[....] Starting enhanced syslogd: rsyslogd[ 13.429136] audit: type=1400 audit(1568640288.403:4): avc: denied { syslog } for pid=1913 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.140' (ECDSA) to the list of known hosts. 2019/09/16 13:25:12 fuzzer started 2019/09/16 13:25:14 dialing manager at 10.128.0.26:38787 2019/09/16 13:25:14 syscalls: 1331 2019/09/16 13:25:14 code coverage: enabled 2019/09/16 13:25:14 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/09/16 13:25:14 extra coverage: extra coverage is not supported by the kernel 2019/09/16 13:25:14 setuid sandbox: enabled 2019/09/16 13:25:14 namespace sandbox: enabled 2019/09/16 13:25:14 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/16 13:25:14 fault injection: kernel does not have systematic fault injection support 2019/09/16 13:25:14 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/16 13:25:14 net packet injection: enabled 2019/09/16 13:25:14 net device setup: enabled 13:25:42 executing program 0: syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3ff, 0x6) write$evdev(r0, &(0x7f0000000180)=[{{0x0, 0x7530}, 0x2}], 0x11e8) 13:25:42 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='0', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000080)={&(0x7f0000000040)={'crc32c-intel\x00\x00\x00\x00\x00\x00\x00\x01\x00'}}) 13:25:42 executing program 1: ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3ff, 0x6) write$evdev(r0, &(0x7f0000000180)=[{{0x0, 0x7530}, 0x0, 0x0, 0xb02f}], 0x11e8) 13:25:42 executing program 2: syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3ff, 0x6) write$evdev(r0, &(0x7f0000000180)=[{{0x0, 0x7530}, 0x2}], 0x11e8) 13:25:42 executing program 3: socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x80000239) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvfrom(r1, &(0x7f0000000240)=""/184, 0xfffffe4c, 0x10100, 0x0, 0xfffffffffffffcff) 13:25:42 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='gid_map\x00') preadv(r0, &(0x7f0000002880)=[{&(0x7f0000000140)=""/110, 0x6e}], 0x1, 0x2) 13:25:43 executing program 5: 13:25:43 executing program 0: 13:25:43 executing program 5: 13:25:43 executing program 5: 13:25:43 executing program 1: 13:25:43 executing program 0: 13:25:43 executing program 1: 13:25:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000340)="adb438ce399f494a04ff0dcceee1a9f20b2e42bffc5b3ff0f7870f0e532aac67910f8f6b5c0528fdef7f16ffb14d1b19cfb4673a081b969513cf6727349d5ad729816feba5546ed6515307edcff99e9f"}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000740)=""/125, 0x7d, 0x0) fstat(r1, &(0x7f0000000380)) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r3 = syz_open_dev$binder(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="03630840", @ANYRES64], 0x0, 0x0, 0x0}) 13:25:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r1, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syzkaller login: [ 68.331213] binder: 2284:2286 got transaction to invalid handle [ 68.356604] binder: 2287:2288 ioctl c0306201 20000440 returned -14 [ 68.363412] binder: 2284:2286 transaction failed 29201/-22, size 0-0 line 3014 [ 68.377604] audit: type=1400 audit(1568640343.353:5): avc: denied { set_context_mgr } for pid=2284 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 68.419452] audit: type=1400 audit(1568640343.393:6): avc: denied { call } for pid=2284 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 68.445151] binder: 2284:2286 BC_FREE_BUFFER uffffffffffffffff no match [ 68.454006] binder: release 2284:2286 transaction 3 out, still active [ 68.454336] binder: 2284:2286 got transaction to invalid handle [ 68.454344] binder: 2284:2286 transaction failed 29201/-22, size 0-0 line 3014 [ 68.497032] binder: undelivered TRANSACTION_COMPLETE [ 68.506981] binder: send failed reply for transaction 3, target dead [ 68.527554] binder: send failed reply for transaction 5 to 2284:2286 [ 68.536405] binder: undelivered TRANSACTION_COMPLETE 13:25:43 executing program 2: clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) mount(0x0, &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000240)='romfs\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000380)=0x404100000001, 0xfe3f) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132441) setsockopt$inet_opts(r1, 0x0, 0x0, 0x0, 0xc2ccfead0e2486d8) [ 68.544342] binder: undelivered TRANSACTION_ERROR: 29189 13:25:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r1, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) 13:25:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x50, 0x0, &(0x7f0000000380)=[@free_buffer, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 13:25:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r2, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13:25:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000340)="adb438ce399f494a04ff0dcceee1a9f20b2e42bffc5b3ff0f7870f0e532aac67910f8f6b5c0528fdef7f16ffb14d1b19cfb4673a081b969513cf6727349d5ad729816feba5546ed6515307edcff99e9f"}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000740)=""/125, 0x7d, 0x0) fstat(r1, &(0x7f0000000380)) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r3 = syz_open_dev$binder(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="03630840", @ANYRES64], 0x0, 0x0, 0x0}) 13:25:44 executing program 4: clone(0x3040f01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x1ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) socket$inet(0x2, 0x0, 0x0) clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file1\x00') rmdir(&(0x7f0000000080)='./file0\x00') 13:25:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 69.359024] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 69.369859] binder: 2327:2334 got transaction to invalid handle [ 69.376437] binder: 2325:2333 BC_FREE_BUFFER u0000000000000000 no match [ 69.387945] binder: 2327:2334 transaction failed 29201/-22, size 0-0 line 3014 [ 69.389065] binder: 2328:2332 ioctl c0306201 20000440 returned -14 [ 69.392814] binder: 2325:2333 got reply transaction with no transaction stack 13:25:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xb, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0063404001000000000000"], 0x1, 0x0, &(0x7f0000000340)="ad"}) syz_open_dev$binder(0x0, 0x0, 0x802) 13:25:44 executing program 2: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000780)='./file0\x00', 0x0, 0x0) clone(0x2000003102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/keycreate\x00') execve(&(0x7f00000001c0)='./file1\x00', 0x0, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="cb", 0x1}], 0x1, 0x0) open$dir(&(0x7f00000000c0)='./file1\x00', 0x141040, 0x25) open$dir(&(0x7f0000000200)='./file0\x00', 0x841, 0x0) 13:25:44 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) [ 69.392823] binder: 2325:2333 transaction failed 29201/-71, size 0-0 line 2922 [ 69.416679] binder: undelivered TRANSACTION_ERROR: 29201 13:25:44 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000033c0)={0x1, &(0x7f0000003400)=[{0x16}]}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000033c0)={0x1, &(0x7f0000003400)=[{0x16}]}, 0x10) 13:25:44 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b40)='oom_adj\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000380)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\x8e\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4D\x0f\xd3Vtd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\xb7\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x92\xf2\x86a\xd5\xb7p\xa6\t\x18@\x12\x8f\xe2\x06\xca\x82\x03\xd1\x12\xecQ%\xaao\x8c\xc6\xb81\x16\xfd;/\xe8\x12H\x91\xe6c\xba\xb7\xd0\x96\x13m\x8a:s\xaf\xc1\x14\xf8\xb9;:y\x9c\xaf-\xfej\xfck\xa7/') sendfile(r0, r1, 0x0, 0x80000000003ff) 13:25:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done], 0x0, 0x0, 0x0}) 13:25:44 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2a, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/26, @ANYPTR, @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) [ 69.452069] binder: 2327:2343 BC_FREE_BUFFER uffffffffffffffff no match [ 69.454576] binder: 2347:2352 got transaction to invalid handle [ 69.454584] binder: 2347:2352 transaction failed 29201/-22, size 0-0 line 3014 [ 69.458462] binder: 2347:2356 got transaction to invalid handle [ 69.458471] binder: 2347:2356 transaction failed 29201/-22, size 0-0 line 3014 13:25:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done], 0x0, 0x0, 0x0}) [ 69.544456] binder: release 2327:2343 transaction 9 out, still active [ 69.548632] binder: 2369:2370 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 69.551540] binder: 2366:2371 got transaction with invalid data ptr [ 69.551610] binder: 2366:2371 transaction failed 29201/-14, size 8192-0 line 3155 [ 69.569030] binder: BINDER_SET_CONTEXT_MGR already set [ 69.569037] binder: 2366:2371 ioctl 40046207 0 returned -16 [ 69.569132] binder_alloc: 2366: binder_alloc_buf, no vma 13:25:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000040)=0x13, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0x90, r3, 0x21, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x74, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @activeport={{0xfe8c, 0x1, 'activeport\x00'}, {0x8}, {0x8}}}]}}]}, 0x90}}, 0x0) 13:25:44 executing program 4: syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x6) write$evdev(r0, &(0x7f0000000180)=[{{0x0, 0x7530}}], 0x11e8) 13:25:44 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b40)='oom_adj\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000380)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\x8e\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4D\x0f\xd3Vtd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\xb7\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x92\xf2\x86a\xd5\xb7p\xa6\t\x18@\x12\x8f\xe2\x06\xca\x82\x03\xd1\x12\xecQ%\xaao\x8c\xc6\xb81\x16\xfd;/\xe8\x12H\x91\xe6c\xba\xb7\xd0\x96\x13m\x8a:s\xaf\xc1\x14\xf8\xb9;:y\x9c\xaf-\xfej\xfck\xa7/') sendfile(r0, r1, 0x0, 0x80000000003ff) 13:25:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done], 0x0, 0x0, 0x0}) 13:25:44 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b40)='oom_adj\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000380)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\x8e\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4D\x0f\xd3Vtd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\xb7\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x92\xf2\x86a\xd5\xb7p\xa6\t\x18@\x12\x8f\xe2\x06\xca\x82\x03\xd1\x12\xecQ%\xaao\x8c\xc6\xb81\x16\xfd;/\xe8\x12H\x91\xe6c\xba\xb7\xd0\x96\x13m\x8a:s\xaf\xc1\x14\xf8\xb9;:y\x9c\xaf-\xfej\xfck\xa7/') sendfile(r0, r1, 0x0, 0x80000000003ff) [ 69.569170] binder: 2366:2372 transaction failed 29189/-3, size 8192-0 line 3137 [ 69.581055] binder: 2375:2376 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 69.651167] audit: type=1400 audit(1568640344.623:7): avc: denied { create } for pid=2379 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 69.680839] binder: 2384:2386 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 69.690945] audit: type=1400 audit(1568640344.663:8): avc: denied { setopt } for pid=2379 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 69.705251] binder: undelivered TRANSACTION_COMPLETE [ 69.705523] binder: undelivered TRANSACTION_ERROR: 29189 [ 69.714898] binder: undelivered TRANSACTION_ERROR: 29201 [ 69.715224] binder: send failed reply for transaction 9, target dead [ 69.743691] audit: type=1400 audit(1568640344.713:9): avc: denied { ioctl } for pid=2379 comm="syz-executor.5" path="socket:[7016]" dev="sockfs" ino=7016 ioctlcmd=8933 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 69.774989] audit: type=1400 audit(1568640344.743:10): avc: denied { write } for pid=2379 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 69.807276] audit: type=1400 audit(1568640344.783:11): avc: denied { read } for pid=2379 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 13:25:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000340)="adb438ce399f494a04ff0dcceee1a9f20b2e42bffc5b3ff0f7870f0e532aac67910f8f6b5c0528fdef7f16ffb14d1b19cfb4673a081b969513cf6727349d5ad729816feba5546ed6515307edcff99e9f"}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000740)=""/125, 0x7d, 0x0) fstat(r1, &(0x7f0000000380)) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r3 = syz_open_dev$binder(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r4 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="03630840", @ANYRES64=r4], 0x0, 0x0, 0x0}) 13:25:44 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b40)='oom_adj\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000380)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\x8e\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4D\x0f\xd3Vtd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\xb7\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x92\xf2\x86a\xd5\xb7p\xa6\t\x18@\x12\x8f\xe2\x06\xca\x82\x03\xd1\x12\xecQ%\xaao\x8c\xc6\xb81\x16\xfd;/\xe8\x12H\x91\xe6c\xba\xb7\xd0\x96\x13m\x8a:s\xaf\xc1\x14\xf8\xb9;:y\x9c\xaf-\xfej\xfck\xa7/') sendfile(r0, r1, 0x0, 0x80000000003ff) 13:25:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r1, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r3 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) 13:25:44 executing program 5: mlockall(0x1) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='numa_maps\x00') mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0xb, 0x0) 13:25:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') preadv(r1, &(0x7f0000002880)=[{&(0x7f0000000140)=""/110, 0x2a2}, {&(0x7f00000001c0)=""/74, 0x4a}, {&(0x7f0000002300)=""/146, 0x92}], 0x3, 0x0) 13:25:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/11, 0xb3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) clone(0x3fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r1, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) shutdown(r2, 0x0) 13:25:44 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r1, 0x208204) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0) r3 = open(&(0x7f0000000240)='./bus\x00', 0x40002, 0x0) write$binfmt_misc(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="b5"], 0x1) sendfile(r2, r3, 0x0, 0x9001) 13:25:44 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b40)='oom_adj\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000000003ff) 13:25:44 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) [ 69.932050] binder: 2410:2413 got transaction to invalid handle [ 69.943108] binder_alloc: 2406: binder_alloc_buf, no vma [ 69.953266] binder: 2410:2413 transaction failed 29201/-22, size 0-0 line 3014 [ 69.964628] binder: 2406:2415 transaction failed 29189/-3, size 0-0 line 3137 13:25:44 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b40)='oom_adj\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000000003ff) 13:25:45 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x12b002, 0x0) write$UHID_DESTROY(r0, 0x0, 0x0) [ 69.987216] binder: 2410:2413 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer [ 70.002555] binder: 2406:2428 ioctl c0306201 0 returned -14 [ 70.014501] binder: 2410:2413 got transaction to invalid handle [ 70.027092] binder_alloc: 2410: binder_alloc_buf, no vma 13:25:45 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b40)='oom_adj\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000000003ff) [ 70.036017] binder: release 2410:2413 transaction 19 out, still active [ 70.043681] binder: 2410:2413 transaction failed 29201/-22, size 0-0 line 3014 [ 70.052664] binder: undelivered TRANSACTION_COMPLETE [ 70.056070] binder: BINDER_SET_CONTEXT_MGR already set [ 70.056077] binder: 2406:2428 ioctl 40046207 0 returned -16 [ 70.056266] binder_alloc: 2406: binder_alloc_buf, no vma [ 70.056304] binder: 2406:2415 transaction failed 29189/-3, size 0-0 line 3137 [ 70.056350] binder: 2406:2428 ioctl c0306201 0 returned -14 13:25:45 executing program 2: openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) 13:25:45 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/fscreate\x00') write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10}, 0x10) 13:25:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat, @flat, @flat=@handle}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:25:45 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\x8e\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4D\x0f\xd3Vtd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\xb7\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x92\xf2\x86a\xd5\xb7p\xa6\t\x18@\x12\x8f\xe2\x06\xca\x82\x03\xd1\x12\xecQ%\xaao\x8c\xc6\xb81\x16\xfd;/\xe8\x12H\x91\xe6c\xba\xb7\xd0\x96\x13m\x8a:s\xaf\xc1\x14\xf8\xb9;:y\x9c\xaf-\xfej\xfck\xa7/') sendfile(0xffffffffffffffff, r0, 0x0, 0x80000000003ff) 13:25:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 70.088335] binder: 2410:2432 transaction failed 29189/-3, size 0-0 line 3137 [ 70.106945] binder: send failed reply for transaction 19, target dead [ 70.114326] binder: undelivered TRANSACTION_ERROR: 29189 [ 70.121666] binder: undelivered TRANSACTION_ERROR: 29189 [ 70.145953] binder: 2450:2455 transaction failed 29189/-22, size 72-24 line 3014 [ 70.157002] binder: undelivered TRANSACTION_ERROR: 29189 [ 70.174024] binder: undelivered TRANSACTION_ERROR: 29189 [ 70.176845] audit: type=1401 audit(1568640345.153:12): op=fscreate invalid_context=100000000000000000000000000000 [ 70.191905] binder: 2452:2458 transaction failed 29189/-22, size 0-0 line 3014 [ 70.202259] binder: undelivered TRANSACTION_ERROR: 29189 [ 70.208471] binder: 2452:2462 transaction failed 29189/-22, size 0-0 line 3014 [ 70.216554] binder: undelivered TRANSACTION_ERROR: 29189 13:25:45 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') preadv(r1, &(0x7f0000002880)=[{&(0x7f0000000140)=""/110, 0x6e}, {&(0x7f00000001c0)=""/74, 0x4a}], 0x2, 0x0) 13:25:45 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\x8e\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4D\x0f\xd3Vtd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\xb7\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x92\xf2\x86a\xd5\xb7p\xa6\t\x18@\x12\x8f\xe2\x06\xca\x82\x03\xd1\x12\xecQ%\xaao\x8c\xc6\xb81\x16\xfd;/\xe8\x12H\x91\xe6c\xba\xb7\xd0\x96\x13m\x8a:s\xaf\xc1\x14\xf8\xb9;:y\x9c\xaf-\xfej\xfck\xa7/') sendfile(0xffffffffffffffff, r0, 0x0, 0x80000000003ff) 13:25:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x2000021c) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendto$unix(r1, 0x0, 0x37e, 0x80020003ffc, &(0x7f0000000000)=@file={0x0, './file1\x00'}, 0x6e) connect$unix(r1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 13:25:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 13:25:45 executing program 0: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) 13:25:45 executing program 5: r0 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000740)=""/125, 0x7d, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) 13:25:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000200)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 13:25:45 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\x8e\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4D\x0f\xd3Vtd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\xb7\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x92\xf2\x86a\xd5\xb7p\xa6\t\x18@\x12\x8f\xe2\x06\xca\x82\x03\xd1\x12\xecQ%\xaao\x8c\xc6\xb81\x16\xfd;/\xe8\x12H\x91\xe6c\xba\xb7\xd0\x96\x13m\x8a:s\xaf\xc1\x14\xf8\xb9;:y\x9c\xaf-\xfej\xfck\xa7/') sendfile(0xffffffffffffffff, r0, 0x0, 0x80000000003ff) 13:25:45 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000340)="adb438ce399f494a04ff0dcceee1a9f20b2e42bffc5b3ff0f7870f0e532aac67910f8f6b5c0528fdef7f16ffb14d1b19cfb4673a081b969513cf6727349d5ad729816feba5546ed6515307edcff99e9f"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000740)=""/125, 0x7d, 0x0) fstat(0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binder(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) 13:25:45 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000340)=0x3, 0x4) r1 = dup(r0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0xfffffffffffffe77) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x198, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX3(0xffffffffffffffff, 0x541c, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0xfffffea8, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) mknod(0x0, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x382, 0x4) ftruncate(r2, 0x2007fff) [ 70.748510] binder: 2471:2474 ioctl c0306201 0 returned -14 13:25:45 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20000) r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') setns(r0, 0x0) 13:25:45 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\x8e\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4D\x0f\xd3Vtd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\xb7\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x92\xf2\x86a\xd5\xb7p\xa6\t\x18@\x12\x8f\xe2\x06\xca\x82\x03\xd1\x12\xecQ%\xaao\x8c\xc6\xb81\x16\xfd;/\xe8\x12H\x91\xe6c\xba\xb7\xd0\x96\x13m\x8a:s\xaf\xc1\x14\xf8\xb9;:y\x9c\xaf-\xfej\xfck\xa7/') sendfile(r0, r1, 0x0, 0x80000000003ff) 13:25:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x1f, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/23, @ANYPTR=&(0x7f0000000380)=ANY=[]], 0x0, 0x0, 0x0}) [ 70.827966] binder: 2486:2497 got transaction to invalid handle [ 70.828512] binder: 2489:2494 transaction failed 29189/-22, size 0-0 line 3014 [ 70.829793] binder: undelivered TRANSACTION_ERROR: 29189 [ 70.852286] binder: 2489:2500 transaction failed 29189/-22, size 0-0 line 3014 [ 70.871029] binder_alloc: 2505: binder_alloc_buf, no vma 13:25:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3a, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a6273000000000000000000000000000000000080"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x0, 0x0, 0x0}) 13:25:45 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\x8e\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4D\x0f\xd3Vtd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\xb7\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x92\xf2\x86a\xd5\xb7p\xa6\t\x18@\x12\x8f\xe2\x06\xca\x82\x03\xd1\x12\xecQ%\xaao\x8c\xc6\xb81\x16\xfd;/\xe8\x12H\x91\xe6c\xba\xb7\xd0\x96\x13m\x8a:s\xaf\xc1\x14\xf8\xb9;:y\x9c\xaf-\xfej\xfck\xa7/') sendfile(r0, r1, 0x0, 0x80000000003ff) [ 70.881628] binder: undelivered TRANSACTION_ERROR: 29189 [ 70.891103] binder: 2505:2507 transaction failed 29189/-3, size 0-0 line 3137 [ 70.907885] binder: 2486:2497 transaction failed 29201/-22, size 0-0 line 3014 [ 70.918601] binder_alloc: 2509: binder_alloc_buf size 414331165718093896 failed, no address space [ 70.929343] binder: undelivered TRANSACTION_ERROR: 29189 [ 70.934095] binder: BINDER_SET_CONTEXT_MGR already set [ 70.934104] binder: 2505:2515 ioctl 40046207 0 returned -16 [ 70.942242] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 70.942284] binder: 2509:2511 transaction failed 29201/-28, size 252201579132747848-162129586585346048 line 3137 [ 70.956973] binder: BINDER_SET_CONTEXT_MGR already set [ 70.956980] binder: 2509:2511 ioctl 40046207 0 returned -16 13:25:45 executing program 5: r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/member\x00', 0x2, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f0000001700)='J', 0x1}], 0x1) 13:25:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x1f, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/23, @ANYPTR=&(0x7f0000000380)=ANY=[]], 0x0, 0x0, 0x0}) 13:25:45 executing program 0: 13:25:45 executing program 5: 13:25:45 executing program 2: 13:25:46 executing program 0: 13:25:46 executing program 5: 13:25:46 executing program 1: 13:25:46 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) [ 70.957078] binder_alloc: 2509: binder_alloc_buf, no vma [ 70.957115] binder: 2509:2517 transaction failed 29189/-3, size 252201579132747848-162129586585346048 line 3137 [ 71.005829] binder_alloc: 2519: binder_alloc_buf, no vma 13:25:46 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\x8e\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4D\x0f\xd3Vtd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\xb7\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x92\xf2\x86a\xd5\xb7p\xa6\t\x18@\x12\x8f\xe2\x06\xca\x82\x03\xd1\x12\xecQ%\xaao\x8c\xc6\xb81\x16\xfd;/\xe8\x12H\x91\xe6c\xba\xb7\xd0\x96\x13m\x8a:s\xaf\xc1\x14\xf8\xb9;:y\x9c\xaf-\xfej\xfck\xa7/') sendfile(r0, r1, 0x0, 0x80000000003ff) 13:25:46 executing program 0: 13:25:46 executing program 1: 13:25:46 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b40)='oom_adj\x00') r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000000003ff) [ 71.066661] binder: 2519:2522 transaction failed 29189/-3, size 0-0 line 3137 13:25:46 executing program 4: 13:25:46 executing program 5: 13:25:46 executing program 1: 13:25:46 executing program 2: 13:25:46 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b40)='oom_adj\x00') r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000000003ff) 13:25:46 executing program 0: 13:25:46 executing program 5: 13:25:46 executing program 4: 13:25:46 executing program 2: 13:25:46 executing program 0: 13:25:46 executing program 1: 13:25:46 executing program 4: 13:25:46 executing program 5: 13:25:46 executing program 1: 13:25:46 executing program 2: 13:25:46 executing program 0: 13:25:46 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b40)='oom_adj\x00') r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000000003ff) 13:25:46 executing program 5: 13:25:46 executing program 4: 13:25:46 executing program 2: 13:25:46 executing program 1: 13:25:46 executing program 2: 13:25:46 executing program 0: 13:25:46 executing program 4: 13:25:46 executing program 1: 13:25:46 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b40)='oom_adj\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000380)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\x8e\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4D\x0f\xd3Vtd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\xb7\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x92\xf2\x86a\xd5\xb7p\xa6\t\x18@\x12\x8f\xe2\x06\xca\x82\x03\xd1\x12\xecQ%\xaao\x8c\xc6\xb81\x16\xfd;/\xe8\x12H\x91\xe6c\xba\xb7\xd0\x96\x13m\x8a:s\xaf\xc1\x14\xf8\xb9;:y\x9c\xaf-\xfej\xfck\xa7/') sendfile(0xffffffffffffffff, r0, 0x0, 0x80000000003ff) 13:25:46 executing program 5: 13:25:46 executing program 0: 13:25:46 executing program 4: 13:25:46 executing program 2: 13:25:46 executing program 0: 13:25:46 executing program 5: 13:25:46 executing program 1: 13:25:46 executing program 4: 13:25:46 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b40)='oom_adj\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000380)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\x8e\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4D\x0f\xd3Vtd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\xb7\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x92\xf2\x86a\xd5\xb7p\xa6\t\x18@\x12\x8f\xe2\x06\xca\x82\x03\xd1\x12\xecQ%\xaao\x8c\xc6\xb81\x16\xfd;/\xe8\x12H\x91\xe6c\xba\xb7\xd0\x96\x13m\x8a:s\xaf\xc1\x14\xf8\xb9;:y\x9c\xaf-\xfej\xfck\xa7/') sendfile(0xffffffffffffffff, r0, 0x0, 0x80000000003ff) 13:25:46 executing program 2: 13:25:46 executing program 1: 13:25:46 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="240000000b061f001cfffd946fa282002020e9ff9543b1385b0900010001e700000000a3", 0x24}], 0x1}, 0x0) 13:25:46 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = inotify_init() r4 = epoll_create(0x82002) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00007a8000)) 13:25:46 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x0, 0x5010, 0x0) 13:25:46 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b40)='oom_adj\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000380)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\x8e\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4D\x0f\xd3Vtd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\xb7\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x92\xf2\x86a\xd5\xb7p\xa6\t\x18@\x12\x8f\xe2\x06\xca\x82\x03\xd1\x12\xecQ%\xaao\x8c\xc6\xb81\x16\xfd;/\xe8\x12H\x91\xe6c\xba\xb7\xd0\x96\x13m\x8a:s\xaf\xc1\x14\xf8\xb9;:y\x9c\xaf-\xfej\xfck\xa7/') sendfile(0xffffffffffffffff, r0, 0x0, 0x80000000003ff) 13:25:46 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000004061f001cfffd946fa282002020e9ff9543b1385b0900010001e700000000a3", 0x24}], 0x1}, 0x0) 13:25:46 executing program 1: [ 71.536572] binder: undelivered TRANSACTION_ERROR: 29189 [ 71.568726] binder: undelivered TRANSACTION_ERROR: 29189 13:25:46 executing program 1: 13:25:46 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b40)='oom_adj\x00') syz_open_procfs(0x0, &(0x7f0000000380)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\x8e\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4D\x0f\xd3Vtd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\xb7\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x92\xf2\x86a\xd5\xb7p\xa6\t\x18@\x12\x8f\xe2\x06\xca\x82\x03\xd1\x12\xecQ%\xaao\x8c\xc6\xb81\x16\xfd;/\xe8\x12H\x91\xe6c\xba\xb7\xd0\x96\x13m\x8a:s\xaf\xc1\x14\xf8\xb9;:y\x9c\xaf-\xfej\xfck\xa7/') sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000000003ff) 13:25:46 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000007061f001cfffd946fa282002020e9ff9543b1385b0900010001e700000000a3", 0x24}], 0x1}, 0x0) 13:25:46 executing program 5: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r0, &(0x7f0000000140)=""/178, 0xb2) [ 71.607529] audit: type=1400 audit(1568640346.583:13): avc: denied { create } for pid=2616 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 71.618486] binder: undelivered TRANSACTION_ERROR: 29201 [ 71.618606] binder: undelivered TRANSACTION_ERROR: 29201 13:25:46 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x24, &(0x7f0000000040)=@gcm_128={{}, "b6b59b65c6ede2d8", "3d4fed428c65eef8415b2ec9dbeaabd3", "8b549462", "ed0272b11043523b"}, 0x28) 13:25:46 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="240000000c061f001cfffd946fa282002020e9ff9543b1385b0900010001e700000000a3", 0x24}], 0x1}, 0x0) 13:25:46 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3ff, 0x6) write$evdev(r0, &(0x7f0000000180)=[{{0x0, 0x7530}, 0x2, 0x0, 0xb02f}], 0x11e8) 13:25:46 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b40)='oom_adj\x00') syz_open_procfs(0x0, &(0x7f0000000380)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\x8e\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4D\x0f\xd3Vtd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\xb7\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x92\xf2\x86a\xd5\xb7p\xa6\t\x18@\x12\x8f\xe2\x06\xca\x82\x03\xd1\x12\xecQ%\xaao\x8c\xc6\xb81\x16\xfd;/\xe8\x12H\x91\xe6c\xba\xb7\xd0\x96\x13m\x8a:s\xaf\xc1\x14\xf8\xb9;:y\x9c\xaf-\xfej\xfck\xa7/') sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000000003ff) 13:25:46 executing program 4: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREAD(r0, &(0x7f0000001700)={0xeb0, 0x75, 0x0, {0xea5, "c8f3a80521451ae046173393b3b383aa06aae34325eba694c9c4d913585f7958c92f2eb93e4e32557b7693471650529fbf6db2f8704447c79cd069851a17800bfc154b427fcf28b703d511914666045774bccc9773ece185001ac1a7fdebea0a5935f97d8d473c4367f6dea589d3b4bc3c022ccea761cbea77181acaee42d7d6aa01860d1007c250225de687a2d6036c0660d49fb3775c9ffe963f5888814afb54c9db7f2345890b12bf9bdd1cf4a1d37a3c0508c857ae2ad36d85b84aa2d872447458a974109c00592b917470730c5f05fc4044629d858e3112751b87085f8cd7935ae3ec5f922cd56096eec99cadb860665d83b5dc621d28468b27e0990d9d81e208abd304bcdef1cbeb8e8e78a6cd40cf9efe60bda3be77c95bd7cbc11a1843f2e0e7e29d521291c6ef1f9007ee214b7cc55e2d4e46266a0640c0c53719ad5d38d1c254a882eb93eafef649dd3ae1fdbb8933dc313c502b97da07de7cdabddbbf69ed5f8d5212e14d1c7fa71ed0e4a0f9273ca942c7c9ebb818389b7def1cc6e913ce9acdaabe0e66092351054763c375cc9015f252d8febb41c0f81f2f2be3d902905a1ebe01fc35e6f7f64fbdd8e961203df0d38c13eb58d7d928c86aa1aa1e0d54fe0df62ce1cb99c5773214e9852bb2d5c9e17524de4f7016def0997c48f21adff5f3cb4dc810865275c46a1f4f92784305a14eee5c8186782097aa7f6c429d598f11da96441c5c172b3fe1b9707ebb5842ac1705cfcfcf4a729a97e0b16ab93e9670bf3852f0d4ffbcf87d7f448a1229a18ae05479d340101e5b472b3ed766127e5c3c97b37e6b61137b91014b7fff5c382089bfef476368f0851a03d4a5c0ab78f71283685f2a8ebb6126e167bf028ed806211bd6bb6075df20769a14cfb3658adc98433f7e002f88ed1daf8a79e28313e295478f77eb233bd21143790fb74c603eaa55ad0f4d8726fd76a3e7af71757c3ca3be1cbddce4e2e159160ee2deae842c17f40acafe60addd84a6a4d7ecb4b6c9f86e44fc9588084f09bfeb0c38c3dd8c329881c5d612ede25da0dd1d91cd575192c9e307690fd4bfbfbee92b119b898fac60aef75fa36dc26a25bb724a65b13e3cae04cad5a6ba03b1252ec8283069deac713161433fbe7ef99cdcf2ae1bdc1cfef04ac70b5b081b8555139e6dfe8834b7b5b510c209adcc14a7919c5b1cefe07964de3ea54cfa211912e3532ad260f5fe7b8bdbd6f2e197525bd372a320681cb58a4cc336f550d57a6ad348a7e42c2a19b3e2c6dbf07ccd41c216d92de0b3d102024a7f3fc566a29a7ae75b3b372c95cd29318d6e340175b30eff0342947e9d8fd5ed87172b0300ba5262519cd103cf4f850c383d8302b3c5f910351e88f14cf602ac220299dd9cf94b90b8a58781608706d44d20e78d50b2cc34b79d4eb52f643053c385ce311c0e407adfadecec15538efecaff5f5e9298a91f0a68026f16a398b885d1876bd7631544c8c74873a76a1e799e8f4cd9ceed3750e09df212df038bc0a178213058fb428ff7d2a40ea769c700d01a8120723bd5e78ce173a0d62213373b88e2a0574b81e92ef5eb2dc977be813a55d08bdbda89919fac6d7f78fbce4a5a25488c787704c58cb13a902754077a21c3f3eecd55bef5e671486f0c7f938622d7f94cc3f97f997cebab3df069b681b6e05241f7a4e5fae6b87457b654bd7095f65fba1c7887b4c0aebb8b9020f7341715d38c2ae1221264e075d725ea26406dad1ca3784dd9c8c39ba96489903581ad528b87fb4c84c4723bb96917a7177ebf715bb99f932cdcec04fe8c60851140a04baccba8c0f6f0eb552a298fd46f4cdbaee240b8a9a68bfeb8ec2f860aad63b6e67e64ef7e07ec307c7d126b15af1a0e26979be28ed84489a47b7f4477855097b465048df8d86021c529f5a1714dce69e0ef40e0312500f9276a034c37d00b96def5a40b7d06f33494a6296a777b8857e10fd43d010852b9cf164c2be92c308d9ae4c6861554f774a88d568f189ecf867dcb0f7423695c63e5fa7c26c234a3482c85c5616b8a1bf499da8cb75547f42702db745a09883925b919695631e0984687d7f70c774cfa57e017d7401b6cba6b0d65a90794b56bb9490c9ff1d8ccec1b5e2aeae43a64b3f6a44f7b678cdab4c172b82e227633e000aa684e3741d9a5ecf473d16cad932f1f80829b1b35729958cb4eac86fb22478dbc58f97814e0a8895eb09506b1b9dcaa86a9392589b7d06650c41b5e3b0ebf92b8fedd9a72e9fd3bf6b4e74eafc290e2d85aabe374ca48d665e58112ce72b80d0db13f49306f17cec93f82d889502f68fb9781a6e5ef56dc1e49cd0820c1cfba7d084e9488f11918a3badec27452e9f0ace1f54fb7a9cea8afcb3cc1c8a44bc918b735c056196fea079d3e4b490bf53ed685d19f39fa702c2bcddc11e254b911dfc7a40475d7824af88eb64fe49a27e692389164257c3bbe8e144f6e113dd8ab92713f2c48968e7e5efc33ffc58a9cdd02b8191f845eefc415aaede364d3e09ea2e13fe41d0d919513b4afd20870199874021ea3f4b26e9b4cae8f4af46153deda0b12bc136a8aaf2b58798ea90d872802947de49e554e56a50228e3e07a7d7753eb33c95a0b6422f1d7bf67e2ff81fb4b211685b1f0a96e97af537b7b8bae95e064ba30f5b46b9382318e4108be5e0d38364114b97c4ac5b00af72b7f154fe8552b1d8b5448a63c5a82394b100df14b378f736344a3003fb03f9c6c9bb9db8e6b2b256cd40740820eb359349a29c611f30e58a60d25834fda487e6f704a041da9dad2086f45914e22cfd85917d5894eb809311c7ffe2e6359cdcbb8583654f7fcdf647a91550ad5a3559a65c308b18039e90157ca181c0b4a6d70576921ed81d77fdfdc5428a71c49db0b596d7fc879792f98952b12359471880eb95b4195d3b1de5850838df8f67243bb0796efb934f6b24c2e29cdd59815d45f0e4414c7d134a28556b18b71ac8090e66247937121c6ce53bfa40fccd7db20f9359ac2ff2b649a59575e56dd9ee1681c010fabaa2e177c80f0a38f0c37e22fb889644f4b1b6632af55f56105a9764611a9e45cbfd5928f50a74225aef70076e07459d0a0aa4a152ae64d41def6f3988e4c2f2c9bb3e8160f9a371ddda66890c527a75237d3c23257881625f34c8e5c2108c09fb200b52a81b7f8c621af98efd8f91ae6900756069eb90d9917d21e388f400a412601d8f12f1b2460feb9a1df1763090fd2c9376eaa5771390224a989b8ba625f5fc406a91e19d6c454d2e926ecedae2791a7401d330e6dae5c2e2228d7f3548228280b42437eccbe4c870ac1b2cd446f9b4ca535de95c4b74c349449d42498e0f1ca8a4ec109b5a05087566e734a362832130306b370cd35a5e08b8bf201a5b45a742e823d4e09ccf1294d71b31163628a853a2a38935a2e3e378f5bbe6197ec774eafe3164eab43b8abab9e2af12461d313c0c558aab3a748a0cec0ddc374dbcbeccc619adbd6f6b075a6471409d7ddc17c18a247044ea2b060d8f6d2cde606606f0a0346100461eba4578687a11d0f88082bd3b5d6009f027c32d13be8060c32c897ca6ae25c0ed9c812bba52bf9e5cf922cfe5e042365e30d6cfa14b28ccf20c5d79015b87df488dd6c27f82904667c089ed8b18e5e671277a2c18004c3377549b1723ab30d9b12b6fbeee02f29a979240770bdd5d4d694efdda42676d6f6efd436a68da9ade0c296a205a03d468561c949692a16325cbc9a6362c7e1cafea2ab439c9cde8303ca16699a444e433b870b5286d3c0db02c2636d08784a001d9680388658626130c7530cef6903755ebeacf0353ac7da1def383b9201718595839ae11385fdba7f7f23c0c8f577857407308625b9f832b39492dec24823b4820cd8f89992eb935bda928f9080361d3121c6a1b9593b720a0a61eb682f6cfddce51a977b7af8fbaf9603f2134695b8a7b77ddec1b0b7243a05cd60a007d4579599b8a93b989621010c4b9d3221bc05c3a3e3f72f182bdd704117398e2fb9c9b66731332090aa547f16ab677aba9beb543ecb504f2b474c246e30ef8b2eea7150aa5216368ce235d39035cef5083085a8bf2743e0fefee2b0056c1f5bbf029ca64a6872688200da862fa5c0505075085ba6e3c976aa098de031ec3e408e99d06b63934e95059f7e288acd251fd6bcb99b693cb6161b1c19ae645c9de01402e3672848fbb13fef682aa446a7aedd389ab8a986a1958452335f600aafb3ca9b2ce0e835b2c473c2c524dde10392d4ab863e074602312ded19d29369ee4ef11723957fd0aab808057e2ab5b6ff155a53ced1f0a6dff0262d9f445065c3cfd6bb70849483de789c86add4b0ab1475a9deb11811b25af040e739d261e4426f0007c26533aee63e401d8cc815989ec12f4dc951bf9204e8f6914957fb487da263c1a81e1dd695ba31875626ec80eb94b628cf41e3d751753ab04718e0fc2fe3a79500a56d97b858987bf36b8d72941884c36918afe94124f7e068edfed267415413ad7da557550329b8a59f972cda1e70b8424a906b030b6bd976121767724c95acb2a970a0e343bfc9fddc4507613d1d5b87453072b125c7714c24c408a86f8fa7363c63ec233d730856fd75c9a5f3010dd7b3ec3bbc86844fc588884aea7bdcd4c91dbe3fcd5a938f1de1269f5957516775e1426f06e47fe2226d63f0480187dfe9516cd2ba65eee1ad1e68102db9475c3077b41ba89771cf3a42668f6e5d995d61bdf00a4ceddbd4421365f175c2a51d39e32cd5684079b327962a0000cd2d2d2aae6b570e7fe1f141df5aee5bc3371b695f9cfb97457155c25bf34d20f2680ebd69f98c13ea0b5cb154647d2f509fac59a48865c7d18476ec3583c700c4d24e7ad04ae209d1ce4c607e98654d21dc4068ec49f5a6804b76dc13d086b80908e208ed9da7a290eea0ac0647e65d7a7d1b5572d1b480e142a279024864622140b901d2ada3db3426a2f87cca8558f8e59703dc1f2d63cd4601e887eab40a338dd2793b463ad1c12503774f55ad6ac138957033597456e877ad3d823dc3806e5a34ce9e293d2145d4e70dc7b30b9f2539219793d80d673eb821400e2917c4f755733c18ad67df1c5a36f318246a2142091f9c6804f33c79dbf5a7d57d533f66dac9b3b9b4d78d7045f8dedd4d2a165a21fcfe1a554b4735ad813691451ebd317fa89ffde27a7434cc1f2a720608c2cad11a26cf1b537d54d1442e1338a7ec2f5861128c526fa307ee103f02cd218830119b9f3a634fcbff63"}}, 0xeb0) read$eventfd(r0, 0x0, 0x0) 13:25:46 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) fstat(r1, &(0x7f0000000140)) 13:25:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x5, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f00000001c0)={'TPROXY\x00'}, &(0x7f0000000200)=0x1e) 13:25:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000012c0)={0x60, r2, 0x21, 0x0, 0x0, {}, [{{0x8, 0x1, r1}, {0x44, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8}}}]}}]}, 0x60}}, 0x0) 13:25:46 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') preadv(r0, &(0x7f0000002880)=[{&(0x7f0000000140)=""/110, 0x6e}], 0x1, 0x0) lseek(r0, 0x0, 0x0) 13:25:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="05dea50d5e0bcfe47bf070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000140), 0xff4d) sendfile(r3, r2, 0x0, 0x400) 13:25:46 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b40)='oom_adj\x00') syz_open_procfs(0x0, &(0x7f0000000380)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\x8e\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4D\x0f\xd3Vtd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\xb7\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x92\xf2\x86a\xd5\xb7p\xa6\t\x18@\x12\x8f\xe2\x06\xca\x82\x03\xd1\x12\xecQ%\xaao\x8c\xc6\xb81\x16\xfd;/\xe8\x12H\x91\xe6c\xba\xb7\xd0\x96\x13m\x8a:s\xaf\xc1\x14\xf8\xb9;:y\x9c\xaf-\xfej\xfck\xa7/') sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000000003ff) 13:25:46 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b40)='oom_adj\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000380)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\x8e\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4D\x0f\xd3Vtd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\xb7\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x92\xf2\x86a\xd5\xb7p\xa6\t\x18@\x12\x8f\xe2\x06\xca\x82\x03\xd1\x12\xecQ%\xaao\x8c\xc6\xb81\x16\xfd;/\xe8\x12H\x91\xe6c\xba\xb7\xd0\x96\x13m\x8a:s\xaf\xc1\x14\xf8\xb9;:y\x9c\xaf-\xfej\xfck\xa7/') sendfile(r0, r1, 0x0, 0x0) 13:25:46 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) 13:25:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") symlink(&(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000001c0)='./file0\x00') 13:25:46 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa282002020e9ff9543b1385b0900010001e700000000a3", 0x24}], 0x1}, 0x0) 13:25:46 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b40)='oom_adj\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000380)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\x8e\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4D\x0f\xd3Vtd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\xb7\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x92\xf2\x86a\xd5\xb7p\xa6\t\x18@\x12\x8f\xe2\x06\xca\x82\x03\xd1\x12\xecQ%\xaao\x8c\xc6\xb81\x16\xfd;/\xe8\x12H\x91\xe6c\xba\xb7\xd0\x96\x13m\x8a:s\xaf\xc1\x14\xf8\xb9;:y\x9c\xaf-\xfej\xfck\xa7/') sendfile(r0, r1, 0x0, 0x0) 13:25:46 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0x100000001) 13:25:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000012c0)={0x60, r2, 0x21, 0x0, 0x0, {}, [{{0x8, 0x1, r1}, {0x44, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8}}}]}}]}, 0x60}}, 0x0) 13:25:46 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x2) 13:25:46 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0x400) 13:25:47 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b40)='oom_adj\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000380)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\x8e\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4D\x0f\xd3Vtd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\xb7\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x92\xf2\x86a\xd5\xb7p\xa6\t\x18@\x12\x8f\xe2\x06\xca\x82\x03\xd1\x12\xecQ%\xaao\x8c\xc6\xb81\x16\xfd;/\xe8\x12H\x91\xe6c\xba\xb7\xd0\x96\x13m\x8a:s\xaf\xc1\x14\xf8\xb9;:y\x9c\xaf-\xfej\xfck\xa7/') sendfile(r0, r1, 0x0, 0x0) 13:25:47 executing program 5: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="240000000a061f001cfffd946fa282002020e9ff9543b1385b0900010001e700000000a3", 0x24}], 0x1}, 0x0) 13:25:47 executing program 4: clone(0x2102005ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00') exit(0x0) getdents64(r0, &(0x7f0000000340)=""/57, 0x252) 13:25:47 executing program 2: clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x4000000000000016, &(0x7f00000004c0)) ptrace(0x4206, r1) ptrace$cont(0x20, r0, 0x0, 0x0) ptrace$getsig(0x4202, r0, 0x0, &(0x7f0000000000)) 13:25:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r0, &(0x7f00000017c0), 0x1a6, 0xf0ff7f10000000) 13:25:47 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execve(0x0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x500) 13:25:47 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_buf(r0, 0x29, 0x1b, 0x0, 0x104) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2f) r2 = socket$inet6(0xa, 0x0, 0x0) fchdir(0xffffffffffffffff) getdents64(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) fchdir(0xffffffffffffffff) socket$unix(0x1, 0x0, 0x0) dup2(0xffffffffffffffff, r2) 13:25:47 executing program 4: epoll_create1(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f000067d000)=0x19, 0x4) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) 13:25:47 executing program 0: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0) write(r0, &(0x7f0000000100)="bcef1289979331510ada35f80ae3751d0dea0cb5ed530cbc038d677670019bfbbb40f5d87e661fd4c23cf48e0c96429f49f20a", 0x33) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0), 0xa5) 13:25:47 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') preadv(r0, &(0x7f0000002880)=[{&(0x7f0000000140)=""/110, 0x6e}, {&(0x7f00000001c0)=""/74, 0x4a}], 0x2, 0x0) 13:25:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') preadv(r2, &(0x7f0000002880)=[{&(0x7f0000000140)=""/110, 0x6e}, {&(0x7f00000001c0)=""/74, 0x4a}], 0x2, 0x0) 13:25:47 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, &(0x7f0000000640)) r0 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/urandom\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x3, 0x0) getrandom(&(0x7f0000000180)=""/40, 0x9db3ff6336c4215d, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@empty, @in=@multicast1}}, {{@in=@local}}}, &(0x7f0000000100)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000b80)=0xffffffffffffff8d) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tus\x00\x00\x00\x00\xdd\xe6\x00\x00@'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tus\x00\x00\x00\x00\xdd\xe6\x00\x00@'}) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@empty, @in=@multicast1}}, {{@in=@local}}}, &(0x7f0000000bc0)=0xfffffffffffffde0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000880)=0xc8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @rand_addr, @remote}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000ac0)={0x6, 0x3}) preadv(0xffffffffffffffff, &(0x7f0000000900), 0x0, 0x0) prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xc, 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000280)=0x1f) pipe2(&(0x7f0000000c40), 0x0) r2 = syz_open_procfs(0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@empty, @in=@multicast1}}, {{@in=@local}}}, &(0x7f0000000100)=0xe8) 13:25:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r0, 0x0, 0xffffffffffffff97) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket(0x2, 0x3, 0xff) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) getpeername$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c) r3 = open(&(0x7f0000000000)='./file0\x00', 0x42, 0x0) ftruncate(r3, 0x8007ffc) sendfile(r2, r3, 0x0, 0xffff) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r4, &(0x7f0000000680)={0x7}, 0xffffff50) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000440)={'lo\x00'}) listxattr(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)=""/178, 0xb2) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) 13:25:47 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000140)=0x33, 0x4) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x72, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e26, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket(0x0, 0x80, 0x5) r3 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r3) r4 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082) dup2(r1, r2) r5 = memfd_create(&(0x7f0000000340)='}#*nodevem0\xb7,\x00~\x82\xec\x8b$\x85`\xc4\xeb\x86\xder\xa3\xd1-\xd2a|&\x04\xf3\x9bf\x12#\x80\xb2uI\xd4Z\xe8', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r5) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x6, 0x11, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000000)=0x2) ppoll(0x0, 0x0, 0x0, 0x0, 0x360) fcntl$setstatus(r3, 0x4, 0x0) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000dc0)=ANY=[], 0x0) read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r4, r5, 0x0, 0x80005) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f00000001c0)=0xc) r9 = syz_open_procfs(r8, &(0x7f00000004c0)='net/ip_vs\x00') io_setup(0xad, &(0x7f0000000080)=0x0) io_cancel(r10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x8, 0x4, r6, &(0x7f0000000580)="58074b5980a76ad4189816b4a0e21cca8eb8c1fb1b7e488a77e63b64c7bf6487a80572f67e317a32849785991d899198cdde40e5fd51a2d03b4b87b9c2a6521356c56d5487bf14c3bcd76c5b22fcf232b5da42b68972c9e9c2377057d61a2f9dfcbc2aa4ef5ef9dd1a82cf6fec85ea3a8e881ccf455f7f6809bac7191ab3f624564d744d60b3a9602d31baf923a3733e04c42f822d93ca0dc554135c4b08e4db36c86c0d12b524ae481ecbbdae69a6da09ee6e44104bf362722b8f2aa086298517738672b3acdf5f8d15926fdfdbd906c67d3ba5e27e2caac0e4ade8ca81d07f", 0xe0, 0x9f, 0x0, 0x0, r9}, 0x0) 13:25:47 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x20006, 0x0, 0x0, 0xfffffffffffffff7}]}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:25:47 executing program 2: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='0', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000080)={&(0x7f0000000040)={'crc32c-intel\x00\x00\x00\x00\x00\x00\x00\x01\x00'}}) 13:25:47 executing program 0: pipe(&(0x7f0000000680)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000), 0x9, 0x0) 13:25:47 executing program 4: r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) sendto$inet6(r1, 0x0, 0x0, 0x8800, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f00000000c0)="d2", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0xfef3, 0x0, 0x0, 0x0, 0xfffffffffffffdcc}}], 0x400000000000490, 0x6, 0x0) 13:25:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r1, 0x0) futex(&(0x7f00000014c0), 0x3, 0x0, 0x0, &(0x7f0000000000), 0x0) 13:25:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r0, 0x0, 0xffffffffffffff2c, 0x20008011, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$packet(r0, &(0x7f0000000340), 0xff00, 0x40, 0x0, 0x0) 13:25:50 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) sendmsg$unix(r0, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="200000000100000001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="18000000010000f801000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0], 0x38}, 0x0) 13:25:50 executing program 0: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x20006, 0x0, 0x0, 0xfffffffffffffff7}]}) getrandom(0x0, 0x0, 0x0) 13:25:50 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x25, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10) 13:25:50 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x20006, 0x0, 0x0, 0xfffffffffffffff7}]}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 13:25:50 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x20006, 0x0, 0x0, 0xfffffffffffffff7}]}) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) 13:25:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x0) 13:25:50 executing program 4: syz_emit_ethernet(0x14da, &(0x7f0000001680)=ANY=[@ANYBLOB="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"/5489], 0x0) 13:25:50 executing program 0: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x20006, 0x0, 0x0, 0xfffffffffffffff7}]}) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:25:50 executing program 1: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x20006, 0x0, 0x0, 0xfffffffffffffff7}]}) getgid() 13:25:50 executing program 2: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x20006, 0x0, 0x0, 0xfffffffffffffff7}]}) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:25:50 executing program 0: open(0x0, 0x141042, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x800000102009, 0x0) write$eventfd(r0, &(0x7f0000000140), 0xfd56) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00\x84\xe0\xda\x82a\xbe\x18O\x17\x1b\\\x143\x06v\x9b=>\xc1\xd9\x06\x00\x05\xf7\xae\xce\xbeA,j5\xac\xf5\xf0&\xc5$\x951QC\x87\x9f\xe0};\xac\xb7k>0\xce\xcd~\xd766*\fo=Cg&[\x8b\xe2\xbd\xe9\x16\xc6\x1e\x97e]\xb0\xed\xe7I\x18\x96RS\x10\x8cyr\xb7\xcf', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x7c774aac) 13:25:50 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f00000003c0)=0x3, 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f00000070c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000003c0)="656922d53840a20076dd81a1d73a1f8e6dead1c59f502bd2c9659250dccfe5712e6a771d9d443201bf594a15cf529489f21f6bbdd1653706f1e082ee6348825b65ab7a2a33d8976ac7", 0x49}, {&(0x7f0000000440)="242b9aa1df8d5b5e61147d77ffaad3094f85553e60ac04c6aa3eca2a4924b6834e5029ff01e2ec3b3b6b64ef254dbb7d6d59c8163ba6f1f340e94ca35ad141aa7729dc3a54b123c6b125b6944274ccfaa2806e8f4ecca166519a31f2667901118051f27d080cf7766e6f91f11ad615ec64bb1eb31a50c398dd7b0613d3e4e1fd8da9158e15c13a5fc06af953b272ce63faf7cb9bb90d2f10acef59197e9ced571716d3bb543558931c8834115f787a954dd4b06184b17e114e145adf33bb62452c812ed176dd6b87f93efd687bab2e3c836bf2d405912bc01d87153a3859ba26a67a5182b051329c6aa492e1309b81299701", 0xf2}, {&(0x7f0000000540)="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", 0x472}], 0x3}}], 0x2, 0x0) 13:25:50 executing program 4: 13:25:50 executing program 1: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) mount(&(0x7f0000000100)=@filename='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 13:25:50 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x20006, 0x0, 0x0, 0xfffffffffffffff7}]}) r0 = gettid() tkill(r0, 0x0) 13:25:50 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x800000102009, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfffffffffffffffe, 0x8) 13:25:50 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa4756f}, 0x100) [ 75.372179] keychord: Insufficient bytes present for keycount 2 [ 75.404969] keychord: Insufficient bytes present for keycount 2 13:25:50 executing program 3: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x20006, 0x0, 0x0, 0xfffffffffffffff7}]}) getxattr(0x0, 0x0, 0x0, 0x0) 13:25:50 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace(0x10, r1) 13:25:50 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r0, 0x0) futex(&(0x7f00000014c0), 0x3, 0x0, 0x0, &(0x7f0000000000), 0x0) 13:25:50 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x20006, 0x0, 0x0, 0xfffffffffffffff7}]}) getegid() 13:25:50 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x800000102009, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfffffffffffffffe, 0x8) 13:25:50 executing program 3: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x20006, 0x0, 0x0, 0xfffffffffffffff7}]}) ustat(0x0, 0x0) 13:25:50 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f00000003c0)=0x3, 0x4) sendmmsg(r0, &(0x7f00000070c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000003c0)="656922d53840a20076dd81a1d73a1f8e6dead1c59f502bd2c9659250dccfe5712e6a771d9d443201bf594a15cf529489f21f6bbdd1653706f1e082ee6348825b65ab7a2a33d8976ac7", 0x49}, {&(0x7f0000000440)="242b9aa1df8d5b5e61147d77ffaad3094f85553e60ac04c6aa3eca2a4924b6834e5029ff01e2ec3b3b6b64ef254dbb7d6d59c8163ba6f1f340e94ca35ad141aa7729dc3a54b123c6b125b6944274ccfaa2806e8f4ecca166519a31f2667901118051f27d080cf7766e6f91f11ad615ec64bb1eb31a50c398dd7b0613d3e4e1fd8da9158e15c13a5fc06af953b272ce63faf7cb9bb90d2f10acef59197e9ced571716d3bb543558931c8834115f787a954dd4b06184b17e114e145adf33bb62452c812ed176dd6b87f93efd687bab2e3c836bf2d405912bc01d87153a3859ba26a67a5182b051329c6aa492e1309b81299701", 0xf2}, {&(0x7f0000000540)="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", 0x472}], 0x3}}], 0x2, 0x0) 13:25:50 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0xa0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x37, &(0x7f0000000000)={0x4}) ptrace(0x10, r1) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:25:50 executing program 0: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x20006, 0x0, 0x0, 0xfffffffffffffff7}]}) syncfs(0xffffffffffffffff) 13:25:50 executing program 2: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x20006, 0x0, 0x0, 0xfffffffffffffff7}]}) setresuid(0x0, 0x0, 0x0) 13:25:50 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000000080)=0x400000000008002, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 75.728236] keychord: Insufficient bytes present for keycount 2 13:25:51 executing program 1: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x20006, 0x0, 0x0, 0xfffffffffffffff7}]}) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) 13:25:51 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0xa0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x37, &(0x7f0000000000)={0x4}) ptrace(0x10, r1) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) INIT: Id "4" respawning too fast: disabled for 5 minutes INIT: Id "6" respawning too fast: disabled for 5 minutes INIT: Id "2" respawning too fast: disabled for 5 minutes INIT: Id "3" respawning too fast: disabled for 5 minutes INIT: Id "5" respawning too fast: disabled for 5 minutes INIT: Id "1" respawning too fast: disabled for 5 minutes 13:26:50 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x20006, 0x0, 0x0, 0xfffffffffffffff7}]}) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) 13:26:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3c, &(0x7f0000000080)=0x400000000008002, 0x4) setsockopt$inet6_int(r1, 0x29, 0x3e, &(0x7f00000003c0)=0x3, 0x4) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="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", 0x5ad}], 0x1}}], 0x1, 0x0) recvfrom$inet6(r1, 0x0, 0x37, 0x0, 0x0, 0xfffffffffffffe88) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000100)) 13:26:50 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x800000102009, 0x0) write$eventfd(r0, &(0x7f0000000140), 0xfd56) write$P9_RSTATFS(r0, &(0x7f00000014c0)={0x43, 0x9, 0x2, {0x0, 0x101, 0x6, 0x0, 0x7, 0x0, 0xffffffff, 0x0, 0x7}}, 0x43) io_setup(0x0, &(0x7f0000000240)) socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) pipe(0x0) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000080)=[{}]}, 0x10) pipe(&(0x7f0000000680)) socket$packet(0x11, 0x2, 0x300) 13:26:50 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@broadcast, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @broadcast}, @udp={0x0, 0x0, 0x0, 0x0, [@guehdr, @guehdr={0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}, @guehdr, @guehdr, @guehdr, @guehdr={0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}, @guehdr, @guehdr], "08f34c03975d161447a27ef6994b66dc353679ad88098602d1a470f2f4056852863669c5c49e098c856fc5adafbba10208af493670ec011bc0e4f9c8c32ae1831f5edcc1"}}}}}, 0x0) 13:26:50 executing program 1: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x20006, 0x0, 0x0, 0xfffffffffffffff7}]}) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) 13:26:50 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0xa0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x37, &(0x7f0000000000)={0x4}) ptrace(0x10, r1) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) [ 135.988658] keychord: Insufficient bytes present for keycount 61 13:26:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000180)) 13:26:51 executing program 1: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000100)=@filename='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 13:26:51 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0xa0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x37, &(0x7f0000000000)={0x4}) ptrace(0x10, r1) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:26:51 executing program 2: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x20006, 0x0, 0x0, 0xfffffffffffffff7}]}) listxattr(0x0, 0x0, 0x0) 13:26:51 executing program 1: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 13:26:51 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) openat(r0, &(0x7f0000000080)='./file0/file0\x00', 0x10001, 0xc0) 13:26:51 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x1d0, [0x0, 0x20000100, 0x20000130, 0x20000200], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/464]}, 0x248) 13:26:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84302910000003900090035000c00060000001900150003000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 13:26:52 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000200)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080), 0x10) 13:26:52 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0xa0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x37, &(0x7f0000000000)={0x4}) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:26:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0x58, r2, 0x21, 0x0, 0x0, {}, [{{0x8, 0x1, r1}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 13:26:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x13, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0x90, r2, 0x21, 0x0, 0x0, {}, [{{0x8, 0x1, r1}, {0x74, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @activeport={{0xfe8c, 0x1, 'activeport\x00'}, {0x8}, {0x8}}}]}}]}, 0x90}}, 0x0) 13:26:52 executing program 0: syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x6) write$evdev(r0, &(0x7f0000000180)=[{{0x0, 0x7530}}], 0x11e8) 13:26:52 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0xa0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x37, &(0x7f0000000000)={0x4}) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:26:52 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x20) 13:26:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0x90, r3, 0x21, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x74, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @activeport={{0xfe8c, 0x1, 'activeport\x00'}, {0x8}, {0x8}}}]}}]}, 0x90}}, 0x0) 13:26:52 executing program 1: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x37, &(0x7f0000000000)) 13:26:52 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0xa0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x37, &(0x7f0000000000)={0x4}) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:26:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0x58, r3, 0x21, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 13:26:52 executing program 4: 13:26:52 executing program 0: 13:26:52 executing program 4: 13:26:52 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0xa0) r1 = getpid() ptrace(0x10, r1) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:26:52 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000200)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{}]}, 0x10) 13:26:52 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000002740)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) 13:26:52 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0xa0) r1 = getpid() ptrace(0x10, r1) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:26:52 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000001c0)='./file0\x00', 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x21) 13:26:52 executing program 4: 13:26:53 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0xa0) r1 = getpid() ptrace(0x10, r1) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:26:53 executing program 2: 13:26:53 executing program 2: 13:26:53 executing program 4: 13:26:53 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0xa0) rt_tgsigqueueinfo(0x0, 0x0, 0x37, &(0x7f0000000000)={0x4}) ptrace(0x10, 0x0) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:26:53 executing program 5: 13:26:53 executing program 2: 13:26:53 executing program 0: 13:26:53 executing program 1: 13:26:53 executing program 4: 13:26:53 executing program 0: 13:26:53 executing program 5: 13:26:53 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0xa0) rt_tgsigqueueinfo(0x0, 0x0, 0x37, &(0x7f0000000000)={0x4}) ptrace(0x10, 0x0) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:26:53 executing program 2: 13:26:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_int(r1, 0x29, 0xb, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x1e) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:26:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r1, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) 13:26:53 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0xa0) rt_tgsigqueueinfo(0x0, 0x0, 0x37, &(0x7f0000000000)={0x4}) ptrace(0x10, 0x0) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:26:53 executing program 0: open(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1100082) memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b39d778066f9d1ac8a570e3a42f70a7c0f30f66157a96aae15813f0dceb297", "a8a4cd01e527e6fd3de45387da0200000000000000e89046e6033a61edb75c8d51c05dfaf7f4fdb16e0cdaa4276939a341033400", "7b8ddcc0c891591c4116893616105829576914e70bfed06d00f900040000b8a7", [0xfffffffffffffff8, 0x3]}) 13:26:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") keyctl$read(0xb, 0xfffffffffffffffd, &(0x7f0000000000)=""/4, 0x2ac) 13:26:53 executing program 1: clone(0x2200802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000200)={0x60, 0x0, 0x0, {{0x0, 0xfff, 0x0, 0x0, 0x2, 0x5, 0xfffffffffffffffa}}}, 0x60) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x3) write$binfmt_script(r0, &(0x7f00000013c0)=ANY=[@ANYBLOB="1202"], 0x2) close(r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0) open(0x0, 0x10000, 0x0) pipe2(&(0x7f0000000300), 0x0) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 13:26:53 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x37, &(0x7f0000000000)={0x4}) ptrace(0x10, r1) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:26:53 executing program 2: r0 = socket(0x10, 0x803, 0x0) fstatfs(r0, &(0x7f0000000480)=""/103) 13:26:53 executing program 5: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1100082) r1 = memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x8, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b39d778066f9d1ac8a570e3a42f70a7c0f30f66157a96aae15813f0dceb297", "a8a4cd01e527e6fd3de45387da0200000000000000e89046e6033a61edb75c8d51c05dfaf7f4fdb16e0cdaa4276939a341033400", "7b8ddcc0c891591c4116893616105829576914e70bfed06d00f900040000b8a7"}) 13:26:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") socket(0x0, 0x0, 0x0) 13:26:53 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x37, &(0x7f0000000000)={0x4}) ptrace(0x10, r1) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:26:53 executing program 5: socket$packet(0x11, 0x4000000000000a, 0x300) syz_emit_ethernet(0x4e, &(0x7f0000000680)={@random="d2d478dd69d2", @broadcast, [{}], {@ipv6={0x86dd, {0x0, 0x6, "41b86a", 0x14, 0x0, 0x0, @local, @mcast2, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 13:26:56 executing program 4: 13:26:56 executing program 2: socket$packet(0x11, 0x4000000000000a, 0x300) syz_emit_ethernet(0x1a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaa2aaaaaaaaaaaaabb810000002c3ddd299b00110000c20252af6ad2a728fae67c3f81d6ab94985222d10e9a387f0ce75c424bbdef8bd53ee839846e8efda0b9ce70a0535fe8af89866f997b4de1af3cf9fb160440e015c10a8266c748e203facc28f65a5f379184421b4cbe4ced833238c88f2f52109e38dfa0e6a0938db34b5af767ef2d7debb16a994e06161f1449fcb16cebfa61dcf96e82542a0d75d55432c47b936c529279f8f56b"], 0x0) 13:26:56 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x37, &(0x7f0000000000)={0x4}) ptrace(0x10, r1) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:26:56 executing program 1: clone(0x2200802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x3) write$binfmt_script(r0, &(0x7f00000013c0)=ANY=[@ANYBLOB="1202"], 0x2) close(r0) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 13:26:56 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x1040900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) 13:26:56 executing program 5: 13:26:56 executing program 5: 13:26:56 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0xa0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x37, &(0x7f0000000000)={0x4}) ptrace(0x10, r0) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:26:56 executing program 4: socket$packet(0x11, 0x4000000000000a, 0x300) syz_emit_ethernet(0x52, &(0x7f0000000680)={@random="d2d478dd69d2", @broadcast, [{[{}]}], {@ipv6={0x86dd, {0x0, 0x6, "41b86a", 0x14, 0x0, 0x0, @local, @mcast2, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 13:26:56 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0xa0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x37, &(0x7f0000000000)={0x4}) ptrace(0x10, r0) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:26:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") sendto$inet6(r0, 0x0, 0xffffffffffffff2c, 0x20008011, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 13:26:56 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0xa0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x37, &(0x7f0000000000)={0x4}) ptrace(0x10, r0) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:26:56 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, "954e8000000000000000000000000000000029000000000000001e00"}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup3(0xffffffffffffffff, r1, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 13:26:56 executing program 2: 13:26:56 executing program 1: 13:26:56 executing program 2: 13:26:59 executing program 0: 13:26:59 executing program 4: 13:26:59 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0xa0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x37, &(0x7f0000000000)={0x4}) ptrace(0x10, r0) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:26:59 executing program 2: 13:26:59 executing program 1: 13:26:59 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, "954e8000000000000000000000000000000029000000000000001e00"}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup3(0xffffffffffffffff, r1, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 13:26:59 executing program 4: 13:26:59 executing program 2: 13:26:59 executing program 1: 13:26:59 executing program 4: 13:26:59 executing program 2: 13:26:59 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0xa0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x37, &(0x7f0000000000)={0x4}) ptrace(0x10, r0) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:26:59 executing program 0: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 13:26:59 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/fscreate\x00') perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_INTERRUPT(r0, 0x0, 0x0) 13:26:59 executing program 4: socket$inet(0x2, 0x4000000000000001, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r2 = memfd_create(&(0x7f0000000340)='}#*nodevem0\xb7,\x00~\x82\xec\x8b$\x85`\xc4\xeb\x86\xder\xa3\xd1-\xd2a|&\x04\xf3\x9bf\x12#\x80\xb2uI\xd4Z\xe8', 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x6, 0x11, r0, 0x0) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0x526987c9) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r1, r2, 0x0, 0x80005) 13:26:59 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0xa0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x37, &(0x7f0000000000)={0x4}) ptrace(0x10, r0) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:26:59 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1000000802}) dup3(r0, r1, 0x0) 13:26:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x17e, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0xd2204691bb658cf2}, @flat=@weak_handle, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:26:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x20b, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) symlink(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='./file1\x00') execve(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) dup2(r0, r1) open$dir(&(0x7f0000000380)='./file0\x00', 0x841, 0x0) clone(0x23102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) write$binfmt_elf64(r0, 0x0, 0x10000010d) [ 144.589102] input: syz1 as /devices/virtual/input/input4 [ 144.601108] audit_printk_skb: 3 callbacks suppressed 13:26:59 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0xa0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x37, &(0x7f0000000000)={0x4}) ptrace(0x10, r1) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) [ 144.619273] audit: type=1400 audit(1568640419.573:15): avc: denied { transfer } for pid=3285 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 144.650513] binder: 3285:3287 got transaction with invalid handle, 0 [ 144.676707] binder: 3285:3287 transaction failed 29201/-22, size 72-24 line 3228 13:26:59 executing program 5: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) 13:26:59 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0xa0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x37, &(0x7f0000000000)={0x4}) ptrace(0x10, r1) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) [ 144.696800] binder: undelivered TRANSACTION_ERROR: 29201 [ 144.697052] binder: BINDER_SET_CONTEXT_MGR already set [ 144.697060] binder: 3285:3287 ioctl 40046207 0 returned -16 [ 144.697161] binder_alloc: 3285: binder_alloc_buf, no vma [ 144.697200] binder: 3285:3305 transaction failed 29189/-3, size 72-24 line 3137 13:26:59 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0xa0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x37, &(0x7f0000000000)={0x4}) ptrace(0x10, r1) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:26:59 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0xa0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x37, &(0x7f0000000000)={0x4}) ptrace(0x10, r1) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) [ 144.753578] input: syz1 as /devices/virtual/input/input5 [ 144.755914] binder: undelivered TRANSACTION_ERROR: 29189 [ 144.829636] input: syz1 as /devices/virtual/input/input6 13:27:00 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f00000003c0)=0x3, 0x4) sendmmsg(r0, &(0x7f00000070c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000003c0)="656922d53840a20076dd81a1d73a1f8e6dead1c59f502bd2c9659250dccfe5712e6a771d9d443201bf594a15cf529489f21f6bbdd1653706f1e082ee6348825b65ab7a2a33d8976ac7", 0x49}, {&(0x7f0000000440)="242b9aa1df8d5b5e61147d77ffaad3094f85553e60ac04c6aa3eca2a4924b6834e5029ff01e2ec3b3b6b64ef254dbb7d6d59c8163ba6f1f340e94ca35ad141aa7729dc3a54b123c6b125b6944274ccfaa2806e8f4ecca166519a31f2667901118051f27d080cf7766e6f91f11ad615ec64bb1eb31a50c398dd7b0613d3e4e1fd8da9158e15c13a5fc06af953b272ce63faf7cb9bb90d2f10acef59197e9ced571716d3bb543558931c8834115f787a954dd4b06184b17e114e145adf33bb62452c812ed176dd6b87f93efd687bab2e3c836bf2d405912bc01d87153a3859ba26a67a5182b051329c6aa492e1309b81299701", 0xf2}, {&(0x7f0000000540)="ccb62c6bcdcbd98f5cbb8a990218cabf071ce9fdc4439e19e7251690edc694afc4f87d04b17ee868dbfe5093af5361c4a0f52fd8e20e1909d23b59f81b99a59efbac1bc97a06def96d617e18919e2b4ff598712064372325106e3e2ef430a4a0678c64b90507ab4c67feb99a0e310cd92366b1e2ed7605ad044fb9d1f70408693b23a645c3ab88c9b4009cc4ff73dabb6499108ecadaf54fce221e1fa56f68747ebc6ec4767167b55d1eb92125f3e7949311b3f54077159c3b4a9461697745cd9119781c7d7eb3f444f730e1413ca65df54a668b9993c22216bccaabe6e13d9091b1b6a35e796630a8d25311cd3df13c145d9ae5da7203ffdc4d37465c658352347b0678b0cec7c4fe0830ff6e405b41ffe73b0fab74c491349f52f8ca4b7e34e2dc5429a0c4ba7c9b89fd50af7b337e818a98ce2f84474efb2cda20792182cc3bbe92740ae3ce7353e80aab8da58bc409b87e800180f7be7c5bc4c69bed04d7ca1fcb4ab8cefffb47039369c8950f31fcc5ed78367d065620704e3fef4d92b9dde911f0ad18c02964879d09faf706ea56765e12aab2d0d685326ef58c15ae80ac58d9f9da6e35c791799a48fbe0c31a97446e947b0ab3dc8158c0398fb441b435fa624d2733dd8e9e4dcbe553e68052c50788e7ad6f998a0a305beb00f557f7218d27e292ad66a703144a73c075f6fecaf071219cb22cd8ff0ccc4bdd69f7fe6b240a8a3ff3f09fec34644d1a18b9b9aac7988eadc22e3f3f935605afd0c40cbf1135506a8aa880f47accd3269cc25c9f6ad59327093f65abd70c68428480c5a941a71fe369bca10821d25471fbd1d3ffd8283607ec146af47d800bd94c26587a35244b4bda10547a06f5c6df66ad0bf4b41d908d57e8e6215e9380305c45d42979c99ff61fe5e2547004fe93511232ae0dc2f3ffc6219365bd80b9a29f9501977140d81988ac3d37034bff93b864a4191e793e31fe934535cfa78e78a0812aa6fbfe739b27571bda3bf2cf6a9c8e641ae7dc50c32ce1e2dd581fc2e95c50bb766c4d4b9236394e8aa6f45a5fdab0bb90311cf2bc88fc34ca2233efe329e975bb39b5e792046889f7b82ef23ec4fd8b0f1f1a4a0154902cea8095cdc55fe54bd323e3160d60b772376f759742562db956269ccfe32dadbe3cbe25b3b5632c530d560d340c8d39e838fee9d9a634c0952244278292e76999ef40682ebaf54e064f0551d905ceb11272257def4c348e253fb645cfc0106c45f4ccfebf125d9a8fe748ddbd5447d3836f1eae42fb64dbc65fc148f8233e6de00e2e907d1f151d4ef04182cdd7cd3a757b70690d5e2e639fba15f2415911472898fccae7ec97902fc3e468310c30f9db48c839702388d17df0937334f0a27d778c297ae21dfc566b4e2cd789688456456a7b6119baef47a732d57ff7fe620cbe80f89b81700e5b5d136a2bf760f14f8dae646a2fd0a64380b929ce31f246e0eae1b7f1bea780783385726c417edfe32f7ab565e9b446b2aa525b0b9086a7ebc1a2925b768c994d4f477e082f7c49d5b0d28732e628ab62f7447e77a9e7386638f50549c6439d", 0x45e}], 0x3}}], 0x2, 0x0) 13:27:00 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1000000802}) dup3(r0, r1, 0x0) 13:27:00 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='uid_map\x00') r1 = memfd_create(&(0x7f0000000780)='\x00', 0x0) sendfile(r1, r0, 0x0, 0x3d8) 13:27:00 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0xa0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x37, &(0x7f0000000000)={0x4}) ptrace(0x10, r1) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:27:00 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000080)={@flat, @fda, @flat=@handle}, &(0x7f0000000240)={0xfffffff3, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 13:27:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="c0dca5055e0bcfec7bf070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x3c, &(0x7f0000000080)=0x400000000008002, 0x4) setsockopt$inet6_int(r2, 0x29, 0x3e, &(0x7f00000003c0)=0x3, 0x4) sendmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="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", 0x5ad}], 0x1}}], 0x1, 0x0) dup2(r1, r2) 13:27:00 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") exit(0x0) 13:27:00 executing program 2: mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000280)='./file0\x00', 0x83, 0x0) 13:27:00 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 145.374081] binder: 3349:3350 got transaction with invalid offset (4294967283, min 0 max 80) or object. [ 145.400984] binder: 3349:3350 transaction failed 29201/-22, size 80-24 line 3199 13:27:00 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0xa0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x37, &(0x7f0000000000)={0x4}) ptrace(0x10, r1) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:27:00 executing program 5: mlockall(0x1) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='numa_maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) [ 145.420139] binder: 3359:3361 got reply transaction with no transaction stack [ 145.433008] binder: undelivered TRANSACTION_ERROR: 29201 [ 145.445418] binder: 3349:3366 got transaction with invalid offset (4294967283, min 0 max 80) or object. [ 145.455061] binder: 3359:3361 transaction failed 29201/-71, size 0-0 line 2922 13:27:00 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='uid_map\x00') r1 = memfd_create(&(0x7f0000000780)='\x00', 0x0) sendfile(r1, r0, 0x0, 0x3d8) 13:27:00 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b5, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 13:27:00 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0xa0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x37, &(0x7f0000000000)={0x4}) ptrace(0x10, r1) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:27:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xf, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00', @ANYPTR], 0x0, 0x0, 0x0}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000) 13:27:00 executing program 1: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x20006, 0x0, 0x0, 0xfffffffffffffff7}]}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) getgroups(0x0, 0x0) 13:27:00 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) io_setup(0x0, 0x0) io_destroy(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000002740)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000c20400010001040001010004010304010801070000e0ff00c3f672730000000600010000000000000000"], 0x30) sendmmsg(r1, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) [ 145.472000] binder: 3349:3366 transaction failed 29201/-22, size 80-24 line 3199 [ 145.484559] binder: undelivered TRANSACTION_ERROR: 29201 [ 145.511916] binder: undelivered TRANSACTION_ERROR: 29201 13:27:00 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0xa0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x37, &(0x7f0000000000)={0x4}) ptrace(0x10, r1) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) [ 145.579574] binder: 3381:3386 got transaction with invalid data ptr [ 145.606860] binder: 3392:3397 got transaction to context manager from process owning it [ 145.630708] binder: 3381:3386 transaction failed 29201/-14, size 693-0 line 3155 [ 145.648610] binder: 3392:3397 transaction failed 29201/-22, size 0-0 line 3005 [ 145.657152] binder: undelivered TRANSACTION_ERROR: 29201 [ 145.664452] binder: undelivered TRANSACTION_ERROR: 29201 [ 145.670217] binder_alloc: 3381: binder_alloc_buf, no vma [ 145.670328] binder: BINDER_SET_CONTEXT_MGR already set [ 145.670335] binder: 3381:3386 ioctl 40046207 0 returned -16 [ 145.670509] binder: 3392:3402 got transaction to context manager from process owning it [ 145.670519] binder: 3392:3402 transaction failed 29201/-22, size 0-0 line 3005 [ 145.674878] binder: undelivered TRANSACTION_ERROR: 29201 [ 145.720619] binder: 3381:3403 transaction failed 29189/-3, size 693-0 line 3137 [ 145.739056] binder: undelivered TRANSACTION_ERROR: 29189 13:27:01 executing program 0: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r2 = memfd_create(&(0x7f0000000340)='}#*nodevem0\xb7,\x00~\x82\xec\x8b$\x85`\xc4\xeb\x86\xder\xa3\xd1-\xd2a|&\x04\xf3\x9bf\x12#\x80\xb2uI\xd4Z\xe8', 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x6, 0x11, r0, 0x0) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0x526987c9) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r1, r2, 0x0, 0x80005) 13:27:01 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0xa0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x37, &(0x7f0000000000)={0x4}) ptrace(0x10, r1) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:27:01 executing program 1: socketpair$nbd(0x1, 0x1, 0x166, 0x0) 13:27:01 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0) write(r0, &(0x7f0000000100)="bcef1289979331510ada35f80ae3751d0dea0cb5ed530cbc038d677670019bfbbb40f5d87e661fd4c23cf48e0c96429f49f20a", 0x33) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0), 0xa5) 13:27:01 executing program 2: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x20006, 0x0, 0x0, 0xfffffffffffffff7}]}) alarm(0x0) 13:27:01 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa4756f}, 0x100) 13:27:01 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 13:27:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3c, &(0x7f0000000080)=0x400000000008002, 0x4) setsockopt$inet6_int(r1, 0x29, 0x3e, &(0x7f00000003c0)=0x3, 0x4) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="8122f0126b069798c4974d76a800843360d64d3746b948091dccc951673ae22189d21ee42b5ce8ab8612161e11256192bc2fe33243a7098662c0faa8e5906c4030a54a15a5c46f1b434fc97b064881acfa13dd74e25567cf4212376a787626b3cfd9bb03c1cf735fbaba5f87d80e008293b69a98be3caac5059b120680950738a2d8f22980f18b1fa214800585171aa955c5872bea9b56fe7dfc2f243fcb87ce49f0c2846b6912181051ddffef4efcbad81b16258abf1b9571a3446167ec2162d03cf5af279cf3f818fe440621fa73154a1dd13b793c294115d5fed15aac1d3a7f7e477a4b3370d0bbd34c5dbb650baf315d7c336195f5246f24d88f2b0b3a41a16cc052cf4e93dcdc7ddfae2b2f533655e8967aba12edd2d827d1f67c3fdc2ee7f4388bcba59db511fc5ff4126cefc500b992fa62e7d73162bd4ef0f0f739ce8e4db05694f5c639072f4b53476cc01bad7d3d87286cbc3a912337f580992adfb97dd8e6b94f4f17d72adb141d42fe7c1894d24546cd4efe5fb258002b742bd7f9a9e6c72b2113d2fcbbbed6ee210700cd80c52868cba441f1b928414b8d02cef609d7ba4baaea247359c80a0f52c2dffa0d45657538b0ae0d390cfe0a370c038cdf2d7f95295f16b1160277b83eff71f2fb5fb73f0e89cf48a6c479f963affa38cd5d3bac156662d66542ad2b932214d9e2ea323f5515b8b21a4affc221a6af1700cdb608a165e1c3997cafb60e2fff1b4df8b687e8454711f5e2b19e09536c3cc20d1324a6050690559fddf6640e13289e22d523db0dd41398646ecde132ab8cd1243db1bc80438a28a8aafe0dad21f8a795179b4814cdc3ca740cf61388423d9e90a98dc00580d1de9adff505cc8ab607b41f9f02596ce4a17c424e0064874e3679fda12f79d51075d06a268d07e807dcdb296f34a87593f763a3665b6238a518966aecd7e7e790ba342f8acd3afce2d37dba0fb3792c36aac34081350591b9b6100734e9986b696dc0e40d0bbaa0ba2678ebbc40ef65b1c41d830cc077a14ae424dfa8cb2d2ce4c9ab4a90140c05bfc0f847d60314e35e058a8179b2616c049c67559b516d25099019394ebfdc7fcb2e2657762436d78408fae39bd771ff3b11fc20527ae05e4656fc04ac121e9d890dfe864f4ee81adc8f26f98a149f8d9270186e0994acc9a85ff520d3d9916409080586d3a6e0ef6762b7d3b5384f4f8eb8fa64662f25f04ba278a03b4a4ade2bd4184abc7b92dda8a3d5161ed233b47eee927fc43db76a6944958eaf3ec56540e030dce47860dc935e66c162605b9535b832701f366eafa4de4aaa10277610b6e39fbed7a811780bc8afb5c8b4acf37abbb937095ecb515712bee0837fb11e268bfb57d583e7f71dc16eec5939e3b349a0eda30dd013eb206f9b0ba514c045210f0d8cab4d0d1ee50c0bf7d893e2020e967a44f1c028883c260f99d43b925c794a01dc8e4cff7b5f158f24715ac2695ff8aebc81d63be8ee877fb3229b4963fb9bc83c2fdb4a29040acff5675c0c576ae649ab9cb5b0bf801f3c528dac2878707ca257c31e4c5fe3f25eb8427a88a865d6bf0e283887a488e3116ee2e4376a9c866e814dac7636e62d5317a98eb787a138e73df1c28223334780cc7b2ce65c53a1c4b65bd111ca03ceb26370e2e95236651ee19865bbeb043b0965ce0f82533dcbd0ceb93304317a19ea41be9969b4ae468c2c7fdc29e357a5a7a5ba953f63fa2eda593963cbaff2d3550ce0e807ff549f899d864e59f76ded2c95796021eb9025ca5dd8b545a6e284130266074d665db77af96493359ed9193c95c4128fc5d68c518af76bec5e32006791cedacd4c128a5136c526b769e91ffa9c302bfb7d90d8e36afd703bedac0b0a8c739a3c93481f7b71075c072ef2b05560097361cb18632e1faeb1990ec40aa0b605ee192c14d7d23ea9304455effd2cac771ffa53d78c2e36325e0f0cac83c7ad4653e4737c99a7c1fc2d0abd8ce232ff29c82c40949fbf368bdadc5eb259410ae01aba78cc6b0fcd4a079ab929f8ee853c", 0x5ad}], 0x1}}], 0x1, 0x0) recvfrom$inet6(r1, 0x0, 0x37, 0x0, 0x0, 0xfffffffffffffe88) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) 13:27:01 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x37, &(0x7f0000000000)) ptrace(0x10, r1) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:27:01 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0xa0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x37, &(0x7f0000000000)={0x4}) ptrace(0x10, r0) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:27:01 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0xa0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x37, &(0x7f0000000000)={0x4}) ptrace(0x10, r0) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:27:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3c, &(0x7f0000000080)=0x400000000008002, 0x4) setsockopt$inet6_int(r1, 0x29, 0x3e, &(0x7f00000003c0)=0x3, 0x4) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="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", 0x5ad}], 0x1}}], 0x1, 0x0) recvfrom$inet6(r1, 0x0, 0x37, 0x0, 0x0, 0xfffffffffffffe88) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) [ 146.286634] input: syz1 as /devices/virtual/input/input8 13:27:02 executing program 0: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='0', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000080)={&(0x7f0000000040)={'crc32c-intel\x00\x00\x00\x00\x00\x00\x00\x01\x00'}}) 13:27:02 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x20006, 0x0, 0x0, 0xfffffffffffffff7}]}) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) 13:27:02 executing program 2: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r2 = memfd_create(&(0x7f0000000340)='}#*nodevem0\xb7,\x00~\x82\xec\x8b$\x85`\xc4\xeb\x86\xder\xa3\xd1-\xd2a|&\x04\xf3\x9bf\x12#\x80\xb2uI\xd4Z\xe8', 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x6, 0x11, r0, 0x0) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0x526987c9) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r1, r2, 0x0, 0x80005) 13:27:02 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0xa0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x37, &(0x7f0000000000)={0x4}) ptrace(0x10, r0) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:27:02 executing program 1: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x20006, 0x0, 0x0, 0xfffffffffffffff7}]}) lstat(0x0, 0x0) 13:27:02 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa4756f}, 0x100) 13:27:02 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0xa0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x37, &(0x7f0000000000)={0x4}) ptrace(0x10, r0) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:27:02 executing program 1: socket$inet(0x2, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000140)=0x33, 0x4) syncfs(0xffffffffffffffff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000300)=0x72, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000040), 0x4) socket(0x0, 0x80, 0x5) r1 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r3 = memfd_create(&(0x7f0000000340)='}#*nodevem0\xb7,\x00~\x82\xec\x8b$\x85`\xc4\xeb\x86\xder\xa3\xd1-\xd2a|&\x04\xf3\x9bf\x12#\x80\xb2uI\xd4Z\xe8', 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x6, 0x11, r1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000000)=0x2) ppoll(0x0, 0x0, 0x0, 0x0, 0x360) fcntl$setstatus(r1, 0x4, 0x0) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000dc0)=ANY=[], 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0x80005) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f00000001c0)) io_setup(0xad, &(0x7f0000000080)) 13:27:02 executing program 5: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write(r0, &(0x7f00000001c0)="240000005a001f00ff03f4f9002304000a04f51108000100020100020800028001000000", 0x24) 13:27:02 executing program 0: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x37, &(0x7f0000000000)={0x4}) ptrace(0x10, r1) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:27:02 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0xa0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x37, &(0x7f0000000000)={0x4}) ptrace(0x10, r0) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:27:02 executing program 0: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x20006, 0x0, 0x0, 0xfffffffffffffff7}]}) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) sendfile(r1, r2, 0x0, 0x0) 13:27:02 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 13:27:02 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0xa0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x37, &(0x7f0000000000)={0x4}) ptrace(0x10, r0) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) [ 147.224990] input: syz1 as /devices/virtual/input/input10 13:27:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x0, 0x0) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'\x01\x00\x1e'}, &(0x7f0000000100), 0xbda1, 0xfffffffffffffffb) 13:27:02 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0xa0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x37, &(0x7f0000000000)={0x4}) ptrace(0x10, r1) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:27:02 executing program 0: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x20006, 0x0, 0x0, 0xfffffffffffffff7}]}) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000001c0)) 13:27:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') setns(r0, 0x0) 13:27:02 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1000000802}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000003c0)={'vlan0\x00\x00\xf6\xff\xff\xff\xff\xff\xff\xff\x00', {0x2, 0x0, @loopback}}) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) dup3(r0, r1, 0x0) 13:27:03 executing program 1: socket$inet(0x2, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000140)=0x33, 0x4) syncfs(0xffffffffffffffff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000300)=0x72, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000040), 0x4) socket(0x0, 0x80, 0x5) r1 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r3 = memfd_create(&(0x7f0000000340)='}#*nodevem0\xb7,\x00~\x82\xec\x8b$\x85`\xc4\xeb\x86\xder\xa3\xd1-\xd2a|&\x04\xf3\x9bf\x12#\x80\xb2uI\xd4Z\xe8', 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x6, 0x11, r1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000000)=0x2) ppoll(0x0, 0x0, 0x0, 0x0, 0x360) fcntl$setstatus(r1, 0x4, 0x0) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000dc0)=ANY=[], 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0x80005) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f00000001c0)) io_setup(0xad, &(0x7f0000000080)) 13:27:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000300)=""/195, &(0x7f0000000080)=0xc3) 13:27:03 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0xa0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x37, &(0x7f0000000000)={0x4}) ptrace(0x10, r1) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:27:03 executing program 5: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x6c}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) 13:27:03 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 13:27:03 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x20006, 0x0, 0x0, 0xfffffffffffffff7}]}) clock_gettime(0x0, &(0x7f0000000100)) 13:27:03 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0xa0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x37, &(0x7f0000000000)={0x4}) ptrace(0x10, r1) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:27:03 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x20006, 0x0, 0x0, 0xfffffffffffffff7}]}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 13:27:03 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(r0, &(0x7f0000000000), 0x10000000d) 13:27:03 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1000000802}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000003c0)={'vlan0\x00\x00\xf6\xff\xff\xff\xff\xff\xff\xff\x00', {0x2, 0x0, @loopback}}) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) dup3(r0, r1, 0x0) 13:27:03 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x37, &(0x7f0000000000)={0x4}) ptrace(0x10, r1) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:27:03 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') preadv(r0, &(0x7f0000002880)=[{&(0x7f0000000140)=""/110, 0x2a2}, {&(0x7f00000001c0)=""/74, 0x4a}, {&(0x7f0000002300)=""/146, 0x92}], 0x3, 0x0) [ 148.153072] binder: release 3551:3557 transaction 54 out, still active [ 148.156899] binder: BINDER_SET_CONTEXT_MGR already set [ 148.156906] binder: 3551:3557 ioctl 40046207 0 returned -16 [ 148.157470] binder_alloc: 3551: binder_alloc_buf, no vma [ 148.157508] binder: 3551:3565 transaction failed 29189/-3, size 0-0 line 3137 [ 148.270237] binder: undelivered TRANSACTION_COMPLETE [ 148.281667] binder: undelivered TRANSACTION_ERROR: 29189 [ 148.287310] binder: send failed reply for transaction 54, target dead 13:27:03 executing program 1: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x37, &(0x7f0000000000)={0x4}) ptrace(0x10, r0) waitid(0x0, 0x0, 0x0, 0x5, 0x0) 13:27:03 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000080)=[{0x5}]}, 0x10) 13:27:03 executing program 0: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x20006, 0x0, 0x0, 0xfffffffffffffff7}]}) chdir(0x0) 13:27:03 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x37, &(0x7f0000000000)={0x4}) ptrace(0x10, r1) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:27:03 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x20006, 0x0, 0x0, 0xfffffffffffffff7}]}) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:27:03 executing program 2: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x20006, 0x0, 0x0, 0xfffffffffffffff7}]}) read$eventfd(0xffffffffffffffff, 0x0, 0x0) 13:27:03 executing program 2: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x20006, 0x0, 0x0, 0xfffffffffffffff7}]}) pipe2(0x0, 0x0) 13:27:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") sendto$inet6(r0, 0x0, 0xffffffffffffff2c, 0x20008011, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 13:27:04 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x37, &(0x7f0000000000)={0x4}) ptrace(0x10, r1) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:27:04 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000fc3000)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x16) 13:27:04 executing program 0: seccomp(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x20006, 0x0, 0x0, 0xfffffffffffffff7}]}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:27:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="c0dca5055e0bcfec7bf070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENT(r1, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000080), 0x4) recvmsg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 13:27:04 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0}, 0xa0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x37, &(0x7f0000000000)={0x4}) ptrace(0x10, r1) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:27:04 executing program 2: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x20006, 0x0, 0x0, 0xfffffffffffffff7}]}) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) 13:27:04 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) r1 = dup2(r0, r0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCGNAME(r1, 0x80404506, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 13:27:04 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x100, [0x0, 0x20000100, 0x20000130, 0x20000200], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x178) 13:27:04 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x20006, 0x0, 0x0, 0xfffffffffffffff7}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getflags(r0, 0x0) 13:27:04 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0}, 0xa0) r1 = getpid() rt_tgsigqueueinfo(0x0, r1, 0x37, &(0x7f0000000000)={0x4}) ptrace(0x10, r1) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:27:04 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 13:27:04 executing program 0: syz_genetlink_get_family_id$tipc(0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x0, 0x0) pipe(0x0) write(r1, 0x0, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) clock_gettime(0x0, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000140)={0x3ff}) sendto$inet(r2, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000180)=""/64, 0x40}, {0x0}, {&(0x7f0000000440)=""/215, 0xd7}, {0x0}, {0x0}], 0x5, 0x0) io_setup(0x0, 0x0) 13:27:04 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0}, 0xa0) r1 = getpid() rt_tgsigqueueinfo(0x0, r1, 0x37, &(0x7f0000000000)={0x4}) ptrace(0x10, r1) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:27:04 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(r0, &(0x7f0000000000), 0x10000000d) 13:27:04 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000000080)=0x400000000008002, 0x4) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f00000003c0)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="8122f0126b069798c4974d76a800843360d64d3746b948091dccc951673ae22189d21ee42b5ce8ab8612161e11256192bc2fe33243a7098662c0faa8e5906c4030a54a15a5c46f1b434fc97b064881acfa13dd74e25567cf4212376a787626b3cfd9bb03c1cf735fbaba5f87d80e008293b69a98be3caac5059b120680950738a2d8f22980f18b1fa214800585171aa955c5872bea9b56fe7dfc2f243fcb87ce49f0c2846b6912181051ddffef4efcbad81b16258abf1b9571a3446167ec2162d03cf5af279cf3f818fe440621fa73154a1dd13b793c294115d5fed15aac1d3a7f7e477a4b3370d0bbd34c5dbb650baf315d7c336195f5246f24d88f2b0b3a41a16cc052cf4e93dcdc7ddfae2b2f533655e8967aba12edd2d827d1f67c3fdc2ee7f4388bcba59db511fc5ff4126cefc500b992fa62e7d73162bd4ef0f0f739ce8e4db05694f5c639072f4b53476cc01bad7d3d87286cbc3a912337f580992adfb97dd8e6b94f4f17d72adb141d42fe7c1894d24546cd4efe5fb258002b742bd7f9a9e6c72b2113d2fcbbbed6ee210700cd80c52868cba441f1b928414b8d02cef609d7ba4baaea247359c80a0f52c2dffa0d45657538b0ae0d390cfe0a370c038cdf2d7f95295f16b1160277b83eff71f2fb5fb73f0e89cf48a6c479f963affa38cd5d3bac156662d66542ad2b932214d9e2ea323f5515b8b21a4affc221a6af1700cdb608a165e1c3997cafb60e2fff1b4df8b687e8454711f5e2b19e09536c3cc20d1324a6050690559fddf6640e13289e22d523db0dd41398646ecde132ab8cd1243db1bc80438a28a8aafe0dad21f8a795179b4814cdc3ca740cf61388423d9e90a98dc00580d1de9adff505cc8ab607b41f9f02596ce4a17c424e0064874e3679fda12f79d51075d06a268d07e807dcdb296f34a87593f763a3665b6238a518966aecd7e7e790ba342f8acd3afce2d37dba0fb3792c36aac34081350591b9b6100734e9986b696dc0e40d0bbaa0ba2678ebbc40ef65b1c41d830cc077a14ae424dfa8cb2d2ce4c9ab4a90140c05bfc0f847d60314e35e058a8179b2616c049c67559b516d25099019394ebfdc7fcb2e2657762436d78408fae39bd771ff3b11fc20527ae05e4656fc04ac121e9d890dfe864f4ee81adc8f26f98a149f8d9270186e0994acc9a85ff520d3d9916409080586d3a6e0ef6762b7d3b5384f4f8eb8fa64662f25f04ba278a03b4a4ade2bd4184abc7b92dda8a3d5161ed233b47eee927fc43db76a6944958eaf3ec56540e030dce47860dc935e66c162605b9535b832701f366eafa4de4aaa10277610b6e39fbed7a811780bc8afb5c8b4acf37abbb937095ecb515712bee0837fb11e268bfb57d583e7f71dc16eec5939e3b349a0eda30dd013eb206f9b0ba514c045210f0d8cab4d0d1ee50c0bf7d893e2020e967a44f1c028883c260f99d43b925c794a01dc8e4cff7b5f158f24715ac2695ff8aebc81d63be8ee877fb3229b4963fb9bc83c2fdb4a29040acff5675c0c576ae649ab9cb5b0bf801f3c528dac2878707ca257c31e4c5fe3f25eb8427a88a865d6bf0e283887a488e3116ee2e4376a9c866e814dac7636e62d5317a98eb787a138e73df1c28223334780cc7b2ce65c53a1c4b65bd111ca03ceb26370e2e95236651ee19865bbeb043b0965ce0f82533dcbd0ceb93304317a19ea41be9969b4ae468c2c7fdc29e357a5a7a5ba953f63fa2eda593963cbaff2d3550ce0e807ff549f899d864e59f76ded2c95796021eb9025ca5dd8b545a6e284130266074d665db77af96493359ed9193c95c4128fc5d68c518af76bec5e32006791cedacd4c128a5136c526b769e91ffa9c302bfb7d90d8e36afd703bedac0b0a8c739a3c93481f7b71075c072ef2b05560097361cb18632e1faeb1990ec40aa0b605ee192c14d7d23ea9304455effd2cac771ffa53d78c2e36325e0f0cac83c7ad4653e4737c99a7c1fc2d0abd8ce232ff29c82c40949fbf368bdadc5eb259410ae01aba78cc6b0fcd4a079ab929f8ee853c", 0x5ad}], 0x1}}], 0x1, 0x0) recvfrom$inet6(r0, 0x0, 0x37, 0x0, 0x0, 0xfffffffffffffe88) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000100)) [ 149.225900] binder: 3640:3645 got transaction to context manager from process owning it [ 149.265311] binder: 3640:3645 transaction failed 29201/-22, size 0-0 line 3005 13:27:04 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0}, 0xa0) r1 = getpid() rt_tgsigqueueinfo(0x0, r1, 0x37, &(0x7f0000000000)={0x4}) ptrace(0x10, r1) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:27:04 executing program 4: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000d83ff8)=0x8002000000000000, 0x0) 13:27:04 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x1f) [ 149.299280] binder: undelivered TRANSACTION_ERROR: 29201 [ 149.313596] binder: 3640:3669 got transaction to context manager from process owning it [ 149.354322] binder: 3640:3669 transaction failed 29201/-22, size 0-0 line 3005 [ 149.384239] binder: undelivered TRANSACTION_ERROR: 29201 13:27:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="c0dca5055e0bcfec7bf070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENT(r1, 0x0, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000080)=0xc2, 0x4) recvmsg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2) 13:27:05 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0}, 0xa0) r1 = getpid() rt_tgsigqueueinfo(r1, 0x0, 0x37, &(0x7f0000000000)={0x4}) ptrace(0x10, r1) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:27:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') preadv(r1, &(0x7f0000002880)=[{&(0x7f0000000140)=""/110, 0x6e}, {&(0x7f00000001c0)=""/74, 0x4a}, {&(0x7f00000023c0)=""/201, 0xc9}], 0x3, 0x0) 13:27:05 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000000740)=""/125, 0x7d, 0x0) fstat(r0, &(0x7f0000000380)) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 13:27:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENT(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000080), 0x4) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 13:27:05 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b40)='oom_adj\x00') r1 = memfd_create(&(0x7f0000000780)='\x00', 0x0) sendfile(r1, r0, 0x0, 0x3d8) 13:27:06 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0}, 0xa0) r1 = getpid() rt_tgsigqueueinfo(r1, 0x0, 0x37, &(0x7f0000000000)={0x4}) ptrace(0x10, r1) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:27:06 executing program 2: r0 = socket(0x10, 0x1000040000000003, 0x0) write(r0, &(0x7f0000000040)="22000000140067288d000005004c0304020803130100000008000200415f5409e304", 0x22) 13:27:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_hwaddr}) 13:27:06 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0}, 0xa0) r1 = getpid() rt_tgsigqueueinfo(r1, 0x0, 0x37, &(0x7f0000000000)={0x4}) ptrace(0x10, r1) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) [ 151.036212] binder: 3687:3700 transaction failed 29189/-22, size 0-0 line 3014 [ 151.051022] binder: undelivered TRANSACTION_ERROR: 29189 [ 151.053050] binder: 3687:3705 transaction failed 29189/-22, size 0-0 line 3014 13:27:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/tcp6\x00') sendfile(r0, r2, 0x0, 0xfffc) read$char_usb(r2, 0x0, 0x0) 13:27:06 executing program 4: setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) madvise(&(0x7f0000106000/0x2000)=nil, 0x2000, 0x4) [ 151.084393] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. [ 151.104125] binder: undelivered TRANSACTION_ERROR: 29189 13:27:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$sock_ifreq(r0, 0x8943, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_addrs=@xdp}) 13:27:06 executing program 0: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x20006, 0x0, 0x0, 0xfffffffffffffff7}]}) io_submit(0x0, 0x0, 0x0) 13:27:06 executing program 2: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x20006, 0x0, 0x0, 0xfffffffffffffff7}]}) delete_module(0x0, 0x0) 13:27:06 executing program 1: mlockall(0x1) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='numa_maps\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) 13:27:06 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x20006, 0x0, 0x0, 0xfffffffffffffff7}]}) request_key(0x0, 0x0, 0x0, 0x0) 13:27:06 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1000000802}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000003c0)={'vlan0\x00\x00\xf6\xff\xff\xff\xff\xff\xff\xff\x00', {0x2, 0x0, @loopback}}) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast1, @loopback}, 0xc) dup3(r0, r1, 0x0) 13:27:06 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0}, 0xa0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000000)={0x4}) ptrace(0x10, r1) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:27:06 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x802, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000000), 0xa) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) 13:27:06 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') r1 = memfd_create(&(0x7f0000000040), 0x0) sendfile(r1, r0, 0x0, 0x5) 13:27:06 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @rumble}, {0x0, 0x0, 0x0, {}, {}, @cond}}) 13:27:06 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0}, 0xa0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000000)={0x4}) ptrace(0x10, r1) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:27:06 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x20006, 0x0, 0x0, 0xfffffffffffffff7}]}) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:27:06 executing program 2: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x20006, 0x0, 0x0, 0xfffffffffffffff7}]}) r0 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r0) 13:27:06 executing program 4: openat(0xffffffffffffffff, &(0x7f0000000040)='/', 0x1000, 0x23) 13:27:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2108000000000000000003000000280001001000010069623a74756e6c30000000001400020005000300e1000000080070000000000065f5dc7656aa67087754306700cbaa2384d79cf41a17d68c0649ec86023ab6a535fb16d2a882"], 0x3c}}, 0x0) 13:27:06 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 13:27:06 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0}, 0xa0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000000)={0x4}) ptrace(0x10, r1) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:27:06 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1000000802}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000003c0)={'vlan0\x00\x00\xf6\xff\xff\xff\xff\xff\xff\xff\x00', {0x2, 0x0, @loopback}}) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast1, @loopback}, 0xc) dup3(r0, r1, 0x0) 13:27:06 executing program 4: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs(0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x9a) read$FUSE(0xffffffffffffffff, &(0x7f0000000000), 0x1000) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x800000102009, 0x0) write$eventfd(r1, &(0x7f0000000140), 0xfd56) 13:27:06 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0}, 0xa0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x37, 0x0) ptrace(0x10, r1) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:27:06 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 13:27:06 executing program 1: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) truncate(&(0x7f00000000c0)='./file0\x00', 0x0) [ 151.425243] input: syz1 as /devices/virtual/input/input13 13:27:06 executing program 4: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000001740)={'veth1_to_bridge\x00', {0x2, 0x0, @empty}}) futex(&(0x7f00000014c0), 0x3, 0x0, 0x0, &(0x7f0000000000), 0x0) 13:27:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x3, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 13:27:06 executing program 5: 13:27:06 executing program 5: 13:27:06 executing program 4: 13:27:06 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0}, 0xa0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x37, 0x0) ptrace(0x10, r1) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:27:06 executing program 1: 13:27:06 executing program 0: 13:27:06 executing program 4: 13:27:06 executing program 1: clone(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) pipe(0x0) geteuid() stat(&(0x7f0000000640)='./bus/file0\x00', 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x80000003, 0x0) 13:27:06 executing program 2: 13:27:06 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0}, 0xa0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x37, 0x0) ptrace(0x10, r1) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:27:06 executing program 5: 13:27:06 executing program 4: 13:27:06 executing program 0: 13:27:06 executing program 1: clone(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) pipe(0x0) geteuid() stat(&(0x7f0000000640)='./bus/file0\x00', 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x80000003, 0x0) 13:27:06 executing program 0: 13:27:06 executing program 4: 13:27:06 executing program 5: 13:27:06 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0}, 0xa0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x37, &(0x7f0000000000)) ptrace(0x10, r1) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:27:06 executing program 0: 13:27:06 executing program 4: 13:27:06 executing program 2: 13:27:06 executing program 5: 13:27:06 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0}, 0xa0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x37, &(0x7f0000000000)) ptrace(0xffffffffffffffff, r1) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:27:06 executing program 2: 13:27:06 executing program 4: 13:27:07 executing program 1: 13:27:07 executing program 0: 13:27:07 executing program 5: 13:27:07 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0}, 0xa0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x37, &(0x7f0000000000)) ptrace(0xffffffffffffffff, r1) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:27:07 executing program 2: 13:27:07 executing program 4: 13:27:07 executing program 5: 13:27:07 executing program 1: 13:27:07 executing program 0: 13:27:07 executing program 2: 13:27:07 executing program 4: 13:27:07 executing program 1: 13:27:07 executing program 0: 13:27:07 executing program 5: 13:27:07 executing program 2: 13:27:07 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0}, 0xa0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x37, &(0x7f0000000000)) ptrace(0xffffffffffffffff, r1) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:27:07 executing program 4: 13:27:07 executing program 5: 13:27:07 executing program 1: 13:27:07 executing program 2: 13:27:07 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0}, 0xa0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x37, &(0x7f0000000000)) ptrace(0x10, 0x0) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:27:07 executing program 1: 13:27:07 executing program 4: 13:27:07 executing program 0: 13:27:07 executing program 5: 13:27:07 executing program 2: 13:27:07 executing program 1: 13:27:07 executing program 4: 13:27:07 executing program 0: 13:27:07 executing program 5: 13:27:07 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0}, 0xa0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x37, &(0x7f0000000000)) ptrace(0x10, 0x0) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:27:07 executing program 0: 13:27:07 executing program 5: 13:27:07 executing program 1: 13:27:07 executing program 2: 13:27:07 executing program 4: 13:27:07 executing program 5: 13:27:07 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0}, 0xa0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x37, &(0x7f0000000000)) ptrace(0x10, 0x0) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:27:07 executing program 0: 13:27:07 executing program 1: 13:27:07 executing program 2: 13:27:07 executing program 4: 13:27:07 executing program 5: 13:27:07 executing program 1: 13:27:07 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0}, 0xa0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x37, &(0x7f0000000000)) ptrace(0x10, r1) waitid(0x0, 0x0, 0x0, 0x5, 0x0) 13:27:07 executing program 4: 13:27:07 executing program 0: 13:27:07 executing program 2: 13:27:07 executing program 1: 13:27:07 executing program 5: 13:27:07 executing program 0: 13:27:07 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0}, 0xa0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x37, &(0x7f0000000000)) ptrace(0x10, r1) waitid(0x0, 0x0, 0x0, 0x5, 0x0) 13:27:07 executing program 4: 13:27:07 executing program 2: 13:27:07 executing program 5: 13:27:07 executing program 1: 13:27:07 executing program 5: 13:27:07 executing program 2: 13:27:07 executing program 0: 13:27:07 executing program 4: 13:27:07 executing program 4: 13:27:07 executing program 0: 13:27:07 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0}, 0xa0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x37, &(0x7f0000000000)) ptrace(0x10, r1) waitid(0x0, 0x0, 0x0, 0x5, 0x0) 13:27:07 executing program 1: 13:27:07 executing program 5: 13:27:07 executing program 2: 13:27:07 executing program 5: 13:27:07 executing program 1: 13:27:07 executing program 2: 13:27:07 executing program 1: 13:27:07 executing program 0: 13:27:07 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0}, 0xa0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x37, &(0x7f0000000000)) ptrace(0x10, r1) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x0, 0x0) 13:27:07 executing program 4: 13:27:07 executing program 2: 13:27:07 executing program 5: 13:27:07 executing program 0: 13:27:07 executing program 4: 13:27:07 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0}, 0xa0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x37, &(0x7f0000000000)) ptrace(0x10, r1) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x0, 0x0) 13:27:07 executing program 1: 13:27:07 executing program 5: 13:27:07 executing program 4: 13:27:07 executing program 0: 13:27:07 executing program 2: 13:27:07 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0}, 0xa0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x37, &(0x7f0000000000)) ptrace(0x10, r1) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x0, 0x0) 13:27:07 executing program 1: 13:27:07 executing program 2: 13:27:07 executing program 0: 13:27:07 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2, @broadcast}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x100000000000007) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0xbd73bb58, 0x900000020000000, &(0x7f0000000180)={0x2, 0x2, @loopback}, 0x10) 13:27:07 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000140)=0xffffffffffffffff) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x100000000000007) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, 0x0, 0xbd73bb58, 0x900000020000000, &(0x7f0000000180)={0x2, 0x2, @loopback}, 0x10) sendto(r0, &(0x7f0000000340)="02", 0x1, 0x4000051, 0x0, 0x0) 13:27:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") sendto$inet6(r0, 0x0, 0xffffffffffffff2c, 0x20008011, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$packet(r0, &(0x7f0000000340), 0xff00, 0x40, 0x0, 0x0) 13:27:08 executing program 0: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x20006, 0x0, 0x0, 0xfffffffffffffff7}]}) stat(0x0, 0x0) 13:27:08 executing program 1: 13:27:08 executing program 4: 13:27:08 executing program 5: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fdatasync(0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) open(0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1100082) r1 = memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x8, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b39d778066f9d1ac8a570e3a42f70a7c0f30f66157a96aae15813f0dceb297", "a8a4cd01e527e6fd3de45387da0200000000000000e89046e6033a61edb75c8d51c05dfaf7f4fdb16e0cdaa4276939a341033400", "7b8ddcc0c891591c4116893616105829576914e70bfed06d00f900040000b8a7"}) 13:27:08 executing program 3: creat(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6(0xa, 0x400000000001, 0x0) syz_open_procfs(0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='net/ip_tables_names\x00') ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x81) bind(r3, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000003c0)={0x0, 0x8001}, 0x8) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) syz_open_dev$loop(0x0, 0x4, 0x200) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffeda) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20008088) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6(0xa, 0x802, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x8800, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) close(r7) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000480)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x4e24, @empty}, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x101, 0x5}) getpid() 13:27:08 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 13:27:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x17e, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0xd2204691bb658cf2}, @flat=@weak_handle, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:27:08 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) fremovexattr(r1, &(0x7f0000000400)=@known='user.s\xf9j\x00@\r<#\x14x)\x81\xe4\xbb\x82\x85Lof\f,/\xb0J\xd71\x8f<\xc9\x9e\xe8\xbd-6\x907\xe5\x8b}\xcb\xda;\xa5\xc6\xea<\x18_V{\x81\x1c\x1e\x96@iX\xd0\x0eO\x9cb\xc5=|\x87\x05 9\xec%O\xcb\xfa0\xcaY\xc3\xe0Buj\x1e\xf1dR\b\xba\xea\x96\x18\xd4\x88\xea\x89JH\f.;\xfc\xf7\xef\t\x06\x13\xac\x03\x9br\xe2E\xa3I\x068\xd5\x17D\x11\xb8nk\xb4\xb205\xee\x8e\xd1Pu\x1e\xcdUy\xc9\xbf\xc3\xdb\xea\x90\xcb~\xe2\xfd\x19c\xb2D\x1b\x8a\xd1\xb1\x9c=(\x85q\x91w\xda\xd9\\\x99\xdc\xa5\xfeL\xc6\xd2\xf9\x00\xdb\xed\x83\xd6\xa4\xb5S\xac@\x1c\xd5\x9c\x9cv\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O\xb4\x13\xcb\x1c$\xf0\x1bX\xe3\xde\x8bY\xc2\xbfA\x82\x03\xec\xc9U\x13\xa3\x8c\xea\x90LX\x83\xaa\xb5B\a\x0fj\xef}\xa3\x1f\xa3\xa3\xd1\xb29E2\x1c@\xa0\xb9_\x8do\xadZj\x9c8\x97*w\"]j2\xa6>\xe3\xc7T\xb4\xe7\xee\x96\x1c\xbb\n= +L\x18\xa6\x12\xf0\xefh0\xabO\x87\xc1\xa0\xa5\x9cq\xa6\x13\x95O}\x90%\xcb\xa6r\xfc#A>A\xcc\'\x02/*y\xef\x14\xe59`\x04Z\x80\xef\xd8?\xde{\xe7\x92E\xe8\xde\xd4\xd0\xe5s\xb8\x9a\xbdA\x9e}:\xcb\x1b\xc8\x90\xb3\x9d\xab\xde\xd3\xb7\xf0\xae+E\xb2\x96\xa9y\xec\xa03\x9e\x87\xfbT\xbd\xc4\x04\x83Y\x16V\xda\xb7\x8b\xebt\x9c\x8e\x03\xd8\xa3\v\xf6\x16Gwu\x85\x18\xa7\xd8\x96i\xe2\f\xa3^:\xfb\x17\xb2\xe0$\x13\x11j\x8c\x8b=\xe6\aT\xd5)04+;\\\xdb\x04tc\xab\x81\xa2') 13:27:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') preadv(r2, &(0x7f0000002880)=[{&(0x7f0000000140)=""/110, 0x6e}, {&(0x7f00000001c0)=""/74, 0x1f3}, {&(0x7f0000002300)=""/146, 0x92}, {&(0x7f00000023c0)=""/201, 0xc9}], 0x4, 0x0) 13:27:08 executing program 0: socket$inet6(0xa, 0x80002, 0x0) fdatasync(0xffffffffffffffff) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1100082) r1 = memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x8, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b39d778066f9d1ac8a570e3a42f70a7c0f30f66157a96aae15813f0dceb297", "a8a4cd01e527e6fd3de45387da0200000000000000e89046e6033a61edb75c8d51c05dfaf7f4fdb16e0cdaa4276939a341033400", "7b8ddcc0c891591c4116893616105829576914e70bfed06d00f900040000b8a7", [0x0, 0x3]}) 13:27:08 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@rand_addr="15376d743273146fa88268ce719f0597", 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x1000000000800, 0x0, 0xff, 0x2, 0x5, 0x0, 0xffffffff}, 0x20) fdatasync(r0) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r1 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r1, 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x60}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x5) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, 0x0, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000080), 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000140)) r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1100082) r4 = memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x8, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b39d778066f9d1ac8a570e3a42f70a7c0f30f66157a96aae15813f0dceb297", "a8a4cd01e527e6fd3de45387da0200000000000000e89046e6033a61edb75c8d51c05dfaf7f4fdb16e0cdaa4276939a341033400", "7b8ddcc0c891591c4116893616105829576914e70bfed06d00f900040000b8a7", [0xfffffffffffffff8, 0x3]}) sendfile(r3, r3, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r3, 0x4c01) 13:27:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x17e, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0xd2204691bb658cf2}, @flat=@weak_handle, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:27:08 executing program 1: mknod(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000001280)='./file0\x00', 0x2, 0x0) write$P9_RXATTRWALK(r0, &(0x7f0000000140)={0x6b}, 0xf) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x3}, 0x10000003e) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open$dir(&(0x7f0000000280)='./file0\x00', 0x83, 0x0) [ 153.196541] loop_reread_partitions: partition scan of loop0 (p|' $`BT՜G%ֳwfѬW:B [ 153.196541] |0aWj? β) failed (rc=-13) [ 153.201338] binder: 4076:4085 got transaction with invalid handle, 0 [ 153.201428] binder: 4076:4085 transaction failed 29201/-22, size 72-24 line 3228 [ 153.202967] binder: BINDER_SET_CONTEXT_MGR already set [ 153.202974] binder: 4076:4085 ioctl 40046207 0 returned -16 [ 153.203078] binder_alloc: 4076: binder_alloc_buf, no vma [ 153.203114] binder: 4076:4089 transaction failed 29189/-3, size 72-24 line 3137 [ 153.207371] binder: undelivered TRANSACTION_ERROR: 29189 [ 153.213654] binder: undelivered TRANSACTION_ERROR: 29201 13:27:08 executing program 5: setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000007c0)={@loopback}, 0x14) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x1f) [ 153.296096] loop_reread_partitions: partition scan of loop0 () failed (rc=-13) 13:27:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x17e, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0xd2204691bb658cf2}, @flat=@weak_handle, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:27:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) pipe(0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000080)={@flat, @fda, @flat=@handle}, &(0x7f0000000240)={0xfffffff3, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 153.387262] binder: 4098:4109 got transaction with invalid handle, 0 [ 153.405728] loop_reread_partitions: partition scan of loop0 (p|' $`BT՜G%ֳwfѬW:B [ 153.405728] |0aWj? β) failed (rc=-13) [ 153.418060] binder: 4098:4109 transaction failed 29201/-22, size 72-24 line 3228 [ 153.419535] binder: undelivered TRANSACTION_ERROR: 29201 [ 153.525226] binder: 4120:4124 got transaction with invalid handle, 0 [ 153.538004] binder: 4121:4125 got transaction with invalid offset (4294967283, min 0 max 80) or object. [ 153.552594] binder: 4120:4124 transaction failed 29201/-22, size 72-24 line 3228 [ 153.570466] binder: 4121:4125 transaction failed 29201/-22, size 80-24 line 3199 [ 153.579731] binder: undelivered TRANSACTION_ERROR: 29201 [ 153.580893] binder: BINDER_SET_CONTEXT_MGR already set [ 153.580900] binder: 4121:4127 ioctl 40046207 0 returned -16 [ 153.651855] binder: undelivered TRANSACTION_ERROR: 29201 13:27:09 executing program 3: creat(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6(0xa, 0x400000000001, 0x0) syz_open_procfs(0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='net/ip_tables_names\x00') ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x81) bind(r3, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000003c0)={0x0, 0x8001}, 0x8) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) syz_open_dev$loop(0x0, 0x4, 0x200) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffeda) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20008088) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6(0xa, 0x802, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x8800, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) close(r7) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000480)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x4e24, @empty}, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x101, 0x5}) getpid() 13:27:09 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x39) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x10}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 13:27:09 executing program 5: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x6, 0x11, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 13:27:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c) getsockopt$inet6_opts(r1, 0x29, 0x39, 0x0, &(0x7f0000000180)=0xfffffffffffffe6e) 13:27:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x17e, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0xd2204691bb658cf2}, @flat=@weak_handle, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:27:09 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') preadv(r1, &(0x7f0000002880)=[{&(0x7f0000000140)=""/110, 0x2a2}, {&(0x7f00000001c0)=""/74, 0x4a}, {&(0x7f0000002300)=""/146, 0x92}], 0x3, 0x0) [ 154.138989] binder: 4140:4142 got transaction with invalid handle, 0 [ 154.157390] binder: 4140:4142 transaction failed 29201/-22, size 72-24 line 3228 [ 154.206851] binder: undelivered TRANSACTION_ERROR: 29201 13:27:09 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@rand_addr="15376d743273146fa88268ce719f0597", 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x1000000000800, 0x0, 0xff, 0x2, 0x5, 0x0, 0xffffffff}, 0x20) fdatasync(r0) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r1 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r1, 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x60}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x5) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, 0x0, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000080), 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000140)) r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1100082) r4 = memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x8, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b39d778066f9d1ac8a570e3a42f70a7c0f30f66157a96aae15813f0dceb297", "a8a4cd01e527e6fd3de45387da0200000000000000e89046e6033a61edb75c8d51c05dfaf7f4fdb16e0cdaa4276939a341033400", "7b8ddcc0c891591c4116893616105829576914e70bfed06d00f900040000b8a7", [0xfffffffffffffff8, 0x3]}) sendfile(r3, r3, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r3, 0x4c01) 13:27:09 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x2102201ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 13:27:09 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x39) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x10}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 13:27:09 executing program 5: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000020707031dbffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 13:27:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x17e, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0xd2204691bb658cf2}, @flat=@weak_handle, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 154.335650] loop_reread_partitions: partition scan of loop0 () failed (rc=-13) 13:27:09 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@initdev, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fdatasync(r0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x323) r3 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r2, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x137) sendfile(r2, r3, 0x0, 0x9001) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000140)) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1100082) r5 = memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b39d778066f9d1ac8a570e3a42f70a7c0f30f66157a96aae15813f0dceb297", "a8a4cd01e527e6fd3de45387da0200000000000000e89046e6033a61edb75c8d51c05dfaf7f4fdb16e0cdaa4276939a341033400", "7b8ddcc0c891591c4116893616105829576914e70bfed06d00f900040000b8a7", [0xfffffffffffffff8]}) sendfile(r4, r4, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r4, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000000000002) [ 154.409982] binder: 4163:4171 transaction failed 29189/-22, size 72-24 line 3014 [ 154.437104] binder: undelivered TRANSACTION_ERROR: 29189 13:27:10 executing program 3: 13:27:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x17e, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0xd2204691bb658cf2}, @flat=@weak_handle, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:27:10 executing program 1: 13:27:12 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x39) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x10}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 421.604965] INFO: task syz-executor.0:2113 blocked for more than 140 seconds. [ 421.612407] Not tainted 4.4.174+ #4 [ 421.616573] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 421.624532] syz-executor.0 D ffff8800a990f668 25344 2113 1 0x00000004 [ 421.632014] ffff8800a990f668 ffff8800b6844740 d8a066fd57179c83 ffff8800b6844740 [ 421.640156] 0000000000000000 ffff8800b6845000 ffff8801db61f180 ffff8801db61f1a8 [ 421.648340] ffff8801db61e898 ffffffff82e151c0 ffff8800b6844740 ffffed0015321001 [ 421.656404] Call Trace: [ 421.659057] [] schedule+0x99/0x1d0 [ 421.664387] [] schedule_preempt_disabled+0x13/0x20 [ 421.670980] [] mutex_lock_nested+0x3c2/0xb80 [ 421.677049] [] ? __blkdev_get+0x10c/0xdf0 [ 421.682834] [] ? get_disk+0xe0/0xe0 [ 421.688118] [] ? kobj_lookup+0x273/0x410 [ 421.694041] [] ? mutex_trylock+0x500/0x500 [ 421.699983] [] ? disk_block_events+0xc7/0x140 [ 421.706151] [] __blkdev_get+0x10c/0xdf0 [ 421.711776] [] ? __blkdev_put+0x840/0x840 [ 421.717589] [] ? trace_hardirqs_on+0x10/0x10 [ 421.723645] [] blkdev_get+0x2e8/0x920 [ 421.729139] [] ? bd_may_claim+0xd0/0xd0 [ 421.734758] [] ? bd_acquire+0x8a/0x370 [ 421.740319] [] ? _raw_spin_unlock+0x2d/0x50 [ 421.746328] [] blkdev_open+0x1aa/0x250 [ 421.751860] [] do_dentry_open+0x38f/0xbd0 [ 421.757661] [] ? __inode_permission2+0x9e/0x250 [ 421.764059] [] ? blkdev_get_by_dev+0x80/0x80 [ 421.770126] [] vfs_open+0x10b/0x210 [ 421.775405] [] ? may_open.isra.0+0xe7/0x210 [ 421.781358] [] path_openat+0x136f/0x4470 [ 421.787076] [] ? kasan_kmalloc.part.0+0xc6/0xf0 [ 421.793391] [] ? may_open.isra.0+0x210/0x210 [ 421.799457] [] ? trace_hardirqs_on+0x10/0x10 [ 421.805523] [] do_filp_open+0x1a1/0x270 [ 421.811144] [] ? trace_hardirqs_on+0x10/0x10 [ 421.817313] [] ? user_path_mountpoint_at+0x50/0x50 [ 421.823928] [] ? __alloc_fd+0x1ea/0x490 [ 421.829564] [] ? _raw_spin_unlock+0x2d/0x50 [ 421.835544] [] do_sys_open+0x2f8/0x600 [ 421.841067] [] ? mntput+0x66/0x90 [ 421.846177] [] ? filp_open+0x70/0x70 [ 421.851535] [] ? SyS_mkdirat+0x164/0x250 [ 421.857261] [] ? task_work_run+0x251/0x2b0 [ 421.863139] [] ? SyS_mknod+0x40/0x40 [ 421.868517] [] ? int_ret_from_sys_call+0x52/0xa3 [ 421.874943] [] ? trace_hardirqs_on_caller+0x385/0x5a0 [ 421.881768] [] SyS_open+0x2d/0x40 [ 421.886878] [] entry_SYSCALL_64_fastpath+0x1e/0x9a [ 421.893447] 1 lock held by syz-executor.0/2113: [ 421.898122] #0: (&bdev->bd_mutex){+.+.+.}, at: [] __blkdev_get+0x10c/0xdf0 [ 421.907540] Sending NMI to all CPUs: [ 421.911651] NMI backtrace for cpu 0 [ 421.915315] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.4.174+ #4 [ 421.921594] task: ffffffff82e151c0 task.stack: ffffffff82e00000 [ 421.927673] RIP: 0010:[] [] native_safe_halt+0x2/0x10 [ 421.936081] RSP: 0018:ffffffff82e07db0 EFLAGS: 00000246 [ 421.941602] RAX: 0000000000000007 RBX: ffffffff8319bf68 RCX: 0000000000000000 [ 421.949048] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffffff82e15a84 [ 421.956338] RBP: ffffffff82e07de0 R08: 0000000000000000 R09: 0000000000000000 [ 421.963660] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 421.971006] R13: ffffffff82e08000 R14: dffffc0000000000 R15: ffffffff82e00000 [ 421.978354] FS: 0000000000000000(0000) GS:ffff8801db600000(0000) knlGS:0000000000000000 [ 421.987734] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 421.993607] CR2: 0000000001a583e0 CR3: 00000001d6d19000 CR4: 00000000001606b0 [ 422.000895] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 422.008174] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 422.015447] Stack: [ 422.017587] ffffffff81020b16 ffffffff82e00000 0000000000000000 ffffffff82e08000 [ 422.025212] dffffc0000000000 ffffffff82e00000 ffffffff82e07df0 ffffffff81022d50 [ 422.032979] ffffffff82e07e08 ffffffff811eb4c8 0000000000000000 ffffffff82e07ed0 [ 422.040519] Call Trace: [ 422.043092] [] ? default_idle+0x56/0x3d0 [ 422.048898] [] arch_cpu_idle+0x10/0x20 [ 422.054470] [] default_idle_call+0x48/0x70 [ 422.060360] [] cpu_startup_entry+0x6d1/0x810 [ 422.066419] [] ? complete+0x18/0x70 [ 422.071678] [] ? call_cpuidle+0xe0/0xe0 [ 422.077305] [] ? schedule+0xab/0x1d0 [ 422.082657] [] rest_init+0x190/0x199 [ 422.088029] [] ? trace_event_define_fields_x86_irq_vector+0x2c/0x2c [ 422.096090] [] start_kernel+0x64a/0x67e [ 422.101694] [] ? thread_stack_cache_init+0xb/0xb [ 422.108102] [] ? early_idt_handler_array+0x120/0x120 [ 422.114858] [] ? early_idt_handler_array+0x120/0x120 [ 422.121592] [] x86_64_start_reservations+0x29/0x2b [ 422.128288] [] x86_64_start_kernel+0x137/0x15a [ 422.134526] Code: 2e 0f 1f 84 00 00 00 00 00 fa c3 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 fb c3 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 fb f4 0f 1f 00 66 2e 0f 1f 84 00 00 00 00 00 f4 c3 0f 1f 40 00 66 [ 422.153642] NMI backtrace for cpu 1 [ 422.157270] CPU: 1 PID: 20 Comm: khungtaskd Not tainted 4.4.174+ #4 [ 422.163715] task: ffff8801da6c4740 task.stack: ffff8801d9ef0000 [ 422.169773] RIP: 0010:[] [] flat_send_IPI_mask+0xf7/0x1b0 [ 422.178525] RSP: 0018:ffff8801d9ef7c88 EFLAGS: 00000046 [ 422.183959] RAX: 0000000000000000 RBX: 0000000000000c00 RCX: 0000000000000000 [ 422.191298] RDX: 0000000000000c00 RSI: 0000000000000000 RDI: ffffffffff5fc300 [ 422.198581] RBP: ffff8801d9ef7cb8 R08: 0000000000000018 R09: 0000000000000000 [ 422.205856] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000246 [ 422.213184] R13: 0000000003000000 R14: ffffffff82e5f2e0 R15: 0000000000000002 [ 422.220521] FS: 0000000000000000(0000) GS:ffff8801db700000(0000) knlGS:0000000000000000 [ 422.228778] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 422.234643] CR2: 00007fcff0189000 CR3: 00000000b7b00000 CR4: 00000000001606b0 [ 422.241919] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 422.249191] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 422.256497] Stack: [ 422.258640] 0000000000000001 ffffffff82e5f2e0 ffffffff831a6ac0 fffffbfff0634c34 [ 422.266184] 000000000001b6c0 0000000000000008 ffff8801d9ef7cd8 ffffffff81092bee [ 422.273710] 0000000000000008 ffffffff82924260 ffff8801d9ef7d30 ffffffff81ab8252 [ 422.281248] Call Trace: [ 422.283825] [] nmi_raise_cpu_backtrace+0x5e/0x80 [ 422.290235] [] nmi_trigger_all_cpu_backtrace.cold+0xa1/0xae [ 422.297650] [] ? print_lock+0xa8/0xab [ 422.303088] [] ? irq_force_complete_move+0x330/0x330 [ 422.309845] [] arch_trigger_all_cpu_backtrace+0x14/0x20 [ 422.316872] [] watchdog.cold+0xd3/0xee [ 422.322396] [] ? watchdog+0xac/0xa00 [ 422.327758] [] ? reset_hung_task_detector+0x20/0x20 [ 422.334454] [] kthread+0x273/0x310 [ 422.339648] [] ? kthread_create_on_node+0x4c0/0x4c0 [ 422.346325] [] ? _raw_spin_unlock_irq+0x39/0x60 [ 422.352659] [] ? finish_task_switch+0x1e1/0x660 [ 422.358981] [] ? finish_task_switch+0x1b3/0x660 [ 422.365306] [] ? __schedule+0x7af/0x1ee0 [ 422.371006] [] ? __schedule+0x7a3/0x1ee0 [ 422.376719] [] ? __schedule+0x7af/0x1ee0 [ 422.382420] [] ? kthread_create_on_node+0x4c0/0x4c0 [ 422.389093] [] ret_from_fork+0x55/0x80 [ 422.394621] [] ? kthread_create_on_node+0x4c0/0x4c0 [ 422.401412] Code: 00 c3 5f ff 80 e6 10 75 e1 41 c1 e5 18 44 89 2c 25 10 c3 5f ff 44 89 fa 09 da 80 cf 04 41 83 ff 02 0f 44 d3 89 14 25 00 c3 5f ff <41> f7 c4 00 02 00 00 75 1e 4c 89 e7 57 9d 0f 1f 44 00 00 e8 f1 [ 422.420567] Kernel panic - not syncing: hung_task: blocked tasks [ 422.426811] CPU: 1 PID: 20 Comm: khungtaskd Not tainted 4.4.174+ #4 [ 422.433316] 0000000000000000 682c9561b7abd91c ffff8801d9ef7c60 ffffffff81aad1a1 [ 422.441356] ffff8800b6844740 ffffffff82872120 dffffc0000000000 0000000000000002 [ 422.449413] 00000000003fffa0 ffff8801d9ef7d40 ffffffff813a48c2 0000000041b58ab3 [ 422.457442] Call Trace: [ 422.460013] [] dump_stack+0xc1/0x120 [ 422.465364] [] panic+0x1b9/0x37b [ 422.470363] [] ? add_taint.cold+0x16/0x16 [ 422.476142] [] ? nmi_trigger_all_cpu_backtrace+0x3e1/0x490 [ 422.483397] [] ? nmi_trigger_all_cpu_backtrace+0x3c6/0x490 [ 422.490652] [] ? nmi_trigger_all_cpu_backtrace+0x3c6/0x490 [ 422.497906] [] watchdog.cold+0xe4/0xee [ 422.503428] [] ? watchdog+0xac/0xa00 [ 422.508774] [] ? reset_hung_task_detector+0x20/0x20 [ 422.515425] [] kthread+0x273/0x310 [ 422.520596] [] ? kthread_create_on_node+0x4c0/0x4c0 [ 422.527281] [] ? _raw_spin_unlock_irq+0x39/0x60 [ 422.533581] [] ? finish_task_switch+0x1e1/0x660 [ 422.539886] [] ? finish_task_switch+0x1b3/0x660 [ 422.546279] [] ? __schedule+0x7af/0x1ee0 [ 422.551972] [] ? __schedule+0x7a3/0x1ee0 [ 422.557665] [] ? __schedule+0x7af/0x1ee0 [ 422.563389] [] ? kthread_create_on_node+0x4c0/0x4c0 [ 422.570073] [] ret_from_fork+0x55/0x80 [ 422.575770] [] ? kthread_create_on_node+0x4c0/0x4c0 [ 422.583152] Kernel Offset: disabled [ 422.586788] Rebooting in 86400 seconds..