000000000800120000000100000000000000001b06000000000000000000000000000000e90000010000000000000000000000006c360000000000000000008000000000030006000000000002000080ac14ff9bf00000000000000003000500030000000200423b1d632b648f38e6e75ce4b8ff"], 0x80}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x216, 0x0)

04:04:48 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0xa040, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x6, &(0x7f0000000000)=0x8, 0x4)
getsockopt$inet_tcp_int(r1, 0x6, 0x6, &(0x7f0000bfcffc), &(0x7f0000d12ffc)=0x4)

04:04:48 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
r3 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x80800)
ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000140)={'bpq0\x00', 0x4})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
fcntl$getflags(r0, 0x408)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

04:04:48 executing program 3:
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0xfffffffffffffffd, 0x0)
openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0)

[  876.752730] binder: 4583:4587 got reply transaction with no transaction stack
[  876.752738] binder: 4583:4587 transaction failed 29201/-71, size 0-0 line 2921
[  876.753231] binder: release 4583:4587 transaction 192 out, still active
[  876.753235] binder: undelivered TRANSACTION_COMPLETE
[  876.800682] binder: send failed reply for transaction 192, target dead
04:04:48 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
r3 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x80800)
ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000140)={'bpq0\x00', 0x4})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
fcntl$getflags(r0, 0x408)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

04:04:48 executing program 4:
r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x0, 0x0)
getresuid(&(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100), &(0x7f00000001c0))
lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
getresuid(&(0x7f0000000400)=<r5=>0x0, &(0x7f0000000440), &(0x7f0000000480))
getresuid(&(0x7f00000004c0), &(0x7f0000000500)=<r6=>0x0, &(0x7f0000000540))
r7 = geteuid()
getgroups(0x7, &(0x7f0000000580)=[0xee01, 0xffffffffffffffff, 0xffffffffffffffff, <r8=>0xee00, 0xee01, 0x0, 0xee01])
fstat(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x1, 0x5}, [{0x2, 0x0, r1}, {0x2, 0x2, r2}, {0x2, 0x4, r3}, {0x2, 0x2, r4}, {0x2, 0x2, r5}, {0x2, 0x1, r6}, {0x2, 0x5, r7}], {0x4, 0x3}, [{0x8, 0x1, r8}, {0x8, 0x1, r9}], {0x10, 0x2}, {0x20, 0x1}}, 0x6c, 0x0)

[  876.868202] binder: 4603:4610 ERROR: BC_REGISTER_LOOPER called without request
[  876.878193] input: syz1 as /devices/virtual/input/input179
04:04:48 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc9f123c1237319bc070")
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0)
sendfile(r0, r0, &(0x7f0000000000), 0x5)

04:04:48 executing program 4:
getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000240)=0x80)
getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000440), &(0x7f0000000480)=0xc)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r1, &(0x7f0000001440)={0x8, "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", 0x1000}, 0xfffffc41)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r2)
ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002})
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000080)=0xe8)
ioctl$TUNSETOWNER(r1, 0x400454cc, r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000110005fba0000000000001f80f7413500751fbd75040d1f1c7c4bdd252ed8d494c38e765e949193a63a4e836bcc48c41000f95949771abf15698bd7bb103669e14a58d0aaf16dae304b67d97c83a860deb8edebfc1415c38bbe9c77aa14998f8c2ac048f900a48f1223131f984e4761f65dbc90409af17b7cf8a00928980cda4e6fef2cecc4d5e4821b87646b616d4dcd68e520d7eaa55d0b421f812acc47e65c0256105b44ce4268d177d95df1f2395008d49fb83ac10871f7b24f", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0)
r6 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0)
sendfile(r2, r6, 0x0, 0x800000000024)

04:04:48 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
r3 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x80800)
ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000140)={'bpq0\x00', 0x4})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

04:04:48 executing program 3:
r0 = socket(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="f7ffffffffffffff"], 0xffb4)

[  876.885882] binder: 4603:4610 got reply transaction with no transaction stack
[  876.885891] binder: 4603:4610 transaction failed 29201/-71, size 0-0 line 2921
[  876.886141] binder: release 4603:4610 transaction 195 out, still active
[  876.886145] binder: undelivered TRANSACTION_COMPLETE
[  876.953487] binder: 4616:4624 ERROR: BC_REGISTER_LOOPER called without request
[  876.954500] binder: 4616:4624 got reply transaction with no transaction stack
[  876.954509] binder: 4616:4624 transaction failed 29201/-71, size 0-0 line 2921
[  877.009189] binder: BINDER_SET_CONTEXT_MGR already set
[  877.009198] binder: 4633:4634 ioctl 40046207 0 returned -16
[  877.011123] binder: 4633:4634 ERROR: BC_REGISTER_LOOPER called without request
[  877.011233] binder_alloc: 4616: binder_alloc_buf, no vma
[  877.011252] binder: 4633:4634 transaction failed 29189/-3, size 0-0 line 3136
[  877.011330] binder: 4633:4634 got reply transaction with no transaction stack
[  877.011338] binder: 4633:4634 transaction failed 29201/-71, size 0-0 line 2921
[  877.060699] binder: send failed reply for transaction 195, target dead
[  877.093916] binder: undelivered TRANSACTION_ERROR: 29189
04:04:49 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
pipe2(&(0x7f00000000c0)={<r1=>0xffffffffffffffff}, 0x800)
ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000100))
r2 = getgid()
setfsgid(r2)
fsetxattr$security_ima(r0, &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@sha1={0x1, "1faaefd510b3abb93da044bea85057f639eff50a"}, 0x15, 0x2)
sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5e56acbb60a6bab0000000000000000007000000", @ANYRES32=0x0], 0x18}}, 0x0)

04:04:49 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
r3 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x80800)
ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000140)={'bpq0\x00', 0x4})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

04:04:49 executing program 4:
r0 = open(&(0x7f0000000480)='./file1\x00', 0x0, 0x34)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffef6)
rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000008dc0)='./file1\x00')
lseek(r0, 0x5c689bef, 0x0)
rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00')
prctl$PR_MCE_KILL(0x35, 0x21, 0x0)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0)
getsockopt$bt_hci(r2, 0x0, 0x3, &(0x7f0000000340)=""/232, &(0x7f0000000440)=0xe8)
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000080)='trusted-vboxnet1\x00', &(0x7f00000000c0)='cgroup.stat\x00', &(0x7f0000000100)='cgroup.stat\x00', &(0x7f0000000140)='cgroup.stat\x00', &(0x7f0000000180)='cgroup.stat\x00', &(0x7f00000001c0)='vboxnet1^\x00', &(0x7f0000000200)='cgroup.stat\x00', &(0x7f0000000240)='cgroup.stat\x00'], &(0x7f0000000300)=[&(0x7f00000002c0)='\x00'])

04:04:49 executing program 2:
perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc389, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x10, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000080), 0x10000027d)
read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3)
sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b078d81", 0x4c}], 0x10000331, 0x0, 0xfffffffffffffdf4}, 0x20000000)
recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x118, &(0x7f0000000240), 0x0, 0x0, 0x26085d6cce6967cc}}], 0x4000056, 0x3a, &(0x7f0000000200)={0x77359400})
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)

04:04:49 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000))

04:04:49 executing program 3:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
open$dir(&(0x7f00000000c0)='./file0\x00', 0x80, 0x101)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc))
syz_open_pts(r1, 0x2107)
close(r0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x40000, 0x0)
ioctl$RTC_EPOCH_SET(r2, 0x4008700e, 0x80)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x24000, 0x80)
write$selinux_create(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6c6f67696e5f657865635f743a73303aa33968494dc7e4d5e5f928dbb54a202f7573722f7362696e2f6375707364203030303030303030303030303030303030353039003746ea864af33b59d95087abe6e26599cc574ea008000000ab4343061ea724d2c39d78db17c2e9a3822d5700c9a0a0746ff35118ef"], 0x7c)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040))
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r4)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
unlink(&(0x7f0000000100)='./file0\x00')
fcntl$setstatus(r5, 0x4, 0x6100)
ftruncate(r5, 0x108200)
open(&(0x7f0000000000)='./bus\x00', 0x4000, 0x48)
ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, 0x0)

[  877.142072] binder: send failed reply for transaction 198 to 4616:4624
[  877.160023] binder: undelivered TRANSACTION_COMPLETE
[  877.170596] binder: undelivered TRANSACTION_ERROR: 29189
04:04:49 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = creat(&(0x7f0000000180)='./file0\x00', 0x6)
ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f00000001c0))
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
r2 = dup(r0)
ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f00000000c0))
open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x41)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b70000000000e8b071462502d137acb49e00002d0001000000000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0x44e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffe64}, 0x48)

04:04:49 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
openat$rtc(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0)
write$P9_RAUTH(r1, &(0x7f00000000c0)={0x14, 0x67, 0x2, {0x5a, 0x1, 0x5}}, 0x14)
open(&(0x7f0000000280)='./bus\x00', 0x0, 0xe0)
ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffffd)
creat(&(0x7f0000000380)='./bus\x00', 0x0)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0)
write$binfmt_misc(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x109)
sendfile(r1, r2, &(0x7f0000000140), 0x8fff)

[  877.213177] binder: 4648:4653 ERROR: BC_REGISTER_LOOPER called without request
[  877.245824] binder: 4648:4653 got reply transaction with no transaction stack
04:04:49 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
setxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.ima\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="0208c6137d71bd243b4016e733dc3a468d514319d5199e95ad61c89cc5c5f8e1fd4026681508006933b0d592b50000000000000000"], 0x1, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000e77fff), 0x0, 0x0, 0x0, 0x0)
close(r1)
io_setup(0x6, &(0x7f0000000780))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002})
r3 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000680)='/dev/keychord\x00', 0x20040, 0x0)
r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000640)='fou\x00')
sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="18000000b0323bbe826fb4456fdd50d205c2432b36d50789e751d8fc2841994e685600e991e46404ca1563387ddd77be07b5dbc8bcb826217230a5ded52976d8c87f7b8ce718c562d9bc54b1b152ff68343e7ea736b86fb90869b67576cf078a5b392c1202bbcf000000637018db1481b69fe034e0afa895e99300"/133, @ANYRES16=r4, @ANYBLOB="00002bbd7000ffdbdf250200000004000500"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x0)
ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000700)=""/30)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)={0x134, r7, 0x308, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x48, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8a4f, @ipv4={[], [], @multicast2}, 0x1}}}}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x95}]}, @TIPC_NLA_LINK={0x88, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x885}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbd5}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb7}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x10}, 0x8c4)
ftruncate(r6, 0x2007fff)
ioctl$LOOP_SET_STATUS(r6, 0x4c02, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x3f, 0x1f, 0x6, 0x0, "6cff51263c9afa8803956fa178b0f0dc39c07c0d7d0baf91d0f4d1ee58aa9f1c85fceec8e95e16fb6d7434c631491b6c03268977cfacca43a25c2816fc8ceaec", "dfe3148da099a1435cd26ed50c091924a94e16d998df02f5541db56d91884a84"})
pipe(&(0x7f0000000380)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
write(r9, &(0x7f00000001c0), 0xfffffef3)
read(r8, &(0x7f0000000200)=""/250, 0x50c7e3e3)
sendfile(r1, r6, &(0x7f0000d83ff8), 0x8000fffffffe)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r10, 0x0, 0x482, &(0x7f0000000000)=""/48, &(0x7f0000000040)=0x30)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
sendmmsg(r0, &(0x7f000000ac80), 0x400021b, 0x0)

04:04:49 executing program 2:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0xdcdeafe4601741c4, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f00000000c0)={{0x1, 0x3, 0x7d47, 0x0, 0x9}, 0x8001, 0x1})
syz_open_procfs(0x0, &(0x7f00000008c0)='net/dev\x00\xbc\xa8 \xb3[\xads\xec(\xaa\xc3\x98\xa0\xff\xd8.1?\x97i\x03\xc1[\xedn9\x9c\xf3a\xa2p\xa8\xb5F\xeea%\xa0\xe5k\xf5i\xb8\xa5\x98W\xdeD\xe02\x9b7$\xa7\xc5M\x8d\xd7\x95\xe2\xd9|y\x97K\xc8\x8a\xcd\xc6{\xcap\xec\xa8\xcfxL6J;[\xe7\x1c7\xe1\x9a<\xb0\x1e\xcfw\xc1=\xf5\x1c\x9cG\x85a\xae\xc9\xb8\xcak\x89\x82\xfe!\t\xf7Yf\xda\xf8\xed\xd6\xb9\x18\x81\x04z\x86\xdad2\xc9\x8c;O\xfb\x8e?\xf4>o\xa7K\xec\x1c\x03g*{2\xb1=\xb6;\xf5\xd7x\x06\x9dwHM\x88:\x86$\xffG\xf5\xaa\x1a\b%}\xbc')
ioctl$FS_IOC_ENABLE_VERITY(r1, 0x6685)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x5, 0x2, 0x7})
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0)

[  877.287214] binder: 4648:4653 transaction failed 29201/-71, size 0-0 line 2921
[  877.321358] binder: release 4648:4653 transaction 203 out, still active
04:04:49 executing program 0:
syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r0, 0x0)
r1 = epoll_create1(0x0)
r2 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x80800)
ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000140)={'bpq0\x00', 0x4})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

04:04:49 executing program 5:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0)
write$cgroup_subtree(r1, 0x0, 0x0)
unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x200)

[  877.333506] binder: undelivered TRANSACTION_COMPLETE
04:04:49 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
prctl$PR_SET_TIMERSLACK(0x1d, 0x40)
ioctl(r0, 0xd5fa, &(0x7f00000001c0)="0adc1f123c123f319bc070")
clock_settime(0x0, &(0x7f0000000000)={0x0, 0x1c9c380})
r1 = fcntl$getown(r0, 0x9)
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=r1)

04:04:49 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
flock(r0, 0x1)
flock(r0, 0x2)
r1 = socket$netlink(0x10, 0x3, 0x2)
bind$netlink(r1, &(0x7f0000000000)={0x4400000010}, 0xc)
close(r1)
r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e)

[  877.400877] binder: send failed reply for transaction 203, target dead
[  877.419077] binder: 4679:4681 ERROR: BC_REGISTER_LOOPER called without request
[  877.450315] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready
[  877.454765] binder: 4679:4681 got reply transaction with no transaction stack
04:04:49 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0)
ioctl$TIOCCBRK(r1, 0x5428)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x323)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000040))
r3 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0)
write$binfmt_misc(r1, &(0x7f0000000280)={'syz0'}, 0x4)
open(&(0x7f0000000380)='./bus\x00', 0x101040, 0x20)
rmdir(0x0)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0)
ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f00000002c0)=@buf)
bind$netlink(r4, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r4, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000b4bffc), 0x4)
sendto(r4, &(0x7f0000000340), 0xac, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0)
sendfile(r1, r3, 0x0, 0x8fff)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, 0x0, 0x0)

04:04:49 executing program 0:
syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r0, 0x0)
r1 = epoll_create1(0x0)
r2 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x80800)
ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000140)={'bpq0\x00', 0x4})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

[  877.454774] binder: 4679:4681 transaction failed 29201/-71, size 0-0 line 2921
[  877.570676] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  877.584436] binder: 4698:4702 ERROR: BC_REGISTER_LOOPER called without request
[  877.594523] binder: 4698:4702 got reply transaction with no transaction stack
[  877.603344] binder: 4698:4702 transaction failed 29201/-71, size 0-0 line 2921
04:04:49 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x6)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000100)={'ip_vti0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x26}}})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$int_out(r2, 0x5462, &(0x7f0000000200))
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

04:04:49 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
getsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000040)={@loopback, @rand_addr, @dev}, &(0x7f0000000080)=0xc)
io_setup(0xfff, &(0x7f0000000000))

04:04:49 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$VT_DISALLOCATE(r1, 0x5608)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc})
ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000080)=0x63)
read(r1, &(0x7f0000000040)=""/11, 0xb)
syz_open_pts(r1, 0x0)
r2 = dup3(r1, r1, 0x0)
ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)=0xe204)
ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000100))
ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000))

04:04:49 executing program 0:
syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r0, 0x0)
r1 = epoll_create1(0x0)
r2 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x80800)
ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000140)={'bpq0\x00', 0x4})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

04:04:49 executing program 3:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x101)
close(r0)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00')
ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000000c0)={0x52, 0x200, 0x4, {0xfffffffffffffffd, 0x7f}, {0x100}, @cond=[{0xb9, 0x8, 0xc1de, 0x4, 0x5, 0x5}, {0x9, 0x7, 0x8, 0x1, 0x5, 0x670e}]})
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x2)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000))
ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@mcast1}}}, &(0x7f0000000200)=0xe8)
setuid(r4)

[  877.721922] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=4701 comm=syz-executor.4
04:04:49 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
r3 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x80800)
ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000140)={'bpq0\x00', 0x4})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

[  877.772447] binder: 4709:4711 ERROR: BC_REGISTER_LOOPER called without request
[  877.781457] binder: 4709:4711 got reply transaction with no transaction stack
[  877.800612] binder: 4709:4711 transaction failed 29201/-71, size 0-0 line 2921
04:04:49 executing program 3:
epoll_pwait(0xffffffffffffffff, 0xfffffffffffffffe, 0x381, 0x0, 0x0, 0x0)
r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000240))
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x20)
write$P9_RWALK(r1, &(0x7f00000002c0)={0x64, 0x6f, 0x2, {0x7, [{0x8, 0x3, 0x5}, {0x40, 0x2, 0x3}, {0x0, 0x4, 0x2}, {0x82, 0x3, 0x1}, {0x18, 0x2}, {0x1a84a0d4a4933a4b, 0x1, 0x4}, {0x8, 0x4, 0x7}]}}, 0x64)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x2, 0x4)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8800404}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000428002c000200080002004e24000008000b000200000008000900670c0000080009000300000008d17b23155c7de19e00040003000700"/66], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000)
syz_execute_func(&(0x7f0000000280)="430f0f110d8f69e0919d0a800000d9dfc40275373500300000b6fe0f59116641d9e48f88288e5e1ac5c40118153747de1e")
getrusage(0xffffffffffffffff, &(0x7f0000000400))
accept4$unix(r0, &(0x7f0000000340)=@abs, &(0x7f00000003c0)=0x6e, 0x80000)

04:04:49 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
socket$inet6(0xa, 0x0, 0x0)
socket$packet(0x11, 0x0, 0x300)
openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0xc0000, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0)
read$eventfd(0xffffffffffffffff, 0x0, 0x0)
unlink(&(0x7f0000000040)='./file1\x00')
r2 = creat(&(0x7f0000000e40)='./file0\x00', 0x0)
write$selinux_load(r2, &(0x7f00000000c0)={0xf97cff8c, 0x8, 'SE Linux', "f7dcab79b68c7fc930a3283a693ae17c227f69b9141b6f372bfbe842f3c3df9da99f6fbf1945b28b140e7322a21f7ae8131d4b02ae5f3cea266bbd7d366fa92b22afbe292b3178c1b7f3c42ee085e7f5cd23725da21b6e30a2ec17a2a003d530887532b442ff36c44d6f5ca92c09943a97aebb82d09b93896988fcc01338b114912f88c23f53071092233b207e7615af85cf7d7a7566edc6079a0932314061f5865a363450b7399b8788310c81e2a883e1f803d247c912d04dceed9f839e95a0bb921411fdb9fb1131fbc3b1c10aefaaad640ed688"}, 0xe5)
fallocate(r2, 0x0, 0x4000, 0x84003ff)
write$cgroup_type(r1, &(0x7f0000000240)='threaded\x00', 0x7493)
fallocate(r1, 0x3, 0x27, 0x8000)
fsync(r1)

[  877.877509] binder: 4721:4723 got reply transaction with no transaction stack
[  877.894242] binder: 4721:4723 transaction failed 29201/-71, size 0-0 line 2921
[  877.908465] binder: release 4721:4723 transaction 212 out, still active
04:04:49 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
r3 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x80800)
ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000140)={'bpq0\x00', 0x4})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

04:04:49 executing program 3:
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0)
getresuid(0x0, 0x0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x323)
r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
fchdir(r2)
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f0000000040))
r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
r5 = socket(0x10, 0x80002, 0x0)
readlinkat(r1, &(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bind$netlink(r5, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r5, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
ioctl$UI_SET_SNDBIT(r4, 0x4004556a, 0x2)
open$dir(&(0x7f00000013c0)='./bus\x00', 0x400, 0x108)
connect$netlink(r5, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000b4bffc), 0x4)
arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x2)
sendto(r5, &(0x7f0000000340), 0xac, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0)
write$binfmt_misc(r4, &(0x7f0000001500)=ANY=[@ANYBLOB="0400f9b50ca49460da9af1eac131298f54bf1e53f65fefa14f1d01ae3c5ee5c3ed9bd91d869ef0ef7e8bf5ffdab315a32f53c570ec9fe816b50ae81f0a030cefb454e6e7b258fbf839e6ce279840c374f88556fef303fbfebea12ba6f162b6d36db33d417eeea692d6a2d5e41d04cd640064bdcc3a9e02c3acde38983624d97cd2779d44ec814b0cd45b67a44a259daa97418da68f63017c66f22a60e1d55700bda875c4758c7a3b703bab5a3bb3c201fcfa1b9aa2db1c1bd172b39c7b364d4f90eaa1202c"], 0xc5)
getsockname$inet6(r2, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000340)=0x1c)
sendfile(r1, r4, &(0x7f0000000140), 0x8fff)
setsockopt$inet6_tcp_buf(r4, 0x6, 0x1e, &(0x7f00000003c0)="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", 0x1000)

[  877.938492] binder: undelivered TRANSACTION_COMPLETE
[  878.014009] binder: 4737:4740 got reply transaction with no transaction stack
[  878.031359] binder: send failed reply for transaction 212, target dead
[  878.049804] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=4736 comm=syz-executor.3
[  878.084220] binder: 4737:4740 transaction failed 29201/-71, size 0-0 line 2921
[  878.103395] binder: release 4737:4740 transaction 215 out, still active
[  878.110511] binder: undelivered TRANSACTION_COMPLETE
[  878.160699] binder: send failed reply for transaction 215, target dead
[  878.443337] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=4719 comm=syz-executor.4
[  878.560699] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  878.813520] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=4746 comm=syz-executor.3
04:04:52 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="8cff7cf908000077e732ce005345204c696e757816000000fdf900040007fffffff8000071d0127d00e9088a1ff9776c"], 0x2c)
writev(r0, 0x0, 0x0)

04:04:52 executing program 2:
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
truncate(&(0x7f0000000240)='./bus\x00', 0x800)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
lseek(r1, 0x0, 0x2)
sendfile(r2, r2, 0x0, 0x8000fffffffe)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x7ff)
fallocate(r4, 0x0, 0x0, 0x5f5)
lseek(r1, 0x0, 0x4)

04:04:52 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
r3 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x80800)
ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000140)={'bpq0\x00', 0x4})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

04:04:52 executing program 5:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[]}}, 0x0)
fstat(r0, &(0x7f0000000100))
socket(0x5, 0xf, 0x9a24)

04:04:52 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x208140, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

04:04:52 executing program 3:
r0 = getpgrp(0x0)
r1 = gettid()
rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8)
rt_tgsigqueueinfo(r0, r1, 0x12, &(0x7f00003efff0))
tkill(r1, 0x30)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0)
read(r2, &(0x7f0000950000)=""/128, 0x80)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0)
setsockopt$inet_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000040)={0x2}, 0x4)

04:04:52 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockname$unix(r1, &(0x7f0000000200)=@abs, &(0x7f0000000000)=0x6e)
sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O\x00'/112], 0xb8}}, 0x0)
getsockopt$inet6_buf(r1, 0x29, 0x2f, &(0x7f0000000280)=""/158, &(0x7f0000000340)=0x9e)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000080)={0x4, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)

[  880.553270] SELinux:  policydb string length 1996488712 does not match expected length 8
04:04:52 executing program 3:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000001200)="5500000018007fafb72d1cb2a4a280930206000000a843096c2623692500080021001000c728f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8220000bf0cec6bab91d4b85a01016b8349", 0x55}], 0x1}, 0x0)
getsockname$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c)

04:04:52 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10)
r1 = socket(0xa, 0x1, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4a00080}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x160, r2, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffffffffffff}, @IPVS_CMD_ATTR_SERVICE={0x7c, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x9}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffffffffffffe}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipddp0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3624}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x10001}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x4000000}, 0x8004)
write(r0, 0x0, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x40000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='sh\x00', r3}, 0x10)

04:04:52 executing program 5:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x80000, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
fcntl$setlease(r0, 0x400, 0x2)

04:04:52 executing program 2:
clock_settime(0x0, &(0x7f0000000080))
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x4000)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)={0x1, 0x3, [@broadcast, @dev={[], 0x17}, @link_local]})
lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@random={'user.', '}\x00'}, &(0x7f0000000140)='proc\x00', 0x5, 0x1)

[  880.602341] binder: 4758:4766 got reply transaction with no transaction stack
[  880.627184] binder: 4758:4766 transaction failed 29201/-71, size 0-0 line 2921
04:04:52 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00')
sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x5c, r2, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x4}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xe3}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x29}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000140)=0x40, 0x4)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040), 0x10)
sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10)

04:04:52 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x0, [], [{0x3, 0x4379, 0xff, 0x0, 0x9, 0x81}, {0x6, 0x1, 0x332, 0x0, 0x9, 0x5}], [[], [], [], [], []]})
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r1, &(0x7f0000000080)="075858720f2aafcb7d7b837daf44816bd2b8dd447aa2718efe93071ddce05b00cf27eef190833f4a9eea807a62fd7f4622bf262ac8aaeac34908b71637d31b80397d842586737f436f604d853c293e73a29afa5166f2befe8e2d1e956ae968e81e25853cffa693ac4fe689470b1a443555a5375d38689582a8a49908898b6d3aef8b19e64a0f7782da8f160c3233986aa69bb7"}, 0x10)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x9, 0x70, 0x6, 0x0, 0x0}, 0x2e)
ioctl(r1, 0x9, &(0x7f0000000180)="cae3919618266c533cb958921fde44")
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r2, 0x0}, 0xffffff5f)

04:04:52 executing program 2:
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000040)=0xe8)
r1 = getegid()
chown(&(0x7f0000000000)='./file0\x00', r0, r1)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000dc9ff0)={0x2, 0x4e24, @broadcast}, 0xffffffffffffff34)
write$binfmt_elf32(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/2897], 0xb51)
sendto$inet(r2, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
sendto$inet(r2, &(0x7f0000000280), 0xfffffffffffffedd, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xf9a000)=nil, 0xf9a000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)

04:04:52 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
epoll_create1(0x0)
r2 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x80800)
ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000140)={'bpq0\x00', 0x4})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

04:04:52 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x100004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
read(r0, &(0x7f00000001c0)=""/13, 0xa)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='erspan0\x00', 0x10)
write$FUSE_INTERRUPT(r0, &(0x7f0000000140)={0x10}, 0xfffffd2a)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)

[  880.732723] binder: release 4758:4766 transaction 218 out, still active
[  880.739539] binder: undelivered TRANSACTION_COMPLETE
[  880.792115] binder: send failed reply for transaction 218, target dead
[  880.812634] binder: 4804:4806 ERROR: BC_REGISTER_LOOPER called without request
04:04:52 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0a20009bc070")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'vxcan1\x00', {0x2, 0x4e24, @empty}})
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
r2 = socket(0x10, 0x6, 0x1ff)
ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000040))
socket$inet_tcp(0x2, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

04:04:52 executing program 4:
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4000000004005)
mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1, 0x32, 0xffffffffffffffff, 0x59)
ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000))
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x80183, 0x0)
setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000080), 0x4)

04:04:52 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a})
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$KDMKTONE(r2, 0x4b30, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x40000000000000)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/snmp\x00')
write$selinux_create(r3, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x1c9)
mount(&(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
poll(&(0x7f0000000400), 0x0, 0x400007f)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_int(r4, 0x0, 0x0, &(0x7f0000000280), 0x4)
mlockall(0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r5)
mkdir(&(0x7f0000000580)='./control/file0\x00', 0x0)
mknod$loop(&(0x7f0000000040)='./control/file0\x00', 0x0, 0xffffffffffffffff)
getsockopt$bt_hci(r2, 0x0, 0x0, &(0x7f0000000440)=""/97, &(0x7f00000004c0)=0x61)
rmdir(&(0x7f0000000000)='./control\x00')
rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./control/file0\x00')
ioctl$RTC_AIE_OFF(r3, 0x7002)
r6 = socket(0x10, 0x802, 0x0)
write(r6, &(0x7f0000000300)="fc00000048000700ab092500090007000aab07ff010000000000369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00820000036c6c256f1a272f2e117c22ebc205214000000000008934d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1587c3b4100000000000000", 0xfc)
r7 = socket$nl_route(0x10, 0x3, 0x0)
io_setup(0x7, &(0x7f0000000040)=<r8=>0x0)
io_submit(r8, 0x1, &(0x7f0000001480)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000240)='1', 0x1}])
sendmsg$nl_route(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000442672"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r9 = socket(0x400000000000010, 0x8002000000003, 0x0)
write(r9, &(0x7f00000001c0)="200000001a000b09ffed0000005037d78367f1d2a5dd7a9b7a23304b80000800", 0x20)

04:04:52 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x7)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000340)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x284)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000040))
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000000c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000094056064bd000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000"], 0x90)
prctl$PR_SET_FP_MODE(0x2d, 0x2)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00')
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000400)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r3, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x401}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)

04:04:52 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
epoll_create1(0x0)
r2 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x80800)
ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000140)={'bpq0\x00', 0x4})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

[  880.812936] binder: 4804:4806 got reply transaction with no transaction stack
[  880.812944] binder: 4804:4806 transaction failed 29201/-71, size 0-0 line 2921
[  880.859506] binder: send failed reply for transaction 221 to 4804:4806
[  880.866938] binder: undelivered TRANSACTION_COMPLETE
[  880.873318] binder: undelivered TRANSACTION_ERROR: 29189
[  880.916571] binder: 4815:4822 ERROR: BC_REGISTER_LOOPER called without request
[  880.932604] binder: 4815:4822 got reply transaction with no transaction stack
[  880.940028] binder: 4815:4822 transaction failed 29201/-71, size 0-0 line 2921
04:04:52 executing program 4:
keyctl$reject(0xc, 0x0, 0xfffffffffffffdf9, 0x40000, 0x0)
r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x0, 0x0)
ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00')
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20002}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r1, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
getpid()

04:04:52 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
epoll_create1(0x0)
r2 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x80800)
ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000140)={'bpq0\x00', 0x4})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

[  880.972596] binder: release 4815:4822 transaction 224 out, still active
[  880.983446] binder: undelivered TRANSACTION_COMPLETE
[  880.995439] binder: send failed reply for transaction 224, target dead
04:04:52 executing program 4:
r0 = socket$inet(0x2, 0x2, 0x2200000088)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1004e20}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x8084, &(0x7f00000002c0)={0x2, 0x4e20}, 0x10)
connect(r0, &(0x7f00000000c0)=@x25={0x9, @remote={[], 0x2}}, 0x80)
r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000080))
sendto$inet(r0, &(0x7f0000000440)="dd", 0x1, 0x0, 0x0, 0x0)
recvfrom$inet(r0, 0x0, 0xffffffffffffff44, 0x0, 0x0, 0xfffffffffffffdd2)

04:04:52 executing program 2:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file1\x00', 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca)
fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
getgroups(0x2, &(0x7f00000001c0)=[<r2=>0xffffffffffffffff, 0xffffffffffffffff])
stat(&(0x7f0000000200)='./file1/file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
r4 = geteuid()
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@ipv4, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000300)=0xe8)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='fuseblk\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0bc64829baba478c5d8add3740", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,euid=', @ANYRESDEC=r3, @ANYBLOB=',measure,euid<', @ANYRESDEC=r4, @ANYBLOB=',uid<', @ANYRESDEC=r5, @ANYBLOB=',obj_role=security.ima\x00,\x00'])
link(&(0x7f0000000240)='./file0\x00', &(0x7f0000000040)='./file1/file0\x00')
fsetxattr$security_ima(r0, &(0x7f0000000340)='security.ima\x00', 0x0, 0x0, 0x0)

[  881.035216] binder: 4834:4837 ERROR: BC_REGISTER_LOOPER called without request
[  881.049668] binder: 4834:4837 got reply transaction with no transaction stack
04:04:53 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0xc219)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000000301ffff400000000000000000000000080015000000000055bd0163a9d15e08"], 0x24}}, 0x0)

04:04:53 executing program 3:
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x101403, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x6d, 0x2, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r0}, 0x1fd)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x1f, 0x2)
bpf$MAP_CREATE(0x2, &(0x7f0000000100)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x2}, 0x2c)

[  881.089755] binder: 4834:4837 transaction failed 29201/-71, size 0-0 line 2921
[  881.138229] binder: release 4834:4837 transaction 227 out, still active
[  881.150367] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  881.166122] binder: undelivered TRANSACTION_COMPLETE
[  881.166165] binder: send failed reply for transaction 227, target dead
[  881.297664] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
04:04:53 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0xfffffffffffffc83)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x101000, 0x10)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x5)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/enforce\x00', 0x80, 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000140))
io_setup(0x8008, &(0x7f00000000c0))
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = gettid()
r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$VT_GETMODE(r4, 0x5601, 0x0)
setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000340)={0x396, {{0x2, 0x4e20, @broadcast}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x15}}}}, 0x108)
ioctl$TIOCMGET(r2, 0x5415, &(0x7f00000001c0))
setsockopt$inet6_opts(r2, 0x29, 0x3e, &(0x7f0000000180)=@fragment={0x6c, 0x0, 0x4, 0x6, 0x0, 0xe5, 0x64}, 0x8)
wait4(0x0, 0x0, 0x80000000, 0x0)
times(&(0x7f0000000480))
socket$inet_udp(0x2, 0x2, 0x0)
fcntl$dupfd(r0, 0x406, r1)
ustat(0x9, &(0x7f0000000240))
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x2b)
ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000))
ptrace$cont(0x18, r3, 0x3, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0, r3})
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r3, 0x0, 0x0)

04:04:53 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x80800)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

04:04:53 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
prctl$PR_GET_TSC(0x19, &(0x7f0000000000))
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

04:04:53 executing program 2:
mkdirat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0)
open$dir(&(0x7f0000000540)='./bus\x00', 0x240, 0x10c)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00')
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x8000000004e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
socket$key(0xf, 0x3, 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x0, 0x0, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r2 = accept$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000440)=@fragment={0x0, 0x0, 0x0, 0x10001, 0x0, 0x800000000, 0x67}, 0x8)
accept$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14)
ioctl$VT_RELDISP(r2, 0x5605)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
memfd_create(&(0x7f0000000240)='\xb25\x17\x00', 0xbfffffffffffffff)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
open(&(0x7f0000000100)='./bus\x00', 0x2, 0x10)
ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000140))
ftruncate(r3, 0x7fff)
sendfile(r1, r1, 0x0, 0x8000fffffffd)

04:04:53 executing program 1:
socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0xfffffffffffffcfd)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x401)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
r2 = getpgrp(0x0)
ptrace$peek(0x3, r2, &(0x7f0000000000))
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

04:04:53 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
syslog(0xd, &(0x7f0000000080)=""/204, 0xcc)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c)

04:04:53 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00')
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000040)={0x30}, 0x30)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x0, [], [{0x7, 0x1c0, 0x9, 0x7fffffff, 0x101}, {0x2, 0x1, 0x2808, 0x7, 0xffffffff, 0x1}], [[], [], [], [], []]})
epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0)

04:04:53 executing program 4:
clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x800)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000), 0xffffffffffffff0f, 0x0, 0x0})

04:04:53 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
write$cgroup_type(r1, &(0x7f0000000240)='threaded\x00', 0xf96d)
fallocate(r1, 0x3, 0x5fff, 0x401)

[  881.653648] binder: 4871:4888 ERROR: BC_REGISTER_LOOPER called without request
[  881.683849] binder: 4871:4888 got reply transaction with no transaction stack
04:04:53 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

[  881.702561] binder: 4871:4888 transaction failed 29201/-71, size 0-0 line 2921
[  881.720007] binder: release 4871:4888 transaction 230 out, still active
[  881.733683] binder: undelivered TRANSACTION_COMPLETE
04:04:53 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040))
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
rt_sigsuspend(&(0x7f0000000140)={0x10001}, 0x8)
write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0xffffff9b)
write(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0), 0x4)
ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000000)={0x1, {{0x2, 0x0, @multicast2}}}, 0x83)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x30, &(0x7f0000678f70)={0x1, {{0x2, 0x0, @multicast2}}}, 0x33f7)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], [], [], [], [], []]}, 0x9c1)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80000000}, 0x1c)

04:04:53 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

04:04:53 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu\x00', 0x200002, 0x0)
r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002640)='/selinux/enforce\x00', 0x4000, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000026c0)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000002880)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x30014000}, 0xc, &(0x7f0000002840)={&(0x7f0000000580)=ANY=[@ANYBLOB="380100001781774034c71fb2a619a695a0e6740de71cb6a368b27d0eed6ce1d408fefb37b9474741fbe39313143799284bb5960571e29c59de8f6cb75d86442d3f39880ee02fedd772156cb333059a16ca12647644dd1200aed99cec88934b05fb26262be2f905deae1ad01c62a61d3cd05a5e21de78e5603589b4de8611f2df527474ed9a0805e2ae9d596a932dd231b357636da4d388023b4d4d1d", @ANYRES16=r3, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x40000}, 0x4)
fchdir(r1)
r4 = creat(&(0x7f0000000340)='./bus\x00', 0x0)
write$cgroup_type(r4, &(0x7f0000000000)='threaded\x00', 0x1000000e8)
fcntl$setstatus(r4, 0x4, 0x46c00)
io_setup(0x5, &(0x7f0000000140)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x377140be6b5ef555}])
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x2000, 0x0)

04:04:53 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0xc0000)
getsockopt$inet6_int(r2, 0x29, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, 0x0, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000000c0)=0x2, 0x4)

[  881.744729] binder: 4897:4901 unknown command 1635086435
[  881.744739] binder: 4897:4901 ioctl c0306201 20000080 returned -22
[  881.769125] binder: BINDER_SET_CONTEXT_MGR already set
[  881.769135] binder: 4905:4909 ioctl 40046207 0 returned -16
04:04:53 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgrou\x13\x00\x00\x00r\'\xe0\xafz1\x00\xfb', 0x200002, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x60000, 0x0)
timerfd_gettime(r1, &(0x7f0000000080))
fchdir(r0)
r2 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x120)
getdents64(r2, 0x0, 0x0)

04:04:53 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

[  881.769688] binder: 4905:4909 ERROR: BC_REGISTER_LOOPER called without request
[  881.769789] binder_alloc: 4871: binder_alloc_buf, no vma
[  881.769815] binder: 4905:4909 transaction failed 29189/-3, size 0-0 line 3136
[  881.769896] binder: 4905:4909 got reply transaction with no transaction stack
[  881.769902] binder: 4905:4909 transaction failed 29201/-71, size 0-0 line 2921
[  881.843953] binder: BINDER_SET_CONTEXT_MGR already set
[  881.843964] binder: 4913:4918 ioctl 40046207 0 returned -16
[  881.845012] binder: 4913:4918 ERROR: BC_REGISTER_LOOPER called without request
04:04:53 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x90400, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1a, 0x8, '9P2000.L'}, 0x15)

04:04:53 executing program 5:
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{@in6=@ipv4}, 0x0, @in=@local}}, &(0x7f0000000280)=0xe8)
setfsuid(r0)
r1 = syz_open_dev$evdev(&(0x7f0000fe5fee)='/dev/input/event#\x00', 0x2, 0x0)
ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000040)=[0xfffffffffffffffa])
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000080)={{{@in=@remote, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000000)=0xe8)
setfsuid(r2)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000340)={0x7, &(0x7f0000000300)=[{0xfffffffffffffffa, 0x4, 0xfffffffffffffffe, 0x7}, {0xd9bc, 0x0, 0x1}, {0x6, 0x9, 0x9, 0x80000001}, {0x0, 0x8001, 0x10001, 0x80000001}, {0x6b2a, 0x800, 0x9, 0x8}, {0xff, 0x9, 0x1ff, 0xfffffffffffffff9}, {0x8, 0x0, 0xffffffffffffffff, 0x2}]}, 0x10)
fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000400))

04:04:53 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x6, 0x0, 0xfffffffffffffffd})
io_setup(0x4, &(0x7f0000000000)=<r1=>0x0)
r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
r3 = eventfd(0x64c)
r4 = eventfd(0x3)
io_submit(r1, 0x3, &(0x7f0000000380)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3000, r0, &(0x7f0000000100)="bb6df55015db0c0848c4193ec64fe64077acac49d9b1bbf36142f8802776dfa82373ecbedee414709d6731ab724e3a2a8b7c852b021e53720191d9e92f781bd1b908885e1bed05e9172b2bc672aaa7c2eeeb4b42610f5e9d0d6ae68865ab4c29d04d24cad774", 0x66, 0xfffffffffffffffb, 0x0, 0x3, r2}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x5, r0, &(0x7f00000001c0)="a0db7328ca7399280b5b842ffb5639f42d5f51b1392953c522d38d7ff80bd58087bd140068708a3bfd7237f57b13dc47671d419a33712a0645ba6d27a3154bbb0df06fe1e3f8266d2a4c9cb0eb5864bbd2adf225a1ca770c316cd9f7048b65878d0677d7ffc24a44b18fcb94bd73d6cc9c37d12c3c5fc71f5a371c4b6dca4229d7c9f59c946be53edd301c63e087fd4478e88bc1e024a5ce8c48603cae7e90cbfa8799becce55e5b8d10fa22874c071352eab7c7f9c39e092142cdc4088d24f4d29bf34b20f52fb6e6dbc17ac2e92254401229bf6c47827ad7c05c1422bfa38ac8541da4012d74d72a35", 0xea, 0x8, 0x0, 0x2, r3}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x400, r0, &(0x7f0000000300)="a217258708544027bc21aa40dd9c2b44be668bcc97bab67d8270db578bc80c3ebffdaedf6ddc67b4fa7d3c", 0x2b, 0x100000001, 0x0, 0x0, r4}])

04:04:53 executing program 2:
clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(r0, 0x0, 0x0, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3d)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x8fa, &(0x7f0000000140)=""/220)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x1})
utime(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8, 0xfffffffffffffff9})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x0, 0x0)

04:04:53 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x80800)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

04:04:53 executing program 2:
r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0)
ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x34, 0x0, 0x0, 0xff000000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195}, 0x48)

[  881.845128] binder_alloc: 4871: binder_alloc_buf, no vma
[  881.845149] binder: 4913:4918 transaction failed 29189/-3, size 0-0 line 3136
[  881.845235] binder: 4913:4918 got reply transaction with no transaction stack
[  881.845242] binder: 4913:4918 transaction failed 29201/-71, size 0-0 line 2921
[  881.935975] binder: BINDER_SET_CONTEXT_MGR already set
[  881.935985] binder: 4931:4932 ioctl 40046207 0 returned -16
[  881.938501] binder: 4931:4932 ERROR: BC_REGISTER_LOOPER called without request
[  881.938618] binder_alloc: 4871: binder_alloc_buf, no vma
[  881.938639] binder: 4931:4932 transaction failed 29189/-3, size 0-0 line 3136
[  881.939408] binder: 4931:4932 got reply transaction with no transaction stack
[  881.939422] binder: 4931:4932 transaction failed 29201/-71, size 0-0 line 2921
[  882.055097] binder: BINDER_SET_CONTEXT_MGR already set
[  882.055106] binder: 4942:4947 ioctl 40046207 0 returned -16
[  882.055662] binder: 4942:4947 ERROR: BC_REGISTER_LOOPER called without request
[  882.055769] binder_alloc: 4871: binder_alloc_buf, no vma
[  882.055788] binder: 4942:4947 transaction failed 29189/-3, size 0-0 line 3136
[  882.055882] binder: 4942:4947 got reply transaction with no transaction stack
[  882.055890] binder: 4942:4947 transaction failed 29201/-71, size 0-0 line 2921
[  882.231687] binder: undelivered TRANSACTION_ERROR: 29189
[  882.280693] binder: undelivered TRANSACTION_ERROR: 29189
[  882.320832] binder: undelivered TRANSACTION_ERROR: 29189
[  882.360783] binder: undelivered TRANSACTION_ERROR: 29189
[  882.400717] binder: send failed reply for transaction 230, target dead
04:04:54 executing program 3:
mkdir(&(0x7f00000012c0)='./file0\x00', 0x0)
clone(0x0, &(0x7f0000001400), &(0x7f0000001180), &(0x7f00000011c0), &(0x7f0000000080))
mount(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f00000012c0))
r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000)
write$FUSE_LSEEK(r0, &(0x7f0000000080)={0x18, 0x57bb0db76bb8129d, 0x7, {0x2bc00}}, 0x18)
open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
getdents64(0xffffffffffffffff, &(0x7f00000002c0)=""/4096, 0x1000)
ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000100))
lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001440))
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001300)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)
wait4(0x0, &(0x7f0000001640), 0x0, &(0x7f0000001680))
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000440)={{}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f00000005c0)=0xe8)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f00000001c0), &(0x7f0000000280)='syzkaller\x00', 0x0, 0x92, &(0x7f00000002c0)=""/146}, 0x48)
dup2(0xffffffffffffffff, 0xffffffffffffff9c)
seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x58fe4}]})
syz_execute_func(&(0x7f0000000540)="428055a0376969ef69dc3641ffaa32233333c4c2958e0941a30f7f7f3766460f3828523044c19086d962788f35c935c97d197a0779fbc463fd7998b400ba000079aaff43d0e1460f0da11b000000010d64ac1e5d31a314b706e205987b7f")

04:04:54 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x80800)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

04:04:54 executing program 5:
r0 = socket$key(0xf, 0x3, 0x2)
sigaltstack(&(0x7f0000b59000/0x1000)=nil, &(0x7f0000000040))
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
mlock(&(0x7f0000b86000/0x2000)=nil, 0x2000)
munlock(&(0x7f0000b59000/0x2000)=nil, 0x2000)
mremap(&(0x7f0000b5a000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000b5a000/0x3000)=nil)

04:04:54 executing program 2:
clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(r1, 0x0, 0x0, 0x0)
tkill(r0, 0x17)
tkill(r1, 0x2c)
pselect6(0x40, &(0x7f0000000000)={0x6, 0x8000, 0x5, 0x3, 0x171c00000000000, 0x7fffffff, 0x1, 0x1ff}, &(0x7f0000000040)={0x8001, 0x7, 0xe60, 0x7b02c1e3, 0x2, 0x80000000, 0x9, 0x1000}, &(0x7f0000000080)={0x5, 0xfff, 0x400, 0x1, 0x9, 0x101, 0x9, 0x2}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={0x9}, 0x8})

04:04:54 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x0)
r3 = dup3(r2, r0, 0x0)
ioctl$TCXONC(r3, 0x540a, 0x20000000000001)

04:04:54 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0xfd86)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
dup3(r0, r0, 0x80000)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

[  882.650464] binder: 4961:4964 ERROR: BC_REGISTER_LOOPER called without request
[  882.661925] binder: 4961:4964 got reply transaction with no transaction stack
[  882.670307] binder: 4961:4964 transaction failed 29201/-71, size 0-0 line 2921
[  882.682049] binder: release 4961:4964 transaction 241 out, still active
[  882.689383] binder: undelivered TRANSACTION_COMPLETE
04:04:54 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x80800)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

04:04:54 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="73656375726974790900000000000000000000000000010000000000000000000e0000230400000048030000f9426a0ca2b7f327e42800002801"], 0x1)
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
ioprio_get$uid(0x3, r2)
tkill(r1, 0x2f)
ptrace$cont(0x18, r1, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0))
ptrace$cont(0x7, r1, 0x0, 0x0)
prlimit64(r1, 0x0, 0x0, &(0x7f00000000c0))

04:04:54 executing program 5:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
r0 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$set_timeout(0xf, r0, 0x5)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x200200, 0x0)
openat$cgroup_ro(r1, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x200002, 0x0)
mount(&(0x7f0000000000)=@sr0='/dev/sr0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}<B\xfc.\x9cia\x14\xa6\xf8\x88\xf0\xda\x85\'v\x83\xcf\xc1\xc4\xd2\xbfq\xc2U\xa3\x13Md\xcc?\xed\x8e\x97y\x8d\xeb\x861\xcb\xf7h,\x9f\xa2\xed\x03\x14e\xaa\x19\x1d\xf9\"\xf7d)|\xba\"\xa8I\x9d\x17\x7fI\xfb\xa9@\xf5[\xbc\x8br?\xd3t\xf1\xfe\xd7\x8c\x8a\xee\xc6\x81\x1d\x9bXyHs\x87\xd5e\x94\xa1L%\x88\'M\xe8O\xa2v\x100+?\xb5Ar\xa8\xc9\x10\xa0~|v\xeaFZ\xa6\x84\x02', 0x4, &(0x7f0000000080))
rt_sigsuspend(&(0x7f00000002c0)={0x4}, 0x8)
mount(&(0x7f0000000540), &(0x7f0000001040)='./file0\x00', &(0x7f0000000140)='sysfs\x00', 0x803, &(0x7f0000000580))
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0)

[  882.706600] binder: send failed reply for transaction 241, target dead
[  882.739570] binder: 4978:4979 ERROR: BC_REGISTER_LOOPER called without request
[  882.778279] binder: 4978:4979 got reply transaction with no transaction stack
[  882.803704] binder: 4978:4979 transaction failed 29201/-71, size 0-0 line 2921
[  882.821803] binder: release 4978:4979 transaction 244 out, still active
04:04:54 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x80800)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

[  882.832484] binder: undelivered TRANSACTION_COMPLETE
[  882.852546] binder: send failed reply for transaction 244, target dead
04:04:54 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x80800)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

[  882.875338] binder: 4994:4995 ERROR: BC_REGISTER_LOOPER called without request
[  882.876076] binder_alloc: 4994: binder_alloc_buf, no vma
[  882.876097] binder: 4994:4995 transaction failed 29189/-3, size 0-0 line 3136
04:04:54 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x80800)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

[  882.876592] binder: 4994:4995 got reply transaction with no transaction stack
[  882.876600] binder: 4994:4995 transaction failed 29201/-71, size 0-0 line 2921
[  882.936205] binder: BINDER_SET_CONTEXT_MGR already set
[  882.936214] binder: 4996:4998 ioctl 40046207 0 returned -16
[  882.936921] binder: 4996:4998 ERROR: BC_REGISTER_LOOPER called without request
[  882.937224] binder_alloc: 4994: binder_alloc_buf, no vma
[  882.937251] binder: 4996:4998 transaction failed 29189/-3, size 0-0 line 3136
[  882.938482] binder: 4996:4998 got reply transaction with no transaction stack
[  882.938491] binder: 4996:4998 transaction failed 29201/-71, size 0-0 line 2921
[  882.995827] binder: BINDER_SET_CONTEXT_MGR already set
[  882.995837] binder: 5000:5001 ioctl 40046207 0 returned -16
[  882.998408] binder: 5000:5001 ERROR: BC_REGISTER_LOOPER called without request
[  882.998835] binder_alloc: 4994: binder_alloc_buf, no vma
[  882.998855] binder: 5000:5001 transaction failed 29189/-3, size 0-0 line 3136
[  882.999693] binder: 5000:5001 got reply transaction with no transaction stack
[  882.999702] binder: 5000:5001 transaction failed 29201/-71, size 0-0 line 2921
[  883.220796] binder: undelivered TRANSACTION_ERROR: 29189
[  883.260634] binder: undelivered TRANSACTION_ERROR: 29189
[  883.300665] binder: undelivered TRANSACTION_ERROR: 29189
04:04:55 executing program 3:
setitimer(0x2, &(0x7f000000bfe0)={{}, {0x77359400}}, &(0x7f0000000000))
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x200000, 0x0)
setitimer(0x1, &(0x7f0000034000)={{}, {0x0, 0x7530}}, &(0x7f0000000080))

04:04:55 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x80800)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

04:04:55 executing program 1:
r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x80000, 0x0)
getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000040)={'nat\x00'}, &(0x7f0000000100)=0x78)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setlease(r2, 0x400, 0x0)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000140)={0x2006})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

[  883.539298] binder: 5007:5008 ERROR: BC_REGISTER_LOOPER called without request
[  883.547530] binder: 5007:5008 transaction failed 29189/-22, size 0-0 line 3013
[  883.555997] binder: 5007:5008 got reply transaction with no transaction stack
[  883.568510] binder: 5007:5008 transaction failed 29201/-71, size 0-0 line 2921
[  883.578702] binder: undelivered TRANSACTION_ERROR: 29189
04:04:57 executing program 2:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x5)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x7d})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x0, 0x0)

04:04:57 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto(r0, &(0x7f0000000000)="861c3d5ae9138ee21f8011088c201244bab039bde000f90c9f3f0b9575a52ed5e92cbdbcebee86acd31b7056b262a128293b3fc12fc7c952f2b2c251c2008248e1419a1b6b2fc6b6e44764", 0x4b, 0x240008d4, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x4, @local, 'bcsh0\x00'}}, 0x80)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x40000, 0x0)

04:04:57 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x80800)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

04:04:57 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x10)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'})
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000280)={{0x2, 0x0, @loopback}, {0x20000000304, @broadcast}, 0x3, {0x2, 0x0, @broadcast}, '\x19\xbc\xce\xc9\xa7)D\x17*\xf0\x9f \x00'})

[  885.682970] binder: 5021:5026 ERROR: BC_REGISTER_LOOPER called without request
[  885.701846] binder: 5021:5026 transaction failed 29189/-22, size 0-0 line 3013
[  885.716897] binder: 5021:5026 got reply transaction with no transaction stack
04:04:57 executing program 4:
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$TCSBRK(r0, 0x5409, 0x0)
chdir(&(0x7f0000000080)='./file0\x00')
r1 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0xfffffffffffffffc)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x4000101000008912, &(0x7f0000000040)="0adc060000003f319bc070")
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000c80)='./file0\x00', 0x0, 0x0)
fcntl$setpipe(r1, 0x407, 0x5)

04:04:57 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
open(&(0x7f0000000000)='./file0\x00', 0x200, 0x10)

04:04:57 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x1, 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xa7fc, 0x80)
ioctl$int_out(r0, 0x0, 0x0)

04:04:57 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
lsetxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x3)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000001c0)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
preadv(r0, &(0x7f0000000280), 0x139c, 0x10000)

04:04:57 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x80800)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

04:04:57 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
prctl$PR_GET_FP_MODE(0x2e)
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x20000806, &(0x7f0000001180)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10)
sendto$inet(r1, &(0x7f00000003c0), 0xed5f0dd4, 0x0, 0x0, 0x184)
getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000040)=0x1e)
r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
write$P9_RLERRORu(r2, &(0x7f0000000140)={0x1e, 0x7, 0x2, {{0x11, 'md5sumbdev%vmnet0'}, 0x6a}}, 0x1e)
shutdown(r1, 0x400000000000001)

[  885.729994] binder: 5021:5026 transaction failed 29201/-71, size 0-0 line 2921
[  885.752394] binder: undelivered TRANSACTION_ERROR: 29189
04:04:57 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0xa, &(0x7f0000000040)="0adc4ea313b132bb661a2f")
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
r2 = openat$random(0xffffffffffffff9c, 0x0, 0x511000, 0x0)
r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
r4 = getpgrp(0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, 0x0, 0x2000)
getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x0, 0x0)
fsetxattr$security_evm(r2, 0x0, 0x0, 0x39e, 0x1)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0xfffffffffffffde6)
dup3(r5, r1, 0x80000)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
stat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getgid()
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r4, 0x20, &(0x7f00000000c0)=""/238)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendto$inet(r1, &(0x7f00000000c0), 0xfffffffffffffece, 0x1, 0x0, 0xffffffffffffff28)
setsockopt$inet_tcp_int(r1, 0x6, 0xc, &(0x7f00000001c0)=0x5ae67028, 0x4)

04:04:57 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r2 = open(0x0, 0x0, 0x0)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000000)={0x0, 0x1000, 0x77})
ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0))
write$cgroup_type(r1, &(0x7f0000000340)='threaded\x00', 0xffffffc5)
lstat(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000140)=0xe8)
lstat(&(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
stat(&(0x7f0000000480)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
r7 = geteuid()
r8 = getegid()
setxattr$system_posix_acl(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {0x1, 0x4}, [{0x2, 0x2, r3}, {0x2, 0x1, r4}, {0x2, 0x7, r5}, {0x2, 0x0, r6}, {0x2, 0x5, r7}], {}, [{0x8, 0x0, r8}], {0x10, 0x1}}, 0x54, 0x1)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)

04:04:57 executing program 3:
socket$inet_udplite(0x2, 0x2, 0x88)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_tables_targets\x00')
openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_PKEY_QUERY(0x18, r0, 0x0, &(0x7f0000000080)='net/ip6_tables_targets\x00', &(0x7f0000000180))
pselect6(0x40, &(0x7f00000000c0)={0x64}, 0x0, 0x0, 0x0, 0x0)

[  885.798536] binder: 5045:5046 ERROR: BC_REGISTER_LOOPER called without request
[  885.832703] binder: 5045:5046 transaction failed 29189/-22, size 0-0 line 3013
04:04:57 executing program 2:
r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="9a61c61a1b7781f004e873cddcb887d71ee8b6cb985462e0cedc272e0d8d83d1d62c807e10786665b2c5769b9622c78aeb4260077add4bcd56cf3e5110216acdbabe2be7f1210e2f0040362284cb593bf9093489d3a1bcce6a9ab2abf7c26f3cb10e4c8db072056a983a00039dc53f2ca28bebb1d43cd1ebcd9b071e4fac3ea6f9fefde32b", 0x85, 0xfffffffffffffffb)
r1 = add_key$user(&(0x7f0000001580)='user\x00', &(0x7f00000015c0)={'syz', 0x0}, &(0x7f0000001600)="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", 0x1000, 0xffffffffffffffff)
keyctl$instantiate_iov(0x14, r0, &(0x7f0000001500)=[{&(0x7f0000000200)="0c9d5131d955caa03e643e", 0xb}, {&(0x7f0000000240)="44182281dd0ee048d34ab4ee227c19bbb5006c659b77f41f4b9c6ddd0353a05404ee7997f89ba363e53d2359fc9fcae05fcc704611cfaac906b8e11d09613857ed93f3ac6badc48a3933452269e1515c9c1797481796aaa1d221ce7c4f38709fd7cf7174037ee93387cf9eee2711e8", 0x6f}, {&(0x7f00000002c0)="4be33019ec0faf31b332273aafba947017b978c76e7284a8fb263978ed1039900139df9d00750c20e91dbb9c5f347e6eac22b403b73b428120fc6d971f7aa1af60f5fbe2a8dc521bf49a74d57242902626cef4396ac82af79bcdf59750768293dbfe621d8006f8c3e659cb203e7c38a13755c34b5ca9f61010b28f3843de9cd1225dd8f599db4892383b0feb0ec605b60c5002862dc3d7d56dff76b4e9b40f118702a3bb6eb126a292323548404ece4bae151850395446c489fe6ab495e9ee65eff61e", 0xc3}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="069522afe16c4a5c9067d01329eeafc0ccaf1cf2d9f4f8a65390d0a1f1fabda4ff1cb971006cb25ca73e75060439403a4877c1cc2925409d4137378253a82d302ff9d59b6d49b1e8b28729073dc8119b63bb2c33d1b49f419eea1433eec0488f8fa1bbdd6f1e2934da044a2dfd946a5d2c866cb7656bb5df1ae91def4f5937cb57531b0b95f47bcd3eeb04d8fc95fa342770492cd6b403497922bfbb00b618a753c8689099c3602835b93cd151e2332030bb40ab79a30d253547741abb14be9fe28444d9d6d2de", 0xc7}, {&(0x7f00000014c0)="dd036d3255c5be2641d4a67d0237b4", 0xf}], 0x6, r1)
r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0)
getpeername$inet(r2, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10)
syz_genetlink_get_family_id$tipc(0x0)
close(r2)

04:04:57 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, 0xffffffffffffffff, 0x0)
r1 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x80800)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

[  885.842778] binder: 5045:5046 got reply transaction with no transaction stack
[  885.860405] binder: 5045:5046 transaction failed 29201/-71, size 0-0 line 2921
[  885.888601] binder: undelivered TRANSACTION_ERROR: 29189
04:04:57 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000005c0)="0adc1f123c123f319bc070")
socketpair(0xa, 0x7, 0x4, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000800}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x12c, r2, 0x404, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x27700000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffffffffffe}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3f}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4000}, 0x4008050)
setrlimit(0xd, &(0x7f0000000040)={0x6, 0x914})

04:04:57 executing program 5:
r0 = socket$inet6(0x10, 0x8000009, 0x1f)
prctl$PR_CAPBSET_READ(0x17, 0x1a)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x242, &(0x7f0000000200), 0x1}, 0x0)
accept(r0, &(0x7f0000000000)=@nfc_llcp, &(0x7f0000000180)=0x80)
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0))
socket$inet(0x2, 0x7, 0x4)

[  885.927269] binder: 5065:5067 transaction failed 29189/-22, size 0-0 line 3013
[  885.988317] binder: undelivered TRANSACTION_ERROR: 29189
04:04:57 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40000, 0x0)
ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000040)={0x3, 0x81})
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e21, @local}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

04:04:57 executing program 4:
r0 = socket$inet(0x10, 0x2, 0xc)
sendmsg(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000010207041dfffd946fa2830020200a0009000100001d85680c1baba20400f77e", 0x24}], 0x1}, 0x0)
getsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000000)=""/55, &(0x7f0000000680)=0x37)
recvmsg(r0, &(0x7f0000000600)={&(0x7f0000000080)=@generic, 0x80, &(0x7f0000000540)=[{&(0x7f0000000100)=""/201, 0xc9}, {&(0x7f0000000200)=""/25, 0x19}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000000280)=""/219, 0xdb}, {&(0x7f0000000380)=""/212, 0xd4}, {&(0x7f0000000480)=""/146, 0x92}], 0x6, &(0x7f00000005c0)=""/9, 0x9}, 0x0)

04:04:57 executing program 2:
socketpair(0x15, 0x3, 0x8, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000140)={'filter\x00', 0x26, "1b933a918b4b7de1f4f984027563abe0e6a869da1c11cb673fafd88620676a329a6c6f48756b"}, &(0x7f00000001c0)=0x4a)
r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000300)='/dev/keychord\x00', 0x5, 0x0)
write$eventfd(r1, &(0x7f0000000280)=0x20000100000001, 0x8)
write$binfmt_aout(r1, 0x0, 0x0)
ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0x2, 0xffff, 0xff, 0x7, 0xa, 0x80000000, 0xf0f7, 0x2, 0x81, 0x2})
fstat(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setfsgid(r2)
write$eventfd(r1, &(0x7f0000000000)=0x100000001, 0xb4)
fchmod(r1, 0x5)

04:04:57 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, 0xffffffffffffffff, 0x0)
r1 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x80800)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

04:04:57 executing program 3:
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x84800)
getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040), 0x10)
ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000080)=0xb2)
fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
r3 = getgid()
fchown(r0, r2, r3)
openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/validatetrans\x00', 0x1, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000180)={0x0, 0xf90}, 0x8)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x70)
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000001c0)=0x2)
ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000200))
ioctl$TIOCGPTPEER(r1, 0x5441, 0x5a1)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
recvmmsg(r1, &(0x7f0000003000)=[{{&(0x7f0000000240)=@in={0x2, 0x0, @local}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/138, 0x8a}, {&(0x7f0000000380)=""/80, 0x50}, {&(0x7f0000000400)=""/157, 0x9d}], 0x3, &(0x7f0000000500)=""/2, 0x2}, 0x7}, {{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000001a40)=[{&(0x7f00000005c0)=""/19, 0x13}, {&(0x7f0000000600)=""/26, 0x1a}, {&(0x7f0000000640)=""/34, 0x22}, {&(0x7f0000000680)=""/32, 0x20}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/75, 0x4b}, {&(0x7f0000001740)=""/1, 0x1}, {&(0x7f0000001780)=""/200, 0xc8}, {&(0x7f0000001880)=""/220, 0xdc}, {&(0x7f0000001980)=""/142, 0x8e}], 0xa, &(0x7f0000001b00)=""/178, 0xb2}, 0x800}, {{&(0x7f0000001bc0)=@hci, 0x80, &(0x7f0000002080)=[{&(0x7f0000001c40)=""/246, 0xf6}, {&(0x7f0000001d40)=""/147, 0x93}, {&(0x7f0000001e00)=""/51, 0x33}, {&(0x7f0000001e40)=""/112, 0x70}, {&(0x7f0000001ec0)=""/99, 0x63}, {&(0x7f0000001f40)=""/203, 0xcb}, {&(0x7f0000002040)}], 0x7, &(0x7f0000002100)=""/87, 0x57}, 0xb2}, {{&(0x7f0000002180)=@alg, 0x80, &(0x7f0000002740)=[{&(0x7f0000002200)=""/233, 0xe9}, {&(0x7f0000002300)=""/216, 0xd8}, {&(0x7f0000002400)=""/176, 0xb0}, {&(0x7f00000024c0)=""/20, 0x14}, {&(0x7f0000002500)=""/34, 0x22}, {&(0x7f0000002540)=""/61, 0x3d}, {&(0x7f0000002580)=""/222, 0xde}, {&(0x7f0000002680)=""/121, 0x79}, {&(0x7f0000002700)=""/60, 0x3c}], 0x9, &(0x7f0000002800)=""/68, 0x44}}, {{&(0x7f0000002880)=@caif=@dgm, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002900)=""/245, 0xf5}, {&(0x7f0000002a00)=""/198, 0xc6}, {&(0x7f0000002b00)=""/95, 0x5f}, {&(0x7f0000002b80)=""/145, 0x91}, {&(0x7f0000002c40)=""/253, 0xfd}, {&(0x7f0000002d40)=""/111, 0x6f}, {&(0x7f0000002dc0)=""/247, 0xf7}], 0x7, &(0x7f0000002f40)=""/168, 0xa8}, 0x5}], 0x5, 0x21, &(0x7f0000003140)={0x77359400})
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000003180)=""/76)
r4 = dup(r1)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000003200)=0x9, 0x4)
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000003240)=0x6000)
ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000003280)=0x20000)
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1)
ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f00000032c0))
getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000003300), &(0x7f0000003340)=0x10)
ioctl$TCSETAF(r4, 0x5408, &(0x7f0000003380)={0x6, 0xffffffff, 0xc2, 0x101, 0x14, 0x80, 0x80000000, 0x0, 0xfffffffffffffff7, 0x8})
prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f00000033c0))
r5 = getpgrp(0x0)
fcntl$setown(r1, 0x8, r5)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000003400)={'ipddp0\x00', 0x1c00})
getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000003440)={{{@in=@loopback}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@mcast2}}, &(0x7f0000003540)=0xe8)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000004640)={r0, 0x10, &(0x7f0000004600)={&(0x7f0000004580)=""/120, 0x78, <r6=>0xffffffffffffffff}}, 0x10)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000046c0)={r4, 0x10, &(0x7f0000004680)={&(0x7f0000003580)=""/4096, 0x1000, r6}}, 0x10)

04:04:57 executing program 5:
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x5206, r0, 0x5, 0x0)
tkill(r0, 0x1000000000031)
pselect6(0x40, &(0x7f0000000000)={0x400}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0})
ptrace$cont(0x18, r0, 0x0, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x410440, 0xa4)
ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000140)=0x40000000000000)
getrlimit(0xa, &(0x7f0000000040))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x146})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000200)=0x1)
creat(&(0x7f0000000180)='./file0\x00', 0x20)
ptrace$cont(0x1f, r0, 0x0, 0x0)

04:04:57 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ptmx\x00', 0x0, 0x0)
read(r0, &(0x7f0000000000)=""/11, 0x32c)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = dup2(r1, r1)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64)
clone(0x2103001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f00000003c0), 0x4)
r3 = dup2(r0, r2)
ioctl$BLKTRACESETUP(r3, 0xc0481273, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f00000000c0)=0x12, 0x0)

04:04:57 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
clone(0x404001bfff, 0x0, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
io_setup(0x1c9eb146, &(0x7f0000000000)=<r1=>0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x8800, 0xa)
r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001080)='/selinux/enforce\x00', 0x501000, 0x0)
io_cancel(r1, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x7, r2, &(0x7f0000000080)="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", 0x1000, 0x7, 0x0, 0x2, r3}, &(0x7f0000001100))
tkill(r0, 0x8000000000000011)
wait4(0x0, 0x0, 0x0, 0x0)

04:04:58 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = getpid()
rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0))
ptrace(0x12, r1)
ptrace$getregset(0x4204, r1, 0x202, &(0x7f0000000200)={&(0x7f0000001140)=""/4096, 0x1000})

04:04:58 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, 0xffffffffffffffff, 0x0)
r1 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x80800)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

[  886.090992] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'.
[  886.114757] binder: 5093:5102 transaction failed 29189/-22, size 0-0 line 3013
[  886.115105] binder: undelivered TRANSACTION_ERROR: 29189
04:04:58 executing program 0:
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r0, 0x0)
r1 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x80800)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

[  886.179130] binder: 5111:5117 transaction failed 29189/-22, size 0-0 line 3013
04:04:58 executing program 0:
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r0, 0x0)
r1 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x80800)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

[  886.179506] binder: undelivered TRANSACTION_ERROR: 29189
04:04:58 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x13a)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='cpuset\x00')
openat$cgroup_type(r2, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

04:04:58 executing program 4:
mkdir(&(0x7f0000000080)='./control\x00', 0x0)
r0 = open(&(0x7f0000000600)='./control\x00', 0x40000000000000, 0x0)
open(&(0x7f0000000040)='./control\x00', 0x0, 0xe4)
prctl$PR_SET_SECUREBITS(0x1c, 0x24)
mknodat(r0, &(0x7f0000000000)='./control\x00', 0x103c, 0x0)
faccessat(r0, &(0x7f000003fff6)='./control\x00', 0x0, 0x0)

04:04:58 executing program 0:
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r0, 0x0)
r1 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x80800)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

04:04:58 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff9c}, [@ldst={0x3fd}]}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00'/248}, 0x48)
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000004c0)=0xe8)
r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/status\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x14, 0xb, &(0x7f0000000200)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x47a, 0x0, 0x0, 0x0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x9f}, @ldst={0x1, 0x2, 0x0, 0x2, 0xb, 0x50, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, @ldst={0x0, 0x1, 0x6, 0x1, 0x0, 0x10, 0xffffffffffffffff}, @map={0x18, 0x4, 0x1, 0x0, r0}, @ldst={0x0, 0x3, 0x1, 0x7, 0xd, 0x1, 0x10}], &(0x7f0000000280)='syzkaller\x00', 0x7ff, 0xe4, &(0x7f00000002c0)=""/228, 0x0, 0x1, [], r1, 0xf, r2, 0x8, &(0x7f0000000540)={0x7ff, 0x7}, 0x8, 0x10, &(0x7f0000000580)={0x100000000, 0x100000000, 0xffffffffffff6df3, 0x634b}, 0x10}, 0x70)

04:04:58 executing program 0:
r0 = syz_open_dev$binder(0x0, 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x80800)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

04:04:58 executing program 0:
r0 = syz_open_dev$binder(0x0, 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x80800)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

04:04:58 executing program 5:
clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(r0, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x32)
socket$key(0xf, 0x3, 0x2)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x34})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x0, 0x0)

04:05:01 executing program 0:
r0 = syz_open_dev$binder(0x0, 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x80800)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

04:05:01 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r0, r0, &(0x7f00000000c0)=0x201, 0xdd)
write$smack_current(r0, &(0x7f0000000000)='%]trusted\x00', 0xa)

04:05:01 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x10)
ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000200)={0xa, 0x20, 0x1c1a})
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
r3 = request_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='cgroupeth0security\x00', 0xfffffffffffffffc)
keyctl$invalidate(0x15, r3)

04:05:01 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0)
write$P9_RAUTH(r2, &(0x7f00000000c0)={0x14, 0x67, 0x2, {0x5a, 0x1, 0x5}}, 0x14)
ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f00000002c0))
write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x323)
write$P9_RMKDIR(r2, &(0x7f0000000280)={0x14, 0x49, 0x2, {0x81, 0x0, 0x8}}, 0x14)
r3 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, 0x0}, 0x4000080)
r4 = getpid()
sched_setscheduler(r4, 0x5, &(0x7f0000000040))
r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(r4, &(0x7f00000003c0)='n%t/ip6_tables_matWhes\x00\xc3]\t*\x1dm.\xee\xe1R\xab\x13X\xfb\x9a>T\xbdi\xe5C\xb44\xdd\xced\xec\"\xb3e`j\x85\x04\xd3\n\xdd\x1d\xdf\x96\a\xe8\xaf\x0f\b4\xcf\x83\xe5Vn\xb0\x0fa2ru\xad\xea\xe9Z[\xa5\x0f\xa4Y\x9dh\xff<\x82\x82i\x19Y\x96')
prctl$PR_SET_DUMPABLE(0x4, 0x0)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x3)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
bind$netlink(r6, &(0x7f0000177ff4)={0x10, 0x0, 0x1, 0x2000000000}, 0xc)
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0xc840, 0x0)
setsockopt$inet_mreq(r6, 0x0, 0x0, 0x0, 0x0)
write(r6, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000b4bffc), 0x4)
sendto(r6, &(0x7f0000000340), 0x146, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
recvmmsg(r6, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0)
write$binfmt_misc(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="00060000125cb8150e0725e10000"], 0xe)
sendfile(r2, r5, &(0x7f0000000140), 0x8fff)

04:05:01 executing program 2:
r0 = request_key(&(0x7f0000000280)='cifs.idmap\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000300)='(\x00', 0xfffffffffffffffc)
add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="9de81b188d3dc1958471ff35703f9e535657cd578727eeaab86115dc3ce26327c181981e73534656efe6fb7c3b3724a722e666ab709c9706c6e9fd7862453eeeacc42ff830457425025b1e9598d12427b9b6ee83fa02f18cce27960a6bd25a6b6482468a37900bac4087460af951f5b7521c0f39bde9a74b13c065cdb8790ca75d616aadf5edd0c67335c4d46966b5b4a6ac29c1565bb2e79f35ffa983413be7d6c94da820ccd3f3b2d4c325c94de6d66c74bfd2958d5f91c3cd6581e0fbfb41a3b373b50e3fc9b4e9151365c0d2d961c4b1ba1197a147853db5cc4d", 0xdc, r0)
r1 = epoll_create1(0x80000)
close(r1)
r2 = memfd_create(&(0x7f0000002000)='mime_type^\\vbox\x05et0(%[securitycpuset-&\'\'\xa0%[ppp0\x00', 0x2)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x55, 0x0, 0x6, {0x3fd, 0x9}, {0x1520000000000, 0x1}, @ramp={0x1, 0x3ff, {0x7c5, 0x6, 0x3, 0x6f}}})
fcntl$addseals(r2, 0x409, 0x4)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000340))
r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0)
open(&(0x7f0000000380)='./file0\x00', 0x2, 0x0)
ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000040)=0x9)
ftruncate(r1, 0x6)

04:05:01 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070")
rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
keyctl$read(0xb, 0xfffffffffffffffd, &(0x7f0000000000)=""/4, 0xfffffffffffffd5c)

04:05:01 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x80800)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

04:05:01 executing program 5:
clock_gettime(0xfffffffffff7fffc, 0x0)
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
openat$cgroup_ro(r0, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0)

04:05:01 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@window={0x3, 0xad, 0x10000}, @sack_perm, @mss={0x2, 0x40}, @window={0x3, 0x5, 0x9}, @window={0x3, 0x8, 0x8}, @sack_perm, @sack_perm, @timestamp, @sack_perm], 0x2000000000000102)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x200080, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x17, &(0x7f0000000000)=0xffffffffffff0001, 0x4)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
openat$cgroup_ro(r3, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0)
tkill(r2, 0x3c)
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
fcntl$setstatus(r1, 0x4, 0x2000042803)

04:05:01 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc000000003f3188a070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETSF(r1, 0x402c542b, &(0x7f0000000040))
ioctl$TIOCEXCL(r1, 0x540c)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000100)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000200)=0xe8)
setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0x8001, 0xb2aa}, {0x8, 0x80000000}], r2}, 0x18, 0x1)

04:05:01 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}, &(0x7f0000000100)=0x10)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @dev}, 0xc)
getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00'}, 0x68)

04:05:01 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000001440)={0xa, 0x4e22}, 0x1c)
listen(r1, 0xffffffffffffffff)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000100))
clock_nanosleep(0x0, 0x0, 0x0, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, 0x0)
sendto$inet6(r2, 0x0, 0xfffffffffffffcfc, 0x20000005, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
shutdown(r0, 0x3)
recvfrom$inet6(r2, &(0x7f0000000000)=""/31, 0x1bc, 0x0, 0x0, 0x3ce)
socket$inet6(0xa, 0x5, 0x22c1)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0)
dup2(r0, r2)

[  889.206368] binder: 5177:5180 ERROR: BC_REGISTER_LOOPER called without request
[  889.242462] binder: 5177:5180 got reply transaction with no transaction stack
04:05:01 executing program 2:
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0)
getsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@broadcast, @multicast2, @empty}, &(0x7f0000000080)=0xc)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
keyctl$dh_compute(0xd, 0x0, 0x0, 0x0, 0x0)

04:05:01 executing program 4:
clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = getpid()
rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000080))
r1 = dup(0xffffffffffffff9c)
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000140)={0x2, &(0x7f0000000040)=[{0x6da, 0x0, 0x6, 0x6}, {0x5, 0x80000001, 0x0, 0x3}]})
ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000004540)=""/4096, 0x28})
ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000180))
r2 = socket(0x9, 0x2, 0x8113)
setsockopt$inet_tcp_int(r2, 0x6, 0x5, &(0x7f0000000000)=0x6, 0x4)

[  889.266516] binder: 5177:5180 transaction failed 29201/-71, size 0-0 line 2921
[  889.301416] binder: release 5177:5180 transaction 263 out, still active
[  889.308222] binder: undelivered TRANSACTION_COMPLETE
04:05:01 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x311a00, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1)
setitimer(0x1, &(0x7f0000000140)={{0x0, 0x2710}}, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x4000, 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000040)={0x3, 0x2, 0x3f, 0x1, 0x7})
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

[  889.369298] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=5171 comm=syz-executor.3
[  889.410675] binder: send failed reply for transaction 263, target dead
[  889.986039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=5225 comm=syz-executor.3
04:05:03 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bc070")
r1 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="02030000100000000000000000000000010014000000000005000600000000000a000000000000000000000000000000f700000000000000000000000000000001001500000000000200010000000000000000000000000005000500000000000a00000000000000ba8000000000000000000000000000ff0000000000000000abafd1ccb9a9bdca1b820b02ad87356cc56ce3ce9d6d586ed0776e8648aaf87810268410a362d31fb2cf38"], 0x3c}}, 0x0)

04:05:03 executing program 5:
r0 = socket(0xa, 0x4000000000000001, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f")
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001180)='/selinux/checkreqprot\x00', 0x64800, 0x0)
ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffe)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0)
ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00')
close(r1)
r2 = dup2(r0, r0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x400, 0x0)
ioctl$TIOCSBRK(r2, 0x5427)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000001200)={0x14e2, {{0x2, 0x4e20, @multicast2}}}, 0x88)

04:05:03 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x80800)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

04:05:03 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
listen(r0, 0x200)
open(&(0x7f0000000040)='./file0\x00', 0x288542, 0x42)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc)

04:05:03 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000180)=0x7743)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
setsockopt$inet_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000000), 0x4)
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000100)="f0ae1484e94b6585494faab4ac718baa278141d39b4dc6da43d2c761e24e62150353b16d08806c759cd0181220248aa3a9a93322d4d037dc16e5cb4aed0d99e47299798de97b1f78af49a6d29f425cb68883ec725a1d50a85e1fbeadbf70d7ca3e80f6774addcc2ca3b2b208baa5040c06e0508febde267c")

04:05:03 executing program 4:
getresgid(&(0x7f0000000080), &(0x7f0000001340), &(0x7f0000003580))
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0)
munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000)

04:05:03 executing program 2:
clone(0x40040000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0xa0040, 0x0)
ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000040))
r2 = syz_open_procfs(r0, &(0x7f0000001140)='net/rfcomm\x00')
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3)
ptrace$setopts(0x4200, r0, 0x0, 0x0)
tkill(r0, 0x39)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x3, 0x20000000, 0xca})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x0, 0xfffffffffffffffe)
fchdir(r1)
sysinfo(&(0x7f0000000140)=""/4096)
r3 = creat(&(0x7f0000000080)='./file0\x00', 0x10)
ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x7f)

04:05:03 executing program 4:
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x4863cd4363e2416f)
write$binfmt_script(r0, &(0x7f0000000280)={'#! ', './file0', [{0x20, '-'}, {0x20, 'self{+,/'}, {0x20, '^/-self'}, {0x20, 'net/ip6_tables_matches\x00'}, {0x20, 'net/ip6_tables_matches\x00'}, {0x20, '^'}, {0x20, 'net/ip6_tables_matches\x00'}, {0x20, 'net/ip6_tables_matches\x00'}, {0x20, '\'system*'}], 0xa, "763fbee1133549ab4fa276056b870d8763fb7db99730e6a0c6d8fb654e06fe67d4b8d9d2f2d21c0979d3f4411e206cfa2a902c4b1029fb4287371f3519b45709640c83e7"}, 0xcd)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2, 0x0)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000180)={'nat\x00', 0x0, 0x4, 0x57, [], 0x5, &(0x7f0000000040)=[{}, {}, {}, {}, {}], &(0x7f0000000100)=""/87}, &(0x7f0000000200)=0x78)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_tables_matches\x00')
flock(r2, 0x5)
lseek(r2, 0x20400000, 0x0)

04:05:03 executing program 5:
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0)
getrandom(0x0, 0xfffffffffffffc40, 0xfffffffffffffffe)

[  891.947687] binder: 5239:5242 ERROR: BC_REGISTER_LOOPER called without request
04:05:03 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x18200)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x0, 0x0)
ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0xa)

04:05:03 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bc070")
flistxattr(r0, 0x0, 0x0)

[  892.009673] binder: 5239:5257 transaction failed 29189/-22, size 0-0 line 3013
04:05:03 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
creat(&(0x7f0000000000)='./file0\x00', 0x50)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendmsg(r1, &(0x7f0000013000)={&(0x7f0000013fe4)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[{0x28, 0x29, 0x37, "27020201594a87ccfe8000000000000059"}], 0x28}, 0x0)

04:05:03 executing program 3:
unshare(0x2000400)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f00000001c0)=""/149, 0x95)
getresuid(&(0x7f0000000000), &(0x7f0000000180), &(0x7f0000000280))
getdents(r0, &(0x7f0000000080)=""/234, 0xea)
fcntl$addseals(r0, 0x409, 0x8)

04:05:04 executing program 5:
r0 = memfd_create(&(0x7f0000000380)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedc\x01\x00\x01\x00\x00\x00\x00\x00\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x1)
fadvise64(r0, 0x0, 0x5, 0x6)
write$FUSE_INIT(r0, &(0x7f0000000140)={0x50}, 0x50)
readahead(r0, 0x6, 0x8)
write$P9_RAUTH(r0, &(0x7f0000000100)={0x14}, 0x14)
r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000340)='system.posix_acl_access\x00')
fsetxattr(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x3f, 0x1)
fsetxattr(r0, &(0x7f0000000200)=@known='system.posix_acl_access\x00', &(0x7f0000000240)='$trusted\x00', 0x9, 0x2)
write(r0, &(0x7f0000000b40)="04c14e166692f0f8b17500955310060e92aec87568838306f9b1d5a4c28f202a7612b4a3061af475004929e1895a9a0b1d2e15f8", 0x34)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x10000, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f00000002c0))
r3 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000280)='/dev/keychord\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0)
setitimer(0x0, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, &(0x7f0000000000))

[  892.039975] binder: 5239:5242 got reply transaction with no transaction stack
[  892.039984] binder: 5239:5242 transaction failed 29201/-71, size 0-0 line 2921
04:05:04 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x80800)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

04:05:04 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
fgetxattr(r0, &(0x7f0000000000)=@known='com.apple.FinderInfo\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

[  892.158384] binder: undelivered TRANSACTION_ERROR: 29189
04:05:04 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

04:05:04 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = dup3(r0, r0, 0x80000)
ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000000)={0xffffffffffffff36, 0x9})
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@delpolicy={0x6c, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@dev}}, [@encap={0x1c, 0x8, {0x0, 0x0, 0x0, @in=@loopback}}]}, 0x6c}, 0x8}, 0x0)

04:05:04 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r1 = socket$inet6(0xa, 0x80f, 0x3)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x38, &(0x7f00000000c0)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x22)

04:05:04 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000180)=0xffffffffffff0000)
fchdir(r0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x323)
creat(&(0x7f0000000380)='./bus\x00', 0x0)
sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, 0x0, 0x0)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
write$binfmt_misc(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="004f8ea033fd41c01f681add5d0365d6d4fb1539765b8e80f60b9f896050b2a103100000000000001fd4"], 0x2a)
sendfile(r2, r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
pipe(0x0)
write(0xffffffffffffffff, 0x0, 0x0)
setxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r4, 0x400080)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
write(r5, &(0x7f0000000080)="36044609072198b05d", 0x9)
recvfrom$inet6(r5, &(0x7f0000001840)=""/31, 0x1f, 0x100, 0x0, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'lo\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff})
r7 = accept4(r4, 0x0, 0x0, 0x0)
sendto$inet6(r7, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

04:05:04 executing program 5:
r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000140)={0x1, {{0x2, 0x4e23, @multicast1}}, 0x0, 0x7, [{{0x2, 0x4e22, @rand_addr=0x40}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x7f, 0x0}}}, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e21, @empty}}, {{0x2, 0x4e23, @rand_addr=0x5}}, {{0x2, 0x6, @multicast1}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}}]}, 0x410)
open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0)
clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3d)
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000600)=r1)
ptrace$cont(0x18, r1, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x242d, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
accept$unix(r0, &(0x7f0000000580)=@abs, &(0x7f0000000080)=0x6e)
ptrace$cont(0x1f, r1, 0xb2a2, 0xfffffffffffffffc)

[  892.199862] binder: 5285:5287 ERROR: BC_REGISTER_LOOPER called without request
[  892.228573] binder: 5285:5287 transaction failed 29189/-22, size 0-0 line 3013
04:05:04 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2000000000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'nlmon0\x00', 0x4000000000000400})

04:05:04 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)
r1 = memfd_create(&(0x7f0000000040)='\x88])+\x00', 0x400006)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000002, 0x20012, r1, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)

04:05:04 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x80800)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

[  892.251053] binder: 5285:5287 got reply transaction with no transaction stack
[  892.258387] binder: 5285:5287 transaction failed 29201/-71, size 0-0 line 2921
[  892.285243] binder: undelivered TRANSACTION_ERROR: 29189
04:05:04 executing program 3:
clone(0x200, 0x0, 0x0, 0x0, 0x0)
mknod(&(0x7f0000000080)='./file0\x00', 0x1039, 0x0)
execve(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
ptrace(0x10, r0)
setxattr$security_evm(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.evm\x00', &(0x7f0000000180)=@md5={0x1, "5bef4217222e9bd5c90a6872843d2556"}, 0x11, 0xa948965b4f10138)
tkill(r0, 0x1000000000016)

04:05:04 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r4, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070")
pread64(r2, &(0x7f00000000c0)=""/39, 0x27, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0100"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0)
dup2(r0, r2)

[  892.385531] binder: 5309:5319 ERROR: BC_REGISTER_LOOPER called without request
[  892.420969] binder: 5309:5319 transaction failed 29189/-22, size 0-0 line 3013
04:05:04 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x80800)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

[  892.440707] binder: 5309:5319 got reply transaction with no transaction stack
[  892.448040] binder: 5309:5319 transaction failed 29201/-71, size 0-0 line 2921
[  892.478798] binder: undelivered TRANSACTION_ERROR: 29189
04:05:04 executing program 4:
syz_execute_func(&(0x7f00000001c0)="91cd80450f056969ef69dc00d98a20d0d00fd1b02db5d900000070e4c653fb0f450fbd27a95ff965be3c3b6446ddcb01ef8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f5776c16161787896c401fe5ff6a9c1460000e1b1ac45e22c892a0f0000009f")
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_mr_cache\x00')
accept$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)=@deltfilter={0x198, 0x2d, 0x318, 0x70bd2c, 0x25dfdbfd, {0x0, r1, {0x1, 0xd}, {0x10, 0xffff}, {0xa, 0xffff}}, [@TCA_RATE={0x8, 0x5, {0x2, 0xef4}}, @TCA_RATE={0x8, 0x5, {0x2, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x10000}, @filter_kind_options=@f_basic={{0xc, 0x1, 'basic\x00'}, {0x150, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffffffffffffffb}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}]}, @TCA_BASIC_ACT={0x128, 0x3, @m_vlan={0x124, 0x19, {{0xc, 0x1, 'vlan\x00'}, {0x38, 0x2, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3, 0x1, 0x6, 0x4, 0x3}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x8, 0x3, 0x4f7}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x8, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x8, 0x4, 0x88a8}]}, {0xd8, 0x6, "ba0d65376cc3c927972396fdb4be7654f5f24022462e13ef0dd426e6e0e5db52f118f28085a340b3a155f2af6a2498a40dd74d3473d91a7d355ac8002546bee4eadab96ec1a98867b0191a026ede26f1d0cf02144f59473ac0c3739b54be26944284175f1ccb7a559af9581da4ff5bee1b44d6fd5becc87e880d8c7b5459f4fbef84c8b6a150412fd8b315e3ec2ee9c654e7de912ee040b0a66bdfab9d4fa7afb67bdaf9a08d83ecc5539215e9dd67ab710e1fc50e90739cd38774bcdf8b906ce6081635ab205d4e394804c3370ae05e16"}}}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xffe0}}]}}]}, 0x198}, 0x1, 0x0, 0x0, 0x80}, 0x80)

[  892.561702] binder: 5332:5333 ERROR: BC_REGISTER_LOOPER called without request
[  892.570947] binder_alloc: 5332: binder_alloc_buf, no vma
[  892.576444] binder: 5332:5333 transaction failed 29189/-3, size 0-0 line 3136
[  892.601262] binder: 5332:5333 got reply transaction with no transaction stack
[  892.608711] binder: 5332:5333 transaction failed 29201/-71, size 0-0 line 2921
[  892.690716] binder: undelivered TRANSACTION_ERROR: 29189
04:05:04 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000100))
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r3, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000200), 0x4)
socket$inet_tcp(0x2, 0x1, 0x0)
r4 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x6000, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40042409, 0x1)
r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x40002, 0x0)
ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000180)=0xac7)
connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x2}, 0x10)

04:05:04 executing program 4:
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x84800)
recvfrom$inet(r0, &(0x7f0000000040)=""/4096, 0x1000, 0x100, &(0x7f0000001040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000001080)=0x630)
ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f00000010c0)=0x9)
fcntl$setstatus(r1, 0x4, 0x2000)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x4)
setsockopt$inet6_buf(r1, 0x29, 0xcd, &(0x7f0000001100)="d67bf5b17d47a5c05045df5a9e35e1ba2da85bfad161c969d63dd78aabc5e5736a5899bae1c0e2e847c68eb139fb94521f405df9ed170ea02244e3a5691ec949e190c4dc761a601f473edc24960302db8e08420ded34a4b91bbd3a1fd3e8a7f1d1bde785f60110a3a6f49e81c2f9d3f16732b5f4885ef353d6526000e35292334500bdf06596ed3f6f951a1bb8391e2a5c17cc7277e5961cbd5c4c123be326b2811858c0734dd6d584490faaf98d8c8e4821b115e70635f93014bef650d1600ef90ecbd74f4b0266185980ec5285787acbb58342", 0xd4)
getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000001200)={'raw\x00'}, &(0x7f0000001280)=0x54)
prctl$PR_GET_PDEATHSIG(0x2, &(0x7f00000012c0))
ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000001300)=""/8)
readahead(r0, 0x9, 0x40000000000)
r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001340)='/selinux/enforce\x00', 0x22001, 0x0)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000001380)={'icmp6\x00'}, &(0x7f00000013c0)=0x1e)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001440)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x30, r3, 0x130, 0x70bd27, 0x25dfdbff, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x1000, 0x7f, 0x6, 0x3}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x24004001)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001580)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f00000017c0)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x2020002c}, 0xc, &(0x7f0000001780)={&(0x7f00000015c0)={0x1ac, r4, 0x605, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x1c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100000000}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffffffff8001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcf}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x23bf}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0xc0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x22c3}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @mcast1, 0x20e}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x10}, 0x800)
write$P9_RREADLINK(r0, &(0x7f0000001800)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)
getsockname(r0, &(0x7f0000001840)=@ethernet={0x0, @random}, &(0x7f00000018c0)=0x80)
r5 = add_key(&(0x7f0000001900)='blacklist\x00', &(0x7f0000001940)={'syz', 0x3}, &(0x7f0000001980)="be9b9b2923e8475fafea9303342a979e0b70dcb45efe5d3f2c3a2ca5a0f91f4a7e19b617bbfa0bf4688c99f6af6fbd08ebc481fb162a592592c5827670ea2dc1b9ceafbd7bb4314d95fc389d26e2ba0e15af44f5ef6b1c8590bd2644705d03cd4e52bb59992c90842827bd0a369adf89abdd4eb016940cc72a4582d575db84f10477d1f63aaa70661dd0085d90f7e6427b264cd6f2ea2412695ed89f3d7a3ad41cab7fb25e05536d695d1c26327b2ace4b851b1aa48bcea3046c0a0366e468fd0796b86b25fcc0443b64f983b3f132a7fdc5c8def803d1b3944f4f6587d5c1f50a62bd5f173ab334ff", 0xe9, 0xfffffffffffffffb)
r6 = add_key$keyring(&(0x7f0000001a80)='keyring\x00', &(0x7f0000001ac0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8)
keyctl$reject(0x13, r5, 0xb2, 0x3, r6)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001b00)={'vlan0\x00', 0x1000})
r7 = fcntl$getown(r1, 0x9)
ptrace$pokeuser(0x6, r7, 0xfffffffffffffff7, 0x0)
add_key$keyring(&(0x7f0000001b40)='keyring\x00', &(0x7f0000001b80)={'syz', 0x1}, 0x0, 0x0, r6)
ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000001bc0)={0x0, 0x9883, 0x84, 0x1, 0x5, 0x80000001})
syz_open_procfs(r7, &(0x7f0000001c00)='mountinfo\x00')
lstat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
r9 = getgid()
write$FUSE_ENTRY(r2, &(0x7f0000001d00)={0x90, 0xfffffffffffffff5, 0x6, {0x0, 0x3, 0x3, 0x1, 0x9, 0x7, {0x4, 0x401, 0x7ff, 0xd247, 0x1, 0x5, 0x9, 0x2, 0x10000, 0x3, 0xc5c, r8, r9, 0x401, 0xd86bf1d}}}, 0x90)

04:05:04 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x80800)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

04:05:04 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x72, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f0000001000)="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", 0x73f, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100)

[  892.835679] binder: 5344:5346 ERROR: BC_REGISTER_LOOPER called without request
[  892.855087] binder_alloc: 5344: binder_alloc_buf, no vma
[  892.867388] binder: 5344:5346 transaction failed 29189/-3, size 0-0 line 3136
[  892.885481] binder: 5344:5346 got reply transaction with no transaction stack
[  892.900870] binder: 5344:5346 transaction failed 29201/-71, size 0-0 line 2921
[  892.950674] binder: undelivered TRANSACTION_ERROR: 29189
04:05:07 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
clock_gettime(0x3, &(0x7f0000000000))
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4004e22}, 0x1c)
listen(r0, 0xffffffffffffbfff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
sendmmsg(r1, &(0x7f0000003240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=[{0xe10, 0x0, 0x0, "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"}], 0xe10}, 0x100}], 0x1, 0x4008001)

04:05:07 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x1, 0x40000)
r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x103801, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4e21, @rand_addr=0xfffffffffffffff7}}, 0x0, 0xffffffff, 0x0, "320735d51974787b2c14e0b7059494fd5dcc41d3dc360c644e57f0dbbae226007081f1ac8bf07845091bd581b9588ddf4db27d8e80ff9e10cbcc70c60b521b1de9f8818cbc8996d217a21ceb76ddfee1"}, 0x316)
poll(&(0x7f0000000180)=[{r0}], 0x1, 0x6e0)
r2 = dup(r0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$TIOCSBRK(r2, 0x40044591)

04:05:07 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x80800)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

04:05:07 executing program 4:
r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT=r0], 0x689e3390)
link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file1/file0\x00')
rename(&(0x7f0000000100)='./file1/file0\x00', &(0x7f00000000c0)='./file2\x00')
llistxattr(&(0x7f0000000080)='./file2\x00', 0x0, 0x0)

04:05:07 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x04')
r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='mem\x00\x01y/\x06\x00\x00\x00\x00\x00\x00\x00\x16\xd4B\xab\xe3\xfarent\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x10000000000000d1, 0x2000107c)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x1ff, 0x0, 0x3, 0x13, 0x0, "03b32e65a618ca6df1ea1b38f01dcf2500cb6d1da10c55a1b1a5d35cf4493764f0341a9a6b50572933482143f3a843c8efa7d584b64b6fb07a5f8bd08ed9139b", "4cdef5d3a3b575b7fb5461f68125059d4757174363866f2c8466bc50ba600a7003a95c996ed6bfb7eddf0049557c18edf0855d4c114e240e3325501da9a20022", "bb85f0f97525dd75d3ab648fcae8f57c66a91ac0b6779f74203f0035687322fa", [0x2]})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=<r2=>0x0)
syz_open_procfs(r2, &(0x7f00000002c0)='oom_adj\x00')
prctl$PR_MCE_KILL(0x21, 0x1, 0x2)
mlockall(0x2)
io_setup(0x8ed, &(0x7f0000000280))
getpeername(r1, &(0x7f00000001c0)=@xdp={0x2c, 0x0, <r3=>0x0}, &(0x7f0000000000)=0x80)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000240)={r3, 0x1, 0x6, @local}, 0x10)
write$P9_RVERSION(r0, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x4, 0x8, '9P2000.u'}, 0x15)
fallocate(r0, 0x40, 0xffffffff00000000, 0xfff)
fcntl$getflags(0xffffffffffffffff, 0xb)

04:05:07 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{}, 0x0, @in6=@local}}, &(0x7f0000000040)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000380)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000080)=0xe8)
getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=<r4=>0x0)
r5 = geteuid()
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@empty, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000300)=0xe8)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@mcast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000680)=0xe8)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@initdev}, 0x0, @in=@remote}}, &(0x7f00000007c0)=0xe8)
r9 = getgid()
fstat(r0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0})
fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000880)={{}, {0x1, 0x63378bc99e0de0da}, [{0x2, 0x5, r2}, {0x2, 0x4, r3}, {0x2, 0x4, r4}, {0x2, 0x0, r5}, {0x2, 0x1, r6}, {0x2, 0x1, r7}, {0x2, 0x4, r8}], {0x4, 0x4}, [{0x8, 0x1, r9}, {0x8, 0x2, r10}], {0x10, 0x3}}, 0x6c, 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

04:05:07 executing program 5:
r0 = socket$inet6(0xa, 0x80000, 0x12c)
recvmmsg(0xffffffffffffff9c, &(0x7f0000008340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/92, 0x5c}, {&(0x7f0000000040)}, {&(0x7f0000000140)=""/154, 0x9a}, {&(0x7f0000000200)=""/128, 0x80}, {&(0x7f0000000280)}], 0x5, &(0x7f0000000340)=""/214, 0xd6}}, {{&(0x7f0000000440)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/114, 0x72}, {&(0x7f0000000540)=""/175, 0xaf}, {&(0x7f0000000600)=""/105, 0x69}], 0x3, &(0x7f00000006c0)=""/90, 0x5a}, 0x100000000}, {{&(0x7f0000000740)=@l2, 0x80, &(0x7f00000017c0)=[{&(0x7f00000007c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001800)=""/217, 0xd9}, 0x3}, {{&(0x7f0000001900)=@tipc, 0x80, &(0x7f0000002f80)=[{&(0x7f0000001980)=""/9, 0x9}, {&(0x7f00000019c0)=""/216, 0xd8}, {&(0x7f0000001ac0)=""/45, 0x2d}, {&(0x7f0000001b00)=""/140, 0x8c}, {&(0x7f0000001bc0)=""/83, 0x53}, {&(0x7f0000001c40)=""/247, 0xf7}, {&(0x7f0000001d40)=""/114, 0x72}, {&(0x7f0000001dc0)=""/190, 0xbe}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000002e80)=""/230, 0xe6}], 0xa, &(0x7f0000003040)=""/213, 0xd5}}, {{&(0x7f0000003140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000004540)=[{&(0x7f00000031c0)=""/88, 0x58}, {&(0x7f0000003240)=""/103, 0x67}, {&(0x7f00000032c0)=""/182, 0xb6}, {&(0x7f0000003380)=""/29, 0x1d}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000043c0)=""/193, 0xc1}, {&(0x7f00000044c0)=""/66, 0x42}], 0x7}, 0x4}, {{&(0x7f00000045c0)=@l2, 0x80, &(0x7f0000005c00)=[{&(0x7f0000004640)=""/196, 0xc4}, {&(0x7f0000004740)=""/218, 0xda}, {&(0x7f0000004840)=""/245, 0xf5}, {&(0x7f0000004940)=""/231, 0xe7}, {&(0x7f0000004a40)=""/242, 0xf2}, {&(0x7f0000004b40)=""/4096, 0x1000}, {&(0x7f0000005b40)=""/143, 0x8f}], 0x7, &(0x7f0000005c80)=""/169, 0xa9}, 0x5}, {{&(0x7f0000005d40)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000008040)=[{&(0x7f0000005dc0)=""/30, 0x1e}, {&(0x7f0000005e00)=""/4096, 0x1000}, {&(0x7f0000006e00)}, {&(0x7f0000006e40)=""/31, 0x1f}, {&(0x7f0000006e80)=""/29, 0x1d}, {&(0x7f0000006ec0)=""/39, 0x27}, {&(0x7f0000006f00)=""/111, 0x6f}, {&(0x7f0000006f80)=""/4096, 0x1000}, {&(0x7f0000007f80)=""/191, 0xbf}], 0x9, &(0x7f0000008100)=""/82, 0x52}, 0xfffffffffffff000}, {{&(0x7f0000008180)=@ll={0x11, 0x0, <r1=>0x0}, 0x80, &(0x7f0000008300)=[{&(0x7f0000008200)=""/48, 0x30}, {&(0x7f0000008240)=""/109, 0x6d}, {&(0x7f00000082c0)=""/31, 0x1f}], 0x3}, 0x4}], 0x8, 0x100, &(0x7f0000008540))
setsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f0000008580)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, r1}, 0x14)
futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, &(0x7f0000000080), 0x0)

[  895.306964] binder: 5359:5366 ERROR: BC_REGISTER_LOOPER called without request
[  895.336184] binder_alloc: 5359: binder_alloc_buf, no vma
04:05:07 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
write$P9_RREMOVE(r2, &(0x7f0000000280)={0x1}, 0x1029d)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x100000001})
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00')
sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x200, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4)

04:05:07 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, 0xffffffffffffffff, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x80800)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

[  895.379036] binder: 5359:5375 got reply transaction with no transaction stack
[  895.379048] binder: 5359:5375 transaction failed 29201/-71, size 0-0 line 2921
[  895.428006] binder: 5359:5366 transaction failed 29189/-3, size 0-0 line 3136
04:05:07 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x80800)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

04:05:07 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000040))
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffffffffbff, @empty, 0x7}, 0x1c)

[  895.488510] binder: 5383:5386 ERROR: BC_REGISTER_LOOPER called without request
[  895.496352] binder: undelivered TRANSACTION_ERROR: 29189
04:05:07 executing program 4:
munmap(&(0x7f000001c000/0x3000)=nil, 0x3000)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x3d, 0x0)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x1, 0x0, 0xffffffff80000001, 0xa418, 0x12, 0x4, 0x1, 0x0, 0x4, 0x0, 0x8a, 0x5})
ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0)
ioctl$TCFLSH(r0, 0x540b, 0x20)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000040))
ioctl$TCSETSF(r0, 0x5404, &(0x7f00000001c0))
ioctl$TCSETA(r0, 0x5406, 0x0)
ioctl$VT_ACTIVATE(r0, 0x5606, 0x100400000000000)
r2 = syz_open_pts(0xffffffffffffffff, 0x0)
dup3(r2, r0, 0x0)
read(r0, &(0x7f00000000c0)=""/19, 0x1b43d048)

04:05:07 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e6185316737740000000000000000e4dbb77487e90104000000000040800000000000001b1f41000503000018030000cc000000ac010000000000001004d1be90e17e916dd282e0f34f8dfac0dc1695c4d7000010"], 0x1)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
wait4(r2, 0x0, 0x1, &(0x7f0000000140))
wait4(0x0, 0x0, 0x0, 0x0)
write$P9_RGETLOCK(r1, &(0x7f0000000000)={0x2b, 0x37, 0x2, {0x0, 0x101, 0x7, r2, 0xd, 'systemtrusted'}}, 0x2b)
tkill(r2, 0x3c)

[  895.537962] binder_alloc: 5383: binder_alloc_buf, no vma
[  895.562387] binder: 5383:5391 transaction failed 29189/-3, size 0-0 line 3136
04:05:07 executing program 3:
futex(&(0x7f000000cffc)=0x200000004, 0x80, 0x4, 0x0, 0x0, 0x0)
lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:etc_aliases_t:s0\x00', 0x23, 0x2)
r0 = getpgrp(0xffffffffffffffff)
wait4(r0, &(0x7f0000000200), 0x20000020, &(0x7f0000000140))
futex(&(0x7f000000cffc), 0x81, 0x3, 0x0, 0x0, 0x0)

[  895.568151] binder: BINDER_SET_CONTEXT_MGR already set
[  895.568167] binder: 5389:5397 ioctl 40046207 0 returned -16
[  895.569341] binder: 5389:5397 ERROR: BC_REGISTER_LOOPER called without request
04:05:07 executing program 2:
r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000)
symlinkat(&(0x7f0000000080)='./file0\x00', r0, &(0x7f00000000c0)='./file0\x00')
accept4$unix(r0, &(0x7f0000000100), &(0x7f0000000180)=0x6e, 0x80000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000498000)={0x0, 0x0, &(0x7f00008b7ff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001010100000000003f2c11b91e614348100001000400635f3711e90100080002000000e1008f2012890551518afd18f96434a5ab603fb5894b7b37cd4f90ce3c1c54a6194bcf647026aa067dcba6f6620a4d7dce18322038c2f3ee518aa5"], 0x24}}, 0x0)

[  895.569729] binder_alloc: 5383: binder_alloc_buf, no vma
[  895.569748] binder: 5389:5397 transaction failed 29189/-3, size 0-0 line 3136
[  895.571993] binder: 5389:5397 got reply transaction with no transaction stack
[  895.572001] binder: 5389:5397 transaction failed 29201/-71, size 0-0 line 2921
[  895.572250] binder: undelivered TRANSACTION_ERROR: 29189
[  895.580222] binder: 5383:5386 got reply transaction with no transaction stack
04:05:07 executing program 3:
r0 = socket$key(0xf, 0x3, 0x2)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x41, 0x4)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000001000"], 0x10}}, 0x0)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/keycreate\x00', 0x2, 0x0)
recvmmsg(r0, &(0x7f0000003100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

04:05:07 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, 0xffffffffffffffff, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x80800)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

[  895.580232] binder: 5383:5386 transaction failed 29201/-71, size 0-0 line 2921
[  895.690338] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  895.703413] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  895.870974] binder: undelivered TRANSACTION_ERROR: 29189
[  895.880664] binder: 5421:5424 ERROR: BC_REGISTER_LOOPER called without request
[  895.902591] binder_alloc: 5421: binder_alloc_buf, no vma
[  895.916338] binder: 5421:5424 transaction failed 29189/-3, size 0-0 line 3136
[  895.933626] binder: 5421:5424 got reply transaction with no transaction stack
[  895.950325] binder: 5421:5424 transaction failed 29201/-71, size 0-0 line 2921
[  896.020683] binder: undelivered TRANSACTION_ERROR: 29189
04:05:07 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @local}, 0x3e6)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0)
setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x7, 0x4)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xfa9596389472870c}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="a8020000", @ANYRES16=r3, @ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0x80}, 0x4004000)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
write(r1, &(0x7f0000000200)="b177ab0728164b6d2425b851332dde489432e098fa3290e1ea8fd4c690c20e7bbcaa2b2d731605281e6b7b76cbbfd1cce7c29dcce4aa16ce4004647622def0876ab93c214ac20de05e9cd814027fe590e86762f3b2c4b253849553da01451ef0f1e39b4b83f2592e76e402107e36496e6c99641eb4eebdaeb50ac193581a1138a9c63aa75a919263d0ecdb498223368faf3a91fc5be937f4d50da6f461b7853075dda7edeb375709823746966796d1aae1f249ff203188b1b6d3969501fec5d813881dffc373e2da759470f408", 0xcd)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

04:05:07 executing program 5:
clone(0x800000409ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/exec\x00', 0x2, 0x0)
r2 = openat$cgroup_procs(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0)
r3 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x101000, 0x100)
r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
poll(&(0x7f0000000240)=[{r1, 0x1}, {r2}, {r3, 0x20}, {r4, 0x1000}], 0x4, 0x5)
futex(&(0x7f0000000140)=0x2, 0x1, 0x2, 0x0, 0x0, 0x2)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x38)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x401, 0x0)
getsockname$netlink(r5, &(0x7f0000000080), &(0x7f00000000c0)=0xc)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="fa79be9c79933242b0ed4fee9e7aa6c7ce33608793c1f8cfa2bd6054583fdc9e3a273f8e0ce8b778ad93a96e62d50e2c5330fb9a3ed1a52d85d2d6b86c2e"], 0x39)
ptrace$cont(0x18, r0, 0x0, 0x3f)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0))
ptrace$cont(0x7, r0, 0x0, 0x0)

04:05:07 executing program 2:
clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000008, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
tkill(r0, 0xd)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x32})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x21, r0, 0x0, 0x0)
r2 = pkey_alloc(0x0, 0x2)
pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, r2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000140)=@mangle={'mangle\x00', 0x1f, 0x6, 0x608, 0x0, 0x220, 0x110, 0x220, 0x0, 0x538, 0x538, 0x538, 0x538, 0x538, 0x6, 0xfffffffffffffffe, {[{{@ipv6={@dev={0xfe, 0x80, [], 0x25}, @dev={0xfe, 0x80, [], 0x16}, [0xffffffff, 0xffffff00, 0xff000000, 0xffffffff], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'bond_slave_1\x00', 'veth0_to_hsr\x00', {}, {}, 0x7f, 0x0, 0x2, 0x2}, 0x0, 0xc8, 0x110}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast1, @ipv6=@empty, 0x13, 0x3f, 0x2}}}, {{@uncond, 0x0, 0xc8, 0x110}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@rand_addr=0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1a, 0x3}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xc}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xc8, 0xf0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xe}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x1, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [0xffffffff, 0x0, 0xffffffff, 0xffffff00], [0xff000000, 0xffffffff, 0x0, 0xffffff00], 'dummy0\x00', 'nlmon0\x00', {0xff}, {0xff}, 0x3e, 0x2, 0x2, 0x48}, 0x0, 0xc8, 0x110}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv6=@dev={0xfe, 0x80, [], 0x24}, 0x4, 0x6, 0x7fff}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x668)

04:05:07 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, 0xffffffffffffffff, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x80800)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

04:05:07 executing program 3:
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockname(r0, &(0x7f00000000c0)=@ipx, &(0x7f0000000140)=0x80)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in=@loopback, @in=@empty}}, {{@in6=@initdev}, 0x0, @in6=@local}}, &(0x7f0000000080)=0xe8)
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c)
sendmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@in={0x2, 0x4e21, @multicast2}, 0x80, 0x0}}], 0x4000243, 0x0)
r4 = dup3(r2, r2, 0x80000)
ioctl$ASHMEM_GET_PROT_MASK(r4, 0x7706, &(0x7f0000000040))
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000400)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000180)=0xe8)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@ipv4={[], [], @remote}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f0000000340)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth0_to_hsr\x00', <r6=>r5})
getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000017c0)={{{@in6=@remote, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f00000018c0)=0xe8)
sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@report={0x84, 0x20, 0x2, 0x70bd2b, 0x25dfdbff, {0x32, {@in6=@mcast1, @in=@remote, 0x4e21, 0x0, 0x4e22, 0x7, 0xa, 0xa0, 0x0, 0x0, r6, r7}}, [@mark={0xc, 0x15, {0x35075c, 0x5}}, @user_kmaddress={0x2c, 0x13, {@in=@remote, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x0, 0xa}}]}, 0x84}}, 0x804)

04:05:08 executing program 3:
r0 = socket$unix(0x1, 0x1000000805, 0x0)
r1 = socket$unix(0x1, 0x1000000005, 0x0)
bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8)
listen(r1, 0x0)
connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8)
r2 = accept4(r0, &(0x7f0000000000)=@ipx, &(0x7f0000000080)=0x80, 0x800)
sendmsg$nl_xfrm(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=@getae={0xec, 0x1f, 0x1, 0x70bd28, 0x25dfdbfd, {{@in6=@mcast2, 0x4d5, 0x2, 0x32}, @in6=@local, 0x1, 0x3502}, [@mark={0xc, 0x15, {0x3, 0xd3}}, @coaddr={0x14, 0xe, @in=@remote}, @algo_crypt={0x7c, 0x2, {{'ecb(arc4)\x00'}, 0x188, "9c0697336e30c6da710ac80bd755b7268ae8b4cf6e608b32e63e943b4b5c6dca270373ed3d87939b5e40a77ec403743e34"}}, @replay_val={0x10, 0xa, {0x70bd27, 0x70bd2c, 0xff}}]}, 0xec}, 0x1, 0x0, 0x0, 0x801}, 0x40010)
r3 = dup2(r0, r1)
sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000007c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000007e80)={0x0, 0x989680})

[  896.122125] binder: 5429:5433 ERROR: BC_REGISTER_LOOPER called without request
[  896.148472] binder_alloc: 5429: binder_alloc_buf, no vma
[  896.161787] binder: 5429:5433 transaction failed 29189/-3, size 0-0 line 3136
[  896.174650] binder: 5429:5433 got reply transaction with no transaction stack
[  896.184292] binder: 5429:5433 transaction failed 29201/-71, size 0-0 line 2921
[  896.231688] binder: undelivered TRANSACTION_ERROR: 29189
04:05:08 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x6)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240eb0520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)
r1 = dup3(r0, r0, 0x0)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
clock_gettime(0xfffffffffffffffb, &(0x7f00000001c0)={<r2=>0x0, <r3=>0x0})
utimensat(r1, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={{0x77359400}, {r2, r3/1000+30000}}, 0x100)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000100))
ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000140)=0x8000)

04:05:08 executing program 5:
clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = getpid()
rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000002c0))
ptrace(0x10, r0)
ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000000)={0x0, 0xffffffffffffff80})
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x8000, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000080)={0x7, 0x2, 0x10000})

04:05:08 executing program 3:
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:init_exec_t:s0\x00', 0x21)
r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0)
r2 = getuid()
quotactl(0x4, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000140)="9651695100443c2bdf040806b40909e15e30eebf82f7b1413a93218cf0ea81466ec9d75db1a912d128c9e4ffedcc63c3c581ee4ebf4553715198113863de06abb85dbaa4b69d2f485a04ff992b2a60fd5830d01bffc6ba2d2140d3f794c6c48b7526124de86c9dc2a3189f779a29d1bd4c74fbe64881d3375c3c961ce7a6a54dc810a6cc49e1")
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

04:05:08 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80800)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

04:05:08 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180)='SEG6\x00')
sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100001}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x15}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x0, 0x5ece90dd]}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x100}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5e}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x40804)
r3 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x800)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r4, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000100)=0x401, 0x4)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

04:05:08 executing program 4:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bc070")
recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000280)=""/190, 0xbe}], 0x100000000000021c}}], 0x1, 0x0, 0x0)
getresuid(&(0x7f0000000040)=<r0=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r1=>0x0}, &(0x7f0000000180)=0xc)
r2 = getuid()
setresuid(r0, r1, r2)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00')
setfsuid(r2)
preadv(r3, &(0x7f00000017c0), 0x1d0, 0x1f000000)

[  896.405137] audit: type=1401 audit(1555041908.277:168): op=security_bounded_transition seresult=denied oldcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 newcontext=system_u:object_r:init_exec_t:s0
[  896.427520] binder: 5454:5462 ERROR: BC_REGISTER_LOOPER called without request
[  896.438554] binder: 5454:5462 got reply transaction with no transaction stack
04:05:08 executing program 3:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x7, 0x0)
bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8)
listen(r1, 0x0)
connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00')
write(r0, &(0x7f0000000000)='2', 0x1)
accept$unix(r1, 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x800000bf)

04:05:08 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x400032, 0xffffffffffffffff, 0x0)
ioctl$TIOCOUTQ(r2, 0x80045438, &(0x7f0000000180))
fsetxattr$security_ima(r1, &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@sha1={0x1, "65f2e444571c3a38593d6ce53f0cea5facd72799"}, 0x15, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @local}, {0x2, 0x0, @empty}, 0x186})
getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f00000001c0)={'raw\x00', 0x80, "649f39d61e49deea01a693fb1399f9192054a605b5ca77e53e312c6b2e170b026ce82bd5d8f7d2c49dc80aafbaedf7b3beae69d32783cb6fd64e075fce6205b7028f64ef4b32be2bfe615b6ceeb6ed1fa6a55d25079096c975bf54c494926c519a88d1909a50cfa8d1e2cfb4d653b54f56b10ea25152f5dd490724a47c5141d7"}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000580)={0x0, {{0xa, 0x0, 0x0, @empty}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000140))

[  896.458703] binder: 5454:5462 transaction failed 29201/-71, size 0-0 line 2921
[  896.477957] binder: release 5454:5462 transaction 292 out, still active
[  896.489950] binder: undelivered TRANSACTION_COMPLETE
[  896.550739] binder: send failed reply for transaction 292, target dead
04:05:11 executing program 2:
clone(0x3102001ff2, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
select(0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x100000000000a)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@empty, @mcast2, @rand_addr="316ebf4b7d30c5aa2d0133b002d68fb3", 0x0, 0x0, 0x0, 0x12a})
r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040))
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)

04:05:11 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80800)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

04:05:11 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x40000000002)
fcntl$dupfd(r0, 0x0, r0)
ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x0, 0x7417})
lsetxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f0000001180)='trusted.overlay.redirect\x00', &(0x7f00000011c0)='./file0\x00', 0x8, 0x1)
r2 = dup3(r1, r0, 0x0)
ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000040)=r2)
write$UHID_INPUT(r2, &(0x7f0000000140)={0x8, "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", 0x1000}, 0x1006)
ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000000))

04:05:11 executing program 4:
r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000008c0)='/selinux/enforce\x00', 0x400403, 0x0)
link(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)='./file1\x00')
openat$cgroup_procs(r0, &(0x7f0000000900)='cgroup.procs\x00', 0x2, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)=@ll={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)=""/219, 0xdb}, {&(0x7f0000000240)=""/223, 0xdf}, {&(0x7f0000000340)=""/129, 0x81}, {&(0x7f0000000400)=""/114, 0x72}, {&(0x7f0000000480)=""/217, 0xd9}, {&(0x7f0000000040)=""/57, 0x39}], 0x6, &(0x7f0000000600)=""/10, 0xa}, 0x40002003)
mount(&(0x7f0000000800)=ANY=[@ANYBLOB="2f6465762f6e756c6c623000c4b62a46595c72ee34566b847c5b403e89eb8180f95d0743358fae74fd057e6e9e2d28b32ea0ac095bee0b3bf99f2e57be265549fe5a5bf400b86b4133ab6479ef20a150d5a8a7b84c75233c2fc4343ea18f1254fea5f2ab8a96f76bad86725550e6691834cbaf1aba4b9d2ead0c060e1c0cf5b4b2404bbd9423b406e235fa3d9f8c37c6a7e0ca19092020448c"], &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='reiserfs\x00', 0x20, &(0x7f00000007c0)=']keyring{posix_acl_access)\x00')
r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
ioctl$void(r2, 0xc0045c79)
openat$cgroup_ro(r0, &(0x7f00000009c0)='rdma.current\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x40000040001, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000000d000000001d00009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x80, 0xfb, &(0x7f00001a7f05)=""/251, 0x4, 0x0, [], r1, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffffffff1d1}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x400}, 0x10}, 0x70)

04:05:11 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000140)=""/6)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0xd023, 0x6}, {0x1, 0x4}]})

04:05:11 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
listen(r0, 0x1000)
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0)
syz_genetlink_get_family_id$tipc2(0x0)
sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x100000000)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_GET_THP_DISABLE(0x2a)
sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f00000000c0)=0xe8)
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000240)={@remote, r3}, 0x14)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
shutdown(r2, 0x1)
recvfrom$inet6(r2, &(0x7f0000000000)=""/31, 0xfffffeb2, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x800, @ipv4={[], [], @broadcast}}, 0x1c)
r4 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r4, &(0x7f0000000040)=' ', 0x1, 0x0, 0x0, 0x0)
setsockopt$inet6_opts(r2, 0x29, 0x37, 0x0, 0x0)
dup2(r0, r2)

04:05:11 executing program 4:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0)
accept4(r1, 0x0, &(0x7f00000000c0), 0x800)
bind(r0, &(0x7f0000000240)=@generic={0x3, "43b7a8ddff39fa4fc552c28ca8a5f14f58c92be40ad7dd21a55767a4683d16e0af2922e994e9fbbcb4f2ff02a0510a5708e11345f06057299192d435c440f93987d236bcc79a287245c2681cad803a72f3af722913f8ca32b134a6ab7609f407d7ceff6756f71e8149498ee9308e2c2468f971eb00351ba247aefff622d9"}, 0x80)
fcntl$addseals(r0, 0x409, 0xe)

04:05:11 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=<r1=>0x0)
tkill(r1, 0x12)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, 0x0)
flistxattr(r0, &(0x7f0000000380)=""/218, 0xda)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x48002, 0x0)
ioctl$PIO_UNISCRNMAP(r3, 0x4b6a, &(0x7f0000000040)="9843dd4ddcd09edb24fd368edd599f50a0b1141132b6f5bcfe7e9ccef65eba15b94effa4ccddd647ba645359931487233a3572a4512bc350243cf3fbba421543bb4c13200d895c3bee8173593de661ec6112e55c82aefec4af05150594a665f0293a46a0747ffbfe594d8c97908743f5dec6c7beba886465ec039476dd71b566c980316c17b11a08db2f72ac1bb45dbe5c4422d1d6f7801eb1ad744cf13b971b2b5c22d95be3e8d680d8affff1dc9886a870f32e18182bee894380118b2ea4ecf1b8e646744ff7082ebfa7b4290caba0c92ac1c21d4cd6a2089aa997242be97d65f9c6")

[  899.164652] binder: 5489:5493 ERROR: BC_REGISTER_LOOPER called without request
04:05:11 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x39})
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
r1 = fcntl$dupfd(r0, 0x406, r0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000004}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xf0, r2, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x737}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2c}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7fff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x21}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xab}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4004800}, 0x4)
write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [], [0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

04:05:11 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
unshare(0x20000200)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/mnt\x00')
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(r1, 0x0)
ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f00000000c0)=""/16)
clone(0x70024100, 0x0, 0x0, 0x0, 0x0)
r3 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000200)="5c1e7407cd2546da24822f5440e41cfc24f35ff92614fdc88941e4aabb674078e1d301d54363e924d04cd14a76248914f9579bf4da903b3cfbe1aac4a0a9d7ed1c5965c9ef6b7fd5d6aad9c1c26dcc8b2dd070c7bbf0efd9c9b85b259dd2e515a8167787ed29758746a55e5c7030bb3c53ddaab0b58fd2f3f8c0560b5834f89e91258b3ae0029b8a763e3496ff60d69736862493d7", 0x95, 0xfffffffffffffffb)
keyctl$get_keyring_id(0x0, r3, 0x7)

[  899.226376] binder: 5489:5511 got reply transaction with no transaction stack
[  899.261682] binder: 5489:5511 transaction failed 29201/-71, size 0-0 line 2921
04:05:11 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
unshare(0x600)
pselect6(0x40, &(0x7f0000000000)={0x8}, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x1c9c380}, 0x0)
r1 = request_key(&(0x7f0000000040)='id_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='\x00', 0x0)
keyctl$setperm(0x5, r1, 0x10)

04:05:11 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

04:05:11 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x7, 0x4)
ioctl(r0, 0x2, &(0x7f00000000c0)="83876b97be33b1887e70b101c058df8a8fa348ec1fb52e8a58b61791f1f0aac73e620e9b09812fd9893c793f96fb265287b9f3514a4209cf3581e40594566400d8360ab51dadd89611a781bcb565ff26a0ec9a2319c2e11819fa543711cdded5dec25845b84e1f0601d8cc8c2f3919b5c91f56d3e481ee155893f8251f96c3d3e49b0f8ea987e32f3d67ffbe24a3fbc4e3218ff133e11cdce7652f51ba9ac1ca50c3166709e4389e9a2270e813c46cb9ed6fc463bf")
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r1, 0x28, &(0x7f0000000200)}, 0x10)
sendto$inet6(r0, &(0x7f0000000080)="03a212f59cb585c2d89aee66d5c9ecda5512378cc06b7e232d00867f3e465b61fbc0a008e62d54b4990f2d15fe9b12e4", 0x30, 0x24000000, 0x0, 0x0)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612)
setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000001fde)=0xfffffffffffffffc, 0x4)
getsockopt$inet6_udp_int(r1, 0x11, 0x6f, &(0x7f0000000180), &(0x7f0000000280)=0x4)

[  899.337877] binder: release 5489:5511 transaction 295 out, still active
[  899.346711] input: syz1 as /devices/virtual/input/input182
[  899.360457] binder: undelivered TRANSACTION_COMPLETE
04:05:11 executing program 4:
creat(&(0x7f0000000980)='./file0\x00', 0x0)
r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
rename(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000000)='./file1\x00')

04:05:11 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20}, {0x80000006}]}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000000280)=0xe8)
ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f00000002c0)={@dev={0xfe, 0x80, [], 0x1f}, 0xc, r2})
sendmmsg(r1, &(0x7f000000ac80), 0x400000000000254, 0x0)

04:05:11 executing program 2:
r0 = socket(0x400000000010, 0x3, 0x0)
write(r0, &(0x7f0000000000)="2400000016002551075c0165ff0ffc02020a000000100f0307e1000c0800180000000000", 0x24)
r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
fchdir(r1)
ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000001100)='gretap0\x00')
fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f00000000c0)={0x0, 0xfb, 0x1015, 0x3, 0x7, "b26b6cbed7dce562b1d0018825eb4fbb", "ee1a83bd261a97c5f0718af5428a4c412dcb986854e5bea5df5423b70ad3b40df61c2ed0cb4763f2bdb1745a22728471071ba6373ad688a89534ac80b673a7db265e0132a31d0bc16449cd5f2c8e237ace0f4ac356c1fd794c75219b2663e046759f9461a2c5c070419fd02010eda3f8697c9f231aec099626696fa0e0d92108f966372fd4adb8000154b42c92f68d9898770fe23d5114d942aeced66ae2e0a573f8736cbad45109ef09f69a167274082eb011bf931ea925147ea77cf33dcafae82d3eee3d74ed99c16e18a239d1974c3b28dc4a3d7962d1668509cd62712cf542b41e0028ae1a81e912c54cda72c3b1b518fcf79bf46f4abbd494cef706e0d15ddd3e559e802b79aa502b63dbdc0c8ff2bc74d7f3bc12936cc5498142d2f1309ecdd635bec0388471d905311b8bcf5f285589f8044a5dd5b12d858f67e27f03935bb58eb23c877fff446713397916f2fa735e71c3ec42d555f7810a2f9fa3bbf2fea13d93aa16ad0b13c99a4db0b70ae4a81eb4cf6bd80150af5458ecc227e5b936dcc9e67208e0f563d5bd29b29337a030562dcecfc09d6cc7199206eb85e6aa6ea07ca1a7c8e30d1cc324942ef983d3bf5e0538fe25c9d34206b9c7197f5888e18dfedcc58a3205b62399a0051c2cb25705b9c1c86735780359b1ff681e3a4e0655c49dbf3f01c6637dd0e71586890d46cbdf9b2baf5e162f5e9f1a82d6f5c8a40e9963ff0b77327be81203753f9d170f246f5f32fc8fd4e2b1940c291e53a27e232ad2d07535160d4b4d0702447666f6454976d874eda975e4a0e72bbfd29a64c87fc78819ff458897bde01a4debc26a389af0630d8908252fb6cf9956050c7d31858b5ab13347dfedc3947be0d1878b66f6235250f5012ecbd36e01bdad271379eafb335d96b2c40976cb71342f00606e16a06f1a9e14a1e38b31d08eb995a263fa4bd99024e7392746212a6653f5f531f73e9f2115582fb8ea8874746e23672101caf86f6769a46316a66b12e9d52705a8ebe65cb19b75570372c10d1593ea87da6679c8688a2c2feca78c00b7b15de99316b19982af9439e7b2c8bafa8181b285b4ec359f670cca75118e8a04a5d964a2b70c251ff5d9f7db50cd7027cb55fe62e34ccbbdfdec84eb66a475597b7fc961a434a2dcbb20daaebf33f8872a85f66ef7915a5d006fc1bf12abdc74eb965c637336d3d4d3d9568fc4c1ebaac900c0d71a1cddb7d933880b93db2849c2815525419ded1df890602f9685ac7f9e5ec024b75bd6c2cf075fe65f3d61e603b10b7d3459090fc3385470584a75c78bb5ee215228ee19e37bb51c0547c2882df41326e78eaee51b684356e5c5e658529732c5a1544c2c2821ca059b407f5817411bf16da2fabf16bdfc4fd8ce50cb20b1f1ec1af3c75114703280b605f9ae46ea1855a926163430a3bf36d72c72ab2551da8a3bdf95a79e73b9ce15ab4b8db9e086eb83dab608e26dc6928f91e713e633d84068413f2ad6197398e06cfa237fd10ebf2a4b8244c0579d845384dec360d1446621e335683f38f1c2c345bc05cef6659299a6ef708c5f0edc41e9a1a519fa30c0637ead064fbcec5904045e03b9ed701f0916abb1998bc89434b12fcbc8e6ab27f6b7d3042b43de6732dbfb1375e4a736fd2b488037b3a847111e10fb4acb30d2064e594e975bf5348aa5363832c450df845fb1f73f123284b55b4ccf065f799f8098c1f5c4092cd8d2c5966de3b88d5617f24a4e5af4f5380759eda76b902c1724cb39ac842034c8c10dfe512c8fc7915b3592dbf3f7fc635144bf8f50aae5642e394afd6e57eae1603d8068a15748182a5cf4edd7575e42438a1a6ef5dbe150e3f3411fac45836dfda17bbc3bebdbc327c4f3db9f2e1de55aee828d0e06ab7539f2b30c71f0434510543c902149645a18ba65e5fd7920a48a7e3f3e87807b1a7ece46567c56d4206bccee477f7d9ce8cd889ea3e047973d26752b2a58b850546cd5d4a99e1e772f39a90baa4b91474f5c98938f2505f19d9b2b6326996c529fc8578849eff972bbf3ee93fb92a62fa408d9232c28edeab9f576500039f29b6bfc61178b2ac71ec560dea50f505b84bb3d6db6b9862539c25e7f4535cba3dd44b1edb41955bada5476693ff158770e60702ddafce5d8908d1337d489071bb01aba4a4f7557a81401ab13cdec8364d0ccf2dd1f6666b2aecfa74696d200d41cea6d76891c0fa15df982c3e231b011cc4ef3ddb257dca9955c3c4e6d9b6e2cd8f6b7ee15074bd1afd3eb539cc978265b549b5027e3b031261b71830061e2fcd49f39ad620459b6473650d60bf91f0d6cfff435d628c343e864b252dfd47a57bd042a0cb374bd53df78a92198aafb67787a9fee1a94013ca2cbb4186d6c7c8ff868339101d3c816c8b5e25830311dfffeeb45b7c815a8fed5b4a49493acf5c3669222b6e073e81547efbd54790aeda912a582a813b017f35b52778faa6df5fb837a721171e1fd648d6b9d5a92ba1972dadb6ffa6decccfe02ec7386658abc884915afc97c7158da0d1b334a6f074e58fa347a6b418e88892cca5df7e2d34bfd035165b3d3e46f928a80953eb47a8b8d2a33ddb7c5e41105da6553706a4ec2dc28f1192c8a36771172566a3a9f9a2a35be332b4aca09ff48350018aae2ed735d8a8a8ee64e963b9a128759f2eca1b82b14fefc2d9b395bb7f88ac06a4401d5015e4ff33554836d47b0e6062d0f1bc0561be5c91de752a2da3939672caea7b1a6dcb16d52fa8b854581b31ff0a88eb6e0e910239877fe4ce8ba53332296b7b299197dba8b0d456c7d1e418093db132991ab331ac15ac0ba80526e64e97ed2c23efd7e7b5652b2cf8e2295fc8339f5fe3c4bdf1306a097e7ee01289601812c276c11a233f8435de63fb9f5da0781f730eb2c52efd2f6a55e42940392834aa9fae9c3f79691f76c55a64f8ca90207332fd0b841be1b6c590aa955e9ffda737f1d69d2db2191d11a9eeb5a50ce9261c3c5d03d981ef429700f089e858e3ec4a7b5da50797e7ac022b11349e014e5976651442a7c67ad4db448e969baceefc4ec75d4158275854aabdbb8b17b4da29bf512a150522da58d312c02a4ec3474c97d47994cd3d3df24332451ae248d03f627cd0dfb78029536aabdac60f3371f518a8a8a8023be859dd0b4931e0a293f1cb6c51e990db291b3d18855e2d1936067556ae796d540cd3617139af8fc8ffd947a393bb99d6c95ea53ee7259d7ad69efb584f6a47e7114d968adafa4e481c7329e2b26585759fb0eeb5bbbf35d896eb376bb977d4f09cf45dfbaa53251580b8d38520c8f459fa9420e5fb1f8c71b536ffc2fb24b2b5230fd69be9715f24392958df2f84542d68f7e9e18a1d8ced6331c1e4b0fe6ed629a65824a1d24d1cffe461200b00fcae4bf0848abdddea7d8f6b8e26354958f303a92bd46d36afef8826950799f08f33a3a695bb1b51d04ebb8f15dd23a936a7eb8dc05429e590e27d40ef4b306cd771d9ee8237b5952c6cf6ff069845897895e502b7144cf33b9e523c10ab59f897d505abff888ad1ede756e40f1b7236e8c4307142119393be8ffa37b28ab86cc5ff22720d8f24cd45f293ea4462016ec27f067217098702579c755f7a5966e07c817e91225506802d707177fe43744a312e367417b687afc74f06481dd0866cb9811638f005f0d14963bd7de5076508b0a9bf15c129c8246f54a55486e387a925e31f2c7e458c0c0abf3c4bebcfa049a783b19ec64ddd296b2d5572b4d0a7861d5bf593fc4c5de21b65419a740fbc3a7a55cdc2c5eeefb6a87aadf2ae8b21c9554aa9d949c669bbc6ad96c0187ba4b7b29850b5508470b06ec974c7bb62e10d3b15ea828eb0ee124e74deb7cc3cf04804bf1ddc09937c53966ac66d642adafd4ff37ab04745bae8901a9aa0f36dfcb21ff039b069bb139286c811063539307759b31d0394123bd26705dc820c2c1f859a03e175b442aa17161631f6572531b8eeebc2611de1cf8645c9919e082301791c64eb4b9c7b96f732c1723ce4502d05156a39739c9d04a4b90d458baecc59f3c0c66477ba39a580aa394cf51178b2fedf79f86444b84f659f35e3a0bcd64ddf904730a5b7594fda441732663eae2525bf47449054720d130202189cee6e588c86aa40438fa69f73079c2e252f94d8a09464f9eea8b0fe7c286da19db599afe47e784a70752347b8e00fc6ef9f37fff8e51b803a96ea91fd9dc1fb36ac7c615fd364cc32a730932b2f4e593fd7c74dece640bfa256c77156c125d65483996423e0539c9694b48c6ac828313fb89d6e7be5b3a6df7b750cf3e1325726e368e2671f4540dd67bdf7ccc4d446cbdd4c98f6f763f273ad69e7d6840d15489eacaeba5ed3fe89856ae50b249805a249621b995e2210dad4174d84de89a58148569705c955eb8b852020c334b334f81667292ff2e3486206df06fb833e13816712e7856dd5fc1f7ddbbaa6f204956dfa23b6ba511ed8630acde97d5ab59f30a9a2e86653f5cb5c46ec21d462185a366d74db120d9ce340598087e8d6c50a132c84ad895a537acb0860e56dd0cdc238713d32d5c78da4c8c6012f52782c5bb2bf4f81a77c96ba568874040d2ae344b01744028eabc8f8c87ef522ae9070e8cd4f9401b842b4137581467e19d16f1874dfb562c96e9a2cd65cfe7043086ee859bb5d5511043678f753ec357bcd560a0299d4661d8cf9d7df9e45d04641938c0308cd849da6154ffc0729bd8e314a6a79637999feadc98435cf40438515cf48f91036243b8987e27a95f7b9d45cff8fdaba78cdf0c8e6697f9dc10287c91135412435ecc333e468fcb4b0e61d11c5346aa698dbc661304709f13d61f06093a2ad810bacd31f4c6a74dea1b51c3ecce27380d6a80dc09d7957f95b90eae1a7a3f8f2b7689bd862049d7a0f11221223ca1b8bdf838d0352c7cf7357d674a3b47e7f0ecf1cd31d08335c2205db7379aa928a50d47540eec1270ed88597160f3370331e6fd08938fc1c887f1e682a3ace9608621844961d4ca2bc368fc2a687830cce0e7f99d141b91a9209a4a76052df4e8791bb463a2c94710fe1f5e9c33db89ca68efb243982493c8f003170ff84aad353da46ba7aee65b796b378808ea4079efe12d7ad7a423a5018fa5bab1bad570ef1967ea219ff20575dff92fbab06a42673339cdfed3619c3c12d959dc76c1fdd129dcd2ce427265806669c876a2a271dc31745432a9a5fb9dc64d63896986635ec0f9c94faf530274e9c2c369395d44e3ada17dc7153ac18fe781a2ec59e169fba602be76b7f10d40b7c70faa46035a5213e7354f162ff6235ab2dfec88939226892c5797df1e56b4e1a0b83262908eb3c2d494ac936aa1d7deafa69f92e5979eda7e971de161c3c6618f6f74eff44d1c29d1f919ef99807bb1d1bed937449cb8e0b4155616ef681d09338f71f9cae920dc71352c2c0d6eaf983f5f304b68268b3fa8189d0028b11ab7422d011706d7812e7dbfefd2ef1db48ed319251fdbc8c7eb375a11c047f10bd176a9ea37a85b0ba5eeb8fb6506827bb4a250eb90100b6b047a9ba6ce71de95216fddbdf6ae822d5d0225ac2f967125f30242ab8b494a0714ca143e0f42e95891cb86b5e55e16f461233d82e72d7aabd3645f0838325bf08a3a818a557bd1ba6cf8aa1f7d6d367b3e05cef1b4fd80d88bc629e0c69a4905bba1a39c621aa0963730d2e6f6c2be6a3744f9898ba5c6a49ffdf27b1f31b8c7c12d5470b56a00206d97bd54b90c2527ca51"}, 0x1015, 0x1)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0xfffffffefffffffc)

[  899.403526] binder: send failed reply for transaction 295, target dead
[  899.438651] binder: 5534:5536 ERROR: BC_REGISTER_LOOPER called without request
[  899.471141] binder: 5534:5536 got reply transaction with no transaction stack
[  899.500904] binder: 5534:5536 transaction failed 29201/-71, size 0-0 line 2921
[  899.509384] binder: release 5534:5536 transaction 298 out, still active
[  899.525665] binder: undelivered TRANSACTION_COMPLETE
04:05:11 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipx\x00')
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x17c, r3, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x84}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x7f}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x38}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x8}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffffffffffff9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xe316}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffffff9}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x8}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x12, 0x24}}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x95}, 0x41)

04:05:11 executing program 5:
prctl$PR_GET_FPEMU(0xd, &(0x7f0000000000))
chmod(&(0x7f0000000040)='./file0\x00', 0x14)

04:05:11 executing program 4:
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80800)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000080)=0x2, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getrule={0x14, 0x22, 0x128, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x0)
setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4)

04:05:11 executing program 3:
personality(0x400000d)

04:05:11 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

04:05:11 executing program 2:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x101000, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000140)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000780)="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")
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80080, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
truncate(&(0x7f00000000c0)='./bus\x00', 0x1000)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x20008)
write$P9_RSTATFS(r2, &(0x7f0000000340)={0x43}, 0x43)
syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00')

[  899.571022] binder: send failed reply for transaction 298, target dead
[  899.599339] binder: 5562:5565 ERROR: BC_REGISTER_LOOPER called without request
04:05:11 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bc070")
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a})
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000040))
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

04:05:11 executing program 5:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)
listen(r2, 0x0)
connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
r3 = accept(r2, 0x0, 0x0)
setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x7, 0x4)
dup3(r1, r3, 0x0)
dup2(r3, r3)

04:05:11 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

04:05:11 executing program 3:
r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c)
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='setgroups\x00')
exit(0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040))
r1 = getpgid(0x0)
syz_open_procfs(r1, &(0x7f0000000080)='net/fib_triestat\x00')

04:05:11 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
fchdir(r0)
r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0)
clock_settime(0xfffffffffffffffc, &(0x7f0000000100)={0x0, 0x989680})
write$P9_RAUTH(r2, &(0x7f00000000c0)={0x14, 0x67, 0x2, {0x0, 0x1, 0x5}}, 0x14)
write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x323)
r3 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, 0x0}, 0x4000080)
lsetxattr(&(0x7f0000000340)='./bus\x00', &(0x7f00000003c0)=@known='system.sockprotoname\x00', &(0x7f0000000480)='\x00', 0x1, 0x1)
r4 = getpid()
sched_setscheduler(r4, 0x5, &(0x7f0000000040))
r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0)
getsockopt$inet_tcp_int(r5, 0x6, 0x108000000003, 0x0, &(0x7f00000001c0))
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(r4, &(0x7f0000000180)='statm\x00')
r6 = syz_open_procfs(r4, 0x0)
r7 = socket(0x10, 0x80002, 0x0)
bind$netlink(r7, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
ioctl$sock_inet_SIOCDELRT(r6, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e24, @rand_addr=0xffe0000000000000}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xf4a24ee89013b476, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0xfffffffffffffc01})
write(r7, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
ioctl$INOTIFY_IOC_SETNEXTWD(r6, 0x40044900, 0xfffffffffffffffc)
connect$netlink(r7, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000b4bffc), 0x4)
sendto(r7, &(0x7f0000000340), 0x146, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000000280))
recvmmsg(r7, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0)
write$binfmt_misc(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="451658cd1e84814cb4878fd797e997443cc8c603b1"], 0xe)
sendfile(r6, r5, &(0x7f00000004c0), 0x10001)

[  899.621579] binder: 5562:5565 got reply transaction with no transaction stack
[  899.640662] binder: 5562:5565 transaction failed 29201/-71, size 0-0 line 2921
[  899.649313] binder: release 5562:5565 transaction 301 out, still active
[  899.659923] binder: undelivered TRANSACTION_COMPLETE
[  899.694612] binder: send failed reply for transaction 301, target dead
[  899.716644] binder: 5578:5581 ERROR: BC_REGISTER_LOOPER called without request
[  899.741943] binder: 5578:5581 got reply transaction with no transaction stack
[  899.754287] binder: 5578:5581 transaction failed 29201/-71, size 0-0 line 2921
[  899.778128] binder: release 5578:5581 transaction 304 out, still active
04:05:11 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

[  899.790610] binder: undelivered TRANSACTION_COMPLETE
[  899.811309] binder: send failed reply for transaction 304, target dead
[  899.834922] binder: 5588:5589 ERROR: BC_REGISTER_LOOPER called without request
[  899.835686] binder: 5588:5589 got reply transaction with no transaction stack
[  899.835695] binder: 5588:5589 transaction failed 29201/-71, size 0-0 line 2921
04:05:11 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x80500, 0x0)
write(r1, &(0x7f0000000100)="9b7e4fc00f2d76f98564d14b0d28a480acbf036ff94de3300d5d5a4a7719b6b41f642f58c5ed1653647e1b6dd0d07827f0deeb43436133152a527639314ca5aa12aa01", 0x43)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x101000, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
getsockopt$inet_int(r3, 0x0, 0x1, &(0x7f0000000080), &(0x7f0000000180)=0x4)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

04:05:11 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

[  899.877290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=115 sclass=netlink_route_socket pig=5584 comm=syz-executor.2
[  899.919974] binder: send failed reply for transaction 307 to 5588:5589
[  899.928567] binder: undelivered TRANSACTION_COMPLETE
[  899.934881] binder: undelivered TRANSACTION_ERROR: 29189
[  899.941781] binder: 5595:5596 ERROR: BC_REGISTER_LOOPER called without request
[  899.957501] binder: 5595:5596 got reply transaction with no transaction stack
[  899.974306] binder: 5595:5596 transaction failed 29201/-71, size 0-0 line 2921
04:05:11 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

[  899.997828] binder: release 5595:5596 transaction 310 out, still active
[  900.006152] binder: undelivered TRANSACTION_COMPLETE
[  900.011944] binder: send failed reply for transaction 310, target dead
04:05:11 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp\x00\x00\x00?\xefI\x03\xa0\xb5V\xcfF\xbd\xe2\xcc\xca\x944\x17m,\x00\x04\x00\x00\x00\x00\x00\x00\x90!{\x95\x10\v.\xa7\xb0v\xba\xdfv\x06\x05\xef\x87\x83G\v\xe4F\xd5\x02\x00\x00\x00\x00\x00\x00\x00G\xf7j\xe4L>\n.8\x0e\x068(9\xddu\xcd^\x05\xf7C=yR%\x88\xd9\x06\xac\x03-vgV%\x00\x00\x00\x00\x00\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x4fff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x3)
accept4(0xffffffffffffff9c, &(0x7f0000000400)=@hci, 0x0, 0x800)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000740)='IPVS\x00')
r3 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000600))
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f0000000800)={&(0x7f0000000300), 0xc, 0x0, 0x1, 0x0, 0x0, 0x400d1}, 0x0)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0)
ftruncate(r4, 0x2007fff)
pipe(&(0x7f0000000340)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
write(r6, &(0x7f00000001c0), 0xfffffef3)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0)
read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3)
syz_genetlink_get_family_id$tipc2(0x0)
sendfile(r0, r4, 0x0, 0x8000fffffffe)

[  900.039596] binder: 5601:5602 ERROR: BC_REGISTER_LOOPER called without request
[  900.059368] binder: 5601:5602 got reply transaction with no transaction stack
[  900.070278] binder: 5601:5602 transaction failed 29201/-71, size 0-0 line 2921
04:05:12 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

[  900.085359] binder: release 5601:5602 transaction 313 out, still active
[  900.105617] binder: undelivered TRANSACTION_COMPLETE
[  900.115653] binder: send failed reply for transaction 313, target dead
[  900.159551] binder: 5608:5609 ERROR: BC_REGISTER_LOOPER called without request
[  900.181958] binder: 5608:5609 got reply transaction with no transaction stack
[  900.200589] binder: 5608:5609 transaction failed 29201/-71, size 0-0 line 2921
04:05:12 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

[  900.209823] binder: release 5608:5609 transaction 316 out, still active
[  900.219371] binder: undelivered TRANSACTION_COMPLETE
[  900.229595] binder: send failed reply for transaction 316, target dead
04:05:12 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

[  900.263151] binder: 5611:5612 ERROR: BC_REGISTER_LOOPER called without request
[  900.273153] binder: 5611:5612 got reply transaction with no transaction stack
[  900.283427] binder: 5611:5612 transaction failed 29201/-71, size 0-0 line 2921
[  900.295439] binder: release 5611:5612 transaction 319 out, still active
[  900.306786] binder: undelivered TRANSACTION_COMPLETE
[  900.324935] binder: send failed reply for transaction 319, target dead
[  900.360468] binder: 5615:5616 ERROR: BC_REGISTER_LOOPER called without request
[  900.372411] binder: 5615:5616 got reply transaction with no transaction stack
[  900.380769] binder: 5615:5616 transaction failed 29201/-71, size 0-0 line 2921
[  900.390359] binder: release 5615:5616 transaction 322 out, still active
[  900.401261] binder: undelivered TRANSACTION_COMPLETE
[  900.415690] binder: send failed reply for transaction 322, target dead
04:05:12 executing program 5:
madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x0)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80000, 0x0)
r1 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x810, 0xffffffffffffff9c, 0x0)
ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f0000000080))
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={r1})
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0)

04:05:12 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x80)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000080)={0x29, 0x62e67eb41fedba7d})
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000040), 0x8)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

04:05:12 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000101000008912, &(0x7f0000000040)="0adc060000003f319bc070")
ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000080)={0x3, 0xb2, "38061397cffff8a4b3151533ca50fb1630a1b254f8cd14f05bec499663b4cac50940e6bf4937c7859a70530c2eea97bfe9011d00b77b7c3ecf1f2be9777f06f8c86585a8b1213f1756ff5f27f1eadb603a64cc09324c049d25cbff2c14c00ec890ec4ab1e42a7bc4513a8ac3f02beba7e0ef6a5764b44a24646954442da386f145621e0f24e08ee2c14d0afb5a3fed8945205df79e781c02b65070e20bc969f1ca3761271eefb2453a7fc46e2e584fd3f5ea"})
add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
r1 = add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$search(0xa, r1, &(0x7f0000000140)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, r1)

[  900.601389] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=115 sclass=netlink_route_socket pig=5636 comm=syz-executor.2
04:05:14 executing program 2:
mkdir(&(0x7f0000001340)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0)
ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000000c0))
r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x9, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
inotify_init()

04:05:14 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

04:05:14 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
r1 = socket(0xf, 0x8080a, 0x1)
ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f00000007c0))
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
r3 = getuid()
fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
getresuid(&(0x7f0000000280), &(0x7f00000002c0)=<r5=>0x0, &(0x7f0000000300))
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@local}, 0x0, @in6}}, &(0x7f0000000480)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000005c0)=0xe8)
getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)=<r8=>0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0, <r9=>0x0}, &(0x7f0000000700)=0xc)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010002000000000002000200", @ANYRES32=r2, @ANYBLOB="02000400", @ANYRES32=r3, @ANYBLOB="02000400", @ANYRES32=r4, @ANYBLOB="00000000f77120511d6971f993a4171edbda2f94814f4c55b25b3db34525c15c87fbeca2ca38f6571c5e0d7d9cb8b4b15bb1436c10e9402e2c947a03544f34d35314a5c0d100f2a54f774ce05847fe864092c0fe9900077e3f507962075fbffa9775a2", @ANYRES32=r5, @ANYBLOB="02000600", @ANYRES32=r6, @ANYBLOB="02000500", @ANYRES32=r7, @ANYBLOB="0000cd84", @ANYRES32=r8, @ANYBLOB="040004000000000008000200", @ANYRES32=r9, @ANYBLOB="10000400000000002000010000000000"], 0x64, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/enforce\x00', 0x100, 0x0)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r10, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@dev, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000000740)=0xe8)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
getsockopt$inet_mtu(r10, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4)
connect$inet(r10, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

04:05:14 executing program 4:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000000c0)=0x102, 0x4)
bind$inet6(r0, &(0x7f0000d1a000)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='lo\x00\x00\x00\x00\x00\x00\x02\x00', 0x10)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000000040)=0x8, 0x4)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c)
r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0)
ioctl$TIOCCBRK(r2, 0x5428)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00')
sendto$inet6(r1, 0x0, 0x0, 0x20040000, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)

04:05:14 executing program 5:
clone(0x4000000003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_execute_func(&(0x7f0000000080)="cd8074fcb0b06969ef69dc00d9c4017d50ee8adcd0d01192000880410fd1b0b5d90000797c2a0f0fcdc4e3a95fd965eae23c3b4d4d408064797f41dfdf400f01efe5e59d7d2f2f1c0a1a63460fc4c161fccddfde9f")
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)

04:05:14 executing program 3:
mkdir(&(0x7f00000000c0)='./file1\x00', 0x0)
r0 = open$dir(&(0x7f00000001c0)='./file1\x00', 0x0, 0x0)
rmdir(&(0x7f0000000100)='./file1\x00')
fchdir(r0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r1, &(0x7f0000057fa0)=[{}, {{}, 0x0, 0x0, 0xffffffffffffffff}], 0x30)
clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execveat(r0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0)=[&(0x7f0000000080)='nodev\x00', &(0x7f0000000140)='nodev)$\x00', &(0x7f0000000180)='/dev/input/event#\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='vmnet0ppp1cgroup\x00', &(0x7f0000000280)=')$\x92GPL.\x00'], &(0x7f0000000340)=[&(0x7f0000000300)='/dev/input/event#\x00'], 0x100)
execve(&(0x7f0000000380)='./file1\x00', 0x0, 0x0)

04:05:14 executing program 2:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
prctl$PR_SET_FPEMU(0xa, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=""/121)
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$P9_RLERROR(r1, &(0x7f0000000000)={0x9, 0x7, 0x1}, 0x9)
sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b80000001900010000008da4fb7d52000000000000000100000000000000000000000000c0d10eb00100000000001b000000000000437331b46025b3a839feafc768a36e180fb5aa865545e4f0abe64e6b246893c6600a1d891701ce5865148e1db9a199715c05b84a46045ae9945ccc6194c158dad0bf179160", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0xb8}}, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, 0x22)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000300)={0x6, {{0xa, 0x4e23, 0x3f, @local, 0x1000}}}, 0x88)

[  902.353462] binder: 5645:5646 ERROR: BC_REGISTER_LOOPER called without request
[  902.371370] binder: 5645:5646 got reply transaction with no transaction stack
[  902.378700] binder: 5645:5646 transaction failed 29201/-71, size 0-0 line 2921
04:05:14 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

04:05:14 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=@ipv6_newroute={0x2c, 0x18, 0x401, 0x0, 0x0, {}, [@RTA_PREF={0x8}, @RTA_ENCAP_TYPE={0x8}]}, 0x2c}}, 0x0)
r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
ioctl$RTC_AIE_ON(r1, 0x7001)

04:05:14 executing program 3:
getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0xffffffffffffffff)
r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000e77fff), 0x0, 0x0, 0x0, 0x0)
close(r1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680)='/dev/net/tun\x00', 0x1c1002, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002})
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x8000, 0x0)
fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000140)='trusted.overlay.origin\x00', &(0x7f0000000340)='y\x00', 0x2, 0x3)
ioctl$LOOP_CLR_FD(r3, 0x4c01)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="03000000a05d2d5608001b0000000000119d7da18f9355895ccc42bd2542b1d16ef25603254d60d36bf1b69ec9b498ed5930b2f01ee4ceaad98106ee9e37a060d091f0ca930b3bf0fc1e15ea7e1cd857"], 0x28}}, 0x0)
r5 = open(&(0x7f00000006c0)='./bus\x00', 0x141042, 0x0)
ftruncate(r5, 0x2007fff)
fcntl$setflags(r2, 0x2, 0x1)
pipe(&(0x7f0000000380)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
accept$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14)
write(r7, &(0x7f00000001c0), 0xfffffef3)
read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3)
getdents64(r3, &(0x7f0000000500)=""/124, 0x7c)
sendfile(r1, r5, &(0x7f0000d83ff8), 0x8000fffffffe)
ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000040))
mmap(&(0x7f00005e5000/0x4000)=nil, 0x4000, 0x4c89e3ef5cf4748f, 0x11, r2, 0x1)
setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000200)={{0xa, 0x4e24, 0x8001, @remote, 0x100}, {0xa, 0x4e20, 0x9, @loopback, 0xffffffffffff7fff}, 0x0, [0x5, 0x80000001, 0xffffffffffffff81, 0x4e, 0x1, 0x200, 0x0, 0x8]}, 0x5c)
add_key(&(0x7f0000000380)='big_key\x00', &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000400)="dd883bfd1328c4a7d48daf72efe7dcc9f4632a8f3d413017699a5c1febd9ab27fb27949449", 0x25, 0xffffffffffffffff)
syz_genetlink_get_family_id$nbd(&(0x7f0000000640)='nbd\x00')

04:05:14 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
flistxattr(r0, &(0x7f0000000180)=""/252, 0xfc)
r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/create\x00', 0x2, 0x0)
write(r1, &(0x7f0000000000)="f58234fbbc262de5f977c87dd149163282d3c361b6b389d29127eec46cbb41d7a8c18cb86b034a7a8463fcb5c65256b149811a90660decc3369585c1a543c41614f50e07ddbb05c29c7b17e1fe5d7c4b4ce4946fbdd03e3f482862c661ff2ab1ffb4eed3c9a75964c219d65c7410bc8625e2a6848daeeba29ce03dfba0381e28d0f49c841375fe6641f38e79336e7d3be274992a25d4", 0x96)
write$apparmor_exec(r0, &(0x7f00000000c0)={'exec ', '/selinux/create\x00'}, 0x15)

[  902.419824] binder: release 5645:5646 transaction 325 out, still active
[  902.440783] binder: undelivered TRANSACTION_COMPLETE
[  902.446188] binder: send failed reply for transaction 325, target dead
04:05:14 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000fe5fee)='/dev/input/event#\x00', 0x0, 0x0)
munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
ioctl$EVIOCSCLOCKID(r0, 0x40084504, &(0x7f0000000000)=0xfffffffffffffffd)

04:05:14 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={<r1=>0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)='[\x00', 0xffffffffffffffff}, 0x30)
fcntl$lock(r0, 0x27, &(0x7f0000000080)={0x2, 0x7, 0x8, 0x4, r1})
sendmsg$nl_route(r0, &(0x7f0000000400)={&(0x7f0000000140), 0xc, &(0x7f00000003c0)={&(0x7f0000000240)=@ipv6_newroute={0x24, 0x18, 0x401, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8, 0x17, 0xffffffff}]}, 0x24}}, 0x0)

04:05:14 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

[  902.495540] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready
[  902.508062] binder: 5668:5677 got reply transaction with no transaction stack
[  902.508071] binder: 5668:5677 transaction failed 29201/-71, size 0-0 line 2921
[  902.508274] binder: release 5668:5677 transaction 328 out, still active
[  902.508279] binder: undelivered TRANSACTION_COMPLETE
[  902.535190] audit: type=1400 audit(1555041914.387:169): avc:  denied  { getattr } for  pid=5670 comm="syz-executor.4" name="NETLINK" dev="sockfs" ino=145178 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
[  902.590913] binder: send failed reply for transaction 328, target dead
[  902.612921] binder: 5689:5690 got reply transaction with no transaction stack
[  902.612943] binder: 5689:5690 transaction failed 29201/-71, size 0-0 line 2921
[  902.613131] binder: release 5689:5690 transaction 331 out, still active
[  902.613136] binder: undelivered TRANSACTION_COMPLETE
[  902.671066] binder: send failed reply for transaction 331, target dead
[  902.810683] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
04:05:14 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
pipe2(&(0x7f0000000080)={<r2=>0xffffffffffffffff}, 0x84800)
write$UHID_SET_REPORT_REPLY(r2, &(0x7f0000000100)={0xe, 0x8, 0x2, 0x4, 0x26, "96a11e3fd183c59c0e9ecd49a188ec253746b23350fe25bf67f0d6527a4e60e23ecf390795b9"}, 0x32)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fsetxattr$security_smack_entry(r3, &(0x7f0000000000)='security.SMACK64IPOUT\x00', &(0x7f0000000040)='*^mime_typevboxnet1systemt\x00', 0x1b, 0x1)
ioctl$TUNSETIFF(r3, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

04:05:14 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000400)={0x8, 0x48e, 0x6, 0x0, 0x0, [{r4, 0x0, 0x613}, {r2, 0x0, 0x6}, {r0, 0x0, 0xfffffffffffffffb}, {r3, 0x0, 0x9}, {r0, 0x0, 0x5}, {r3, 0x0, 0x4}]})
ftruncate(r0, 0x8200)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
sendfile(r2, r3, &(0x7f0000000080), 0xffffffff)
r6 = dup2(r0, r0)
ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x15)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000080)={{0x20000000000001}})

04:05:14 executing program 2:
r0 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x8, 0x4, @tid=r0}, &(0x7f0000000180))
clock_gettime(0x0, &(0x7f0000000100)={<r1=>0x0, <r2=>0x0})
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {r1, r2+10000000}}, 0x0)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000340)={0xfffffffffffffdb0}, 0x8, 0x0)
read(r3, &(0x7f0000000080)=""/128, 0xae3f1a6)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000001c0))

04:05:14 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

04:05:14 executing program 5:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=';', 0x1}], 0x1)
openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0)
fchdir(r1)
syz_emit_ethernet(0xa1, &(0x7f0000000100)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [], {@generic={0xfaff, "b5253129a1d96e3e198377cacbf93281b36588e547efd87bcc5c03e8114edeb2b90c84e9e0232673644a4d0eb2e8832088543ff746eb44190df07c88ac3100a889d8919e4688ee8169f5bb1c5e6e62ea1e0ca7c46dbf2b4f53ea192cb66087ff93b996a4cb881a573d54be1d82a5e0612952d74f7d753b9bb928ef8aafb863c5a511b0517b8cd6b74b3730cfa1919175050736"}}}, &(0x7f00000001c0)={0x1, 0x4, [0xcea, 0x7ce, 0xda9, 0x70e]})
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd)
fallocate(r2, 0x0, 0x0, 0x0)

04:05:14 executing program 3:
clone(0x800203, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0xfffffffffffffffc, 0x4000000000000032, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000001680)={'nat\x00'}, &(0x7f0000000080)=0x54)
r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x800, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}}, 0x84)

04:05:14 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bc070")
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x100, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x8c, r2, 0x600, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe646}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x20}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x38000}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x4)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000540)=ANY=[@ANYBLOB="4001000010000108000000000000000000000000000000000000000000000000ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000001000000000000000006c000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000006c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00000000005a367f19c55e99"], 0x140}}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)

[  902.978575] binder: 5700:5703 got reply transaction with no transaction stack
[  903.003457] binder: 5700:5703 transaction failed 29201/-71, size 0-0 line 2921
04:05:14 executing program 2:
clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1e)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@empty, @mcast1, @ipv4, 0x0, 0x0, 0x0, 0x12e})
ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x0, 0x0)
recvfrom$packet(r1, &(0x7f0000000240)=""/210, 0xd2, 0x10000, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)
r2 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x80000)
getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000140)={'raw\x00', 0x96, "9a4aa5a8e023d14cdb9759493be0a57a0c8672adc0ce4849aab818d6c1e98570dcd42a08a2fa6c80827d380269a55b8c63bb9aa3f6932b82140ece976afe1579940484ff366ac11a70b31b410f7be127402f24e85a6ad43deb4f94acf65142ee963dc1470517e48d8b8038edf2969fc33bc766376b65739b8a020efcbca2af9d8646489d41bf9ed1e0d43cefbb1866f864965970ac6b"}, &(0x7f0000000080)=0xba)

04:05:14 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

[  903.029988] binder: release 5700:5703 transaction 334 out, still active
[  903.059011] binder: undelivered TRANSACTION_COMPLETE
[  903.085568] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
04:05:15 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

04:05:15 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101000, 0x0)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x0)

04:05:15 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

[  903.102789] binder: send failed reply for transaction 334, target dead
[  903.107334] binder: 5718:5720 ioctl c0306201 0 returned -14
[  903.107788] binder: 5718:5720 got reply transaction with no transaction stack
[  903.107796] binder: 5718:5720 transaction failed 29201/-71, size 0-0 line 2921
[  903.108124] binder: release 5718:5720 transaction 337 out, still active
[  903.108128] binder: undelivered TRANSACTION_COMPLETE
[  903.160746] binder: send failed reply for transaction 337, target dead
[  903.168363] binder: 5729:5731 ioctl c0306201 0 returned -14
[  903.168650] binder: 5729:5731 got reply transaction with no transaction stack
[  903.168659] binder: 5729:5731 transaction failed 29201/-71, size 0-0 line 2921
[  903.169074] binder: release 5729:5731 transaction 340 out, still active
[  903.169093] binder: undelivered TRANSACTION_COMPLETE
[  903.218494] binder: 5736:5738 ioctl c0306201 0 returned -14
[  903.218706] binder: 5736:5738 got reply transaction with no transaction stack
[  903.218715] binder: 5736:5738 transaction failed 29201/-71, size 0-0 line 2921
[  903.231715] binder: send failed reply for transaction 340, target dead
[  903.231794] binder: release 5736:5738 transaction 343 out, still active
[  903.231798] binder: undelivered TRANSACTION_COMPLETE
[  903.441076] binder: send failed reply for transaction 343, target dead
[  903.490703] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
04:05:15 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = dup(r1)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x20008001, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="d4c1b00786b8f39fd4210acac8a1bbc026ad28e550f7f8b8"], 0x1}}, 0x4c080)
setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4)
write$P9_RLERROR(r2, &(0x7f00000000c0)={0x15, 0x7, 0x0, {0xc, 'GPLlotrusted'}}, 0x15)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
ioprio_get$uid(0x3, r4)
r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
bind$unix(r5, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e)
connect$inet(r3, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
signalfd4(r3, &(0x7f0000000180)={0x8}, 0x8, 0x80000)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

04:05:15 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc000, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x100004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
read(r0, &(0x7f0000000080)=""/13, 0xffffffac)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0)
write$FUSE_INTERRUPT(r1, &(0x7f00000000c0)={0xffffffffffffff59, 0x1}, 0xd)

04:05:15 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

04:05:15 executing program 2:
r0 = gettid()
perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x5, 0x80000001, 0x1f, 0x1000, 0x0, 0x5, 0x6003a, 0xb, 0xde, 0x0, 0x9, 0x3, 0x1, 0x1, 0x6, 0x8, 0x200000000, 0xaead, 0x7, 0x0, 0x7, 0x2e, 0x9, 0x3ff, 0x2, 0x1, 0x3300, 0x4, 0x400, 0x2, 0x1, 0x2, 0x1000, 0x6, 0x5, 0xffffffffffff8001, 0x0, 0x80000001, 0x0, @perf_config_ext={0x7fffffff, 0xf}, 0x2020, 0x8, 0x0, 0x6, 0x329, 0x5, 0x4}, r0, 0x2, 0xffffffffffffff9c, 0xb)
mkdir(&(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bc070")
r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa)
keyctl$clear(0x7, r2)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000040)=ANY=[@ANYRESOCT=r1], 0x1)
open(&(0x7f0000000180)='./file0\x00', 0x20a002, 0x72)
sync()

[  903.680698] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  903.697640] binder: 5749:5751 got reply transaction with no transaction stack
[  903.713259] binder: 5749:5751 transaction failed 29201/-71, size 0-0 line 2921
[  903.724254] binder: release 5749:5751 transaction 346 out, still active
04:05:15 executing program 5:
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)

04:05:15 executing program 4:
r0 = socket(0x10, 0x3, 0x0)
close(r0)
r1 = socket(0x10, 0x2, 0xc)
write(r1, &(0x7f00000002c0)="1f0000000104ff007d4354c007110040f305010008000100010423daffdf00", 0x1f)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040))
write(r0, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)

04:05:15 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

[  903.745476] binder: undelivered TRANSACTION_COMPLETE
04:05:15 executing program 2:
futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x1, 0x0, 0x0, 0x0, 0x0)
prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000))
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4c0000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1f0, r1, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0xec, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffffff7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe732}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa000000000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfff}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffff70cb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x335}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8a}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x10}, 0x800)

[  903.771858] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
04:05:15 executing program 4:
r0 = socket(0x10, 0x3, 0x0)
close(r0)
r1 = socket(0x10, 0x2, 0xc)
write(r1, &(0x7f00000002c0)="1f0000000104ff007d4354c007110040f305010008000100010423daffdf00", 0x1f)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040))
write(r0, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)

[  903.821628] binder: 5761:5764 got reply transaction with no transaction stack
[  903.830051] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
04:05:15 executing program 4:
r0 = memfd_create(&(0x7f0000000100)='\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x3c)
sendfile(r0, r0, &(0x7f0000000080), 0xfba)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

[  903.831397] binder: send failed reply for transaction 346, target dead
[  903.831776] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
[  903.888198] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
[  903.888800] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
04:05:15 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

04:05:15 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
fcntl$getown(r1, 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x68182, 0x4)
ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000080)={0x1, 0x5, [@dev={[], 0x17}, @random="ec4b306732ff", @local, @empty, @dev={[], 0xc}]})
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r3 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="24000000190007041dfffd946f610500020000031f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0)

[  903.982819] binder: 5761:5764 transaction failed 29201/-71, size 0-0 line 2921
[  904.007138] binder: release 5761:5764 transaction 349 out, still active
[  904.019745] binder: undelivered TRANSACTION_COMPLETE
[  904.073428] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  904.088571] binder: 5781:5785 got reply transaction with no transaction stack
[  904.088580] binder: 5781:5785 transaction failed 29201/-71, size 0-0 line 2921
[  904.090672] binder: send failed reply for transaction 349, target dead
[  904.090795] binder: release 5781:5785 transaction 352 out, still active
[  904.090799] binder: undelivered TRANSACTION_COMPLETE
[  904.150978] binder: send failed reply for transaction 352, target dead
04:05:16 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
getpeername$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

04:05:16 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

04:05:16 executing program 4:
r0 = gettid()
r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/ip_tables_matches\x00')
write$selinux_context(r1, &(0x7f00000001c0)='system_u:object_r:lvm_control_t:-e\xaf\x02s0\x00', 0x27)
splice(r1, &(0x7f0000000080), r1, &(0x7f00000000c0), 0x6, 0x4)
ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000))

04:05:16 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp6\x00')
flock(r0, 0x4)
ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000000)=""/124)

04:05:16 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat(0xffffffffffffff9c, &(0x7f00000041c0)='./file0\x00', 0x20040, 0x9)
ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f00000044c0)="3b4a3123307d2b9090f3ee74106cb5b56fd0adf18041bd61d70e6dcb4cf6652906f015a2a40115b7404773a075a14a71c4f6fdfeb2dc2aeff7187c79c3579ded3a5f242d179b325fa95d3fb0c071cfe688313d188de4fe11fb8f4104f3c981f24a886dbd68b91a73ff3ed1aab96bcb2d2034ae7011c35168238ba10466abb5a2b42dd91b45")
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000004380)={{{@in=@multicast1, @in6=@mcast1}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000004480)=0xe8)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/193, 0xc1}], 0x1, &(0x7f0000000300)=""/85, 0x55}, 0xfffffffffffffffd}, {{&(0x7f0000000380)=@caif=@rfm, 0x80, &(0x7f0000001480)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/103, 0x67}], 0x2, &(0x7f00000014c0)=""/53, 0x35}, 0x5c8}, {{&(0x7f0000001500)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000001580)=""/34, 0x22}, {&(0x7f00000015c0)=""/231, 0xe7}, {&(0x7f00000016c0)=""/208, 0xd0}], 0x3, &(0x7f0000001800)=""/4096, 0x1000}, 0x8000}, {{&(0x7f0000002800)=@l2, 0x80, &(0x7f0000002980)=[{&(0x7f0000002880)=""/168, 0xa8}, {&(0x7f0000002940)=""/1, 0x1}], 0x2, &(0x7f00000029c0)=""/124, 0x7c}, 0x74}, {{&(0x7f0000002a40)=@can={0x1d, <r3=>0x0}, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000002ac0)=""/96, 0x60}, {&(0x7f0000002b40)=""/75, 0x4b}], 0x2}, 0x83}, {{&(0x7f0000002c00)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000003f00)=[{&(0x7f0000002c80)=""/87, 0x57}, {&(0x7f0000002d00)=""/172, 0xac}, {&(0x7f0000002dc0)=""/108, 0x6c}, {&(0x7f0000002e40)=""/166, 0xa6}, {&(0x7f0000002f00)=""/4096, 0x1000}], 0x5, &(0x7f0000003f80)=""/13, 0xd}, 0x6}], 0x6, 0x20, &(0x7f0000004140))
r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
truncate(&(0x7f00000000c0)='./file0\x00', 0x81)
mount(&(0x7f00000042c0)=ANY=[@ANYPTR=&(0x7f0000004200)=ANY=[@ANYRESOCT=r0], @ANYBLOB="eb97e4d3ecbc4351222c85506a85cd000000020000000000", @ANYPTR64=&(0x7f0000004240)=ANY=[@ANYRESHEX=r4, @ANYRES64=r3, @ANYRES64=r0, @ANYRES32, @ANYRESOCT=r0, @ANYRES64=r4, @ANYRES16=r1]], &(0x7f0000004180)='./file0\x00', 0x0, 0x11000, 0x0)
write$P9_RMKNOD(r4, &(0x7f0000004580)={0x14, 0x13, 0x2, {0x84, 0x3, 0x8}}, 0x14)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000004300))
ioctl$LOOP_CLR_FD(r4, 0x4c01)

04:05:16 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x177, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000140)=0xffffffffffffff91, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f000020d000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000240)="064f8d1e6d4a9d386a14ab0c8f82a4dc3b59e436c943535973f8efedcd34d15b012ec880f647317a86b9fb81bfdfd34366b1d25fead0f05dcaa86a43e550fc33e527f4b2cf13a915a8d03c2844c08c79387a18b155d7b732763ba98ed8d77926e989b8a75cd8a7652f761140d52366429545f5fd8fa2a4de4327ad4faf6c1ba5b7f8b29e2eebbe7e9e411494f83d3b076502be10e988b873276c77afaef743fdd6860dd0b73413100d253320f2b60dc3df137168e7cda107bc9ec9aa5ccae953bf0d5171f37001e37d3d263626cd5fa3a675", 0xd2, 0xfffffffffffffffe)
keyctl$read(0xb, r1, &(0x7f0000000080)=""/41, 0x29)
sync_file_range(r0, 0x7, 0xf3, 0x0)
recvmmsg(r0, &(0x7f0000f61000), 0x4e5, 0x2040, 0x0)

04:05:16 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000180)=@hopopts={0xff, 0xd, [], [@padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x1, [0x0]}, @generic={0x6, 0x5e, "36374020888e52042aa8a1fe8e55055e2797dfe3591383424567869acc4e783e753f26296cd6dde009819c3c1bb442c6c7a0ee29625db5bf73a287b64ae4d10464f6c4d2820eb8c0faabd2c8f17fcc3bf4845145157c0c2129d375f6848f"}, @pad1]}, 0x78)
r1 = getgid()
setgid(r1)
r2 = dup2(r0, r0)
close(r2)

04:05:16 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000080)={0x2, 0x4e25, @loopback}, 0x10)
getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x10)

04:05:16 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = getpgrp(0x0)
waitid(0x1, r1, &(0x7f0000000080), 0x2, &(0x7f0000000100))
sendmsg(r0, &(0x7f0000013000)={&(0x7f0000013fe4)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[{0x383, 0x119, 0x2999, "27020201594a87ccfe8000000000000059"}], 0x28}, 0x0)

04:05:16 executing program 2:
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x10000000000032, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x40, 0x40)
openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000001000)={'filter\x00', 0xfffffffffffffd32, "5b031dfe"}, &(0x7f0000000140)=0x2cb)

[  904.842292] binder: 5803:5809 got reply transaction with no transaction stack
[  904.870772] binder: 5803:5809 transaction failed 29201/-71, size 0-0 line 2921
04:05:16 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

[  904.899365] binder: release 5803:5809 transaction 355 out, still active
[  904.913406] binder: undelivered TRANSACTION_COMPLETE
[  904.960724] binder: send failed reply for transaction 355, target dead
04:05:16 executing program 3:
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000020fff900040000fffffff800004000000000e9088a1ff9dc0100df7726000100000400000000000000"], 0x3c)

[  905.075085] binder: 5819:5825 got reply transaction with no transaction stack
[  905.110889] binder: 5819:5825 transaction failed 29201/-71, size 0-0 line 2921
[  905.126744] SELinux:  policydb version 536870934 does not match my version range 15-30
[  905.177072] binder: release 5819:5825 transaction 358 out, still active
[  905.200622] binder: undelivered TRANSACTION_COMPLETE
[  905.250648] binder: send failed reply for transaction 358, target dead
04:05:17 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f319bc070fdf56cfca02e30b33a88fe9cf636e2abd4549c772cad3ad161013f50d536bd0dbda1e6956bb5d0db30784c1c528546a9c72a3a581f5ca6a580398f339bdfa6806df6a31128d831cf518d5e32d7c3097ecb562601aeafef53e4b515c68dd0f2ba3f7b58c0cb4583e4c7782ed7fbb5221533c2595783ab1050e3f68fa67f2698506180ccfc702e3ae31046d33083ec9c40c9bff22b7c117be2492e9c6f6f13e5f3a92efc05ed3631f7c4f008bff29a9d18078ce352927147e8668dd3161277662659e7c543801d7c5c9658d26a26b12b78cab8664a01814a0af7d73479e067e10863c8a93aff76278aec06ac7bf14847d21d718e701827582b836944185fe30cdedc094a086f890cd06be1d55525d906d012be90e7b1e8080c09843350b0edb0ce4f971bfd08d3e5b0ea52445c8976b4")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

04:05:17 executing program 2:
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
timer_create(0x3, 0x0, &(0x7f0000000000)=<r1=>0x0)
timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0)
r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000100))
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x2, 0x3, 0x100000001}}, 0x30)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
timer_gettime(r1, &(0x7f0000000080))

04:05:17 executing program 4:
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x4400, 0x4)
getpeername$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10)
r2 = request_key(&(0x7f0000000080)='syzkaller\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000180)='posix_acl_access&vmnet1$systemppp0\x00', 0xfffffffffffffffc)
r3 = request_key(&(0x7f00000001c0)='id_resolver\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='\x00', 0xfffffffffffffffa)
keyctl$reject(0x13, r2, 0x10001, 0x8, r3)
fcntl$addseals(r1, 0x409, 0x0)
lsetxattr$security_smack_transmute(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000300)='TRUE', 0x4, 0x1)

04:05:17 executing program 5:
clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = getpid()
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x1ff)
rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000))
ptrace$setregs(0xf, r0, 0x6, &(0x7f00000000c0)="f7ccc7eb8f2dcc1ddb85a135f7e25a4fe7ab83c6d8cac5191288055114fa725fe7e66756ff48b6618212c15418e2fef456a88d156513f44951bbd1d6081c097e99f7e100f09672fce030262b8f427e912a093e6f1d1d475148ea058870cc287ae4cd34d2818c0bf0bf671336bce83e5365582d")
ptrace(0x10, r0)
ptrace$getregset(0x4204, r0, 0x0, &(0x7f0000002180)={0x0})

04:05:17 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0)
fchmodat(r0, &(0x7f0000000080)='.\x00', 0x0)
ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000000))
setsockopt$inet6_int(r0, 0x29, 0xde, &(0x7f0000000040)=0x81, 0x4)

04:05:17 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

04:05:17 executing program 3:
prctl$PR_MCE_KILL(0x26, 0x1, 0x2)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10000, 0x20)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8)
r2 = getgid()
write$FUSE_ATTR(r0, &(0x7f00000002c0)={0x78, 0x0, 0x2, {0x6, 0x10001, 0x0, {0x5, 0x9, 0x9, 0x80000000, 0x73cc4efc, 0x7, 0x6, 0x7fff, 0x7, 0x1000, 0x1f, r1, r2, 0x2, 0xfffffffffffffffc}}}, 0x78)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x1, 0x0)
symlinkat(&(0x7f0000000040)='./file0\x00', r3, &(0x7f00000000c0)='./file0\x00')
r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0)
lseek(r4, 0x2, 0x4)
write$FUSE_WRITE(r4, &(0x7f0000000000)={0x18, 0x0, 0x8, {0x1}}, 0x18)

04:05:17 executing program 2:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x802, 0x0)
write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, 'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/207, 0xcf, 0x7, 0x7, 0x800, 0x8001, 0x2}, 0x120)
write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120)
write$UHID_DESTROY(r0, &(0x7f0000000200), 0x1a7)
write$UHID_CREATE(r0, &(0x7f00000004c0)={0x0, 'syz1\x00', 'syz0\x00', 'syz0\x00', 0x0}, 0x120)
write$UHID_INPUT2(r0, &(0x7f00000011c0), 0x6)

04:05:17 executing program 4:
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000140)={0xfffffffffffffffa}, 0x0, 0x8)
r0 = gettid()
timer_create(0x0, &(0x7f0000000040)={0x0, 0x32, 0x4, @tid=r0}, &(0x7f0000000180))
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdad}, 0x8, 0x0)
read(r1, &(0x7f0000000080)=""/128, 0xae3f1a6)

[  905.507215] binder: 5845:5848 got reply transaction with no transaction stack
[  905.536798] binder: 5845:5848 transaction failed 29201/-71, size 0-0 line 2921
04:05:17 executing program 3:
r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x8800)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x100000001, 0x0, 0x81, 0xfffffffffffffffd}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000300)={0x0, 0x8, 0x20, 0x0, 0x6})
fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, <r1=>0x0})
fcntl$lock(r0, 0x24, &(0x7f0000000080)={0x2, 0x5, 0x8, 0x1, r1})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$VT_ACTIVATE(r2, 0x5606, 0x1)

04:05:17 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070")
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r1=>0x0, 0xffffffffffffff9c, 0x0, 0x2, &(0x7f0000000000)='@\x00'}, 0x30)
ptrace$getregset(0x4204, r1, 0x205, &(0x7f0000000380)={&(0x7f0000000300)=""/99, 0x63})
r2 = socket$inet(0x10, 0x3, 0xc)
openat$keychord(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/keychord\x00', 0x4000, 0x0)
sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080), 0x31}, 0x0)
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x111000, 0x0)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00')
sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="507280e9", @ANYRES16=r4, @ANYBLOB="02002dbd7000fddbdf250d0000000800060000000000080006003840000008000400010001000800060007000000"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
flistxattr(r2, &(0x7f0000000100)=""/126, 0x7e)

[  905.571478] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
04:05:17 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu\x00', 0x200002, 0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
fchdir(r1)
r2 = creat(0x0, 0x0)
write$tun(0xffffffffffffffff, 0x0, 0x0)
ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000000)={0xc0fd, 0x3})
truncate(&(0x7f00000000c0)='./bus\x00', 0x1)

[  905.571493] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.571505] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.571517] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.571528] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.571539] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.571551] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.571563] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.571575] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.571587] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.571598] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.571609] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.571621] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.571632] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.571644] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.571654] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.571666] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.571677] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.571689] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.571700] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.571711] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.571736] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.571748] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.571760] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.571788] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.571800] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.571812] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.571824] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.571835] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.571847] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.571859] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.571871] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.571883] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.571894] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.571905] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.571917] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.571929] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.571941] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.571953] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.571965] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.571977] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.571989] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572001] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572013] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572025] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572038] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572050] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572062] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572073] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572085] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572096] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572107] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572118] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572130] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572142] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572154] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572166] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572178] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572190] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572203] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572214] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572226] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572238] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572250] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572263] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572275] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572287] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572299] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572321] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572333] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572344] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572356] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572368] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572380] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572392] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572404] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
04:05:18 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

04:05:18 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x6)
r1 = syz_open_pts(r0, 0x0)
write$binfmt_aout(r0, &(0x7f0000000200)={{0x1cf, 0x9, 0x7a9, 0x31a, 0x2ed, 0xfc2, 0x174, 0x42}, "7bd454ebedfc857fc02c1ec3dfd5b6a9459cca63fdd62d337dfc5739ef9220d2de75957781c89f898832a43b6e75c415f442f118c2a1b22f28872e4788e0474ee342a09d7f6a96c4fa517a963bec1855053f49b4808837c016790f8fa860d495a8a466f3d214cc6b836f9df80637aa0abb9e77de137e270e3fd851b41bf6f4764d8b7f2ab7a86f1ecec60c98f78fb9423b436b422fa611abdcc75dda0294c0ce4d8890217c49a2a6482b8f", [[], [], [], [], [], [], [], []]}, 0x8cb)
getegid()
ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x2)
openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x200, 0x0)

04:05:18 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x0, 0x118, 0x118, 0x0, 0x118, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, &(0x7f0000000040), {[{{@ipv6={@empty, @ipv4={[], [], @broadcast}, [0xffffffff, 0xffffff00, 0xffffffff], [0xffffffff, 0xffffffff, 0x0, 0xff000000], 'lo\x00', 'bridge_slave_0\x00', {0xff}, {}, 0x89, 0x71, 0x2, 0x32}, 0x0, 0xf0, 0x118, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xc}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x8000, 0x6}}}, {{@ipv6={@empty, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [0xffffffff, 0xff, 0xffffffff, 0xff000000], [0x0, 0xff, 0xffffff00], '\x00', 'yam0\x00', {}, {0xff}, 0x73, 0x1, 0x5, 0x4}, 0x0, 0xf0, 0x118, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360)
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000000002"])
ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000180)={'sit0\x00', @ifru_flags})

04:05:18 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
arch_prctl$ARCH_SET_GS(0x1001, 0xfffffffffffffffe)
r1 = dup(r0)
openat$cgroup(r1, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000680)=0xfff, 0x4)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @remote}, 0x18a)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af)
write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0xffffff84)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1ffc}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x400100)

04:05:18 executing program 4:
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0)
getresuid(0x0, 0x0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x323)
creat(&(0x7f0000000380)='./bus\x00', 0x0)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
bind$netlink(r3, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
setsockopt$inet6_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000040), 0x4)
connect$netlink(r3, &(0x7f00000014c0)=@proc, 0xc)
write$binfmt_misc(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r2, &(0x7f0000000140), 0x8fff)

[  905.572415] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572427] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572438] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572450] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572461] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572473] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572485] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572496] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572508] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572520] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572532] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572544] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572556] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572568] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572580] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572592] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572604] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572617] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572629] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572641] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572653] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572665] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572677] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572690] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572702] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572714] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572727] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572738] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572750] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572777] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572789] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572801] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572813] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572824] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572836] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572848] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572860] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572873] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572885] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572897] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572909] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572922] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572934] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572946] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572958] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572970] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572982] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.572994] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.573007] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.573019] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.573031] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.573043] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.573056] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.573068] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.573080] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.573092] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.573103] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.573114] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.573127] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.573138] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.573149] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.573161] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.573172] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.573184] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.573195] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.573206] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.573218] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.573230] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.573241] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.576897] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.576917] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.576930] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.576942] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.576955] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.576996] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.577011] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.577024] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.577036] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.577069] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.577104] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.577118] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.577130] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.577143] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.577156] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.577169] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.577181] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.577194] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.577207] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.577220] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.577232] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.577245] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.577257] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.577271] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.577283] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.577296] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.577317] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.577329] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.577341] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.577354] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.577367] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.577379] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.577390] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.577403] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.577415] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.577427] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.577439] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.577451] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.577464] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.577542] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.577555] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.577567] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.577580] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.577592] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.577605] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.577617] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.577630] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.577650] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.577833] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.577846] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.577859] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.577872] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.577884] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.577897] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.577910] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.577922] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.578185] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.578199] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.578212] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.578225] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.578250] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.578262] hid-generic 0007:0007:0800.001A: unknown main item tag 0x0
[  905.580518] hid-generic 0007:0007:0800.001A: hidraw0: <UNKNOWN> HID v80.01 Device [syz0] on syz1
[  905.612710] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.612724] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.612737] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.612750] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.612762] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.612775] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.612788] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.612800] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.612813] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.612826] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.612838] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.612851] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.612863] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.612876] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.612901] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.612913] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.612925] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.612937] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.612949] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.612961] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.612973] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.612985] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.612997] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.613009] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.613021] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.613033] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.613045] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.613058] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.613070] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.613082] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.613094] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.613107] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.613119] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.613131] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.613144] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.613156] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.613168] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.613179] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.613191] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.613204] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.613215] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.613228] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.613239] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.613251] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.613263] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.613275] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.613288] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.613312] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.616402] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.616415] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.616428] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.616440] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.616452] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.616465] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.616477] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.616490] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.616503] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.616516] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.616529] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.616540] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.616553] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.616566] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.616579] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.616592] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.616605] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.616617] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.616629] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.616642] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.616654] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.616665] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.616678] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.616691] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.616703] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.616716] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.616729] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.616741] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.616753] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.616765] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.616778] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.616791] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.616803] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.616816] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.616829] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.616842] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.616855] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.616867] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.616880] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.616893] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.616906] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.616918] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.616931] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.616943] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.616956] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.616968] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.616980] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.616992] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.617005] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.617028] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.617040] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.617051] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.617062] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.617075] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.617087] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.617098] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.617109] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.617121] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.617133] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.617145] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.617157] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.617169] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.617181] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.617193] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.617206] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.617217] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.617229] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.617241] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.617253] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.620390] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.620404] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.620418] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.620430] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.620443] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.620456] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.620468] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.620480] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.620493] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.620505] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.620611] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.620625] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.620638] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.620650] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.620663] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.620676] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.620689] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.620702] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.620714] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.620727] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.620740] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.620752] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.620764] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.620775] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.620824] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.620837] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.620850] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.620862] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.620875] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.620887] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.620900] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.620913] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.620926] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.620938] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.620950] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.620962] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.620986] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.620998] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.621010] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.621021] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.621034] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.621046] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.621057] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.621069] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.621081] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.621094] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.621105] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.621117] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.621129] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.621140] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.621152] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.621163] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.621175] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.621186] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.621198] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.621210] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.621222] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.621234] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.621246] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.624364] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.624389] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.624402] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.624415] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.624428] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.624440] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.624453] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.624466] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.624478] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.624490] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.624502] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.624514] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.624527] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.624539] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.624552] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.624563] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.624575] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.624587] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.624600] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.624612] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.624624] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.624637] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.624650] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.624663] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.624675] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.624688] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.624700] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
04:05:22 executing program 0:
syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r0, 0x0)
r1 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

04:05:22 executing program 5:
r0 = timerfd_create(0x0, 0x0)
readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/14, 0xe}], 0x1)
timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x80000003, 0x8031, 0xffffffffffffffff, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x80)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r2, 0x38, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x8000)
lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='security.SMACK64IPOUT\x00', &(0x7f00000002c0)='IPVS\x00', 0x5, 0x2)
pkey_free(0xffffffffffffffff)

04:05:22 executing program 3:
r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f0000000080)=0x6e, 0x800)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000180)={'\x00', 0x4})
r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x1, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000040)={'ip6gre0\x00', 0x101})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_int(r2, 0x0, 0x10000000031, 0x0, &(0x7f00000000c0))

04:05:22 executing program 4:
sendto$inet(0xffffffffffffffff, 0x0, 0x4f, 0x0, &(0x7f00000000c0)={0x2, 0x18004e1d}, 0x10)
r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="8b7fdee96fd6b95caa2920194843", 0xe, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x10000, 0x2)
sendto$inet(r1, &(0x7f0000000240)="36ba1e51b4d03689fca4066a7fed916649984af3644c8178e58bd4a2f75972fa4a217acb033b615af18e2d4676632cfa17fa254c9af5e72c9e6a6f1d794f87c14f", 0x41, 0x4000, &(0x7f00000002c0)={0x2, 0x4e22, @broadcast}, 0x10)
keyctl$invalidate(0x15, r0)
r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
r3 = gettid()
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000300)={[], 0x4, 0x2, 0x100000000, 0x10000, 0x0, r3})
ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000140)="be7727d9d9d3272bcaad36d8ad484d789e81fcefc1add51d267531e253594f317dd55ee765b38211e3f22f93c0df97338438e3eec31e91a9b280d6f7c222e00367c94a95f8623e88c0988d3bde3a4c09f505e1334080cb8cade91da5a2414396adca061e70aa47f3f87d28bc55280409935efb1b371de012566fae408c73a403baa39d88bd2e2fe1399f05ba51c33d20e65fb192077f5bec44c9750c66fa6cb4e55f58b5efdd157bda77692d32e16ff5beb6eab2e4")

04:05:22 executing program 2:
r0 = memfd_create(&(0x7f0000000100)='\x88])+\x00', 0x0)
write(r0, &(0x7f0000000080)=')', 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0)
sendfile(r0, r0, &(0x7f0000000040), 0xff8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000e3ffffffffff9c481f00fcffffff"], &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x41f00, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x2, 0x100000000}, 0x8, 0x10, &(0x7f0000000240)={0x7f, 0xffffffffffff9ca0, 0x9, 0x7fffffff}, 0x10}, 0x70)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)={&(0x7f0000000000)='./bus\x00', r1}, 0x10)
symlink(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000001c0)='./bus\x00')
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
getpeername$netlink(r2, &(0x7f0000000380), &(0x7f00000003c0)=0xc)

04:05:22 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0)
ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000040)={0x2, 0x4, 0x33c, 0x8000, 0x5be4, 0x5})
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

[  905.624712] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.624724] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.624736] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.624750] hid-generic 0007:0007:0800.001B: unknown main item tag 0x0
[  905.630171] hid-generic 0007:0007:0800.001B: hidraw0: <UNKNOWN> HID v80.01 Device [syz0] on syz1
[  906.304603] binder: release 5845:5848 transaction 361 out, still active
[  906.304608] binder: undelivered TRANSACTION_COMPLETE
04:05:22 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bc070")
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
write$binfmt_misc(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="738fdbebc97b181ea278f69d0e00003ac912e142ed8cfbc0d1fff7ab2272f2600cb0e9663c6a6de0805c46e3a98b468930be299b635a422ba72c9b45528afe907b95ff948cc5ab80cb3bae7cc6f967c4699790a6ac284bbdcc7532568bf6e5bcefa244931988081aae8378ae63dbc6af82a4a2d6ca916a37e321597a41e2edc1478abaaefe3d8c24a756a44c3f05220a4658c89b48a0e082e6406f4f7de973335e3d"], 0x17)
r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x90000, 0x0)
ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x9})
getsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f0000bfcffc), &(0x7f0000000100)=0x4)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00'})

04:05:22 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f000000d000)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000015002140000000000000e2db85a7aa1b"], 0x14}}, 0x0)

[  910.830796] binder: send failed reply for transaction 361, target dead
04:05:22 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2201, 0x84)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000340)={{0x7c, @rand_addr=0x5, 0x4e24, 0x3, 'sh\x00', 0x28, 0x4, 0x71}, {@multicast2, 0x4e20, 0x10000, 0x19, 0x1ff, 0xb47c}}, 0x44)
ioctl(0xffffffffffffffff, 0x7, &(0x7f00000000c0)="0adc1f123c123f319bc070")
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f00000003c0)=""/240)
r1 = accept4(0xffffffffffffff9c, &(0x7f0000000140)=@tipc, &(0x7f00000001c0)=0x80, 0x800)
ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000080)='bridge_slave_0\x00')
clock_adjtime(0x0, &(0x7f0000000200)={0xb8ab})
setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000000)={{0x2084, @broadcast, 0x4e23, 0x2, 'dh\x00', 0x12, 0x5, 0x47}, {@empty, 0x4e24, 0x3, 0x8557, 0x3f, 0xe5e}}, 0x44)

04:05:22 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x20000100000049, &(0x7f0000000040)="2695dc4d", 0x4)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x10000020041)
getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000000)=0x68)
fcntl$setstatus(r0, 0x4, 0x40800)

[  910.881050] binder: 5915:5920 ERROR: BC_REGISTER_LOOPER called without request
04:05:22 executing program 4:
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00fbda04ffbbb6b41c0c63228b005af7f39ba22390fe8c5e0ef0690336fd0481a5526da6d14c7b407dd388b74755bd6c8a2c72809d6f4db56b"], 0x1, 0x0)
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x8000, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000240)=0xe8)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={<r2=>0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000280)='\x00', 0xffffffffffffffff}, 0x30)
sendmsg$nl_generic(r0, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000081}, 0xc, &(0x7f0000000740)={&(0x7f0000000300)={0x438, 0x3c, 0x809, 0x70bd2a, 0x25dfdbfe, {0x5}, [@typed={0xc, 0x35, @u64=0x1f}, @generic="fc0e50953395a988639032a30be3678c28045a5ec368b3704f31190425e139e59d326d33b98b8c96228dd384ac32d6d24006c190d059d4940702d7dbe3601d75aeb3c6984ac1fee9", @nested={0x70, 0x21, [@generic="dd071e2e05a50a559f32c0382c3a6bd10fb5910d55d20978cfef2ed0befff471357f7c775498482f02a78f80c11a6a525fc97cea278778ce86bb434c1504c290c16f36b89563a98f182bc133ff5aa7e17f03fd15b4bf8c9e5ab6bc4f8ade0e7d548ecf3136829f868555"]}, @typed={0x8, 0x68, @u32=0x5}, @nested={0x358, 0x44, [@generic="31a46ebc18ff8a37b28dfce167bb0dbc433614219261c912183ae4f8dbdc5679749fa4c2b6c2d390d406e5e1517f012aa4a545a0918ae7271f32d4fe129250c98cf6f124bd35a644c5dc8712c1798cdf07c36eff7f3f5511b4ca7bc4ce2a87742d282a487e594fae472edae071f4ea75e92227a28728bc2a2e12f1ebee1551e2001e650c530ba992a634317546ab16edec733c0d72473e02dab18618251fe888a639e6fb1ec60cbd8d4cb1086cf7144b1211e6b3cdcdd4b7fb14583d0d0706a4bc7abc59a8a9e970833ec3447187495da169915cec0c7a26ebde88d095ff5e23e36c0001273a5ae90a", @typed={0x8, 0x88, @uid=r1}, @generic="9e965b68ea61ee777f136d3e82120aced6863e95fefc58a5d5b9d80990f943b07a85218ae2cc320ef30ab44087fde1ebde447494d0a5b91b0b5d088e2201166738510dfe27142a79e12196e25a18c057c6b025d76bb9a06f2f37c44dc98f9e2b60a7a830f68ee7aab0afd1b1f285db798eebacf7be7f040e756e0d709e9679515ec3bb7a4f7f47f5ede486f134576508550ee7a1c577c51b12cead22aba5b472bc663e1d3ab2f26c34d910", @generic="879c8ee721450f6eceef2e722e5b6281936d02bc1341a736e7fb9e87281d377e67c51ded1c", @generic="8def68f609c31c2539b591bced3d61a355312c5c3bef30f8f959de7cbadf2fccd4d3c77e8cc858ebe3766d79d0d2b97fa0c63f85802ff489a6806d2e58cb9ea3f751210f2b9800b5126575b806419314b0173173138fc6e08421bef7dab0591402b5ad7a900a694b705d9bbc6815d4e0dde75e79f8465d4d1bbe415f7ad56e0bfe5c1d50ddaee1e55073e4c2918d927976e4a5445857af93a2b766449f840d4c", @typed={0x8, 0x16, @pid=r2}, @typed={0x4, 0x3b}, @generic="dd21a91b5257cdde81cd2c6101b6693c372a0c48c2261f955f228e118ad4ceca68c8933afae4b8125615b6841eabc280f3a80157f918e81a04937b28e0100dfa4e626276798d7962a4047b0a5b28136618d5125c4a2bfc6a12575ab63cb586a68f8426d74318e6e5ad315a952da3de8bc5b7dddac0235c41fbdf29d8defa29be3072c952e80098bbb36b18a57bdbfd43fe899b41f138948432753bc920ca8fa61eaa2f309593513fce43fc2cc44e97cea4f9fc8d13a694e1d12a35d6d8f8ba549dc764375d837d708b8f5fc1ebb327fa23579089eb1e4b9e7e4de950f2431c3d88cf8250"]}]}, 0x438}, 0x1, 0x0, 0x0, 0x5}, 0x4)
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x21)
ptrace$cont(0x18, r3, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9})
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r3, 0x0, 0x0)

[  910.957552] binder: 5915:5920 got reply transaction with no transaction stack
[  910.994267] binder: 5915:5920 transaction failed 29201/-71, size 0-0 line 2921
04:05:22 executing program 0:
syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r0, 0x0)
r1 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

04:05:22 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
r2 = accept$inet(0xffffffffffffff9c, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10)
ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x6, @local}, 0x50, {0x2, 0x4e22, @multicast2}, 'team_slave_1\x00'})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x43, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="00634040000000000000000000000000005e4e110822fb4f4e510000000000000000000000000000000000000018000000000000000800000000000000cde3df1268f2"], 0x0, 0x0, 0x0})

[  911.132181] binder: 5947:5949 ERROR: BC_REGISTER_LOOPER called without request
[  911.175236] binder: 5947:5949 got reply transaction with no transaction stack
[  911.185479] binder: BINDER_SET_CONTEXT_MGR already set
04:05:23 executing program 5:
r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ioctl$KDSKBLED(r0, 0x4b65, 0x6)
write(r0, &(0x7f0000000040)="566df64ac4bbb86fad2549192c372c61af0d08ea03d1ad18e384aec699206284319784a886259e66f1b0ddd9c8156aa40a3b3596d5dec685a4b5b09a9f6ad98135b985ceb28f204b5fdd008df45c7cc4e1b511743a58728af8dedb6cccc88b1831d778dabe518b7b05c1f945b957474bbada28374e472d7b43595e39eed135abec8efc7b42a72273c1f12da7133611d7c6ed4954cbe29ce8d0ea021bb0160fad89b85f7e9793516ec0e753302c66a604d06e33f74b730c61f59557a625c41934", 0xc0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>r0, 0x0, 0x4, &(0x7f0000000100)='@/%\x00', 0xffffffffffffffff}, 0x30)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000180)={[], 0x5, 0x1, 0x8, 0x2, 0x1, r1})
fsetxattr$security_smack_entry(r2, &(0x7f0000000200)='security.SMACK64IPOUT\x00', &(0x7f0000000240)='cpusetnodev\x00', 0xc, 0x2)
ioctl$FICLONE(r2, 0x40049409, r2)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000280)="9b46898353cd2642def43d16c54f52e5e9e0c543c2cc104279b4ea3a2ed733896f5b69875b1f6a3c950c95fa0e566437f9dd50403ade68a8a7ccbf22a7d2eaa004ecfb6c16315359280ed74edc3bafc463b5b836ee32a31b9d492072b5547b8fc2253f8025a1d203b7cd22c2fcd72cb607cbbe84ca205f2ca49c28", 0x7b, r2}, 0x68)
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000380))
fallocate(r0, 0x9, 0x6, 0x3f478232)
r3 = fcntl$dupfd(r0, 0x406, r2)
ioctl$IOC_PR_RESERVE(r3, 0x401070c9, &(0x7f00000003c0)={0xfffffffffffff000, 0x6, 0x1})
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000440)={'team0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@newtclass={0x24, 0x28, 0x310, 0x70bd25, 0x25dfdbfd, {0x0, r4, {0x6, 0xf}, {0x9, 0x8}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x8044)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000540)='/dev/full\x00', 0x200, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000005c0)={0x0, 0x70, 0x0, 0x100, 0x100000000, 0x82, 0x0, 0x7, 0x1000, 0x2, 0x8001, 0xb, 0x7, 0x4, 0x3, 0x5, 0x4, 0xb0a, 0x0, 0x81, 0xa84b, 0x0, 0x783, 0x24, 0x7fff, 0x1, 0x49, 0x3f, 0x1, 0x4, 0x9, 0x79e, 0x9, 0x2, 0x5, 0x1, 0x100000000, 0xb008, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000580), 0x4}, 0x10, 0x9, 0x7, 0x8, 0x9, 0x59, 0x100})
chroot(&(0x7f0000000640)='./file0\x00')
ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f0000000680)="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")
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f00000007c0)={0x34, 0x0, &(0x7f0000000780)})
mkdir(&(0x7f0000000800)='./file0\x00', 0x4)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000940)={'filter\x00', 0x0, 0x4, 0x88, [], 0x3, &(0x7f0000000840)=[{}, {}, {}], &(0x7f0000000880)=""/136}, &(0x7f00000009c0)=0x78)
ioctl$UI_END_FF_ERASE(r5, 0x400c55cb, &(0x7f0000000a00)={0xa, 0x7, 0x1000})
setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000a40)={0x1, 0x1, 0x0, 0xffffffff, 0x1}, 0xc)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000a80)={'irlan0\x00', r4})
prctl$PR_SET_UNALIGN(0x6, 0x1)
ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000ac0)=0x8dc0)
fsetxattr$security_capability(r0, &(0x7f0000000b00)='security.capability\x00', &(0x7f0000000b40)=@v2={0x2000000, [{0x40, 0x6f23ecc0}, {0x7}]}, 0x14, 0x2)
ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x80)
ioctl(r0, 0x3, &(0x7f0000000b80)="0561c831c908d17d496bef74199f39b65c269a143e2b85e778aa89a690b88a6c836f529cad49e7a81656aab45325a3d8d9013912bcee91b1b61b0b0b7207d0b7db47c3a722f835dad8ddec857a1f3f93b4")
ioctl$ION_IOC_HEAP_QUERY(r3, 0xc0184908, &(0x7f0000000c40)={0x34, 0x0, &(0x7f0000000c00)})

04:05:23 executing program 4:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x2000, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000240)={@empty, @rand_addr=0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc)
r1 = gettid()
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
r3 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/attr/current\x00', 0x2, 0x0)
arch_prctl$ARCH_SET_GS(0x1001, 0x5)
fcntl$getownex(r3, 0x10, &(0x7f0000000180))
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x100034)
tkill(r1, 0x37)
r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x800, 0x0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', r4}, 0x10)
ptrace$cont(0x18, r2, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x3, 0x0, 0x11b})
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r2, 0x0, 0x0)
ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f00000001c0))

04:05:23 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0xfea4)
write$apparmor_current(r1, &(0x7f00000000c0)=@profile={'changeprofile ', 'threaded\x00'}, 0x17)
fallocate(r1, 0x3, 0x0, 0xfff9)
write$binfmt_elf64(r1, &(0x7f0000001500)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[]]}, 0x178)

[  911.185491] binder: 5951:5952 ioctl 40046207 0 returned -16
[  911.185619] binder: 5951:5952 got transaction with invalid offsets ptr
[  911.185857] binder: 5951:5952 transaction failed 29201/-14, size 0-6144 line 3164
[  911.186255] binder: undelivered TRANSACTION_ERROR: 29201
[  911.195209] binder: BINDER_SET_CONTEXT_MGR already set
04:05:23 executing program 2:
request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0xfffffffffffffffb)

[  911.195219] binder: 5951:5952 ioctl 40046207 0 returned -16
[  911.195287] binder: 5951:5953 got transaction with invalid offsets ptr
[  911.195315] binder: 5951:5953 transaction failed 29201/-14, size 0-6144 line 3164
[  911.195479] binder: undelivered TRANSACTION_ERROR: 29201
[  911.551268] binder: 5947:5949 transaction failed 29201/-71, size 0-0 line 2921
04:05:23 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000140)=0x3, 0x4)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
clone(0x0, &(0x7f0000000000)="beef037948ea", &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100)="ec55f0f3632e98b71b33d0959f4ae7a1aa83")

04:05:23 executing program 5:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}<B\xfc.\x9cia\x14\xa6\xf8\x88\xf0\xda\x85\'v\x83\xcf\xc1\xc4\xd2\xbfq\xc2U\xa3\x13Md\xcc?\xed\x8e\x97y\x8d\xeb\x861\xcb\xf7h,\x9f\xa2\xed\x03\x14e\xaa\x19\x1d\xf9\"\xf7d)|\xba\"\xa8I\x9d\x17\x7fI\xfb\xa9@\xf5[\xbc\x8br?\xd3t\xf1\xfe\xd7\x8c\x8a\xee\xc6\x81\x1d\x9bXyHs\x87\xd5e\x94\xa1L%\x88\'M\xe8O\xa2v\x100+?\xb5Ar\xa8\xc9\x10\xa0~|v\xeaFZ\xa6\x84\x02', 0x3, &(0x7f0000000080))
r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x10)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'bridge_slave_0\x00', {0x2, 0x4e23, @local}})
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105400, 0x4)
symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0\x00')

04:05:23 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
getresuid(&(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140))
ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x1)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000008001b00000000000800100005000000"], 0x1}}, 0x0)

04:05:23 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x5}, {0x80000006}]}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0)
lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, <r5=>0x0}, &(0x7f00000002c0)=0xc)
mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuseblk\x00', 0x1000, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=r4, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="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"])
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)

04:05:23 executing program 0:
syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r0, 0x0)
r1 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

04:05:23 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0xd04, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x10219)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)

04:05:23 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151)
connect$inet6(r0, &(0x7f0000000040), 0x1c)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000080)='dev ', 0x3)
write(r2, &(0x7f00000011c0)="16", 0x1)
sendfile(r1, r2, &(0x7f0000000000), 0xffff)
r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000880)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
fcntl$addseals(r2, 0x409, 0x8)
dup2(r3, r0)

04:05:23 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dc86055e0bceec7be070")
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000469ffc)=0x4000000802, 0x4)
sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e20}, 0x10)
poll(&(0x7f0000000080)=[{}, {r1}], 0x2, 0x0)

[  911.661403] binder: 5988:5992 ERROR: BC_REGISTER_LOOPER called without request
04:05:23 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600))
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000000)={0xfffffffffffffe01})
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040))

[  911.712649] binder: 5988:5992 got reply transaction with no transaction stack
[  911.743848] binder: 5988:5992 transaction failed 29201/-71, size 0-0 line 2921
04:05:26 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600))
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r1, 0x5403, &(0x7f00000001c0)={0x8})
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040))

04:05:26 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

04:05:26 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'\x00', 0x201})
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x11)

04:05:26 executing program 5:
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4)
bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
ioctl$int_in(r0, 0x5421, &(0x7f0000000140))
sendto$inet(r3, 0x0, 0x123, 0x200007fd, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x40)
write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x34f)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0xda9, 0x4)
writev(r3, &(0x7f0000000080)=[{&(0x7f0000000ec0)="61ce6ed94f41f48fddb17be75acd3fd8976f2f631226482bfc0c6321cc4cae47952fade164de0d115b601581953f9a337ea011906254b229aa6c3a8d246142c633fc0f54b0218c5becb9fd513c8914bdfad4668e36b8ffb24d6f7dc5e8119510898eca216a75ce4e6a295af4b6bc4dae50e31997f687b4bbc532210cef625534447e1a449d37a6163113a57c34f68e15230f660c161a41fa5330b0f852d2e337c373b2efe237dad926b57ba2421c", 0xae}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0xe212, 0x0)
r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/load\x00', 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000300)={0x20000004})
ioctl$RTC_PIE_ON(r0, 0x7005)

04:05:26 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000440)="0a00a3c07446f6b55c62dae8e66d55f4e65ffe192b39f49de106cf23563cd33d0c773e329ee584837fc162942e9ff3cc1a78db3fa89293b23396f1e7a3b0bb210a09190978946d11038dde51bb6583a240de8c02b4554d1ff457b776ac43b3a4a1c12fa8c97a8f66b8b73c53ea957475b8863cf57a81ed1ecb4838fb395de7a411ecbbd1d9c508ae649bb1f0d7a6d15fe9b42110b27a6f60903541cc85")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x30280, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

04:05:26 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00')
readv(r0, &(0x7f0000002340)=[{&(0x7f0000004380)=""/4096, 0x1000}], 0x1)
readv(r0, &(0x7f0000000580), 0x3c1)
llistxattr(0x0, 0x0, 0x0)

04:05:26 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000008940)="0adc1f123c123f319bc070")
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x0, &(0x7f0000001900)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

04:05:26 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = gettid()
clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000040)={0x200000002, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x0, 0x0)

04:05:26 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000100000000000000001200000000000000aa14000200fe8010000000000000000000000000aa"], 0x1}}, 0x0)

[  914.344237] binder: 6023:6032 ERROR: BC_REGISTER_LOOPER called without request
[  914.380149] binder: 6023:6032 ioctl c0306201 0 returned -14
04:05:26 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bc070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r1, 0x0, 0x26, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x10084e23, @local}, 0x10)
write$binfmt_elf64(r1, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644)
recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff012}], 0x1, &(0x7f0000000200)=""/20, 0xc2b}, 0x0)

04:05:26 executing program 3:
r0 = getpgrp(0x0)
r1 = gettid()
rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8)
rt_tgsigqueueinfo(r0, r1, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x20000000})
rt_sigtimedwait(&(0x7f0000000040)={0x1000000000000563}, &(0x7f0000a77ff0), 0x0, 0x8)

04:05:26 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f00000000c0)=0x1, 0x4)
bind$inet6(r2, &(0x7f00000005c0)={0xa, 0x4e22}, 0x19)
listen(r2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty}, 0x1c)

04:05:26 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

[  914.398724] binder: 6023:6032 got reply transaction with no transaction stack
[  914.424968] binder: 6023:6032 transaction failed 29201/-71, size 0-0 line 2921
04:05:26 executing program 4:
r0 = memfd_create(&(0x7f00000026c0)=':\x00', 0x0)
r1 = dup(r0)
write$FUSE_LK(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, {{0x2}}}, 0x28)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendfile(r0, r0, &(0x7f0000000040), 0x400000000)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xc, 0x11, r0, 0x0)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, &(0x7f0000000740))

[  914.503965] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Dropping request.  Check SNMP counters.
[  914.525738] binder: 6060:6063 ERROR: BC_REGISTER_LOOPER called without request
04:05:26 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
timer_create(0x8, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)

[  914.557988] binder: 6060:6063 ioctl c0306201 0 returned -14
[  914.581440] binder: 6060:6063 got reply transaction with no transaction stack
04:05:26 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
timer_create(0x8, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)

[  914.618551] binder: 6060:6063 transaction failed 29201/-71, size 0-0 line 2921
04:05:27 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
pipe2(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4000)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000180))
mkdir(&(0x7f0000000000)='./control\x00', 0x0)
r4 = inotify_init()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={<r5=>0xffffffffffffffff, r2, 0x0, 0x1d, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0xffffffffffffffff}, 0x30)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000580)={[], 0x2, 0x80000000, 0x3, 0x3ff, 0x20, r5})
inotify_add_watch(r4, &(0x7f00005eaff6)='./control\x00', 0x8)
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x81)
bind$inet(r3, &(0x7f0000000600)={0x2, 0x4e24, @multicast2}, 0x10)
dup2(r1, r3)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x4, 0x9, 0x0, 0x1, 0xc, 0x4, "f5c3f7393f92f7f3a02b47acddf05c0429db38956971860f7d344308978dd6102acb9a12593ffcb2e192222fc1990f9d580887e12d2853542523b19aec412a4c", "76f076340f66c60f7457d99faa865a54c5d861c59c1a2e32d6be77464577c50241aac83865841af95eed04fb0953b11db6587eeb2df95f189d013b7192c6dff5", "c4c2f5f4d9c5c88355eeb16d7c68e07166f3baccfd05033412596a7a2d7b960d", [0x5, 0x3]})
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
socket(0x8, 0xfffffffffffffffe, 0x20)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
write(r0, &(0x7f0000000740)="baa59349e69f5f4963aadb568fbca1c9a7b70a3d70c3d051a0387d658aa2a672a17a80d12cb9bb18cb735afe2d922b646fe46d1abd06e1962d4db04637fc70c6b6b9769a995cb3c084e6abbd05754293160f61222f957d2a8f0427365f085326a0449a50c4c216aad731cf4ce547ed4f7e16c504778e05e1dd19bc80d552afc7d7bd8cdb9189fc3ef4205b71c9d87c309356000cc909dfdaaac85e28344a7f7f500910dbfafa1a090ea60c1b77082e8380526afc1b59c6eabac66e7e8a11034054b48e6f7ceaba94a679fdf019b11152cc", 0x2)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000380)={{{@in=@multicast2, @in6=@mcast2}}, {{}, 0x0, @in6}}, &(0x7f0000000040)=0xe8)
connect$inet(r6, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, 0x0)
connect$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

04:05:27 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
write$P9_RREADLINK(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0e"], 0x1)
fcntl$setstatus(r1, 0x4, 0x4000)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f00000001c0)="fadc1f123c123f319bc070")
write$smack_current(r1, &(0x7f0000000200)='./cgroup\x00', 0x9)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r2, 0x0)
readv(r2, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/4096, 0x7f8}], 0x10b)

04:05:27 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

04:05:27 executing program 5:
syz_genetlink_get_family_id$ipvs(0x0)
clone(0x210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sched_setscheduler(0x0, 0x5, &(0x7f0000000600))
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x15, &(0x7f0000000140)=ANY=[@ANYBLOB="05000001000000003a113580665aa149855e19a9537fc55c7488340d18d829e1412e3fc0bc1c22b321ef957467352d1facc59581fab7578f0ae185c78ebc03e88967856e80f0e2b18252ea4b7f571dce4da9672b854318b1cc701b7f4db1ad851e7c83baac3ee117f5a27cc0e74867ec676bff188364768b3d227306af7af37f102791c06358a1204bb1fd0ba0ba18b53aa697f7db314afba1cf4033bd3a121dfd16b3b9246c9711c0ad2ddcb2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)

04:05:27 executing program 2:
r0 = socket$inet(0x10, 0x2, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070")
sendmsg(r0, &(0x7f00000000c0), 0x0)

04:05:27 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udp(0x2, 0x2, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000080))
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x58, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES64=0x0, @ANYBLOB="000000000000000000634040060000000000000000000000000000000000000000090000000000000000e66e85f965072eaeff03000000000000000000000000000000000000000000001200"], 0x0, 0x0, 0x0})
setsockopt$inet_tcp_int(r2, 0x6, 0x1f, &(0x7f00000000c0)=0x40, 0x4)

04:05:27 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

04:05:27 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bc070")
r1 = gettid()
clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$unix(0x1, 0xd64200c67dc21148, 0x0)
r2 = gettid()
futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r1, 0x10)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc754220b45625661b76a4e1ba68faf7570ec523ca67775c541888921552d5c9dfba56e91313a36a3d0d056b00906000000000000000d58"], 0x39)
r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000040)=0x3, 0x4)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f00000000c0))
ptrace$cont(0x7, r2, 0x0, 0x0)

04:05:27 executing program 2:
r0 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000140)={0x3, 0x0, 0x0, 0xfffffffffffffffc})
r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000000)={'\x00', 0x8})

[  915.507689] binder: 6090:6095 unknown command 0
[  915.515960] binder: BINDER_SET_CONTEXT_MGR already set
[  915.515969] binder: 6088:6092 ioctl 40046207 0 returned -16
04:05:27 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

[  915.522765] binder: 6088:6092 ERROR: BC_REGISTER_LOOPER called without request
[  915.524092] binder: 6088:6092 ioctl c0306201 0 returned -14
04:05:27 executing program 2:
socket$inet6(0xa, 0x80f, 0xffff)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0xc001, &(0x7f0000000000)={0xa, 0x8004e23, 0x0, @mcast2, 0x3}, 0x1c)
sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="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", 0x4fe}], 0x1}, 0x0)

04:05:27 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

[  915.528948] binder: 6088:6092 got reply transaction with no transaction stack
[  915.528957] binder: 6088:6092 transaction failed 29201/-71, size 0-0 line 2921
[  915.571405] binder: BINDER_SET_CONTEXT_MGR already set
[  915.571415] binder: 6102:6105 ioctl 40046207 0 returned -16
[  915.573376] binder: 6102:6105 ERROR: BC_REGISTER_LOOPER called without request
[  915.574667] binder: 6102:6105 got reply transaction with no transaction stack
[  915.574676] binder: 6102:6105 transaction failed 29201/-71, size 0-0 line 2921
[  915.661638] binder: BINDER_SET_CONTEXT_MGR already set
[  915.661647] binder: 6117:6119 ioctl 40046207 0 returned -16
[  915.662333] binder: 6117:6119 ERROR: BC_REGISTER_LOOPER called without request
[  915.666279] binder: 6117:6119 got reply transaction with no transaction stack
[  915.666290] binder: 6117:6119 transaction failed 29201/-71, size 0-0 line 2921
[  915.720483] binder: BINDER_SET_CONTEXT_MGR already set
[  915.720492] binder: 6126:6128 ioctl 40046207 0 returned -16
[  915.723200] binder: 6126:6128 ERROR: BC_REGISTER_LOOPER called without request
[  915.723332] binder: 6126:6128 got reply transaction with no transaction stack
[  915.723340] binder: 6126:6128 transaction failed 29201/-71, size 0-0 line 2921
[  915.955243] binder: 6090:6095 ioctl c0306201 20000180 returned -22
[  915.966476] binder: 6090:6103 unknown command 0
[  915.971963] binder: 6090:6103 ioctl c0306201 20000180 returned -22
04:05:27 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x7, &(0x7f00000001c0)="0adc1ff2876fc41259123c")
clock_gettime(0x0, &(0x7f0000002500)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000100)}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/157, 0x9d}], 0x3}, 0x18}, {{&(0x7f00000012c0)=@can, 0x80, &(0x7f0000001840)=[{&(0x7f0000001340)=""/226, 0xe2}, {&(0x7f0000001440)=""/205, 0xcd}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000001540)=""/107, 0x6b}, {&(0x7f00000015c0)=""/103, 0x67}, {&(0x7f0000001640)=""/252, 0xfc}, {&(0x7f0000001740)=""/71, 0x47}, {&(0x7f00000017c0)=""/108, 0x6c}], 0x8, &(0x7f00000018c0)=""/121, 0x79}, 0x14000000000}, {{&(0x7f0000001940)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000001b00)=[{&(0x7f00000019c0)=""/141, 0x8d}, {&(0x7f0000001a80)=""/113, 0x71}], 0x2}, 0xffffffff}, {{&(0x7f0000001b40)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001bc0)=""/45, 0x2d}, {&(0x7f0000001c00)=""/136, 0x88}, {&(0x7f0000001cc0)=""/108, 0x6c}, {&(0x7f0000001d40)=""/69, 0x45}], 0x4, &(0x7f0000001e00)=""/85, 0x55}, 0x7}, {{&(0x7f0000001e80)=@sco, 0x80, &(0x7f00000022c0)=[{&(0x7f0000001f00)=""/78, 0x4e}, {&(0x7f0000001f80)=""/30, 0x1e}, {&(0x7f0000001fc0)=""/118, 0x76}, {&(0x7f0000002040)=""/139, 0x8b}, {&(0x7f0000002100)=""/220, 0xdc}, {&(0x7f0000002200)=""/145, 0x91}], 0x6, &(0x7f0000002340)=""/122, 0x7a}, 0x1400}], 0x5, 0x0, &(0x7f0000002540)={r1, r2+10000000})
accept4$inet6(0xffffffffffffffff, &(0x7f0000002580), &(0x7f00000025c0)=0x1c, 0x0)
recvmmsg(r0, &(0x7f00000088c0)=[{{&(0x7f00000026c0)=@nl, 0x80, &(0x7f0000002880)=[{&(0x7f0000002740)=""/251, 0xfb}, {&(0x7f0000002840)=""/34, 0x22}], 0x2, &(0x7f00000028c0)=""/13, 0xd}, 0x7}, {{&(0x7f0000002900)=@generic, 0x80, &(0x7f0000003c40)=[{&(0x7f0000002980)=""/212, 0xd4}, {&(0x7f0000002a80)=""/234, 0xea}, {&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/171, 0xab}], 0x4, &(0x7f0000003c80)}, 0x63e0}, {{&(0x7f0000003cc0)=@xdp, 0x80, &(0x7f0000003f00)=[{&(0x7f0000003d40)=""/69, 0x45}, {&(0x7f0000003dc0)=""/224, 0xe0}, {&(0x7f0000003ec0)=""/12, 0xc}], 0x3, &(0x7f0000003f40)=""/240, 0xf0}, 0xffffffff}, {{&(0x7f0000004040)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f00000042c0)=[{&(0x7f00000040c0)=""/244, 0xf4}, {&(0x7f00000041c0)=""/205, 0xcd}], 0x2, &(0x7f0000004300)=""/151, 0x97}, 0x8}, {{0x0, 0x0, &(0x7f0000005680)=[{&(0x7f00000043c0)=""/4096, 0x1000}, {&(0x7f00000053c0)=""/182, 0xb6}, {&(0x7f0000005480)=""/190, 0xbe}, {&(0x7f0000005540)=""/7, 0x7}, {&(0x7f0000005580)=""/247, 0xf7}], 0x5, &(0x7f0000005700)=""/110, 0x6e}, 0xffffffffffffffff}, {{0x0, 0x0, &(0x7f0000006e40)=[{&(0x7f0000005780)=""/194, 0xc2}, {&(0x7f0000005880)=""/4096, 0x1000}, {&(0x7f0000006880)=""/137, 0x89}, {&(0x7f0000006940)=""/110, 0x6e}, {&(0x7f00000069c0)=""/86, 0x56}, {&(0x7f0000006a40)=""/150, 0x96}, {&(0x7f0000006b00)=""/185, 0xb9}, {&(0x7f0000006bc0)=""/229, 0xe5}, {&(0x7f0000006cc0)=""/245, 0xf5}, {&(0x7f0000006dc0)=""/83, 0x53}], 0xa}, 0x6}, {{&(0x7f0000006f00)=@nfc_llcp, 0x80, &(0x7f0000007380)=[{&(0x7f0000006f80)=""/142, 0x8e}, {&(0x7f0000007040)=""/121, 0x79}, {&(0x7f00000070c0)=""/221, 0xdd}, {&(0x7f00000071c0)=""/13, 0xd}, {&(0x7f0000007200)=""/213, 0xd5}, {&(0x7f0000007300)=""/66, 0x42}], 0x6, &(0x7f0000007400)=""/212, 0xd4}, 0x8}, {{&(0x7f0000007500)=@isdn, 0x80, &(0x7f0000008840)=[{&(0x7f0000007580)=""/4096, 0x1000}, {&(0x7f0000008580)=""/129, 0x81}, {&(0x7f0000008640)=""/55, 0x37}, {&(0x7f0000008680)=""/170, 0xaa}, {&(0x7f0000008740)=""/214, 0xd6}], 0x5}, 0x18b}], 0x8, 0x21, &(0x7f0000008ac0))
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0xc74045a5)
r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x2000, 0x0)
ioctl$VT_GETSTATE(r4, 0x5603, &(0x7f0000002600)={0x6, 0x0, 0x8})
ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f0000008b00)=""/230)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x42, @local}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

04:05:27 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
clone(0x802102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x1e)
ptrace$cont(0x18, r1, 0x0, 0x0)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@empty, @mcast1, @ipv4, 0x0, 0x0, 0x0, 0x12e})
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000001}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="cf74923f96d8dde1305cbbffc9300fab4cb7724cb57d6ca3299251d731667cdc6f57fdacc13c72109221befcb877c73c1b15316aa208e831a1204419a0ad6dfe4acb59183a0b562c5c997783df7a511d7edbac81457e45be7c9586cd374b1ca06b196a2b5886d25db761d57b60184147cd418da6fd699803d0aa30596f1fc749c9d1c3933cbf1caacab56928b4c10bf722e33033e871d5b7db4c5b2fb05efa891de8f0114c38508922d7d06dd30c2047e09e92aec250ef5f39f97cd8e6ad923e1d51511829ee065b505b", @ANYRES16=r3, @ANYBLOB="000129bd7000fddbdf25020000000c00050022000000000000000c000300001000000000000008000100000000000c00060003000000000000000c00060001000000000000000c0004001d090000000000000c00050020000000000000000c00020001040000000000000c00030001000100000000000800010000000000"], 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x0)
syz_genetlink_get_family_id$tipc2(0x0)

04:05:27 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

04:05:27 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x16)
recvmsg(r0, &(0x7f0000000180)={0x0, 0x25b, 0x0}, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c)

04:05:27 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='statm\x00')
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40c00}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xc8, r1, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x10000}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xa}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7ff}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x14}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x67}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x34}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x7e}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8010}, 0x40)
prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffafea)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00')
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x80, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x2c, 0x7, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_SOCKETS={0x34, 0x7, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x0)
futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0x4, 0x1, &(0x7f0000cc3ff0)={0x77359400}, &(0x7f000044b000), 0x0)

[  916.058531] binder: 6135:6140 ERROR: BC_REGISTER_LOOPER called without request
[  916.094684] binder: 6135:6140 got reply transaction with no transaction stack
04:05:28 executing program 2:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2400000002031f001cfffd946fa2830020200a000900010040e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
r1 = accept4(r0, &(0x7f0000000200)=@can, &(0x7f0000000280)=0x80, 0x80800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000002c0)={{0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x100000000}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x24}, 0x9}, 0x7fffffff, [0x6, 0x9, 0x0, 0x101, 0x7, 0x7, 0x5, 0x3]}, 0x5c)

04:05:28 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

[  916.128835] binder: 6135:6140 transaction failed 29201/-71, size 0-0 line 2921
[  916.185722] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  916.204121] binder: 6154:6159 ERROR: BC_REGISTER_LOOPER called without request
[  916.204942] binder: 6154:6159 got reply transaction with no transaction stack
[  916.204951] binder: 6154:6159 transaction failed 29201/-71, size 0-0 line 2921
[  916.235875] audit: type=1400 audit(1555041928.117:170): avc:  denied  { accept } for  pid=6152 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1
[  916.343790] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
04:05:30 executing program 3:
r0 = socket$inet6(0xa, 0x80001, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)
fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, <r1=>0x0})
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)=r1)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000040)={'veth1_to_hsr\x10\x00', 0x2})
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000540)=ANY=[@ANYBLOB="00000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000061d1a4e300"/144], 0x90)

04:05:30 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

04:05:30 executing program 5:
unshare(0x2000003ff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
fgetxattr(r0, &(0x7f0000000340)=@known='system.sockprotoname\x00', 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpu.stat\x00', 0x0, 0x0)
connect$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @broadcast}, 0x10)
socketpair(0x5, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvfrom$inet(r2, &(0x7f0000000180)=""/220, 0xdc, 0x0, &(0x7f0000000280)={0x2, 0x4e21, @empty}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0xc, &(0x7f0000000080)='&*[cgroup\x8c]\x00'}, 0x30)
syz_open_procfs(r3, &(0x7f0000000100)='net/tcp\x00')
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x3, 0x0)
ioctl$TIOCLINUX5(r4, 0x541c, &(0x7f0000000040)={0x5, 0x6, 0x80000000, 0xfffffffffffff801, 0x10001})
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000000380)={'filter\x00', 0x4}, 0x68)

04:05:30 executing program 2:
stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r0, r1)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x400803, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x68)
r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x2)
poll(&(0x7f0000000040)=[{r3}], 0x1, 0xffffffff)
write$evdev(r3, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x34c)
openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.threads\x00', 0x2, 0x0)
r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000002c0)={&(0x7f0000000240)='./file0\x00', r4}, 0x10)

04:05:30 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8000, 0x0)
ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f0000000040))
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

04:05:30 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000000)=0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000006cc0))
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000040)={'tunl0\x00', {0x2, 0x4e23, @remote}})

04:05:30 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x7, 0x1, 0x3, 0x2, 0x20, 0xffffffffffffffff, 0x6, [], 0x0, 0xffffffffffffff9c, 0x0, 0x80000001}, 0x3c)
signalfd(r0, &(0x7f00007aeff8), 0xfffffffffffffe87)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
accept$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c)
mkdir(&(0x7f0000508ff6)='./control\x00', 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
r2 = inotify_init1(0x0)
fcntl$setstatus(r2, 0x4, 0x72109c5fef5d34d3)
stat(&(0x7f0000000100)='./control\x00', &(0x7f0000000140))
r3 = gettid()
fcntl$setown(r2, 0x8, r3)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bc070")
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r5, 0x89f2, &(0x7f0000000240)={'sit0\x00'})
fcntl$setsig(r2, 0xa, 0x20)
inotify_add_watch(r2, &(0x7f0000000080)='./control\x00', 0xa4000960)
open(&(0x7f00003f5000)='./control\x00', 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r4, &(0x7f0000000280)="f5b52aea08cc2d67e433b7e48fa70971e90b996c6d65623eeb2c56da9f92d0b219d298a57ff161af608b6793acd1f80fbb8cf49d57d2ef56bc3d1ef07c8d6ef415b61e060722ec77f3ee6656ddb544f012ef8a75f6579d7d8dee95dd691883302ca45f439bbbb345bea3cd95b1fbe8365d4d5284e50054b888b4dc8a1394d7f48a1a33f2233b9543b3a54c147e962de254444de408a6dc03ca7a4829bf7a"}, 0x10)

04:05:30 executing program 3:
mknod(&(0x7f0000000200)='./file0\x00', 0x1120, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x2102)
r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f00000002c0))
r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$LOOP_SET_CAPACITY(r0, 0x4c07)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x0, &(0x7f0000000080)="0adc00000001fc00000070")
r4 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0)
linkat(r4, &(0x7f0000000100)='./file0\x00', r4, &(0x7f0000000140)='./file1\x00', 0x400)
r5 = dup2(r4, r4)
fcntl$setstatus(r4, 0x4, 0x44800)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x241, 0x0)
write$FUSE_IOCTL(r5, &(0x7f0000000000)={0x20, 0x0, 0x0, {0x0, 0x3}}, 0x20)
setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x4e23, 0xfffffffffffffff7, @loopback, 0x5}, {0xa, 0x4e20, 0x3f, @empty, 0x100000000}, 0x200, [0x4, 0x401, 0xfffffffffffffe00, 0x0, 0x1, 0x2, 0xb6eb, 0xffff]}, 0x5c)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f00000000c0)="e36767f374d8c5c7e5a80f13f962d27a", 0x10)

04:05:30 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bc070")
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @multicast2}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}})
r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x401, 0x0)
ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000180)={0x40, 0x80, 0x7f})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000040)=""/169)
ioctl(r2, 0x4, &(0x7f0000000140)="0adc1f123cf2978590123f")
write$selinux_load(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="8cff7cf908003e95ff11108e7953458a29336cc6ac1a3cbca0871820"], 0x1c)

04:05:30 executing program 5:
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000080)={0x1, 0x0, {0x1c, 0x3b, 0x2, 0xd, 0x5, 0x2, 0x3, 0x47, 0xffffffffffffffff}})
clone(0x3102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x80000000000023)
ptrace$cont(0x18, r2, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0x53})
ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f0000000140)={0x2, 0x6, 0x3, 0x4, 0x3, 0x8})
ptrace$setopts(0xffffffffffffffff, r2, 0x6, 0x20)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0)
write$UHID_INPUT(r0, &(0x7f00000002c0)={0x8, "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", 0x1000}, 0x1006)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000180)={{0xa, 0x4e22, 0xe9f, @loopback, 0x1}, {0xa, 0x4e21, 0x101, @local, 0xff}, 0x2, [0x6, 0x8000, 0x5, 0x2, 0xffffffff, 0x2c, 0x46, 0x3]}, 0x5c)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x3f, r2, 0x0, 0x80)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r3, 0x28, &(0x7f0000000200)={0x0, <r4=>0x0}}, 0x10)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={r4, 0x0, 0x10}, 0xc)

[  918.586010] binder: 6170:6180 ERROR: BC_REGISTER_LOOPER called without request
04:05:30 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', <r3=>0x0})
ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)=r3)
tkill(r2, 0x12)

04:05:30 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = memfd_create(&(0x7f0000000380)='#e\xa7\x82w$\x00\xa6>rH\xaa\xd8\xd3\xc9l\x87\x840\xbe\xa0\x03(\xb2\x8f\xafD\x8d~~K{ooJ\xa4\xe8\xc0\xdf\x8dh]\xbfL\xe3\xfe\xbfn`\xe0#\xc3\xec8\xd7\x98^\xcb\xbc\xcf`\xbf\x1c\xf2\xeb\xacI\x12\x89\xaeD?5\xae\x00B+J\x1d\x05\x05x\xe7x\x99\xcc\xc5%\xc3\xddm\xcf\xd8\xc1}f/\x96\xe7\x8c\xe1\"9\x98\xec\n\xc0\x9b\xcf\xeal\x94\x97)\xb2\xff!\x13\xc5\xbbm\xcb\x8a\xf4\xc5\xfc$b\x13\v\xda\x01\x9e@\x04%\x95\xed\xf4\x95\xec\xd0\xc7\xf5\x7f\xbe\x9c\xff\x05\x06-\x85\xb4\xb8@P\'\xa0\xd1\xf7D\xe5\x82\xf9\xa8^]\x99\x17\x99\r^?\xa3\x8f\t\xb8\xa6\x81\xc2\xb8\x00\a\x04\xda&P\x89s\b\xea\xc7\xf7E\x8e\xb3\x14+}\xdaLC\xaf\x8d\x8e\x98/0\x1f\xba\xb0', 0x0)
r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0)
write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7eda044c0b8504"], 0x7)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0)
socket(0x18, 0x0, 0x4)
connect(r0, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @rand_addr=0x44bcefcb}, 0x0, 0x1, 0x1, 0x1}}, 0xffffffffffffff2e)

[  918.644543] binder: 6170:6189 got reply transaction with no transaction stack
04:05:30 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070")
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x200, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
rt_sigtimedwait(&(0x7f00000000c0), 0x0, 0x0, 0x8)
r3 = getpid()
rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100))
ptrace(0x10, r3)
ptrace$cont(0x420a, r3, 0x8, 0x20008000)

[  918.678074] keychord: unsupported version 65420
[  918.691110] keychord: unsupported version 65420
04:05:30 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

04:05:30 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
unlink(&(0x7f0000000240)='./file0\x00')
ioctl(r0, 0x3f, &(0x7f0000000400)="ad35d6b9f335c4958c82f1aa5a1fda1b94fa0b5933da7f777725cb1bc99efd785d03c20933f18efcd4553a7dfd203225243ee618464b706d7bf41c2c32bbb5c79df1b6c33c73d98c1f9278df2318082071ee7a5f6661d3270082866e32ecb2b0f4695ba6384205d3d294d7f7c9ecc73bb80d15f0acf827ddef39f083c54cad40")
setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="f063fd6acf9ad0f4cf65003e5c51273e1ae6dd0c40430dd19bddf59940bee0d45eff2471b6a51372a90dabb933038581b9fbd131efbd1e041b1fa0c59487f2ffff113cf5e8f73bc84e565e01b1e1da8d74f9bcd5355b74a156a3181b5b55c5de4f00a4c66c0000000000000000000000002af101fdb3acfa8b3c31be4937ffd43fe522c12dc4fa8b1c7041142a"], 0x1, 0x1)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
unlink(&(0x7f0000000200)='./file0\x00')
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e24, 0x8, @loopback, 0x80}, 0x1c)
close(r1)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x4e24, @initdev}, {0x2, 0x4e20, @dev}, {0x2, 0x4e20, @multicast1}, 0x84, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x20, 0x0, 0x7})

04:05:30 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ipv6_route\x00')
r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x9000201, 0x0)
sendfile(r1, r0, 0x0, 0x7ffffffb)

[  918.781819] binder: 6170:6189 transaction failed 29201/-71, size 0-0 line 2921
[  918.858494] binder: 6219:6223 ERROR: BC_REGISTER_LOOPER called without request
[  918.902196] binder: release 6219:6223 transaction 388 out, still active
[  918.910836] binder: undelivered TRANSACTION_COMPLETE
[  918.980875] binder: send failed reply for transaction 388, target dead
04:05:31 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10000, 0x0)
ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000040)="61570576fdc982dfd0d79d2db41e4ca03cf151151efe98c924caa175")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x49)
connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x1000, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000180)={@loopback, @multicast1, <r3=>0x0}, &(0x7f0000000200)=0xc)
setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000240)={r3, @rand_addr=0xfff}, 0xc)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

04:05:31 executing program 3:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x3)
fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="020000000100000000000000fd0000000000000010faffffff00f9ff2000000000000000"], 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'team0\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x3b, 0x1, [{0x3, 0x8}]}})

04:05:31 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
unlink(&(0x7f0000000240)='./file0\x00')
ioctl(r0, 0x3f, &(0x7f0000000400)="ad35d6b9f335c4958c82f1aa5a1fda1b94fa0b5933da7f777725cb1bc99efd785d03c20933f18efcd4553a7dfd203225243ee618464b706d7bf41c2c32bbb5c79df1b6c33c73d98c1f9278df2318082071ee7a5f6661d3270082866e32ecb2b0f4695ba6384205d3d294d7f7c9ecc73bb80d15f0acf827ddef39f083c54cad40")
setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="f063fd6acf9ad0f4cf65003e5c51273e1ae6dd0c40430dd19bddf59940bee0d45eff2471b6a51372a90dabb933038581b9fbd131efbd1e041b1fa0c59487f2ffff113cf5e8f73bc84e565e01b1e1da8d74f9bcd5355b74a156a3181b5b55c5de4f00a4c66c0000000000000000000000002af101fdb3acfa8b3c31be4937ffd43fe522c12dc4fa8b1c7041142a"], 0x1, 0x1)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
unlink(&(0x7f0000000200)='./file0\x00')
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e24, 0x8, @loopback, 0x80}, 0x1c)
close(r1)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x4e24, @initdev}, {0x2, 0x4e20, @dev}, {0x2, 0x4e20, @multicast1}, 0x84, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x20, 0x0, 0x7})

04:05:31 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

04:05:31 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x40000006100)
ftruncate(r2, 0x208203)
r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800002, 0x11, r3, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e24, 0x0, @ipv4={[], [], @multicast1}}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1)
r5 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x8000fffffffe)

04:05:31 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
prctl$PR_GET_PDEATHSIG(0x25, &(0x7f0000000000))

04:05:31 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
unlink(&(0x7f0000000240)='./file0\x00')
ioctl(r0, 0x3f, &(0x7f0000000400)="ad35d6b9f335c4958c82f1aa5a1fda1b94fa0b5933da7f777725cb1bc99efd785d03c20933f18efcd4553a7dfd203225243ee618464b706d7bf41c2c32bbb5c79df1b6c33c73d98c1f9278df2318082071ee7a5f6661d3270082866e32ecb2b0f4695ba6384205d3d294d7f7c9ecc73bb80d15f0acf827ddef39f083c54cad40")
setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="f063fd6acf9ad0f4cf65003e5c51273e1ae6dd0c40430dd19bddf59940bee0d45eff2471b6a51372a90dabb933038581b9fbd131efbd1e041b1fa0c59487f2ffff113cf5e8f73bc84e565e01b1e1da8d74f9bcd5355b74a156a3181b5b55c5de4f00a4c66c0000000000000000000000002af101fdb3acfa8b3c31be4937ffd43fe522c12dc4fa8b1c7041142a"], 0x1, 0x1)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
unlink(&(0x7f0000000200)='./file0\x00')
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e24, 0x8, @loopback, 0x80}, 0x1c)
close(r1)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x4e24, @initdev}, {0x2, 0x4e20, @dev}, {0x2, 0x4e20, @multicast1}, 0x84, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x20, 0x0, 0x7})

04:05:31 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)="85"})

[  919.323721] binder: 6234:6241 ERROR: BC_REGISTER_LOOPER called without request
[  919.345810] binder: release 6234:6241 transaction 390 out, still active
[  919.355734] binder: undelivered TRANSACTION_COMPLETE
[  919.415309] binder: 6248:6251 ERROR: BC_REGISTER_LOOPER called without request
[  919.430817] binder: send failed reply for transaction 390, target dead
[  919.442758] binder: release 6248:6251 transaction 392 out, still active
[  919.465058] binder: undelivered TRANSACTION_COMPLETE
[  919.510671] binder: send failed reply for transaction 392, target dead
04:05:31 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)
fsetxattr$security_ima(r1, &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000100)=@md5={0x1, "b8dd67a6ed57646beaa8c812ffacebb2"}, 0x11, 0x0)
lseek(r3, 0x0, 0x0)
fsetxattr$security_ima(r2, &(0x7f00000001c0)='security.ima\x00', 0x0, 0x0, 0x1)

04:05:31 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@local, 0x0, 0x2b}, 0x0, @in=@local}}, 0xe8)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}}, 0x0)
sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="02120000be92cc5cdd46d8dfb4026afd73b3fbe485d573"], 0x10}}, 0x0)
recvmmsg(r1, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400})

04:05:31 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
unlink(&(0x7f0000000240)='./file0\x00')
ioctl(r0, 0x3f, &(0x7f0000000400)="ad35d6b9f335c4958c82f1aa5a1fda1b94fa0b5933da7f777725cb1bc99efd785d03c20933f18efcd4553a7dfd203225243ee618464b706d7bf41c2c32bbb5c79df1b6c33c73d98c1f9278df2318082071ee7a5f6661d3270082866e32ecb2b0f4695ba6384205d3d294d7f7c9ecc73bb80d15f0acf827ddef39f083c54cad40")
setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="f063fd6acf9ad0f4cf65003e5c51273e1ae6dd0c40430dd19bddf59940bee0d45eff2471b6a51372a90dabb933038581b9fbd131efbd1e041b1fa0c59487f2ffff113cf5e8f73bc84e565e01b1e1da8d74f9bcd5355b74a156a3181b5b55c5de4f00a4c66c0000000000000000000000002af101fdb3acfa8b3c31be4937ffd43fe522c12dc4fa8b1c7041142a"], 0x1, 0x1)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
unlink(&(0x7f0000000200)='./file0\x00')
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e24, 0x8, @loopback, 0x80}, 0x1c)
close(r1)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x4e24, @initdev}, {0x2, 0x4e20, @dev}, {0x2, 0x4e20, @multicast1}, 0x84, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x20, 0x0, 0x7})

04:05:31 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)

[  919.615672] binder: 6258:6261 ERROR: BC_REGISTER_LOOPER called without request
[  919.644656] binder: 6258:6261 ioctl c0306201 0 returned -14
[  919.667056] binder: release 6258:6261 transaction 394 out, still active
[  919.676333] binder: undelivered TRANSACTION_COMPLETE
[  919.741083] binder: send failed reply for transaction 394, target dead
04:05:31 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000040)=0x1000)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

04:05:31 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001800230000000000000000000a000000000000000000000014000500000000000000000000000000000000007677bd3db9d0e01d697f56a11897e298a14ad3436041b04a6c3cbba009e8ebc9680843db9a15bb2cb8e90e251d7c525b44471194005665308a66882690"], 0x30}}, 0x0)

04:05:31 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)

04:05:31 executing program 3:
recvmmsg(0xffffffffffffffff, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002bc0)=""/93, 0x5d}}], 0x1, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x1000402000001, 0x0)
syz_open_dev$rtc(0x0, 0x0, 0x0)
writev(r0, &(0x7f00000023c0), 0x1000000000000252)
r1 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080), 0x4)

04:05:31 executing program 2:
capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f00000001c0)={0x3e, @multicast2, 0x4e23, 0x1, 'wrr\x00', 0x20, 0x9, 0x3e}, 0x2c)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x202482, 0x100)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000240)=<r3=>0x0)
capset(&(0x7f0000000140)={0x20071026, r3}, &(0x7f0000000180)={0x1e1a62ee, 0x5, 0x6, 0x5fb, 0xfffffffffffffc01, 0x1})
setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000080), 0x4)
setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000200)={@local, @multicast1, @dev={0xac, 0x14, 0x14, 0x10}}, 0xc)
setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x10, 0x0, 0x0)

04:05:31 executing program 4:
ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f00000001c0)={'bridge0\x00'})
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd\x00')
getsockopt$packet_buf(r0, 0x107, 0x0, &(0x7f0000000300)=""/191, &(0x7f0000000000)=0xbf)
exit(0xfffffffffffffffc)
getdents64(r0, &(0x7f0000000080)=""/57, 0x28)
accept4$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0}, &(0x7f0000000180)=0x14, 0x80800)
recvfrom$packet(r0, &(0x7f0000000200)=""/164, 0xa4, 0x40, &(0x7f00000002c0)={0x11, 0x1b, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14)

04:05:31 executing program 3:
recvmmsg(0xffffffffffffffff, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002bc0)=""/93, 0x5d}}], 0x1, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x1000402000001, 0x0)
syz_open_dev$rtc(0x0, 0x0, 0x0)
writev(r0, &(0x7f00000023c0), 0x1000000000000252)
r1 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080), 0x4)

[  920.071175] binder: 6275:6279 ERROR: BC_REGISTER_LOOPER called without request
04:05:32 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x9, &(0x7f0000000000)="0adc1f123c12a41d88b070")
r1 = socket$inet(0x2, 0x200000001, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=<r2=>0x0)
fsetxattr$security_evm(r1, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "e58e186938f49568b32e7aa71dc6f30b1af93e00"}, 0x15, 0x0)
sched_setparam(r2, &(0x7f0000000140)=0xffffffffffffffff)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000100)=ANY=[@ANYBLOB="e0008fe2ac1414aa00000000612b0cedac9414aa"], 0x14)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x20)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000001480)={0x2, 0x4e23, @multicast1}, 0x10)

[  920.134706] binder: 6275:6290 ioctl c0306201 0 returned -14
[  920.165824] binder: release 6275:6290 transaction 396 out, still active
[  920.177305] binder: undelivered TRANSACTION_COMPLETE
04:05:32 executing program 5:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x0)

04:05:32 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000502000000fcff3f0000000000"], 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000b67000), &(0x7f00007d0000)=0x4)
fchdir(r2)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2)

04:05:32 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)

04:05:32 executing program 2:
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x1e7b02)
ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000180)=0xd383)
r1 = gettid()
capset(&(0x7f0000000000)={0x200f1526, r1}, &(0x7f0000000040)={0x800, 0x6, 0x8000000, 0x3, 0x1000, 0xbd10})

[  920.241708] binder: send failed reply for transaction 396, target dead
[  920.316503] binder: 6299:6302 ERROR: BC_REGISTER_LOOPER called without request
[  920.349887] binder: 6299:6302 ioctl c0306201 0 returned -14
[  920.364707] binder: release 6299:6302 transaction 398 out, still active
[  920.375914] binder: undelivered TRANSACTION_COMPLETE
[  920.421048] binder: send failed reply for transaction 398, target dead
04:05:32 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000000)=""/186)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

04:05:32 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)=0xff, 0x25938849)
getdents(0xffffffffffffffff, &(0x7f0000000280)=""/135, 0x74f)
getdents(0xffffffffffffffff, 0x0, 0x2d)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000780)=<r0=>0x0)
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000007c0)={0x0, r0})
r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000800)="233bb271cc8244c2ea069bf4006612e1f457afea962c3b7b27e11421b7398569913034d820df77cede7a727314b05c3af59b55f28059b9be14e89111b842b6a47a0cc3dda2eba76ace977ec9c07c61b463e0e2cde7245ac89f126c76417cba4f37eaa12a11410f7f3b144d4e05a49dda768c8b4b13197a6b4e1608050690429df520f59741bb90fa852d7b193bd60242728d05e308271fab", 0x98, 0xfffffffffffffffe)
r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000180)="8fe404293755e9b925265c212316cdb96082d2eb7120164c5ddbdf2a8aad61a609611b49b555bab786fbf3376abb6611ed3973f557378961111ff9ed225fd9ef441fb396da98f9b32c9f4687", 0x12e, r1)
r3 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)="3f373630037ed8f35f7dea6e5063589ad3e41c0afd8844d08cb908627cbc0ae3d17500a2f5b85759758f75269b1f6634c6d2649ebbd1754fe7ea28e9e677abfdee74bb49eecfd8941776e253afa43a96744d1df14545802abef719decc62a4843c905053be14f5b3", 0x68, 0xfffffffffffffffa)
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400000, 0x0)
ioctl$RTC_EPOCH_READ(r4, 0x8008700d, &(0x7f0000000140))
r5 = request_key(&(0x7f0000000480)='user\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='#selinuxmd5sum:{lo\x00', 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r3, r5}, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000740)={&(0x7f0000000680)={'nhpoly1305-avx2\x00'}, &(0x7f00000006c0)="d3d38d771c15aff98b29adb4bd132d7566fa1e6e70a8ed259b26cf482086fa8421a59d3ceb4d3483dfda7cbc84a0e1b2fd1e855870f6295702c36bab647f23d126a3abea", 0x44})

04:05:32 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0xdf8, 0x4)
sendto$inet6(r0, &(0x7f0000000040)="62b88d62be0f87beebdc72a253ff92f0cc0fba319d841771e5a69d1338cfe9f397df84f57a5f656d942879cc5ca76fd1cd6d61b0c3cb07734ace3de773f9bab5318ad697c3e9744e6eb85289fc3e0f94bcbb73", 0x53, 0x20000000, &(0x7f00000000c0)={0xa, 0x4e20, 0x3, @remote, 0x1}, 0x1c)
bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6)

04:05:32 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x40000, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bc070")
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00')
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000004380)=""/4096, 0x1000}], 0x9)
readv(r1, &(0x7f0000000580), 0x3c1)

04:05:32 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="85"})

04:05:32 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000502000000fcff3f0000000000"], 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000b67000), &(0x7f00007d0000)=0x4)
fchdir(r2)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2)

04:05:32 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r1 = socket(0x10, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000000)={0x100, {{0x2, 0x4e22, @loopback}}, 0x1, 0x1, [{{0x2, 0x4e20, @remote}}]}, 0x110)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00')
sendfile(r1, r2, 0x0, 0x80000002)

04:05:32 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="85"})

04:05:32 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000502000000fcff3f0000000000"], 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000b67000), &(0x7f00007d0000)=0x4)
fchdir(r2)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2)

[  920.765197] binder: 6318:6322 ERROR: BC_REGISTER_LOOPER called without request
[  920.788325] binder: release 6318:6322 transaction 400 out, still active
[  920.798163] binder: undelivered TRANSACTION_COMPLETE
04:05:32 executing program 2:
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0xffffffffffffffff, 0x2, 0x6d, 0x2, 0x0, 0x0, 0x1, [], 0x0, r0}, 0x3c)
prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x1e)
ioctl$VT_DISALLOCATE(r1, 0x5608)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000080)=[@window={0x3, 0x1, 0xfffffffffffff800}, @window={0x3, 0x7fff}, @mss={0x2, 0x9}, @mss={0x2, 0x8000}], 0x4)
r2 = dup3(r1, r1, 0x80000)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm], 0x1)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000040)={0xffffffffffffffff, 0x1f, 0x7})
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r1, &(0x7f0000000200), 0x0}, 0x18)

04:05:32 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'})
write$input_event(r0, &(0x7f00000000c0)={{}, 0x12, 0x8001}, 0x18)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0)

[  920.834128] binder: release 6318:6322 transaction 400 in, still active
04:05:32 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000502000000fcff3f0000000000"], 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000b67000), &(0x7f00007d0000)=0x4)
fchdir(r2)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2)

[  920.883398] binder: 6330:6340 ERROR: BC_REGISTER_LOOPER called without request
[  920.893626] input: syz1 as /devices/virtual/input/input184
[  920.904308] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12148 sclass=netlink_route_socket pig=6342 comm=syz-executor.5
[  920.930668] binder: send failed reply for transaction 400, target dead
[  920.930842] binder: release 6330:6340 transaction 402 out, still active
[  920.930846] binder: undelivered TRANSACTION_COMPLETE
[  920.935599] binder: release 6330:6340 transaction 402 in, still active
[  920.961115] binder: send failed reply for transaction 402, target dead

INIT: Id "1" respawning too fast: disabled for 5 minutes

INIT: Id "6" respawning too fast: disabled for 5 minutes

INIT: Id "3" respawning too fast: disabled for 5 minutes

INIT: Id "5" respawning too fast: disabled for 5 minutes

INIT: Id "4" respawning too fast: disabled for 5 minutes

INIT: Id "2" respawning too fast: disabled for 5 minutes
04:05:33 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x404000, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x10bd9748bfebe693)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
getsockopt$inet_mreq(r2, 0x0, 0x24, &(0x7f0000000040)={@broadcast, @multicast1}, &(0x7f0000000080)=0x8)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

04:05:33 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20000, 0x10)
ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0xcb3)
ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x34)

04:05:33 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="85"})

04:05:33 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00')
read$FUSE(r0, &(0x7f0000001280), 0xfffffffffffffd94)
write$FUSE_DIRENT(r0, 0x0, 0x90)
ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000000))
ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f00000000c0)=""/119)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x78)

04:05:33 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000502000000fcff3f0000000000"], 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000b67000), &(0x7f00007d0000)=0x4)
fchdir(r2)

04:05:33 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="f800000016001d030000000000000000000edb1356e40481dac0000000000000000000000000000000000000000000000000ffffe000000200"/72, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x003\x00'/176], 0xf8}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0xfffffffffffffe98, &(0x7f0000000000)={&(0x7f00000000c0)=@flushsa={0x14, 0x1c, 0x501}, 0x1e3}}, 0x0)

04:05:33 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000005c0)="0adc1f123c123f319bc070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r1, 0x0, 0x2eb, 0x200007fd, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10)
getsockopt$inet_buf(r1, 0x0, 0x50, 0x0, &(0x7f0000000040)=0xffffffffffffffc6)

04:05:33 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x2000000000002)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffcc2, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x5}]}, 0x30}}, 0x0)

04:05:33 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000502000000fcff3f0000000000"], 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000b67000), &(0x7f00007d0000)=0x4)

[  921.919544] binder: 6359:6363 ERROR: BC_REGISTER_LOOPER called without request
04:05:33 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x80000, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000180)={0x15, 0x65, 0xffff, 0x9, 0x8, '9P2000.u'}, 0x15)
r3 = open(&(0x7f00000013c0)='./bus\x00', 0x40000141042, 0xfffffffffffffffe)
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0x323)
r4 = creat(&(0x7f00000012c0)='./bus\x00', 0x82)
r5 = getpid()
sched_rr_get_interval(r5, &(0x7f00000001c0))
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1)
sched_setscheduler(r5, 0x5, &(0x7f0000000040))
openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x100141042, 0x0)
sendfile(r4, r1, &(0x7f0000000000), 0x2)
getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000280)={'security\x00', 0x3c, "41b6f2d92bf297fe092223156661e7764a2b64009e44b433a1e1dcd73b6f6bee61fd5a71c91ab235bbd7d6f02ce53535a6d4623a66fce73c1758b343"}, &(0x7f0000000200)=0x60)
write$binfmt_misc(r6, &(0x7f0000000400)=ANY=[@ANYBLOB="6f27dc6a260b0689fdb595e218"], 0xd)
sendfile(r6, r6, &(0x7f00000000c0), 0xfff)
sendfile(r3, r6, &(0x7f0000000140), 0x8fff)

04:05:33 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r1 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000000)={0x200, 0x5})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x20)

04:05:33 executing program 5:
r0 = gettid()
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ptrace$setopts(0x4206, r0, 0x7f, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
clone(0x3ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setrlimit(0x7, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x10e, 0x9, 0x20000000000001, 0x0, 0x0}, 0x2c)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3f)
wait4(0x0, 0x0, 0x0, 0x0)

[  921.985536] binder: release 6359:6375 transaction 404 out, still active
[  922.010376] binder: undelivered TRANSACTION_COMPLETE
[  922.085189] binder: send failed reply for transaction 404, target dead
04:05:34 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
finit_module(r0, &(0x7f0000000000)='\x00', 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
getsockname$unix(r2, &(0x7f0000000100)=@abs, &(0x7f0000000080)=0x6e)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000180)={0x0, r0, 0x1f, 0x10001, 0x7fff, 0x4})
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r3, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000200)=0x7, 0x4)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

04:05:34 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

04:05:34 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000502000000fcff3f0000000000"], 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)

04:05:34 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0)
fchdir(r1)
r2 = open(0x0, 0x141042, 0x0)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x80000000)
write$P9_RREMOVE(r3, &(0x7f0000000280)={0x2}, 0x43c5)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r4, 0x4, 0x6100)
fdatasync(r3)
ftruncate(r4, 0x8200)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000a80)={0x0, r3})

04:05:34 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="d0dc956decd08aadaddd0f4fd11e32b2f05682a10576409ccadd2c683cc4453796a04658cd3eeadfd2379a024097a9c7d5d1c40974df35e7f4a15b4c924fc835"], 0x0, 0x0, 0x0})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x54, 0x0, &(0x7f0000000900)=[@acquire, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0})

04:05:34 executing program 5:
r0 = socket(0x200000000010, 0x80005, 0x80000000000004)
write(r0, &(0x7f0000000000)="240000002a007f000000000000ed0300000000ff010000000b0000000000800000000018", 0x24)

04:05:34 executing program 5:
clone(0x2302001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1000000018)
ptrace$cont(0x18, r0, 0x0, 0x0)
getpid()
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x5, 0x0, 0xca})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0)
ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x3)
write$UHID_DESTROY(r1, &(0x7f0000000040), 0x4)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x0, 0x0)

04:05:34 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  922.641783] binder: 6403:6407 unknown command 1838537936
[  922.652859] binder: BINDER_SET_CONTEXT_MGR already set
[  922.652881] binder: 6402:6408 ioctl 40046207 0 returned -16
04:05:34 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000502000000fcff3f0000000000"], 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0)

04:05:34 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

04:05:34 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000502000000fcff3f0000000000"], 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x400000000000117, 0x0)

[  922.654950] binder: 6402:6408 ERROR: BC_REGISTER_LOOPER called without request
[  922.655479] binder_alloc: 6403: binder_alloc_buf, no vma
04:05:34 executing program 5:
r0 = socket(0x200000000000011, 0x4000000000080002, 0xfff)
getsockname$unix(r0, 0x0, &(0x7f0000000080))

[  922.655497] binder: 6402:6408 transaction failed 29189/-3, size 0-0 line 3136
[  922.656140] binder: undelivered TRANSACTION_ERROR: 29189
[  922.707523] binder: 6403 invalid dec weak, ref 407 desc 0 s 1 w 0
[  922.707532] binder: 6403:6414 got reply transaction with no transaction stack
[  922.707541] binder: 6403:6414 transaction failed 29201/-71, size 0-0 line 2921
[  922.732913] binder: BINDER_SET_CONTEXT_MGR already set
[  922.732925] binder: 6416:6421 ioctl 40046207 0 returned -16
[  922.737704] binder: 6416:6421 ERROR: BC_REGISTER_LOOPER called without request
[  922.737834] binder_alloc: 6403: binder_alloc_buf, no vma
[  922.737855] binder: 6416:6421 transaction failed 29189/-3, size 0-0 line 3136
[  922.738145] binder: undelivered TRANSACTION_ERROR: 29189
[  922.799869] binder: BINDER_SET_CONTEXT_MGR already set
[  922.799880] binder: 6426:6429 ioctl 40046207 0 returned -16
[  922.802960] binder: 6426:6429 ERROR: BC_REGISTER_LOOPER called without request
[  922.803306] binder_alloc: 6403: binder_alloc_buf, no vma
[  922.803335] binder: 6426:6429 transaction failed 29189/-3, size 0-0 line 3136
[  922.803571] binder: undelivered TRANSACTION_ERROR: 29189
[  923.079361] binder: 6403:6407 ioctl c0306201 20007000 returned -22
[  923.095554] binder: undelivered TRANSACTION_ERROR: 29201
[  923.101569] binder: 6403 invalid dec weak, ref 412 desc 0 s 1 w 0
[  923.101579] binder: 6403:6414 got reply transaction with no transaction stack
[  923.101588] binder: 6403:6414 transaction failed 29201/-71, size 0-0 line 2921
[  923.158224] binder: undelivered TRANSACTION_ERROR: 29201
04:05:35 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x406, r2)
mkdirat$cgroup(r3, &(0x7f0000000000)='syz0\x00', 0x1ff)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

04:05:35 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)})

04:05:35 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000502000000fcff3f0000000000"], 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x400000000000117, 0x0)

04:05:35 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bc070")
getsockname(r0, &(0x7f00000002c0)=@alg, &(0x7f0000000340)=0x80)
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000380)='trusted.overlay.nlink\x00', &(0x7f00000003c0)={'L-', 0x6}, 0x28, 0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x800000000009031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f00006ac000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000285000/0x1000)=nil)
mremap(&(0x7f000011a000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f000074a000/0x4000)=nil)
r1 = syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0xfffffffffffffffd)
fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
getresgid(&(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0), &(0x7f0000000200))
write$FUSE_ATTR(r1, &(0x7f0000000240)={0x78, 0x0, 0x8, {0x100, 0x3f, 0x0, {0x5, 0x200, 0x20, 0x81, 0x4, 0x4, 0x9, 0x1f, 0x7, 0x3, 0x3, r2, r3, 0x2, 0x1}}}, 0x78)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x181000, 0xf)
setsockopt$packet_int(r4, 0x107, 0x1f, &(0x7f0000000080)=0x100, 0x4)

04:05:35 executing program 4:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x6)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x7709, &(0x7f0000000000)='/dev/ashmem\x00')

04:05:35 executing program 2:
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00')
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
ioctl$KDSKBLED(r1, 0x4b65, 0x4)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r4 = socket$inet6(0xa, 0x10000000000002, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0xe, &(0x7f00000000c0), &(0x7f0000000080)=0x1)
r5 = gettid()
ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000380)=r5)

04:05:35 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000502000000fcff3f0000000000"], 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x400000000000117, 0x0)

04:05:35 executing program 4:
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x40800, 0x0)
ioctl$BLKPG(r0, 0x1269, &(0x7f0000000140)={0x9a07, 0x2, 0xba, &(0x7f0000000080)="c7e8db32955b27cdd9c282e4c4032c25103b1742ca5abacb7210fe17038428d842f8c21cfc5a956d1f8b6679d665a92842e69fdc1ab915ada02489aba72ea1c5b62b799781febea96cecce9d3f805a033c692db59b0eccb5a2da167a588399968bfc67a409ca8b67e5ff6cfcdb76b03e46f5f5f39ec9ce1d58ff1c838da59a82c302f94f8a559a4fa4cfa658a94957319c2f0152d9bd71117258aca8d93fc89329cf058547c371b0a173ce02ea9e5359340eb7b3b8913eedcb53"})
openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
sendfile(r1, r2, 0x0, 0xe6)

04:05:35 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
io_setup(0x400, &(0x7f0000000040)=<r2=>0x0)
io_cancel(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x9, r0, &(0x7f0000000100)="98fc2073630d0165bf8e77d7d80d8592456de026105215ef03e3fdc245dc9d098a4d11764345e94241b4592e42", 0x2d, 0xfffffffffffffff7, 0x0, 0x3, 0xffffffffffffff9c}, &(0x7f0000000200))
write$cgroup_pid(r1, &(0x7f00000002c0), 0x12)

04:05:35 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000040)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]})
getsockopt$inet_int(r0, 0x0, 0x32, 0x0, &(0x7f00000000c0))

[  923.478002] binder: 6442:6452 ERROR: BC_REGISTER_LOOPER called without request
04:05:35 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000502000000fcff3f0000000000"], 0x10}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0)

[  923.537356] binder: release 6442:6461 transaction 415 out, still active
04:05:35 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)})

[  923.576018] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=6464 comm=syz-executor.4
[  923.588458] binder: undelivered TRANSACTION_COMPLETE
[  923.630844] binder: send failed reply for transaction 415, target dead
[  923.644047] binder: 6470:6472 ERROR: BC_REGISTER_LOOPER called without request
[  923.691138] binder: send failed reply for transaction 417 to 6470:6472
[  923.702963] binder: undelivered TRANSACTION_COMPLETE
[  923.708624] binder: undelivered TRANSACTION_ERROR: 29189
04:05:35 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
fcntl$dupfd(r0, 0x0, r0)
r1 = socket(0x6, 0x8080b, 0x0)
syz_open_procfs(0x0, &(0x7f00000005c0)='auxv\x00')
openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x100, 0x0)
r2 = dup(r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, 0x0, 0xffffffffffffff7d)
sendmsg$nl_netfilter(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x41000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xf4}, 0x1, 0x0, 0x0, 0x40000}, 0x4)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r3, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

04:05:35 executing program 2:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r0 = socket(0x20000000000000a, 0x2, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x14, &(0x7f0000e530e9)=""/16, &(0x7f0000000000)=0x10)
accept4$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14, 0x800)

04:05:35 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x2})
ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x2000000000c)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000100)={0x5, 0xbc60, 0x8000, 0x7, 0x1b, 0x9, 0xfff, 0x401, 0x8, 0x4, 0x1000})
read(r0, &(0x7f0000000080)=""/11, 0x392)
r1 = syz_open_pts(r0, 0x0)
fsetxattr$security_smack_transmute(r1, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000040)='TRUE', 0x4, 0x1)
write$P9_RSTAT(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="530000007d020000004c000400fe30ffff0001000000030000000000000000002000ff00000009000000ff070000000000000000000000001900706f7369785f61636c5f616363657373272873797374656d2b"], 0x53)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x2)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r2, &(0x7f00000001c0)="91d43058630301ce20ef5d9bb6e5cec17e9ba1de34704f199149b101d2ebcf8b98c2a44df084c487a47f16490b1d66f1853d502eac0ffb9457ff3d130eb66a3115732691cadc4c8688786ed99df103384a80fe2fd595283a44e140d9d1d8ada10b2ae2d9bbffb771bd88353dbdad82cc019da4bfa1cb1fad613ef71137556b49d5f8add986698707ca10b972dda9fdd552eb56bbccef599f5e03b8c3ac909248241ea3fb3547c88c35b6836fc7bf07f0cd85c10a34234c08def289", &(0x7f0000000340)=""/195}, 0x18)
ftruncate(r0, 0x8001)

04:05:35 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bc070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
signalfd4(r1, &(0x7f0000000040)={0x5}, 0x8, 0x800)
write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="7aa9460600000000000000"], 0x1)
close(r1)

04:05:35 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)})

04:05:35 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000502000000fcff3f0000000000"], 0x10}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0)

04:05:36 executing program 2:
mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000)
mlock2(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x0)

04:05:36 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000502000000fcff3f0000000000"], 0x10}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0)

04:05:36 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="2f064840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="85"})

[  924.092170] binder: 6482:6488 ERROR: BC_REGISTER_LOOPER called without request
[  924.118772] binder: release 6482:6488 transaction 419 out, still active
[  924.129783] binder: undelivered TRANSACTION_COMPLETE
04:05:36 executing program 4:
ppoll(&(0x7f0000000000), 0x3c0, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000180), 0x0)
r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff)
ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000040)={0x8, 0xf2, 0x1})
r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/member\x00', 0x2, 0x0)
ioctl$TIOCSCTTY(r0, 0x540e, 0x0)
read(r1, &(0x7f00000002c0)=""/196, 0x17)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000100)=0xe8)
quotactl(0x2, &(0x7f0000000080)='./file0\x00', r2, &(0x7f00000003c0)="03dcde3962f2d5148c82fa229ee9ef9841b755ce639c2432cec407cffff9c83e34ebc9af5dd609b19409057c4bdfe5969b1660e2a74fe9ea8f32a1bf1b67048f6ae78616025b454d160354f878c2ea54996e16")

04:05:36 executing program 2:
write$FUSE_WRITE(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
sendto$inet(r1, &(0x7f0000000000)="de58bb51b454b5b4a55d39099dcd7611e928b8abcbbe51dab6e141ca82164a921a4eee537646f69095fa8b04e26b95e9fe4f091e99814f", 0x37, 0x48881, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
r2 = openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000240)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
preadv(r2, &(0x7f00000009c0)=[{0x0}, {&(0x7f00000006c0)=""/194, 0xc2}, {&(0x7f00000007c0)=""/146, 0x92}, {&(0x7f0000000880)=""/144, 0x90}, {&(0x7f0000000480)=""/13, 0xd}], 0x5, 0x0)

04:05:36 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0)

[  924.190742] binder: send failed reply for transaction 419, target dead
[  924.200891] binder: 6498:6501 ERROR: BC_REGISTER_LOOPER called without request
[  924.201351] binder: 6498:6501 unknown command 1078461999
[  924.201360] binder: 6498:6501 ioctl c0306201 20007000 returned -22
04:05:36 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000100)={0x3a, @loopback, 0x4e20, 0x3, 'sh\x00', 0x1a, 0x81, 0x18}, 0x2c)
pipe2(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x800)
ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000140)=<r3=>0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6}, 0x0, @in6=@empty}}, &(0x7f0000000180)=0xe8)
r5 = getegid()
setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000300)={r3, r4, r5}, 0xc)
r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r6, 0x0, 0x4)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r7, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, &(0x7f0000000380))
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000003c0), &(0x7f0000000400)=0x4)
connect$inet(r7, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

04:05:36 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)

04:05:36 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f00000001c0)=0x7fff, 0x4)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1, 0x6, 0x40, 0x3, 0x6})
sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")

04:05:36 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0)

04:05:36 executing program 2:
r0 = socket$inet6(0x10, 0x0, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x4000000003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x1, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00'], 0x0, 0x0, 0x0})
sendmsg(r0, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xa}, 0x5}, 0x1c)
ioctl$int_out(0xffffffffffffffff, 0x0, 0x0)
syz_execute_func(&(0x7f0000000080)="cd8074fcb0b06969ef69dc00d9c4017d50ee8adcd0d01192000880410fd1b0b5d90000797c2a0f0fcdc4e3a95fd965eae23c3b4d4d408064797f41dfdf400f01efe5e59d7d2f2f1c0a1a63460fc4c161fccddfde9f")
dup(r1)

[  924.985481] binder: 6498:6501 ERROR: BC_REGISTER_LOOPER called without request
[  924.985486] binder: 6498:6522 unknown command 1078461999
[  924.985498] binder: 6498:6522 ioctl c0306201 20007000 returned -22
04:05:36 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x7c, 0x0, &(0x7f0000000140)=[@exit_looper, @decrefs={0x40046307, 0x1}, @enter_looper, @release={0x40046306, 0x2}, @reply_sg={0x40486312, {{0x4, 0x0, 0x1, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, &(0x7f00000000c0), &(0x7f0000000100)=[0x30, 0x78, 0x20]}, 0x7b}}, @acquire, @request_death], 0xea, 0x0, &(0x7f0000000280)="6a51a210d0c014db17182c59279a2dfb3264f9e1801c52d7ae9485513cea2ae2ffc55c6fca24f418a17ac22c1b3a4194573ac19ebaee4164fc8ef42f80374c75eedd3e89cdf5f081d09e48a7e839375c2609c049f916b908b0121852e9e30d33748998eeed15046c9e0ec53fdc907698f1c56da666d858f57d8943ef69fe23c9f0654f621bb6323289a4bbef34312daaf0fdf226f043668155a02be5fa7c3fdaf2caad42be4fb893b525432fbf7a7938130fff3665ff73fa152189ba35b50e7fcb4ba6ee947d183bd87efb48fb6b8f998695149dba38df531209378cbca255f1170f1a192c798eb8e8ce"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="85"})
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x80000)

[  925.059313] binder: 6524:6530 unknown command 0
04:05:36 executing program 5:
clone(0x13102001fef, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000240))
r2 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
tkill(r2, 0x25)
ptrace$cont(0x18, r2, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x100000000ffd, 0xffffffffffffffff, 0x135})
ptrace$setregs(0xf, r2, 0x3aa, &(0x7f0000000480)="1c8cbf49011668f7537ffd8f07531edf2ca9734a6ccb6daa4fdebea3c7edaad86528aca8e1c1df3da7bffe179bf25c517d81f6d0627a9ca4058940fb66b80200000000000000804d93b429698616d88769eccdc95b7e2e62d17b8942df7b4aa2df1a000028145bb3e47d7c31f8b66281074cf874aa83c8b4cd8e0dbc3f35f4759578c85ffdddc19ad0528c205cd840ecfc0a1bc40f46")
ptrace$cont(0x1f, r2, 0x0, 0x0)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x200400, 0x100)
ioctl$EVIOCGID(r3, 0x80084502, &(0x7f0000000140)=""/190)
setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f0000000300)={0x8, {{0x2, 0x4e1f, @rand_addr=0xfffffffffffffffa}}, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x108)
ioctl$TIOCSCTTY(r0, 0x540e, 0x0)
r4 = add_key(&(0x7f0000000440)='cifs.spnego\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)="281725d2a7a845210785207f04e205e966e551280be26c414c39aad8023438ec8447862fe3a7586a5591670a8a6cb846fc6d7dd8d88abb379653b478117a75950e1fae0ff2ea54bb04e172d3", 0x4c, 0xfffffffffffffffd)
sched_setattr(r2, &(0x7f00000007c0)={0x30, 0x6, 0x1, 0x401, 0x100, 0x3, 0x1, 0x6}, 0x0)
write$eventfd(r1, &(0x7f00000006c0)=0xfff, 0x8)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000780)=@keyring={'key_or_keyring:'})
renameat2(r3, &(0x7f0000000280)='./file0\x00', r1, &(0x7f00000002c0)='./file0\x00', 0x5)
lstat(&(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setgid(r5)
setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000040)={{0xc, @multicast2, 0x4e24, 0x1, 'sh\x00', 0x20, 0x0, 0x24}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x6, 0x1, 0x40, 0x3ba8, 0x8}}, 0x44)

04:05:36 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0)

[  925.081670] binder: 6524:6530 ioctl c0306201 20000300 returned -22
04:05:37 executing program 5:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000080)={0x3f, 0x9, 0x1000, 0x3ff})
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/if_inet6\x00')
preadv(r1, &(0x7f0000000700), 0x31f, 0x10400003)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='rose0\x00', 0x10)

04:05:37 executing program 3:
socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000502000000fcff3f0000000000"], 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0)

04:05:37 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
pipe2(&(0x7f00000000c0), 0x800)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="85"})

[  925.081735] binder: 6535:6539 DecRefs 0 refcount change on invalid ref 1 ret -22
[  925.081746] binder: 6535:6539 Release 1 refcount change on invalid ref 2 ret -22
04:05:37 executing program 3:
socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000502000000fcff3f0000000000"], 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0)

[  925.081755] binder: 6535:6539 got reply transaction with no transaction stack
[  925.081765] binder: 6535:6539 transaction failed 29201/-71, size 0-24 line 2921
[  925.083012] binder: 6535:6539 ERROR: BC_REGISTER_LOOPER called without request
[  925.092331] binder: release 6535:6539 transaction 423 out, still active
[  925.092335] binder: undelivered TRANSACTION_COMPLETE
[  925.146159] binder: BINDER_SET_CONTEXT_MGR already set
[  925.146171] binder: 6535:6548 ioctl 40046207 0 returned -16
[  925.149480] binder: release 6535:6539 transaction 423 in, still active
[  925.149960] binder: 6535:6539 DecRefs 0 refcount change on invalid ref 1 ret -22
[  925.149970] binder: 6535:6539 Release 1 refcount change on invalid ref 2 ret -22
[  925.149978] binder: 6535:6539 got reply transaction with no transaction stack
[  925.149986] binder: 6535:6539 transaction failed 29201/-71, size 0-24 line 2921
[  925.150501] binder: 6535:6548 ERROR: BC_REGISTER_LOOPER called without request
[  925.150636] binder: 6535:6539 transaction failed 29189/-22, size 0-0 line 3013
[  925.180919] binder: send failed reply for transaction 423, target dead
[  925.197177] binder: undelivered TRANSACTION_ERROR: 29189
[  925.269401] binder: 6558:6559 ERROR: BC_REGISTER_LOOPER called without request
[  925.269946] binder: release 6558:6559 transaction 427 out, still active
[  925.269950] binder: undelivered TRANSACTION_COMPLETE
[  925.282658] binder: BINDER_SET_CONTEXT_MGR already set
[  925.282671] binder: 6558:6560 ioctl 40046207 0 returned -16
[  925.283045] binder: release 6558:6559 transaction 427 in, still active
[  925.285125] binder: 6558:6560 ERROR: BC_REGISTER_LOOPER called without request
[  925.285211] binder: 6558:6559 transaction failed 29189/-22, size 0-0 line 3013
[  925.320644] binder: send failed reply for transaction 427, target dead
[  925.331090] binder: undelivered TRANSACTION_ERROR: 29189
04:05:37 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000100)="131772dc972863885e252a69c43709f05f48040cdaf34a301cb979f076588b466b42142f3f8ee2a59b9278ff102b4cfc9347b2e8c73c1a1ca8556f0be2ea5e970f6c8da3839108e96991863edf1d78b143091bdaf97693aee834f28ae51404c2aaf9a2e04e2b65a1792eeaec6792ff5199226adb59d75c15b23301e6f89cd360faf55b14982c6f2d0866a7a4a828b6855ac9a31e33b6d30dcf8789e2f70c0280d9e3147d447289d37ea2f3e39dcf29888c13ac1f2a33e161510d0f02")
connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

04:05:37 executing program 5:
r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x780, 0x0)
linkat(r0, 0x0, 0xffffffffffffffff, 0x0, 0x400)

04:05:37 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r2 = dup3(r0, r1, 0x80000)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, r3, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x84}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER={0x1c, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'dummy0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x8004)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r4 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="85"})

04:05:37 executing program 3:
socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000502000000fcff3f0000000000"], 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0)

04:05:37 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)
listen(r2, 0x0)
connect$unix(r1, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r3 = accept(r2, 0x0, 0x0)
sendto$inet6(r3, &(0x7f0000000180)="53ac8d073af9494ee40b8990d27df1e6a605df17f39cf9839337", 0x1a, 0x0, 0x0, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x2, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={r4, r5, 0xf, 0x2}, 0x10)
recvmsg(r1, &(0x7f0000000140)={&(0x7f00000000c0)=@xdp, 0x80, &(0x7f0000000000)=[{&(0x7f0000000340)=""/213, 0x7ffff000}, {&(0x7f0000000440)=""/216, 0xd8}], 0x2}, 0x0)

04:05:37 executing program 2:
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = pkey_alloc(0x0, 0x3)
pkey_mprotect(&(0x7f0000294000/0x2000)=nil, 0x2000, 0x1, r0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f00000000c0)=0x2)

04:05:37 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0bdc1f12ff03000000000000319bc0a21681c41f9268dde3f1ef00041205deb4d60908a2145c")
r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="0000000097000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0})
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400, 0x0)
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0)
fsetxattr$security_smack_entry(r2, &(0x7f0000000140)='security.SMACK64IPIN\x00', &(0x7f0000000180)='\x00', 0x1, 0x1)
linkat(r3, &(0x7f0000000040)='./file0\x00', r4, &(0x7f00000000c0)='./file0\x00', 0x1400)

04:05:37 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000200)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x3}, 0x4)
r2 = socket$packet(0x11, 0x100000000003, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4)
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x105)
sendmmsg(r3, &(0x7f00000092c0), 0x400000000000561, 0x0)

04:05:37 executing program 3:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000502000000fcff3f0000000000"], 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0)

04:05:37 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000000))
ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000001240))

[  926.111548] binder: BINDER_SET_CONTEXT_MGR already set
04:05:38 executing program 4:
setrlimit(0x7, &(0x7f0000000000)={0x203})
r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c)
getresuid(&(0x7f0000000080)=<r1=>0x0, &(0x7f00000006c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
getresgid(&(0x7f0000000140)=<r4=>0x0, &(0x7f0000000180)=<r5=>0x0, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000900)={0x101, 0x6, 0x10000, 0x10})
ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f00000005c0)=""/205)
r6 = gettid()
fcntl$setown(r0, 0x8, r6)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000700)='fuse\x00', 0x10, &(0x7f0000000740)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x7}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@uid_gt={'uid>', r1}}, {@subj_user={'subj_user', 0x3d, '-'}}, {@fsmagic={'fsmagic', 0x3d, 0x5}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@subj_user={'subj_user', 0x3d, '-#securityem1selinux[keyring+/systemvmnet1\\vmnet0\x00'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@subj_type={'subj_type', 0x3d, ')'}}, {@fsname={'fsname', 0x3d, './\x00'}}, {@fowner_eq={'fowner', 0x3d, r1}}, {@euid_lt={'euid<', r1}}]}})
execveat(r0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000340)=[&(0x7f0000000280)='\x00', &(0x7f00000002c0)='vboxnet1keyringposix_acl_access\x00', &(0x7f0000000300)='GPL\'\x00'], &(0x7f0000000580)=[&(0x7f0000000380)='./\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='\'+posix_acl_access@vboxnet1systemnodev-eth1\x00', &(0x7f0000000440)='cgroup&\\\x00', &(0x7f0000000480)='/trusted]lobdevnodev-{-^system,*&\'@\x00', &(0x7f00000004c0)=')posix_acl_access\x00', &(0x7f0000000500)='.}\x00', &(0x7f0000000540)='-#securityem1selinux[keyring+/systemvmnet1\\vmnet0\x00'], 0x1000)
fchownat(r0, &(0x7f0000000040)='./file0\x00', r3, r5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x200, 0x5, 0x0, 0x0}, 0x2c)

04:05:38 executing program 3:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000502000000fcff3f0000000000"], 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0)

[  926.118207] binder: 6573:6582 ERROR: BC_REGISTER_LOOPER called without request
[  926.178301] binder: 6587:6592 ioctl 40046207 0 returned -16
[  926.178339] binder: 6573:6582 got transaction to context manager from process owning it
[  926.178353] binder: 6573:6582 transaction failed 29201/-22, size 0-0 line 3004
[  926.179604] binder: BINDER_SET_CONTEXT_MGR already set
[  926.179616] binder: 6573:6590 ioctl 40046207 0 returned -16
[  926.193550] binder: 6587:6600 got transaction with invalid offset (0, min 0 max 24) or object.
[  926.193599] binder: 6587:6600 transaction failed 29201/-22, size 24-8 line 3199
[  926.224404] binder: 6573:6590 ERROR: BC_REGISTER_LOOPER called without request
[  926.224490] binder: 6573:6582 transaction failed 29189/-22, size 0-0 line 3013
[  926.261183] binder: undelivered TRANSACTION_ERROR: 29201
[  926.310674] binder: undelivered TRANSACTION_ERROR: 29189
[  926.438526] binder: undelivered TRANSACTION_ERROR: 29201
[  926.445108] binder: 6587:6600 got transaction with invalid offset (0, min 0 max 24) or object.
[  926.462416] binder: 6587:6600 transaction failed 29201/-22, size 24-8 line 3199
[  926.490355] binder: undelivered TRANSACTION_ERROR: 29201
04:05:38 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup3(r0, r0, 0x80000)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@mcast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000000)=0xe8)
ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)=r2)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, 0x0, 0x4000)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r3, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

04:05:38 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffffffffffe0})
ioctl$TIOCGPTPEER(r0, 0x5441, 0x1000)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x100000000008)
read(r0, &(0x7f00000000c0)=""/11, 0xc4)
r2 = syz_open_pts(r0, 0x0)
r3 = dup3(r2, r0, 0x0)
ioctl$TCSETA(r3, 0x541a, &(0x7f0000000140))

04:05:38 executing program 4:
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_misc(r0, &(0x7f0000000040)={'syz1', "0dddd7ef82fe24cdd47a46656b8303495ed5bbe638539b7b5760dc4aae3114e9c2063e19d47eacc56b07e74207e1964677f82b3ad61dd8d7b64b64939152e6ca3b83ec68bb87674f8ebebf569b0a0647bc8958dece119acc24f50ab3bb4624c552db90d92e1c419a663b96a7272f5053f3b1f00ae3f895c213b7f19621c0f190c3ce7595603a5cbe8f0f2e69190763feaf8c0f881c2efa8dba50f0d66a03dc3aff725a7456bf1499d5a335aad1686bf0833a52880563a19f156bbdf4907be913dcfce5a762ab0b4292d27803d938633785b38fc2f2de39f7bdc5ad2ffd70cb02e7c2640658208aa02d52be"}, 0xef)

04:05:38 executing program 3:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000502000000fcff3f0000000000"], 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0)

04:05:38 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=ANY=[@ANYBLOB="651a1b1a"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'veth1_to_hsr\x00', 0x7002})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="85"})

04:05:38 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000ecaffa))
r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ioctl$TIOCEXCL(r0, 0x540c)
syz_extract_tcp_res(&(0x7f0000000040), 0x8, 0x2)

04:05:38 executing program 4:

04:05:38 executing program 2:

04:05:38 executing program 3:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000502000000fcff3f0000000000"], 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0)

04:05:38 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bc070")
r1 = socket(0x2, 0x2, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x30000010})
shutdown(r1, 0x0)

[  926.998813] binder: 6619:6624 unknown command 437983845
04:05:38 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
write$apparmor_current(r0, &(0x7f00000001c0)=@hat={'permhat '}, 0x1b)
getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0)

04:05:38 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bc070")
r1 = socket(0x2, 0x2, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x30000010})

[  927.068497] binder: 6619:6624 ioctl c0306201 204edfd0 returned -22
[  927.107643] binder: release 6619:6634 transaction 436 out, still active
[  927.129259] binder: undelivered TRANSACTION_COMPLETE
[  927.144248] binder: 6619:6634 unknown command 437983845
[  927.144259] binder: 6619:6634 ioctl c0306201 204edfd0 returned -22
[  927.250672] binder: send failed reply for transaction 436, target dead
[  927.257399] binder: send failed reply for transaction 437 to 6619:6643
[  927.330657] binder: undelivered TRANSACTION_COMPLETE
[  927.335822] binder: undelivered TRANSACTION_ERROR: 29189
04:05:39 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x200, 0x0)
mkdirat$cgroup(r1, &(0x7f0000000140)='syz0\x00', 0x1ff)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
accept(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000080)=0x80)
getsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r3, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

04:05:39 executing program 3:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000502000000fcff3f0000000000"], 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0)

04:05:39 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600))
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCGPTPEER(r1, 0x5441, 0x0)

04:05:39 executing program 5:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket$inet6(0xa, 0x802, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x3, 0x0, @mcast2}, 0x1c)
sendto$inet6(r0, &(0x7f0000000600)="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", 0x5ac, 0x4008000, 0x0, 0x0)
write(r0, &(0x7f00000003c0)='g', 0x1)

04:05:39 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00')
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, <r1=>0x0}, &(0x7f0000000100)=0xc)
fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f00000001c0)={{}, {0x1, 0x4}, [{0x2, 0x2, r1}], {0x4, 0x2}, [{0x8, 0x4, r2}, {0x8, 0x6, r3}]}, 0x3c, 0x2)
prctl$PR_SET_THP_DISABLE(0xe, 0x0)
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
splice(r0, 0x0, r4, 0x0, 0x7ff, 0x0)

04:05:39 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=ANY=[@ANYBLOB='\vg\x00\x00'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="85"})

04:05:39 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000900)=@getstats={0x1c, 0x5e, 0x711}, 0x1c}}, 0x0)
clock_gettime(0x0, &(0x7f0000006200)={0x0, <r1=>0x0})
r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
write$FUSE_GETXATTR(r2, &(0x7f0000000040)={0x18, 0x0, 0x1, {0x100000001}}, 0x18)
recvmmsg(r0, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000004a80), 0x0, &(0x7f0000004ac0)=""/4096, 0xffffffffffffffe7}}, {{&(0x7f0000005ac0)=@rc, 0x80, &(0x7f0000000000), 0xf1, &(0x7f0000006040)=""/193, 0xc1}}], 0x2, 0x0, &(0x7f0000006240)={0x0, r1+10000000})

04:05:39 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600))
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCGPTPEER(r1, 0x5441, 0x0)

[  927.525984] binder: 6656:6659 unknown command 26379
04:05:39 executing program 3:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000502000000fcff3f0000000000"], 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0)

04:05:39 executing program 5:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000502000000fcff3f0000000000"], 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0)

04:05:39 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x40, 0x0)
openat(r1, &(0x7f0000000100)='./file0\x00', 0x141, 0x40)
getsockopt$sock_int(r0, 0x1, 0x6, 0x0, &(0x7f0000000080))
fadvise64(r1, 0x0, 0x10001, 0x6)
syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x200)

[  927.575030] binder: 6656:6659 ioctl c0306201 204edfd0 returned -22
04:05:39 executing program 4:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000340), 0x24, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=@known='system.posix_acl_access\x00', 0x0, 0xffffffffffffff3d)

[  927.632567] binder: release 6656:6669 transaction 439 out, still active
[  927.649907] binder: 6656:6669 unknown command 26379
[  927.667838] binder: undelivered TRANSACTION_COMPLETE
[  927.667873] binder: release 6656:6678 transaction 440 out, still active
[  927.667876] binder: undelivered TRANSACTION_COMPLETE
[  927.753345] binder: 6656:6669 ioctl c0306201 204edfd0 returned -22
[  927.840729] binder: send failed reply for transaction 439, target dead
[  927.847472] binder: send failed reply for transaction 440, target dead
04:05:40 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=<r2=>0x0)
getpgid(r2)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

04:05:40 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f00000001c0)="0adc1f123c123f319bc070")
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000502000000fcff3f0000000000"], 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0)

04:05:40 executing program 5:
futex(0x0, 0x8c, 0x0, 0x0, &(0x7f0000000200), 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
write$binfmt_misc(r0, &(0x7f0000000040)={'syz0', "c24e050d5b4f8cae7d044d779ecb0ee8822914cfb608034eee9e53789d4dc59d7249d0ebf5c848aaeab9c79ba6fefa5eea7340cb53b369"}, 0x3b)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
signalfd(r1, &(0x7f0000000000)={0x9334}, 0x8)

04:05:40 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bc070")
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r2, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x1ff, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x1, 0x6}, 0x0, 0x0, &(0x7f0000000300)={0x7ff, 0x1, 0x1, 0x7}, &(0x7f0000000340)=0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0xffffffff00000000}}, 0x10)
ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000180))
r3 = socket(0xa, 0x1, 0x0)
connect$inet(r2, &(0x7f00000004c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000100)=0x3, 0x4)

04:05:40 executing program 4:
r0 = memfd_create(&(0x7f0000000180)='vboxnet0ppp0\x00+<\x8a/\xc1\xdb=`g\xbe\x1bT\xc2 \xbb\x0e\xe4\xe1\xf4X\x9b\'\xa3(\xa6\x86#E=\xf9\xccv\xca\n\x90\x9d\xf7\x97\xcc\x82\xb1\x8e\xaa\xe0\x04\xfe\xcbb:\x92\xea{&\x0ei\"\xf1n\xa4%\xd7\xf6\xbc\x18-\xce\xf4\x02\xa1\x0e\xb3\n\x01\x94l\\\x81*\x96?\x1d\x98\t\xce\x93\x9f\x9f\xa9w<U\x90\xaa>z\xef\xf3\xa6\ac\x9f\tL\x1c\xaf\x8b\xb7\xd9\x16\rm\x9b\xf5\xe5\xd2\x91\xfef?z\x8a\xf0I\xbe\xbcdZ\xcd\xee\xf2\x16\xdaL\xe6\xec\xc1\xba\x8cT\x13Jlk\xf6-B\xe1\xa8\x1b?X\x9bjCg\xb0[\x1c\xce\xb9Y\x9e:\n\x9a]\xdc\xfc\xa9#\xb3\xc6\xeb\xee\xccw:\x84\xb9\xe3\xf3\x98\x80\xd6\xe6y\v\xfbL\x80\xa4\xee\xc8\xf45\x9f\x88\x1f(\xfdH!\x90\xdc$\x8a\xc1\x9f\xd0R\x9e\x9b\x1b\xd9K\x15\x96D\xc1\x80X\x8f\x12\xc3c\xb1\xb0q\x88\xd7M\a3\xfe\xba\xd7D\x811', 0x0)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="4f79000000000000df00000000000000000000000000010000000000ca7bf4c30a540b37caec9ad3e72d5446098ed3233da273eb7c8c017d0b2ddc125119037e8d05d1930a2a3315dcb0ce3f350d3210d3"], 0x1d)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4)
timer_create(0x6, &(0x7f0000000080)={0x0, 0x1f, 0x2, @thr={&(0x7f0000000280)="f04865638f7612e71c0ea643a8853af9ba77fe3ef113610a841962152df009a24ebd059b0be8b571948bd5eb6fece3e1863b60de2980bdabf977f16416a84e08b3d95191bd86bdd1d50bd4a7a9ba9a8479f1c95ba52348037849b7705bf1587ec11def2d1b2c985d2e3cc3cd65e2c33334ee700bc1e9673b06980bf2ca9d4843333f23b3e8f9024a956286066bb87a90f9580705c2d2f0aa7d623c3e9e8c0319e9ef11070a98", &(0x7f0000000040)="0ba9"}}, &(0x7f0000000140)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000340)={{0x77359400}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}}, 0x0)

04:05:40 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.current\x00', 0x0, 0x0)
ioctl$KDENABIO(r3, 0x4b36)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="85"})

04:05:40 executing program 4:
clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(r0, &(0x7f0000000680)='comm\x00')
r2 = geteuid()
getresgid(&(0x7f0000000700), &(0x7f0000000740)=<r3=>0x0, &(0x7f0000000780))
fchownat(r1, &(0x7f00000006c0)='./file0\x00', r2, r3, 0x1000)
r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0)
r5 = accept4$inet6(r4, 0x0, &(0x7f0000000040), 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
ptrace$setsig(0x4203, r0, 0x100, &(0x7f0000000080)={0x3e, 0x2cd})
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xb3}, 0x0, 0x0, &(0x7f0000000240), 0x0)
tkill(r0, 0x3f)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0))
clock_gettime(0x0, &(0x7f0000000840)={<r6=>0x0, <r7=>0x0})
futex(&(0x7f0000000800)=0x2, 0x8b, 0x1, &(0x7f0000000880)={r6, r7+10000000}, &(0x7f00000008c0), 0x1)
ptrace$cont(0x7, r0, 0x0, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, <r8=>0x0}, &(0x7f00000001c0)=0xc)
ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f00000007c0))
utime(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x4})
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, <r9=>0x0}, &(0x7f0000000280)=0xfffffffffffffde0)
stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0})
memfd_create(&(0x7f0000000500)='/selinux/checkreqprot\x00', 0x4)
getgroups(0x9, &(0x7f0000000380)=[0x0, 0x0, 0xee00, <r11=>0xee01, 0xee00, 0x0, 0xee00, 0x0, 0xee01])
setxattr$trusted_overlay_opaque(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='trusted.overlay.opaque\x00', &(0x7f0000000640)='y\x00', 0x2, 0x3)
stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0})
getgroups(0x5, &(0x7f0000000480)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, <r13=>0xee00, 0x0])
r14 = getgid()
getgroups(0x7, &(0x7f00000004c0)=[r8, r9, r10, r11, r12, r13, r14])

04:05:40 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f00000001c0)="0adc1f123c123f319bc070")
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000502000000fcff3f0000000000"], 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0)

[  928.178167] binder: 6696:6701 ERROR: BC_REGISTER_LOOPER called without request
04:05:40 executing program 5:
r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x10)
r1 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x800)
fcntl$dupfd(r0, 0x0, r1)
r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x1, 0x400000)
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000380)=""/76)
ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000000)=[0x1, 0x5])

04:05:40 executing program 2:
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000002000)}, 0x0)
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x505600, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x200)
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0)
fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000000)=0x2)
readv(r2, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x30e)

04:05:40 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff)
write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3)
writev(r0, 0x0, 0xb6ba1ec505b84d68)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, 0x0)
write$P9_RLOPEN(0xffffffffffffffff, 0x0, 0x0)
ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
fstat(0xffffffffffffffff, 0x0)
fstat(0xffffffffffffffff, 0x0)
chown(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000003c0))
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000016c0))
fcntl$getownex(r0, 0x10, &(0x7f0000001b00))
getpgid(0x0)
getpgid(0xffffffffffffffff)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001bc0))
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x1)
ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000040))
syz_open_procfs(0x0, &(0x7f0000004480)='status\x00')
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004540), 0x0, 0x0)
clone(0x8004000, 0x0, &(0x7f0000000280), 0x0, &(0x7f00000001c0)="ecdb85d97b24f7414a0b4f5f44e7ea33004dc2aff26174d4d9843660c96fed25d40a4bcb75d8490adfa0ab55d15a66874ad1f74974a19da83b85f79e1e06f4ffffffff3ec2c335f3f4c8c0dcbcb126f5a0a3866e816ed252b076a64164687e74b4570a7888a3b4c698cad940766deb9b45eb2d1e2811608fce9d18bfedde1ade94852b458a2beb0f14201df5")
rt_sigsuspend(&(0x7f0000000080), 0x8)
r2 = socket$inet6(0xa, 0x100800000000002, 0x0)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ipv6_route\x00')
sendfile(r2, r3, 0x0, 0xcb49)
ioctl$int_out(0xffffffffffffffff, 0x0, 0x0)

[  928.218965] binder: release 6696:6701 transaction 442 out, still active
[  928.255882] binder: undelivered TRANSACTION_COMPLETE
04:05:40 executing program 5:
r0 = socket$inet(0x10, 0x400000000002, 0x6)
sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="4c0000001200ff09fffefd856fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0)
pipe2(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00')
socket$inet(0x2, 0x0, 0xffffffffffffffff)
sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680409ca0e9db1039558f5d069890000", @ANYRES16=r2, @ANYBLOB="200025bd7000fddbdf250300000014000100fe880000000000000000000000000101080003005f6c0000080005000000000014000100ff010000000000000000000000000001080005000400000014000100fe880000000000000000000000000101"], 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x8010)

[  928.262082] binder: BINDER_SET_CONTEXT_MGR already set
[  928.262095] binder: 6696:6713 ioctl 40046207 0 returned -16
[  928.272985] binder: 6696:6701 ERROR: BC_REGISTER_LOOPER called without request
[  928.273051] binder_alloc: 6696: binder_alloc_buf, no vma
[  928.273074] binder: 6696:6713 transaction failed 29189/-3, size 0-0 line 3136
[  928.356465] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'.
[  928.490677] binder: undelivered TRANSACTION_ERROR: 29189
[  928.496215] binder: release 6696:6701 transaction 442 in, still active
[  928.550629] binder: send failed reply for transaction 442, target dead
04:05:40 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

04:05:40 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000000c0)={<r1=>0xffffffffffffffff})
mkdirat(r1, &(0x7f0000000100)='./file0\x00', 0x122)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r2, 0x0)
r3 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="85"})

04:05:40 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f00000001c0)="0adc1f123c123f319bc070")
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000502000000fcff3f0000000000"], 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0)

04:05:40 executing program 2:
prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffd000/0x1000)=nil)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40101, 0x0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x210040}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x202, 0x70bd2c, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x1)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180))
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685)
ioctl$FIBMAP(r0, 0x1, &(0x7f00000001c0)=0x1)
chroot(&(0x7f0000000200)='./file0\x00')
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000240))
recvmmsg(r0, &(0x7f0000006400)=[{{&(0x7f0000000280)=@ll={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000300)=""/222, 0xde}, {&(0x7f0000000400)=""/237, 0xed}, {&(0x7f0000000500)=""/253, 0xfd}, {&(0x7f0000000600)=""/219, 0xdb}], 0x4, &(0x7f0000000740)=""/101, 0x65}, 0x96}, {{&(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000840)=""/167, 0xa7}, {&(0x7f0000000900)=""/164, 0xa4}, {&(0x7f00000009c0)=""/62, 0x3e}, {&(0x7f0000000a00)=""/184, 0xb8}, {&(0x7f0000000ac0)=""/99, 0x63}, {&(0x7f0000000b40)=""/13, 0xd}, {&(0x7f0000000b80)=""/50, 0x32}, {&(0x7f0000000bc0)=""/114, 0x72}], 0x8, &(0x7f0000000cc0)=""/153, 0x99}}, {{&(0x7f0000000d80)=@generic, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000e00)=""/4096, 0x1000}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/188, 0xbc}, {&(0x7f0000002ec0)=""/28, 0x1c}, {&(0x7f0000002f00)=""/118, 0x76}, {&(0x7f0000002f80)=""/159, 0x9f}, {&(0x7f0000003040)=""/13, 0xd}, {&(0x7f0000003080)=""/148, 0x94}, {&(0x7f0000003140)=""/95, 0x5f}], 0x9, &(0x7f0000003280)=""/37, 0x25}}, {{&(0x7f00000032c0)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000005740)=[{&(0x7f0000003340)=""/139, 0x8b}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/200, 0xc8}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/246, 0xf6}, {&(0x7f0000005600)=""/42, 0x2a}, {&(0x7f0000005640)=""/127, 0x7f}, {&(0x7f00000056c0)=""/76, 0x4c}], 0x8, &(0x7f00000057c0)=""/23, 0x17}, 0x35}, {{0x0, 0x0, &(0x7f0000005bc0)=[{&(0x7f0000005800)=""/14, 0xe}, {&(0x7f0000005840)=""/76, 0x4c}, {&(0x7f00000058c0)=""/241, 0xf1}, {&(0x7f00000059c0)=""/45, 0x2d}, {&(0x7f0000005a00)=""/9, 0x9}, {&(0x7f0000005a40)=""/188, 0xbc}, {&(0x7f0000005b00)=""/139, 0x8b}], 0x7, &(0x7f0000005c40)=""/113, 0x71}, 0x2000000000000000}, {{&(0x7f0000005cc0)=@in, 0x80, &(0x7f0000006140)=[{&(0x7f0000005d40)=""/144, 0x90}, {&(0x7f0000005e00)=""/212, 0xd4}, {&(0x7f0000005f00)=""/181, 0xb5}, {&(0x7f0000005fc0)=""/161, 0xa1}, {&(0x7f0000006080)=""/33, 0x21}, {&(0x7f00000060c0)=""/110, 0x6e}], 0x6, &(0x7f00000061c0)=""/175, 0xaf}, 0x3}, {{0x0, 0x0, &(0x7f0000006340)=[{&(0x7f0000006280)=""/33, 0x21}, {&(0x7f00000062c0)=""/117, 0x75}], 0x2, &(0x7f0000006380)=""/111, 0x6f}, 0x9}], 0x7, 0x40010142, 0x0)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000065c0)={r2, 0x1, 0x6, @remote}, 0x10)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000006600)='./file0\x00', 0x400, 0x40)
getsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000006640)=""/46, &(0x7f0000006680)=0x2e)
ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f00000066c0))
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000067c0)={&(0x7f0000006700)={0x10, 0x0, 0x0, 0x80008000}, 0xc, &(0x7f0000006780)={&(0x7f0000006740)={0x34, r1, 0x0, 0x70bd27, 0x25dfdbfe, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x4, 0xaf6c, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x10)
r5 = socket(0xb, 0x5, 0x5)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000006800)={0x5, 0x0, 0x2000}, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000006840)={0x8000, 0x5, 0x80000001, 0x100, 0x2}, 0x14)
r6 = add_key$keyring(&(0x7f0000006880)='keyring\x00', &(0x7f00000068c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$clear(0x7, r6)
fcntl$notify(r5, 0x402, 0x20)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000006900)={@multicast2, @remote, r2}, 0xc)
r7 = syz_genetlink_get_family_id$team(&(0x7f0000006980)='team\x00')
sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000006ec0)={&(0x7f0000006940)={0x10, 0x0, 0x0, 0x400400}, 0xc, &(0x7f0000006e80)={&(0x7f00000069c0)={0x484, r7, 0x721, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0xf8, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x8000}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r2}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x44, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r2}, {0x44, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r2}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0xf4, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x609}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r2}, {0x4}}, {{0x8, 0x1, r2}, {0x17c, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r2}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r2}, {0x44, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r2}}}]}}]}, 0x484}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f0000006f00))
setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000006f40)=@req3={0x20, 0x0, 0x33a1, 0xffffffff, 0x9, 0x1, 0xf15d}, 0x1c)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000006f80)={r6, 0x7, 0x7}, &(0x7f0000006fc0)={'enc=', 'pkcs1', ' hash=', {'sm3-ce\x00'}}, &(0x7f0000007040)="873d0a9de565f364e3957f7f6295fc095f9dc7b914e27c6315181c32bdcc123f9a2f72434a310768556ce28e50ee84590e049dc569057ff1af3d057fd1cacfb0ae9830637ea0f24b6f87de0ebf1ce007c46d62c8654f3c0c55207cdea11cf4f602a74ed6f0ac6eac5a9454bf63b1fd01ca74baa083d6d6c7334e08938c253a1c836e4dae465e313628702727cc40de0288adc742b3cfd80b865a2ca85c0f6d1c237a283510bda35be5568849336f16157d418193b820d025a567fd1e4167ad7e10607a9ca23f15cece22cd7ff819bd9e512530773e9567c61f809bf98c8a08491bcc2712e92492599ff220ea7cbab5d179b7c81ca37a990bc8b928f4feef0f6f263b56b66f516b98de9012b6db78f958615e307bc6cea343f6688b9eb8a28852ff6fe03c2a275378bfb8f470c2c618df4556ac60f5f37455fffa14bf6962c6e2ccf221d922c902a26954afadc5ed5f4ab61356f4c3fd12397d8446e1927ae419aa3d41b5aa191c743936a7301d18fba300c59e5a94ea16ed5982f362ccf504b5363a098e7d204994034ab02aaee76b36bf6115f738c6073aabfcfa68c71540923ed56c57ee06aa165fbbc3208a01804dc2b4d879e55f23efc40b36192e9a76a324ecc5bd67f2ba34a72c09b6e02c3fceab9ce313b3810c762abbceadea0261bf527deb89711a768825cb288d08d9fac5b68b46d1a0d72559dbb052d7b1f090bc2e19a15b7e7c218938518fc7a69bdc4d62c22a31b3fd16f75bb4edcceed45de27c28edd70d576f575eea27f0a70db567a2dcd0767630479bdaa3e317a62c531d894a5f559abf032ba02410a10f8727de7f21e31c3325cde5f8b5ec15908c37e788c1b03b59b661f6cffc03a8778f8343b672f65698267c318c566864fd2f5796d37209e88c9c536c593c104350514f13bad4007293fd11f9d109c982f57e9719cff0c493972b1277c2890bba85a81c05ffa09dd2a72a12ff36dc9a643d7ff883f4118bc926540b7e8418cb99cb2b9c4118de8d49943dbaee83afc095db1a48c33cf84b2a71e5b734e652e29bedc805ea6c19bf9e594a25fde25274849d75f61d3fdfc0578f44320baf63f98647c8060dfeafac5a7c4fa1c7f0366fd02e541aedaddc5fcc70c9cbe5192933e6e6ac72af08ac9f2b6d751e8ed8f9e4b37aaf57d033c9efb99a0889e78efa8d60d15bfdccd5526703d033cacce5c9180e901ff74e1ad6d7526d9ebdab750a6bc78e8ae49845b83c770afdfa585e5a9bbc4a00e183b397ae207deb9f3bea81c72b2b160f9cec80d3fedb01f252666dfb7aa517331b06dcad233c959f7b4e81b68f6f55c84e2d25e48791a9648ffc086b9e3569c1c742415648ebc39f4c35de0db77c3823f849926c1fb33c426501777a978fd0e1d37c216c0a69ddd2bd3833da6e7c4751082551f083f079206331e1bbaab02d5a43bfd871aea4036085b8a572ff851dc2b9d21858a6b6b334f617e57c2821bd6b2afac46c144d378449f3f9ec50fd6e22c68a91f0134e7d3ff6a0e7d61de9486bc42cf3361146e3fd435a0087ec8d74740e5c7a9b9090c0626497e1d23e5062182be677aee67ff1bc031e7491bfaa6d6c591045078b508395196062d75a9cec6d60c032904ace79555843864b42caff678360830d2451c48779dfce986d577e3499e74cd56dbedf2c9376770f0b01cdf6b33ce9f9e148097b97303a96471ba73c500fdd613e3ef39f348b00b0e22db9ad77393897ee6f68f52ca29e420be7d4cef76b537bf9bc07a89ba111bbcbe8dee39ba77c9400077bd7a4c702b5cfec146120f8eae587ae03f1e2ed3c9c4052cd335ae45daa18d9b6039762520ab07f7da1b7ca5de17efbc231b80ee27f4853bdfe8309870d0052072507f8b38fc86a46315fbfd5bb62f905b226498383c3e6ee32d8deec91905b6ce1df95cf8524628492b4ed1dd12bd4c3cc11c891671907567016db93d12b3521b8ad398e45bf14c45a1a36701178541c68af429348bd060f9b750d605efdbfed082d512739c6f222d09a4c4f3da72ddaac16746c2e69c8554b0aeb4f50a5a089ab125c8f869f2af81b1089133b668006b5f0a29c0224d1003f82094c556c3b384bfe8f26bcfbe20e3c600fe75914da0ea4e0ad6aca6e22f671bb773e5257faae590f099d8c60e21cfaea7755a0d096a7f625257d922524b5638e46dd7177311392edeb58dbd1a91494759b3aa596dc78023975700a86e8a376eb4a367d95bb3d27322f89790f1834917ba5759176de25c55e3bd3210c10bb4f57b1af59acdb1a68e307052e33f14131f2b14f9a3693bcf19a8508ce0a41253d64cc46c388de09b9e3f745b988d772816ada47a71e62b96aaca726de432e378ae4ab26835ff59312099719b1320572d3c7684371a4e1bc31622ed814c73a67302c15e8dfce688f3f43f746aa7fcce08032819a35cf975d8cca87ed4f300c96522c55909f8cea161f155379f79f113f6100b59a9624e591908e84da6987fa4a919ce31c0caad9618883ae46d721ed579059084dac10362741d08718a88e2ed8cf36d37136e9da113e2760bcc5aecc6105726ca81bb06ad1471eed9b3b088a568ccdae322914fed2a5a5d7b87cf15bb79ae23ec52f399c63d9c944eb5462edfcd039f7397698f1b5ca8c61f1a20e2071db4741963607afccfc5520a4458101249b154f5c6873ec975354ec8fb84d88e3dc07c2aec5bf4a0fc1c8c5778d0d46d6f68af1e748fa2688c1635f36ee488a5f9649ba67887d65a8b95c8d1add9820384ab2b3fad3cd10c39cc631b3fc764bcd1b1e49e713b49134a107d55e60b2d53cf75bc552c56af1500ac558ccad64f567b0889c6709f3a853c562a99c37fdaeacb46e6013985511edbee1b6bea05ba9cbe5deeb21c33a858678fcefdcb0a07639617ba858f34d99e2399e600db8d28649e9594a0fd7b7ef9001e1c363e197ae0ce30fbec11457e8b6cfd745aa961e16c6b79bb508470323a2b2530fa1269ee8cc731121901c2ae8f573e266d04b367fe8e7488e970a0c3fe8dbef0af316c7c383002224b30e681b42bae7aefb75ef95959a374ff4f245ecefd0c8c5f616a1f0ffce263e3f4480fc7242f1513e86a642d8519b00835e271febe6fc368142ff04d9b747f813136497ce8bc161bb4eced9512afb014d30678a025d22cf00be3e9b8831e8650d6ff1bd4b17984c8fe7372457a6d1a36d7127245bfcb1eb3610db9b7f4c5caf20c7ff87bb5d5c7b5bce3c7082731db2d2b779124250edbacb86dbc2daf8fac6cbef2bc9c4ca6f439a5b7c80f76be215dd288aaa25acc08caf3ec569d9753eeae99bc2cd0fa6555aba02f2d6100c98a955e6f9e8784554b1ae319168a8639bb7c2b22165ab256199e7c313f578257b5ecda153512ac6fafb0f5f790f4f1ebab9c581e51d7e0f3bacd0a2e328c9f66dca406378396261a783ea0300462263496a7909f0179295a78141e871588be10dec6e79e0e4d53b86dca5a174a3121149d4761c50dde97848edd88f6271e021f8de2f1bc3319424ab65a73c4ff375667a576ac11dfedd5649b2884e46217890f4972accb9017f13dc0fda9c2e0d1ae198b9ec6797afe5be5be8da7f9a3b31c906c3379e2da74017ea7758f3ee75ba34271785a0c83daf0982a0b641d1a8ddf941e1da7f81606bcb9fcea34c31b877523035da4719dab5eb058d3a13332c1a6212a6f3dd431693714ff191b8b09e8a7e6dac41abf7e7a65afc125209da5c4d874fbc7bfc37a7dda8153d4a873a4c57f3cdd4511b3a368ac92608b3e2e5c3f8a869c9917c70751f5fd39e8d6750ef0cd8b52ede974b2f0839a75119091ac7fdbd1951b17c2c93cae5a549a7dfd03ecb9c029e089861d657b8a25728dc205c8a5a9fe1de825b38b8d9823c049f52e6710246abec973605eb7bd3a7db97d1e48eacb66e49b0ad0dcfa61b40c9293e46f09fcf33dbaac82b4371641b9680de065fb6e11b1713878296e2f4dd2ad98374f279c21ad79c35fc320279a5c527cc3fa0b6367448ed2aca9ad2d9825ef4dd5adac65e4f51cb3dcc7704182eb5da70885f49f69ea6026c74d767d63b9e16afb3797711336ef364ff73f0edabbfce283212a7313f64bbbe3a389414c7982eccb555484e1aaca7c6fc714debaf99c60731b73909abfcdcc560e34b55d546784bbf3936925265534a801c74ba8ea0803d61fca4820a15d87fc3745deb5582ab71c32a9975db03d2e2d7b82b7f8c0dbad5486347fbd03f5ce98c9c52b3b1b6a2eb6f7a45136562c3a0da48f38553dee7c81bdddecc860e65d1996793ffbdaadbdef348d71630783ac83fa277275d293a82ca27fe8b3eadbc8e9e67ca4e0abc0a24f118a88a573768f170faded0cd6c8d4a6395ea58f2359acdc920de6821e1141b42a61a0ea03665ec0721e48461d0a51656ebce5d881b0acdbce05314f2cae4e88b6af702e2053db25133334fb1ba3951e07c803a49d19b9aa5175d67469eae44e36739bfb6e02cf96d43ba34ca096ad7a9ae962a28992e0731c8101b8efbca7f7f84e86ee4f316b67b4ce8d990e979a566214bdd862fa969def26c664c47511fc8e06a51c4b60cc0261d706f3e5f5d08bf4a7955f0d73b7ac07fcd69ca1347072c3c311b4ceb7a927455c35a66939c65e417e30fa5e1d339bf3a1c9213ba2fd7d4f4920dab1d5995d9d30ee419c7c5a2dcb16128c8ada4cd922547c0cf3df9794e662a9c94d60e92e656092276e7dd66ae4bb78969da93a0a9497d1ad46dbf74bc66db96448a6ba0b845f48543b8b3f9aaee5d895851e373bbae3d254d8b0feb07f5ba023833e436112d456faa73a9eb48424b131af68cc0493428107a8a3ead445a3e9a11e50797cda790022c6d6beee49a9dae07a40af7933f1d3c93bfe6c5b1700de57bf4d6fa7f35e03fd1696c53dec87a8715e75f8b8ee3222477a6982d1edd327f4b7993a8ddcedf17251a7084326f11a9b5807447f8ba3137086c2b135d08989302989d38eb0d6b7d03901b79bf6646dd1828b1db76c0aa99a0dfdf5c9e1baa3674f82c535534f4ab3294f790d379779c22839d1d0936bf6467c43988cc75263c2c9b8f7c86bea5d3ce8a1242dd9561fadcf0c09a2f3809bad919d34ce1f35f1dec2d7a6ee99dcfd0f9bb35db519a3361a4aa5b05074b44b2301e96a74181058d019219231532d69b4e880ed9130580f8aff4c2829ddb7c502cb4979a03f0cca34b82e7fdbb2804f57d07d5a2422fb231cfacb2d1b8ac0fb1e44189ad95fea83ee46c90111977c47e0c39d53db080cd950186c193dad349d20ab551f8bdd6cb5d8d5299b1bec132d3deb0f879a99e177b51e61438bf3a3625b5d45e54eb6c2ec88ae179e18bb2effc417343d5c1f432c12d309fcf00fc28f978cd0f9afda8d52ad02edf2c275e993a821a84457deaf831661e620a45c19a40f284b3bf703dca3c522f43c43a7aa6fdc4c5cdf8d346ca1714681550fc54286fe715913f7f0eb1aee5578334eff293704e767eb764c50204ffbf673aa8062fe38b28930ad0e3a8de7ffd3f35d816305e79f6c17258a3aacd3aa560ac495df3a5d848015c3f3da215cfbe87a8d9a7fef337091b45e6bb7a367edf2391473843d8633c7b91081dc5f7bb3b4c6b16ad315369973a339cf287008fc8df4cc0579c110a1c24dc326b8306c9e5bcd2c12042f445b3a0993a09e9e6531a12e2e5e7d1ac5e1d5e3cd4e8392961587ee2e0503c639321c242ee881a366c94d90c21a8ee82bb2838f545cfd9aeb5032a1f04e03cfa63e521ee63782fea", &(0x7f0000008040)="6d0f4a8211e11b47a322b06a43abfac63fd925d9c05b6308e62f81e77fbcc7773b7e6cb2af6af0d82a016cd9ccafb1a0015d67d12b00028f51a6c5ebc9d79633f9f59a8b334f2dd21dd30ffc77fd2b13bc6e9db1627782b866834780cb621c1a496c977a9822b27e8ee77edfd768ca21e76bef31c12feb8adef2a1377e058f59b7e1e362d70c0b56fd3945d86664f84d0d2f17093c949918cc2c3b7f69a2164154b75b5f6272003e7cb5a2808893a8ecf57f96f2ea9a18f538")
write$FUSE_NOTIFY_POLL(r0, &(0x7f0000008100)={0x18, 0x1, 0x0, {0x1ff}}, 0x18)
ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000008140)=<r8=>0x0)
ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000008180)=r8)

04:05:40 executing program 5:
r0 = epoll_create(0x2)
close(r0)
r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0)
ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f00000000c0)=0xfff)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685)
write(r1, &(0x7f0000000100)="5f186d812c5d33c29925ed7ee2550f68967aa320594acd32c9272d504b2bbe07aa353c167131e4cf286677155088f982ecc448a8f71f92e72f86e3b6c5b91469fe8d3ec310fc1346a0a1823e925d49e9f1f58d48e4d048cf6a7a1988f17be48f6db993ed88c2748ac05967558cf1d605f61ab8a2458ca0961b4baf49b1e334d5d9f720db17650efed4b877d2fa36de", 0x8f)
ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000340))
fsetxattr$security_capability(r1, &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000400)=@v2={0x2000000, [{0x4394b95a, 0x8d}, {0x1, 0x7}]}, 0x14, 0x1)
getdents(r1, &(0x7f0000000080)=""/32, 0xffffffffffffff96)
setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000380), 0x4)
fsetxattr$security_selinux(r0, &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:agp_device_t:s0\x00', 0x22, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$P9_RCLUNK(r0, 0x0, 0x0)
ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000240)={0x3, 0xd2, "4cb5f9e0867bbacfd28ef31c93d86047e4eec49d19786164f9cb3f02ba4d249aaf047e427e9e139cc2da3b0ce67d41d881fcfb185ed1db4b55a6a906bf4fdd0b0653f1ab098364b5c845d959164d2b6b397a279ba436ca2c50ad8106b8a232825fc11a1f265ec4d51a8e6bb90f1615482b42975c5a93cfd4a0bc7a6607ba30b7381dfa98e8d6234af310de414c7e40fdaa8311e4b1a510d402069df8b276910723377075178ca8aafe9e44e7076c129cda9d5ba0f6bb0ee43070c5c9fa0bfece0d77ea97088342a3da53470bb62d47a77f1b"})

04:05:40 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="a77bd925bf915a8f94450490d181c512f2bbc9b05e165dd46591422790b4db8e0e17d8cbfec7025f337ebc35e4dee1426246cfb685649e318bd0d649f9e4a2c4e0fcda75455ee6e0a90bcafb0ac57f9bd3483fba92eb265db0aae250ce1b31d3b097f62f352af2b573c35916ed3c0051973fdf69c6869c459a6550d8afd241ab9ece9f76fa2984e501d7a733b7d1a520f5092b679e61121ea8d77d53b98b0a9b44aea2b30a1db7c9d0456bdd2bd2cf62a63fd95d58d6d8ce212b875bdda51cc71ecbd5781d4a3c2f60f8311ead0c8817f336ac5ed53e08a46a3f99cc7d5630ca3b50dc1b30a8a854a0a1484dba0aba3432a5205decab3e63263e86", 0xfb, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x33d7, @loopback, 0x8000000000000}, 0x1c)
getsockopt$inet6_int(r0, 0x29, 0x41, 0x0, &(0x7f0000000080))
ioctl$sock_netdev_private(r0, 0x89ff, &(0x7f00000001c0)="7e1d402bb5803be4c38d4121b43c8ce35b93ed3ab909a2bd51ff6a3763e77100e36a06f43062ce97e135e660fa2d49724ab6625af7c112171c802d0c60f6f5c5465a79793c300e1c131e67806ec7f88eae7574498724de5eb912bfabfc0546cfd4a12af657c0ca4484c97e9ad7d367d7356de914ab")

04:05:40 executing program 0:
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r0, 0x0)
r1 = epoll_create1(0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000001400), &(0x7f0000001440)=0x14)
r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001)
write$evdev(r2, &(0x7f0000000080)=[{{0x77359400}}], 0xfecd)
ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000140)=0x1)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="85"})
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x80)
getsockname$netlink(r3, &(0x7f00000000c0), &(0x7f0000000100)=0xc)

04:05:40 executing program 5:
r0 = fcntl$dupfd(0xffffffffffffff9c, 0x5d759a02e360a6b3, 0xffffffffffffff9c)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x27)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x7fffffff, @mcast1, 0x9f39}, 0x1c)
r3 = socket$inet6(0xa, 0x100800000000002, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c)
r4 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00')
sendfile(r3, r4, 0x0, 0x4000088001)

04:05:40 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0xf)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6_vti0\x00'}]}, 0x34}}, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffff9c, 0x10, &(0x7f0000000000)={&(0x7f0000000080)=""/232, 0xe8, <r1=>0x0}}, 0x10)
r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x40000, 0x0)
getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000280)={'filter\x00'}, &(0x7f0000000300)=0x44)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=r1, 0x4)

04:05:40 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000502000000fcff3f0000000000"], 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0)

04:05:40 executing program 2:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
connect$unix(r0, &(0x7f000066fff4)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3, 0x6, 0x3f, 0x1}, {0x0, 0x8, 0x0, 0x3}]})

04:05:40 executing program 4:
unshare(0x600)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x2, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0xca, &(0x7f0000000340)}}, {{&(0x7f0000000240)=@rc, 0x80, &(0x7f0000000540), 0x265, &(0x7f0000000100)=""/206, 0xce}}], 0x2, 0x203f, 0x0)

04:05:41 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r2, &(0x7f0000000040)="4b2ca557a06c5270ee959086dd7ef09db7bef6d4093ee89a339a856b80cd183c32ed343e18887b45c6f18d46a7e84cfb4a74caaae602cdbc2335e5d7a84eba19fde9f9bcde3ce4515b9b6740be2864ea04a18104ddff503e7a5c6a79f51efbe31ff837"}, 0x10)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

04:05:41 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000502000000fcff3f0000000000"], 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0)

04:05:41 executing program 5:
r0 = gettid()
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bc070")
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000000)={0x77359400}, 0x10)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000100)={0x0, @aes128, 0x1, "1e68c7fd5d4f7358"})
listen(r2, 0x0)
io_setup(0xffffffffffaeca8e, &(0x7f0000000080)=<r3=>0x0)
io_destroy(r3)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
r4 = dup(r2)
accept4$inet(r4, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
tkill(r0, 0x1000000000014)

04:05:41 executing program 2:
r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e000039a594340400000000000000000000000000000000000000000000000005800001380083"], 0x39)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

04:05:41 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'nr0\x01\x01\x00', 0x2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x229, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff02c}, {0x16, 0x0, 0x0, 0x2}]})

04:05:41 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$int_in(r1, 0x5473, &(0x7f00000000c0))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x3, 0x401, 0x3f})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="85"})

04:05:41 executing program 5:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x80000, 0x0)
r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x1, 0x0)
ioctl$RTC_AIE_ON(r0, 0x7001)
add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
write$P9_RAUTH(r1, &(0x7f0000000080)={0x14, 0x67, 0x1, {0x80, 0x2, 0x5}}, 0x14)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x400, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x800)

04:05:41 executing program 2:
unshare(0x20020000)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000002c0)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000700)='./file0/../file0\x00', &(0x7f0000000480)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000026ff8)='./file1\x00', &(0x7f00000000c0)='ramfs\x00\xd9q\xab\xafP\xe5,h:\xc7\x926\'\xa5tL\xd7\xd1\xb9k\x8dF\x18\xe2N6\x04\x9bXD\xa7_\xe6\xf6\xd4 \v\x96\xb0t\x9f\xdd\x17\xfc\r\x8cQf?i\xb7\x89\x99\xdf\xf0\n\xd5\xd5\xf2\xa5\x94\x05y\xd3\x18\x9b\xfa\x01\xa1\xfe5|\xac\xc0Jw\xd5\xeb\xfe2\xe5\xb2uG\xa1\xe8\xd9\x06\x9fS\x81Ii\xfcE\x1b\x92#\xe7G\xc9\xd9r\xa8\xc2\xfb\x93\xbb#\xf6\xa8\xa42a\xfa3\xfc\xbf\xbePq\xcfH\x00+%\xfa\xbc\x80;\xd3\xe5,\xc1\n\x1b\xce\x00\xc7\xe3\xbfC\x0f\xb3B+\x8a2\x19\xed\xd9\x13\xfc\xe8\x9dV\xb7\xf1\xdf\'\xa4lc\xaa\xcdi\xc9\xa1\x18G1\xca\x15.R\x87\t\xdf\xe5\xf7\xcd\xd5\xf5\xa8xL\x82\x89l\xc9\xa0g\a4\x88\xf4\xfd\x1d>\xc0\xc3\xaf\xf2h_\xcf\xd3\xe2+\xd6#\x11\xfb\'yr{\xf1\x0f\xa2EU', 0x0, 0x0)
poll(0x0, 0x0, 0x400007f)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={<r0=>0x0}, &(0x7f0000000300)=0x1d6)
ptrace$peek(0x1, r0, &(0x7f0000000200))
rename(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='./file0\x00')
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file2\x00', 0x40100, 0x128)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x800000000000)

[  929.587043] binder: 6785:6788 ioctl 5473 200000c0 returned -22
[  929.612175] binder: 6785:6788 ERROR: BC_REGISTER_LOOPER called without request
04:05:41 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000502000000fcff3f0000000000"], 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0)

[  929.647201] binder: 6785:6788 ioctl 40305828 20000100 returned -22
[  929.667278] binder: release 6785:6788 transaction 445 out, still active
[  929.677693] binder: undelivered TRANSACTION_COMPLETE
04:05:41 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x1000)=nil, 0x1000, 0x0, 0x8c130, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="85"})

[  929.681519] binder: BINDER_SET_CONTEXT_MGR already set
04:05:41 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r1 = socket(0x20000000000000a, 0x2, 0x0)
r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
write$cgroup_int(r2, &(0x7f0000000080)=0x5, 0x12)
getsockopt$sock_buf(r1, 0x1, 0x3, &(0x7f0000e530e9)=""/16, &(0x7f0000000000)=0x10)

04:05:41 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xffdbc2ca)
fsetxattr$security_selinux(r1, &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:printer_device_t:s0\x00', 0x26, 0x1)
prctl$PR_CAPBSET_DROP(0x18, 0x13)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000100)={0x2, {{0x2, 0x4e21, @loopback}}}, 0x90)
creat(&(0x7f0000000000)='./file0\x00', 0x0)

[  929.681530] binder: 6785:6804 ioctl 40046207 0 returned -16
[  929.697932] binder: 6785:6788 ioctl 5473 200000c0 returned -22
[  929.698088] binder: 6785:6804 ERROR: BC_REGISTER_LOOPER called without request
[  929.698181] binder: 6785:6788 ioctl 40305828 20000100 returned -22
[  929.698231] binder_alloc: 6785: binder_alloc_buf, no vma
[  929.698248] binder: 6785:6804 transaction failed 29189/-3, size 0-0 line 3136
[  929.786687] binder: BINDER_SET_CONTEXT_MGR already set
[  929.786720] binder: 6811:6812 ioctl 40046207 0 returned -16
[  929.787858] binder: 6811:6812 ERROR: BC_REGISTER_LOOPER called without request
[  929.787971] binder_alloc: 6785: binder_alloc_buf, no vma
[  929.787992] binder: 6811:6812 transaction failed 29189/-3, size 0-0 line 3136
[  930.033193] binder: undelivered TRANSACTION_ERROR: 29189
[  930.038849] binder: release 6785:6788 transaction 445 in, still active
[  930.059978] audit: type=1400 audit(1555041941.927:171): avc:  denied  { relabelto } for  pid=6816 comm="syz-executor.5" name="file0" dev="tmpfs" ino=149823 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:printer_device_t:s0 tclass=file permissive=1
[  930.111144] binder: send failed reply for transaction 445, target dead
[  930.197923] audit: type=1400 audit(1555041942.067:172): avc:  denied  { dac_override } for  pid=6816 comm="syz-executor.5" capability=1  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[  930.242393] audit: type=1400 audit(1555041942.117:173): avc:  denied  { setpcap } for  pid=6816 comm="syz-executor.5" capability=8  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[  930.418581] audit: type=1400 audit(1555041942.287:174): avc:  denied  { sys_admin } for  pid=2116 comm="syz-executor.5" capability=21  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[  930.472608] audit: type=1400 audit(1555041942.347:175): avc:  denied  { sys_admin } for  pid=2116 comm="syz-executor.5" capability=21  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[  930.525051] audit: type=1400 audit(1555041942.397:176): avc:  denied  { sys_admin } for  pid=2116 comm="syz-executor.5" capability=21  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[  930.539305] binder: undelivered TRANSACTION_ERROR: 29189
[  930.569868] audit: type=1400 audit(1555041942.437:177): avc:  denied  { set_context_mgr } for  pid=6811 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1
[  930.571971] binder: 6811:6812 ERROR: BC_REGISTER_LOOPER called without request
[  930.573421] audit: type=1400 audit(1555041942.447:178): avc:  denied  { call } for  pid=6811 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1
[  930.573446] binder_alloc: 6811: binder_alloc_buf, no vma
[  930.573464] binder: 6811:6827 transaction failed 29189/-3, size 0-0 line 3136
[  930.579924] audit: type=1400 audit(1555041942.447:179): avc:  denied  { sys_admin } for  pid=2121 comm="syz-executor.0" capability=21  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[  930.581936] audit: type=1400 audit(1555041942.457:180): avc:  denied  { sys_admin } for  pid=2121 comm="syz-executor.0" capability=21  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[  931.872944] binder: undelivered TRANSACTION_ERROR: 29189
04:05:44 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fcntl$dupfd(r2, 0x0, r3)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

04:05:44 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0))
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000502000000fcff3f0000000000"], 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0)

04:05:44 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x9, 0x70, 0x6, 0x0, 0x0, 0x0, [], 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, 0x3c)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000080), 0x0}, 0x18)

04:05:44 executing program 4:
r0 = socket$key(0xf, 0x3, 0x2)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=<r1=>0x0)
pipe2(&(0x7f00000000c0), 0x4000)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000100)=r1)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aae702000000000000000000000105000600200000000a0000000000dfffff0400e50000070000001f000000000000250000000000000200010000000000000000020000627c05000500000000000a00"/128], 0x80}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0)

04:05:44 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@dev, 0x0, 0x0, 0x0, 0xee, 0x2, 0x0, 0x3}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x33}}}, 0xe8)
getsockname(r0, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f0000000080)=0x80)
r2 = dup2(r0, r0)
ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000400)=""/44)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00')
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x50000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x400, 0x70bd28, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0x6}, 0x1c)
sendmmsg(r0, &(0x7f0000000000)=[{{&(0x7f0000000580)=@in={0x2, 0x4e21, @multicast2}, 0x80, 0x0}}], 0x1, 0x0)

04:05:44 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3fe3cd2da10010e2614d509332030c8cd0965f42237011e726357fb7ce958d7ca931cf87ec50f02afd59594dd52fda4a2db29ae15b57270a83b74498a99b7e90bc67c2be87d44401cad1c40e3b7e088778affc375e96000533b8c4275fc4dfbc81bcb129545562842acbb3f3a7b05104ce409eeae6395354cbe6046baccf78c375185afb49ed579b4c286eaeb4a884ee8e091434ccf108181e5c9173e42b5587b6468a4db4b78821ed6958225f0d82c10e85aa99eaddfc3de102fdef7997e92669ee97d7dc9be2824425eb4e21567c", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="85"})

04:05:44 executing program 2:
r0 = inotify_init()
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x20000040)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x1, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r3, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r4, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000200))
r5 = socket(0x10, 0x3, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00')
sendfile(r5, r6, 0x0, 0x80000001)
fsetxattr$security_selinux(r3, &(0x7f0000000240)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x1)

04:05:44 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001200e7ef007b0000f4afd7030a7c", 0x12, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000080))
openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x40, 0x0)

[  932.915638] binder: 6839:6842 ERROR: BC_REGISTER_LOOPER called without request
[  932.957707] binder: 6839:6842 unknown command 768467775
[  932.967013] binder: 6839:6842 ioctl c0306201 20007000 returned -22
[  933.072003] binder: 6839:6846 ERROR: BC_REGISTER_LOOPER called without request
[  933.091285] binder: 6839:6847 unknown command 768467775
[  933.096713] binder: 6839:6847 ioctl c0306201 20007000 returned -22
04:05:45 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={<r2=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)={r2})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r3 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="85"})

04:05:45 executing program 2:
fchdir(0xffffffffffffffff)
mount(&(0x7f0000000040)=@filename='./bus\x00', &(0x7f0000000240)='./bus\x00', &(0x7f0000000280)='qnx4\x00', 0x800000, &(0x7f0000000300)='fuse\x00')

04:05:45 executing program 5:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}<B\xfc.\x9cia\x14\xa6\xf8\x88\xf0\xda\x85\'v\x83\xcf\xc1\xc4\xd2\xbfq\xc2U\xa3\x13Md\xcc?\xed\x8e\x97y\x8d\xeb\x861\xcb\xf7h,\x9f\xa2\xed\x03\x14e\xaa\x19\x1d\xf9\"\xf7d)|\xba\"\xa8I\x9d\x17\x7fI\xfb\xa9@\xf5[\xbc\x8br?\xd3t\xf1\xfe\xd7\x8c\x8a\xee\xc6\x81\x1d\x9bXyHs\x87\xd5e\x94\xa1L%\x88\'M\xe8O\xa2v\x100+?\xb5Ar\xa8\xc9\x10\xa0~|v\xeaFZ\xa6\x84\x02', 0x3, &(0x7f0000000080))
r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0/file0\x00', 0x40900, 0x100)
symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0\x00')

04:05:45 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x100)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00')
ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000100)=0x5)
ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000200))
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r3 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00@\x00\x00\x00'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x55, 0x0, &(0x7f00000002c0)="70623492a7a41e8f08b60e8bb89e3c3d2020641f934bef92fa5ed3c68d212e8c00691290973793d8ea763b008f18e5c57e973dbfc41197c9e8d8b508aa3f475b8fac284e14f5cb8f8dceccfbc9b54e8fca658df4b0"})
epoll_pwait(r3, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], 0x6, 0x6, &(0x7f00000001c0)={0x100000001}, 0x8)

[  934.268109] binder: BINDER_SET_CONTEXT_MGR already set
[  934.294950] binder: 6866:6867 ioctl 40046207 0 returned -16
[  934.359641] binder: 6866:6867 ERROR: BC_REGISTER_LOOPER called without request
[  934.391334] binder_alloc: 6839: binder_alloc_buf, no vma
[  934.431670] binder: 6866:6867 transaction failed 29189/-3, size 0-0 line 3136
[  934.487730] binder: 6866:6868 ERROR: BC_REGISTER_LOOPER called without request
[  934.516907] binder_alloc: 6839: binder_alloc_buf, no vma
[  934.542671] binder: 6866:6867 transaction failed 29189/-3, size 0-0 line 3136
[  935.330738] audit_printk_skb: 711 callbacks suppressed
[  935.330748] audit: type=1400 audit(1555041947.197:418): avc:  denied  { sys_admin } for  pid=2118 comm="syz-executor.3" capability=21  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[  935.334163] audit: type=1400 audit(1555041947.207:419): avc:  denied  { sys_admin } for  pid=2116 comm="syz-executor.5" capability=21  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[  935.336147] audit: type=1400 audit(1555041947.207:420): avc:  denied  { sys_admin } for  pid=2116 comm="syz-executor.5" capability=21  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[  935.338077] audit: type=1400 audit(1555041947.207:421): avc:  denied  { dac_override } for  pid=2116 comm="syz-executor.5" capability=1  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[  935.340142] audit: type=1400 audit(1555041947.207:422): avc:  denied  { sys_admin } for  pid=2116 comm="syz-executor.5" capability=21  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[  935.373522] audit: type=1400 audit(1555041947.247:423): avc:  denied  { sys_admin } for  pid=2120 comm="syz-executor.4" capability=21  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[  935.392744] audit: type=1400 audit(1555041947.267:424): avc:  denied  { sys_admin } for  pid=2116 comm="syz-executor.5" capability=21  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[  935.398672] audit: type=1400 audit(1555041947.267:425): avc:  denied  { sys_admin } for  pid=2116 comm="syz-executor.5" capability=21  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[  935.401504] audit: type=1400 audit(1555041947.277:426): avc:  denied  { dac_override } for  pid=2120 comm="syz-executor.4" capability=1  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[  935.403312] audit: type=1400 audit(1555041947.277:427): avc:  denied  { dac_override } for  pid=2120 comm="syz-executor.4" capability=1  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[  935.450712] binder: undelivered TRANSACTION_ERROR: 29189
[  935.520742] binder: undelivered TRANSACTION_ERROR: 29189
04:05:53 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x10000, 0x0)
r1 = geteuid()
ioctl$TUNSETOWNER(r0, 0x400454cc, r1)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_opts(r2, 0x0, 0x7, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r3, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
ftruncate(r4, 0x5)
connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10)

04:05:53 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r1 = gettid()
setpriority(0x2, r1, 0x0)

04:05:53 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x24}, {0x6}]}, 0x10)
r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001180)={r3, &(0x7f00000000c0)="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", &(0x7f00000010c0)=""/155}, 0x18)
sendmmsg(r1, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0)
open(&(0x7f00000011c0)='./file0\x00', 0x402, 0x40)

04:05:53 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
r3 = gettid()
timer_create(0x3, &(0x7f0000000180)={0x0, 0x8, 0x1, @tid=r3}, &(0x7f00000001c0)=<r4=>0x0)
timer_gettime(r4, &(0x7f0000000200))
r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0xa7516408a4a819d9, 0x0)
perf_event_open(&(0x7f00000000c0)={0x3, 0x70, 0x9, 0x8, 0x3, 0x447, 0x0, 0x7ff, 0x6600, 0x9, 0x0, 0x0, 0x1, 0x2, 0x7, 0x6b, 0x7, 0x6, 0x800, 0xd845, 0x5, 0x4, 0x4, 0x3, 0x6, 0x0, 0x0, 0x6, 0xfffffffeffffffff, 0x400, 0x7f, 0x100000000000000, 0xed, 0x98, 0x9, 0x19, 0x7, 0x3, 0x0, 0xd8, 0x4, @perf_config_ext={0x400, 0x1ff}, 0x30a00, 0x101, 0x3fe, 0xf, 0xffffffffffffffff, 0x0, 0x8}, r3, 0xc, r5, 0x9)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="85"})

04:05:53 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0))
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000502000000fcff3f0000000000"], 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0)

04:05:53 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0)
ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000180))
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000000c0)=0x7f6, 0x4)
sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e21}, 0x10)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000100)={'sit0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}})
bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc)
recvmmsg(r2, &(0x7f0000000080), 0x400000000000384, 0x12001, 0x0)
r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
write$P9_RMKNOD(r3, &(0x7f0000000040)={0x14, 0x13, 0x2, {0x4, 0x0, 0x7}}, 0x14)

[  941.950137] audit_printk_skb: 426 callbacks suppressed
[  941.950147] audit: type=1400 audit(1555041953.817:570): avc:  denied  { dac_override } for  pid=6880 comm="syz-executor.4" capability=1  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
04:05:53 executing program 5:

04:05:54 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
getegid()
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=ANY=[@ANYBLOB="48000006"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl(r2, 0x7, &(0x7f00000000c0)="ea2925362afcfd8e8a017ae5684eeca62557a8007d7a5d96b359c18d2bcaa17ea1b7cef3f60d5f7d2a03a0e947")
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="85"})

[  941.976763] audit: type=1400 audit(1555041953.847:571): avc:  denied  { dac_override } for  pid=6881 comm="syz-executor.3" capability=1  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[  941.988223] audit: type=1400 audit(1555041953.857:572): avc:  denied  { dac_override } for  pid=6881 comm="syz-executor.3" capability=1  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
04:05:54 executing program 5:

[  942.027235] audit: type=1400 audit(1555041953.897:573): avc:  denied  { dac_override } for  pid=6881 comm="syz-executor.3" capability=1  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[  942.095705] audit: type=1400 audit(1555041953.967:574): avc:  denied  { net_admin } for  pid=6881 comm="syz-executor.3" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[  942.104904] audit: type=1400 audit(1555041953.977:575): avc:  denied  { net_admin } for  pid=6883 comm="syz-executor.2" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
04:05:54 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
arch_prctl$ARCH_SET_CPUID(0x1012, 0xac33)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="85"})

04:05:54 executing program 5:

[  942.106800] audit: type=1400 audit(1555041953.977:576): avc:  denied  { sys_admin } for  pid=2116 comm="syz-executor.5" capability=21  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[  942.118219] audit: type=1400 audit(1555041953.987:577): avc:  denied  { sys_admin } for  pid=2116 comm="syz-executor.5" capability=21  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
04:05:55 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1800008912, &(0x7f00000001c0)="1098ce66000000007be070")
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x1000000031, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r1, 0x3a, 0x1, &(0x7f0000000080), 0x344)

[  942.137110] audit: type=1400 audit(1555041954.007:578): avc:  denied  { set_context_mgr } for  pid=6882 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1
[  942.144746] binder: 6882:6888 ERROR: BC_REGISTER_LOOPER called without request
[  942.152306] audit: type=1400 audit(1555041954.017:579): avc:  denied  { sys_admin } for  pid=2116 comm="syz-executor.5" capability=21  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[  942.908258] binder: 6893:6895 transaction failed 29189/-22, size 0-0 line 3013
[  942.979993] binder: 6893:6901 unknown command 100663368
[  942.980007] binder: 6893:6901 ioctl c0306201 204edfd0 returned -22
[  942.980178] binder: 6893:6895 transaction failed 29189/-22, size 0-0 line 3013
[  942.980221] binder: 6893:6897 ioctl 7 200000c0 returned -22
[  943.573926] binder: 6904:6905 ERROR: BC_REGISTER_LOOPER called without request
[  943.620232] binder: 6904:6906 ERROR: BC_REGISTER_LOOPER called without request
[  943.623346] binder_alloc: 6904: binder_alloc_buf, no vma
[  943.623368] binder: 6904:6905 transaction failed 29189/-3, size 0-0 line 3136
[  944.028393] binder: send failed reply for transaction 454 to 6882:6888
[  944.090810] binder: undelivered TRANSACTION_ERROR: 29189
[  944.096345] binder: release 6904:6905 transaction 458 in, still active
[  944.151434] binder: send failed reply for transaction 458 to 6904:6905
[  944.158311] binder: undelivered TRANSACTION_COMPLETE
[  944.179693] binder: undelivered TRANSACTION_ERROR: 29189
[  944.231971] binder: undelivered TRANSACTION_ERROR: 29189
[  944.252089] binder: undelivered TRANSACTION_ERROR: 29189
[  944.294154] binder: undelivered TRANSACTION_COMPLETE
[  944.330607] binder: undelivered TRANSACTION_ERROR: 29189
[  947.661449] audit_printk_skb: 999 callbacks suppressed
[  947.661459] audit: type=1400 audit(1555041958.687:913): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[  950.322908] audit: type=1400 audit(1555041962.197:914): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[  951.440695] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  953.530636] audit: type=1400 audit(1555041964.647:915): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[  956.332766] audit: type=1400 audit(1555041968.207:916): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[  958.622667] audit: type=1400 audit(1555041970.497:917): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[  961.302031] audit: type=1400 audit(1555041973.177:918): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[  963.512774] audit: type=1400 audit(1555041975.387:919): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[  966.472941] audit: type=1400 audit(1555041978.347:920): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[  969.232891] audit: type=1400 audit(1555041981.107:921): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[  972.072783] audit: type=1400 audit(1555041983.947:922): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[  974.422707] audit: type=1400 audit(1555041986.297:923): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[  977.062801] audit: type=1400 audit(1555041988.937:924): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[  979.672676] audit: type=1400 audit(1555041991.547:925): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
04:06:35 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14, 0x800)
sendmmsg(r0, &(0x7f0000000180)=[{{&(0x7f0000000100)=@xdp={0x2c, 0x6, r2, 0x1c}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000200)="28b9f7b7a59e6f6ce290dd6d343fd448cbd905e8797345cfad06d0d8cf29e9a955bb0174d470a3552f33a6d299f04a9cedd1cf25256b7f858fc335d4ce83697e29f473b0def4d9a639e61eb54f2381431780ef251cde737bafb40f58fe91e84d6aecb802400f6875adbfb4a8c0b5ba", 0x6f}], 0x1, &(0x7f0000000380)=[{0x90, 0x0, 0xa5c, "e668a7d4af0dae9578e812463b0cc7f87980ac8539dd1ff9d2d1274e5e9e4e2500e8fcf8e8c279fb903c437d6633cc776137b8568b759452aa6928d1ac898969f6008de2cfc50226cae6100d265ef0d16e673b8a308f4c41662b2c1e712abc6cc0859eec64105c94f8b2e5c6ad7a171867198349428ceb516ab17c02"}, {0x90, 0x109, 0x4, "9785e1193c235253888f998b7246957a37011c744da77293e1b0fc529b5df164f91f9eb17e3d24b3d7e19c331acf7432628af4f5c9e3d8f4dbeeee848345463a52a3d21d93f1a8855b0788e3689a00f5fedad53cf431964d7dd2b1f290ee80808df469dffbe0b4b09ffd3abe588149891e8e5912657daa7cc9f3a34b3fba4c6f"}, {0x1010, 0x107, 0x7414, "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"}, {0xc8, 0x0, 0x0, "bc48cdb2dadd64659a2c28b49a06d755d22e7f8df8b59fe5b6883b0d0cca5798de4b4e24adabbc72c24a6223f82335207ac608e76efb998544b064fbabb6876b6337fb2a05ce8f3d26050316566bd96647964c722e155e9f40e13ba44a570fa48aa7a40375eed43113406c23768b848ecdcafda0e4c37c3b9f1a40ab2605b92d44be64141861d7c430b5114200e1779a8572e6cf2a96842574859d2de19d91611c36fc3133ef56cb097e73da162eea6d7a836873"}, {0xb8, 0x29, 0x4, "29456ca0ebf4189acf4b5e565f9a1ce9faf45aa0c31c5a0cd21d8cafe540ac152201f4277df41430a0841bf2c69b163dd0f6f50c46a17eada16bfdae7202e6fef56e4e0f05bbbc9f2d6aa95ba3fe2ecb6baed6986480dd8ec347ba207a298f5f1f03ee834601cfd7e6e7235c2673cc397b299fdd186aca5d5ca017d11a59db9d6cb48d926cfc8a21715594076d8139c171b1f2d0ae1ed2beb79ce1cb281ed90eaaed7ff34f22b3f0"}, {0x58, 0x29, 0x400, "ae134b74f1ae6b8b99a27c278f01dbbad9d4d6eb15e82d905e3e8fddd810a98a5430c59008e00630756c050b218eb2d83a3aa66e9a2cf533a018677fc98c94fecf768c"}, {0xb8, 0x11d, 0x7, "0215bcf6167c725a05a9682bd993bb5bd2f69b5999abdca3ecf253617fa0ef95d3b45d87bca1a7b3089bf33853ea0a000cbd2f664180883b7b4a56908097ac613fde53d99e3d60b1df224689c524360dfbc429aa2576642eb9020c75389fa6481bc5185c4ed0818947ab27c0144105cc3297d23682438a8c8f1db6a1730b62103b4f4311375cb00cadafa873c2e36753e793b072ecea9bd998e600ffe5acd2f7266d3b9e61"}], 0x13c0}, 0x1b0}], 0x1, 0x80)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

04:06:35 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0))
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000502000000fcff3f0000000000"], 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0)

04:06:35 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020014, r1, 0x0)
ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000100)=0x40000)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8), 0x42, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="85"})

04:06:35 executing program 4:
r0 = socket(0x11, 0x800000003, 0x0)
setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x79)
sendmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001280)="db4ea94abe347ae1acaf", 0xa}], 0x1}}], 0x1, 0x0)

04:06:35 executing program 5:
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket(0x2, 0x2, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0))
epoll_wait(r2, &(0x7f000000affb)=[{}], 0x1, 0xfffffbfffffffffe)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100))
close(r2)
shutdown(r1, 0x2)

04:06:35 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0))
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000502000000fcff3f0000000000"], 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0)

[  983.862278] audit: type=1400 audit(1555041995.737:926): avc:  denied  { dac_override } for  pid=6926 comm="syz-executor.4" capability=1  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[  983.912309] audit: type=1400 audit(1555041995.787:927): avc:  denied  { dac_override } for  pid=6923 comm="syz-executor.3" capability=1  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[  983.914310] audit: type=1400 audit(1555041995.787:928): avc:  denied  { dac_override } for  pid=6923 comm="syz-executor.3" capability=1  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[  983.954480] audit: type=1400 audit(1555041995.817:929): avc:  denied  { dac_override } for  pid=6923 comm="syz-executor.3" capability=1  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[  983.958238] audit: type=1400 audit(1555041995.827:930): avc:  denied  { net_raw } for  pid=6925 comm="syz-executor.5" capability=13  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[  984.001143] audit: type=1400 audit(1555041995.867:931): avc:  denied  { net_admin } for  pid=6927 comm="syz-executor.2" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[  984.008980] audit: type=1400 audit(1555041995.867:932): avc:  denied  { set_context_mgr } for  pid=6924 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1
[  984.015780] binder: 6924:6929 ioctl 40044591 20000100 returned -22
[  984.035406] binder: 6924:6929 unknown command 0
[  984.035419] binder: 6924:6929 ioctl c0306201 204edfd0 returned -22
[  984.038159] audit: type=1400 audit(1555041995.907:933): avc:  denied  { net_admin } for  pid=6923 comm="syz-executor.3" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[  984.048887] audit: type=1400 audit(1555041995.917:934): avc:  denied  { call } for  pid=6924 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1
[  984.048922] binder_alloc: 6924: binder_alloc_buf, no vma
[  984.048944] binder: 6924:6929 transaction failed 29189/-3, size 0-0 line 3136
[  984.723365] audit_printk_skb: 3 callbacks suppressed
[  984.723376] audit: type=1400 audit(1555041996.587:936): avc:  denied  { dac_override } for  pid=6926 comm="syz-executor.4" capability=1  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
04:06:36 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
r3 = accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(r3, 0x11, 0x6f, &(0x7f00000000c0)=0x3, 0x4)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="85"})

[  984.728933] binder: undelivered TRANSACTION_ERROR: 29189
[  984.806762] audit: type=1400 audit(1555041996.677:937): avc:  denied  { set_context_mgr } for  pid=6924 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1
[  984.807677] binder: 6924:6933 ioctl 40044591 20000100 returned -22
[  984.809596] binder: 6924:6934 unknown command 0
[  984.809610] binder: 6924:6934 ioctl c0306201 204edfd0 returned -22
[  984.813442] audit: type=1400 audit(1555041996.687:938): avc:  denied  { call } for  pid=6924 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1
[  984.813468] binder_alloc: 6924: binder_alloc_buf, no vma
[  984.813488] binder: 6924:6929 transaction failed 29189/-3, size 0-0 line 3136
[  984.885230] audit: type=1400 audit(1555041996.767:939): avc:  denied  { sys_admin } for  pid=2121 comm="syz-executor.0" capability=21  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[  984.887329] audit: type=1400 audit(1555041996.767:940): avc:  denied  { sys_admin } for  pid=2121 comm="syz-executor.0" capability=21  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[  984.920906] audit: type=1400 audit(1555041996.797:941): avc:  denied  { sys_admin } for  pid=2121 comm="syz-executor.0" capability=21  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[  984.950444] audit: type=1400 audit(1555041996.817:942): avc:  denied  { sys_admin } for  pid=2121 comm="syz-executor.0" capability=21  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[  984.952615] audit: type=1400 audit(1555041996.827:943): avc:  denied  { sys_admin } for  pid=2117 comm="syz-executor.1" capability=21  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[  985.003897] audit: type=1400 audit(1555041996.877:944): avc:  denied  { net_admin } for  pid=2121 comm="syz-executor.0" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[  985.006076] audit: type=1400 audit(1555041996.877:945): avc:  denied  { net_admin } for  pid=2121 comm="syz-executor.0" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
04:06:38 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/create\x00', 0x2, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x80})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="85"})

[  985.371434] binder: BINDER_SET_CONTEXT_MGR already set
[  985.371445] binder: 6936:6937 ioctl 40046207 0 returned -16
[  985.376022] binder: 6936:6937 ERROR: BC_REGISTER_LOOPER called without request
[  985.379719] binder_alloc: 6924: binder_alloc_buf, no vma
[  985.379741] binder: 6936:6937 transaction failed 29189/-3, size 0-0 line 3136
[  986.130175] binder: 6936:6940 ERROR: BC_REGISTER_LOOPER called without request
[  986.143675] binder_alloc: 6924: binder_alloc_buf, no vma
[  986.143698] binder: 6936:6938 transaction failed 29189/-3, size 0-0 line 3136
04:06:38 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c12")
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000502000000fcff3f0000000000"], 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0)

[  986.622446] binder: BINDER_SET_CONTEXT_MGR already set
[  986.628140] binder: 6944:6945 ioctl 40046207 0 returned -16
[  986.674113] binder: 6944:6945 ERROR: BC_REGISTER_LOOPER called without request
[  986.696835] binder_alloc: 6924: binder_alloc_buf, no vma
[  986.727829] binder: 6944:6945 transaction failed 29189/-3, size 0-0 line 3136
04:06:38 executing program 2:
lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x3)
r0 = epoll_create1(0x0)
fcntl$lock(r0, 0x24, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffce4})
r1 = getuid()
quotactl(0x6, &(0x7f00000001c0)='./file1\x00', r1, &(0x7f0000000140)="764274d0cd2a6ae6adf5d138e0ebb57c9426817cffe658b86eb8f40c4cbf9564df7664db48b944f676506fb1610c2148")

[  986.815253] binder: undelivered TRANSACTION_ERROR: 29189
[  986.830138] binder_alloc: 6924: binder_alloc_buf, no vma
04:06:38 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB="77b0e7800000a9ec"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="85"})
ioctl$SNDRV_TIMER_IOCTL_STATUS(0xffffffffffffffff, 0x80605414, &(0x7f0000000100)=""/108)

[  986.881642] binder: 6944:6945 transaction failed 29189/-3, size 0-0 line 3136
04:06:39 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @local}, 0x27})
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000080)=0x7f)
r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
r2 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x101000, 0x0)
sync()
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000280))
llistxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0), 0x0)
keyctl$unlink(0x9, r1, r2)

[  987.456704] binder: BINDER_SET_CONTEXT_MGR already set
[  987.510589] binder: 6953:6956 ioctl 40046207 0 returned -16
[  987.547624] binder: 6953:6956 ERROR: BC_REGISTER_LOOPER called without request
[  987.593792] binder_alloc: 6924: binder_alloc_buf, no vma
[  987.599371] binder: 6953:6956 transaction failed 29189/-3, size 0-0 line 3136
[  987.713640] binder_alloc: 6924: binder_alloc_buf, no vma
[  987.719182] binder: 6953:6959 transaction failed 29189/-3, size 0-0 line 3136
[  988.030762] binder: undelivered TRANSACTION_ERROR: 29189
[  988.480809] binder: undelivered TRANSACTION_ERROR: 29189
[  988.540911] binder: undelivered TRANSACTION_ERROR: 29189
[  988.547276] binder: undelivered TRANSACTION_ERROR: 29189
[  989.371537] binder: undelivered TRANSACTION_ERROR: 29189
[  989.377187] binder: undelivered TRANSACTION_ERROR: 29189
[  990.191948] audit_printk_skb: 1122 callbacks suppressed
[  990.191957] audit: type=1400 audit(1555042002.067:1320): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[  993.091982] audit: type=1400 audit(1555042004.967:1321): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[  995.142697] audit: type=1400 audit(1555042007.017:1322): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[  997.272777] audit: type=1400 audit(1555042009.147:1323): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[  999.541994] audit: type=1400 audit(1555042011.417:1324): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1001.982836] audit: type=1400 audit(1555042013.857:1325): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1004.751932] audit: type=1400 audit(1555042016.627:1326): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1007.222882] audit: type=1400 audit(1555042019.097:1327): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1009.391945] audit: type=1400 audit(1555042021.267:1328): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1011.482146] audit: type=1400 audit(1555042023.357:1329): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1013.532784] audit: type=1400 audit(1555042025.407:1330): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1015.632006] audit: type=1400 audit(1555042027.507:1331): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1017.892891] audit: type=1400 audit(1555042029.767:1332): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1020.211939] audit: type=1400 audit(1555042032.087:1333): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1022.512762] audit: type=1400 audit(1555042034.387:1334): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1024.622806] audit: type=1400 audit(1555042036.497:1335): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1026.842723] audit: type=1400 audit(1555042038.717:1336): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1029.722758] audit: type=1400 audit(1555042041.597:1337): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
04:07:25 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
prctl$PR_GET_TSC(0x19, &(0x7f0000000000))
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

04:07:25 executing program 2:
r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0)
write$cgroup_int(r0, &(0x7f0000000080), 0xfffffefb)
fallocate(r0, 0x0, 0x0, 0x7ffc)
ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x9c)

04:07:25 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
lsetxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'U-', 0x1}, 0x28, 0x1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="85"})

04:07:25 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x101100, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000040)=0x9)
futex(&(0x7f000000cffc)=0x200000004, 0x80, 0x4, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x81, 0x0, 0x0, 0x0, 0x0)

04:07:25 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c12")
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000502000000fcff3f0000000000"], 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0)

04:07:25 executing program 4:
r0 = socket(0x11, 0x800000003, 0x0)
setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x79)
sendmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001280)="db4ea94abe347ae1acaf", 0xa}], 0x1}}], 0x1, 0x0)

[ 1034.088576] audit: type=1400 audit(1555042045.957:1338): avc:  denied  { dac_override } for  pid=6978 comm="syz-executor.3" capability=1  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1034.092101] audit: type=1400 audit(1555042045.967:1339): avc:  denied  { dac_override } for  pid=6977 comm="syz-executor.4" capability=1  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
04:07:26 executing program 0:
r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000180))
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
mmap(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x0, 0x2010, r2, 0x0)
r3 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='!cH@', @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0xffffffffffffff40, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="85"})

04:07:26 executing program 5:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0000001ac1414aa00000000020000007f00000100000048"], 0x1)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21}, 0x10)
syz_emit_ethernet(0x2b0, &(0x7f00003f3fd5)={@link_local, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0)

[ 1034.093953] audit: type=1400 audit(1555042045.967:1340): avc:  denied  { dac_override } for  pid=6977 comm="syz-executor.4" capability=1  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
04:07:26 executing program 2:
r0 = socket(0x40000000002, 0x3, 0x4c)
bind(r0, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80)

[ 1034.125564] audit: type=1400 audit(1555042045.997:1341): avc:  denied  { dac_override } for  pid=6977 comm="syz-executor.4" capability=1  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1034.181557] audit: type=1400 audit(1555042046.047:1342): avc:  denied  { net_raw } for  pid=6977 comm="syz-executor.4" capability=13  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
04:07:26 executing program 5:
sched_setaffinity(0x0, 0x8, &(0x7f0000000840)=0xd)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x10000261, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00')
preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000)

[ 1034.257391] binder: 6974:6979 ERROR: BC_REGISTER_LOOPER called without request
[ 1034.257451] binder: 6974:6981 transaction failed 29189/-22, size 0-0 line 3013
[ 1034.308400] audit: type=1400 audit(1555042046.177:1343): avc:  denied  { sys_admin } for  pid=2121 comm="syz-executor.0" capability=21  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1034.323943] audit: type=1400 audit(1555042046.197:1345): avc:  denied  { sys_admin } for  pid=2116 comm="syz-executor.5" capability=21  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
04:07:27 executing program 2:
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x805000000001, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockname(r0, 0x0, &(0x7f0000000140))

[ 1034.325912] audit: type=1400 audit(1555042046.197:1346): avc:  denied  { sys_admin } for  pid=2116 comm="syz-executor.5" capability=21  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1034.335502] audit: type=1400 audit(1555042046.197:1344): avc:  denied  { sys_admin } for  pid=2121 comm="syz-executor.0" capability=21  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1034.741829] audit_printk_skb: 138 callbacks suppressed
[ 1034.741849] audit: type=1400 audit(1555042046.617:1393): avc:  denied  { net_admin } for  pid=2121 comm="syz-executor.0" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
04:07:27 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
syslog(0x2, &(0x7f0000000280)=""/77, 0x4d)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")

[ 1034.764058] audit: type=1400 audit(1555042046.637:1394): avc:  denied  { sys_admin } for  pid=2119 comm="syz-executor.2" capability=21  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1034.770398] audit: type=1400 audit(1555042046.637:1395): avc:  denied  { sys_admin } for  pid=2119 comm="syz-executor.2" capability=21  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1034.867411] audit: type=1400 audit(1555042046.737:1396): avc:  denied  { sys_admin } for  pid=2116 comm="syz-executor.5" capability=21  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1034.892513] audit: type=1400 audit(1555042046.767:1397): avc:  denied  { sys_admin } for  pid=2116 comm="syz-executor.5" capability=21  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1034.900111] audit: type=1400 audit(1555042046.767:1398): avc:  denied  { dac_override } for  pid=6993 comm="syz-executor.0" capability=1  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1034.904614] audit: type=1400 audit(1555042046.777:1399): avc:  denied  { net_admin } for  pid=2119 comm="syz-executor.2" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1034.906572] audit: type=1400 audit(1555042046.777:1400): avc:  denied  { net_admin } for  pid=2119 comm="syz-executor.2" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1034.908756] audit: type=1400 audit(1555042046.777:1401): avc:  denied  { net_admin } for  pid=2119 comm="syz-executor.2" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1034.916858] audit: type=1400 audit(1555042046.787:1403): avc:  denied  { sys_admin } for  pid=2116 comm="syz-executor.5" capability=21  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1035.002450] binder: 6993:6996 ERROR: BC_REGISTER_LOOPER called without request
[ 1035.002645] binder: 6993:6996 unknown command 1078485793
[ 1035.002654] binder: 6993:6996 ioctl c0306201 20000100 returned -22
[ 1035.736760] binder: 6993:7005 unknown command 1078485793
[ 1035.736774] binder: 6993:7005 ioctl c0306201 20000100 returned -22
[ 1037.450864] binder: undelivered TRANSACTION_ERROR: 29189
[ 1040.092456] audit_printk_skb: 852 callbacks suppressed
[ 1040.092465] audit: type=1400 audit(1555042051.967:1687): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1042.872772] audit: type=1400 audit(1555042054.747:1688): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1046.912903] audit: type=1400 audit(1555042058.787:1689): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1050.091999] audit: type=1400 audit(1555042061.967:1690): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1052.203011] audit: type=1400 audit(1555042064.077:1691): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1054.341961] audit: type=1400 audit(1555042066.217:1692): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1056.412045] audit: type=1400 audit(1555042068.287:1693): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1058.482795] audit: type=1400 audit(1555042070.357:1694): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1061.271927] audit: type=1400 audit(1555042073.147:1695): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1064.052809] audit: type=1400 audit(1555042075.927:1696): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1066.752133] audit: type=1400 audit(1555042078.627:1697): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1069.051962] audit: type=1400 audit(1555042080.927:1698): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1071.142763] audit: type=1400 audit(1555042083.017:1699): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
04:08:07 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0xff, &(0x7f00000001c0)="0adc1f123c123f319bc070")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

04:08:07 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c12")
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000502000000fcff3f0000000000"], 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0)

04:08:07 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070")
r1 = socket(0x11, 0x803, 0x300)
r2 = socket$inet(0x2, 0x80003, 0x4)
sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10)
setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000240)=0x7, 0x4)
recvmmsg(r1, &(0x7f0000002e00), 0x386, 0x22, 0x0)

04:08:07 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=ANY=[@ANYBLOB='\vb\x00\x00'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x18, 0x0, &(0x7f00000000c0)=[@request_death={0x400c630e, 0x1, 0x2}, @acquire={0x40046305, 0x3}], 0xdd, 0x0, &(0x7f0000000100)="cf49456bc1190da4b24540b30945d0cfa56a7f25cae4c05e828617de25d7b3e6f41ee97eb98a8f84a0b69c08646788f8c8dec75e8cca5231ed06d4fb584267d7b4321d6c2a8ecc75d27d7d1e7fd3f40830aaf6719aef898f5002f270ea9eab781407e65049d2521559ad4afc96c82e55e500fd9f52c5cae930c6f3a2d44d46c7e5aeca80da42b50f62791cd14c0faec0fdb22c4b7c44fa49ff54db7bb0c0749224a85b93691c0296a6008cf8dc8efa62a4208685d1fa80ee433c44f70718085f9544b2706009e911474d6ba2eba6557e7baa69addf3740f48c321fe921"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="85"})

04:08:07 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\x88])+\x00', 0x0)
write(r1, &(0x7f0000000080)="a8", 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0)
sendfile(r1, r1, &(0x7f0000000040), 0xff8)
socketpair(0x5, 0x1, 0x7, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000240))
open(&(0x7f0000000200)='./file0\x00', 0x80000, 0x10)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000140)={@dev={0xfe, 0x80, [], 0x17}, 0x3, 0x3, 0x1, 0x0, 0x4}, &(0x7f0000000180)=0x20)
fchdir(r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./c\xf0\x1d#v\xbd$\x93Fu/syz0\x00', 0x1ff)

04:08:07 executing program 4:
r0 = socket(0x11, 0x800000003, 0x0)
setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x79)
sendmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001280)="db4ea94abe347ae1acaf", 0xa}], 0x1}}], 0x1, 0x0)

[ 1075.787520] audit: type=1400 audit(1555042087.657:1700): avc:  denied  { dac_override } for  pid=7027 comm="syz-executor.4" capability=1  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
04:08:07 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b630032357b3bc2d53165d5b07a1baf26077b0b6a47f5734aa9f3098061a6a87c13fb022737f20ee2596d35f16a93664e69a7e69eb6256f51b0e35ae0b03b1415e3c85582f90700cf82928f8f4694e9f2f68ad108f7ac67340c4e2d4c05f1c9a0c390cf6ca54c269ab03d6fcbb121d5bb000000000000000000000000000000f84a7f59b1e96096bf1e59"], 0x0, 0x0, 0x0})
socketpair(0x9, 0x1, 0x100, &(0x7f00000000c0))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="13a100000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})
r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
write$selinux_validatetrans(r3, &(0x7f0000000280)={'system_u:object_r:dhcpd_unit_file_t:s0', 0x20, 'system_u:object_r:modem_device_t:s0', 0x20, 0x2d5194fe, 0x20, '/usr/sbin/cupsd\x00'}, 0x70)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="85"})

[ 1075.816113] audit: type=1400 audit(1555042087.697:1701): avc:  denied  { dac_override } for  pid=7023 comm="syz-executor.3" capability=1  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
04:08:07 executing program 5:
r0 = socket(0x11, 0x800000003, 0x600081)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
bind(r0, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
r2 = dup2(r0, r0)
write$tun(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000ffff001e000088caffffffffffffffff000000000000d7972e2ab5df6b2e"], 0x28)

[ 1075.832418] audit: type=1400 audit(1555042087.707:1702): avc:  denied  { dac_override } for  pid=7023 comm="syz-executor.3" capability=1  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1075.840472] audit: type=1400 audit(1555042087.707:1703): avc:  denied  { dac_override } for  pid=7023 comm="syz-executor.3" capability=1  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1075.905446] audit: type=1400 audit(1555042087.777:1704): avc:  denied  { net_raw } for  pid=7024 comm="syz-executor.2" capability=13  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1075.931621] binder: 7025:7028 transaction failed 29189/-22, size 0-0 line 3013
[ 1075.932080] binder: undelivered TRANSACTION_ERROR: 29189
[ 1075.937541] audit: type=1400 audit(1555042087.807:1705): avc:  denied  { net_admin } for  pid=7023 comm="syz-executor.3" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1075.981301] binder: 7025:7035 transaction failed 29189/-22, size 0-0 line 3013
[ 1075.981821] binder: undelivered TRANSACTION_ERROR: 29189
[ 1076.002119] audit: type=1400 audit(1555042087.877:1706): avc:  denied  { sys_admin } for  pid=2121 comm="syz-executor.0" capability=21  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
04:08:08 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="85"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x10, &(0x7f00000000c0)=[@fd={0x66642a85, 0x0, r2}], &(0x7f0000000100)=[0x28, 0x28]}}], 0x9f, 0x0, &(0x7f0000000280)="c1292af6a6d62ff16d07c739c18d14526135fac5b9b4d6b7e9548f0b8b8c0bc034226bef62822a53156f2342558a02383537a9797f6186825adcc729af0d805ec9c215fad95f80360838cce6c5657132afa4fb4633e29f1b381ab3d10944206ed4ded43e1cddddd30f862323471621df3f4697bdbdab5f0a33a2d4d8c4918377760bb6468b45a2c9b7ed9eefb2b33d1fba3d760988b94ccddf5168ef1cf393"})

[ 1076.004298] audit: type=1400 audit(1555042087.877:1707): avc:  denied  { sys_admin } for  pid=2121 comm="syz-executor.0" capability=21  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1076.041291] audit: type=1400 audit(1555042087.877:1708): avc:  denied  { sys_admin } for  pid=2121 comm="syz-executor.0" capability=21  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1076.164577] audit_printk_skb: 15 callbacks suppressed
[ 1076.164587] audit: type=1400 audit(1555042088.037:1715): avc:  denied  { net_admin } for  pid=2121 comm="syz-executor.0" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1076.176880] audit: type=1400 audit(1555042088.047:1716): avc:  denied  { net_admin } for  pid=2121 comm="syz-executor.0" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1076.186380] audit: type=1400 audit(1555042088.057:1717): avc:  denied  { net_admin } for  pid=2116 comm="syz-executor.5" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1076.188423] audit: type=1400 audit(1555042088.057:1718): avc:  denied  { net_admin } for  pid=2116 comm="syz-executor.5" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1076.198021] audit: type=1400 audit(1555042088.067:1720): avc:  denied  { net_admin } for  pid=2121 comm="syz-executor.0" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1076.200226] audit: type=1400 audit(1555042088.067:1721): avc:  denied  { net_admin } for  pid=2121 comm="syz-executor.0" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1076.225504] audit: type=1400 audit(1555042088.077:1722): avc:  denied  { net_admin } for  pid=2121 comm="syz-executor.0" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1076.229375] audit: type=1400 audit(1555042088.057:1719): avc:  denied  { net_admin } for  pid=2116 comm="syz-executor.5" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1076.237338] audit: type=1400 audit(1555042088.107:1723): avc:  denied  { net_admin } for  pid=2116 comm="syz-executor.5" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1076.252422] audit: type=1400 audit(1555042088.127:1725): avc:  denied  { net_admin } for  pid=2121 comm="syz-executor.0" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1076.576605] binder: 7039:7041 unknown command 838886155
[ 1076.576617] binder: 7039:7041 ioctl c0306201 204edfd0 returned -22
[ 1076.641485] binder: 7039:7044 unknown command 41235
[ 1076.641497] binder: 7039:7044 ioctl c0306201 20007000 returned -22
[ 1076.854532] binder: 7039:7044 unknown command 838886155
[ 1076.854543] binder: 7039:7044 ioctl c0306201 204edfd0 returned -22
[ 1076.900350] binder: 7039:7041 unknown command 41235
[ 1076.900363] binder: 7039:7041 ioctl c0306201 20007000 returned -22
04:08:10 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
r3 = accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
sendto(r3, &(0x7f00000000c0)="c5111c0f0377457167bcef8005f09a8d1e537676eb9bd94419ec46119e930b0e820c95b84c31b5b43ad9ea7903394d589368b45a26d18940afff40660a8e1343535f0a654340a7c262d96e886a62cb8256e293d76477cf37771ab34119b38fada4560ae099cf97fe2008a2f8675cdfd241eadead7bef158e27d143d331490355357f154096c9136b767e2d7b4d2648b1a74ae3c913", 0x95, 0x0, &(0x7f0000000180)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x3f, @rand_addr="f538e5382a6d71242bc61a0616924ebb", 0x3}}, 0x80)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x1a5, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="85"})

[ 1077.441536] binder: 7050:7052 unknown command 0
[ 1077.441547] binder: 7050:7052 ioctl c0306201 204edfd0 returned -22
[ 1077.561638] binder: 7050:7053 got reply transaction with no transaction stack
[ 1077.561649] binder: 7050:7053 transaction failed 29201/-71, size 24-16 line 2921
[ 1078.196401] binder: BINDER_SET_CONTEXT_MGR already set
[ 1078.196422] binder: 7050:7055 ioctl 40046207 0 returned -16
[ 1078.196893] binder: 7050:7053 unknown command 0
[ 1078.196901] binder: 7050:7053 ioctl c0306201 204edfd0 returned -22
[ 1078.205908] binder_alloc: 7050: binder_alloc_buf, no vma
[ 1078.205930] binder: 7050:7055 transaction failed 29189/-3, size 0-0 line 3136
04:08:10 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319b")
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000502000000fcff3f0000000000"], 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0)

04:08:10 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00')
readv(r0, &(0x7f0000002340)=[{&(0x7f0000004380)=""/4096, 0x1000}], 0x1)

[ 1078.721002] binder: send failed reply for transaction 476 to 7050:7052
[ 1078.727818] binder: undelivered TRANSACTION_COMPLETE
[ 1078.788461] binder: 7060:7061 ERROR: BC_REGISTER_LOOPER called without request
[ 1078.828047] binder: undelivered TRANSACTION_ERROR: 29189
[ 1078.840737] binder: 7060:7061 ioctl c0306201 20007000 returned -14
[ 1078.891265] binder: 7060:7063 ERROR: BC_REGISTER_LOOPER called without request
[ 1078.895321] binder: 7060:7062 ioctl c0306201 20007000 returned -14
[ 1079.040987] binder: release 7060:7062 transaction 481 out, still active
[ 1079.047774] binder: undelivered TRANSACTION_COMPLETE
[ 1079.251477] binder: send failed reply for transaction 480 to 7060:7061
[ 1079.258285] binder: send failed reply for transaction 481, target dead
[ 1079.290677] binder: undelivered TRANSACTION_COMPLETE
[ 1079.340679] binder: undelivered TRANSACTION_ERROR: 29189
[ 1081.760608] audit_printk_skb: 1083 callbacks suppressed
[ 1081.760618] audit: type=1400 audit(1555042092.837:2085): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1084.422802] audit: type=1400 audit(1555042096.297:2086): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1086.752025] audit: type=1400 audit(1555042098.627:2087): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1088.971940] audit: type=1400 audit(1555042100.847:2088): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1091.522802] audit: type=1400 audit(1555042103.397:2089): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1094.252672] audit: type=1400 audit(1555042106.127:2090): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1096.963334] audit: type=1400 audit(1555042108.837:2091): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1099.892780] audit: type=1400 audit(1555042111.767:2092): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1102.612888] audit: type=1400 audit(1555042114.487:2093): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1105.361921] audit: type=1400 audit(1555042117.237:2094): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1107.793112] audit: type=1400 audit(1555042119.667:2095): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1110.081921] audit: type=1400 audit(1555042121.957:2096): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1112.192702] audit: type=1400 audit(1555042124.067:2097): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1114.301990] audit: type=1400 audit(1555042126.177:2098): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
04:08:50 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x7, 0x4, 0x658, 0x0, 0x358, 0x358, 0x570, 0x570, 0x570, 0x4, &(0x7f0000000140), {[{{@uncond, 0xf0, 0x218}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x2, 0x4, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x5, 0x0}, @loopback, 0x8, 0x1}}}, {{@arp={@rand_addr=0x347d, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xffffff00, @empty, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}, @empty, {[0xff, 0x0, 0x0, 0x0, 0xff, 0xff]}, 0x6, 0x8, 0x6, 0x59, 0xffffffffffffff00, 0x4, 'veth0_to_hsr\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0x0, 0x244}, 0xf0, 0x218}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x100, 'system_u:object_r:dhcpd_unit_file_t:s0\x00'}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x6a8)
r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0)
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x1c2)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff})
setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffffffff, 0x40, 0x8, 0x3bf}]}, 0x10)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r3, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
prctl$PR_SET_SECUREBITS(0x1c, 0x21)

04:08:50 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070")
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000140)=0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={<r3=>0x0, r1, 0x0, 0xb, &(0x7f0000000240)='$\x7fselinux%\x00', 0xffffffffffffffff}, 0x30)
perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0xfffffffffffffe00, 0x5, 0x10000, 0x80000001, 0x0, 0x80, 0x8, 0x2, 0x80000001, 0x80000001, 0x0, 0x32c9, 0x401, 0x5, 0x8000, 0x0, 0x1, 0x5, 0x3c82, 0x20, 0x800, 0x9, 0x100000000, 0x9, 0x7, 0xa2f, 0x8, 0x5, 0x0, 0x84, 0x1, 0x8001, 0x101, 0x3, 0x5, 0x85f, 0x0, 0x7f, 0x0, @perf_config_ext={0x0, 0x100}, 0x4000, 0x6, 0x9, 0x1, 0x6, 0x2, 0x7fff}, r3, 0xf, 0xffffffffffffff9c, 0x1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000180)={'netdevsim0\x00', @random="7cdbd375067e"})
r4 = dup2(r2, r2)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000440), 0x132224)
getsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4)
fcntl$setlease(r0, 0x400, 0x1)
setsockopt$inet6_tcp_int(r2, 0x6, 0xc, &(0x7f0000000300)=0x400, 0x4)
setsockopt$inet_opts(r4, 0x0, 0x0, 0x0, 0x0)

04:08:50 executing program 4:
r0 = gettid()
tkill(r0, 0x400000000414)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, &(0x7f0000b67000), &(0x7f00007d0000)=0x2fd71482)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000100)={'nat\x00', 0x0, 0x7b, 0xa2, [], 0x1, &(0x7f0000000000)=[{}], &(0x7f0000000040)=""/162}, &(0x7f0000000180)=0x78)

04:08:50 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x8000000807fe)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="85"})

04:08:50 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x2, 0x1)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000680)={&(0x7f0000000540), 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x800)
r1 = socket$inet6(0xa, 0xfffffffffffffffc, 0x1)
stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0))
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180))
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = fcntl$getown(r1, 0x9)
r3 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000140)='/dev/keychord\x00', 0x408240, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
recvfrom$packet(r3, &(0x7f0000000300)=""/97, 0x61, 0x40000102, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000280)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
epoll_create(0x4000c)
fchdir(r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
flistxattr(r6, &(0x7f00000000c0)=""/139, 0xff67)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/attr/exec\x00', 0x2, 0x0)
syz_open_procfs(r2, &(0x7f00000002c0)='net/ip6_flowlabel\x00')
preadv(0xffffffffffffffff, 0x0, 0x0, 0x10400005)
sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0x1cc, 0x0, 0x0, 0x0)
fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'U+', 0x2}, 0x28, 0x2)
write$binfmt_script(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x183)
syz_open_procfs(r2, 0x0)
ioctl$ASHMEM_PURGE_ALL_CACHES(r4, 0x770a, 0x0)
setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x60, &(0x7f0000000700)={0xfffffffffffffffd, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x2, 'd(\x00', 0x0, 0x7fff, 0x59}, 0x2c)
ioctl(r1, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070")
unshare(0x40000000)

04:08:50 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319b")
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000502000000fcff3f0000000000"], 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0)

[ 1118.308376] audit: type=1400 audit(1555042130.177:2099): avc:  denied  { dac_override } for  pid=7081 comm="syz-executor.4" capability=1  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
04:08:50 executing program 2:

[ 1118.338857] audit: type=1400 audit(1555042130.217:2100): avc:  denied  { dac_override } for  pid=7083 comm="syz-executor.3" capability=1  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
04:08:50 executing program 5:

04:08:50 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
r3 = accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
r4 = dup2(r3, r1)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa8, r5, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x22}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)
ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f00000002c0))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="85"})

[ 1118.349021] audit: type=1400 audit(1555042130.217:2101): avc:  denied  { dac_override } for  pid=7083 comm="syz-executor.3" capability=1  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1118.395465] audit: type=1400 audit(1555042130.267:2102): avc:  denied  { dac_override } for  pid=7083 comm="syz-executor.3" capability=1  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1118.431188] audit: type=1400 audit(1555042130.297:2103): avc:  denied  { create } for  pid=7082 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
04:08:50 executing program 2:

[ 1118.438815] audit: type=1400 audit(1555042130.307:2104): avc:  denied  { write } for  pid=7082 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
04:08:51 executing program 5:

[ 1118.479969] audit: type=1400 audit(1555042130.357:2105): avc:  denied  { net_admin } for  pid=7083 comm="syz-executor.3" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1118.497137] audit: type=1400 audit(1555042130.367:2106): avc:  denied  { sys_admin } for  pid=2119 comm="syz-executor.2" capability=21  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
04:08:51 executing program 2:

[ 1118.509663] audit: type=1400 audit(1555042130.377:2108): avc:  denied  { set_context_mgr } for  pid=7084 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1
[ 1118.521362] binder: 7084:7089 ERROR: BC_REGISTER_LOOPER called without request
[ 1118.521949] audit: type=1400 audit(1555042130.367:2107): avc:  denied  { sys_admin } for  pid=2119 comm="syz-executor.2" capability=21  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1118.565749] binder: release 7084:7089 transaction 483 out, still active
[ 1118.565754] binder: undelivered TRANSACTION_COMPLETE
[ 1118.638501] binder: release 7084:7093 transaction 484 out, still active
[ 1118.638505] binder: undelivered TRANSACTION_COMPLETE
[ 1118.654386] binder: release 7084:7089 transaction 483 in, still active
[ 1119.339991] binder: 7099:7102 transaction failed 29189/-22, size 0-0 line 3013
[ 1119.616173] binder: 7099:7101 ERROR: BC_REGISTER_LOOPER called without request
[ 1119.619582] binder: 7099:7106 transaction failed 29189/-22, size 0-0 line 3013
[ 1121.488063] binder: send failed reply for transaction 483, target dead
[ 1121.520681] binder: send failed reply for transaction 484, target dead
[ 1121.527628] binder: undelivered TRANSACTION_ERROR: 29189
[ 1121.570646] binder: undelivered TRANSACTION_ERROR: 29189
[ 1124.000829] audit_printk_skb: 1032 callbacks suppressed
[ 1124.000838] audit: type=1400 audit(1555042135.087:2453): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1126.372693] audit: type=1400 audit(1555042138.247:2454): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1129.042728] audit: type=1400 audit(1555042140.917:2455): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1131.511908] audit: type=1400 audit(1555042143.387:2456): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1134.152182] audit: type=1400 audit(1555042146.027:2457): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1136.952706] audit: type=1400 audit(1555042148.827:2458): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1140.172840] audit: type=1400 audit(1555042152.047:2459): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1142.732800] audit: type=1400 audit(1555042154.607:2460): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1145.162673] audit: type=1400 audit(1555042157.037:2461): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1147.852846] audit: type=1400 audit(1555042159.727:2462): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1151.152048] audit: type=1400 audit(1555042163.027:2463): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1153.492729] audit: type=1400 audit(1555042165.367:2464): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1155.801979] audit: type=1400 audit(1555042167.677:2465): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1159.274165] audit: type=1400 audit(1555042171.147:2466): avc:  denied  { net_admin } for  pid=7117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
04:09:33 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x200000, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10)
epoll_create(0x100)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

04:09:33 executing program 5:

04:09:33 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/status\x00', 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='attr/sockcreate\x00')
linkat(r2, &(0x7f0000000200)='./file0\x00', r3, &(0x7f00000002c0)='./file0\x00', 0x1400)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
accept$packet(r2, &(0x7f0000000300)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000380)=r4)
r5 = epoll_create1(0x0)
r6 = add_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)="15c54dbcfd7f78be653c85c5feb105696fa5003faf95dd803b08ddca9b5936bbbbf1990fe157c6b33652a612d6c77126c926200934831c62f627d4c03189c85469e7cdff6f302a92b2059697194d546f4d524bb72ce141e4085beaff2109556b5033a159359b", 0x66, 0xffffffffffffffff)
keyctl$setperm(0x5, r6, 0xffffffff)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f00000003c0)='./file0\x00')
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="85"})

04:09:33 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x8000000807fe)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="85"})

04:09:33 executing program 4:
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff}, 0x84800)
getsockopt$inet_tcp_buf(r0, 0x6, 0x3d, &(0x7f0000000200)=""/250, &(0x7f0000000140)=0xfa)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x8, 0x101, 0x2, 0x0, 0x0}, 0x2c)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x400, 0x0)
ioctl$BLKFLSBUF(r3, 0x1261, &(0x7f0000000080)=0x80000001)
bpf$MAP_CREATE(0x2, &(0x7f0000000100)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={r1, &(0x7f00000003c0)}, 0x10)

04:09:33 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319b")
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000502000000fcff3f0000000000"], 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0)

[ 1161.541514] audit: type=1400 audit(1555042173.417:2468): avc:  denied  { dac_override } for  pid=7125 comm="syz-executor.3" capability=1  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
04:09:33 executing program 5:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x1000000002806, 0x0)
r1 = add_key(&(0x7f0000000180)='ceph\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)="8d5c14c86bc53abbd04c56d9db698fa43bf52992dc9c1262e2723d03cb906aeb6e93abdd3b7c198a389f1859d6d041e7bec961b73ebe0dc058a7fc4c3a75ea101c5cc8039de9837888ea39b951d4e31447f983f861423956ee68c860d9b47893502fb949ed7e36a01141e79919c236d20e301cd69eac02ae285a3c67c601a7681e2cb797f517", 0x86, 0xfffffffffffffffb)
keyctl$setperm(0x5, r1, 0x8100000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x0, 0x0)
dup3(r0, r0, 0x80000)
r2 = fcntl$dupfd(r0, 0x0, r0)
r3 = accept$inet6(r2, &(0x7f0000000700)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000340)=0x1c)
getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000780), &(0x7f00000007c0)=0xc)
write$UHID_CREATE2(r0, &(0x7f0000001080)=ANY=[], 0x0)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/199, 0xc7}, {&(0x7f0000000140)=""/38, 0x26}, {&(0x7f0000000180)}], 0x3)

04:09:33 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bc070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0x443}], 0x10000000000000bd)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x80002, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'veth1\x01\x00\x00\x80\x00\x00\x00\x00k(\x00', 0x4fff})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000140)={'nr0\x00', 0x400})
r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="2800f9ce100019ba000000000000000000000000bbfe5aac20afbd53b9d0a9f3df74ac9774b937cd5155c43972401421bdf1833df83c16968f06aed9e9c59f5e0a6e81649cd0855256caf1dee4cee26ffbd29b7a3cadff70c47ca1a8dd7be19c11a2d629decbfb5640bc1e72808607f04717e663bbe14499dcf007d4638f82788403cf22d0b0eb2e0ac94c0a9a2668261a0026c1ef8be965", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0020000003009a6cdacb2828804b04375a82f25a7a0850f7016c9a112db7339ac23a33c47f1a256d03cb4b88ef2451f1e1aab4d97ca65e82765f6c767c14b2ca41b4072d7258e1c891780e0bc25089adef3b3307685b63acc31ae8bacb7907a6ebb108456f73d5f7fcea6423e16d87a7e6c5c3ddab3fbee801517539852226bcbc29768c23bdb3a2c81094797484c3be147ff6850eabba361a75c8fe6e89dac69df4a48f008b31e46c34c96afe66c3"], 0x28}}, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r5, 0x2007fff)
openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
sendfile(r2, r5, 0x0, 0x8000fffffff7)
execveat(r4, &(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000380)=[&(0x7f0000000180)='&\x00', &(0x7f00000001c0)='self{\x00'], &(0x7f00000004c0)=[&(0x7f00000003c0)='/dev/net/tun\x00', &(0x7f0000000400)='nr0\x00', &(0x7f0000000440)='\x00', &(0x7f0000000480)='/-+selfprocmime_type\x00'], 0x1900)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r6 = syz_open_pts(r1, 0x2)
dup3(r6, r1, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)

04:09:33 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0)
r3 = dup(r0)
renameat2(r2, &(0x7f0000000100)='./file0\x00', r3, &(0x7f0000000140)='./file0\x00', 0x1)
r4 = epoll_create1(0x0)
accept4$inet(r2, 0x0, 0x0, 0x1000000000)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="ff63484099431dcf4a831ac5364c3c67703f982c4e12e1dbd0df4bd4006ec509e2a7fd395f0d49c7a949d425d149196b52b5880fb68c872627165e3a3a349c9e37b0d142aba8ce1fa3fa9c92c235797d1214a16f0e5764877258c752995d10738de5e38834bea4e100e3ff8d50885d0ecb59c6f74b970b9ae109fdffe4", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="85"})

[ 1161.577738] audit: type=1400 audit(1555042173.407:2467): avc:  denied  { dac_override } for  pid=7124 comm="syz-executor.4" capability=1  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1161.581591] audit: type=1400 audit(1555042173.457:2469): avc:  denied  { dac_override } for  pid=7124 comm="syz-executor.4" capability=1  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1161.627158] audit: type=1400 audit(1555042173.497:2470): avc:  denied  { dac_override } for  pid=7124 comm="syz-executor.4" capability=1  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
04:09:34 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0)
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000001c0))
fchdir(r0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_buf(r1, 0x29, 0x0, &(0x7f0000001340)=""/130, &(0x7f00000012c0)=0x82)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/route\x00')
preadv(r2, &(0x7f0000001300)=[{0x0}], 0x1, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
fsync(r2)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, 0x0)
ftruncate(r3, 0x108200)
ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000040))
read$eventfd(r3, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x4000, 0x48)
sendfile(r3, r4, 0x0, 0x0)
sendfile(r3, r4, &(0x7f0000000080), 0xffffffff)

[ 1161.663548] audit: type=1400 audit(1555042173.537:2471): avc:  denied  { set_context_mgr } for  pid=7121 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1
[ 1161.669714] audit: type=1400 audit(1555042173.537:2472): avc:  denied  { sys_admin } for  pid=2116 comm="syz-executor.5" capability=21  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
04:09:34 executing program 2:
r0 = memfd_create(&(0x7f0000000080)='/dev/loop#\x00', 0x0)
clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000200))
r3 = dup2(r0, r0)
ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000000))
truncate(&(0x7f0000000040)='./file0\x00', 0x0)
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4200, r1, 0x0, 0x0)
tkill(r1, 0x35)
ptrace$cont(0x18, r1, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x8})
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r1, 0x0, 0x0)
ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180))
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0)

[ 1161.680405] audit: type=1400 audit(1555042173.547:2473): avc:  denied  { sys_admin } for  pid=2116 comm="syz-executor.5" capability=21  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1161.683316] binder: BINDER_SET_CONTEXT_MGR already set
[ 1161.683328] binder: 7123:7127 ioctl 40046207 0 returned -16
[ 1161.694226] binder: 7123:7127 ERROR: BC_REGISTER_LOOPER called without request
[ 1161.699034] audit: type=1400 audit(1555042173.567:2474): avc:  denied  { call } for  pid=7123 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1
04:09:35 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
r3 = fcntl$dupfd(r2, 0x406, r0)
ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000002e40)=<r4=>0x0)
stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000001c0)=<r6=>0x0)
getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)=<r7=>0x0)
fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
sendmsg$nl_generic(r3, &(0x7f0000002dc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800200}, 0xc, &(0x7f0000002d80)={&(0x7f0000000340)={0x2a24, 0x20, 0x800, 0x70bd2b, 0x25dfdbfe, {0x18}, [@nested={0x424, 0x6e, [@typed={0x8, 0x1c, @pid=r4}, @generic="dd353d90aa285f93b85ca620436e76bc035b7f6d7dbde073ce6e9b9aec401c30e4f979a4680e37a0338907358252f6e9e0b4da69201d7643ffbf03620cebfd39166a888bcdd4077ba9a9b8f172f00acb4e17772d7dae2b34b9eaf32e354dde3f499d44937e9209985f7ad4f161b2570ff177fd8bd307ab941d633978c137f7999dbf096b651e911289403a369fba7fea973f66910cfd49f2a9e2615230c725", @generic="283abaa9492329e85a1125470783043b83b619212bf2ebc11139fde3516b27a505271ea357796043117d7991bb2fb361265105005d317feee44ce7d46f221a7640bef6aae7f4a6a8d9d27d6ac3298810d426f216b4ff9d7ea7591a0c9fd7eff6867c4f3ec1359db080d5aaca105caa33e5baf826e8d045e750a6b45788c96115d3307dd4fa1d1a507d5d7457e25958066d1bb6e29acef99b6c2cbb5ace3f88ba3ceaf70eb1424581557726ee41624ba9870c6e41036800fa64d00a254c9ec5947c8d965a189a11f1b20375fbffe41dcc26535118d52667a9feeeb7", @generic="7761b695b7221a8c70ed42844cc2a6bda27f6606a5c52bdada33890f5c70039855eaf4eea1c38ad018d0f9bf8d6bfbc2a3ae8bf97d65521842cce2f7a4e87c810016502526277890795e19d98b964161deb48ae8b05362fb5b6027100bca1a183d7ebaed48519769cb60f7e24bcb4215c639cdf3e044149ec6f07ab7f2336f907c1497434c4e6a5cc3820c3e583a7b18fbd53022", @typed={0x8, 0x67, @u32=0x2}, @typed={0x8, 0x6f, @u32=0x8001}, @typed={0xc, 0x4f, @u64=0x8}, @generic="3649ae2647e3752de432cd814048486da34c9fffa87b7f34c48b925c8076598e1e97893a3234ced4bbc4a71ba73e80e14ffa4402f94a76cde709ac8c9f44922ce4de97708f6189b809b06fde8040ad81df4851cbd7b32d65194c73504f704afbbd272b0b34dbac41d5849224fc00673c52b0cc17729dcdf744bb0cff2e0c6baa445fe741098b86fdb19216be44aafbf76ef9fda1232cd1bc95f3b2d6db118330", @generic="20f0064165eb3b9697c6ca8ab5b258a410c7eb9144404b2db328a970d0b9f1ef74889d29683d8621029ffefab773cbffcbb0647841561dd5bc0a22aaa5a2bd00fc4ec5ce58ff254f4338531967d69e0e1c0d547f54947774a2706bbec31a5d4c8fff7e41e96925e10702c6054a29461dd4195d9875cb63da269b4de8205c99d21b4fe73cb5d2750b68064a86b538527d4332591d9e1aa3154dcffec74a4365cd747fce4493e837860a01f627eb84ea4cb32672fc58b1a41c9c9adb0fed0999843cc3e5656fab9ba1eb763db1ac4766ae377975de1541cfe8632e214c0501e62c5aadccb5670836", @typed={0x64, 0xb, @binary="ad655b900576dca98f6fd0b0935846475e2c833637239db741d35e88eec5b5311b3f1ec5a6f437ce220a9c4c92b28a75625c1044ec4093a43274677ce8f1eeef41aa096919a6887b7cb78a1b25f1d7dd08bab536ae48a1630b845747e8aca128"}]}, @nested={0x144, 0xf, [@generic="59fc645eece920f46f56ed3badd489542a406f4492e0af599f98f9363596c73ddd612167c8f4384e70187fd6c8001c31c9f4932e861ff29734cdc63e6ec49d0459d165556da62e702cab9d70fead56146ea1ce7390", @typed={0x8, 0x7a, @u32=0x6}, @typed={0x8, 0x35, @uid=r5}, @generic="fb3df72162d0ccd044d0a0e16b484a9adae9ea90a2ae039cff45e826a524999c70b5c20d540655f02e", @generic="9c1cda695dd4391146245d89d8c09b874786ab61aa", @generic="a76d997468fe69bdc971f607a0d242c1a65b7320d2d7b4be2f7f81b91d691073f9ac3de9925ba8867478eca1d4c1c7adc3a180ea75b52c3f51c39473fc6d8c11c0cbd1422d6b7737efed0713054af8132ad8b8208a496521e8f6a32c344da897ff5d0c67c578c8b3de99accf66d05c3f97f4eda961c7088dc699a81f110d0a7a3b297c6abd", @generic="ba6287864542db6d20e0a64462ac206626e5a9011da312"]}, @typed={0x8, 0x5b, @u32=0x3}, @generic="24bfa9526cc0a453072af12f116a4465a5c1aacc03a54b0cc4e714f4f7ec9f06a6fd6ce9860422c113d23a89e6643def37ba8e69f94601cdb968f4eab881d4f7bfc3037cf2dadb7a13a78798748c0e7a70d4ec561167225cfd5e6dacf656fc4c8c4ac35819e0db1736e333a88638d6883571e2f2617406ff32628ae5e7", @generic="79849c06fc06fa17963ba8d42651fc65c73e8a6d31efba254985859821c0f633a4afaf770ca4a1b55a3ced21094732caf1ec4bf9fbc3bdd7db18ab5d58003d793ae82aa49080ce4161baa1cddb56d9d0e902c71370a5337decf965a3a263d548bc521b9e3500c20505dbb9e22c3be792a229708e134b9abca985c513cecaf68cfaffd8c42fbd6d36e313b1", @generic="5487161ef5dee834fe82b428", @nested={0x138, 0x76, [@typed={0x4, 0x7c}, @generic, @generic="937928a72f15d4699bd42b8c174f5b706e88db85ac549e91da0ce69bd9270cec0daa43267a000b34d855b735084b10bb8ab4a188d6f194f36dee1a8f295eb17bf8a22b7d426022c118d71fe58e60b9ef25d7862482573fb298cd8bf2f62a677c2c3358823e842535770d62e7f609af56ad910b31facc61cab94c1d", @generic="a30a7223aee428aa1a748b9747be19cd9b71950b972d1776694dec3494688e22dc77c7d5338d6eaf17a17dada448fde65b5fbd3ebcf9169ed161597c1eece1626b393df5c9c0f63286dfa6cd0228af9d9400dd917b683f02179e24fa5de42bf43635e9c2ad5e8156dcb0c7ae12e3874afb06107ac1", @generic="57c32eb94e14de8a3c052dbbba9d22582d5f40f44de21f0fd129e2ba5ed1a84cb9e705b22f5fa522f2ffdd8e98387f93d2c251835f", @typed={0x8, 0x94, @pid=r6}]}, @typed={0x8, 0x51, @fd=r2}, @nested={0x224c, 0x23, [@generic="12e18050597ca741192c902e73571ac13ea5564fff769b497dcdd2a47a23b4cccd0e4dfe960a6364734f18", @generic="1a3e0188f618ed147ca53729c88cdaeea5cc341dff334fe66e8aa83320cdcdd320f17eb70701e2d2893a916e893a72b36faa59de6a15dedf071ad637b70ba4e443d7deba0dd1761109f42b918217c6762a16d30828fd77cbf1c6fdeb6c75701889efd4687c7c52864e9fee64fa3697f08a8f88b45a26c6b38fc18388bac8e800761e649eaf7d14164a588314a08f42e1e69ee6d809ebcf89b083602db9cc7aafa8cd2c9c9ed9b3e6dd765f1c1258d6128f3f8844d4", @typed={0x8, 0x15, @uid=r7}, @generic="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", @generic="3970cfe44ff6d06267860da3c45c38f80d61beeff9b8119009ef7aec8111ae85ae0a67ee7fa69d5acb8a0d54cde0fb5f89d075deb3b6cd24a86883ad6b77459f96bdf386774adede4f", @typed={0xc, 0x6f, @u64=0xaa05}, @generic="372f883f35ef9047f472bfd4b2ecca7266705ad9c36b85ccd364e21786140b8919c8d6c286d271059c125e83721ba8abc23ce8c548ce077f68d509484339750b9a42eb87375c3290ddd505b229bce2948f1b341b36679613eaf4ec8bcacd9c3a62adcfc0dab36d1cf100a907d41e7bcdc29fd2334dc0bb2102bd61a151eaa35f1ce26de5bb4a27c7bc4853625fa344250be8e310a2519d9f1a721bdb42f569ce76780eecfcec986f97d76caa3f73594495e7b01afcf654c4a04e5f24420691a6362f161535f7dcccd3b31661a5cfd12056c18973", @typed={0x8, 0xa, @uid=r8}, @generic="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", @generic="8a765ba8752dd8c2abf79689631b572436410a0be21c9a5aa3db18d47f087fa52621cf15c2fcf1996df0931bcc46"]}]}, 0x2a24}, 0x1, 0x0, 0x0, 0x4}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=ANY=[@ANYBLOB='\vc \x00'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})

[ 1161.699066] binder_alloc: 7121: binder_alloc_buf, no vma
[ 1161.699088] binder: 7123:7127 transaction failed 29189/-3, size 0-0 line 3136
[ 1161.721283] audit: type=1400 audit(1555042173.597:2475): avc:  denied  { sys_admin } for  pid=2120 comm="syz-executor.4" capability=21  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1162.332612] binder: 7132:7137 ERROR: BC_REGISTER_LOOPER called without request
[ 1162.332790] binder: 7132:7137 unknown command 1078486015
[ 1162.332799] binder: 7132:7137 ioctl c0306201 20007000 returned -22
[ 1162.399386] binder: undelivered TRANSACTION_ERROR: 29189
[ 1163.124373] binder: 7132:7154 ERROR: BC_REGISTER_LOOPER called without request
[ 1163.124461] binder: 7132:7154 unknown command 1078486015
[ 1163.124471] binder: 7132:7154 ioctl c0306201 20007000 returned -22
[ 1163.615232] binder: BINDER_SET_CONTEXT_MGR already set
[ 1163.615242] binder: 7164:7165 ioctl 40046207 0 returned -16
[ 1164.527471] audit_printk_skb: 762 callbacks suppressed
[ 1164.527481] audit: type=1400 audit(1555042176.397:2730): avc:  denied  { sys_admin } for  pid=2118 comm="syz-executor.3" capability=21  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1164.566055] audit: type=1400 audit(1555042176.437:2731): avc:  denied  { sys_admin } for  pid=2120 comm="syz-executor.4" capability=21  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1164.567357] audit: type=1400 audit(1555042176.437:2732): avc:  denied  { dac_override } for  pid=2120 comm="syz-executor.4" capability=1  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1164.569235] audit: type=1400 audit(1555042176.437:2733): avc:  denied  { dac_override } for  pid=2120 comm="syz-executor.4" capability=1  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1164.581222] audit: type=1400 audit(1555042176.457:2734): avc:  denied  { dac_override } for  pid=2120 comm="syz-executor.4" capability=1  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1164.583061] audit: type=1400 audit(1555042176.457:2735): avc:  denied  { dac_override } for  pid=2120 comm="syz-executor.4" capability=1  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1164.584947] audit: type=1400 audit(1555042176.457:2736): avc:  denied  { sys_admin } for  pid=2120 comm="syz-executor.4" capability=21  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1164.586198] audit: type=1400 audit(1555042176.457:2737): avc:  denied  { dac_override } for  pid=2120 comm="syz-executor.4" capability=1  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1164.587987] audit: type=1400 audit(1555042176.457:2738): avc:  denied  { dac_override } for  pid=2120 comm="syz-executor.4" capability=1  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1164.589779] audit: type=1400 audit(1555042176.457:2739): avc:  denied  { dac_override } for  pid=2120 comm="syz-executor.4" capability=1  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
04:09:42 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x100, 0x0)
r2 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0)
write$9p(r2, &(0x7f0000000100)="013cc8ac8baf7839bebc4218f64671912ac91f7215f549c99f6333a2e172e14781b76c4f004444d65e0eab3b092fe553772a70c4f0c05647d2ef5e59fd1263e865131a375a213422f097dd3e50e5e7", 0x4f)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

04:09:42 executing program 4:
r0 = socket(0x1, 0x7ff, 0x40)
write(r0, &(0x7f0000000080)="220000002000070700be0000090007010200000000000000f0200003050013800100", 0xc823ee0e64413b78)
ioctl$sock_netdev_private(r0, 0x89ff, &(0x7f0000000000)="c8fd88de43de47bee43249897f039c86e269bcbe4deb01e7a0bd0f43e006da4dfd183794c3287f08ee9e3f14dc561568e22a1094d7238775e11fe6cb8fa669b6637b7343fc6640f7fdc7546c94ad31e1930219acbe43404ef011f80854f11697607709939154031f1490fdb55dfef450")
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="00d4bcf9", @ANYRES16=r2, @ANYBLOB="000029bd7000fbdbdf250200000008000100000000000c00060002000000000000000c000300ffffffffffffffff"], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x84)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0)
ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0x7, 0x3}, {0x79, 0xaa}, {0xfffffffffffffffc, 0x6}]})
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f0000000100)={0x80000000})

04:09:42 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000100), &(0x7f0000000180)=0xc)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r3 = syz_open_dev$evdev(&(0x7f0000fe5fee)='/dev/input/event#\x00', 0x2, 0x0)
ioctl$EVIOCSCLOCKID(r3, 0x80284504, &(0x7f0000ffcffc)=0x200)
preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000300)=""/188, 0xbc}, {0x0, 0x29b}, {&(0x7f0000000400)=""/162, 0xa2}], 0x3, 0x0)

04:09:42 executing program 5:
r0 = socket(0x10, 0x3, 0x0)
capset(&(0x7f0000000000)={0x400019980330}, &(0x7f0000000080))
ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000100)={'veth1_to_team\x00', @ifru_data=0x0})

04:09:42 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0xfffffffffffffffc})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8001200}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x228, r4, 0x100, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x975}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x12}]}, @TIPC_NLA_LINK={0xe0, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x24}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xfff}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x72d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x64, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x256}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4f8}]}]}, @TIPC_NLA_MEDIA={0x18, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x5, @empty, 0x1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, [], 0x1e}, 0xb4bb}}, {0x14, 0x2, @in={0x2, 0x4e24, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'vxcan1\x00'}}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x538}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x4}, 0x80)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="85"})

04:09:42 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc0")
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000502000000fcff3f0000000000"], 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0)

[ 1171.161737] audit_printk_skb: 384 callbacks suppressed
[ 1171.161746] audit: type=1400 audit(1555042183.007:2868): avc:  denied  { dac_override } for  pid=7176 comm="syz-executor.4" capability=1  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
04:09:43 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES16=r0, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYPTR64], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYRESDEC=r0, @ANYBLOB="371031632ad790fb34464344016c5445e5a3d37969555e19db7ace1e6e8871decbaa1c6b5972e0425fff25f1b75c5afce9769c83f806f4e29e17096c4c4f3057f52ed55e9d5c77b71ee69df0f572fe06d9b2a137f38425d66ee9ed5d91a7a3503a74751a061b0d1e7067352419ad7ff03c085a4121caf0773f409a8f5712b17aced407bbd8dbe635dead1ea5413d8cd3882b05e1090aaac0cb9d9a8006c3a0c3b2f330cfa0ef852d70106085670ff9974466ee2180999a0eba67ba5f8ad6a8bb59316de936b6b8116d9f00dccadfb1f6f000", @ANYRES32], @ANYRESDEC=0x0, @ANYRES16, @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="b16eb34cf34caeac901a5da1aae7b2897ddf484d2da5cc83", @ANYRESHEX=r0, @ANYRES16=r0, @ANYBLOB="6fa1e973690f0dea4c1d6b34010185beae962ffb5e2752aecc15aa3a1c33845ddb938a457c49f964390a3e8d60259d2c6286f07d4caf5c2ce09b344238acadba1e4cc9c52401145f715fe64cf092ab4730729143caf3f2b3031a98858f293b97cc17ac4cd77fd9b48c87483d64fa18f74995bd0c92251984a4cb1e0b9b76ef2d52bb1a8e194911a8fc761dcd3147a973757f035aedec297cfebbe85ab6590021", @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES16=r0]], 0x7}}, 0x0)
r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00')
sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)={0x44, r2, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x40}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x4}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x2}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x19a8]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x5}, 0x40000)
getsockopt$inet6_opts(r0, 0x29, 0x3f, &(0x7f0000000000)=""/43, &(0x7f0000000040)=0x2b)

[ 1171.169843] audit: type=1400 audit(1555042183.037:2869): avc:  denied  { dac_override } for  pid=7180 comm="syz-executor.3" capability=1  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1171.173363] audit: type=1400 audit(1555042183.047:2870): avc:  denied  { dac_override } for  pid=7180 comm="syz-executor.3" capability=1  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
04:09:43 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00')
sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x108, r3, 0x600, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffffffffff7}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xbb6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2a2}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}]}, @TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER={0x40, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x424e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000010}, 0x4080)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="85"})

[ 1171.218362] audit: type=1400 audit(1555042183.087:2871): avc:  denied  { dac_override } for  pid=7180 comm="syz-executor.3" capability=1  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1171.260717] audit: type=1400 audit(1555042183.127:2872): avc:  denied  { set_context_mgr } for  pid=7179 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1
[ 1171.271400] binder: 7179:7182 ERROR: BC_REGISTER_LOOPER called without request
04:09:43 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x1, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000020000"], 0x28}}, 0x0)
write$tun(r1, &(0x7f00000004c0)={@val, @val, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @broadcast}, @gre}}, 0x66)
write$tun(r0, &(0x7f00000004c0)={@val, @val, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @broadcast}, @gre}}, 0x66)

[ 1171.274185] audit: type=1400 audit(1555042183.147:2873): avc:  denied  { net_admin } for  pid=7180 comm="syz-executor.3" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1171.278620] audit: type=1400 audit(1555042183.147:2874): avc:  denied  { dac_override } for  pid=7179 comm="syz-executor.0" capability=1  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1171.291180] audit: type=1400 audit(1555042183.157:2875): avc:  denied  { create } for  pid=7179 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
04:09:44 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0xffffffffffffffff)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x40080000)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="85"})

[ 1171.292919] audit: type=1400 audit(1555042183.167:2876): avc:  denied  { sys_admin } for  pid=2116 comm="syz-executor.5" capability=21  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1171.294932] audit: type=1400 audit(1555042183.167:2877): avc:  denied  { sys_admin } for  pid=2116 comm="syz-executor.5" capability=21  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1171.506335] binder: release 7179:7187 transaction 491 out, still active
[ 1171.506340] binder: undelivered TRANSACTION_COMPLETE
[ 1171.532367] binder: 7179:7187 ERROR: BC_REGISTER_LOOPER called without request
[ 1171.562306] binder: release 7179:7188 transaction 492 out, still active
[ 1171.562311] binder: undelivered TRANSACTION_COMPLETE
[ 1171.580793] binder: send failed reply for transaction 491, target dead
[ 1171.580801] binder: send failed reply for transaction 492, target dead
04:09:45 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="85"})
r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x8002, 0x0)
ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000100)={0xb, 0x16, 0xc, 0x19, 0x9, 0x6, 0x3, 0xe})
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)

[ 1172.281796] binder: 7197:7202 ERROR: BC_REGISTER_LOOPER called without request
[ 1172.554391] binder: release 7197:7202 transaction 494 out, still active
[ 1172.554397] binder: undelivered TRANSACTION_COMPLETE
[ 1173.162865] binder_alloc: 7197: binder_alloc_buf, no vma
[ 1173.162889] binder: 7209:7210 transaction failed 29189/-3, size 0-0 line 3136
[ 1173.203121] binder_alloc: 7197: binder_alloc_buf, no vma
[ 1173.203144] binder: 7209:7211 transaction failed 29189/-3, size 0-0 line 3136
04:09:45 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc0")
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000502000000fcff3f0000000000"], 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0)

[ 1173.501538] binder: BINDER_SET_CONTEXT_MGR already set
[ 1173.508593] binder: 7212:7213 ioctl 40046207 0 returned -16
[ 1173.553808] binder: 7212:7213 ERROR: BC_REGISTER_LOOPER called without request
[ 1173.579508] binder_alloc: 7197: binder_alloc_buf, no vma
[ 1173.586255] binder: undelivered TRANSACTION_ERROR: 29189
[ 1173.586276] binder: undelivered TRANSACTION_ERROR: 29189
[ 1173.651251] binder: release 7197:7202 transaction 494 in, still active
[ 1173.651256] binder: send failed reply for transaction 494, target dead
[ 1173.651289] binder: send failed reply for transaction 495 to 7197:7205
[ 1173.651329] binder: undelivered TRANSACTION_COMPLETE
[ 1173.651335] binder: undelivered TRANSACTION_ERROR: 29189
[ 1173.948046] binder: 7212:7213 transaction failed 29189/-3, size 0-0 line 3136
[ 1174.001733] binder: undelivered TRANSACTION_ERROR: 29189
[ 1174.033503] binder: 7212:7214 transaction failed 29189/-22, size 0-0 line 3013
[ 1174.064659] binder: undelivered TRANSACTION_ERROR: 29189
[ 1176.216478] audit_printk_skb: 1131 callbacks suppressed
[ 1176.216489] audit: type=1400 audit(1555042188.087:3255): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1179.852702] audit: type=1400 audit(1555042191.727:3256): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1182.452877] audit: type=1400 audit(1555042194.327:3257): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1184.831918] audit: type=1400 audit(1555042196.707:3258): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1186.972774] audit: type=1400 audit(1555042198.847:3259): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1189.131913] audit: type=1400 audit(1555042201.007:3260): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1191.302031] audit: type=1400 audit(1555042203.177:3261): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1193.582689] audit: type=1400 audit(1555042205.457:3262): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1195.942778] audit: type=1400 audit(1555042207.817:3263): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1198.642671] audit: type=1400 audit(1555042210.517:3264): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1200.812838] audit: type=1400 audit(1555042212.687:3265): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1202.941933] audit: type=1400 audit(1555042214.817:3266): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1204.992925] audit: type=1400 audit(1555042216.867:3267): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1207.152731] audit: type=1400 audit(1555042219.027:3268): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1209.282804] audit: type=1400 audit(1555042221.157:3269): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1211.322710] audit: type=1400 audit(1555042223.197:3270): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1213.442735] audit: type=1400 audit(1555042225.317:3271): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1215.802664] audit: type=1400 audit(1555042227.677:3272): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
04:10:32 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000800)='cpuset.effective_mems\x00', 0x0, 0x0)
pipe(&(0x7f0000000840)={<r1=>0xffffffffffffffff})
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, 0x0, 0x24044004)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
getsockname$packet(0xffffffffffffff9c, &(0x7f00000007c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000a80)=0x14)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000ac0)={0x0, <r4=>0x0}, &(0x7f0000000b00)=0xc)
setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000c00)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev={0xfe, 0x80, [], 0xc}, 0x4e20, 0x9, 0x4e21, 0xfffffffffffffffe, 0xa, 0x80, 0x20, 0xba, r3, r4}, {0x30, 0x8, 0x8, 0x172a, 0x66, 0x8, 0x6, 0x8001}, {0x7, 0x2, 0xcd, 0x1ff}, 0x40, 0x6e6bb8, 0x1, 0x1, 0x0, 0x2}, {{@in6=@local, 0x4d4, 0x6c}, 0x0, @in6=@mcast2, 0x0, 0x6, 0x3, 0x7, 0x6, 0xff, 0x5}}, 0xe8)
connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@broadcast}, 0x0, @in=@dev}}, &(0x7f0000000080)=0xe8)
r7 = getuid()
getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=<r8=>0x0)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@remote, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in6=@ipv4={[], [], @initdev}}, 0x0, @in6=@local}}, &(0x7f0000000580)=0xe8)
stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, <r11=>0x0})
getgroups(0x1, &(0x7f0000000680)=[<r12=>0xee01])
r13 = getgid()
fstat(r5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0})
getgroups(0xa, &(0x7f0000000740)=[0xee00, 0xffffffffffffffff, <r15=>0xee00, 0xee00, 0x0, 0xee01, 0xee00, 0x0, 0xffffffffffffffff, 0x0])
fstat(r0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0})
stat(&(0x7f0000000b40)='./file0/file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r17=>0x0})
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
getgroups(0x7, &(0x7f0000000980)=[0xee00, 0x0, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, <r19=>0xffffffffffffffff])
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000010002000000000002000400", @ANYRES32=r6, @ANYBLOB="02000400", @ANYRES32=r7, @ANYBLOB="02000300", @ANYRES32=r8, @ANYBLOB="02000400", @ANYRES32=r9, @ANYBLOB="02000700", @ANYRES32=r10, @ANYBLOB="02000200", @ANYRES32=r11, @ANYBLOB="040007000000000008000300", @ANYRES32=r12, @ANYBLOB="08005b8e", @ANYRES32=r13, @ANYBLOB="08000400", @ANYRES32=r14, @ANYBLOB="08000300", @ANYRES32=r15, @ANYBLOB="08000400", @ANYRES32=r16, @ANYBLOB="08000400", @ANYRES32=r17, @ANYBLOB="08000600", @ANYRES32=r18, @ANYBLOB="08000600", @ANYRES32=r19, @ANYBLOB="100003bb23eca8c576bd5b9d9ede0000"], 0x94, 0x3)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000780)='sysacl_\t\x00\x00\x00\xfd}\xe5(\xef\x06P\x00\x00\x00\x00\x00\x00')

04:10:32 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
r3 = accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x400000, 0x0)
getsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000100)={@dev, @remote, <r5=>0x0}, &(0x7f0000000140)=0xc)
ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000180)=r5)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="85"})

04:10:32 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x800000000000001, 0x3, &(0x7f0000000080)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x2e}}, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000001c0)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffffffffffe}, 0xffffffffffffff05}, 0x48)

04:10:32 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_user\x00', 0x0, 0x0)
getsockopt$inet6_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000280)=""/106, &(0x7f00000001c0)=0x6a)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
setsockopt$inet6_int(r0, 0x29, 0x0, 0x0, 0xfffffcdb)
r2 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x40)
write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x323)
r3 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, 0x0, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x5, &(0x7f0000000040))
r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0)
getpeername(r5, 0x0, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
exit(0x3)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000200)=0x7ff, 0x4)
bind$netlink(r6, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
r7 = add_key(0x0, &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000640)="e4b55cbb9bbb29de6a8704fb62ffbff7de54648b975b7977663a7d6dc3fbc795d3efe1cf48767e8b08c32663f2587fe51827657b8d9b0b7b0f87c77eb354cab109bc215f51c5602ac168251006eaaf01e07dd6115533329c103ecbfbfe3d5da8d42a0413dc1770fe7c94b30d4f84cfb73fd721ebcde1d32ba1e02b", 0x7b, 0xfffffffffffffffa)
keyctl$set_timeout(0xf, r7, 0xfffffffffffffc12)
write(r6, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
connect$netlink(r6, &(0x7f0000000480)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000b4bffc), 0x4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x62)
sendto(r6, &(0x7f0000000340), 0xac, 0x0, 0x0, 0x0)
openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
signalfd(r6, &(0x7f00000004c0)={0x6}, 0x8)
recvmmsg(r6, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0)
ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f0000000000)=0xfffffffffffffffd)
write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="4f4fe525aa87ba4e63cd7720982b293e4980f0673dc79a52660cabac6cc414fe341c3941880747be171b1b18a575d4cba4de012cfe2dd152fc7bd2dee134d2fc1e083355949c6956f246f03345d7c175fcd188656f813b585e743e9f19026725e775ff4a5667351aa9c4afe636c4106286613731c11a0969330a30c4cf1b6133bce6495eb276be9f941c187cf9524475675627885d0c117703ad924d4f5f066621ab0d55301fef5d24290e28b07c64f2cc282c5fdf9933aa19f325821b9250128397f1419a5c8471415cdf9ef315dc1f0e8f32ead06c2d258f3d4214ba69502262acfa21dade3c2e0b01a99719f098c8f3895c"], 0xf3)
sendfile(r2, r5, &(0x7f0000000140), 0x8fff)

04:10:32 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc0")
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000502000000fcff3f0000000000"], 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0)

04:10:32 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc0")
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000502000000fcff3f0000000000"], 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0)

[ 1220.876562] audit: type=1400 audit(1555042232.747:3273): avc:  denied  { dac_override } for  pid=7236 comm="syz-executor.3" capability=1  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
04:10:32 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=ANY=[@ANYBLOB="1b630000"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="85"})

04:10:32 executing program 4:

[ 1220.894617] audit: type=1400 audit(1555042232.767:3274): avc:  denied  { dac_override } for  pid=7234 comm="syz-executor.4" capability=1  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1220.941005] audit: type=1400 audit(1555042232.767:3275): avc:  denied  { dac_override } for  pid=7234 comm="syz-executor.4" capability=1  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1220.949618] audit: type=1400 audit(1555042232.817:3276): avc:  denied  { dac_override } for  pid=7234 comm="syz-executor.4" capability=1  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1221.005747] audit: type=1400 audit(1555042232.877:3277): avc:  denied  { net_admin } for  pid=7237 comm="syz-executor.5" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
04:10:33 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="85"})

[ 1221.012969] audit: type=1400 audit(1555042232.887:3278): avc:  denied  { prog_load } for  pid=7234 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1
[ 1221.027659] audit: type=1400 audit(1555042232.897:3279): avc:  denied  { prog_load } for  pid=7234 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1
[ 1221.033856] audit: type=1400 audit(1555042232.907:3280): avc:  denied  { set_context_mgr } for  pid=7233 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1
04:10:33 executing program 4:

[ 1221.043810] binder: 7233:7239 ERROR: BC_REGISTER_LOOPER called without request
[ 1221.075741] audit: type=1400 audit(1555042232.947:3281): avc:  denied  { sys_admin } for  pid=2121 comm="syz-executor.0" capability=21  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1221.077900] audit: type=1400 audit(1555042232.947:3282): avc:  denied  { sys_admin } for  pid=2121 comm="syz-executor.0" capability=21  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1221.484809] binder: 7243:7246 transaction failed 29189/-22, size 0-0 line 3013
[ 1222.087918] binder: 7249:7250 ERROR: BC_REGISTER_LOOPER called without request
[ 1222.117897] binder: 7249:7250 unknown command 0
[ 1222.117909] binder: 7249:7250 ioctl c0306201 20007000 returned -22
04:10:34 executing program 4:

[ 1222.858200] binder: BINDER_SET_CONTEXT_MGR already set
[ 1222.879984] binder: 7249:7256 ioctl 40046207 0 returned -16
04:10:34 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x141000, 0x0)
ioctl$KDMKTONE(r2, 0x4b30, 0x7)
r3 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x800)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=ANY=[@ANYBLOB="0b63ebbe"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
pipe(&(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2)
ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f0000000100)="cac93e98d21d7e82cd3f66b3e16f5b1ef190ad20355af879a9fe71d071ff132c6d3b489351f96fc758b466efb9fe104ba9b50c84906cd16d9ff2662b813665e8402816b1ea31e11ec90ea55a4d575d1082b4")
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="85"})

[ 1222.920410] binder: 7249:7255 ERROR: BC_REGISTER_LOOPER called without request
[ 1222.928044] binder: 7249:7256 unknown command 0
[ 1222.938293] binder: 7249:7256 ioctl c0306201 20007000 returned -22
[ 1223.681057] binder: BINDER_SET_CONTEXT_MGR already set
[ 1223.750988] binder: 7267:7268 ioctl 40046207 0 returned -16
[ 1223.774979] binder: 7267:7269 unknown command -1091869941
[ 1223.774994] binder: 7267:7269 ioctl c0306201 204edfd0 returned -22
[ 1223.776802] binder_alloc: 7249: binder_alloc_buf, no vma
[ 1223.776822] binder: 7267:7269 transaction failed 29189/-3, size 0-0 line 3136
[ 1225.173356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=115 sclass=netlink_route_socket pig=7258 comm=syz-executor.2
04:10:42 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

04:10:42 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0)
r2 = epoll_create1(0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_pwait(r2, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0x9, &(0x7f0000000140)={0x79}, 0x8)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\v\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="85"})

04:10:42 executing program 4:

[ 1226.340865] audit_printk_skb: 1245 callbacks suppressed
[ 1226.340878] audit: type=1400 audit(1555042237.717:3691): avc:  denied  { net_admin } for  pid=7235 comm="syz-executor.2" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1226.591927] audit: type=1400 audit(1555042238.467:3699): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1226.595556] binder: undelivered TRANSACTION_ERROR: 29189
[ 1226.762726] audit: type=1400 audit(1555042238.637:3700): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1226.764737] audit: type=1400 audit(1555042238.637:3701): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1226.766746] audit: type=1400 audit(1555042238.637:3702): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1226.768676] audit: type=1400 audit(1555042238.637:3703): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1226.810827] binder: undelivered TRANSACTION_ERROR: 29189
[ 1227.500755] audit: type=1400 audit(1555042238.637:3704): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1227.502855] audit: type=1400 audit(1555042239.377:3705): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1227.504834] audit: type=1400 audit(1555042239.377:3706): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1227.506699] audit: type=1400 audit(1555042239.377:3707): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1230.790180] binder: 7280:7282 ERROR: BC_REGISTER_LOOPER called without request
[ 1230.793920] binder: release 7280:7282 transaction 505 out, still active
[ 1230.793924] binder: undelivered TRANSACTION_COMPLETE
[ 1230.804424] binder: BINDER_SET_CONTEXT_MGR already set
[ 1230.804433] binder: 7280:7283 ioctl 40046207 0 returned -16
[ 1230.804763] binder: release 7280:7282 transaction 505 in, still active
[ 1230.820832] binder: 7280:7283 ERROR: BC_REGISTER_LOOPER called without request
[ 1230.820932] binder: 7280:7282 transaction failed 29189/-22, size 0-0 line 3013
[ 1230.840639] binder: send failed reply for transaction 505, target dead
[ 1230.866821] binder: undelivered TRANSACTION_ERROR: 29189
[ 1232.073789] audit_printk_skb: 288 callbacks suppressed
[ 1232.073799] audit: type=1400 audit(1555042243.947:3804): avc:  denied  { sys_admin } for  pid=2117 comm="syz-executor.1" capability=21  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1232.913219] audit: type=1400 audit(1555042244.787:3805): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1232.915254] audit: type=1400 audit(1555042244.787:3806): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1232.917516] audit: type=1400 audit(1555042244.787:3807): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1232.919536] audit: type=1400 audit(1555042244.787:3808): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1233.780915] audit: type=1400 audit(1555042245.657:3809): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1233.782975] audit: type=1400 audit(1555042245.657:3810): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1233.785018] audit: type=1400 audit(1555042245.657:3811): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1233.786939] audit: type=1400 audit(1555042245.657:3812): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1233.788869] audit: type=1400 audit(1555042245.657:3813): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1238.531971] audit_printk_skb: 27 callbacks suppressed
[ 1238.531981] audit: type=1400 audit(1555042250.407:3823): avc:  denied  { sys_admin } for  pid=2117 comm="syz-executor.1" capability=21  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1238.533995] audit: type=1400 audit(1555042250.407:3824): avc:  denied  { sys_admin } for  pid=2117 comm="syz-executor.1" capability=21  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1238.539781] audit: type=1400 audit(1555042250.407:3825): avc:  denied  { sys_admin } for  pid=2117 comm="syz-executor.1" capability=21  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1239.345363] audit: type=1400 audit(1555042251.217:3826): avc:  denied  { sys_admin } for  pid=2117 comm="syz-executor.1" capability=21  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1240.314293] audit: type=1400 audit(1555042252.187:3827): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1240.316225] audit: type=1400 audit(1555042252.187:3828): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1240.318370] audit: type=1400 audit(1555042252.187:3829): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1240.320364] audit: type=1400 audit(1555042252.187:3830): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1241.392335] audit: type=1400 audit(1555042253.267:3831): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1241.394360] audit: type=1400 audit(1555042253.267:3832): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1243.631892] audit_printk_skb: 24 callbacks suppressed
[ 1243.631902] audit: type=1400 audit(1555042255.507:3841): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1243.633913] audit: type=1400 audit(1555042255.507:3842): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1243.635865] audit: type=1400 audit(1555042255.507:3843): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1243.637763] audit: type=1400 audit(1555042255.507:3844): avc:  denied  { net_admin } for  pid=2117 comm="syz-executor.1" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[ 1248.400701] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1432.720662] INFO: task syz-executor.2:3850 blocked for more than 140 seconds.
[ 1432.720670]       Not tainted 4.9.141+ #1
[ 1432.720672] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1432.720692] syz-executor.2  D28920  3850   2119 0x80000002
[ 1432.720709]  ffff8801d615df00 0000000000000000 ffff8801a8c09600 ffff8801d4114740
[ 1432.720720]  ffff8801db621018 ffff8801ca2077a8 ffffffff828075c2 0000000000000000
[ 1432.720731]  ffff8801d615e7b0 ffffed003ac2bcf5 00ff8801d615df00 ffff8801db6218f0
[ 1432.720733] Call Trace:
[ 1432.720751]  [<ffffffff828075c2>] ? __schedule+0x662/0x1b10
[ 1432.720760]  [<ffffffff82808aef>] schedule+0x7f/0x1b0
[ 1432.720769]  [<ffffffff828094a3>] schedule_preempt_disabled+0x13/0x20
[ 1432.720777]  [<ffffffff8280b51d>] mutex_lock_nested+0x38d/0x900
[ 1432.720786]  [<ffffffff81d276f9>] ? tty_release+0xb79/0xe90
[ 1432.720794]  [<ffffffff8280b190>] ? mutex_trylock+0x3e0/0x3e0
[ 1432.720803]  [<ffffffff81d437e6>] ? ldsem_up_write+0x36/0x50
[ 1432.720810]  [<ffffffff81d276f9>] tty_release+0xb79/0xe90
[ 1432.720818]  [<ffffffff81d26b80>] ? session_clear_tty+0xb0/0xb0
[ 1432.720827]  [<ffffffff81510293>] __fput+0x263/0x700
[ 1432.720834]  [<ffffffff815107b5>] ____fput+0x15/0x20
[ 1432.720843]  [<ffffffff8113dc4c>] task_work_run+0x10c/0x180
[ 1432.720851]  [<ffffffff810e6c4d>] do_exit+0x78d/0x2a50
[ 1432.720859]  [<ffffffff812073b0>] ? trace_hardirqs_on+0x10/0x10
[ 1432.720867]  [<ffffffff81d3c001>] ? tty_mode_ioctl+0x931/0x980
[ 1432.720875]  [<ffffffff810e64c0>] ? release_task.part.4+0x14b0/0x14b0
[ 1432.720883]  [<ffffffff81d4377a>] ? ldsem_up_read+0x3a/0x70
[ 1432.720891]  [<ffffffff81104979>] ? __dequeue_signal+0x79/0x5f0
[ 1432.720900]  [<ffffffff81243c87>] ? debug_lockdep_rcu_enabled+0x77/0x90
[ 1432.720908]  [<ffffffff81104542>] ? recalc_sigpending+0x72/0x90
[ 1432.720916]  [<ffffffff81104fb4>] ? dequeue_signal+0xc4/0x4b0
[ 1432.720925]  [<ffffffff81ba7d7b>] ? check_preemption_disabled+0x3b/0x200
[ 1432.720933]  [<ffffffff810ed3a1>] do_group_exit+0x111/0x300
[ 1432.720940]  [<ffffffff8110eb61>] get_signal+0x4e1/0x1460
[ 1432.720949]  [<ffffffff81052aa5>] do_signal+0x95/0x1b00
[ 1432.720959]  [<ffffffff81167c85>] ? __might_sleep+0x95/0x1a0
[ 1432.720966]  [<ffffffff81d28270>] ? no_tty+0xa0/0xa0
[ 1432.720973]  [<ffffffff81243c87>] ? debug_lockdep_rcu_enabled+0x77/0x90
[ 1432.720981]  [<ffffffff81052a10>] ? setup_sigcontext+0x7d0/0x7d0
[ 1432.720988]  [<ffffffff81243c87>] ? debug_lockdep_rcu_enabled+0x77/0x90
[ 1432.720998]  [<ffffffff812a20e0>] ? do_futex+0x1a30/0x1a30
[ 1432.721008]  [<ffffffff81003dde>] ? exit_to_usermode_loop+0xbe/0x150
[ 1432.721017]  [<ffffffff81003e2e>] exit_to_usermode_loop+0x10e/0x150
[ 1432.721024]  [<ffffffff81005932>] do_syscall_64+0x3e2/0x550
[ 1432.721032]  [<ffffffff82817893>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb
[ 1432.721036] 
[ 1432.721036] Showing all locks held in the system:
[ 1432.721043] 2 locks held by khungtaskd/24:
[ 1432.721061]  #0:  (rcu_read_lock){......}, at: [<ffffffff8131c0cc>] watchdog+0x11c/0xa20
[ 1432.721077]  #1:  (tasklist_lock){.+.+..}, at: [<ffffffff813fe63f>] debug_show_all_locks+0x79/0x218
[ 1432.721095] 1 lock held by rsyslogd/1902:
[ 1432.721110]  #0:  (&f->f_pos_lock){+.+.+.}, at: [<ffffffff8156cc7c>] __fdget_pos+0xac/0xd0
[ 1432.721115] 2 locks held by getty/2029:
[ 1432.721129]  #0:  (&tty->ldisc_sem){++++++}, at: [<ffffffff82815952>] ldsem_down_read+0x32/0x40
[ 1432.721143]  #1:  (&ldata->atomic_read_lock){+.+.+.}, at: [<ffffffff81d37362>] n_tty_read+0x202/0x16e0
[ 1432.721149] 1 lock held by syz-executor.2/3850:
[ 1432.721163]  #0:  (tty_mutex){+.+.+.}, at: [<ffffffff81d276f9>] tty_release+0xb79/0xe90
[ 1432.721190] 2 locks held by syz-executor.1/14765:
[ 1432.721204]  #0:  (&tty->ldisc_sem){++++++}, at: [<ffffffff82815952>] ldsem_down_read+0x32/0x40
[ 1432.721217]  #1:  (&ldata->atomic_read_lock){+.+.+.}, at: [<ffffffff81d37362>] n_tty_read+0x202/0x16e0
[ 1432.721222] 2 locks held by syz-executor.3/14768:
[ 1432.721236]  #0:  (&tty->ldisc_sem){++++++}, at: [<ffffffff82815952>] ldsem_down_read+0x32/0x40
[ 1432.721249]  #1:  (&ldata->atomic_read_lock){+.+.+.}, at: [<ffffffff81d37362>] n_tty_read+0x202/0x16e0
[ 1432.721272] 2 locks held by syz-executor.1/24949:
[ 1432.721286]  #0:  (&tty->ldisc_sem){++++++}, at: [<ffffffff82815952>] ldsem_down_read+0x32/0x40
[ 1432.721300]  #1:  (&ldata->atomic_read_lock){+.+.+.}, at: [<ffffffff81d37362>] n_tty_read+0x202/0x16e0
[ 1432.721318] 2 locks held by syz-executor.4/31969:
[ 1432.721332]  #0:  (&tty->ldisc_sem){++++++}, at: [<ffffffff82815952>] ldsem_down_read+0x32/0x40
[ 1432.721346]  #1:  (&ldata->atomic_read_lock){+.+.+.}, at: [<ffffffff81d37362>] n_tty_read+0x202/0x16e0
[ 1432.721363] 1 lock held by init/7286:
[ 1432.721376]  #0:  (tty_mutex){+.+.+.}, at: [<ffffffff81d2bb96>] tty_open+0x476/0xdf0
[ 1432.721380] 1 lock held by init/7287:
[ 1432.721393]  #0:  (tty_mutex){+.+.+.}, at: [<ffffffff81d2bb96>] tty_open+0x476/0xdf0
[ 1432.721397] 1 lock held by init/7288:
[ 1432.721410]  #0:  (tty_mutex){+.+.+.}, at: [<ffffffff81d2bb96>] tty_open+0x476/0xdf0
[ 1432.721414] 1 lock held by init/7289:
[ 1432.721427]  #0:  (tty_mutex){+.+.+.}, at: [<ffffffff81d2bb96>] tty_open+0x476/0xdf0
[ 1432.721431] 1 lock held by init/7290:
[ 1432.721444]  #0:  (tty_mutex){+.+.+.}, at: [<ffffffff81d2bb96>] tty_open+0x476/0xdf0
[ 1432.721448] 1 lock held by init/7291:
[ 1432.721461]  #0:  (tty_mutex){+.+.+.}, at: [<ffffffff81d2bb96>] tty_open+0x476/0xdf0
[ 1432.721463] 
[ 1432.721465] =============================================
[ 1432.721465] 
[ 1432.721469] NMI backtrace for cpu 1
[ 1432.721477] CPU: 1 PID: 24 Comm: khungtaskd Not tainted 4.9.141+ #1
[ 1432.721489]  ffff8801d9907d08 ffffffff81b42e79 0000000000000000 0000000000000001
[ 1432.721499]  0000000000000001 0000000000000001 ffffffff810983b0 ffff8801d9907d40
[ 1432.721509]  ffffffff81b4df89 0000000000000001 0000000000000000 0000000000000002
[ 1432.721511] Call Trace:
[ 1432.721520]  [<ffffffff81b42e79>] dump_stack+0xc1/0x128
[ 1432.721531]  [<ffffffff810983b0>] ? irq_force_complete_move+0x330/0x330
[ 1432.721538]  [<ffffffff81b4df89>] nmi_cpu_backtrace.cold.0+0x48/0x87
[ 1432.721547]  [<ffffffff810983b0>] ? irq_force_complete_move+0x330/0x330
[ 1432.721554]  [<ffffffff81b4df1c>] nmi_trigger_cpumask_backtrace+0x12c/0x151
[ 1432.721563]  [<ffffffff810984b4>] arch_trigger_cpumask_backtrace+0x14/0x20
[ 1432.721570]  [<ffffffff8131c65d>] watchdog+0x6ad/0xa20
[ 1432.721577]  [<ffffffff8131c0cc>] ? watchdog+0x11c/0xa20
[ 1432.721585]  [<ffffffff81142c3d>] kthread+0x26d/0x300
[ 1432.721593]  [<ffffffff8131bfb0>] ? reset_hung_task_detector+0x20/0x20
[ 1432.721601]  [<ffffffff811429d0>] ? kthread_park+0xa0/0xa0
[ 1432.721608]  [<ffffffff828179c4>] ? __switch_to_asm+0x34/0x70
[ 1432.721616]  [<ffffffff811429d0>] ? kthread_park+0xa0/0xa0
[ 1432.721630]  [<ffffffff811429d0>] ? kthread_park+0xa0/0xa0
[ 1432.721637]  [<ffffffff82817a5c>] ret_from_fork+0x5c/0x70
[ 1432.721643] Sending NMI from CPU 1 to CPUs 0:
[ 1432.721730] NMI backtrace for cpu 0
[ 1432.721734] CPU: 0 PID: 27655 Comm: syz-executor.4 Not tainted 4.9.141+ #1
[ 1432.721737] task: ffff8801aa5617c0 task.stack: ffff880197528000
[ 1432.721740] RIP: 0033:[<0000000020000082>] 
c [<0000000020000082>] 0x20000082
[ 1432.721743] RSP: 002b:00007f41a68f9bd8  EFLAGS: 00000246
[ 1432.721746] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000000002
[ 1432.721750] RDX: fa2de7ff8dafd579 RSI: 0000000000000000 RDI: 00007f41a68fa608
[ 1432.721753] RBP: 000000000000000a R08: 0000000000000000 R09: 0000000000000000
[ 1432.721757] R10: 0000000000000000 R11: 0000000000000000 R12: 000000000000000b
[ 1432.721760] R13: 000000000000000c R14: 000000000000000d R15: 00000000ffffffff
[ 1432.721764] FS:  00007f41a68fa700(0000) GS:ffff8801db600000(0000) knlGS:0000000000000000
[ 1432.721767] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1432.721770] CR2: 0000000001668f48 CR3: 00000001ca25b000 CR4: 00000000001606b0
[ 1432.722662] Kernel panic - not syncing: hung_task: blocked tasks
[ 1432.722669] CPU: 1 PID: 24 Comm: khungtaskd Not tainted 4.9.141+ #1
[ 1432.722681]  ffff8801d9907cc8 ffffffff81b42e79 ffffffff82a78560 00000000ffffffff
[ 1432.722691]  0000000000000000 0000000000000001 dffffc0000000000 ffff8801d9907d88
[ 1432.722701]  ffffffff813f7125 0000000041b58ab3 ffffffff82e2b62b ffffffff813f6f66
[ 1432.722703] Call Trace:
[ 1432.722712]  [<ffffffff81b42e79>] dump_stack+0xc1/0x128
[ 1432.722719]  [<ffffffff813f7125>] panic+0x1bf/0x39f
[ 1432.722727]  [<ffffffff813f6f66>] ? add_taint.cold.5+0x16/0x16
[ 1432.722735]  [<ffffffff81b4def2>] ? nmi_trigger_cpumask_backtrace+0x102/0x151
[ 1432.722742]  [<ffffffff8131c66e>] watchdog+0x6be/0xa20
[ 1432.722749]  [<ffffffff8131c0cc>] ? watchdog+0x11c/0xa20
[ 1432.722757]  [<ffffffff81142c3d>] kthread+0x26d/0x300
[ 1432.722765]  [<ffffffff8131bfb0>] ? reset_hung_task_detector+0x20/0x20
[ 1432.722772]  [<ffffffff811429d0>] ? kthread_park+0xa0/0xa0
[ 1432.722780]  [<ffffffff828179c4>] ? __switch_to_asm+0x34/0x70
[ 1432.722787]  [<ffffffff811429d0>] ? kthread_park+0xa0/0xa0
[ 1432.722795]  [<ffffffff811429d0>] ? kthread_park+0xa0/0xa0
[ 1432.722801]  [<ffffffff82817a5c>] ret_from_fork+0x5c/0x70
[ 1432.723138] Kernel Offset: disabled