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"], 0x688) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r2, 0xfae71e5936326fae) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x4f) fchmod(r3, 0xfae71e5936326fae) ioctl$TCSETXF(r3, 0x5434, &(0x7f0000000b40)={0x9, 0x8282, [0x6, 0x3ff, 0x0, 0x0, 0x7], 0x8}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000a40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4200}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa4, r4, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffe0}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2f}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x5040}, 0xd0c0ba0cf5f206ce) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x39) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r5, 0x0, 0x0) sched_setparam(r0, &(0x7f0000000b80)=0x1) rt_tgsigqueueinfo(0xffffffffffffffff, r5, 0xa, &(0x7f0000000ac0)={0x22, 0x0, 0x2}) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r6, 0xfae71e5936326fae) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000a80)={0x0, 0x1, 0x5, 0x3}) clone(0x20886100, 0x0, 0x0, 0x0, &(0x7f00000002c0)="d353ff072d68b2e4dc05000000b3d94c22") dup(0xffffffffffffffff) 12:29:49 executing program 2: mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000680)=""/70, 0x46}, {0x0}, {&(0x7f00000007c0)=""/193, 0xc1}, {0x0}, {0x0}], 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000d80)=@nat={'nat\x00', 0x1b, 0x5, 0x5f0, 0x0, 0x300, 0x178, 0x300, 0x0, 0x580, 0x580, 0x580, 0x580, 0x580, 0x5, &(0x7f0000000500), {[{{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [0xffffffff], [0xff, 0xff000000, 0xff], 'bcsf0\x00', 'nr0\x00', {0xff}, {0xff}, 0x8, 0xff, 0x2, 0x8}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@frag={0x30, 'frag\x00', 0x0, {0x0, 0x3b, 0x85f4, 0x18, 0x3}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x10, @ipv6=@loopback, @ipv6=@loopback, @gre_key, @port=0x4e22}}}, {{@uncond, 0x0, 0x140, 0x188, 0x0, {}, [@common=@inet=@set3={0x50, 'set\x00', 0x3, {{0x0, 0x3f, 0x5}, {0x0, 0x4}, {0x8, 0x8}, 0x7d7}}, @common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x44, 0x80}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@mcast2, @ipv6=@dev={0xfe, 0x80, [], 0x20}, @port=0x4e21, @port=0x4e21}}}, {{@ipv6={@ipv4={[], [], @empty}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [0x0, 0x0, 0x7f, 0x2756ddf7f4819425], [0x0, 0xffffffff, 0x0, 0xffffffff], 'team_slave_0\x00', 'bond_slave_0\x00', {}, {0xff}, 0x0, 0x8, 0x4, 0x1}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@statistic={0x38, 'statistic\x00', 0x0, {0x1, 0x0, 0x9, 0x10001, 0x80, 0x5}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@mcast2, @ipv6=@empty, @port=0x4e22, @gre_key=0x346}}}, {{@ipv6={@mcast2, @mcast1, [0xffffffff, 0xff, 0xff, 0xffffffff], [0x0, 0xffffff00, 0x0, 0xff], 'rose0\x00', 'bpq0\x00', {}, {0x101}, 0x87, 0x4, 0x0, 0x2}, 0x0, 0xc8, 0x110}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x4, @ipv4=@loopback, @ipv4=@rand_addr=0x6, @gre_key=0x8, @icmp_id=0x65}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) socket$inet6_udplite(0xa, 0x2, 0x88) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454cf2deda40729b25fb04cff9ffffff3f00588171001000700155c4ef95311d39962100001600381001000900ff030100029ed66ce1f8ff0e4ec61030cf4b07"], 0x41) recvmmsg(0xffffffffffffffff, &(0x7f0000002d80)=[{{&(0x7f0000000340)=@ax25={{0x3, @default}, [@netrom, @bcast, @rose, @default, @netrom, @netrom]}, 0x80, &(0x7f0000000940), 0x0, &(0x7f00000009c0)=""/206, 0xce}, 0xc0000000}, {{&(0x7f0000000ac0)=@nl=@unspec, 0x80, &(0x7f0000002f40)=[{&(0x7f0000000b40)=""/224, 0xe0}, {&(0x7f0000000c40)=""/237, 0xed}, {&(0x7f0000001d80)=""/188, 0xbc}, {&(0x7f0000000180)=""/47, 0x2f}], 0x4}, 0xfffffff7}, {{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000001e40)=""/251, 0xfb}, {&(0x7f0000001f40)=""/3, 0x3}, {&(0x7f0000001f80)=""/111, 0x6f}], 0x3}, 0x76}, {{&(0x7f0000002040)=@x25={0x9, @remote}, 0x80, &(0x7f00000020c0)}}, {{&(0x7f0000002100)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000002500), 0x0, &(0x7f0000002580)=""/121, 0x79}, 0x6}, {{&(0x7f0000002600)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000002680)=""/215, 0xd7}, {&(0x7f0000002780)=""/154, 0x9a}, {&(0x7f0000002840)=""/3, 0x3}, {&(0x7f0000002880)=""/190, 0xbe}, {&(0x7f0000002940)=""/235, 0xeb}, {&(0x7f0000002a40)=""/95, 0x5f}], 0x6}, 0x1}], 0x6, 0x20, 0x0) read(r0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) fremovexattr(r1, &(0x7f0000000140)=@known='user.syz\x00') mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) getresgid(&(0x7f0000000100), 0x0, 0x0) pipe(&(0x7f0000000440)) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f00000004c0)) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r3 = socket(0xa, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000003c0)={r4, r5+30000000}, &(0x7f0000000400)) fcntl$notify(0xffffffffffffffff, 0x402, 0x4) recvfrom$packet(r3, 0x0, 0x0, 0x40000000, 0x0, 0x0) 12:29:49 executing program 0: ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x750, {0x2, 0x0, @dev}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x2, 0x0, @empty}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe}) time(&(0x7f0000000040)) 12:29:49 executing program 1: r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000002c0)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r2, 0xfae71e5936326fae) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000040)={0x0, 0xfff, 0x4, 0x1, 0x3, 0x100}) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r3, 0xfae71e5936326fae) sendfile(r0, r3, &(0x7f0000000000), 0x92) preadv(r1, &(0x7f00000017c0), 0x332, 0x0) 12:29:49 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r2, 0xfae71e5936326fae) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000180)={0x0, 0x73, {0x56, 0x5, 0x0, {0x9, 0x1000}, {0x6, 0x5}, @const={0x5b, {0x2, 0x6, 0x0, 0xff}}}, {0x55, 0x3, 0x1, {0x2, 0xfffb}, {0xffff, 0x7ff}, @period={0x59, 0x0, 0x7c9, 0x1, 0x3, {0x4, 0x7, 0x4, 0x8}, 0x8, &(0x7f0000000040)=[0x4d, 0x5, 0x4, 0x3ff, 0x3ff, 0x0, 0x9, 0x3]}}}) write(r1, &(0x7f0000000340), 0x100000488) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:29:49 executing program 5: r0 = syz_open_dev$binderN(0x0, 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="4dee092a1d44baea84ddfa59619853eb7ffa2e00db9858d8dde90900000000000000a25ac300b9dd1a89db4af484280dc7c869ef0899a711a09c34199e26032efd44f550c223544cd202cbad9e9dafa02e1545c39bc4b83c5df6c6e3c71298a6c8e10efe01e4bcbfe91d9479437b2437592567c7fefb203844491667331202072d111610f1e61b6a1d9b5207912cdcb448bfcd95b7815cd6ce1fc6d3521a"], 0x0, 0x0, 0x0}) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x101000, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@remote, r2}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', r2}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) clone(0x1ad25e5f5724f413, &(0x7f0000000b00)="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", 0x0, &(0x7f0000000400), 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 12:29:49 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x365d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x101100, 0x0) getdents(r1, &(0x7f00000005c0)=""/223, 0xfc61) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x20) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 12:29:49 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigreturn() recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000002c0)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r0, 0xfae71e5936326fae) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/12}) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r2, &(0x7f00000017c0), 0x332, 0x0) [ 188.041004] EXT4-fs warning (device sda1): ext4_group_add:1612: No reserved GDT blocks, can't resize 12:29:49 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0xed, &(0x7f00000007c0)=[{&(0x7f0000000640)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) lremovexattr(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="4699fd"]) sched_setparam(0x0, &(0x7f0000000440)=0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r1, 0x0, 0xe, &(0x7f00000000c0), &(0x7f0000000180)=0x4) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaae53, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000000b00000040000080000000000000006d5ebe5a0000ffff53ef", 0x5cf, 0x400}], 0x1, 0x0) 12:29:49 executing program 1: r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000002c0)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) preadv(r0, &(0x7f00000017c0), 0x10000000000002fb, 0x3) 12:29:49 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000002c0)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x4f) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f00000017c0), 0x332, 0x0) 12:29:49 executing program 1: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r0, 0xfae71e5936326fae) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000002c0)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f00000017c0), 0x332, 0x0) [ 188.482151] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 188.491795] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 188.501560] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 188.531127] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=128, mo=a8024018, mo2=0002] [ 188.542932] System zones: 0-7 [ 188.568023] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 12:29:50 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000002c0)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0) preadv(r0, &(0x7f00000017c0), 0x332, 0x0) 12:29:50 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="58010000100013070000000000000000ac1414bb000000000000000000000000fe8000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x158}}, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x2000, 0x60) fchmod(r1, 0xfae71e5936326fae) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r2, 0xfae71e5936326fae) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000003c0)={0x2, 0x6, 0x6}) exit_group(0x80000001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) write$P9_RLERRORu(r1, &(0x7f00000000c0)={0x15, 0x7, 0x1, {{0x8, '-keyring'}, 0x9}}, 0x15) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'veth0_to_bond\x00', @broadcast}) 12:29:50 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', 0x0, 0x2001001, 0x0) pipe2(&(0x7f00000000c0), 0x800) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xacc4e2, 0x0) close(0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x3cd) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) 12:29:50 executing program 5: r0 = syz_open_dev$binderN(0x0, 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="4dee092a1d44baea84ddfa59619853eb7ffa2e00db9858d8dde90900000000000000a25ac300b9dd1a89db4af484280dc7c869ef0899a711a09c34199e26032efd44f550c223544cd202cbad9e9dafa02e1545c39bc4b83c5df6c6e3c71298a6c8e10efe01e4bcbfe91d9479437b2437592567c7fefb203844491667331202072d111610f1e61b6a1d9b5207912cdcb448bfcd95b7815cd6ce1fc6d3521a"], 0x0, 0x0, 0x0}) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x101000, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@remote, r2}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', r2}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) clone(0x1ad25e5f5724f413, &(0x7f0000000b00)="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", 0x0, &(0x7f0000000400), 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 12:29:50 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) close(r0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x100000000000000}, 0x0, 0x0, 0x2200, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) ftruncate(r1, 0x1) sendto$inet(r2, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) keyctl$reject(0x13, 0x0, 0x883, 0x3, 0xfffffffffffffffa) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffccf, 0x240, 0x0, 0xffffffffffffff37) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r3, 0xfae71e5936326fae) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000000)={0x18, 0x1, 0x0, {0xc}}, 0x18) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r4, 0xfae71e5936326fae) setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, &(0x7f0000000040)=0x4800000, 0x4) 12:29:50 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x80, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f00000000c0)=0xa1) r1 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="7f00460e"], 0x4) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r2, 0xfae71e5936326fae) r3 = dup2(r1, r2) ioctl$IOC_PR_PREEMPT_ABORT(r3, 0x401870cc, &(0x7f0000000040)={0x2, 0x5, 0x5, 0x16}) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 188.918437] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. 12:29:50 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/\x8c\x00', 0x6b5ae3fe2d495fa6, 0x0) lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000480)='trusted.overlay.origin\x00', 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x23, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/413], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sysinfo(&(0x7f0000000000)=""/50) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 12:29:50 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000002c0)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r2, 0xfae71e5936326fae) sendfile(r1, r2, &(0x7f0000000000), 0x5) preadv(r0, &(0x7f00000017c0), 0x332, 0x0) 12:29:50 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r2 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@generic, &(0x7f0000000000)=0x80, 0x40000) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000140)={0x2, 0xfffffffe, 0x7, 0x0, 0xfff}, 0x14) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r3 = dup(r1) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) [ 189.043504] EXT4-fs (sda1): re-mounted. Opts: 12:29:50 executing program 2: pipe(&(0x7f00000001c0)={0xffffffffffffffff}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000200)=0x0) waitid(0x2, r1, 0x0, 0x8, &(0x7f0000000240)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) stat(0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in=@broadcast, @in6=@remote}}, {{@in6=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000000100)=0xe8) fstat(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000900)={0x0, 0x0}, &(0x7f0000000940)=0xc) lchown(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', r4, r3) r5 = socket$unix(0x1, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000000100)=0xe8) fstat(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', r6, r7) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r8, 0x0, 0xb, 0x0, &(0x7f0000000040)) fstat(r8, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r10, 0x0, 0xb, 0x0, &(0x7f0000000040)) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0}, &(0x7f00000005c0)=0xc) getresgid(&(0x7f0000000600)=0x0, &(0x7f0000000640), &(0x7f0000000680)) stat(&(0x7f00000006c0)='./file1\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = socket$unix(0x1, 0x2, 0x0) r15 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r15, 0xfae71e5936326fae) getsockopt$inet6_IPV6_IPSEC_POLICY(r15, 0x29, 0x22, &(0x7f0000000c40)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000000a40)=0x101ee) fstat(r14, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', r16, r17) r18 = socket$unix(0x1, 0x2, 0x0) r19 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r19, 0x0, 0xb, 0x0, &(0x7f0000000040)) dup3(r19, 0xffffffffffffffff, 0x80000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000000100)=0xe8) fstat(r18, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', r20, r21) r22 = socket$unix(0x1, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000000100)=0xe8) fstat(r22, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', r23, r25) r26 = socket$unix(0x1, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000000100)=0xe8) fstat(r26, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(0x0, r27, r28) getresgid(&(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f0000000d40)=ANY=[@ANYBLOB="03000000010004000047000002372399de3dab0aba000200", @ANYRES32, @ANYBLOB="02000400", @ANYBLOB="02000500", @ANYRES32=r6, @ANYBLOB="02000200", @ANYRES32=r9, @ANYBLOB="02000600", @ANYRES32=r11, @ANYBLOB="040001000000000008000200", @ANYRES32=r12, @ANYBLOB="08000500", @ANYRES32=r13, @ANYBLOB="00000384", @ANYRES32=r17, @ANYBLOB='\b\x00', @ANYRES32=r21, @ANYBLOB="0837ab7ebb155d8e1d00b076c4b9639ac83256fc02fe6940da3e68197715a58eb3d12e8c0a164d2c5a198565ffd906f1ca4cab93a29eb913092447777ca9b2b5ebe1cfda429cf0844c5369c0018ad099dd66c1c79ff4653c27ba45639dfd76f5c84e75b3d9c1729de22b20adc6d72230c9233f0c8dd170b35e", @ANYRES32=0x0, @ANYRESOCT=r4, @ANYRES16=r23, @ANYRES32=r28, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r24, @ANYBLOB="100001000000000020000000"], 0x19, 0x2) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', 0x0, 0x2001001, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xffffffffffffff74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x0, 0xfffffffe, 0x9, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r29 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r29, 0x0, 0xb, 0x0, &(0x7f0000000040)) connect(r29, &(0x7f0000000300)=@ipx={0x4, 0x4, 0x1, "0482eb8e4970", 0xa7}, 0x80) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r30 = socket$inet(0x2, 0x0, 0x0) sendto$inet(r30, 0x0, 0x0, 0x0, 0x0, 0xb2) clock_gettime(0x2, &(0x7f00000003c0)={0x0, 0x0}) futimesat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', &(0x7f0000000180)={{r31, r32/1000+30000}, {0x77359400}}) r33 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r33, 0x0, 0xb, 0x0, &(0x7f0000000040)) r34 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r34, 0x0, 0x0, 0x0, &(0x7f0000000040)) r35 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r35, 0x0, 0xb, 0x0, &(0x7f0000000040)) r36 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r36, 0x0, 0xb, 0x0, &(0x7f0000000040)) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0xacc4e2, &(0x7f0000000a00)=ANY=[@ANYPTR64=&(0x7f00000009c0)=ANY=[@ANYRESHEX=r33, @ANYPTR=&(0x7f0000000980)=ANY=[@ANYRESOCT, @ANYRESDEC=0x0, @ANYRESDEC=r35], @ANYRESOCT=0x0], @ANYRES16, @ANYBLOB="3020f0ff4780d7a13749a75603000000beffff00003b34e9d883e460eebe", @ANYRES16=r36, @ANYRES64=0x0]) 12:29:50 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="8cd2b939007100cd80"], 0x9}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYPTR64, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="07f35c4140267c3450d56436a2d52b62d68e3940836f781c671e7365fd742377361a49fcf4000191c837edac9c69080035302e74d8107629a4e206000000d850e3645d1fefd3f0ab5c5a7b93f1b1d8f378b35e1a69383eca5f85743ea7cec18ecf8513d817a7e3870d23df320941c7acbb4703cdc5c3f13f7fef3dd2c75150b5d1b17aceb0617303783e277b39aaf3bb9df5686de90b0a8e7038e1440b1312a2e2741968b4fdf2f97d71d47e1173b457691ea8123c229de597058d4a98110e97"], 0x0, 0xd8}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:29:50 executing program 1: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x4, r0, 0x0) clone(0x4000000, &(0x7f0000000140)="ba2925cdc7b8a4fbfcb90cf0b75b7ed6406c5ed81a982a51672d3b190de9f2e676fe3948b0916a432d496819fb048dc44249e79d9722c353faf467913aac7191381b805085c4872b23c4efafb30dd20a04105e5b96b895c4e75d1539f5ecba13a84605fb63a7fbfec92fc257ca6823bce77e8bf065b4c8fe2d9ef705c5b94f4c4afaea2534571eb538e565d9acd58c6e2c344146d39e4ea69ffc8a6e0248d23768675253f4568d8fdaca337db3", &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000340)="a58705c80ed73622d400b14fdb6453d60a1da6ae58749c2e232c1af3afb48de900666a5108e247c242046d9b4b29f745078a92d2833dd34e730a8ef39d32d18f9db1d5bf279d57fd3f573c7855ae1cb8afa9a59e20572c8c") r1 = creat(&(0x7f0000000040)='./file0\x00', 0x189) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000002c0)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r2, &(0x7f00000017c0), 0x332, 0x0) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000000)) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000100)) umount2(&(0x7f0000000280)='./file0\x00', 0x8) 12:29:50 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x8001}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53d, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000001, &(0x7f0000000140)={0xa, 0x2}, 0x1c) socket(0x0, 0x800, 0x0) splice(r4, 0x0, r3, 0x0, 0x1000000000000003, 0x0) inotify_init1(0x0) alarm(0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, 0x0, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) sendto$packet(r4, &(0x7f00000000c0), 0xfffffffffffffd4d, 0x1, 0x0, 0x44) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) [ 189.126580] EXT4-fs (sda1): re-mounted. Opts: 12:29:50 executing program 0: open(&(0x7f0000000200)='./file0\x00', 0x8040, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd-', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) clone(0x4007ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) statfs(&(0x7f0000000000)='./file0\x00', 0x0) 12:29:50 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r0, 0xfae71e5936326fae) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000000)={0x5, 0xff, 0x0, 0x3, 0x4}) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000002c0)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000040)={0x101, 0x6}) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r2, &(0x7f00000017c0), 0x332, 0x0) [ 189.343243] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 189.352748] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 189.363243] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 12:29:50 executing program 5: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) select(0x0, 0x0, &(0x7f0000000880)={0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x0, 0xa0}, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, 0x0, &(0x7f00000008c0)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x9, &(0x7f00000006c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280) socketpair(0x0, 0x0, 0x5093, &(0x7f0000000080)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000940)={'bridge_slave_1\x00', &(0x7f0000000900)=@ethtool_sset_info={0x37, 0x0, 0x9, [0x10001, 0x81, 0x1df40000000000, 0x2]}}) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f00000003c0)=ANY=[], 0x0) r5 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r6 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x20008088) write$cgroup_type(r5, &(0x7f00000000c0)='threaded\x00', 0x8db9) sendfile(r5, r6, 0x0, 0x8000fffffffe) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r8, &(0x7f00000003c0)=ANY=[@ANYBLOB='V'], 0x1) r9 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r10 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, 0x0) write$cgroup_type(r9, &(0x7f00000000c0)='threaded\x00', 0x8db9) sendfile(r9, r10, 0x0, 0x8000fffffffe) ioctl$EXT4_IOC_MIGRATE(r9, 0x6609) clock_gettime(0x0, &(0x7f0000000300)={0x0}) ppoll(&(0x7f0000000100)=[{r3, 0x6a08}, {r4, 0x6d7cf690f0f11a1c}, {r1, 0x10}, {r6, 0x20}, {r7, 0x200}, {r8, 0x402}, {r1, 0x2}, {r9}, {r0, 0x4000}], 0x9, &(0x7f0000000380)={r11}, &(0x7f00000003c0)={0x5428}, 0x8) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0) vmsplice(r2, 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000600)) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r12, 0x0, 0x0) listen(0xffffffffffffffff, 0x37) 12:29:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe07b0071") 12:29:50 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000002c0)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f00000017c0), 0x332, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, 0x4, {0x43}}, 0x18) 12:29:50 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) keyctl$get_security(0x11, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=""/208, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001400)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="eabe9f303b222957eecbc624877c825255f910c28f5e87a64820546a1ebed56adb3b91e7f1ffd7e4ab569f8e39808e0b61a0bf7a301ffe8dac0773d9e5411f2b25f3fbc7cf9482c1f0d81a590ed76f2c4af37bd3d331de23d61ca62ef8d48f42ffd113acf060c105020d4882fc399eaab8787f0db6510490b0f420326bcc4e2b65e7c68bacee7877a6274d908e5a5d512b87ed3eb24d40d331edbedf8a03a722ffa87cc2dfec4758b087c23cc9c5e726fea9424948", @ANYRES16=0x0, @ANYPTR64, @ANYRESOCT, @ANYBLOB="e6c55c5d9eb82ee4510100010029a741efca44f937d0492482ba837296d961244e2e0c734057548c402cc43b3897cc275fd87f333c960d2bc40d"], 0x0, 0x110}, 0x20) tkill(r1, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = socket(0x10, 0x4008000000803, 0x0) setsockopt$sock_int(r3, 0x1, 0x22, &(0x7f0000000040)=0x81a, 0x4) sendto(r3, &(0x7f0000000600)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/24, 0x18}}], 0x1, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000005}, 0xc, &(0x7f0000000640)={&(0x7f0000000340)={0x178, r4, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xa0, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x208a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0xc4, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3d1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x22}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x20044094}, 0x4) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x20032600) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) [ 189.392557] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=128, mo=a8024018, mo2=0002] [ 189.401217] System zones: 0-7 [ 189.410090] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 12:29:50 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000002c0)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r1, &(0x7f00000017c0), 0x332, 0x0) 12:29:51 executing program 1: r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r2, 0xfae71e5936326fae) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="54010000", @ANYRES16=r5, @ANYBLOB="00012dbd7000fedbdf2515000000c40001001000010069623a63616966300001000a004e23000008bafe8000000000000000000000000000bb05000000200002000a004e2000001faaff020025d7000000000000000000000000010800000038000400200001000a004e200000018cff020000000000000000000000000001010000001400020002004e22ac1414aa00000000000000001000010069623a6e6c6d6f6e30000000100001006574683a6873723000000000140800010008000000100004000c00070008000400070000005c0001000800030000000000180001006574683a76657468305f746f5f6873720000000038000400200001000a004e200000000000000000000000000000ffffac1414aa010000001400020002003b20000000d6000000000000000010000200080002000800000004100400"], 0x154}, 0x1, 0x0, 0x0, 0x49801}, 0x40800) fchmod(r3, 0xfae71e5936326fae) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x90081, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000000c0)={0x3, 0x0, 0x4, 0x0, 0x0, [{r2, 0x0, 0x1ff}, {r0, 0x0, 0x401}, {r3, 0x0, 0x8000}, {r6, 0x0, 0x91}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000002c0)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r7, &(0x7f00000017c0), 0x332, 0x0) [ 189.533604] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7570 comm=syz-executor.3 12:29:51 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000002c0)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000100)='/dev/null\x00', &(0x7f0000000140)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r2, &(0x7f00000017c0), 0x332, 0x0) 12:29:51 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x8) ptrace$cont(0x9, r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x0) 12:29:51 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) chown(0x0, 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x8000, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000140), &(0x7f0000000180)=0x4) fchmod(r3, 0xfae71e5936326fae) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) mkdirat$cgroup(r2, &(0x7f00000000c0)='syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) [ 190.032507] EXT4-fs warning (device sda1): ext4_group_extend:1738: can't shrink FS - resize aborted [ 190.122935] EXT4-fs warning (device sda1): ext4_group_extend:1738: can't shrink FS - resize aborted 12:29:51 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000a, 0x12, r0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x400400, 0x0) perf_event_open(0x0, 0x0, 0xc, r1, 0x0) mlockall(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) fchdir(0xffffffffffffffff) syz_genetlink_get_family_id$team(0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) open(0x0, 0x0, 0x0) r3 = dup(r2) bind$inet6(r2, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f00000007c0)={0x0, 0xfffffffffffffdf9, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[]}, 0x1, 0x0, 0x0, 0x8000}, 0x20044000) write$FUSE_POLL(r3, &(0x7f00000005c0)={0x18}, 0x18) setsockopt$inet_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r4, 0xfae71e5936326fae) setsockopt$inet_tcp_int(r4, 0x6, 0x6, &(0x7f00000001c0), 0x4) r5 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x0) ftruncate(r5, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r2, r5, 0x0, 0x8000fffffffe) connect$unix(r3, &(0x7f0000000400)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) 12:29:51 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @local}, 0x0, &(0x7f0000000640), 0x0, &(0x7f00000007c0)=""/173}, 0x2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f00000017c0), 0x332, 0x0) 12:29:51 executing program 4: r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r2, 0xfae71e5936326fae) write$selinux_access(r2, &(0x7f0000000100)={'system_u:object_r:dbusd_exec_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x8}, 0x46) 12:29:51 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0xffffffffffffff28) 12:29:51 executing program 2: r0 = socket$packet(0x11, 0x0, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000340)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX=r7, @ANYRESDEC, @ANYBLOB=',g']) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',gro']) sendfile(r6, r6, 0x0, 0x2008000fffffffe) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x0, 0x50000}, 0x1c) 12:29:51 executing program 0: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/policy\x00', 0x0, 0x0) r1 = socket(0x2, 0x803, 0xff) fstatfs(r1, &(0x7f0000000440)=""/4096) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendfile(r1, r0, 0x0, 0x72439a6b) [ 190.452812] devpts: called with bogus options [ 190.741446] devpts: called with bogus options 12:29:53 executing program 4: prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd6f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") munlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) setresuid(0x0, 0x0, 0x0) close(r0) 12:29:53 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r0, 0xfae71e5936326fae) ioctl$RTC_PIE_OFF(r0, 0x7006) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x0, 0x0, 0x1c8}}], 0x1, 0x20, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f00000017c0), 0x332, 0x0) 12:29:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) sendmsg(r1, &(0x7f0000001500)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000040)="cc6baf2d6dc5efdaef26bd4b47da97772237f758e60a5cbb5d4c2e77bd19c54dfe946cbb7c", 0x25}, {&(0x7f0000000140)="7950408b75bc9b2dae2d1743017421a972ad36ebe6e10736760d9fae5a4f36b1dcefdbbda70248096b9ee5d0512097c8345026191411732d5881597694c7fd12f7bd3b75903a0278868ae8958471740de93db45c3e65b4ac805c32edbf8765273f6d3a53d791bde97ef7b78fdbfdee76011d17c49473b961f8df41eed3db50598436b5a93839e614a5ed7f9f9200c5e52b50eeda280ad9c40eec1ed57cdc49adeb344b7fc7f309dfa7f1fc829461dd02e983759167c7ae4e56e2735ee369b6058f13abc8fc3ee4cd58d19d22d24fd2cb3cb3308782d28c4746e2bd06958577b2a66a12cee019aee630b87d1b64", 0xed}], 0x2, &(0x7f00000002c0)=[{0x28, 0x102, 0x4, "8728f22c10d78e541cde49bb4bf0d0a59cc64a9c2de624"}, {0x70, 0x7157583d4196a13a, 0xffffffaa, "7800dc6af2b8a780d6b1c11f5eed2ec6af35d4577ad0dec2c6a38fa736022c2a0056b95ee88a9831a7a92a5f32e4b8c26cbf85912e1bd7679c4232c7446baf6b7e0ebc798afe996269e0f56fee4a6c8b27b0ad7018bbc22bc9a0"}, {0x20, 0x113, 0x6, "57c7bae4b3bb68c3fe1be7aa58b82f"}, {0xd8, 0x0, 0xff, "8512679ab09a2ea9729dd96bd0a48737e6a8bc9d759ed6db94c25e498ce56be0255f46bcd8eff73f61e67e8c5f5ff022e76885a4d851899bc46436704cb8b04597e2545ef4bfacc3906a674e1907b10563582328a1b010c30cb5d8e4f0f6b1b4984226d65a72ad4d5ec696a9d01a03e6b3757606c7d30a85deacd7d20674e4ee837f400d2599b72551dac5620e3cfb36fce8301a6ec3e8dd73eb86df2fe54dc71ded6c801c32124801fabdfc76b192be89772ecd7777add797c51365a72088d132"}, {0x98, 0x88, 0xfffffff7, "333b66152118b4faa25a92350f70088f50be25fc487b036d557261c42ec9af711cf1b2c284d39db54e20cbf512660d31fc8bfc2dde68932dbf81146072f33ca990266ff6abc2c6c4d9154edb2acfcfc62b570aae7653e20f75075bbf5a8b79ed2589d4e1e243760b514ba9593841276c5f3baf4aa61e1d2fdc12389e41b2e4d5024c7e9671e8"}, {0x1010, 0x0, 0x10000, "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"}], 0x1238}, 0x4404) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0xcc70f7c46e283195, 0x0, 0x0, {}, [@IFLA_PORT_SELF={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0) 12:29:53 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x1a1) fchmod(r2, 0xfae71e5936326fae) ioctl$LOOP_CLR_FD(r2, 0x4c01) 12:29:53 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) read(r0, &(0x7f0000000600)=""/13, 0xccacf294) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000051c0)="b6", 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x1) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f0000000000)=""/48, &(0x7f0000000080)=0x30) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) 12:29:54 executing program 0: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'\x91yr', 0x1}, &(0x7f0000000100)='user\x00', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000060000000e00"/20, @ANYRES32=0x0, @ANYBLOB="43020000000000001800120008000100767469000c00020008000500ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syslog(0xa, &(0x7f0000000280)=""/226, 0xe2) flistxattr(0xffffffffffffffff, &(0x7f0000000380)=""/236, 0xec) wait4(0x0, 0x0, 0x40000000, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)={0x2011}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0xfc147812c6696269}) ioctl$TCGETX(0xffffffffffffffff, 0x5432, &(0x7f00000000c0)) 12:29:54 executing program 3: socket$packet(0x11, 0x2, 0x300) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/mls\x00', 0x0, 0x0) r1 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000240)='user\x00', &(0x7f0000000300)='\x00') request_key(&(0x7f0000000580)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f00000003c0)='&vmnet1{}cgroupwlan1}keyringwlan0keyringY{@#)\x00', 0xfffffffffffffff8) r2 = add_key$user(&(0x7f0000001440)='user\x00', &(0x7f0000001480)={'syz', 0x1}, &(0x7f00000014c0)='K', 0x1, 0xffffffffffffffff) keyctl$update(0x2, r2, &(0x7f0000001740)="b5", 0x1) keyctl$set_timeout(0xf, r2, 0x407fd) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) write$P9_RLCREATE(0xffffffffffffffff, 0x0, 0x0) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000340)={0x7, 0x1b, 0x2}, 0x7) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0xa0, 0xff, 0x0, 0x7f, 0x40000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x2000, 0x0, 0x1, 0x8, 0xfffffffffffffffd, 0x0, 0xfffd}, 0x0, 0x8, 0xffffffffffffffff, 0x8) request_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0xfffffffffffffffe) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0) clone(0x70024100, &(0x7f0000000a00), 0x0, 0x0, 0x0) keyctl$search(0xa, 0x0, &(0x7f0000000140)='\x00\x00\x00\x00\x05\xa6\xdb\xb0', 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = creat(0x0, 0x0) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x10) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x800002, 0x11, r4, 0x0) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendto$inet(r5, &(0x7f0000000280)="6c38e766f40bb6e273d6a66883957d0338810ed75a81695d24829b172b29d04fbe541a511be018bc8ac694fe7cb1ea0b0058f109984afc53a0b1471e4b3983b55df819efc44836887c9fcc61bead05a8718b21c559ac20", 0x57, 0x4, 0x0, 0x0) ioctl$TCSETX(r0, 0x5433, &(0x7f0000000040)={0x0, 0x20, [0x0, 0x86, 0x1, 0x81, 0x7], 0x762}) fcntl$setstatus(r3, 0x4, 0x44800) creat(&(0x7f0000000180)='./bus\x00', 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[0x0]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) openat$cgroup(r7, &(0x7f0000000300)='syz1\x00', 0x200002, 0x0) dup(0xffffffffffffffff) fstat(r4, &(0x7f0000000440)) io_setup(0x400, &(0x7f0000000000)) [ 192.471283] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 192.498448] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 12:29:54 executing program 1: perf_event_open(&(0x7f00000004c0)={0x5, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20000, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000002c0)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f00000017c0), 0x332, 0x0) 12:29:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x2ca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) bind$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000001580)=ANY=[@ANYBLOB="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"/1104], 0x20) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 12:29:54 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000002c0)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f00000017c0), 0x332, 0x0) 12:29:54 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="240000001a0007041dfffd946f610500020000e8fe02000000010800080004000400ff7e", 0x24}], 0x1}, 0x0) [ 192.501059] audit: type=1400 audit(1570883394.025:40): avc: denied { sys_admin } for pid=7665 comm="syz-executor.3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 192.516551] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7662 comm=syz-executor.0 12:29:54 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0x0, 0xffffffffffffffff, 0x0) r3 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, r3, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$TCSBRK(r0, 0x5409, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r5, 0xfae71e5936326fae) symlinkat(&(0x7f0000000300)='./file0\x00', r5, &(0x7f0000000340)='./file0\x00') r6 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) write$P9_RGETATTR(r6, &(0x7f0000000140)={0xa0, 0x19, 0x1, {0x208, {0x0, 0x4}, 0x4, r7, 0x0, 0x8, 0x6, 0x6b, 0x9, 0x6, 0xf8b3540, 0x81, 0x6, 0x7, 0x6, 0x6, 0xfffffffffffff516, 0x7, 0x200, 0x100000001}}, 0xa0) 12:29:54 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x280000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/policy\x00', 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f0000000480)=@fragment={0x84, 0x0, 0x1, 0x0, 0x0, 0x6, 0x67}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000001040)={0x2, 0x4e23, @loopback}, 0x10) r2 = socket(0x0, 0x800000003, 0x8) bind(r2, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000280)=0xfffffffffffffff6) setuid(r4) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast1, @in6=@dev={0xfe, 0x80, [], 0x27}, 0x4e21, 0x5, 0x4e23, 0x7620, 0x2, 0x20, 0x10, 0x2b, 0x0, r4}, {0x5, 0x9aa, 0x0, 0x3, 0x4, 0xce, 0x5, 0x1}, {0x4, 0xffff, 0x9, 0x6}, 0xc6b, 0x6e6bb8, 0x0, 0x1, 0x1, 0x1}, {{@in=@loopback, 0x1, 0xff}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0xe}, 0x0, 0x2, 0x0, 0x9, 0x800, 0xfffffffb, 0xf8}}, 0xe8) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x40, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x8ec, 0x8, 0x1, 0x9, 0x10000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f00004ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, 0x0) shutdown(r0, 0x1) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r5, 0xfae71e5936326fae) setsockopt$packet_buf(r5, 0x107, 0x1b, &(0x7f0000000100)="8976f24512631e9b6a002c589e9ffa2a61c9a2429e429271a41cd5078e3d80a09ae4", 0x22) 12:29:54 executing program 0: clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='stat\x006\x0e\xf7j\x904cEFa\xbc\xb0c\xa0\x15\x93e\xd9/\xa0\f\xf5\xf8<\x93\xb1\xc0G8\xed\x1d\xf4\x96\xd1N\n\xbe\x1bA\x8a\xb9<\xaawy\x80\xb7\x89\xae\x90\xc1\x8c\x9bnY\x93\xc66\xe6\xfe\x86\\\x82K\x10\xc3\x11X\xab\x1b\xf96\x8co\n\xc7*\x1b\'\\\xf7\xe1g\\\xf6\xc1\x99b%=\r\x14\xd0\xc7\xae\xaa\x8cbv\xf1\xb2\x9d\xc5,K\xef\xdc\x94\xbc`\xdc\x98\b\xf2\x06\xa2\xaf\x10\x98\xce\xe9C\xb21&)\xc1E\xbfO<\xe6xJ\xfdi\x04\xf0\xc2\xff\x03\xdf\xfc\x0f\x9c\xcc\xc1\x14R\xf4\xecfi\x0e\xec\x04\xb5\x8eR\xa6\xb2a\xce+!l@\xbb\x81y\xe5w\x14B\xa2\x80\xdc\fKn\x1e\x90\xd5\x8b\xac}\xe6\xee\x8c\xc9\xe8\x10\x88H<\xcd\xe5>\xb9\x99\xc6\a\xaeKl\xa1\xb2\xef\xf2m\xff\n\xa6@\xe8x\xb4\x92\xf6\x9c\xe9c\xf2\x15E\xbdV\xe3\x8c\x18\xe3ds\r\x1d\a\xde;\xad\x1a\xb3\a\xda+') exit(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, 0x3, {0x7, 0x1f, 0x80000000, 0x400, 0x6, 0x40, 0x6, 0x667d}}, 0x50) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x56) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x7, 0x80, 0x1, 0xc1, 0x3, 0x3, 0x2, 0x150, 0x38, 0x3b0, 0x40, 0xffff, 0x20, 0x1, 0x4, 0x4, 0x9}, [{0x6, 0x3, 0x2, 0x9, 0x2, 0x8, 0x1}], "e559368b7c8a5f0d4128b0a018b45b3c85999f712db0e69f36fe8c03c95b757a879a10794d1d4bece76db7019386d051c39384", [[], [], [], [], [], [], [], [], []]}, 0x85) setresuid(0x0, r2, 0x0) preadv(r0, &(0x7f0000001300)=[{&(0x7f0000000000)=""/68, 0xfcec}], 0x1, 0x0) 12:29:54 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000002c0)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x332, 0x0) 12:29:54 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f00000017c0), 0x332, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'U-', 0x1}, 0x28, 0x1) 12:29:54 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000002c0)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f00000017c0), 0x332, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000021000200170420000000080000000800000014000100fe80000000000000000000000000000f08000400f10b00"/60], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0xf5d919908357390) 12:29:54 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x200000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={0x0, r0, 0xe}, 0x10) getdents(r0, &(0x7f0000000080)=""/223, 0xdf) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x100000003}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$P9_RAUTH(r2, &(0x7f00000001c0)={0x14, 0x67, 0x2, {0x143, 0x3, 0x4}}, 0x14) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r4, 0xfae71e5936326fae) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r5, 0xfae71e5936326fae) splice(r4, &(0x7f0000000400), r5, &(0x7f0000000440), 0x9, 0x2) fchmod(r3, 0xfae71e5936326fae) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000280)=r3) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f0000704000/0x1000)=nil, 0x1000) munlockall() r6 = dup3(0xffffffffffffffff, r2, 0x80000) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000200)={0x2, 0x4, 0x17a, 0x705f, 0x13, 0x1f, 0x5, 0x7, 0x3f, 0x0, 0x2}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x3606f553bcf43242}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r7, 0x400, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000045) 12:29:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000058, 0x0) r1 = socket$key(0xf, 0x3, 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x103}) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) 12:29:55 executing program 0: prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) socket$packet(0x11, 0x2, 0x300) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x2, 0x0) getsockname$unix(r0, &(0x7f0000000240), &(0x7f00000002c0)=0x6e) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffff8, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0\x00') r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f00000000c0), 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001a80), &(0x7f0000001ac0)=0xc) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000400)) r4 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r4, 0x0) setresgid(0x0, 0x0, 0x0) statfs(0x0, 0x0) socket(0x10, 0x2, 0x0) 12:29:55 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000002c0)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f00000017c0), 0x332, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100000b, 0xefcb9369968f7a11, r1, 0x0) 12:29:55 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) fchmod(0xffffffffffffffff, 0xfae71e5936326fae) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000000)={0x4, 0x3, 0x9}) socket$inet6(0xa, 0x7, 0xfb) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda={0x66646185, 0x9}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 12:29:55 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1fffffc) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000040)=""/165) [ 193.581036] binder: 7734:7737 got transaction with invalid parent offset or type [ 193.592994] binder: 7734:7737 transaction failed 29201/-22, size 80-24 line 3454 [ 193.606239] binder: undelivered TRANSACTION_ERROR: 29201 12:29:55 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xfffffffffffffff4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) 12:29:55 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0) write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x3b4, 0xffffffffffffffda, 0x3, {0x2}}, 0x18) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x12, r0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1, 0x2}) ioctl$FS_IOC_GETFLAGS(r0, 0x5460, &(0x7f0000000000)) 12:29:55 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000002c0)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f00000017c0), 0x332, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) 12:29:55 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000000)=0x3) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x2, 0x0) ioctl$KDGKBTYPE(r2, 0x4b33, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000480)) fstat(r1, &(0x7f00000003c0)) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f00000017c0)=ANY=[@ANYBLOB="852a62730000000002000000000000000000000000000000852a627700000000000000000000000000000000000000008561646600000000000000000000000000000000d8f3da16bc15b68fde577f159bb13bf30681269f49727c30624c294cb35a6ef0ea112ab98f47493d95a75f9fe896c82bf25d6e5b8700000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) syz_open_procfs(0x0, 0x0) 12:29:55 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) fchmod(0xffffffffffffffff, 0xfae71e5936326fae) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000000)={0x4, 0x3, 0x9}) socket$inet6(0xa, 0x7, 0xfb) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda={0x66646185, 0x9}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 12:29:55 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000002c0)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x332, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000040)={0x8, 0x7f, 0xd3d4c5e1}) 12:29:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r0, 0xfae71e5936326fae) signalfd4(r0, &(0x7f0000000140)={0x84}, 0x8, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r4, 0xfae71e5936326fae) ioctl$sock_ifreq(r4, 0x1126a, &(0x7f0000000100)={'bridge_slave_0\x00', @ifru_data=&(0x7f00000000c0)="47d31eff9551a8647200ef5035cfca9fa4a394d7574d3dc4e4c92bfad2117ada"}) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000180)=0x800) fchmod(r3, 0xfae71e5936326fae) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) [ 193.714922] binder: 7764:7765 got transaction with invalid parent offset or type [ 193.728470] binder: 7764:7765 transaction failed 29201/-22, size 80-24 line 3454 [ 193.770596] binder: undelivered TRANSACTION_ERROR: 29201 12:29:55 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0x0, 0x2}]}, 0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) r4 = gettid() fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000000)={0x20000000}) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='cpuset\x00') r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0xc0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x4}, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x1, 0x1, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=0x100000001}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, r7}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, r7}, 0x30) symlinkat(&(0x7f00000000c0)='./file0\x00', r5, &(0x7f0000000140)='./file0\x00') connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x30005, 0x0) 12:29:55 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000002c0)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02692735e2dc8b60a85a144d1ac3"], 0x10, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f00000017c0), 0x332, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x6, 0x371d, 0x3}) 12:29:55 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) fchmod(0xffffffffffffffff, 0xfae71e5936326fae) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000000)={0x4, 0x3, 0x9}) socket$inet6(0xa, 0x7, 0xfb) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda={0x66646185, 0x9}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 12:29:55 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xfffffffffffffff4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) 12:29:55 executing program 0: bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYRES32], 0x4) fallocate(r0, 0x100000003, 0x2, 0x28120001) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000802, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x400, 0x0) r2 = memfd_create(&(0x7f0000000040)='trustednodevwlan1@\x00', 0xd) fsetxattr$security_selinux(r2, &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:userio_device_t:s0\x00', 0x25, 0x0) 12:29:55 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000002c0)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000040)) preadv(r0, &(0x7f00000017c0), 0x332, 0x0) 12:29:55 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f00000001c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000002}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, r2, 0x80, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x16}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x11) preadv(r1, &(0x7f00000017c0), 0x332, 0x0) [ 194.207935] binder: 7827:7839 got transaction with invalid parent offset or type [ 194.247171] binder: 7827:7839 transaction failed 29201/-22, size 80-24 line 3454 12:29:55 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) fchmod(0xffffffffffffffff, 0xfae71e5936326fae) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000000)={0x4, 0x3, 0x9}) socket$inet6(0xa, 0x7, 0xfb) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda={0x66646185, 0x9}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 194.291969] binder: undelivered TRANSACTION_ERROR: 29201 12:29:55 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @multicast1}, &(0x7f0000002880)=0x10) recvmmsg(r0, &(0x7f0000003140), 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f00000017c0), 0x332, 0x0) 12:29:55 executing program 5: socket$inet6(0xa, 0x401000000001, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={&(0x7f0000000040)='./bus/file0\x00', 0x0, 0x10}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x8080, 0x0) socketpair(0x0, 0x5, 0x2, &(0x7f00000003c0)) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r0, 0xfae71e5936326fae) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@ipv4={[], [], @local}, @in6=@initdev}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@empty}}, &(0x7f00000001c0)=0xe8) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/policy\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(0x0, 0xfffffffffffffffe) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000180)='./file0\x00', r4, &(0x7f0000000640)='./file0/file0\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000001880)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000001700)=0xfffffffffffffd47) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r6}) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r8, &(0x7f00000000c0)='./file0\x00') mkdirat(r8, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', r8, &(0x7f0000000640)='./file0/file0\x00', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001880)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000001700)=0xfffffffffffffd47) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r9}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000006380)={'tunl0\x00', r9}) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/checkreqprot\x00', 0x40002, 0x0) r10 = socket(0x2, 0x803, 0xff) syz_open_procfs(0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000003580)='cifs.spnego\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet(r10, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) sendfile(r10, r1, 0x0, 0x72439a6b) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000480)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000000000000000000a2657068591a65f5af7863c9fc21916d61c69479565ef51d0fbca2cad816deb2e6e0215f8536c0717e003a15b5885de343d465ba9fc54a32e096886ce9a653223d85d1d9598a655f1b32376a910b2882392bcb11470e23dd885acd3ada13ed9711ac024127482f76d895d5c54efa4eb4f9d0d16f2aeaca95f9a2d0b088a9140194916ce46a051c4b7553b08f6e55a72a07eb3ba0fad0cceefb8ca9ffe824dce56fd0ffc66db8e4cea9b474a92be991b684a946dc7487218ed7dab2c7e1637ce1088c6ecabfcc4083f4fa02c283c85ea2162bf189b55c9f7f3573f817a09bf2", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00"/112], 0xb8}}, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) 12:29:55 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000002c0)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x100001, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f00000017c0), 0x332, 0x0) [ 194.424210] binder: 7850:7859 got transaction with invalid parent offset or type 12:29:56 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = accept(r1, &(0x7f0000000180)=@sco, &(0x7f0000000080)=0x80) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e29, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000300)=0x30, 0x4) r3 = accept4$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000240)=0x1c, 0x800) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f00000003c0)={0x9, 0x9, 0x7, 0x2800000, 0x8, [{0x7, 0x3, 0x2, 0x0, 0x0, 0xc2}, {0xffffffffffff2772, 0x6, 0x6, 0x0, 0x0, 0x84}, {0x88d, 0x9, 0x6, 0x0, 0x0, 0x400}, {0x9, 0x200, 0x9, 0x0, 0x0, 0x402}, {0x3f, 0x3, 0xe861, 0x0, 0x0, 0x2}, {0x0, 0x2, 0x1, 0x0, 0x0, 0x4}, {0x2, 0x9, 0x2, 0x0, 0x0, 0x4}, {0x54e406a4, 0x91e, 0x1, 0x0, 0x0, 0x100}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r5 = dup(r4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='veth1_to_team\x00', 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r6, 0xfae71e5936326fae) getsockopt$inet6_int(r6, 0x29, 0x0, &(0x7f0000000040), &(0x7f00000000c0)=0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x5}, 0x4) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 194.473565] binder: 7850:7859 transaction failed 29201/-22, size 80-24 line 3454 [ 194.513113] binder: undelivered TRANSACTION_ERROR: 29201 12:29:56 executing program 1: r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) ioctl$void(r0, 0xc0045878) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f0000001440)='user\x00', &(0x7f0000001480)={'syz', 0x1}, &(0x7f00000014c0)='K', 0x1, 0xffffffffffffffff) keyctl$update(0x2, r1, &(0x7f0000001740)="a9", 0x1) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r2, 0xfae71e5936326fae) getsockopt$sock_buf(r2, 0x1, 0x7, &(0x7f0000000180)=""/104, &(0x7f0000000200)=0x68) keyctl$update(0x2, r1, &(0x7f0000000100)="33ce15d716f6cf7dfae63ffc4765c28dbbc5f47b03de1f5346c8d38582dd41c0a7437f45971336e083926d8c2f3753fcb444eebf4018cc88ace5786e5dc2c63db1aeac7560e47d676cbd46ca0d46d49218af506e9ef5fbc4efb8358758d0c94ff6", 0x61) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5f) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000040)) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x40002053, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x382402, 0x0) preadv(r4, &(0x7f00000017c0), 0x332, 0x0) 12:29:56 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) fchmod(0xffffffffffffffff, 0xfae71e5936326fae) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000000)={0x4, 0x3, 0x9}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda={0x66646185, 0x9}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 12:29:56 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0xe001, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e66617400020401", 0xf}], 0x0, 0x0) 12:29:56 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000280)=0xfffffffffffffff6) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) socket$inet(0x2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00') sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x1, 0x0) execveat(r1, &(0x7f0000000140)='./file2\x00', &(0x7f0000000380)=[&(0x7f00000001c0)='mime_type[bdevppp0\x00', &(0x7f0000000240)='&lo$&\x00', &(0x7f00000002c0)=':\x00'], &(0x7f0000000640)=[&(0x7f00000003c0)='lotrustedmime_typeuser\x00', &(0x7f0000000400)='\x00', &(0x7f0000000440)=')[\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='proc\x00', &(0x7f0000000540)='em1-keyring\x00', &(0x7f0000000580)='vmnet0\'Kposix_acl_access\x00', &(0x7f00000005c0)='\x00', &(0x7f0000000600)='\x00'], 0x800) r2 = creat(&(0x7f0000000040)='./file1\x00', 0x0) fallocate(r2, 0x0, 0x2000000, 0x4) fallocate(r2, 0x0, 0x0, 0x5) fallocate(r2, 0x8, 0x1200000, 0x8000) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x0) r3 = syz_open_procfs(0x0, 0x0) sendfile(r3, 0xffffffffffffffff, &(0x7f0000000180)=0x74000000, 0x5) setuid(r0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) write$P9_RREMOVE(r1, &(0x7f0000000080)={0x7, 0x7b, 0x1}, 0x7) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@remote}, 0x14) fallocate(0xffffffffffffffff, 0x0, 0x2000000, 0x4) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x5) fallocate(0xffffffffffffffff, 0x8, 0x1200000, 0x8000) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000006c0)='security.ima\x00', &(0x7f0000000700)=@ng={0x4, 0x6, "1ed59ff102312fdbbdfa153efc04d5c11104"}, 0x14, 0x1) sendmmsg(r4, &(0x7f00000092c0), 0x4e0, 0xbb8) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x4000, 0x0) [ 195.006393] binder: 7882:7885 got transaction with invalid parent offset or type [ 195.025245] binder: 7882:7885 transaction failed 29201/-22, size 80-24 line 3454 [ 195.052213] binder: undelivered TRANSACTION_ERROR: 29201 12:30:00 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0xc00, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x28000844) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_TSC(0x1a, 0x0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, 0x0, 0xffffffa0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000080)='.\x00', 0xfe) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x4000082) write$nbd(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="6744669800000000fcff0100000000006517a42ac4cb7a63d1a97a7e6d06589e03469637a7267592938766010a35efd21affe2009efdc31a381587a53c0d00000000000003e9e841e84f03d05ebc7e87c10dfc8b2cf1fd86fbcd578bcd3e51a594acdea573d84d62215d3e9e1c4ae9db868d4ee3bc0b06f8865611d9e5a0a652c1a8cf8d285e1629b0e097e78390c268b4919ba00c2f81d8ebc88648339483572c6f66943bc0347fc1aa918f1383e456de840a334085ee5ad56dbd8d027120d49deb92c530d75197d928a5f717d65887ff134d67670425"], 0x74) sendfile(r2, r2, &(0x7f00000000c0)=0x2000, 0xa198) 12:30:00 executing program 3: socket(0x1, 0x3, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r0, 0xfae71e5936326fae) ioctl$sock_ifreq(r0, 0x8932, &(0x7f0000000100)={'syz_tun\x00', @ifru_data=&(0x7f0000000000)="ea9358b3837f1f0f9c76cee1e6dbeef78df53ab774331a9fbeb410186bbf2c51"}) 12:30:00 executing program 1: r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000002c0)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) fsetxattr$security_smack_entry(r0, &(0x7f0000000100)='security.SMACK64\x00', &(0x7f0000000140)='user@trustedem0\x00', 0x10, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r2, &(0x7f00000017c0), 0x332, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x40001, 0x0) 12:30:00 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r0, 0xfae71e5936326fae) fcntl$setflags(r0, 0x2, 0x1) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) sync_file_range(r2, 0x1ff, 0x5, 0x1) pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) fallocate(r1, 0x20, 0x0, 0xfffffeff000) fallocate(r1, 0x0, 0x0, 0x10000101) 12:30:00 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="40000000000005009c000000000000002800010000437800210000000000"], 0x1c) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r2, 0xfae71e5936326fae) sendfile(r2, r0, &(0x7f0000000180), 0x800000007) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x404001, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000000c0)={'veth0_to_team\x00', @local}) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r4, 0xfae71e5936326fae) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000140)='ip6gretap0\x00', 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x6, 0x11, 0x0, "7c4b1675b0a962c052fba992e9db31c0eb0466d50873e370e1cdc214ca572b55f793a60c5c72a1e2c65726dc51ce7faf92b01db214d958ac5664398eb0d4f541", "7e0fb86fdb9c5f3d6e86842df1d2c12b0f966de023691d59f40be438f1e01c09135df6044b74dde173b525e9b22fb382fe72e5123da309d552411b3469bb46ca", "31b23c0da08717a0c9dbcc820b3b1ec92544752a3355a2702d3d5c867cd5c7da", [0x7, 0x6]}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 12:30:00 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) fchmod(0xffffffffffffffff, 0xfae71e5936326fae) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda={0x66646185, 0x9}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 12:30:00 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = socket$unix(0x1, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x7ffffffff002, 0x7ffffffff000, 0x0, &(0x7f0000ffd000/0x3000)=nil) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x6, 0x3, 0x1, 0x5}, 0x20) sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{&(0x7f0000000080)=@nfc, 0x80, 0x0}}], 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) socket(0x4, 0x40400, 0xc0) sendmmsg$inet6(r0, &(0x7f0000007e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800f2ff0000000029df0000000000000086424453fa4a76c47584db83d73f449beae1fe1f585a4ae97ec6533fe10312a3d69a4a57d09181e27e39952ee648d0b03744d19f307205259cbc2e87d30ba1d7fd777e79d7c7238c7d59982232158865a636fe69e735e37f22d57602c747baba1da44e88010152464e1c8f316fe006b8d0ce69773c15a79f0db8a8999d75b0a8c720b63df1c2b6b2534ce4929a"], 0xc}}], 0x55f, 0x0) 12:30:00 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda={0x66646185, 0x9}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 12:30:00 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000002c0)=@ipx, 0x80, 0x0}}], 0x1, 0x100, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000000)=""/125, 0x7d}, {&(0x7f00000000c0)=""/213, 0xd5}, {&(0x7f00000001c0)=""/71, 0x47}, {&(0x7f0000001540)=""/4108, 0x1000}, {&(0x7f0000000340)=""/244, 0xf4}], 0x1c, 0x0) 12:30:00 executing program 3: ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x8000002}, 0x1c) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ppoll(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3be) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) splice(r1, 0x0, r0, 0x0, 0x1000000000000003, 0x0) r2 = inotify_init1(0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r3, 0xfae71e5936326fae) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r4, 0xfae71e5936326fae) accept4$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14, 0xc0800) sendto$packet(r3, &(0x7f00000000c0)="241a85301f00fa920704f3a0e8866a049af65f993772a77940601c04672a398be7edb896918438", 0x27, 0x40, &(0x7f0000000240)={0x11, 0x18, r5, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x2b) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r6 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000100)=r6) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x9}, 0x8) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) fcntl$notify(r2, 0x402, 0x40000001) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) sendto$packet(r1, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 12:30:00 executing program 2: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ') socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) r1 = socket$unix(0x1, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r3, 0xfae71e5936326fae) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x39) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) fcntl$lock(r3, 0x59, &(0x7f0000000040)={0x6, 0x3, 0x3, 0x40, r4}) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x10000000000001bc, 0x0) [ 199.204226] binder: 8057:8062 got transaction with invalid parent offset or type [ 199.224369] binder: 8057:8062 transaction failed 29201/-22, size 80-24 line 3454 [ 199.242840] binder: undelivered TRANSACTION_ERROR: 29201 12:30:00 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="b70000003c00f9350000000007010000ff01000095f7ff00000000008348133f275db38266809fa4d82d"], &(0x7f0000003ff6)='OPL\x00', 0x1, 0xc9, &(0x7f0000000440)=""/201, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x70) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r0, 0xfae71e5936326fae) r1 = dup(r0) r2 = dup3(0xffffffffffffffff, r1, 0x0) read$eventfd(r2, 0x0, 0x0) select(0x0, 0x0, &(0x7f0000000880)={0x0, 0x3, 0xd4}, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000000000206a0a00fe000000008500000012000000b70000000000000095000000000000004e62"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280) write$cgroup_int(r4, &(0x7f00000000c0)=0x3, 0x12) socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000940)={'bridge_slave_1\x00', &(0x7f0000000900)=@ethtool_sset_info={0x37, 0x800, 0x0, [0x10001, 0x81, 0x1df40000000000, 0x0, 0xfffffffffffffffd, 0x2]}}) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000280)={{0x6c, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x3, 'fo\x00', 0x10, 0x21d6, 0x19}, {@loopback, 0x4e21, 0x2000, 0x1, 0x20, 0x9}}, 0x44) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) ioprio_get$pid(0x2000000003, r5) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000380)=""/174) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r6, 0xfae71e5936326fae) ioctl$RTC_EPOCH_SET(r6, 0x4008700e, 0x3f) vmsplice(r3, 0x0, 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) 12:30:00 executing program 2: unshare(0x20600) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r0, 0xfae71e5936326fae) r1 = open(&(0x7f0000000100)='./file0\x00', 0x80, 0x0) fchmod(r1, 0xfae71e5936326fae) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r2, 0xfae71e5936326fae) accept$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x240, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x100000000) syncfs(r0) ioctl$void(r0, 0xc0045878) 12:30:00 executing program 0: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r0, 0x4, 0x45000) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r3, 0xfae71e5936326fae) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r4, 0xfae71e5936326fae) io_submit(r1, 0x2, &(0x7f0000000500)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f00000002c0)="098cf4f4078375d60b6216fdbe4cf1e949f7815f758d3c382d1f8f9ecc34a8e60fc603aaff9ff015fb77b79bbdc4a6cf23510508e19113aa2ea2ffeab9588c90c1bafccdef6cb30a40b471bc4c9eabec0bda9e01ba1a09337d7f3e49fcca8c2bd0af5d02697308fcd6fca344576c83cc3616bb41817913c60a4765c3cef34ecdfb2a6e0d", 0x84, 0x800000000000000, 0x0, 0x0, r0}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3, 0x9, 0xffffffffffffffff, &(0x7f0000000400)="84acd4cfab7925380fb4ec798e6cb757df973c3349af29024ff015bf79ec409b15c8f9746ddfb01d610bb699799d5bf3f22a73afeb6cc82a61d86129307c5b4515f8cc7ba7de0803ede1cd63b01feb19378a240a0ff77b36f8f606b4e6538190a83d4c33f84e29ded32ef38e198befca064674ec415e3535df9f721155ec7e0b4a5096adf1d2853ee2043d9b6869a7ab4d11b87ffc4a43cc9e8de7662df5302f873eef12aa28525357", 0xa9, 0x81, 0x0, 0x0, r4}]) lseek(r2, 0x7ffffc, 0x0) r5 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f00000001c0)="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", 0xfb, 0xffffffffffffffff) keyctl$get_keyring_id(0x0, r5, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x8200}]) [ 199.304238] binder: 8075:8077 got transaction with invalid parent offset or type [ 199.335409] binder: 8075:8077 transaction failed 29201/-22, size 80-24 line 3454 12:30:00 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda={0x66646185, 0x9}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 12:30:00 executing program 1: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x81e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xfffffffffffffff8}}, 0x0, 0xd, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000002c0)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40300, 0x0) accept4$unix(r0, &(0x7f00000000c0), &(0x7f0000000040)=0x6e, 0x40000) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000140)={{0x2, 0x0, @descriptor="b3639ae61664ccdb"}}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f00000017c0), 0x332, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r2, 0xfae71e5936326fae) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000002900)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000028c0)={&(0x7f0000002880)={0x30, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, 0x0, 0x4102, 0x0, {0x14, 0x13, @l2={'ib', 0x3a, 'veth1_to_hsr\x00'}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000002}, 0x48840) sendmmsg(r2, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="9dced4b5d5103fb88fc943aba8fb2a7fa7464eb23cf47076fdf836a5b55079528807dd57220e223a5704823ab286e2edaa78c14ecd0d8a74e09f920e3b211ab0ab39eb983f264a1de723c614a61711188e4130207f51af8bb7db148d48cb263485a85627d3a700fb1f646bcd759113a34a89c555b8a948708ba07ef6277e07114740bb6d3ebafaf5fe512e5d117d608552bd1097285b150da60c5463c0ee70f0e0d187d2c796ea0af3e1643700851e9e75fd4b9d834c1b64bb217cead7ba2cc41fd0d5d3ac0b3c1110e26999459cb112c248bc531425df587c", 0xd9}, {&(0x7f0000000240)="9d3500373f2614c5abd9facab1bbe3c1e80165aea6cad66aa788771ca15b26ccf7023ef40e04128381be35ab33749a31dac3f1d0fdf392b18d82ad7ce42de1dce8b3227990d6359f379bd83cae026ffd8a72a35f3d46be5e7be2df7960321ff1295b04e69a14b1d461bf8078aaffa05f9fdbbe7f8851e5c3", 0x78}, {&(0x7f0000000540)="5360a033595ca86787e9327bd8403b5cb441fe0b050d9c47af266a880f27023d9234f6fbe5482465e207b2bdb15c913e1e506c201e4126bd428ec50125aee79e3c077d1d5b550af4bb40510afc108d29a62b9e6f83a8bc4733ceb692a32ed4c01824c1bf6234ce54c19eab368287f6e23a856f2031d11fba7ce111583fff9b5d1b3052b9b4b863eac01927aff1dce707e8e2b451ed1f699bc2016f3b5adddaca043bffe06f6f8e438e990b26d027669bf6ed1b638cf884f5e1cae3fbee1d62aafe32980ccf6d39", 0xc7}, {&(0x7f0000000640)="3c547b08d5249a36288685dd525fd2c01e2bf05b2aab66ca4248cf6b663698d741e8790e05b2ba9440027fe67a05ca9e59582bb1bec760b4f09549c385b45b4d5c06bad4eb58571da44bdb5487270ece37e4b7cdb0b159ac77a4c05687eecfb604c2aa1d4a3d9597b630ae6c2a12105ac8008bbfe7051ebde27b5b405cd7687c7a5d414bf805855fce91c473662283fd71718a4dc019e182402cb84ecef0cddb25dd654a2ecfe07d908f35f448719f4a6301ef2bd0666edb046548b0d93102bc9c7f97fafa915b6c5eb0cb3118e93c7d29bfd74cf2f5aef4371812dc90597b", 0xdf}], 0x4, &(0x7f0000000740)=[{0x108, 0x10b, 0x1, "8d2cb98be4a9a91c43cb571869053a47244915b29fb6a7fa5974bae19b31516b1f4c0e7c9b9069a1e82ea0fac7a124bbdd899ff8d5e3d7ca56f45c21ad0331d1d114dc62adab900286215316bb0df982256f13ceb0dcd9e9e76afbd44e22700cb455b14edf0e943d81683c85ff80348f7701b8e403d61b53a5ec605c1c742e32f9e62c1675633d8dfdc39dc7b6a85a097111ac240c9d624a4060af1d5e421a37fedb5fb9613d09e1134c66259327ee6cdaed0bb57849b2c5aa755be08d453954967d17376334056887c103d77975d75a5a2b785108155e806aeeb6dafb22a76f6d1bc0c7bec12e7e993799d98aba05d526d42a8e88"}, {0xd0, 0x116, 0x2, "ce24c32832272c70d7b2e1097fa5026caf4a4ecb64c267309fff7e50c6399bd65a01a12b270bdfb6435775a40d9a50eab556df65352b8c6d51a8d110544cb4c18d56a08b0e3430c1b1945b2f5b021c73bf145faee8887dd3f69e7d0f6e7a47057e770739f7ca9ff93c93e69c94e11e8faa58e835eea35b176a611c9e650b845e86ee49c2d70ff33245fe0cb6a2a4ece0956991bd6effef71433fb858deca358fd40f3baf067c374e2012a014a0b3a705a0eb5a28bcbf1c12f43a6a6a0a716e7c"}], 0x1d8}}, {{&(0x7f0000000940)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x8, @rand_addr="1c58ba0727e2016c6a86415293d44585", 0x7}}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000009c0)="983a25ff0d27841f97676b4f2d6cf7aad29bff1373917f571b61791d098ebef19f4e108c769ea6925e990edbf7b421e9992e65b19301066d5a552c814bb08c035ec8a6a2d9b0d5b3e202bd6682039f925d8ff503d95f4656c6476c5e9151e7d2351450372189965141cf93e41100ebcdea9391329a17c2f5967874b48e2ac78db9d9ae729a52b04ec738c53389aef66664d07f0cfcff9802176507303f3c108d4297bbe6be88395a2e63a6d5bdb1aa46f46b1a8ff1f86593ce13ecc3b8b444220a60e25520368a0e7563c223b4baf69da808cb5459", 0xd5}, {&(0x7f0000000ac0)="ef698ba6fdf3774dcdbe18b483bc50d7603e47b38095a7707daa7e379b4f1343e40e6362315313198e92deb4de14a535a60bdc708e61dfa68ffa782fe12073ea442a8e59bc085902604be4b2d81d06da38a8a6b272a00cd529038215f5fe5faa6ad70fe63551df9a3aa144c332fdf0bd485678d3f0b9cc", 0x77}, {&(0x7f0000000480)="8ad42172e86e8c6dbdc33ba8d7c920e6b4c6694ff867a32b022d2cb5", 0x1c}, {&(0x7f0000000b40)="5c40c00e", 0x4}], 0x4}}, {{&(0x7f0000000bc0)=@sco={0x1f, {0x3, 0x5, 0x4, 0x72, 0x1, 0xff}}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c40)="8e5c9c905dec5da4d1a857631ac8be96dc9b9c76c77c9853e469b631801a95d110582f7de9ed868f767402485bf14130bb7d1ad400db92b41c27a2568152ce0ca22b8c4b63e2bebbb0fbddfbeee92cec3d3924dcb24afa82c90779052a2749ea2665de7c99f07ada076b21ae44f237408fc21f0ac92dd5f0b5bad659b3e2117abc07634e168a241c8bdef5b6980acf51f11545fa7bfb154f2228acbdf64273b60641f12311d5659a1bb86571fff2e8a2bc66db8d351809b8859d579eaddbd6378e6487f11c97fca5927fd6f7bceb2f3253aa6520f92857e8a713c81c480cbc", 0xdf}], 0x1, &(0x7f0000000d80)=[{0xf0, 0x10e, 0x6, "c2cab4b545e9e6975e8ec4d807f068e7505ffb9b9329ba5a6792168aa5aa581ac80ab38872ebeb9193364ba3fb97f0c3c2ac1aa56812b0ecade9052fa426394915921a819ffbecc0af830549840ced76fdea1c09bd7556c8469b2e4203e35f68890b00c47206fc0b585fe256bdc761e42c2d253d7a7fd1dfc371d334dcf76b20dbe7d9f3301bd1f80c8ae9e06dd57e0d72fca67b6399230260ea6360fe2a1e997d679c071864102ea3701e81937b47805c96fe479ebed45dafffb865268266f47176d71b2683eb6f5aad2478ddffc7c8d43045fbbc4bf8b941132daeed2ba8"}, {0x30, 0x10d, 0x3, "fdb86f90d6a9655179f38935b3f54ad3d1465ec2dfbc6ecfbaacc9c0d0b8e12a"}, {0xa0, 0xdc3510d0b7bc997a, 0xffff, "2a5a908bb4954f47e0ba4118c7e75f46442f8905fef9321715dd04b38a5293d1a058fc85440a9ec2f2f1ee6230b66d6ff1adbbbc6fcf750d0c48a9ee6a38d1a8e683811d9c5c3fdb01c10c7ae8fc713a0f2dfc8ef6985f46e81872eb8e200e9659f7b504b4ff142a7cadeac402d816f6985b5cc4b89e9328eb3a70b9ea4c5f98bae693195f54701ed9ffb4"}, {0xb0, 0x116, 0x7fff, "819feb4b743f32a4b07311612bce7c7077356989833b80c39a87a8a981816ca087911bba61fd8104ff8560d5882ce3ffae0bba0c71d5bedc55c2e71704e369c4855c1620b5f9bd426c768a441a444e858d427021cae59e7aad7046e82168866e9db2b04370b20ab1f3cab68f79d177c4429f3cad9bd8fa2b0dc04363481152eceef4bc9178a72c6f5062dc2b2e977dd029d4000d370634b7b4cac8b0e42c57d2"}, {0x68, 0x113, 0x0, "a80c7023380a55d0d7fc5f33531e680675475a248dc4262c60bca80e12b6cca1a2448733a1f07a0ff2cbfb5e7a0ca02a904359ff4befd8ed28c7902c148903a482618b69ded8dc3e7e55f158e53820483eebdc9e6b41e61c"}, {0x20, 0x118, 0xfffffffc, "abeb10e6462eaf09d2f4"}], 0x2f8}}, {{&(0x7f0000001080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4, 0x3, {0xa, 0x4e22, 0x15d94322, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x19}}, 0xfffffffb}}}, 0x80, &(0x7f0000001280)=[{&(0x7f0000001100)="72d85c6ffe4e47eaed630e29875e9635f6214e78db0757d13e8c17d082a95723f2e44ed47012363dfb20fe30f94757c58b6e7160949bbf6e26357a4df4976cba2a01879c0e0ea60c13418ac5aa769ada9ef6ab375fccd0f4d8541bc9f390aeb3de48c29701fcef74d4a5e16d7883906d58fbfc2aa7428065b9055813a6564df14bacf9261587639e0ee1c9db8af74699837ab05f3fd05bdfebe425e76dbf2a298e1fa3", 0xa3}, {&(0x7f00000011c0)}, {&(0x7f0000001200)="42a7293e04b95b105f74b04d02cd02aacf217d967a31f4dd88a7bed7a8b6fdc05a028e27919e14b1eafebabc347bf1a1c3fbd332dffbf1b20de29f29a90a66203b0dd534c28153", 0x47}], 0x3, &(0x7f00000012c0)=[{0x70, 0x29, 0x7ff, "720f4182711277431e37cb70735caae82b3efa8106f080bae7727e7fc98a85e09a357b82230007ea577f4a47234257673379b4cc66d8547cfac257361ee6f305993201f9b67ad9ea45fc68a69c18d935e7689a476fbd769515a9"}, {0xc0, 0x113, 0x3, "3ab1304394377790c964cc8ad9c19f8b26df124edc63c86173e61fafffbebbd727593fbf518f8e05654aac8b05a51674a90b42df365a19e077b594dd5a1bdc23bdd062096534bcbc2247a01348929594eb248014fd0473a363d14c167027b202b83881a4be7cb9c1ec78f5f43d950718eb17d6f4a5d5ad83c91e54a52717556c5f46251354cddf4150c58ac43312fb4bce7bc7154b4c3cff29931e99d19a91c5c8deee2ee5ac9ad2335e1e3889"}, {0x50, 0x0, 0x7fff, "ce9cf2fde34ef992a8d5f774771c9f3297418bccd9f6094c64a052a8ac17c54811306116dddb620357c51be946b451d30a42e8a27c2899804be6"}, {0x18, 0x0, 0x7fffffff, "618278b8ef"}], 0x198}}, {{&(0x7f0000001480)=@l2={0x1f, 0xc0, {0xca, 0x6, 0x8, 0x3, 0x7, 0x6}, 0xf6ae, 0xf8}, 0x80, &(0x7f0000002580)=[{&(0x7f0000001500)="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", 0x1000}, {&(0x7f0000002500)="3c39b0cd7a06bd6b41b444da9d918ec03d1bdb50700c4a0f93341fc311c11f713d1d2c03deab38333b07fb00df888c9c830a1bc3345365559062ec26a27c55ffa7b235e168dd2bb7fecb47fcd5bd82c1a2e4f74ab6ed5f23092cbddddc99312509697a185d9ba087762f731dca05b779858961de40effda2d225", 0x7a}], 0x2, &(0x7f00000025c0)=[{0x88, 0x1, 0xa1, "46debc7a67a0f62213a77576949a666e5a42ebf325b8a61d3c1687f9eb3b425607c2dd91148249912acc1f76941cb4542084aa27459c398130d5df63146127f09c483af637f49aea9f5577aa381aefe708897506b793b4911d968999eba98a95bc30643cbece38459ae411dbf12123b7ad0f1144ebce"}, {0x88, 0x6, 0x25, "a5530d1e72278f908e9fa11122248c0bde4fa3738966708d6efa0cf4fb502f126b8d6585b84e6efa73886d94a56892fcd89484ef3f10d6b2e6f806488d2be9e7b38348467f2f3c875bedb5abd77fd48c29b53c7c7eaeb99ed45f451754033226655e21a0e8d97c382ebfa7e5a0a450597187570a802c"}, {0x40, 0x119, 0x2, "540abf833349a0c91800f4498f06557250c2241ae5c59adcc7447c156314338bd7a283fcdc718b092a7fc3cc4b1f"}], 0x150}}], 0x5, 0x22070010) ioctl$sock_netdev_private(r1, 0x89f3, &(0x7f0000000180)="91cca684a054bcaebd8b291b90dd09bf52aab4a6288b9153a6f609d5dd8fde7c616c10ee6eae8a7a11ed81f6ff2cdbc95a13d49038277faa1a888b9349dd2d98aec500bd863592c47e19ac805946c2acf2b9436d1920e8837325f7a298bc8f8cca78e41e07a28514858949e46e2593102922bfcf8e0c049072d2bd68245c69ce1a603ba1418672202a09d37827f3") syz_open_procfs(0xffffffffffffffff, &(0x7f0000002940)='fdinfo\x00') [ 199.350209] binder: undelivered TRANSACTION_ERROR: 29201 12:30:00 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda={0x66646185, 0x9}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 12:30:00 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda={0x66646185, 0x9}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 12:30:00 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) tkill(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x1b5, 0x2, 0x0, 0xfffffffd, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) sendfile(r6, r6, 0x0, 0x2008000fffffffe) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 12:30:01 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000002c0)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f00000017c0), 0x332, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x81, 0x6, 0x6, 0x20, 0x0, 0x21, 0x8000a, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x3, 0x8}, 0x25544, 0x3, 0x8, 0x8, 0x9, 0x1, 0xfffc}, r1, 0x8, 0xffffffffffffffff, 0x2) sched_setattr(r1, &(0x7f00000000c0)={0x30, 0x3, 0x1, 0x5, 0x1, 0x4, 0x4, 0x3}, 0x0) 12:30:01 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100001c9, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r3, 0xfae71e5936326fae) symlinkat(&(0x7f0000000040)='./file0\x00', r3, &(0x7f0000000080)='./file0\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0) 12:30:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, 0x0, 0x1ca, 0x20048000, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3082}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x13) writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="580000001400add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac71082300000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 12:30:01 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda={0x66646185, 0x9}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 199.585833] binder: 8124:8125 transaction failed 29189/-22, size 80-24 line 3138 [ 199.613613] binder: undelivered TRANSACTION_ERROR: 29189 12:30:01 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000002c0)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@remote, r1}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@getstats={0x1c, 0x5e, 0x80a, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, 0x3}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) preadv(r0, &(0x7f00000017c0), 0x332, 0x0) 12:30:01 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) keyctl$get_security(0x11, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=""/208, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = socket(0x10, 0x4008000000803, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r3, 0xfae71e5936326fae) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000006c0)={{{@in6, @in=@local}}, {{@in6=@local}, 0x0, @in=@dev}}, &(0x7f0000000000)=0xe8) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f0000000040)=0x81a, 0x4) sendto(r2, &(0x7f0000000600)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000005}, 0xc, &(0x7f0000000640)={&(0x7f0000000340)={0x13c, r4, 0x4, 0x70bd2c, 0x0, {}, [@TIPC_NLA_LINK={0x64, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0xc4, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3d1}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}]}, 0x13c}}, 0x4) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) dup(0xffffffffffffffff) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x3, @mcast1}, 0x1c) syz_open_procfs(0x0, 0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x40) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000240)) 12:30:01 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="b70000003c00f9350000000007010000ff01000095f7ff00000000008348133f275db38266809fa4d82d"], &(0x7f0000003ff6)='OPL\x00', 0x1, 0xc9, &(0x7f0000000440)=""/201, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x70) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r0, 0xfae71e5936326fae) r1 = dup(r0) r2 = dup3(0xffffffffffffffff, r1, 0x0) read$eventfd(r2, 0x0, 0x0) select(0x0, 0x0, &(0x7f0000000880)={0x0, 0x3, 0xd4}, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000000000206a0a00fe000000008500000012000000b70000000000000095000000000000004e62"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280) write$cgroup_int(r4, &(0x7f00000000c0)=0x3, 0x12) socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000940)={'bridge_slave_1\x00', &(0x7f0000000900)=@ethtool_sset_info={0x37, 0x800, 0x0, [0x10001, 0x81, 0x1df40000000000, 0x0, 0xfffffffffffffffd, 0x2]}}) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000280)={{0x6c, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x3, 'fo\x00', 0x10, 0x21d6, 0x19}, {@loopback, 0x4e21, 0x2000, 0x1, 0x20, 0x9}}, 0x44) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) ioprio_get$pid(0x2000000003, r5) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000380)=""/174) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r6, 0xfae71e5936326fae) ioctl$RTC_EPOCH_SET(r6, 0x4008700e, 0x3f) vmsplice(r3, 0x0, 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) 12:30:01 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda={0x66646185, 0x9}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 12:30:01 executing program 3: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x5) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0) fchmod(r2, 0xfae71e5936326fae) fsync(r2) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000002c0)={'caif0\x00', 0x200}) close(r1) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x3cd) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r1, &(0x7f0000593000)={0x2, 0x0, @broadcast}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f0000000240)={{0x3c, @remote, 0x4e21, 0x4, 'nq\x00', 0x64033f5eaa7c3292, 0x2, 0x1000007b}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x5a0f49baa09e9050, 0x1000, 0x8, 0x7}}, 0x44) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r6, 0xfae71e5936326fae) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000100)={0x800, 0x0, 0x0, r6}) sendmmsg$inet(r1, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="196f3fcc97a679aeb0844a7ba8a6be20cb696e48b0e97cf9b9ee7e4e5232960ccdbcdf4d", 0x24}], 0x1}}], 0x1, 0x0) 12:30:01 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda={0x66646185, 0x9}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 200.274226] binder: 8141:8143 transaction failed 29189/-22, size 80-24 line 3138 [ 200.285544] binder: undelivered TRANSACTION_ERROR: 29189 12:30:01 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000140)=[{{&(0x7f0000000000)=@ll, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/40, 0x28}], 0x1, &(0x7f0000000540)=""/4096, 0x1000}, 0x1}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000180)) preadv(r0, &(0x7f00000017c0), 0x0, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000003c0)={0x2, 0xf8, &(0x7f00000002c0)="b8198725dc6c991f5e411f621537e1dcca885f66efc20cc1d502695dd91973c0ac75cec09df7574307689a9399c7ca226b028d4565460342f739790281e2fe89694bdd676cfea2ab0700124344cb149008e1afb96ee2d40528542a4adbccbb1e572b3d40fbebeefc5d1e5aa2263fd70bb44ee2705abedd3a161e21590e060ba326e968f020b36ee9f250ecf186debe7723935fc0cb8e7dc7169e76fedf83fe1d7a6f422d451462dbe9dd7c52d956f6013ed755d009113a6defcd8c0271306ebd5d8be2c11ce27eb09c192fd2cfa45dfa93f183624d1ee906d4d48110729e7e6387d7c6c22b179ceec3981b521188dc075fbd9980e5664215"}) getpeername(r0, &(0x7f00000001c0)=@ethernet={0x0, @random}, &(0x7f0000000240)=0x80) 12:30:01 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/94, 0x5e, 0x0) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) [ 200.343931] binder: 8155:8157 transaction failed 29189/-22, size 80-24 line 3138 12:30:01 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda={0x66646185, 0x9}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 12:30:01 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="b70000003c00f9350000000007010000ff01000095f7ff00000000008348133f275db38266809fa4d82d"], &(0x7f0000003ff6)='OPL\x00', 0x1, 0xc9, &(0x7f0000000440)=""/201, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x70) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r0, 0xfae71e5936326fae) r1 = dup(r0) r2 = dup3(0xffffffffffffffff, r1, 0x0) read$eventfd(r2, 0x0, 0x0) select(0x0, 0x0, &(0x7f0000000880)={0x0, 0x3, 0xd4}, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000000000206a0a00fe000000008500000012000000b70000000000000095000000000000004e62"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280) write$cgroup_int(r4, &(0x7f00000000c0)=0x3, 0x12) socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000940)={'bridge_slave_1\x00', &(0x7f0000000900)=@ethtool_sset_info={0x37, 0x800, 0x0, [0x10001, 0x81, 0x1df40000000000, 0x0, 0xfffffffffffffffd, 0x2]}}) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000280)={{0x6c, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x3, 'fo\x00', 0x10, 0x21d6, 0x19}, {@loopback, 0x4e21, 0x2000, 0x1, 0x20, 0x9}}, 0x44) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) ioprio_get$pid(0x2000000003, r5) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000380)=""/174) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r6, 0xfae71e5936326fae) ioctl$RTC_EPOCH_SET(r6, 0x4008700e, 0x3f) vmsplice(r3, 0x0, 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) [ 200.399159] binder: undelivered TRANSACTION_ERROR: 29189 [ 200.406320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8161 comm=syz-executor.2 12:30:02 executing program 1: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r0, 0xfae71e5936326fae) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000280)=0xfffffffffffffff6) setuid(r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r4, 0x0) write$P9_RGETATTR(r0, &(0x7f00000000c0)={0xa0, 0x19, 0x1, {0x40, {0x1, 0x1, 0x1}, 0xc4, r2, r4, 0xff, 0x4f1bdbe8, 0x36d, 0xffffffffffffffc9, 0x9, 0x7, 0x7, 0x88, 0xaa1, 0xfff, 0x7, 0x7, 0x101, 0x1, 0x8}}, 0xa0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000002c0)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r5, &(0x7f00000017c0), 0x332, 0x0) ioctl$EVIOCGREP(r5, 0x80084503, &(0x7f0000000540)=""/4096) 12:30:02 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000280)=0xfffffffffffffff6) setuid(r3) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r6, 0x4) sendmsg$TIPC_NL_SOCK_GET(r6, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000240)={&(0x7f00000005c0)={0x180, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xaee}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff}]}, @TIPC_NLA_LINK={0x100, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4c4}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x8000}, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0xd, 0x8, 0x1000, 0x9df}) getsockname(r4, &(0x7f0000000100), &(0x7f0000000000)=0x80) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000940)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@remote, r8}, 0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000a80)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@remote, r10}, 0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@remote, r11}, 0x14) r12 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r12, 0xfae71e5936326fae) accept4$packet(r12, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000740)=0x14, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@remote, r13}, 0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000007180)=[{{&(0x7f0000000ac0)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000000b40)=""/239, 0xef}, {&(0x7f0000000c40)=""/148, 0x94}, {&(0x7f0000000d00)=""/132, 0x84}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/177, 0xb1}, {&(0x7f0000001e80)=""/4096, 0x1000}], 0x6, &(0x7f0000002f00)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000003f00)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000005140)=[{&(0x7f0000003f80)=""/219, 0xdb}, {&(0x7f0000004080)=""/139, 0x8b}, {&(0x7f0000004140)=""/4096, 0x1000}], 0x3}, 0xffff}, {{0x0, 0x0, &(0x7f00000054c0)=[{&(0x7f0000005180)=""/36, 0x24}, {&(0x7f00000051c0)=""/220, 0xdc}, {&(0x7f00000052c0)=""/190, 0xbe}, {&(0x7f0000005380)=""/100, 0x64}, {&(0x7f0000005400)=""/49, 0x31}, {&(0x7f0000005440)=""/103, 0x67}], 0x6, &(0x7f0000005540)=""/4096, 0x1000}, 0xfffffff8}, {{&(0x7f0000006540)=@nl=@unspec, 0x80, &(0x7f00000069c0)=[{&(0x7f00000065c0)=""/125, 0x7d}, {&(0x7f0000006640)=""/34, 0x28}, {&(0x7f0000006680)=""/128, 0x80}, {&(0x7f0000006700)=""/237, 0xed}, {&(0x7f0000006800)=""/130, 0x82}, {&(0x7f00000068c0)=""/73, 0x49}, {&(0x7f0000006940)=""/41, 0x29}, {&(0x7f0000006980)}], 0x8}, 0x8000}, {{&(0x7f0000006a40)=@pppol2tpv3in6, 0x80, &(0x7f0000007000)=[{&(0x7f0000006ac0)=""/27, 0x1b}, {&(0x7f0000006b00)=""/143, 0x8f}, {&(0x7f0000006bc0)=""/127, 0x7f}, {&(0x7f0000006c40)=""/92, 0x5c}, {&(0x7f0000006cc0)=""/172, 0xac}, {&(0x7f0000006d80)=""/195, 0xc1}, {&(0x7f0000006e80)=""/168, 0xa8}, {&(0x7f0000006f40)=""/136, 0x88}], 0x8, &(0x7f0000007080)=""/252, 0xfc}}], 0x5, 0xa4, &(0x7f00000072c0)={0x77359400}) getpeername$packet(r5, &(0x7f0000007300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000007340)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@remote, r16}, 0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000007700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80400}, 0xc, &(0x7f00000076c0)={&(0x7f0000007980)=ANY=[@ANYBLOB="24030000", @ANYRES16=r7, @ANYBLOB="000400af44d4630674ea56657f611f55e6ad3c8dbb30578ffa97860c68df7992f1de8a8a85e9e8abe6ea2050e3a465e1b10cc876", @ANYRES32=r8, @ANYBLOB="3c00020038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004004000000008000100", @ANYRES32=r9, @ANYBLOB="500002004c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=r10, @ANYBLOB="e001020038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400030000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000100000008000600", @ANYRES32=r13, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004006807000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000400000008000600", @ANYRES32=r14, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000001000040062726f61646361737400000038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000008000300030000000800040005b9ffff38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400e1ffffff08000100", @ANYRES32=r15, @ANYBLOB="780002003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400faffffff08000100", @ANYRES32=r16, @ANYBLOB="04000200"], 0x324}, 0x1, 0x0, 0x0, 0x40}, 0x20000080) r17 = accept$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000400)=0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r17, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}}, 0x0, 0x6, 0x0, "044f9491857d04854753594f8a3c1f206a72322e7fa5dff41a09c7ba47967aafe85afff4b65621cf867b2a15c61c6213c8e5d81746180c018e93d452ce631318ce89e854a46d96309796dedb440abb9e"}, 0xd8) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000007740)=ANY=[@ANYBLOB="b40000e7c7f27265b96ddb4432081376176374696f29ea9b60cc351a729b9746c5ccc8e48de75b29862fe3cf85d1070bd606a3fc0ff637008af05477e2c4f773136718052227aa8d87c193cbecd256304d766c8831c27824c25d5d9ef557a63e1291ac954129323ae72c4193b16ac3a130d7f0022da31a0cbbe601", @ANYRESDEC=r3, @ANYBLOB="2c66756e633d46494c455f4d4d41502c66736d616769633d3078303030303030303030303031303030312c736d61636b66736465663d74696d655f6f66667365742c657569643ceead9e645a0c7ef533946f4509dc8a400b2a85d76b600eb6f3a61c1777c58da489028eefc873f7ca946cb561538f3dbb970569b52c0a0a4edafb6945d754dc5f487df610d6b6a7afce3ad261c3a5e30d28412f74e0830b01d5944052a5cb44014844e66ea2947b94d68e96df5a80c81b9d7a", @ANYRESDEC=r3, @ANYBLOB="2c7365723d0b0b9fcdeb083c350c9371a3f8e7bdfd523d0aeed38340498cb324e1ab360af05d5d7680860add046d065f9e60bed383b96aa60d2f9836f84095d8e1a19da5e240e4d6c875450a9e379f846e8dcd4e7421d525d09abe864164352a8d7f6616740190c6ead6394e872df8f1248adbadbbabef7dbca5c540ab8ada964ceb375897f9671c3972d45e8591fdb2ac08f40190e1928be671b8bcb122f76657bf2526bae0381c3b6ef89dfa", @ANYRESDEC=r3, @ANYBLOB=',\x00']) [ 200.472345] binder_alloc: 8172: binder_alloc_buf, no vma [ 200.493431] binder: 8172:8174 transaction failed 29189/-3, size 80-24 line 3284 12:30:02 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda={0x66646185, 0x9}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 200.524224] binder: undelivered TRANSACTION_ERROR: 29189 [ 200.554337] binder_alloc: 8188: binder_alloc_buf, no vma [ 200.567910] binder: 8188:8189 transaction failed 29189/-3, size 80-24 line 3284 [ 200.584484] binder: undelivered TRANSACTION_ERROR: 29189 [ 200.634921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8200 comm=syz-executor.2 12:30:02 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) r1 = open(&(0x7f0000000280)='./bus\x00', 0x41042, 0x0) write$UHID_INPUT(r1, &(0x7f0000001440)={0x8, "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", 0x1000}, 0xfffffc41) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000100)) fadvise64(r1, 0xfffffffffffffffe, 0x0, 0x4) close(r0) syz_emit_ethernet(0x11, &(0x7f0000000000)={@empty, @remote, [], {@generic={0x80c, "ce311d"}}}, &(0x7f00000000c0)={0x0, 0x3, [0x450, 0xe0b, 0xe7, 0x49e]}) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1141042, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x8000fffffffe) writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000404}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x60, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8000}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x10000}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x100}, 0x4040) 12:30:02 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda={0x66646185, 0x9}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 12:30:02 executing program 0: r0 = accept(0xffffffffffffffff, &(0x7f0000000080)=@tipc=@name, &(0x7f0000000100)=0x80) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@dev}, {@in6=@empty}, @in6=@remote}}, 0xf0}}, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000001c0)={0x0, 0x3ff}, 0x8) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) getsockopt$netlink(r2, 0x10e, 0x4, &(0x7f0000000240)=""/92, &(0x7f00000002c0)=0x5c) 12:30:02 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000002c0)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) ftruncate(r1, 0xfffffffffffff2e1) preadv(r0, &(0x7f00000017c0), 0x332, 0x0) 12:30:02 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/user\x00', 0x2, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f00000000c0)={0x0, 0xfb, 0x99, 0xb, 0x80, "d3c3d9f74758024b7473d685ab8ca1e1", "880d7f750723be697dff4f506d01aef3b6da4d20b91971e9fb84e2c77ac14689f0d0d49e176308063adee367792b1b2c26393e33af50fe65fabda73a93ed6264c3dde233fc89b62c53345c6a17ea1dff183ad438fe2fa668f135c10a0a60960a6c594b2a26ccec4e4caca338c01cfffa021649bf4d785b315b5d1617e653b0f00c66bd39"}, 0x99, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000002c0)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000080)='net/tc\xbeS') preadv(r2, &(0x7f00000017c0), 0x332, 0x0) 12:30:02 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r3, 0x208204) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x14102e, 0x0) write$binfmt_elf32(r4, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000340)={&(0x7f0000000080), 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x24, r6, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x4}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x180000f, 0x11, r4, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@abs, 0x6e) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f00000001c0)={0x0, 0x40000000000006, 0x0, 0x0, 0x202, [{}, {}]}) [ 200.765732] binder_alloc: 8206: binder_alloc_buf, no vma [ 200.771732] binder: 8206:8212 transaction failed 29189/-3, size 80-24 line 3284 [ 200.780565] binder: undelivered TRANSACTION_ERROR: 29189 12:30:02 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000480)={0x3}, 0x8) mkdir(&(0x7f0000000100)='./control\x00', 0x0) read(r0, &(0x7f0000e6d000)=""/384, 0x180) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x400003fff) r2 = gettid() fcntl$setown(r1, 0x8, r2) rt_sigprocmask(0x0, &(0x7f000003b000)={0xbffffffffffffffe}, 0x0, 0x8) fcntl$setsig(r1, 0xa, 0x21) r3 = dup(r0) inotify_add_watch(r3, &(0x7f0000000000)='./control\x00', 0x900) rt_sigpending(&(0x7f0000000040), 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./control/file0\x00', 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x9, &(0x7f00000003c0)=[{0x59, 0x6, 0x1f, 0x8}, {0x4, 0xff, 0x3, 0x1}, {0x8001, 0x9, 0x6, 0x8}, {0xff, 0x9, 0x81, 0xfff}, {0x7, 0xbc, 0x45, 0x7}, {0x1000, 0x7, 0x1, 0xca26}, {0x0, 0x0, 0x81, 0x5}, {0x5, 0x1, 0x3, 0x9}, {0xd29, 0x4, 0x32, 0x1}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x15, 0x9, &(0x7f0000000340)=ANY=[@ANYBLOB="85000034000000180000000000000000000000ac3e4f02be70bb070000002570e0fffcffffff850000004500000085000000080000008500000055000000850000005d0000002698dce62e7700"], &(0x7f00000000c0)='GPL\x00', 0x100, 0x1055, &(0x7f00000004c0)=""/4096, 0x40f00, 0x1, [], 0x0, 0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x0, 0x3, 0x7}, 0x2}, 0x70) fchmod(r6, 0xfae71e5936326fae) ioctl$BLKTRACESTART(r6, 0x1274, 0x0) r7 = socket$netlink(0x10, 0x3, 0xf) getsockopt$IP_VS_SO_GET_SERVICE(r7, 0x0, 0x483, &(0x7f0000000280), &(0x7f0000000300)=0x68) 12:30:02 executing program 4: mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda={0x66646185, 0x9}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 12:30:02 executing program 0: r0 = epoll_create(0x6) r1 = socket$netlink(0x10, 0x3, 0x4) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000080)=@buf) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/l2cap\x00') r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0x8, 0x70bd2c, 0x25dfdbff, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0xc010) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x0, 0x0) pwrite64(r5, &(0x7f0000000280)="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", 0x1000, 0x0) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000001280)='/selinux/status\x00', 0x0, 0x0) ioctl$KDADDIO(r6, 0x4b34, 0x8) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) splice(0xffffffffffffffff, &(0x7f0000001300), r2, &(0x7f0000001340), 0x400, 0x4) r7 = socket$inet(0x2, 0xa, 0xb2) getsockopt$sock_buf(r7, 0x1, 0x3d, &(0x7f0000001380)=""/168, &(0x7f0000001440)=0xa8) socket$packet(0x11, 0x3, 0x300) setsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000001480), 0x4) r8 = openat$null(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/null\x00', 0x24241, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001540)={r8, 0x28, &(0x7f0000001500)}, 0x10) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001580)='/selinux/policy\x00', 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r9, &(0x7f00000017c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x200010}, 0xc, &(0x7f0000001780)={&(0x7f0000001600)=@gettaction={0x150, 0x32, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x2, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x1d, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x5, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x14, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0x14, 0x1, @TCA_ACT_KIND={0xc, 0x1, 'police\x00'}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_gd=@TCA_ACT_TAB={0xc0, 0x1, [{0x14, 0x20, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xb, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x18, 0x4, @TCA_ACT_KIND={0x10, 0x1, 'tunnel_key\x00'}}, {0x14, 0xc, @TCA_ACT_KIND={0xc, 0x1, 'gact\x00'}}, {0x10, 0x8, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x2, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x14, 0x18, @TCA_ACT_KIND={0xc, 0x1, 'gact\x00'}}, {0x14, 0x18, @TCA_ACT_KIND={0xc, 0x1, 'sample\x00'}}, {0x10, 0x19, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0x14, 0x1f, @TCA_ACT_KIND={0xc, 0x1, 'pedit\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8001}]}, 0x150}, 0x1, 0x0, 0x0, 0x8000}, 0x8800) r10 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000001800)='/selinux/status\x00', 0x0, 0x0) ioctl$BLKGETSIZE(r10, 0x1260, &(0x7f0000001840)) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000001880)={0x4, 0x100, 0x3ba6e840, 0x4, 0x4}) r11 = getpgid(0xffffffffffffffff) rt_sigqueueinfo(r11, 0x0, &(0x7f00000018c0)={0x35, 0xffffffff}) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001980)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r10, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x30, r12, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) 12:30:02 executing program 1: perf_event_open(&(0x7f00000004c0)={0x4, 0x70, 0x71, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000002c0)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="54010000100013070000000000000000ac14140000000000000000000000000000000000000000000000ffffac14143b00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000001c001700000000000000000000000000000000000000000004000000480001006d643500"/268], 0x154}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f00000017c0), 0x332, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) 12:30:02 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) keyctl$get_security(0x11, 0x0, 0x0, 0x0) add_key$user(0x0, &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080), 0x0, 0xfffffffffffffffd) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=""/208, &(0x7f0000000640)=0xd0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$inet(r2, &(0x7f0000000340)=""/187, 0xbb, 0x100, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast}, 0x10) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xb000) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000000c0)) write$cgroup_subtree(r4, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xb000) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000000c0)) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00mEmory '], 0x3ff800) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xb000) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000000c0)) write$cgroup_subtree(r6, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0xb000) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000000c0)) write$cgroup_subtree(r7, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0xb000) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000000c0)) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0xb000) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000000c0)) write$cgroup_subtree(r9, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800) write$cgroup_subtree(r4, &(0x7f0000000740)=ANY=[@ANYRES32=r6, @ANYRESDEC=r1, @ANYRES64=r7, @ANYRES16, @ANYRESDEC=r0, @ANYRESOCT=0x0, @ANYRES64=0x0, @ANYRESOCT=r9], 0x6c) write$cgroup_subtree(r3, 0x0, 0x0) socket$packet(0x11, 0x800002, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x4, 0x668}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000300)) r10 = gettid() ptrace$setopts(0x4206, r10, 0x0, 0x0) tkill(r10, 0x39) ptrace$setregs(0xd, r10, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r10, 0x0, 0x0) r11 = gettid() ptrace$setopts(0x4206, r11, 0x0, 0x0) tkill(r11, 0x39) ptrace$setregs(0xd, r11, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r11, 0x0, 0x0) r12 = syz_open_procfs(r11, &(0x7f0000000400)='f\xff\xff\xff\xff\x00\x00\x00\x00\xabU\x8d\xd8\x13\xe9\xaa?^\x8e\n\xabG\f\xfa\xd9\xca\x86\xcb\xcc\x12\x17`nZ\xce\xca') sendfile(0xffffffffffffffff, r12, 0x0, 0xa808) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmmsg(0xffffffffffffffff, 0x0, 0xd3, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 12:30:02 executing program 4: mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda={0x66646185, 0x9}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 12:30:02 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000380)='./file0\x00') r0 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:auditd_unit_file_t:s0\x00', 0x28, 0x2) perf_event_open(&(0x7f0000000600)={0x0, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4766, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x4000000004, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2adf}, 0x0, 0x5, 0xffffffffffffffff, 0x0) write$UHID_INPUT(r0, &(0x7f0000001cc0)={0x8, "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", 0x1000}, 0x1006) socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(r0, r0, &(0x7f0000000240), 0x2008000fffffffe) 12:30:02 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x100, 0x0) recvmmsg(r0, &(0x7f0000003140)=[{{&(0x7f00000002c0)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='/dev/null\x00') ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x1) preadv(r1, &(0x7f00000017c0), 0x332, 0x0) 12:30:02 executing program 4: mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda={0x66646185, 0x9}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 201.386408] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=50 sclass=netlink_tcpdiag_socket pig=8246 comm=syz-executor.0 12:30:02 executing program 4: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda={0x66646185, 0x9}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 12:30:03 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x12) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000002c0)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f00000017c0), 0x332, 0x0) 12:30:03 executing program 4: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda={0x66646185, 0x9}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 12:30:03 executing program 4: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda={0x66646185, 0x9}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 12:30:03 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x2, 0x0, 0x1f, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x5, 0x6) recvmmsg(r0, &(0x7f0000003140)=[{{&(0x7f00000002c0)=@ipx, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffd3}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') write$9p(0xffffffffffffffff, &(0x7f00000000c0)="8cd23f6240a394fe9af7f72e5e0e1e9a68228985a39913bcc4628c188b896bd7beae2a1986e45aa0e2f0284874654ab7c1350458f79c6cf6fe526b82bf6746bd2ffae2cae841018fcc90ecb469bd", 0x4e) preadv(r1, &(0x7f00000017c0), 0x332, 0x0) [ 201.580747] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=50 sclass=netlink_tcpdiag_socket pig=8257 comm=syz-executor.0 12:30:03 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000000)='proc\x00', 0x4) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) write$selinux_load(r0, &(0x7f00000000c0)={0xf97cff8c, 0x8, 'SE Linux', "087f878c34753417b5bb37d89fba2a000a2b4df3a20281d0b89786f6c056bd7d40babd196b2a87698d8f9a68e64eb840dd2fe584cc4eaa5984d11b99320c379265979e44f738808e31b7a3f6759c52473f4b97ae6a7e555a7fa7905eb2bfeb7a5d012c88dcb7ca3a7043df2383700c2ce58899c5bbc28a8c64b9fb6e29ec27fe4655773eeff9f9da39ffe6da34dd613f"}, 0xa0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000002c0)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f00000017c0), 0x332, 0x0) 12:30:03 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda={0x66646185, 0x9}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 201.754687] binder_alloc: 8296: binder_alloc_buf, no vma [ 201.771805] binder: 8296:8298 transaction failed 29189/-3, size 80-24 line 3284 [ 201.801580] binder: undelivered TRANSACTION_ERROR: 29189 12:30:03 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000180)={{{@in, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000040)=0x1e3) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(r0, &(0x7f0000000400)={0x78, 0x0, 0x3, {0x8b, 0xfffff800, 0x0, {0x6, 0x280000000, 0xbf, 0x800, 0x80000001, 0x8, 0x8, 0x0, 0x4, 0x0, 0xa, r2, r3, 0x82de, 0x6}}}, 0x78) syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1, 0x0) 12:30:03 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xa8}]}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c46092000000800000000000000020003005c030000e60300000000a1cc1c9918004000000000000000e60100000000e700010000009d003800010003001f0000000000000088000000000000000900000002000000040000004492d6623e4b000000000000060900000000000007000000000000000000006037d30000120019000000000006c6d85c0dbcebd1e475af3402ff926330f905c3d0198dd82396a160ff1c4e0227f82ae36c8425f415f6f11e52d598bdd163c64275407b4cc36c88000000000000000000000000000031d66422882e1e00fc87cbdf170617614b374cc3d9e4646ae2"], 0x89) write$binfmt_script(r0, &(0x7f00000009c0)=ANY=[], 0x378) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f0000000240)={0x2, 0x100, 0xfc00, 0xca8a, 0x1, 0x9}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r3, 0xfae71e5936326fae) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x804000, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@remote, r5}, 0x14) bind$packet(r4, &(0x7f0000000440)={0x11, 0xec, r5, 0x1, 0x7}, 0x14) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'vlan0\x00', 0x8000}) r6 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xfff, 0x4) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r7, 0xfae71e5936326fae) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000100)=@get={0x1, &(0x7f0000000140)=""/17, 0x6}) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000000480)=0x0) ptrace$peek(0x2, r8, &(0x7f00000004c0)) r9 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fchmod(r9, 0xfae71e5936326fae) sendto$inet(r9, &(0x7f0000000180)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff814512520e8cf87f922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a6111bf746bec66ba", 0x55, 0x11, 0x0, 0x0) 12:30:03 executing program 3: syz_open_dev$sndtimer(&(0x7f0000000340)='/dev/snd/timer\x00', 0x0, 0x0) memfd_create(&(0x7f0000000040)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x200, 0x1e5) r1 = openat$cgroup_ro(r0, &(0x7f0000000480)='Cpuacct.@tE\xae\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000002) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x275a, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r4, 0x8000000000000010, 0x0, 0x2000005) fallocate(r3, 0x0, 0x0, 0x10ffff) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r4}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f0000000140)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) read$eventfd(r2, &(0x7f00000003c0), 0x8) poll(&(0x7f0000000300)=[{}], 0x1, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000001c00)='./bus\x00', 0xa1) r6 = socket$inet6(0xa, 0x400000000001, 0x0) accept4(r5, &(0x7f0000000240)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x0, 0x800) r7 = dup(r6) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r6) setsockopt$inet6_tcp_int(r7, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r6, 0x0, 0xb3, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r8, 0xfae71e5936326fae) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x6, @dev={[], 0x1e}}, 0x4, {0x2, 0x4e22, @remote}, 'gre0\x00'}) r9 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r5, 0x800fe) sendfile(r7, r9, 0x0, 0x8000fffffffe) 12:30:03 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4003ff) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f0000000040)) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x402a, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() clone(0x3fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_script(r0, &(0x7f0000000340)={'#! ', './file0', [{0x20, 'vmnet1%'}], 0xa, "534aefc80665949030f2abdaf561276fb9017d5bdc575c2929b30b708bfddfa86e02e25f7fc84f0390862033739b8a3b91bf37dc2ff9138c79f029dc8329106232996559df78966e854f74b970079a2b6b3c4de1891281b78237835feda6b88ee2db413b"}, 0x77) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000280)=0xfffffffffffffff6) setuid(r5) write$P9_RSTAT(0xffffffffffffffff, &(0x7f00000002c0)={0x57, 0x7d, 0x1, {0x0, 0x50, 0x8000, 0x4, {0x8}, 0x88000000, 0x4, 0xfff, 0x5, 0x5, 'fuse\x00', 0xe, '/selinux/load\x00', 0xa, '/dev/fuse\x00'}}, 0x57) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="8d643d", @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r5, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x21) wait4(0x0, 0x0, 0x0, 0x0) write$P9_RMKNOD(r1, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) setgid(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r7, 0xfae71e5936326fae) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000)={0x1000, 0x7, 0x328, 0x4, 0x2}, 0x14) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000001c0)={'ip6erspan0\x00', &(0x7f0000000100)=@ethtool_stats={0x1d, 0x8, [0x4, 0x97, 0x0, 0x1000, 0x3ff, 0x6, 0x0, 0x0]}}) 12:30:03 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda={0x66646185, 0x9}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 12:30:03 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/enforce\x00', 0x0, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000002c0)=0x597, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r3, 0xfae71e5936326fae) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f0000000680)={{0x3, 0x3, 0x7fff, 0x4, 0x200}, 0x10000, 0x28610c37, 0x7}) r4 = open(0x0, 0x141042, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) r6 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="03630840", @ANYRES64=r6, @ANYBLOB="0063404003eb6a52d57b03be7927a3c6d500000000000000000000000000000000000000100000000000000000000000600000000000000018000000000000003340e05bc782104457b580e7d5155cd80e62b262993d17a77b09aeeae74c8996e5260c33676c1ff14fa1852991124bc2c1cae433a22cddc7e7c56cd91d7fffffff8c044b1d96af436dcedf82dc2b903ec9f454154092aa3d6185d3310e28b0e9017e8e1417", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="85616466000000000a0000000000000001000000000000000300000000000000852a68730011000002000000000000000000000000000000852a747001000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'/27], @ANYBLOB="1b0000000000000001000000000000003f00000000000000"], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x008\x00\x00\x00\x00\x00\x00\x00']], 0x24, 0x0, &(0x7f00000002c0)="e2f2faa5746371b2473d47851b2ad30efb2e2df76cfe93dd0d4c09f096b8e9df0ce15008"}) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r7, 0xfae71e5936326fae) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0xac, 0x0, &(0x7f00000003c0)=[@decrefs={0x40046307, 0x2}, @free_buffer={0x40086303, r6}, @release={0x40046306, 0x1}, @release={0x40046306, 0x2}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fd={0x66642a85, 0x0, r7}, @fda={0x66646185, 0x5, 0x0, 0x2f}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/50, 0x32, 0x0, 0x26}}, &(0x7f0000000100)={0x0, 0x18, 0x38}}}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000340)={@fda={0x66646185, 0xa, 0x0, 0x3c}, @fda={0x66646185, 0x6, 0x2, 0x35}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/194, 0xc2, 0x2, 0x33}}, &(0x7f0000000280)={0x0, 0x20, 0x40}}}], 0x90, 0x0, &(0x7f0000000480)="5678f8bdc99b52f6310bf5411a87a4c74a4019b0bbe487be66c7bfcb7c697fad033a962089fc10865c8648bc33afb50375d278566902f02545505ae328a0ab3247edf10536f1131305c4026056a01c393ef86c288408769e2ff97d56d2b96a0347f51e4053a1ef74a7a7c3a458080829d104e58b7568e993b6ac3b2603f4b50b235d1e423ff7e643d9cdf7ebd3a221c4"}) 12:30:03 executing program 2: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r1, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x3, 0x6, 0x3, 0xf5}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x10) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r2 = dup3(r0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000010}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x2ea0258bf8c0f862, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x4, 0x70bd2c, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x30cc1f9310f98407}, 0x4) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r3, 0x2, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x1b, 0x9, @udp='udp:syz1\x00'}}}}, 0x34}, 0x1, 0x0, 0x0, 0x3}, 0x20000000) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000500)={0x4, &(0x7f00000004c0)=[{0x400, 0x28, 0x20, 0xffff0000}, {0x2, 0x1f, 0xc0, 0xffff}, {0x5, 0x0, 0x4, 0x8}, {0x0, 0x80, 0x8, 0x5}]}) r4 = pidfd_open(0x0, 0x0) lseek(r4, 0x0, 0x6) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x218}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r5, 0x101, 0x70bd27, 0x25dfdbff, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000010) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000680)='/selinux/status\x00', 0x0, 0x0) write$P9_RCLUNK(r6, &(0x7f00000006c0)={0x7, 0x79, 0x2}, 0x7) r7 = dup(0xffffffffffffffff) setsockopt$IPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x41, &(0x7f0000000700)={'nat\x00', 0x2, [{}, {}]}, 0x48) r8 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r9 = geteuid() setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000780)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e24, 0x101, 0x4e23, 0x0, 0xa, 0x140, 0xda90b5bbf964a003, 0x5a, 0x0, r9}, {0x200, 0x2, 0x9, 0x6d9, 0x6, 0x0, 0x200, 0x2}, {0x2, 0x8, 0x1f, 0x7}, 0xffff25fa, 0x6e6bb8, 0x3, 0x1, 0x4, 0x39a7bc0cb2039bcf}, {{@in6=@loopback, 0x4d5}, 0x3, @in=@dev={0xac, 0x14, 0x14, 0x23}, 0x34ff, 0x4, 0x2, 0x8b, 0x8, 0x1, 0x4}}, 0xe8) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880), 0x4) flock(r10, 0x0) write$cgroup_subtree(r7, &(0x7f00000008c0)={[{0x2b, 'memory'}, {0x8810f7eb9b76c34, 'pids'}, {0x38, 'pids'}, {0x2b, 'rdma'}, {0x2b, 'pids'}]}, 0x20) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000900)={0x5, {{0x2, 0x4e24, @local}}}, 0x88) ioctl(r8, 0x0, &(0x7f00000009c0)="eb9c5e981269d284c8b27a4f1d14ce72cb") r11 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000a00)='/selinux/mls\x00', 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r11, 0x0, 0x60, &(0x7f0000000a80)={'filter\x00', 0x7, 0x4, 0x4a8, 0x280, 0x0, 0x0, 0x3c0, 0x3c0, 0x3c0, 0x4, &(0x7f0000000a40), {[{{@arp={@multicast2, @remote, 0xff000000, 0xff, @mac=@broadcast, {[0xff, 0xa0a7be3c6f31cd2a, 0x0, 0xff, 0x1fe, 0x80]}, @empty, {[0x0, 0x0, 0xff, 0x80, 0x1fe]}, 0x400, 0x6, 0x4, 0xd9, 0x6, 0xffff, 'team0\x00', 'veth0_to_team\x00', {}, {0xff}, 0x0, 0x2}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @loopback, @rand_addr=0x800, 0x0, 0xffffffff}}}, {{@arp={@remote, @remote, 0xffffffff, 0xffffff00, @mac=@link_local, {[0x1fe, 0x0, 0x0, 0xff]}, @mac=@dev={[], 0x1d}, {[0x0, 0x0, 0xff, 0x0, 0xff, 0xff]}, 0x8, 0x400, 0x8, 0x1, 0x1, 0x0, 'ip6erspan0\x00', 'bridge_slave_0\x00', {0xff}, {0x855e4e67a7bb90fd}, 0x0, 0x100}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @loopback, @multicast1, 0x1, 0xfffffffc}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x11}, @multicast2, 0xff, 0xff000000, @mac=@dev={[], 0x11}, {[0x0, 0x0, 0xff, 0x0, 0x80]}, @empty, {[0xff, 0x0, 0x0, 0x101, 0xff, 0xff]}, 0x80, 0x8, 0x1, 0x0, 0x7fff, 0x20d, 'veth0_to_bond\x00', 'gretap0\x00', {0xff}, {0x1fe}, 0x0, 0x104}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1, @loopback, 0x2, 0x8e3ec3c4a948ec4a}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4f8) r12 = eventfd2(0x5, 0x80000) ioctl$FS_IOC_GETFLAGS(r12, 0x80086601, &(0x7f0000000f80)) 12:30:03 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x200000fd06}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x6469c, 0x0, 0xffffffff, 0x0, 0x3, 0x401, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) accept4$packet(r1, 0x0, &(0x7f0000000100), 0x400) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 12:30:03 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda={0x66646185, 0x9}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 202.200028] binder_alloc: 8314: binder_alloc_buf, no vma [ 202.212306] binder: 8314:8325 transaction failed 29189/-3, size 80-24 line 3284 [ 202.232270] binder: undelivered TRANSACTION_ERROR: 29189 12:30:03 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda={0x66646185, 0x9}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 12:30:03 executing program 2: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x8) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="0b010000920000000000000000000000fe0000000000000008000000000000000529"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffe14) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000180)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f00000000c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@ipv4={[], [], @dev}, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000280)=0xfffffffffffffff6) setuid(r9) r10 = getgid() lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000480)={{}, {0x1, 0x1}, [{0x2, 0x2, 0xee01}, {0x2, 0x7, r6}, {0x2, 0x4, r7}, {0x2, 0x2, r9}, {0x2, 0x5, 0xee01}, {0x2, 0x5}, {0x2, 0x1}], {0x4, 0x2}, [{0x8, 0x0, r10}], {0x10, 0x8}, {0x20, 0x4}}, 0x64, 0x1) r11 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) [ 202.276269] binder_alloc: 8341: binder_alloc_buf, no vma [ 202.288313] binder: 8341:8344 transaction failed 29189/-3, size 80-24 line 3284 [ 202.297491] binder: undelivered TRANSACTION_ERROR: 29189 12:30:03 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda={0x66646185, 0x9}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 202.328939] binder: 8346:8348 transaction failed 29189/-22, size 80-24 line 3138 [ 202.338190] binder: undelivered TRANSACTION_ERROR: 29189 12:30:03 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda={0x66646185, 0x9}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 12:30:03 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_TSC(0x1a, 0x0) getdents64(0xffffffffffffffff, 0x0, 0xffffffa0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000080)='.\x00', 0xfe) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x4000082) write$nbd(r2, &(0x7f0000000240)=ANY=[@ANYRESDEC], 0x1) sendfile(r2, r2, &(0x7f0000000200), 0xa198) [ 202.378996] binder: 8350:8352 transaction failed 29189/-22, size 80-24 line 3138 [ 202.387497] binder: undelivered TRANSACTION_ERROR: 29189 12:30:03 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x6, &(0x7f0000000040), 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000200000002, &(0x7f0000000180)=0x2, 0x4) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) write$P9_RXATTRWALK(r1, &(0x7f0000000000)={0xf, 0x1f, 0x2, 0x3e6f}, 0xf) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080)=r1, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 202.427264] binder: 8356:8357 transaction failed 29189/-22, size 80-24 line 3138 [ 202.449742] binder: undelivered TRANSACTION_ERROR: 29189 12:30:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000000180)=[{{0x0, 0x1b9, &(0x7f0000000140)=[{&(0x7f0000000040)="00dc43484c0ec3e695de4ff216b6ef7ccc556b801559b729377f66d282122ce776ffd7e6bff526480fbe003fff746fb0153037ecf3d78ce0bf170512c4f5d7bde5581a9399d601a7434d41d9d7f5e4c6d726f44befb46a9d2373b689981cb94c52e10e9e4688c984fbf222d4d0c8", 0x6e}, {&(0x7f00000000c0)="962a11210ec2c43cf780453edeff040890c312d19fbaceae24ecb108bdeaf6e5", 0x20}, {&(0x7f0000000100)="46b2676a86c588ffda82e02564929f70d4f0abdcc277", 0x16}], 0x3}}], 0x1, 0x0) 12:30:06 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda={0x66646185, 0x9}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 12:30:06 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r2, &(0x7f0000000080), 0x15d4b87) write$P9_RREADDIR(r2, &(0x7f0000000200)={0x159, 0x29, 0x2, {0x7, [{{0xf773e11093b2cbaf, 0x1, 0x3}, 0x8, 0x40, 0x4d, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/'}, {{0x2, 0x2, 0x8}, 0x3a, 0x3f, 0x4d, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/'}, {{0x8, 0x0, 0x5}, 0x3, 0x8, 0x4d, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x159) fchmod(0xffffffffffffffff, 0xfae71e5936326fae) mkdir(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x39) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) r6 = syz_open_procfs(r5, &(0x7f0000000440)='net/ip6_flowla\ae\b\x00n\xc01\x14\x894Xm\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7k0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r4, r6, &(0x7f0000000240)=0x202, 0x4000000000dc) 12:30:06 executing program 2: get_thread_area(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x10}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) socketpair(0x2, 0x80003, 0x5, &(0x7f0000000000)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) poll(0x0, 0x0, 0xffffffff) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) clone(0x20886100, 0x0, 0x0, 0x0, &(0x7f00000002c0)="d353ff072d68b2e4dc") 12:30:06 executing program 0: gettid() r0 = epoll_create1(0x0) r1 = epoll_create1(0x80000) r2 = timerfd_create(0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r3, 0xfae71e5936326fae) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x50000028}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x60000011}) dup3(r2, r1, 0x0) r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) write$P9_RRENAMEAT(r4, &(0x7f0000000080)={0x7, 0x4b, 0x1}, 0x7) 12:30:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000940)=@setlink={0x28, 0x13, 0x1, 0x3, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8}]}, 0xffffff2a}}, 0x0) 12:30:06 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda={0x66646185, 0x9}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 12:30:06 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x58, r2, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9c16}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xa}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xcaa}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x58}, 0x1, 0x0, 0x0, 0x4800}, 0x40081800) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'veth0\x00', 0x201a}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@ipv4={[], [], @loopback}, 0x0, r4}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@ipv4={[], [], @loopback}}, 0x14) 12:30:06 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda={0x66646185, 0x9}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 12:30:06 executing program 2: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x196) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfa8}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x0, 0xc7}]) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)) 12:30:06 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x3c) r0 = gettid() pidfd_open(r0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x934c4a07cf5ff0b9}, 0x10) r1 = socket$packet(0x11, 0x20000000000003, 0x300) getsockopt$packet_buf(r1, 0x107, 0xb, &(0x7f0000000000)=""/9, &(0x7f0000000100)=0x9) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) connect(r2, &(0x7f0000000180)=@rc={0x1f, {0x0, 0x8, 0x3f, 0x51, 0x81, 0x84}, 0x5}, 0x80) fchmod(r2, 0xfae71e5936326fae) chroot(&(0x7f0000000280)='./file0\x00') r3 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000240)={'syzkaller0\x00', {0x2, 0x4e22, @remote}}) getsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f00000000c0), &(0x7f0000000140)=0x10) 12:30:06 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 12:30:06 executing program 0: ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000000)={'tunl0\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001880)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000001700)=0xfffffffffffffd47) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r0}) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x18, r0, 0x1, 0x5, 0x6, @link_local}, 0x14) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'irlan0\x00', 0x200}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x4d, 0x1}, 0x7) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_timeval(r2, 0x1, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={@multicast2, @broadcast}, 0xc) 12:30:06 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}, 0xc040, 0x2000000000000, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r2, 0xfae71e5936326fae) sendfile(r1, r2, &(0x7f0000000100), 0xffffffffffffff89) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400000, 0x0) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f00000000c0)=""/9) tkill(r0, 0x11) wait4(0x0, 0x0, 0x0, 0x0) [ 205.297532] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 12:30:06 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='cmdline\x00') r1 = socket(0x0, 0x0, 0x0) mount(&(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='mountstats\x00') r3 = syz_open_procfs(0x0, 0x0) prctl$PR_GET_FP_MODE(0x2e) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="01000700aaaaaaaaaa0e0180c200000eaaaaaaaaaa000000000000ffaaaaaaaaaabb2aaaaaaaaabbaaaaaaaaaabb"]) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) r4 = memfd_create(&(0x7f0000000140)='#e\x19C\xc1\xcc\xcf\xde\xd8u\xbf\xdckV9\xfa\xc0\t', 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000040)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="1e00000037b707550100"], 0xa) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, 0x0) write$FUSE_BMAP(r5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$packet(0x11, 0x2, 0x300) ioctl$sock_TIOCINQ(r1, 0x541b, 0x0) sendfile(r1, r2, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f00000001c0), 0x1}}], 0x1, 0x0) preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) mkdir(0x0, 0x0) [ 205.375967] binder: 8410:8414 ioctl c0306201 0 returned -14 12:30:06 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 12:30:07 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) [ 205.489505] binder: 8420:8421 ioctl c0306201 0 returned -14 12:30:07 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 205.621196] binder: 8422:8427 ioctl c0306201 0 returned -14 12:30:07 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 205.696350] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 205.767622] audit: type=1400 audit(1570883407.285:41): avc: denied { ioctl } for pid=8397 comm="syz-executor.1" path="socket:[19957]" dev="sockfs" ino=19957 ioctlcmd=0x54ca scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 12:30:07 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x4000, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r0, 0xfae71e5936326fae) bind(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 12:30:07 executing program 3: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'tunl0\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001880)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000001700)=0xfffffffffffffd47) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r2}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x18, r2, 0x1, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000000)={'tunl0\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'irlan0\x00', 0x200}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r4, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_timeval(r5, 0x1, 0x43, &(0x7f00000001c0)={0x0, 0x2710}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000001880)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000001700)=0x2bca0d70cd78e70f) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000140)={@multicast2, @broadcast, r6}, 0xc) 12:30:07 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:30:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000280)=0xfffffffffffffd9c) setuid(r2) ioprio_get$uid(0x0, r2) readv(r0, &(0x7f0000001540)=[{&(0x7f00000000c0)=""/168, 0xa8}], 0x1) perf_event_open(&(0x7f00000004c0)={0x2, 0xffffffffffffff16, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20000, 0x1, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = accept4(r1, &(0x7f0000000200)=@sco, &(0x7f0000000000)=0x80, 0x80000) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) writev(r0, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff0100014e2000010028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) 12:30:07 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000080)=0x5) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="8efebb0554d93e858e9f43ba5874f5af", 0x2}, 0xffffff21) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x4, 0x70, 0xb9, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000140)=ANY=[@ANYBLOB="0804d3e000000000fe8000000000000000000000000000bbfe88000000fdff000000000000000001b5dbf2c0d82be2482c6aa092de5cb2bf432745fd66321b705c0900c676fbbea31879f0dfbd2d8fa1e747c5436dc04fe8be9f26e6891bfd27b57ef70f803211cf4f146de3aae7c0f8dcf6820c2f15b3b915974d3a16e673df6952eb6f2d8f7b0b00d544a52ccba48395e59229fa04df747ae34f7e54e7fcc329ae7762633c6f800b78e68df01e32feff00d7f8e0927836ff6de9dadcd1e2db1cbf3ec98fce0153"], 0x28) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000280)=0xfffffffffffffff6) setuid(r4) sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)={0x15f0, 0x34, 0x8, 0x70bd2d, 0x25dfdbfb, {0x1}, [@generic="92d78cf4746e8cc70646fc8d5c996ce45b9eb230cf7f211cd6a991d5648fc4851f136e999a76d05bcdd4be9773d34893cc54974121f47619cbe5a954b6d5a8ba35cf4171daaf735afa95e0ec0b797ac752f173fbecb86bd5b39b0c665ba42d84956b7273f162d95bfe416c24e5e666289a2dad0181f78d73359a5463ebcc32c16165dce17a06", @typed={0x14, 0x49, @ipv6=@local}, @generic="25a7650cc1171f8863551d44912e37b9fc4994ff0f87faa618dce36665cd16d0c3409f45d724b327da72710a675e5a6cb5be91289410871ad7d82a3659adcee8be4b1a164dc438cff5561b245df449ffce0b11fa18dca93855a00c1f3813199e317660d41627614e2c9a8c04ae6507395118bfc2ef9d6bf0ee7c669f4de7", @nested={0x1050, 0x1b, [@typed={0x8, 0x10, @uid=r4}, @typed={0xc, 0x55, @u64=0x9}, @generic="cd882fc039aa0963338ceb926aecceac599990aa97324acfaf4b5e64d737a8f7d8caea0c08f4328105579d07846e9cdc528195a709ba9c9bdedc80d619605c78896dec8cc79672ce04c3dcda5a6ccda3887f2671606291380e443547663f6fd79e41d052c1a1ea55bfdc15c50a9550bc419f2f105439e09024663de1d9e3a43e004fb06a713cee4061b0554a3ef0270d9443d5cde8f21298474530d3063d18d56b0023f9a82baf45794bd08089bd56796ac9e48602fd125246c51cef765c92b184c79e1702001d21215ce25eb89332a387cc0ff70e27b1cc73f16052ca975cc418becb735b014a872ccf8487dbd389a4088250053a6373464ec648a183a671b3fef8e382a91f5a92c001b0e34b10d5975811cd4b379392a59acbe9c708845c7ff1e8b07cc5dcd538b302b7089be04ea659c2073720f457623af873aace2b01c9b3cfbd2fa13301061c892f4868e42ed3bba14dead754a20f16bc1880c7d67916673a43665fb128d19ffe7b4e2e19427c7609d3aa0a1c778053bd1b890571de2b5357c6381721748438c6fb3f513711ad5d9e1e60912b7cd7cdce9869cd9e49507f78f0e94c808c60739caa62a04df5ca2da45fb7cdba9608742b3f57c13226ba2986df3afed2673ef8dcbc1489f04ffcfb0c94c826e4dd43010f964ba9a9f016e91eea46b24c65ad4448f84ac064ee7962c225edc26bd7bed194deb4c3ef2663ce04dc19cadaefbecabdba63c7b6fa1cdd7ea4bfa45ee16e1648a16f1268ada6351c7945ff062e2c3209b765a83ea9de2bb01615ed4aa5412a71c382e641a017b2c46da767546f66cdf2c28b1ccab114205692b3d06f6e0fd76ba141b925a5fc5beb618794e0b8d59c024f826c9582d2aff7e4da99a980d81cfe635286d7111b466115dc9f3c9e7cd8f0c5a0f7a14e31ace9fecff2b3bd5360b89c149fadaf9b1a4a2ae5f704fa809aa9a8f2d59b42d1d0a5e9514cdeb89aa4a8e310a21025930bfef62159b70f55e489f049ed12ef675959963474df638ca535bd96f82d2f504bab76060515253ef35759d43bd0b68459bfecd238c5e5acf2751bfe88d93a5a7a85bccd1871b0510aa11568711969902db38bde17dc2d3684e6ac30bf5a687ee37c96a6bfc28003caf8a75903450b35724514886cb0d2a21d935b82fc0502c19df723711738d1d211aef99e566fe5a99902c9a70bda9abd2c159345318e7db00d04d93cd32b022e10874eec518fbcfd0d2936991a278652a185c95807c91473ba6074a9b76ee234dbd407fe33d57d6add4e9835d0f79fd8754b9b93ccf86b02006a189f03f4bad9dd8f0105f9ce806b3c6834013a9914103db32a70c84eb1a90b130c490275af589920f7122ae48c9b9ddfa9003ed03762130013f6bbcc3d42bf2091ad56e9639b52a1740ecd0adb8cee6a0c083181ecf20c8bc02773842136fd4aa83852c52558499cd7bc4c7da367ffda3d8987ae7a247c49f9d69b98d393170ded8ab17f1a251240fb35210e56638a7844bd8b9c05821261435003f35cf4545c8bc6d4d25d17ea15de1ce6eb7f6584c2e4e6dceff6a366ef63bc8e7cd2b4ae761c9381fb99657ae7795bfc2baa5b2eb1c37d9ab59a1877b1f76154ff35f21a876e359f4954b85b58ea7297b0a74024d07561f35db00da59e57ed40d4ec302e4af500893f5d6cca37d6b85d7d0c8b59931ee90f710391447ed1bb2a9ecbdb569defc9e2f26eb0138d3696054b2060a1f0eea6f3834dcc57fc737dea3bffd3fcb3bb483ddc4c1053d9a10a9709fdea2bbeef8461133cc354efb614bc7da5f5d71950030c2b01879cb57d95c2b556f1dce69bf4160b5fca012dad79cc7111af66f6fb964097045fae6d92e6e88aff2decad416269140bbf5ad0d7f363505ea20f017e4ad3b0daf9d96c367e21b978b5b4402fc48bba7e508c051467f52046f9ea4090fc588d4000457c57d4d5f70d00673955346faf311d4b261738b564aa8ed7c55782401bb864101e0bfaa66034a8372e0fdbe672ec724cb7dae7779a71453748418c9ac52fc1bb9e3dad5c257d8632f7f101db24fd8a825e7d0846db2d1a8f32cff114129f1419936a234be79cd9058c360af168451036dde53d601abfdbc01599a515d5b728a15efba65267a6dd2195e88c40ddb4c25cef6c6d03030cfd54445ef3781bec195356f4afe23ce9e15d0c1b8b9c213c3f3ac62546e3745f6205e92f9e69c664f8ebf93fd85e590daf8e0ff6396678fa185fc1634db326ccbf4d7e5b974bcdb05e61cedea4fd3edd4d0d1b09b0cbc0a2e7849994a90342f075005c788289b113c8ec64c161e4998845d427ca18abd3b2bd493e52f26da98a240d55c306b38ad4445e465c39470cc834061c82e31f459dcbc6546f0eee02558805c3f5e4ad448ad6882ad3c1d3f6fff6081c2f1e7b906996b01e5bcb2a2fd92cfc4f8b73fd74897771fbba7933f0365ccb52b06aa6af2b17c610f4bf2281d9b66073c1d6534621a068204f7ded075ae4ac36778d02c5e25dc7f94b3b7b3f97d427179672cc9d497ff932a7caeb108e6591722d6d647cad309725111f4dad183f7f4cd6fe7e0bd14fcc715d2b9104d50052f38f2221b792bbf55e7629135e2d0a624a583415b3894df101ccfb57b010f87d3d03bdaa8891044d17e39a22a333b5675e1f15dbcd473f9d022e575f5934cc5c9b518f8de97c15f599dd8ed2f648ee3bcfbd0bafb032602adc253b7d6dd777d24eb72d1bbf4a2e14353abf89a6afd73585665593fa3e7638fcd390c866b809c83487809f2c9416dc9c91c9e119f0ea37981988abbc91ae1208f330c3372f41655183fb232f92d59e893470dedd7f0d2123d5f0855f133c35d10a9b20572911e5704ea8493fb86d584308c7175f4d922cedc2115332869efc04a6a860f9c5cacc19197197c928ccde773aeea6182a1d97606342800491c6c402485d06e9861dcbb557c766c31b072cb2aebd4551e09516ec99a4f8d9e03419f005c991b93b4ea04ad79811ca75e53c5e6fd0fe64ae643cdb307cd896a2e45a42c6c5d70b8491c183e9bc37180c8205c24812cbbebc39b58c39ba55f1e2680e35713be7e0a5d6fe32092483a9c892228d2ad8614a2c25f62ee603fbcb1dabfdf3da38fd67f3bdf33e35311536e1c30fcca6d6d3b8dcb86541b71132b2f4817a9efe7662695fc41201b0c55b5e79dbec65fb60da4e5c3c9629583786f773f01cfbc37b7da6128529a406f536232bda90a5e0f99e75e02ed4db55fbecd31640972c04dbbd165655ae5c0c3ea2bcc837bd57d0d1d73a25c21a578d16e520419ac898f06ededc75f67047ca0af1ab1b57d6b8c26bdedfa0e7918d8cab0e886484287c2f9cc59f358ccb8d7a9c6adb37a72d652c8109298e636636bda3365b4a6e18e4295ae18cc93fd66a4995f886c73a096c611473f04a03dd988167c70868d9f363edda17a0be0e2d45af5b71e7add7c7855f859a14ea072156671ed70df7b993ef8982887142a963f9eb908c8cd06ac2e08dfddb311c5b1b125411ff5d757ec53e23053007843954b6d044faaec7ea1b582cd06caa589b94d00c60758dbfa3b711a078cdb2c62f8b4e5773f6d026882656ba4d212c7e480b90f99aef749963d66335a85f567ea9635c5cf42780eaf2dd29f5e5f5ae018dedc8e4b8fa336bdb40b1889408067c8b149e53b04577f5e023fc08cf4c5ee996194637506a05e75128e153e2c307f18658df35d5eac6f5bcc7304347fc1232627a8e9fcdcef07a34acd40d8d7acef45a7c80a7546d5e2728e552d2cf730baa61a03aacca998a4c8b3c52ca67fefa0d16b9355fe72ae30f958ca220332bf736d5fbc7e9a834511cc6c8cd4ef13fd5638a52f8ef78e94cf2341702bf87e637d57f859375c4272e702aad89a6650860c2dede05ce8b290ce07b410e50efc3ec403ac58e712636dc17d61f8d9414b1128156ce9df4900a3d20e131e2e901c2fad7bc5d7252523f137c237b008fb8b415ea718740c10fd1d138a9307c3a08603c0fe4ea1b6d8ea71c026591dc9f584f5572138f9e8d4016730e57403b1263e3654312b46dd5d9a7b96811dbe67885755ee3133b203b6e7395df78f608daf158a336c661addb22a901078de8cc0c015d5267e1be86cd418a9728388b7da5e5c79f910eb20a968d75aef8f0c0d6c1b1abe8021ba96a449d75b5e12244ffbda8479ee19fa446e06e708f683711bc3ee5d360840262756353836cf9492cf44e571acd39cac1109c25d333bb0a18405da114af76ace9cf296e4aef687a970e9d1a555364a0765f6c969492e6d3de2fe9688f82fb6e7f74e9e30de3b4de5b7f122e299b1aa2ad35bccc9d01f6b3d1bb64727205a43ab64802dede0f7e3f0409fd6bead1710584dc52c16c4750fee754826a10e575639bbb60683d6f061dbdbeac0c02a8f107e39bff02cdd517c669e0b4e015a994cf610be0ccaacd418f6896339ab2f3a7eea334ba2ae20df9b6db2cb13a48d64c9a22bda103a393f4e5b6deb202af5fdf55a9a23ec774f57268e91411aeeb432aa6ac05badc056a8f1cedc9a50d0f957f1b61e1bbafa35d06090497e280b03925397fda1ccb34654b306854033bf805c3fe9002433144fea0a51d3a81c8260e28b54a68640983fb5ba15dea0fd0adbf1116e69699c2f8967ba5cd62769b14636a1dd5d647977aa3277276ff62155fc558f635691c1e3429aa7daba97052048d266c9b9caea51990350eb691424ba9488529ce2b0d2a0c4f3a2bc8ab6e06cbadb04f0b53687ccd4cc2920d3843465751203bf20ce19645544526aa52d25e1e84ffc0a4d82c093feeb749a852e277daec66f241b35e1fdf26f1bc90f74fe8b09c652e2f65438bfc1bb72a331535117757bb37b5904b491fa5f985c15536025822726ff437e3553b834db2a4fb77f5132f56df1382df62966d7c6b03654f1b6cf3a9ba3b9d4f2f4582d5fd12df883a24e7ff86e75afcc5cc3cf334fc7555618d60e681855d43cec86d362c22c31f4968b81ddac0e1f5d9b77ceb1c781e9cbbb9afdbba812b340e78d9b9bfa48a0abe3af5020f64b644b727e2db382eb4e53576e3c7ba6c99bda08a2d73d771f9018b203d58e77c37c281d9d49a4e4e143257fa20f46ff9f79a571974c9d13a65c5c45a2f4d26af78e9fc0eb320a1c1f6a0d3c952bfa0afdbefef7af932a0a5bd80fcf93827adf660a4ca0b36a189040dc5557c7e261c3a44913c2f5e66f6c68e623aba21a2e90a8126b0d24c199e7eb58045f7edbb56f316f989b826c2b6436e6139aa4a29560af339b02a5249b69358db8c9ea8ffb7ebf44e8a30d8fde40137ff010f13e24ceff6c7323c3e38b12ac31ad01171822243895ea059c122a912ae7705c06db69024c325b8c43bd5204034710b8d935ecae07abefb444798d8e51e2cab5038ca3c9b3ddad76c7fe3be56870bbbf75f2f81e98081791d7212448d31efdd3b39e258bcafcb029f2bd39111f3c2289948f3a24fe140467d3576f7395ee4df160b36db0592ba93ee95199633b000d927c44d23fdf71063a0352696a0240b00992148f509ccfa24192576de4a150f858a1fa5c249a406bd5a4044581a47586e9d02a8f548486f9d8b69892ea134942ee76a71ad3c72fdf4fd95de27d7c2fbd7961728ad63d5ad3edefd4c6c0816cc80bda90acd2e37fc799fe29cf10975cfb679059a406b49142eb122958ddb511fb09e744211b23282c44df3686bc75fd59128cda838b38fd27d455247e4ff49b0d02732dcaac80719603b11ed7a1bb729853be47272", @generic, @typed={0xc, 0x87, @u64=0xfffffffffffffff8}, @typed={0x14, 0x8e, @ipv6=@local}, @typed={0x14, 0x95, @ipv6=@mcast1}, @typed={0x4, 0x43}]}, @nested={0xc, 0x17, [@typed={0x8, 0x0, @str='\x00'}]}, @generic="8ef1c5b80639a1326da854be213e6e3bcf2ad3b2d941ae37467c6e544b855a82e460dbb48fc76d84528dfde8d74ca02fc2e20722fa0c26e092f58f936c4c9e528e9271a1ece2a08812553ac49466f8ee5e35902125266f0ca81d36a01d7795c42956b8d88953c42738109ef1298913c6b9e557002ed20207b0406ba0fececa4c359f21d585fc86438c17185b1b3e8bd9d1405d4d93d9e355106792e721", @nested={0x5c, 0x78, [@generic="098b5261825b1a", @typed={0x4, 0x9}, @generic="c82d3a9c5e669a490d2d66a4b3d33e3648ac8046e1fda11ca95e92f3a6bab7b0d3a12419299f3a879f0fd8bab9bd31e853ebf3b2df2bdbb842cf45f6972ac53dcabe3e81", @typed={0x8, 0x7d, @fd=r1}]}, @nested={0xc0, 0x68, [@generic="2df9669afeacbd325bbbcca958c0fc863b6295bbc6b998645ac90cb0251e0fdb99743a78b68557043b52a31509edc8f1512cb55ec56d7633a7758e1e2bec6e74944020b3ab", @typed={0x4, 0x5e}, @generic="4cc1a48378de4dafeee807390e9de65ea8a1a535905c48f49985e8563d684fdd95691df49a11ac1645b98faf6c734343ee9ac091cde0eaef8e6aa91c1f3be5a6918771fbebf787f07412a11fe14005241fb71f9a7b57264f76d1f6a2adbdcdc77a07a77ac8fa2fc2f38005f3eed4bdef92f8"]}, @typed={0x8, 0x13, @ipv4=@rand_addr=0xe6}, @nested={0x2a4, 0x22, [@generic="9e7ae6443bf454bdbf114f544a78ae31b1cdc30b98aac0f1f7806d47db1f63c960084b6200694f2e47038a075d9c5c7f1588a478a971dc506779df18b9a0b7752e6f99e2ef38e2071b724018c454f29b69099dbf33150d67f8039e0aefbaa7247e74afd4d9e23672e90eade3d00f4a865d32cfc76dd08cb022005c1fab5c8fc127db881208ca6b4a97c635a869d17fed81a2adcb152352d88705d287a9ccfbc07f814cbd7dac67e7dad920889ecaa9d46414c02f9d75fe218face23fe049929d7e1bdb36222408", @typed={0x8, 0x13, @ipv4=@rand_addr=0x3}, @generic="91f075a0c0efe35def9dff042dbe5512471d0ebf91ccc0151a3c26d1f8d476d030ae1f02ab5ec7bdc4e6aa79d2fc5cd4fbe10f1b85c91b610faf3c7c9f88ee781c3e9209931d78b24b8f17680d18c51065a5cbbfa38f87a0aaab5daa670b5ffc43d402bb3bdbfec175a9b5c32b18b84a960a25abc86ca4946a555a4a5224be7dd89e46377ee38393739f974ddec073714f9f05451e74c514", @generic="55c0e28b339c1d2f3ba7496a0ef744908d8b9316294caca93cbfb46623485a8b36511eb8f089597360a9e3e187044485deff6f2a2c3fa07857fe3d08926836b328c24c9bd854564e6e60a9517602627c494b3fdf43b3f854d55a6dc6bbde5f239e531570d3f60eead8aa52ccf9cefdca821b7d", @typed={0xc4, 0x38, @binary="f259baf49f3f6a6b5701adbe2b05100303b5fcb79fd9bf655f9a583b22e7436e4e4c57a665ca834d480d832ffdc5ce4080c6ced6f8f6ae3defee3435b750eb402d5237923108488804e6abbead784c7633a2c0dc10d0a926fafedb9304147c481d4263277bf70a0e06500d93acd8f26b32e53b9f8646797b3deaed9b82f692b4454162a3e588816569cf0c4c203ed88f74dfd0d6552a32ba7ba0a8369943a6ea237fe80937fc706790c68cc2f55f6cdc52b7f36e258a01bf0cfc9a8c25fed57d"}]}]}, 0x15f0}, 0x1, 0x0, 0x0, 0x40}, 0x2) sendmmsg(r2, &(0x7f00000092c0), 0x400000000000280, 0x0) socket(0x0, 0x0, 0x0) [ 206.024346] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.083388] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.5'. 12:30:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80404800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newrule={0x30, 0x20, 0x20, 0x70bd28, 0x25dfdbfb, {0x2, 0x0, 0x20, 0xe3, 0xb2, 0x0, 0x0, 0x2, 0x1c}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xa}}, @FRA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x14, 0x16, [{0x10, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc}]}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000040)={0x9d, 0x80, 0x4}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r5 = socket(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f00000034c0)={@local, @mcast2, @empty, 0x0, 0x40, 0x0, 0x100, 0x0, 0x206}) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x2, 0x0, 0x6a8, 0x7, 0x7, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_lifetime={0x4, 0x4, 0xffffffffffff95d7, 0x47, 0x5, 0x7fff}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e21}]}, 0x38}}, 0x1) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000640), &(0x7f0000000680)=0x8) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20100}, 0xc, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="300400000ff8dc3b0b1992623a02e942a7880c8258bfbb3842979088d7fe134455c1e8e45625205304410bb96ca08ddd01004dd1c1cde925561d99faf3e35f52836e72aaced47b97d0c2ff77e441f11851922e4aa4f2f1369cda928e0eef46d3dbd58399a04e15d5ade896cf2365fea1fb43c62c314e00"/128, @ANYRES16=r6, @ANYBLOB="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"], 0x430}, 0x1, 0x0, 0x0, 0x44}, 0xbd96b9f073d96152) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800010}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="100029bd7000fddbdf251200000010000600040002000800010008000000300005002c000200080001001a00000008000400feffffff080004084b0a0000080001001d00000008ff0000ffff0000"], 0x54}, 0x1, 0x0, 0x0, 0x440008c0}, 0x42) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="f8020000", @ANYRES16=r6, @ANYBLOB="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"/766], 0x2f8}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2892}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r6, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x70, 0x5, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3e12}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x11009000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x1cc, r6, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x74, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x30, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x411d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}]}, @TIPC_NLA_BEARER={0x70, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8e7d}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x42}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_LINK={0x5c, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57e143db}]}]}]}, 0x1cc}}, 0x0) 12:30:07 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r0, r1, &(0x7f0000000240)=0x202, 0x4000000000dc) sysinfo(&(0x7f00000000c0)=""/242) 12:30:07 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0}) 12:30:07 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0}) 12:30:07 executing program 0: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1164, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) timer_gettime(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) ptrace$cont(0x7, r3, 0x7, 0xfffffffffffffffd) capset(&(0x7f0000000200)={0x20080522, r2}, &(0x7f00000001c0)={0x0, 0x7d24, 0x6, 0x3f, 0x3, 0x1a}) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000180)='veth1_to_hsr\x00') sendto$inet(r0, 0x0, 0xfffffffffffffff8, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x9000000) [ 206.240598] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 12:30:07 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xd}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = dup2(r1, r1) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast2, @in=@loopback}}, {{@in=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0xb2) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x1, 0x0, 0x0, 0xacc4e2, 0x0) 12:30:07 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0}) 12:30:07 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f00000000c0)={0x9, 0x90, 0x9, 0x1, 0x1, 0x7ff}) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000040)) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r2, 0xfae71e5936326fae) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) ioctl$EVIOCSCLOCKID(r0, 0x80284504, &(0x7f0000ffcffc)=0x200) [ 206.294052] audit: type=1400 audit(1570883407.815:42): avc: denied { setopt } for pid=8451 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 12:30:07 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}}], 0x0, 0x0, 0x0}) 12:30:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) socket(0x10, 0x803, 0x0) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) unshare(0x73bc832d515f4001) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x1) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) mkdir(0x0, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000100)) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='./file0\x00') r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) getegid() ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x80247008) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x15302e, 0x10) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x40, 0x0) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_STOP(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1303e2ff01f18b38}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x4000884) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 12:30:07 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r1, 0x1) r3 = dup2(r0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4000, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r5 = socket(0xa, 0x802, 0x88) r6 = socket$netlink(0x10, 0x3, 0x4) connect$inet6(r5, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote}, 0x1c) writev(r6, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) recvmmsg(r6, &(0x7f0000000080)=[{{0x0, 0xfffffffffffffe15, 0x0}}], 0x183, 0x0, 0x0) [ 206.393728] binder: 8502:8504 got transaction with invalid offset (0, min 0 max 0) or object. [ 206.419753] binder: 8502:8504 transaction failed 29201/-22, size 0-24 line 3379 12:30:07 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}}], 0x0, 0x0, 0x0}) 12:30:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$security_smack_transmute(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRuE', 0x4, 0x0) fchmod(0xffffffffffffffff, 0xfae71e5936326fae) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f00000001c0)=@buf={0x3a, &(0x7f0000000180)="91cce80308fd2924e6e0201afbc219997e82522f63f864efe5c9a8f9d6b9e27c8408755b3a3af517c38f1b6e833f50f468b43fc20ec29de5d75a"}) sendto$inet(r0, 0x0, 0x0, 0x20000804, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0xffffffffffffff39, 0x0, 0x0, 0x150) shutdown(r0, 0x400000000000001) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000200)=""/199, 0xc7, 0x21, &(0x7f0000000300)={0xa, 0x4e22, 0x10, @empty, 0x401}, 0x1c) fchmod(r1, 0xfae71e5936326fae) setsockopt$sock_int(r1, 0x1, 0x4, &(0x7f00000000c0)=0x80, 0x4) 12:30:08 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000700)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000040), 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000500)="00abe6d29e6101cb8b41eea5cf2e67fea541e9b7b65fe42e517d5f81d2919e1b2f4cf7f77a16fc3e961a0847916c7c2d9b77cd3160567341263cf19b3b2c6177e7065dda850c756c06aede12e9da8118bb5464ad07fa6146f6903ee57345cbd7551f547bdbe947b4f9a0b28cf29a28eda534fc6e2c9bf2c36c87da9ad79e6e7090", 0x4202692d7f740df1, 0x4000801, 0x0, 0xfffffffffffffeda) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) recvfrom$inet(r0, &(0x7f0000000440)=""/98, 0x7cd97198ffceeca1, 0x0, 0x0, 0xffffffffffffffae) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs(0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs(0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs(0x0, 0x0) pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r2, 0xfae71e5936326fae) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r3, 0xfae71e5936326fae) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r4, 0xfae71e5936326fae) ioctl$sock_SIOCGPGRP(r4, 0x8904, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) prctl$PR_SET_FP_MODE(0x2d, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00', 0x101}) read(r0, &(0x7f00000001c0)=""/244, 0xffffff52) 12:30:08 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000000280)=0xff, 0x4) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20040000, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x2000, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000140)={'nat\x00', 0x0, 0x3, 0x1000, [], 0x3, &(0x7f00000000c0)=[{}, {}, {}], &(0x7f00000002c0)=""/4096}, &(0x7f00000001c0)=0x78) [ 206.446441] binder: undelivered TRANSACTION_ERROR: 29201 [ 206.482719] EXT4-fs (sda1): re-mounted. Opts: 12:30:08 executing program 2: r0 = open(&(0x7f0000000040)='./file0\x00', 0x14b000, 0x49) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1040000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000000), 0x4) [ 206.527005] binder: 8516:8522 got transaction with invalid offset (0, min 0 max 0) or object. 12:30:08 executing program 3: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) lstat(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r4, 0x0, 0x0) r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r6 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r5, 0x2008001) dup3(r6, r5, 0x0) fcntl$setstatus(r5, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r7, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000), 0x200a00}]) r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r8, 0xfae71e5936326fae) io_cancel(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, r3, &(0x7f0000000000)="afb048116a03fa8c55cfa984f00b1595045e13d8f2c962b10c88518c2cf2835d47", 0x21, 0x1, 0x0, 0x0, r8}, &(0x7f0000000180)) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) setuid(0x0) r10 = getgid() setresgid(0x0, r10, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffa7) r11 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r11, r0, 0x0, 0xffffffff) [ 206.577297] binder: 8516:8522 transaction failed 29201/-22, size 0-24 line 3379 [ 206.613270] binder: undelivered TRANSACTION_ERROR: 29201 12:30:08 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1000000000000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000000}, 0x0, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) sendmsg(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000000c0)="f498c5f50a6c03", 0x7}, {&(0x7f0000000180)="e23ce6f1f636da28969234cf534c9a50413660101fde3692a1629b5aebd543afd47ac02b97eef74ef1eb5bd68cf0bfcdb92b2c311e59edcb5791aa8151c3f76037fc87fb104fa4a1d003cfd4edf1258dc264230e91dc00d9b514b9dea6d18fa19947acc4aaf28905e567751929ef2d74259518889e455eb5c9df7978d1bd7db54f595e", 0x83}, {&(0x7f0000000240)="70b1096e7df170ce565b9298057ef96607ff64", 0x13}, {&(0x7f0000000280)="6debf2155ef3af47b4448fae6eae0af654a99219d314d3adb98fe72a6aec49b59a7bd52af8bb91214042a54679f8680aa46dbc81677fa998bcc0f0628e42ecb47b79043cfef52771c0b30db96a22f3767070f6568e1053268353c1717ea7a91ba5cbcb0b870a2f8879854284e72d1a68ed9e5a5d504e961b826e135aa082f59daeb461366990225e3030faab5ab46ad52ad074d2c1a74169ae4ca5d0d141dcc69819b0acd663a1fe44826cadf2a63b264b189ab39a8b6bc25372652f6d5372388b5f67502f4df165103245e8b0e9260b", 0xd0}, {&(0x7f0000000380)="81e6c10cb25d619c720e228f09997070bb388960dc5947a84d5980cc4cdd6edfb05de2f7f8f56c77a7073e53ebb8452831d727a804588e271c8335b0cecba7c3bf80cbd9d94462e6d08709b9ae0835f91109edc2fce57bb08e7334eda1b88db9f998adfd5ac990b24b5c8c1c2d552d5f62dfc613785461431c7499a71f927def10514d7cda0942cc5f114f75aeee6ae72ddcd0e9fc2ba064413017128ceb", 0x9e}, {&(0x7f0000000440)="43a8168d86642e33e1e3e64ebbbbd59910ea0d6fcce55e1ab448927946d0110dd21eb4827cd789ea7f2a1cc6056b329ae4c8b56cde1f99f7a3eb276ca2ec56e9435a19a006381a31a2fc123e27fd9c7cef817c61f92e9bfcc1a222c58525b0a9868f5d104447c5e74b4c4412e05d5472fca6eca4a154b08e5e69f91bf9593d2ae665ba7f35471300de04011d0fd5cf17ace4de0748990d48abd61340dcddd2eb96fa3639e15867dc303d1457a05a485c072c8f84cccd67cb37fc23e39e35aa1ea72175604144317a6eedacbe5f35430853f7673e6d3a41bcb9d97d8dfcab89f2fbe5450dde5b60a755ab69140a85924d040195", 0xf3}, {&(0x7f0000000540)="f03b0e1b45ca578084bb41af7ea28b13cacf2e7accad08c17ef6afd4c956d02caaa72c4aee8abb783d3c18b982ca2fbc47ec5da0fc0ef34b0c0f03fa9074358a91f40d73a08c37fcc1c0aa37ef38c09f91189f4c06cd386ef8ddf373e2922548bc015fbc6400dd825bedcb869cffcf0d883b7fb63fd17ae65c1939a8ee8d403ff21f9bb5226ee35530151a3d0f9bf0462582cf3a309235aa05", 0x99}, {&(0x7f0000000600)="63fe01a1f405a6192a4d36aa886aa218a7317aaec87b9b1d0e9ea0442e02388760476c264018c657482efb3edc2f1e13dfece5684075eec606bd530ef1e3a807fdcfa7ea918afa3a39892d3ee6a0eb4bf05caae5e148fb0cc436d225dd6019a4e99d9b0677e4dd057934bbce441218dedbd99305697845c7ca4d0050928da804ab641e3ba13e03", 0x87}, {&(0x7f00000006c0)="3ac1ba17a4ac2e93e783770634487843b81bda1d032c31d62b73d9bc8504bf8f8be25c5e5d7fd599b702e9a24383218ef61e299d9193341bd924e1c22fb2d9f22137613b860a0168f7537c9ee5450b1fbcb21c6cd7d8f569e42e273c84123086a28bf42e37ee2a6b65c9297249b87c27da15ef15decfaaeebb8a3ec96df7a7d37e8b93496e", 0x85}], 0x9, &(0x7f0000000840)=[{0xe8, 0x100, 0x5, "2677eb1e7aa15f15aa8a1dbee394c450edb4929597a58e310d8c640a69298c4fb1d8d60ab8804196f69fdfe7e200169139d74862863316baea708efc58495efd559384c95338f5b72d8d1f0e4da113a510745b50ddcbf603e3a821f15c198f042b4b3fa862a7a7fbd1a17468ab6983ab6f39ae1d64eda84fb5102cafda7bbb7ec90e0e0beb9ccd293f31e0b2d574ef410dd602483910328c1a2e68ee18ca141e30615ff2b0f432a73df8be884e790f7ada6b4d0f36bf2ea4f3103cfc5fe1b3a02e10105061d194a2fba8e8d3d0c698faee3525"}], 0xe8}, 0x10) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffec7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) dup3(0xffffffffffffffff, r0, 0x80000) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) r3 = socket$inet(0x2, 0x801, 0x0) pipe2$9p(&(0x7f0000000000), 0x4000) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0xffffffffffffffb5, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xfffffffffffffed7) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f00000000c0)) 12:30:08 executing program 0: mkdir(0x0, 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x52260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) creat(0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x100000000011, 0x2, 0x0) bind(r0, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @local}, 0x10) dup(0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(0x0) memfd_create(&(0x7f0000000580)='syz_tun\x00', 0x4) openat$selinux_member(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="0304", 0x2, 0x0, 0x0, 0x0) delete_module(&(0x7f0000000200)='syz_tun\x00', 0x400) pivot_root(0x0, 0x0) 12:30:08 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f0000000280)=0x81, 0x28a) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x208, 0xa5) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) setns(0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) clock_nanosleep(0x0, 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0xffffffffffffffe9) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) prctl$PR_GET_TIMERSLACK(0x1e) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x100000299, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x4b) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x40000, 0x140) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) ftruncate(r3, 0x7fff) sendfile(r1, r3, 0x0, 0x8000ffffbffe) 12:30:08 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}}], 0x0, 0x0, 0x0}) 12:30:08 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat, @flat=@weak_binder, @fda={0x66646185, 0x9}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 206.678097] binder: 8546:8548 got transaction with invalid offset (0, min 0 max 0) or object. [ 206.697791] binder: 8546:8548 transaction failed 29201/-22, size 0-24 line 3379 [ 206.721829] binder: undelivered TRANSACTION_ERROR: 29201 12:30:08 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) fstat(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) pipe(0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4) r2 = socket$inet6(0xa, 0x801, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) dup(0xffffffffffffffff) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0xffffffffffffff66, 0xfffffffffffffffd) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, 0x0) keyctl$link(0x8, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, 0x0) keyctl$link(0x8, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, 0x0) keyctl$link(0x8, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) r3 = dup(r2) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0xfe98, 0x64000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000000200)='./file1\x00', 0x11000014b042, 0x100) ftruncate(r4, 0x10099b7) sendfile(r3, r4, 0x0, 0x88000fbfffffa) 12:30:08 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x8282, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x4}, 0x0, 0x2, 0x0, 0x0, 0x83}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x52, 0x20000800, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) read(r0, &(0x7f0000000600)=""/13, 0xffffff87) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0xe) write$FUSE_INTERRUPT(r0, &(0x7f0000000140)={0xfffffffffffffeb3}, 0xffffff7b) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x8000, 0x0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f00000000c0)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) [ 206.751771] device lo entered promiscuous mode [ 206.758937] device lo left promiscuous mode [ 206.773298] device lo entered promiscuous mode [ 206.789319] device lo entered promiscuous mode 12:30:08 executing program 0: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9bbd) unlink(&(0x7f0000000680)='./file0\x00') ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000)={0x40, 0x1, 0x200}) [ 206.798867] binder: 8561:8564 got transaction with invalid parent offset or type [ 206.807179] device lo left promiscuous mode [ 206.814842] binder: 8561:8564 transaction failed 29201/-22, size 80-24 line 3454 [ 206.823641] binder: undelivered TRANSACTION_ERROR: 29201 12:30:08 executing program 1: r0 = accept$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x4, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) readahead(r0, 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) timer_gettime(0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000300)={'nat\x00', 0xc6, "ea50cf62b0fec783dec7ddba4db9f42279c3e6e8efec2b4d0da0a259d30998873a4a4c1617dd104ed55bf4c9679c354abdde4dc68dd5ae81e70e45af6b8427d83c6ae6369d4f6c74ad85862737e2703783f70ac36dc1341f4ec9770347fef6bc9abc788a2ddf2f39a4697688e61d8190a792dcc92b55366e16a97d957d879d684e2e16449ea3233102d54ecaa1eae1de42353700f7ee096772a4a154a0af9775612d1c8ff5ba4756138cab7c2f9b07070465cf9e4018b961506c3119ed770294c6df8b314a2d"}, &(0x7f0000000000)=0xea) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r5, 0x0, 0x7fffffa7) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = accept$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x1c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f0000000240)={{0xa, 0x4e22, 0x5, @ipv4={[], [], @local}, 0x5}, {0xa, 0x4e20, 0x59c0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x20}, 0x1000, [0x8d, 0x27e, 0x8001, 0x8, 0x0, 0x3, 0xff, 0x5]}, 0x5c) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/user\x00', 0x2, 0x0) r7 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r7, r2, 0x0, 0xffffffff) 12:30:08 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat, @flat=@weak_binder, @fda={0x66646185, 0x9}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 12:30:08 executing program 0: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) unshare(0x40000000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0xff, 0x1, 0x20, 0x8, 0x0, 0x2, 0x30280, 0xa, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x7, 0x7}, 0x20, 0x3, 0x23, 0xa957ac3e29888428, 0x5, 0x211, 0x8}, r0, 0x9, 0xffffffffffffffff, 0x8) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8923, &(0x7f0000000200)={'ip_vti0\x00', 0x3001}) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x1e3) getdents(0xffffffffffffffff, &(0x7f0000000080)=""/68, 0x44) syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x568, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x1) [ 207.396087] binder: 8578:8582 got transaction with invalid parent offset or type [ 207.402756] FAT-fs (loop1): bogus number of reserved sectors 12:30:09 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='@vmnet0&:.?system\x8a\x7f%wlan1/!\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) gettid() mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0xb, 0x11, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='limits\x00') 12:30:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 12:30:09 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat, @flat=@weak_binder, @fda={0x66646185, 0x9}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 207.402761] FAT-fs (loop1): Can't find a valid FAT filesystem [ 207.461673] binder: 8578:8582 transaction failed 29201/-22, size 80-24 line 3454 [ 207.481713] binder: undelivered TRANSACTION_ERROR: 29201 [ 207.542121] binder: 8597:8601 got transaction with invalid parent offset or type [ 207.570657] binder: 8597:8601 transaction failed 29201/-22, size 80-24 line 3454 12:30:09 executing program 2: socket$packet(0x11, 0x0, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = open(&(0x7f0000000280)='./bus\x00', 0x41042, 0x0) write$UHID_INPUT(r1, &(0x7f0000001440)={0x8, "c0c814a55b6300d28afc61ac7dd1ffb869b761e8e53ee36e4be89e9fea175523e4468dec44bf8b5473c7a5062b4ede67dcb24cb9484ccfff2b3a70befc56e8ab2eee3483f5bf78c16beac035b700eb84e2216f268d02b717d2046c273814475b412437f7dc08a13a55d3c02132999dfd9fe80b750eff4d7c1da975b3835602728ae09e72527fcee19377e29c6c19e1ccce0f75e0e54001e3e83e473fa3d37eca8be1b3de565571e0e84f310c11fa8616068113b038aaa5c69967699fc2aa41c6f26fc22cf68e3577242c9b4ca20fab9de5885e0648fbd7af089b05f38f152d2f8144461608733c567b6dc5d2a07022c3764565c85abcfd99dd7a85e58939278235d50e8b321be7dbaa5141e097c28364fad2f713d666ca94f4e429687fcabb72aceeaf8abe5b506d98dc393b6e97492d785ead0ca2953f92c4d2b2c9f616e3d98b36be55a923fc5892413f7a3b615cec89b52e0ecdcee0aa5af72bcbb91b4bade7435dd8b529feaf13f8b48fcaca5952235d2e909f8831d8ca05a0daa3f6c581f388e0c1879b41fe63ef3d122bd0c5acd4fb07b96797918791075ae7383bb1bbdea574b31301ff37ecc45671ee2e7fc55bf6244025d1fd82dca56a42a23aa826a0b1e102bd87893ddc05649304eb1866c796e46e0d57f552bd572891ef892918bb2e7f2c6bcf68f388ea0c50f48c06de1b46b1434cdf25ca1288ebabe2a33d1c6effb77f91ef75471e93952caeda8ac2b2677e46d62b8366922d093832bccb949e177b4417864812d22972d81d89158288b5318d017329d4e8f66273abf74c434f318ebf32c7629342a85336387231b1e579d57cff0b125bef9dddf0fc33f71cb59d5a8972cda06ba6bba4a89cb8d3b465492c431698984998b2979ea61fed3d99b049724f2bdda5a0700ccb28825da1343f41290e569a6d38d4ae3968147cf39b097efd78e058fc71523c12e724bf93dc4ecc02b5cb18d13b59ec8f85368ac1ea93ed0149c60c53569dc69cdb3f37470eab26ef010b03a7e651b9e8e9065da347660836eddb3988c9a0f394aad055f727310f646d6cb35131d02aaf24735792bfce250798bebf0d1a4495fca568b9449e81afef2937b50faf873257d7efa07d31759474d50ca2a7922e79ab47dd59b11dfd1ec43fef3551aed81d01ee4ab997c6cecc39013dcaa442aec803e4cebbc288b4f9e87b30613f0ec88ddc6f60f56787f4040897e6e6bdac317d74b27f97f2efadb031f03c61954fd0232373582b7fa315d3eb9f67053126d2ed0636f04d669c47bdeb078fbda177533902e20b5ce9d8f395ea4c0aaf2cae774fe99bc40105a9ca184bcb598ab2f49c1df62d32d1a6d73a26812cb47a2ccaf0e9b759df89ad1e18238d897b9fd658f6786a92a0c12bd0ee6dad8a430a67962363e5b9afb3329e4f1f6fcd7e63cb8f24872bcf5b8c349d9ce423666ca39f16884219dea338b388e40f4ad996419cb3858637364d8e5af67f846d77b2749115131a3642ef56681315e4a2cbca5e60febabf693570f515e09c2a8994a8e2be3cba28118ef429d4de781118182607dd2c2d5aaba621ea29c140338bd8f1787fd2a3f43bb7fa22a8ce053adb331a4c78eab569af317e14360a6bf1c8b7394f34bfc1a941ac88dab334d5a2d45fc83bee28884698fd82339c972a06efb369220049ca89727513bd4262ad6f94f55f659ec98b684b1d92e1b6a303548a196cc5316e9845baaf01e737ef047d3d1ac4fe13de618e8fd6471c225e688b73b866213f4765c1a1ecf041f66a11177b0425b0423c455dccfa35a34f3b1c4c9850267bd41dcc366f4f8fef6982699e9aee7f3edff90217c84f6865234676e65911e5e99739792161766e959d061d6e86797b595ae3cffc043da0929dce1b4bd27e04532800f14f69398a681d46f00197f547fa138e676a4c84e586e9a2037faad7d7342221c229ff13606688ab70305dc28d01270604fbcb2b5777541e637a10e7d6c2dfa76461b18c8b303234282f31b7ed8afd0cdcc3978c6520a182000ea312296c7d9df08c2a67b944bc519113822014a831c8d6a7f8d26a7a443666b6077bdc1c11cf47001bcbb484d163543445c77a02140191bbb813da818b4dc3ef1ca420f624e5cb67c48024aeb8691b549202750899938067a3ad49da19e9fffc6486b3525fba8b2ff991fb3b4c1a536818f2dad96f713ac264a22136c6a3a9eacb4f69ab08cfe2b971a7d916833c6a0370d4b0bc428db2e4b4013899668b73caf9c983e2f07e46b4b5b4f0d231edee8b1951e1d0e34c881d1fc5c6be05b92b13680398e7109bd18048f0bd980fceb24e59411873e7a8a7f95f4da2ba5c082fdda710361e163a213a3dbb82c08a69020545da4636c09a67cd962182a011cf5eb1c3d999abc7b834ee518bb53afe19941927ca190699abf79c334c52e206fc851deb7398947ad5bd125ef3f51349497142e921c85506c739f6319ae0eb8e3c551ceb7e16afc2d6aad36841ed8eb560ef984ee5e00f1ead2c646546b3c145e3700b07fc257551641cf3dcb76a8b3cc75994f2c3eb521cea22d64c8b72b2de506fde8185b70b4707b7f571668a5925ca21e605904d7c896a5d7290b9c4fc75ecc7ddbbd7f6f003a74f53d1a5432e0377a3efce1e7ac61e36dc13aeea57400d4d3986db3fccb6edaf83f86daeb42f416f58c502e74178e013b399d0b155e0df86b40b5f3f2ab0ad61c90870cee340c07977b55622699101e5372677dd4e208fa6b5d4834a2d6f37b2ead107218aa0e702d1f6a60bd4ad3a2e22807237129fdc02993ef1fffe3c285bd4f7b093b2da8d772ce2df7874bf9b7fd0893eb66a4931acc38129bfe4a8fc6b28ea83bcca1220b66c86d4d90914bb9e9a425fce618f11b66f93aa78515eac0f3956cb1e8b6f12d7f6f22c1ca5563e280b15c64732aec2a37d6010cee0fd2263ea3ea2011043153284b4a5fc87cc0dd8c36f084ce715a6e9ba3e8b2586726255d122f2b5677d6590405ae031df8f83840ef3011a7f5d18037407758270d980aa65d5a4aa26a35a61b65178b6183b282771e89a8fe47bd3ea5a23146b924a47c3cc2540a9c8d91d4a8924e010fb6d3e60457e0aa86749cc3444707fda055a0f489aecda68af7f0d7d31cf25641a10bcc0d00996cddf9059121639fa3ff2e5490bae6b702fcf226d8e50f27f0973e5e4cf543445524d0fe3bd55d3f215978bfabcba0d44c076f5b333b2095c70f6a5426338bf0c065ddce27f6730606d84d1ccef8cebcd15085fa8a5d0975dc47eeb09a4ab6da21d01916c97f4e266c4b01f2bfb3b6a08bb5a7cf834e56782d824e7c55b591cd883ed9e806a4f7033bbab49a2b8ab2cb0f6da9d76968208236b35a51f8eba3769a676ad60d69c475706a630f3a078ebaa6ba5bc25719867cb61d48cc3a381b261165c04f3c93f37d72fc15f43df1de34e24e80a46f5d15fb362e71cb4a5365dde04a53dc5e42745fbd601ff148db416244dd76ac16f24138ef9a02491eb5b48d731a8bdcd46040d0ff11a07c040b83db84bfd21ffb1d818203cb7d3f8fca47f1dc510afa8219ab031aaba2147aed7c50228930e895a72abf55ca6997131e231ea92e0059b680735548adf2d572c3540e096a644deb3750e3b341bbeffee70ff22e0b4e56142e4c1965c01a646dd9b5b0055f88f08987ad45adb844b9ffc84792073048c28bcb60f2666802052ee45dcd9a2950d55ecf0234a3dcf67e83cfa0bfb1285eb54e6292d8075c9e1b459e48556f416898557c9c864fc5de459feb53e33dd1a6860a2d1a836ab5ff6efaee123b3715a7137787ee4345efbce38074e262f363a8ff400345c8539d44a7286c7291246810bce063f0877db6585842380b530a4aaef6e36779a95fed220cef6c1fff2fdd5031f83987dc3282d432f322852cc9dc6d00c59d5ed83b386ff97c521e528e59f2df932467ac02d17f8818c2de26d69725f42cecaf186fab7b6e10b1ebd9a9a12ed83cd382d9a6f9a9bed2736cb0ec0260057f5ec704d2e1a64caad59e02ff2022174b23564cb0942e6769b12e0ae4d65dc4c5e6b6ceaf2667e085909c93a9768b7bfdac612801c0bc3848bad51e2367f788cbd1c5091ce0e9c567528c72003712e91247d87f1ff60d3865fc687a35886822079392f8d151b89e09469bef98e59139c460a53805a93245148cbb9a6a010dadc87e9b1a0e0a89e87e433ff1c0ad4b125760858c8badff4d82cbd31cf88f3e2e16a4e960e1e0b5825fc0f2b21d660cf60069d43fb6a8a96c44fa922164f02c9cd5ebb6fad848871224d157777b5a70dc6deb988506bd03aa4ce2200e9ce23641221784250c22d2c8635a3512f45d433cf66e158eb261f48a23d54f5ef4358df3487da471eb5775bdba565ee170be126b2300d0dad050212606f2d77a63fa2ab430e62670e852b89944e611509415bee36bf0961c8918bd8b0eb8af45b1a9d0420c7101a9c5f4a63efb9cc8de7897b5e2b02cb5885ad8d0d8ac7754ba8d4e9d37175e614e3f3a6a7b122bbc6dd9ce78f1b9a4e940a1160bb85650d8932fe1a82d0525630ba017be5129625a45c3cae66c7cdaa33ee704791db81ef2e11a2f528974fa388cd929c934dbdb21425e6117839ab33b2926b036457db3a43083c3ec17231aed4ee5b607a45a5735c9470c03a424b43efcea953c078717344aeb1449c0dfa3a3ec224b542c16cf735466bdaf26b522aef1db547b14f07ebd4f5da34426a46007757be47ed3f643c47f2c4467762cd049d6f4cf8a78d04f8318bdedcee80871e91c0330499d88254555c456d9bde8a892394267eac15c230cf7e7ba19ebc01b1905c80476de3cea8258f6d0820d159f4aa8a37fb378b2685da4e0e89d253187219869f1157bbe4a8a43eabf65e86a6d9b21e25d91c43c3036914427833ed87073886719069148e2e47219bb5da5d9664d64dc5c4ff71c0e808dadbb53a23e41e3c02fd0c9e0704490f3283d1864d15d795882e6522f31445556cab6832f273dac0c7aef4e3f8c09a34d1624fdb087d852f2e827fb2c3105f1afda54b9dc12cfde3cf7747daa5ac70904e82636a13155303f9a1198d6e7f9dc7be394ebc5db9e8380e290e6cae5f320caa56aa94490789fce2e2540b3de8865396f58e14d61d3cb122f7bd1af5a27c6fe733eba3cc39106efc906ea967fb833e2480aa80bd56ccd9e5c25304e2b8135f1453af70059e599cb67bc8eaaa38c39768e74d3da8aba0135f0192d7ddf0149ce62f353b0360251f1f88b272c6e85b4ee4e0563a6de80de83749af6e6aa4d80cab7031aff3f7e8d0c9114940549f828a62be9fd6a16db001369728b4b93d4ecf91563ae03def3ca4e9900a97657c4ff1e41c5742fb3329ba882ed61645aedb22f2543b83cd4007e5d228697a48064acc32ece41f2d5ead3f31a9689249e8b4bb57ac0b136b6c60ec531708235b94db823344aafbb9b79e21959635664b2193c3add0b28767906b7ba4118e6548e9a23b49e9181dc6f7dc7857425c9ab1b1451bc4572fd060190d0b5a76b8368b68e72a212bd0f89d0778d293b1d32f155f30c9aafe7215d2e746ea8f2c73a30bcd8c093a489519b60616b15afe69074ee77fb65caf5faf0aad49106057a91fdcd622a07ac21eb5c221f2e65323228af41b3eb894517c34c4f60ba20fb6f6c4309a7357884c0eeeb0a4874550107f2d0ffdc412f86bdf712f96183b3932cfb4da3f179cde1a288df9af09c243fae8c67b0d208d9cdb7adde8d5e548e0624b19da4818ef656b88280a", 0x1000}, 0xfffffc41) fadvise64(r1, 0xfffffffffffffffe, 0x0, 0x4) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r2, 0xfae71e5936326fae) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r3, 0xfae71e5936326fae) sendfile(r2, r3, &(0x7f0000000000), 0x8) close(r0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x1141042, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r4, 0x0, 0x8000fffffffe) 12:30:09 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 12:30:09 executing program 3: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r3, 0xfae71e5936326fae) stat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000000c0)) setresgid(0x0, r6, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000280)=0xfffffffffffffff6) setuid(r8) write$P9_RSTATu(r3, &(0x7f00000001c0)={0x54, 0x7d, 0x2, {{0x0, 0x3a, 0xfffd, 0xf30, {0x20, 0x4, 0x5}, 0x80000000, 0x3, 0x74000000, 0x5, 0x0, '', 0x5, 'nodev', 0x2, '!/'}, 0x5, 'ppp0$', r4, r6, r8}}, 0x54) fallocate(r2, 0x3, 0x0, 0x28020001) fallocate(r1, 0x3, 0x0, 0x28020001) [ 207.603676] binder: undelivered TRANSACTION_ERROR: 29201 [ 207.660750] binder: 8607:8610 got transaction with invalid parent offset or type [ 207.682115] binder: 8607:8610 transaction failed 29201/-22, size 80-24 line 3454 12:30:09 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001ff) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x5216}, 0x8) syz_read_part_table(0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="02015400000001000000ff07a00200000000550008000000000000000040000000006300000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) 12:30:09 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda}, 0x0}}], 0x0, 0x0, 0x0}) [ 207.713544] binder: undelivered TRANSACTION_ERROR: 29201 12:30:09 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda}, 0x0}}], 0x0, 0x0, 0x0}) [ 207.771539] binder: release 8616:8618 transaction 122 out, still active [ 207.785703] binder: undelivered TRANSACTION_COMPLETE [ 207.811894] binder: send failed reply for transaction 122, target dead [ 207.819459] loop3: p1[DM] p2[EZD] p3 p4 [ 207.819713] loop3: p1 start 1 is beyond EOD, truncated [ 207.819720] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 207.821256] loop3: p3 size 1912633224 extends beyond EOD, truncated [ 207.822752] loop3: p4 size 32768 extends beyond EOD, truncated [ 207.927488] binder: release 8623:8625 transaction 124 out, still active [ 207.944708] binder: undelivered TRANSACTION_COMPLETE [ 207.957884] binder: send failed reply for transaction 124, target dead [ 208.018666] loop3: p1[DM] p2[EZD] p3 p4 [ 208.023495] loop3: p1 start 1 is beyond EOD, truncated [ 208.038237] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 208.056909] loop3: p3 size 1912633224 extends beyond EOD, truncated [ 208.075099] loop3: p4 size 32768 extends beyond EOD, truncated [ 208.168155] loop_reread_partitions: partition scan of loop3 () failed (rc=-16) [ 208.179815] blk_update_request: I/O error, dev loop3, sector 0 [ 208.186075] blk_update_request: I/O error, dev loop3, sector 0 [ 208.192096] blk_update_request: I/O error, dev loop3, sector 0 [ 208.198170] blk_update_request: I/O error, dev loop3, sector 0 [ 208.198343] blk_update_request: I/O error, dev loop3, sector 0 [ 208.198488] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 208.198548] blk_update_request: I/O error, dev loop3, sector 0 [ 208.198553] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 208.198583] blk_update_request: I/O error, dev loop3, sector 0 [ 208.198588] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 208.198615] blk_update_request: I/O error, dev loop3, sector 0 [ 208.198620] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 208.198647] blk_update_request: I/O error, dev loop3, sector 0 12:30:09 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda}, 0x0}}], 0x0, 0x0, 0x0}) [ 208.198652] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 208.198680] blk_update_request: I/O error, dev loop3, sector 0 [ 208.198685] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 208.198713] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 208.198741] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 208.198770] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 208.198798] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 208.325259] binder: release 8639:8641 transaction 126 out, still active [ 208.357757] binder: undelivered TRANSACTION_COMPLETE [ 208.409668] binder: send failed reply for transaction 126, target dead 12:30:10 executing program 1: ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x1}) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaab44, &(0x7f00000000c0)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000440000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x2000, 0x0) 12:30:10 executing program 3: socketpair(0xa, 0x5, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14, 0x80800) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xf10c39250e0c17b4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r2, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1c}}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_TYPE={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x8000) socket$inet(0x2, 0x80000, 0x9) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r6, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008005}, 0x20020001) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0x15, 0x2800000, 0x1000, 0x100, 0x100, r5, 0xae, [], 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x3c) fgetxattr(r7, &(0x7f0000000400)=@random={'security.', 'IPVS\x00'}, &(0x7f0000000440)=""/168, 0xa8) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000540)='fou\x00') sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20080080}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r8, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr="28800633647317d6da84905e0622e5bc"}]}, 0x28}, 0x1, 0x0, 0x0, 0x844}, 0x40) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFCONF(r9, 0x8912, &(0x7f00000006c0)=@req={0x28, &(0x7f0000000680)={'veth0\x00', @ifru_data=&(0x7f0000000640)="611fc63b954ec3fdff2bcfb3570ced5ee06b96d9e2b40a9c87c191f9e12d5ac5"}}) r10 = socket$unix(0x1, 0x2, 0x0) ioctl$int_out(r10, 0x2a32, &(0x7f0000000700)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) fcntl$setstatus(r3, 0x4, 0x400) r11 = socket(0x2, 0xa, 0x81) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r11, 0x10e, 0x8, &(0x7f0000000740)=0x1ff, 0x4) r12 = openat$full(0xffffffffffffff9c, &(0x7f0000000780)='/dev/full\x00', 0x402400, 0x0) ioctl$PIO_FONTRESET(r12, 0x4b6d, 0x0) r13 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000800)='/selinux/commit_pending_bools\x00', 0x1, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000840)={&(0x7f00000007c0)='./file0\x00', r13}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000880)={'yam0\x00', 0x1}) r14 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000008c0)='/selinux/status\x00', 0x0, 0x0) r15 = syz_genetlink_get_family_id$tipc(&(0x7f0000000940)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r14, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4e87feea5d559ad9}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, r15, 0x8, 0x70bd26, 0x25dfdbfc, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4044130}, 0x5bd9eb4c84acd0c2) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000a40)) pipe(&(0x7f0000000a80)) 12:30:10 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f00000000c0)={0x34, 0x0, &(0x7f0000000040)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$TCGETX(r1, 0x5432, &(0x7f0000000100)) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x12}, @flat=@weak_handle={0x77682a85, 0x1109, 0x1}, @fda}, &(0x7f0000000180)={0x0, 0x18, 0xa}}}], 0x0, 0x0, 0x0}) 12:30:10 executing program 2: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@md0='/dev/md0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hfsplus\x00', 0x200009, &(0x7f0000000100)='fd') perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) socket$packet(0x11, 0x0, 0x300) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:30:10 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r3, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 12:30:10 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) keyctl$get_security(0x11, 0x0, 0x0, 0x0) add_key$user(0x0, &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080), 0x0, 0xfffffffffffffffd) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=""/208, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) r2 = dup(0xffffffffffffffff) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000280)={0xa, 0x3, 0x0, @mcast1}, 0x6) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendmmsg(0xffffffffffffffff, 0x0, 0xd3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000000180)=""/194) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11'}) 12:30:10 executing program 5: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r0, 0x4, 0x45000) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') munlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000000000000000000000000000000000000000000000000000000000000000000004b0b852bd9f690eda7674eba1c04b232739edd195c1d462b62eb21c78d249a095fcd62b7ed8995db513853f573df08cb1e38b31fd07b3c21fce7a22cc227804956e7cc0a2520328aad26e6bdd9e39b923595722754676dec44a94f080f77347fc7cb874a67ada1634656e4e35c078b68886bdeec1a0e677f10e143a4225e521b84e677dc81d2779522aaf77d625bad0a92d7ad6e160df5f508b94337df9f5844000000001d6a6c4330"]}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r4, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x3, 0x4, 0x2, 0x3}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8802}, 0x8081) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000440)) r6 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/validatetrans\x00', 0x1, 0x0) dup3(r0, r6, 0x80000) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r8, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x3, 0x4, 0x2, 0x3}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8802}, 0x8081) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r7, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r8, 0x100, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20040080) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r8, 0x100, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20040080) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000200)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200303}, 0xfffffffffffffe10, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r4, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0xa, @bearer=@udp='\x8bdp:syz0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000089}, 0x20044985) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) r9 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r9, 0xfae71e5936326fae) ioctl$int_out(r9, 0x5460, &(0x7f0000000400)) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x8200}]) [ 208.689975] binder: 8667:8672 got transaction with invalid handle, 1 [ 208.713770] binder: 8667:8672 transaction failed 29201/-22, size 80-24 line 3411 12:30:10 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x1e) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 12:30:10 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendfile(r0, 0xffffffffffffffff, 0x0, 0x4) creat(0x0, 0x0) write$evdev(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000100)=0xc024) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TCGETS2(r3, 0x802c542a, &(0x7f0000000280)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='sessionid\x00') preadv(r4, &(0x7f00000017c0), 0x3a8, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x6) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x7, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0xaaaab89, &(0x7f0000000200)=[{&(0x7f0000000080)="0200050000000100001400000000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) [ 208.764621] binder: undelivered TRANSACTION_ERROR: 29201 [ 208.831379] binder: 8692:8695 got transaction with invalid parent offset or type [ 208.847466] binder: 8692:8695 transaction failed 29201/-22, size 80-24 line 3454 12:30:10 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x50, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYRESDEC, @ANYPTR=&(0x7f0000000000)=ANY=[]], 0xfffffffffffffdf6, 0x0, 0x0}) [ 208.880382] binder: undelivered TRANSACTION_ERROR: 29201 [ 208.891340] binder: BINDER_SET_CONTEXT_MGR already set [ 208.903605] binder: 8692:8701 ioctl 40046207 0 returned -16 12:30:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20008}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="d3d2b98922f1369c0400cd80"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESHEX], 0x0, 0x36}, 0x20) tkill(r0, 0x1f) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 208.979566] binder: 8711:8715 got transaction with invalid data ptr [ 208.999802] binder: 8711:8715 transaction failed 29201/-14, size 80-24 line 3316 12:30:10 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) umount2(&(0x7f0000000880)='./file0\x00', 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_smack_entry(&(0x7f0000007480)='./file0\x00', &(0x7f00000074c0)='security.SMACK64IPOUT\x00', &(0x7f0000007500)='net/mcfilter\x00', 0xd, 0x0) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") pread64(0xffffffffffffffff, &(0x7f0000000080)=""/36, 0x24, 0x0) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f00000002c0), 0x4) getsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f00000075c0)=""/112, &(0x7f0000000180)=0x70) recvmmsg(r0, &(0x7f00000081c0)=[{{&(0x7f0000000100)=@ax25={{0x3, @default}, [@null, @null, @null, @default, @default, @bcast, @bcast, @null]}, 0x80, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=""/120, 0x78}, 0x2}, {{&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000740), 0x0, &(0x7f00000007c0)=""/183, 0xb7}, 0xd49a}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000008c0)=""/157, 0x9d}, {&(0x7f0000000980)=""/8, 0x8}, {&(0x7f00000009c0)=""/17, 0x11}], 0x3}, 0x35131e06}, {{&(0x7f0000000a40)=@ax25={{0x3, @null}, [@default, @bcast, @remote, @netrom, @bcast, @null, @null, @default]}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000000ac0)=""/127, 0x7f}, {&(0x7f0000000b40)=""/144, 0x90}, {&(0x7f0000000c00)=""/143, 0x8f}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001cc0)=""/241, 0xf1}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/164, 0xa4}, {&(0x7f0000002e80)=""/7, 0x7}], 0x8, &(0x7f0000002f40)=""/227, 0xe3}, 0xfffffbff}, {{&(0x7f0000003040)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000040c0)=[{&(0x7f00000030c0)=""/4096, 0x1000}], 0x1, &(0x7f0000004100)=""/4096, 0x1000}, 0xd50}, {{&(0x7f0000008580)=@un=@abs, 0x80, &(0x7f0000005200)=[{&(0x7f0000005180)=""/46, 0x2e}, {&(0x7f00000051c0)=""/29, 0x1d}], 0x2}, 0x9}, {{&(0x7f0000005240)=@x25={0x9, @remote}, 0x80, &(0x7f0000007540)=[{&(0x7f00000052c0)=""/4096, 0x1000}, {&(0x7f00000062c0)=""/4096, 0x1000}, {&(0x7f00000072c0)=""/129, 0x81}, {&(0x7f0000007380)=""/220, 0xdc}, {&(0x7f00000084c0)=""/129, 0x31}], 0x5, &(0x7f0000008400)=""/175, 0xaf}, 0x7}, {{&(0x7f0000007680)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000007d40)=[{&(0x7f0000007700)=""/228, 0xe4}, {&(0x7f0000007800)=""/26, 0x1a}, {&(0x7f0000007840)=""/155, 0x9b}, {&(0x7f0000007900)=""/204, 0xcc}, {&(0x7f0000007a00)=""/170, 0xaa}, {&(0x7f0000007ac0)=""/203, 0xcb}, {&(0x7f0000007bc0)=""/235, 0xeb}, {&(0x7f0000007cc0)=""/1, 0x1}, {&(0x7f0000007d00)=""/41, 0x29}], 0x9, &(0x7f0000007e00)=""/191, 0xbf}, 0x8}, {{&(0x7f0000007ec0)=@vsock, 0x80, &(0x7f0000008140)=[{&(0x7f0000007f40)=""/126, 0x7e}, {&(0x7f0000007fc0)=""/82, 0x52}, {&(0x7f0000008040)=""/215, 0xd7}], 0x3, &(0x7f0000008180)=""/33, 0x21}, 0x100}], 0x9, 0x0, 0x0) [ 209.044660] binder: 8711:8715 ioctl c0306201 20000140 returned -14 [ 209.060839] binder: undelivered TRANSACTION_ERROR: 29201 [ 209.080502] binder: 8711:8726 got transaction with invalid data ptr [ 209.118707] binder: 8711:8726 transaction failed 29201/-14, size 80-24 line 3316 [ 209.146769] binder: 8711:8726 ioctl c0306201 20000140 returned -14 12:30:10 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) write$binfmt_elf32(r1, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x6, 0x45, 0x5c, 0x400, 0x3, 0x6, 0x8, 0x2cd, 0x38, 0x173, 0x10000, 0x7fff, 0x20, 0x1, 0x43, 0xfffe, 0x5}, [{0x60000000, 0x3, 0x8, 0x80, 0x9, 0x6, 0x4, 0x6}], "d81e80849c8f9b948deb213358f5870be62d573985baebfbff1d5bf172376ca5d13d9afa96ec73b2ed376b518981e1a7493ed9e258b8c02f39a14e19c255c8255cf634be6ed5aadf4b40bfe5d6d3a3522e3e26c690e899750d887605143a02769e9e0a", [[], []]}, 0x2bb) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 209.167154] binder: undelivered TRANSACTION_ERROR: 29201 12:30:10 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x280810, &(0x7f0000000100)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r4, 0xfae71e5936326fae) vmsplice(r4, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0xffffffffffffff0b, 0x2, 0x0, 0x4, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="09dabb4b64", @ANYRESHEX, @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea559561f86491c20600e30046cf", @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000340), &(0x7f0000000400)=0x4) sendfile(r5, r5, 0x0, 0x2008000fffffffe) [ 209.210697] binder: 8735:8736 got transaction with invalid parent offset or type [ 209.241268] binder: 8735:8736 transaction failed 29201/-22, size 80-24 line 3454 12:30:10 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000040)=0x54) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x850041, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000280)={0x80, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x88) [ 209.266765] binder: undelivered TRANSACTION_ERROR: 29201 12:30:10 executing program 3: ioprio_set$pid(0x1, 0x0, 0x200007e35) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x16, &(0x7f0000000000)=""/174, &(0x7f00000000c0)=0xae) clone(0x20008579, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x80, 0x0, 0x0, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xc0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x4}, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x1, 0x1, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=0x100000001}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000002c0)='vti\x00', r3}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0)='\x00', r3}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r1, 0xffffffffffffffff, 0x0, 0x9, &(0x7f00000000c0)='threaded\x04', r3}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r3}, 0xc) clone(0x2a4500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 209.330460] binder: 8744:8745 got transaction with invalid parent offset or type [ 209.352753] binder: 8744:8745 transaction failed 29201/-22, size 80-24 line 3454 [ 209.373621] binder: undelivered TRANSACTION_ERROR: 29201 [ 209.386992] binder: 8744:8748 got transaction with invalid parent offset or type [ 209.399103] binder: 8744:8748 transaction failed 29201/-22, size 80-24 line 3454 [ 209.411360] binder: undelivered TRANSACTION_ERROR: 29201 12:30:11 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000340)='./file0\x00') creat(&(0x7f00000001c0)='./file0\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000200)=@v3, 0x18, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x8000, 0x0) write$cgroup_type(r2, &(0x7f0000000080)='threaded\x00', 0x47) 12:30:11 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x80) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r3, 0xfae71e5936326fae) fsetxattr$security_capability(r3, &(0x7f0000000140)='security.capability\x00', &(0x7f0000000180)=@v2={0x2000000, [{0xe9e, 0x8}, {0x80000001, 0xb4c}]}, 0x14, 0x1) keyctl$session_to_parent(0x12) setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:crond_unit_file_t:s0\x00', 0x27, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4001fe) getdents64(r0, &(0x7f0000000280)=""/255, 0xff) 12:30:11 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder={0x77622a85, 0x1}, @fda}, &(0x7f0000000180)={0xffffffffffffff52, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 12:30:11 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r0, 0xfae71e5936326fae) fsetxattr$security_evm(r0, &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=@v2={0x3, 0x2, 0x10, 0xfffffffd}, 0xa, 0x0) 12:30:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x400}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {0xbaf}, 0x0, [0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x990, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1283b05e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x116, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}, 0x45c) r2 = socket$inet6(0xa, 0x3, 0x0) r3 = socket$inet6(0xa, 0x80e, 0x800000000002576) ioctl(r3, 0x8912, &(0x7f0000001140)="000000000034e026c9ef05cbcd1a8f8a8f8d77934621665e1cdd6d1591691a7e95229381fc6ed1d0cba27e019af0f8c47488389aeb55b07b19c295c605d6f6aba590f507085e29fd58197be111e510e3223a8e130e00fb265fe4b6a8e8ade875b8bde60976257b462f1e533437e2ac9b9ba82f00d4196025075b934e284aab778d287e39313b4314623efd1aca89344e9e2ff0c445c3284bc2a59ab02318c58c4543b9a4e18d0990102b11bfc3c85e887cf43b49cb8eea04ae0710393485b182033500ad49fab5cb4f12a5882836b34e252da44a1561") setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x5, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}]}, 0x310) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001100)='/dev/fuse\x00', 0x2, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000d80)) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000001340)={{{@in=@multicast1, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}}}, &(0x7f0000000140)=0xffffffffffffffb6) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x2000000, &(0x7f0000001580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r5, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c616c6c6f775f6f746865722c616c6c6f775f6f746865722c616c6c6f775f6f746865722c61070000000000000065722c00f3413805bb4bffea521c44132b0b14d02b9e2cd4e504b342020f8c133fd16c5c36e2fad8bcc35399181825ffedf3ec6924abf318b4579fdb66de81276c83c45da32b413df363be45eefddf504aabd48f062b9c1f480362b93a163d2ec1a0b863ff188591a5e086bdb63d9155e228de58f1236700"/175]) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_udp_int(r6, 0x11, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0x4) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000000f80)={0x2, 0x80000001, 0x40, 0x3ff, 0x2, 0x5}) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') ioctl$sock_inet_SIOCGIFPFLAGS(r6, 0x8935, &(0x7f00000002c0)={'teql0\x00', 0x4000003}) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000fc0)) mount(&(0x7f0000001080)=ANY=[@ANYRESOCT=r3, @ANYRES16=r6, @ANYPTR64, @ANYRESOCT=r2, @ANYRES64=r4], &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000d40)='ramfs\x00', 0x200000, &(0x7f0000000d00)='-%\x00') mount(&(0x7f0000001780)=ANY=[@ANYBLOB="73a5f84a073f0f917d3973c5015670b4165a4d0f833aa067f09a37a3e37d6a633bb2e4e2cf5f34adac502ba6fe8c86e0852171868ad0d206194d9a7d96295902e5503a5f1001adb230cb5771af004d4aba03dddcdb6abf8db2a46371bbff91ce16d3cb660f61f0c0d9bb6d12b000000000000000000000000000b2cbe10bb316c69a670a8cc5f55b1bcc31c36f6a59c19fa96963eb8e38421da90eaeffc7cd52e2e739e5f560f52b949035e7eddf6441c0c14562630b1d79abf6e80f302539bbb2d7906efd0a55dab5d3ed7c11cfe38d06801002843b1ba2f787d1375f3e899607125c6506504a48f78f7837c7acdbc3ab3928e0c62f92c94624e245c6b1a0e58ee606fac49c05ca0767e3867d318465833794b65ccfdf0f91e1df0b344b5dcdea3d017d878a4076dbb9496acc499bc6ceb2fa07"], 0x0, 0x0, 0x80010, 0x0) mount(&(0x7f0000000280)=ANY=[@ANYRES64=r2, @ANYRESDEC=r5, @ANYRESOCT=r2], 0x0, 0x0, 0x80000, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000001040)='./file0\x00') mount(&(0x7f0000000e40)=ANY=[@ANYRES32=r7], 0x0, 0x0, 0x5012, 0x0) preadv(r7, &(0x7f0000000040)=[{&(0x7f0000002200)=""/4096, 0x1000}], 0x1, 0x0) ioctl$int_out(0xffffffffffffffff, 0x5462, &(0x7f00000001c0)) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={{0x77359400}, {0x77359400}}) close(r0) 12:30:11 executing program 0: close(0xffffffffffffffff) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000400)='/dev/full\x00', 0x47a4d21bd9b76874, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x101}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r1, 0x0, 0x0, &(0x7f0000000080)=""/141, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000240)) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) getsockopt$inet6_tcp_int(r2, 0x6, 0x0, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/current\x00', 0x2, 0x0) getitimer(0x3, &(0x7f0000000140)) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x406000, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ppp\x00', 0x200100, 0x0) sendto$inet6(r2, &(0x7f0000000540)="182b344c6bc114208cc06d0a4da76624bb4bbdda52b723caf5cdc8", 0x1b, 0x0, &(0x7f0000000580)={0xa, 0x4e23, 0x0, @local, 0xffffffff}, 0x1c) sendto$packet(r2, &(0x7f0000000340), 0xc88f8882, 0x57, 0x0, 0x80) getpriority(0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000001400)={'lo\x00'}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='\x01c;Y/\x8cga_arbiter\x00', 0x4000, 0x0) [ 209.638287] binder: 8759:8764 got transaction with invalid offset (-174, min 0 max 80) or object. [ 209.649420] binder: 8759:8764 transaction failed 29201/-22, size 80-24 line 3379 [ 209.667088] binder: undelivered TRANSACTION_ERROR: 29201 [ 209.691083] binder: 8759:8774 got transaction with invalid offset (-174, min 0 max 80) or object. [ 209.705611] binder: 8759:8774 transaction failed 29201/-22, size 80-24 line 3379 [ 209.725913] device lo entered promiscuous mode [ 209.747206] binder: undelivered TRANSACTION_ERROR: 29201 12:30:13 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x33, @dev={0xac, 0x14, 0x14, 0x3b}, 0x4e21, 0x2, 'lc\x00', 0x20, 0x1ff, 0x5f}, {@broadcast, 0x4e21, 0x10000, 0xff, 0x8, 0x8}}, 0x44) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 12:30:13 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0xf292970b90c98047, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') openat$cgroup_ro(r2, &(0x7f0000000440)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x19\xed|.\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x1, 0x3, 0x7fffffef, 0x0, 0x4, 0xff, 0xca, 0x0, 0x2, 0xdfffffff}) r3 = syz_open_pts(r1, 0x0) r4 = dup3(r3, r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x401, 0x200}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x200c02, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'\x00 !', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r6 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r7 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, r6, &(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, r7) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r8 = add_key$user(&(0x7f0000001440)='user\x00', &(0x7f0000001480)={'syz', 0x1}, &(0x7f00000014c0)='K', 0x1, 0xffffffffffffffff) keyctl$update(0x2, r8, &(0x7f0000001740)="b5", 0x1) r9 = add_key$user(&(0x7f0000001440)='user\x00', &(0x7f0000001480)={'syz', 0x1}, &(0x7f00000014c0)='K', 0x1, 0xffffffffffffffff) keyctl$update(0x2, r9, &(0x7f0000001740)="b5", 0x1) r10 = add_key$user(&(0x7f0000001440)='user\x00', &(0x7f0000001480)={'syz', 0x1}, &(0x7f00000014c0)='K', 0x1, 0xffffffffffffffff) keyctl$update(0x2, r10, &(0x7f0000001740)="b5", 0x1) keyctl$get_security(0x11, r6, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000480)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', '.#GPLvboxnet1'}, 0x25, 0xfffffffffffffffb) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r11, 0x40086602, 0x400007) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, 0x0, &(0x7f0000000340)) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[], 0xff4a) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) write$cgroup_subtree(r12, &(0x7f0000000000)=ANY=[], 0x20032600) socket$packet(0x11, 0x2, 0x300) ioctl$EXT4_IOC_MIGRATE(r11, 0x6609) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000b00)=ANY=[]}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xd3, 0x2) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0xfffffffffffffe5d, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="03000012760000000848ba9710c76390"], 0x28}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r13, 0x8914, &(0x7f0000000000)={'bond0\x00', 0x400}) 12:30:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x100000000018, 0x0, 0x4) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)) socket$inet_udplite(0x2, 0x2, 0x88) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff}, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:30:13 executing program 0: clone(0x2000000003000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x11, 0x4, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000180)='net/\xc8\xab\xc7i\t\xde\x84=\xd0W\x92\xe8F\xf6_\x06\xbbp_tables_tarpc\xb6\\\xf10x0}, &(0x7f0000000280)=0xfffffffffffffff6) setuid(r3) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r4, 0xfae71e5936326fae) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) fchownat(r1, &(0x7f00000000c0)='./bus\x00', r3, r5, 0x1000) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000200)=""/4096) fallocate(r0, 0x3, 0x0, 0x8020001) 12:30:13 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='sb=0xffffff+']) write(r0, &(0x7f0000000100)="fdef991cae61ca40220d213e7774a8c54ba96e052e664a453e7af2cf2d4721a6283eec0cf45189e180d9f76b161a9ff7dd9053bab6c2555be64275da27f8629e34052558f2ded3448548c1f4aded833f43a2768e615fe2571de37119475863e1980580a269294260a19ea11e5c470b", 0x6f) 12:30:13 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) fallocate(r0, 0x100000003, 0x0, 0x28120001) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r3, 0xfae71e5936326fae) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x100, 0x0) getsockopt(r4, 0x4b, 0x9, &(0x7f0000000340)=""/255, &(0x7f00000001c0)=0xff) 12:30:13 executing program 0: r0 = creat(&(0x7f0000000200)='./bus\x00', 0x40) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0xa) r2 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_int(r2, 0x1, 0x36, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000001c0)={0x4}, 0x4) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x2, 0x100) r4 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r4, 0x208200) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x8) ioctl$TIOCLINUX7(r4, 0x541c, &(0x7f00000002c0)={0x7, 0x6}) sendfile(r1, r3, 0x0, 0x8000fffffffe) futimesat(r3, &(0x7f0000000100)='./bus\x00', &(0x7f0000000180)={{}, {0x77359400}}) 12:30:13 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x1534721eaeef149) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000007b5917600000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYRESHEX=r1], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYPTR]]], 0xffffffffffffff67, 0x0, 0x0}) [ 212.063535] binder: 8792:8796 got transaction with invalid parent offset or type [ 212.086735] binder: 8792:8796 transaction failed 29201/-22, size 80-24 line 3454 [ 212.106224] binder: undelivered TRANSACTION_ERROR: 29201 12:30:13 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x96594f4ba8702f26, 0x0) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000240), &(0x7f0000000280)=0x4) [ 212.160537] audit: type=1400 audit(1570883413.685:43): avc: denied { create } for pid=8814 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 12:30:13 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x79, 0x2}, 0x7) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 212.207932] audit: type=1400 audit(1570883413.725:44): avc: denied { write } for pid=8814 comm="syz-executor.0" path="socket:[21264]" dev="sockfs" ino=21264 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 12:30:13 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) sendto$unix(r2, &(0x7f00000000c0)="ca62ecdc1b53e39c6dcf6dd6e7c65c91ffa6fdc23340cab3b0acbe502e6ebfa3a2db28b80ccf8055722607adad16a978ba27dbd4d9364eb7e5c94de67cb9a81aaa809873346daedb014e172f4caa232ba2a15ca98ff34a0390dbe80204529788b0", 0x61, 0x0, &(0x7f0000000240)=@file={0x3, './file0\x00'}, 0x6e) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 212.252134] binder: 8825:8827 got transaction with invalid parent offset or type [ 212.252185] binder: 8825:8827 transaction failed 29201/-22, size 80-24 line 3454 [ 212.252668] binder: undelivered TRANSACTION_ERROR: 29201 [ 212.319359] binder: 8831:8832 got transaction with invalid parent offset or type [ 212.347321] binder: 8831:8832 transaction failed 29201/-22, size 80-24 line 3454 [ 212.369057] binder: undelivered TRANSACTION_ERROR: 29201 [ 212.385944] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 212.395137] binder: 8831:8840 got transaction with invalid parent offset or type [ 212.395190] binder: 8831:8840 transaction failed 29201/-22, size 80-24 line 3454 [ 212.395552] binder: undelivered TRANSACTION_ERROR: 29201 12:30:14 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0xf292970b90c98047, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') openat$cgroup_ro(r2, &(0x7f0000000440)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x19\xed|.\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x1, 0x3, 0x7fffffef, 0x0, 0x4, 0xff, 0xca, 0x0, 0x2, 0xdfffffff}) r3 = syz_open_pts(r1, 0x0) r4 = dup3(r3, r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x401, 0x200}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x200c02, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'\x00 !', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r6 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r7 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, r6, &(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, r7) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r8 = add_key$user(&(0x7f0000001440)='user\x00', &(0x7f0000001480)={'syz', 0x1}, &(0x7f00000014c0)='K', 0x1, 0xffffffffffffffff) keyctl$update(0x2, r8, &(0x7f0000001740)="b5", 0x1) r9 = add_key$user(&(0x7f0000001440)='user\x00', &(0x7f0000001480)={'syz', 0x1}, &(0x7f00000014c0)='K', 0x1, 0xffffffffffffffff) keyctl$update(0x2, r9, &(0x7f0000001740)="b5", 0x1) r10 = add_key$user(&(0x7f0000001440)='user\x00', &(0x7f0000001480)={'syz', 0x1}, &(0x7f00000014c0)='K', 0x1, 0xffffffffffffffff) keyctl$update(0x2, r10, &(0x7f0000001740)="b5", 0x1) keyctl$get_security(0x11, r6, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000480)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', '.#GPLvboxnet1'}, 0x25, 0xfffffffffffffffb) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r11, 0x40086602, 0x400007) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, 0x0, &(0x7f0000000340)) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[], 0xff4a) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) write$cgroup_subtree(r12, &(0x7f0000000000)=ANY=[], 0x20032600) socket$packet(0x11, 0x2, 0x300) ioctl$EXT4_IOC_MIGRATE(r11, 0x6609) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000b00)=ANY=[]}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xd3, 0x2) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0xfffffffffffffe5d, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="03000012760000000848ba9710c76390"], 0x28}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r13, 0x8914, &(0x7f0000000000)={'bond0\x00', 0x400}) 12:30:14 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0xf292970b90c98047, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') openat$cgroup_ro(r2, &(0x7f0000000440)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x19\xed|.\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x1, 0x3, 0x7fffffef, 0x0, 0x4, 0xff, 0xca, 0x0, 0x2, 0xdfffffff}) r3 = syz_open_pts(r1, 0x0) r4 = dup3(r3, r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x401, 0x200}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x200c02, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'\x00 !', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r6 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r7 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, r6, &(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, r7) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r8 = add_key$user(&(0x7f0000001440)='user\x00', &(0x7f0000001480)={'syz', 0x1}, &(0x7f00000014c0)='K', 0x1, 0xffffffffffffffff) keyctl$update(0x2, r8, &(0x7f0000001740)="b5", 0x1) r9 = add_key$user(&(0x7f0000001440)='user\x00', &(0x7f0000001480)={'syz', 0x1}, &(0x7f00000014c0)='K', 0x1, 0xffffffffffffffff) keyctl$update(0x2, r9, &(0x7f0000001740)="b5", 0x1) r10 = add_key$user(&(0x7f0000001440)='user\x00', &(0x7f0000001480)={'syz', 0x1}, &(0x7f00000014c0)='K', 0x1, 0xffffffffffffffff) keyctl$update(0x2, r10, &(0x7f0000001740)="b5", 0x1) keyctl$get_security(0x11, r6, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000480)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', '.#GPLvboxnet1'}, 0x25, 0xfffffffffffffffb) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r11, 0x40086602, 0x400007) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, 0x0, &(0x7f0000000340)) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[], 0xff4a) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) write$cgroup_subtree(r12, &(0x7f0000000000)=ANY=[], 0x20032600) socket$packet(0x11, 0x2, 0x300) ioctl$EXT4_IOC_MIGRATE(r11, 0x6609) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000b00)=ANY=[]}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xd3, 0x2) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0xfffffffffffffe5d, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="03000012760000000848ba9710c76390"], 0x28}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r13, 0x8914, &(0x7f0000000000)={'bond0\x00', 0x400}) 12:30:14 executing program 5: r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000140)=0x80, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f00000002c0)={'filter\x00', 0x0, 0x4, 0x98, [], 0x7, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000200)=""/152}, &(0x7f0000000340)=0x78) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000500)={'nat\x00', 0x0, 0x4, 0xfa, [], 0x5, &(0x7f0000000380)=[{}, {}, {}, {}, {}], &(0x7f0000000400)=""/250}, &(0x7f0000000580)=0x78) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f00000005c0)={'veth1_to_bond\x00', {0x2, 0x4e20, @multicast2}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000640)={'filter\x00'}, &(0x7f00000006c0)=0x44) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000800)=0xe8) connect$packet(r3, &(0x7f0000000840)={0x11, 0x20, r4, 0x1, 0x1}, 0x14) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000880)='/selinux/avc/cache_stats\x00', 0x0, 0x0) openat$cgroup_procs(r5, &(0x7f00000008c0)='cgroup.procs\x00', 0x2, 0x0) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/mls\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r6, &(0x7f0000000940)={0x28, 0x2, 0x0, {0x5, 0x4, 0x1ff}}, 0x28) r7 = getpid() syz_open_procfs(r7, &(0x7f0000000980)='auxv\x00') r8 = openat(0xffffffffffffffff, &(0x7f00000009c0)='./file0\x00', 0x0, 0x200) openat$cgroup_ro(r8, &(0x7f0000000a00)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) r9 = accept$unix(r5, &(0x7f0000000a40)=@abs, &(0x7f0000000ac0)=0x6e) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/rtc0\x00', 0x200000, 0x0) tee(r9, r10, 0x5, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b40)={0x0}, &(0x7f0000000b80)=0xc) fcntl$setown(r9, 0x8, r11) socketpair(0x11, 0x5, 0xdb, &(0x7f0000001000)={0xffffffffffffffff}) recvfrom$unix(r12, &(0x7f0000001040)=""/57, 0x39, 0x10020, &(0x7f0000001080)=@file={0x3, './file0\x00'}, 0x6e) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000001100)=@gcm_128={{0x303}, "ec594b22bbe4ef97", "152474a15f44045f7a2a44d0c3acd3d2", "c48551d9", "0f7d73119a251827"}, 0x28) r13 = openat$null(0xffffffffffffff9c, &(0x7f0000001140)='/dev/null\x00', 0x8000, 0x0) ioctl$RTC_UIE_ON(r13, 0x7003) write$selinux_attr(r13, &(0x7f0000001180)='system_u:object_r:lib_t:s0\x00', 0x1b) 12:30:14 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0x100000001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0xff66}]) fcntl$setpipe(r1, 0x407, 0x0) io_destroy(r0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) 12:30:14 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x804) exit(0x100000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB="852a62730000000002000000000000000000000000040000852a62770000000000000000005eaf0000000000000000008561646600"/80], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 12:30:14 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x0) pipe(0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) dup2(r0, r1) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x2c4642, 0x0) fcntl$lock(r2, 0x5, &(0x7f00000005c0)) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r3, 0xfae71e5936326fae) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f00000000c0)=0x3) writev(r1, &(0x7f00000023c0), 0x1000000000000252) 12:30:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="dc2ac86d4b66732e66617400080441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0xfffffffffffffd1d}], 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) fstat(0xffffffffffffffff, &(0x7f00000000c0)) 12:30:14 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x9) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x50000, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000080)=0x400000) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="f3"], 0x1) dup3(r5, r4, 0x0) fcntl$setstatus(r4, 0x4, 0x44000) io_setup(0x8, &(0x7f0000000240)=0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x3ff) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r7, 0xfae71e5936326fae) r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r8, 0xfae71e5936326fae) io_submit(r6, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r8, &(0x7f00000001c0)="d388fa76e7", 0x5, 0x1}]) [ 212.981364] binder: 8852:8867 got transaction with invalid parent offset or type [ 213.006016] binder: 8852:8867 transaction failed 29201/-22, size 80-24 line 3454 [ 213.019247] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 12:30:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000008480)=[{{&(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}, {{&(0x7f0000001340)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x18, 0x0, 0x7, {[@timestamp={0x44, 0x8}]}}}], 0xffffffffffffff1e}}], 0x2, 0x0) 12:30:14 executing program 0: openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/avc/hash_stats\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x40) fallocate(r0, 0x20, 0x0, 0xfffffeff000) fallocate(r0, 0x0, 0x0, 0x10000101) 12:30:14 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e21, 0x3, @local}, {0xa, 0x4e23, 0x7aac, @rand_addr="07d344e1d4c94cce93702e9faa329af8", 0x951f}, 0x9, [0x5, 0x7, 0xfffffffb, 0x1, 0x5, 0x9, 0x3843, 0x3ff]}, 0x5c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in, 0x0, 0x1}}, 0xe8) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@in={0x2, 0x4e21, @remote}, 0x80, 0x0}}], 0x2, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r2, 0xfae71e5936326fae) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000140)=0x10001, 0x4) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000080)={0x9, 0xa0, 0x1}) 12:30:14 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10) connect$inet(r1, &(0x7f0000593000)={0x2, 0x0, @multicast1}, 0x10) socket$inet(0x2, 0x2, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r2, 0xfae71e5936326fae) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000380)=0xc) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000100)={@local, @local}, 0xc) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000140)={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1d\x00\x8e\xfb\xc1O\x00', 0x0, 0x3, 0x19, [], 0x9, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000200)=""/25}, &(0x7f00000001c0)=0x78) sendmmsg$inet6(r0, &(0x7f0000000f80)=[{{&(0x7f0000000280)={0xa, 0x4e21, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000940)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xb0}}], 0x2, 0x0) [ 213.211849] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 213.257010] FAT-fs (loop5): codepage cp437 not found [ 213.419077] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 12:30:15 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0xf292970b90c98047, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') openat$cgroup_ro(r2, &(0x7f0000000440)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x19\xed|.\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x1, 0x3, 0x7fffffef, 0x0, 0x4, 0xff, 0xca, 0x0, 0x2, 0xdfffffff}) r3 = syz_open_pts(r1, 0x0) r4 = dup3(r3, r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x401, 0x200}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x200c02, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'\x00 !', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r6 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r7 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, r6, &(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, r7) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r8 = add_key$user(&(0x7f0000001440)='user\x00', &(0x7f0000001480)={'syz', 0x1}, &(0x7f00000014c0)='K', 0x1, 0xffffffffffffffff) keyctl$update(0x2, r8, &(0x7f0000001740)="b5", 0x1) r9 = add_key$user(&(0x7f0000001440)='user\x00', &(0x7f0000001480)={'syz', 0x1}, &(0x7f00000014c0)='K', 0x1, 0xffffffffffffffff) keyctl$update(0x2, r9, &(0x7f0000001740)="b5", 0x1) r10 = add_key$user(&(0x7f0000001440)='user\x00', &(0x7f0000001480)={'syz', 0x1}, &(0x7f00000014c0)='K', 0x1, 0xffffffffffffffff) keyctl$update(0x2, r10, &(0x7f0000001740)="b5", 0x1) keyctl$get_security(0x11, r6, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000480)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', '.#GPLvboxnet1'}, 0x25, 0xfffffffffffffffb) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r11, 0x40086602, 0x400007) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, 0x0, &(0x7f0000000340)) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[], 0xff4a) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) write$cgroup_subtree(r12, &(0x7f0000000000)=ANY=[], 0x20032600) socket$packet(0x11, 0x2, 0x300) ioctl$EXT4_IOC_MIGRATE(r11, 0x6609) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000b00)=ANY=[]}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xd3, 0x2) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0xfffffffffffffe5d, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="03000012760000000848ba9710c76390"], 0x28}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r13, 0x8914, &(0x7f0000000000)={'bond0\x00', 0x400}) 12:30:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@mcast1}, 0x0, @in=@multicast1, 0x0, 0x9d11d1b2e276382a}}, 0xe8) 12:30:15 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x1, 0x0) removexattr(&(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10000, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) 12:30:15 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000000)="af7771363f5a1c5a723c6f201a6a6210579aba86b7fa25a03ca6558a21f166a03138be41a38fd237079f95cb6cda032558ca930610a16365b5bf43dc0a4005b185aedd9d1a", 0x45}, {&(0x7f00000003c0)="b1da04b09ef080f4d98895245672eadc953035bc442bff4d6c5ae4f5c8", 0x1d}, {0x0}, {&(0x7f0000000780)="a7a6", 0x2}], 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="78000000000000002900000039000000320c010000000000ff01000000000000000000000000000100000000000000000000ffff7f000001fe80000000000000000000000000001bfe8000000000000000000000000000bbfe8000000000000000000000000000bbfe8000000000000000000000000000bb24000000000000002900000032000000ae310631312ee1eb0d000e9789f56889", @ANYRES32=0x0, @ANYBLOB="0000000058000000000000002900000039000000000800050000000000000000000000000000000000000001fe80000000000000000000000000002bff0200000000000000000000000000012f3516650f84533f96f7f5fdbd9a6711140000000000000029000000430000000302000000000000fcd839326086781989cd4586f9dbfa56237b0374f8c9f64d39eaec5f03505df15d4e4bf59ec11afec119140a72852edd7cc8a759dbff230c4327ff994a82ab663b76e0668f8e1195496fa9abb7135717c89dd6e50784354ca77aaab503866bccf31dc34ed367be9ba6f53883d0aef97c906eed3220c153"], 0x110}, 0x52551) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x3b24, &(0x7f0000000740)=0x0) io_submit(r1, 0x6c2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000780), 0x4000}]) 12:30:15 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda={0x66646185, 0x0, 0x0, 0x1f}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 12:30:15 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x8000002}, 0x1c) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000) clock_gettime(0x0, &(0x7f0000000000)) ppoll(0x0, 0xffffffffffffffb2, &(0x7f0000000140), 0x0, 0x2a7) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x25d) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) r1 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000100)=r1) sendto$packet(r0, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 12:30:15 executing program 1: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, r1, 0x10, 0x70bd26, 0x25dfdbfe, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x101, @media='ib\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x4000090) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000180)={0x6, &(0x7f0000000100)=[{0x800, 0x8, 0x7f, 0x8}, {0x4, 0xfe, 0x1f}, {0x2, 0x3, 0x1f, 0x1}, {0x1, 0xc2, 0xe3, 0x400}, {0x7fff, 0x26, 0x3f, 0x9}, {0x8000, 0x5, 0x9, 0x5}]}) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080), 0x4) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000240)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000080), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r6, &(0x7f0000000200)=""/39, 0x27, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0xfffffffffffffe5d, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x6000000, 0x100000001, 0x6000000, 0x1}, 0x1c) dup2(r3, r4) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) 12:30:15 executing program 0: sched_setaffinity(0x0, 0x2de, &(0x7f0000000240)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RSYMLINK(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a40)='TIPC\x00') r0 = socket$inet(0x2, 0x4, 0x5) accept$inet(r0, &(0x7f0000000280)={0x2, 0x0, @remote}, &(0x7f0000000180)=0x2fc) keyctl$unlink(0x9, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}, 0x100) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000140)={0xff}, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) write$binfmt_elf64(r1, &(0x7f0000001640)=ANY=[], 0xf5aab446) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x8c9}) [ 213.703541] binder: undelivered TRANSACTION_ERROR: 29201 12:30:15 executing program 5: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, 0x0) add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240), 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="020300030c0000000000002000000000020009004000000000412d1fbc000000030006000000f9180200ee00fbb70000d81458186fe8b90002000100000000000000030200044a7b030005000000000002000000e0003f0100000000fca0d971e9fd2bb4b88e524ae03e6521c84c1d7afa5cac81f30f16cd3ba77e4d5a8a682d271d4e0b57a07686d8cd335d8541ca148e882dc5bafceed2dedb06c1d95dfcc7e08e6dc8bbcceb36c800"], 0x60}}, 0x0) exit(0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r2, 0xfae71e5936326fae) getsockopt$inet_mreqn(r2, 0x0, 0x7, &(0x7f0000000940)={@broadcast, @rand_addr, 0x0}, &(0x7f0000000980)=0xc) sendmmsg(r0, &(0x7f0000001240)=[{{&(0x7f00000000c0)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000340)="1baa32d5207167d35f8918ce5ece840425e259f98ea27bde1f2d9bde395566391594f5acfd0f7f033d5bb1a411f81c80e07ace8672b703c93cca14183863582e5e2b2c413563b94b19e472132a1ebfc828ed1addb9979cd61402428dcf9a170b129438556981117eb372e0979cc38b874a5ad869a18cb88757c41925e1cb92bbd1673164b35a133e46f5a466f053f32eba415be875370b1d830df6e2bf59284a17e249ecd6eff4985c4393b5e83ee9917a9e7801810cb5467202e21d557c8e51327e074b3122c4ab666df07ad9ff873bf1de8933e80a10a13b03ef6419faf5783fd189ae776239d4", 0xe8}, {&(0x7f0000000140)="1fabcc21d85f4e584ac59f6be2f93a53c478c58ef2f0e3172cb2fb584bcedde13d78623788144c2fb0ee2b", 0x2b}, {&(0x7f0000000440)="cf6453be53089ad800624c57fda62316ded10a8cc7baa9942fa85b8ace6fbcfd9daf91d5e09ff5b531ad6b9b5a15bd0a48d8f67c302f48a39e7f101022bd046dd4c961ab858564de4d61bb3dfe9bfc503f4613507b6eea9c7eadfddabb5a3e740e815d0bad5db19f72d5d3b8b698639fdd7d60cc9a48cd9dac711d9e8f29ca8d8dc73bb682a12d7916f74fe2ac37dcd6a5aeda5571bbfd0322c57dd51ffaf927d9254a48b19da183a6c674d9ba3e16cceb1b6beb9b02872c2dd42ac7341b8da2b3a6da673803d798e23cd87edea8d1bb3ac50879236c7aa71c4d5256d13e39f774c6521e", 0xe4}, {&(0x7f0000000240)="83c68ace2a2c2efaf48e83c36d237da14a07acb4029703dd801b845ce72d65bef3e0404d743cff4c9f80755a8b4123b7945591d03a891e67767d8ca27d011f92f9d3e808bf9b703b5a4c977fdbe94c4059d8d3855f3fee7125359705f8d9184bf2d6749f8178f51c8e85a3272f2f8aaa463746f05eb8dcba2aec1d7f68b7b5847e922aab0c59be989926b39256272e3e2c6df8478bbc7fd42db3f5b6c425c9a7f9caeda6", 0xa4}, {&(0x7f0000000540)="43af00a1f159764aca1a93f3b1e67f834bde19337e746d7cce923b772efee69eae6b0870c10dd438e8fc5b106701914295dae610fd377d56d4ef5e928884db736183461a972d5b67be18f3cbb10f8afb2cdfb11d8561a16e845cf00924424a699a7c8b29ae9108d69142fbc80bdae073a0fcd6acd93ffc75b0205153ddd7c7436a4a70955e5b6f69579c7c13285884dd3a4f8ee48f5480ba63881e030833745e86eaa29c376f9fd97fe1521daea82b7e6976ae100f4569dc3c2470048681b78abc4f06720f6730622d98228662cb6559daecf2d9617b37ca63ab", 0xda}, {&(0x7f0000000640)="ee05dbf299fbf6aa47226149b427edb5797c15bc3549b88873f61de370dad994a1a0798a1d06aa72e6f36d6d4678dafdc83d5c481778614d77dfda28177b4f30af827bd48a242d84fae257184c3f3951ea592513bced667b6f6b86d85ad12fc81d99f5e2735746dd98804bf480617b3117aea500ee4a81d119cf88e1d41043ae5e4666d2d28e8b73f61d9f71a7216dde443c449173a2d672602faa593808", 0x9e}, {&(0x7f0000000700)="19f6408c184298744284a2def47c1b12f254e51ef04bfd975f470139d85592070055997515975eb3c1fb6280d6715ada71ad56fab0f5bb7c86435c466b2147dad62572f8fa717e33c20b2644d025071d84940ad7d3625a3dcdee550dd86ffb9ecab1f95a624c64a39fee5fb83c7abe280c6d5270259e74ab67b55a1c9c30ac50e9b87008cdc99372bf3676bb435f38d390129ec0b40ca34cff3f6043ba185c75be5aeacdbba0917d018a21605e6baee98c3da5c0a8a4953baf66d6ab76eb45aba8f1bf397080", 0xc6}, {&(0x7f0000000800)="aab3455318ba849d6e2396690e0a02612744be6d07fc89f2f15500903cdb476499a275c8c22a2de19244ec050c00e072eb31ad1e506cc5e3eab099e464e3479817a7b54970713309afd0269c157a16cb167301707c00f68554d82c38887958fe1d60f50589641c022d354b929af9002146585389fab3a4430b2ae2235f86c4521885580e77fb284d772148a5d4b17aa8732b7898aefdce61eedf7b6d32", 0x9d}], 0x8, &(0x7f0000001a80)=[{0xd0, 0x103, 0x4, "45ad33879257f40c5d0d1384e696ad3a4bd8d7ce522e1e19dc0efd4ffc5be7c0c9e1f05e4c61a532c374d3ae2cd782ca1ce3c2cf9847dda61d1cc9476535cae4fc59b4c47fd6a0b752ecb89cf91afd982b64c2c1642709f1f9f3b2c1811a8d1ee7ba5bfe278b2940dbf4fe70cf6ebd996bcf3ae63a09cd62ddb3ba228db11dc5f872aca8b61d69198906e3388b3771e6703ac6eaf6a79eff60d34fcd717278e5128e0b28eb22286c79aefa61bf96d47da194af9c864322ae0aa149e0"}, {0x10, 0x80, 0x800}, {0x1010, 0x4673eed543ed7f71, 0x9b10, "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"}], 0x10f0}}, {{&(0x7f00000009c0)=@can={0x1d, r3}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000a40)="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", 0xfc}], 0x1}}, {{&(0x7f0000000b80)=@un=@abs={0x0, 0x0, 0x4e20}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000c00)="851e18bafbf283b825c16401b63416aceadbaf9fd313532c227acf67d90846095bc373b62b1d1eb7ed3bad27956148a28790a8baf804c1443ab9b7864a86afbed1531f5b52c087bfd2b046890b7b8cc85e42f1c13aea5674f4983bd9380ec4fb0a731b8667ac0847eda49fbab3807b03613ba623c56ca74b8fc3228f218ed6392b9b46", 0x83}, {&(0x7f0000000cc0)="a9573c42d39a7f01bcc11d1b87f6e9adc0e6f0a812391230441424e70415f73acd66fffebb18ee525e89d31584fe4d9fee552d060117682edb56667dc0491ca6ce1eaf057517dccf5659675b66e4d44547249f61206436b0d5e0bbc5a209de652246675c5ba5cb7eea839716c282f56b643b14c00857", 0x76}, {&(0x7f0000000d40)="b9c43e9af9a31edf4932f8b1197163064f88ff277dbbcfc2096493df13b7c51b993d15b70ed26937cafa4eda30a987703f3d55b5067ccbaf6f71ebb831bdfea571ec20b07c59318336481ab6264506823b7716d86c8168dd5d135b11b8268b445f82f1e6c87c6a2c3231dee794ba683104ca7b4fda163c99", 0x78}, {&(0x7f0000000dc0)="12606be2d70371c2fdc8b2bbe645968b3c9882912b250559d87cd5e4d92635ff8d", 0x21}, {&(0x7f0000000e00)="fa1e1ea9135ca7400f81196a7cab43b3d5defc345f6a6830a8769dbc0c65d919160a930a01b0b3b0065cd2c14214aa11f27355e6153e5893d1fb5ada46999310754c21690677808bacad0e3a6529b106a67450818e3548ac9c345be79c4a8d11e079de00162a03f848c70822787f074c35c093f36389fdf4d5639f087ed7fd13a4c6293c95aa095d17fa00c386af3536a6fa", 0x92}, {&(0x7f0000002b80)="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", 0x1000}, {&(0x7f0000003b80)="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", 0x1000}, {&(0x7f0000000ec0)="8a869bf510fffb5a2fc84cf72de8c8f68c8280a9ff99e5f8f3edc7633d7b3f88e751811e49e7f7775a1978271d7e444158ea8ad6b437dca47ee06160a58245734db6d919aacaac8a5aafbebfa042d56c0486a6ed3e97ef16ede9f7b7ba76d40e17a1fd2ded37a10792be369743b0fe1324b2b1161ee0ce7f6a6bc2a2fe77a1092b7e43c348d686a8d36494e1c51a20ca070899b2ecec019996d9a27732f30c84eb121e48d7782e", 0xa7}, {&(0x7f0000000f80)="086f1b2b2b73b40c0b486644ee43f70d4be8b0d8160726c31468e1c2c5130f3016659e7d0dc31981fec4acae352520c0559cb4c7753749f975ee49cb6390046968cea3b103414473abaf08756893033407d57cec0320fc003989b28c5c7696e338f4c0c046013c0acf71853830e0df88e3863f15120263c6019d415b2d285e53f48b022a50c63ef06e0f135a795aaf96effc26cbd3c45b9451f62eed372fbf0dc80ac137899f5814e409", 0xaa}], 0x9, &(0x7f0000001100)=[{0x98, 0xe950f2c04a069775, 0x8, "b26debc4ac44f017ab4d34c0a194d185505338d4785cb10d7466346eca178a9088fce8039741b0b7779f2ab48fbfdc6a699b6b3536119cc8d1322ca2610d58376ccbdc667ff87e7e6cb98a777f0bca923bf18a4a991c5451381f0d8b22e0f81a183bc4a6674f6a9543a677e5de76a59f8c620fc093af47c5bc1112789736d893124ad4ed34cbec"}, {0x78, 0x111, 0x3f, "7113f6b1c5d3ca54051c1fe85aa062e17eb666a5d80ae273b2c22c3e589dc30f6354f77c322aa6e3b74993660952f7c431646aabefaca507f361391cb5dd7ab4ef5d5c6a68bcb8ce15002d6660a0fbc0810e66f109c44eb81b179e6b60e945b7a03e7d6c2996"}], 0x110}}], 0x3, 0x4000) 12:30:15 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) open$dir(&(0x7f0000000040)='./file0\x00', 0x4040c0, 0x9b) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000240)) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000000)) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB="852a62730000000002000000000000000000000000000000852a627700000000000000000000000000000000000000008561646600"/80], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000001800000000000000a7fe00000000000074895623d67dbb6c32433537704d17b4a1d11e4f8bdf52aeb6b121a1e1d7d7d1e60f09adac2d053ffd227fbd02032e7b875c711ecfbd"]], 0x0, 0x0, 0x0}) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 213.789174] binder: 8915:8919 transaction failed 29189/-22, size 80-24 line 3138 [ 213.817456] binder: undelivered TRANSACTION_ERROR: 29189 [ 213.893675] binder: 8934:8938 ioctl 4c05 20000240 returned -22 [ 213.907615] binder: 8934:8938 got transaction with invalid offset (65191, min 48 max 80) or object. [ 213.917340] device lo left promiscuous mode 12:30:15 executing program 4: r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/member\x00', 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)=0x2) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) setrlimit(0x0, &(0x7f00000000c0)={0x81, 0x1e}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB="852a62730000000002000000000000000000000000000000852a627700000000000000000000000000000000000000008561646600"/80], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000180000000000001b3000000000000000"]], 0x0, 0x0, 0x0}) [ 213.945180] binder: 8934:8938 transaction failed 29201/-22, size 80-24 line 3379 [ 213.975689] binder: undelivered TRANSACTION_ERROR: 29201 [ 213.981545] binder: BINDER_SET_CONTEXT_MGR already set 12:30:15 executing program 3: openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/context\x00', 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = add_key$user(&(0x7f0000001440)='user\x00', &(0x7f0000001480)={'syz', 0x1}, &(0x7f00000014c0)='K', 0x1, 0xffffffffffffffff) keyctl$update(0x2, r2, &(0x7f0000001740)="b5", 0x1) r3 = add_key$keyring(&(0x7f0000001300)='keyring\x00', &(0x7f0000001340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$instantiate_iov(0x14, r2, &(0x7f0000000100)=[{&(0x7f0000000180)="e963a1bdae4a710feae42bb33a797823222aed450cd39344edec8a28bd4b7b1c4c4b4093b1c5f773db3a0118b2c773bd2a2619a23e59069d462686243a0ae966f3d6853b5a", 0x45}, {&(0x7f0000000240)="652201021a952385f859dc804ee5dba96b97c109f8de6eb02c50dbe4055e0f7b8011db0be162d917ee7cf59b4fe808150ab0d9b5a81eab86c8d04cd9b26b428ccd3f5e6165197de2a9acb00e54dfeb6d04d965cee0b1668116035acb54a56734fff262ff9e13bb5c7fe6eadd5296491608ace5e95cc4edf88fde8b8eac59c9e7685f1be8cdef0e4da650bde9794f085a8008765713b46f093d3c01afcdd698d081a49ebce86dc325fcb2a1c692e2a58054999a92cfb649fad2daf4fcd88a285b766c3283ad79abeaffbf1588f17645bd77363df408770f0e908e72b135547a5043830eadc64c519d08419cdeb718e1a514468b02b27f5ba456875457159f3ebcc8698b2195eee43dafa651a8cb6af5211e40e3ec6b3bb2cf9a99b366aa3d881d58ce53b4ddf41d2be56979339778fd5c7d7ee86ac2fecc8b52aa80fb7f9b9275daa5687f0112f6f08e46fb0c25060a02ca1e4d6308bfc07a0e51d6bfd79aa512a0a23e27ce8e714428d18077774cba1d80e12282dd9431faea01c82639dc2cbcfc2ef82e3ff29277cee1fb5a78d7e7d942fcf2bd095416c981e9b893c8de2efb6834023e2b86f2615f20986ead1ef2342e4cc40b7ee72c4313491dc26a063af4aafd3f2f2c4b39effceec9fd0e8010b4b6b6d7e1d39af79cf969b04f8c733c3547e0c4caee413e0add209598531c45e5a62cd418032a353733128c394690242a1c0dd6460ac54611fa006acb066e595bd2f798f0d66333cda05163fff23d79e0064af41e65e45ed4f988dfbf393d82750ae3f611ff59116a7626fd2bf98febd9967e969b3135bbf6b16b4cbe558538d89c60caa289ea79eac7138155c122a56f25cc2068f82b44b9d3ebd125a4b24311a961ac36053c3e9d9503b585d687c83b2e5bec04e5b6ac1f76df9c180f42f2366dd6e3a04cea785b481abbadc5ba63b519a15d57d78737c07531f80d73b44b32d5ce02e3f092080965baebed131453f226914c631f3944ab2afe266f59b41c42a18fe69bf41a44c8ce877d7656d8677913d19ea5d1e2e89decb6532a9f95cebd3ebe37d77e5e4b7c47ded0636febecc78945e8bd85c65032ead4d91f1bec1079c3b69fa6fc54bf18ebeefc42562ecacfc8047a4569814d328db6d9547538faf117443efc9574f2ee636c3a1414b38ec5f91890bc5e50f61aab1204b543da35ff1f2180481a8cd9127e05c2625e9341014227815f916d28299019bc4dc0b644c3b009b88ba3abfbdf5287517c632dd09cdffd168a2b236723070e374dfed3e345b917c5af02b141fecaf6db1bb4a1b7ccdbd555e4b343db07a14327e1b4d0bd2dd367046616970145114cf1cfa719c6ebd513f5d07261d630dbe5326339ce31d3d3491329f750332eadf324604b8571197199bd258e869212aac9e1f54d3db1aa75058ea7fae8ab6987a54a1b09cd9137f140fc635d71bfaa9ce04c7d8262201b134e5066a5b20a647b0797442556e1ba7602e6ccf13544bb07b4eb0bc366e38085a0e64ee0601e469c3e0666c8b26e42d1db0f2d3ed47fcf0ff9058d30599834f2ce3193e79488292c374b4b456805510df5688b0e619dd413e8d1c9d0b8ef14f8da1858c2c43bc97af318af8a39964b0ea5271e70027ff46831468ab9e5a3db80d60f15e33c8dde4a043930dde9ad79c450b2f7e4bea8f36a17b530a1ec7a542da678decf2d2ea31b2299e804593fe2faf3cffd925b50d530e3719682eb2a704d8249fa0db0fe6b34906b09eb0209602fc04ef9e0a470aa0e4a0b33a23dbbdeef553a0a1007e1da2d6677a7afb0f3ca4bd35d662f31a9219a7fb3becf54006605f424ecf5667a246588ce6092d55447ac5fb170a0e95d3462a177f0f8429982495d9edae636fe1242842b41e32bdff6512345b730c8fe0afdef68a6fb966fac0009b28d8c8951c6aedf5c74791d20227ada8bb75a37c672fe0656673755e1c808ac9c64dfcd7a88c3102b28f89b87b718732081da10f7c88053488ee7852aae904da1bd9362f0e361a2455a3d48ab9cf410936d66da5638f14eb97d0b12e9cc9b4498cd84bed127f92d7914c4e3edbc7cae050a4cf856bebcd770599f491df0ebb37f72a88d3ba35c815fd4c35388096e630c741d75d4057a6bde69dcce47c377f56f51ab22a33aa1ea66bfd55a0a97b4443aee4eec0e821e54472b776cdec7324f3974fd3076bb6d8b4e5ad79640d679fac4964ecc96560a98ec072fc4a82790c089a9c0d4180b278701c2756a5b0b1c07832c617849a9dc247a787f95d555fce0cb40a0dc3185b0470b71738cce61ecfd6c10ff4b34eea7fa5dded699393371cb413069649b4179964a7bbe181058cbee788d9a2389813dae1bef8fdb1b0d57ffc100e2f856940686b9104155c7fc899f7adf92123200dc663076b4d67d9d6a25a37a01ee0483703d9affe61064f6c203d0a62e2292e40fcaf64accb4f7e6969407c7cf87c1d1b2d586fb9336952b9513d1ef742882a3d4a30b19ba662e08e07d79f0b0ab531e0ab39cbb5389480c1329ec541054160d51561a07ac50ae373d2d230a1b7c9029a5b73c4c85b74fd8ba014ccccf4e06a79ede21d14601078e58c3f5d2474c37cbe675a1d7093824d8e8dfb96a4d317e275533bba30031484a60571294334352761053cc2a29736021285a46fa7149fdcc046305dbc674f2d35511ea62767a709977755befb42be0e693223be11ac799fee2f18643bd589b59b669c95fc49936cc0668f0ff1a6fd26c319db7f2c8e10354846e2db5a7b001c8063c2d0668e3d9e0e038dbaa94d5f9f778f5dcfdb2c7610289c7a4d254c8d96ca35e68af74a8aa55f53bf2efe5536c1059b616e1d7c64f4125fb636e81bde4267836d16552650be4461afe49616502221873ebdfca07e4446dc331a7ce3d56e451acf67112e17b0f3bcb6adfea990c2ae642376f02723b4c001611dc95a2a73b8c3a73f45a0af16328feb3e524cf0a76f2653813471b52b136c5df7ea651fc9ccd5730658cf06b1f11bbf391fd0ac9fd8f9b45608142c670ca587f4397083a927062ce442be8046a5853bedc72074b6ccd1aa7382e0dd07b31637d8ab45d5371a61cccfcb632d2c185e4b3fcad1963b8613a962bd80d4212f180e17095f0c4cf4dfcdd57cff967b39c8fe0a0417512eec5734d2c529dd181da3d17b244cd086ac2b92646624e09db98d44263ea6420a45a1cec02d3fd2ae804112a81ca0161c40f1bb6f8da2e5b56c8df0ca4c449ba6dc6f31663788465e74a7791b220df036c48bceeedcece8a548207c217b7323318e821522593a5c68bd932163793e280a3bfed0a06f6c344ed218711a4122ace3c4e5d29e81cdcaec60634176d4b53d7eaf46b56e9be9b3a5c65d2803207ee5d0fc6baab41b9a2febd762cc29fe1ac41062ab2a561dd116b6c2807a405fbe6e1f593bd2f9e93328fa2497a2404de7a96a430c3ecef8566d8b6f1d33b87c3d8353b5060871a2d345a27f44188b42df664c40f73ceca6e2b845266bdab0ae3f611ed2994f74fa0ccc66b16a16ba71533496700afd5c4a6c33649f6362dcbdd25b49c8dfe9b400dfb4ceccc1f1700bb86bed70e247cb09b09ca3151f51044f09d6e9261c70d7fdadd82dfc5f594b355c611c0aaf3fa7f475264461f2621268719d67b6224baa0b52fd1141c27d917df919ed77650d0c7ce3efbbbc6cc21fc8bfff2d95ad5cfe2cd460569e985f69262f651477320c27c4d27c0f5e1047d79d34d76f05edf4b20f0a3dfa820977a4e6f5ed3aebbbd2bbe2234b13a89e10cad39edd728496221a8d4185e6c823ae33aa8a2216d2f07b289a98495b8a0fc5f49d3e8f0880968d6340ad7180f7cd051e1d8bf75039381c5130b99546ce3e7d286bff6f3f36054d4500c349c4eabe60142121d898250f8d82337a4371ebfd57eddae60a01781a7e704d1763f68ac74c0e12831965bb95afa5173dfbdd2d07f1cc4191f3e2011a54f54bede1cbbb23265a634b56cbb8f3f1edc7941911f6fa596d52967b5d633f7204d1c19d33f8337d865f390849935886a1ceebe0a6ae85e8ac47c0036f9f36353a3c5f82600cdf04eecfdecc302f410cda910289ccd48f52abadb1d64173b8a833b00b30f0b6c72b79e58d7babead4ccc1aef7bf862b0e3ae3281a376bbcf0ee2bf64e9bf8b6c9f189f8fb99196155468186c180680f493dff66576df70ca59efcf66574b9cecb869aa9cabd3e4f45f5195cf45347ee2fc0358d036cf3bbd3fc27fb60a57cb99a687b43201fd1da605b6b26177a0c4564fecfc28f3131c3f7f966c55c7478098e3d95c574404d0da6e966d6aaa2d303be8fb83ba5e6ce7bb40742886cd07b113583449bb7ee44d94df6fbd7f423183785d3c499c46a2964f878ebfa93faca8c1da4dab0973cfb58609bbc6105362ca75b003b68ba82d1298d1c978183aaad68aff5f464b3ad7451d6f14efad8f2a77f6de353e896c7e25c90290a887930762c3dca97f80edde0e0a3509cb8d65f92e318e983fb72f521de367ec8249c08f14898afa8ec31f7bed0ca0d6b0fd60a586578d9ca39f8293eb6be536365f7181ef05ea2642ecb6be52918dd53df7264c2ca06a313df8139c31c340804239afee55155c4b73b6a3e58bf8e9fde5b36844e0ada553c0a20a29477fc8ad8acac0e423ff3a89949f4a604224f1083ff0eb7fe87cf72dad4548cd0e39b1a2a14582baa9018ccad4422f61ff69815480c1db3aeb99e6def340ae7144a2682f7bf21b91dc6a799f4f6726c8f28e28aac563e05d6b7d3fb8fb0ca98a505d6e0d8d3d50bc0f3e35922be72103e66c92223c58d50c7b56a6c47965895be8ea6dc4d2cdca4bdcaa5b846af4f5270e64e8df09e919b2770859b2d3e735c311062b8326e460a57d660af48cd03cc888a64e83da40542b7773134f778ef9196f505f449ba924607277a5799a90628588fc398e465ffc3fcae530a5025f51cdf9dc14c8d6f10632b99f58088a14b3d1497d905a6fbd31119e38c48ecc172d5fb59adaa862cf73f4b080c544e37a33a13e9be8e019a3d140d8b7df30ef0b7ebb2b9c14c16f973c876ba0e5a1ca59192cc26e8a4771e779009ca604e59a0b126a1e3f2c000a8a19a6d391219a11f43ecc1849581b91f393e0e82c5676c8437a4207722594008dab60f54f579c1040117a64bef4db77386b80f7f739b94c895309bf26e1bba90a5f8720d48bf07ff749d6efc8592b4315fe4dc33ae7a521b0968c7795f2a7884896c173515505bb46b6eb4a1bc1f2947a462a1a2e69c07f34fd4e605a6fc69c15eb2bb576d2599ab2663f36de654ff12bd39c5650ace403060e884f8a8ce116da675e02a78eaf25ef3d60d82fe6e0563beb3464473897bfb967d0b4b06a13a4304c459a28335252ec921b6c55708ba6c274f94b3e1c69e3660d1e0d23d11f408b25c146c2dd211ca5c9d04cb97151b895e46828d6d22399ddf54af003eecd8020d5cf16f9f1789c3ef09d62083c11b473cef95378e4e23c1c1e854be0f7e3e552d7b6df22b6ea1513a4bd67f97b6585ec0c93dcec7d05e2580e1fb316619620faf2158184c10dfc7beb5372417a617d84444a2106b37f302d698d7958f8d51d5ea7dbb73dda360d4779891b9f40b80b69a5023fb309501165d00748b8284f2fe436566850c095a7a138e3baf37cac1e712266825b3b4cbf230d4f29a4a2371cbb76b046b2d517d8f82d1dec376a95cb2f8dde665b5961975bb34f6603b20dc4b6e0689b6e3cc468fc82ef7703344453f85cc3b8ad78abe14b05016c", 0x1000}, {&(0x7f0000000040)="34ca22e770f1b8b7f946eb95", 0xc}, {&(0x7f0000001240)="187e3ccaefa67667e0816e72c3ad61824743bec89d0881de5d374cae3ec8815d5e8ab1327407da87be8fca9da5373db19ee027677f7a19bcc85c6fbd5c2134c01187b792af6dbe52a5f593cfcf597bbaeafcc1737834c28e475efb85d18d3e5dd27d9afb8fbb866a5c180ee509929f4285eb962b17db42a1c5736ff981d7d2738ac8b13e8f070eb4a37a878a81fc40344145b6c99b5196501a9122df35c63c93a0879b642e4da2090c1ffbaaf70a9baf26b6", 0xb2}], 0x4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010800000000000000000000000021f8b1ed304fe912497f905cfa41b4560590", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0016001800010014000a000000000000000000000000000000000008001b0000000000"], 0x44}}, 0x0) [ 213.981556] binder: 8934:8944 ioctl 40046207 0 returned -16 [ 213.989767] binder: 8934:8944 ioctl 4c05 20000240 returned -22 [ 214.042384] binder: BINDER_SET_CONTEXT_MGR already set [ 214.042393] binder: 8951:8954 ioctl 40046207 0 returned -16 [ 214.042730] binder_alloc: 8934: binder_alloc_buf, no vma [ 214.042749] binder: 8951:8954 transaction failed 29189/-3, size 80-24 line 3284 [ 214.055381] binder: BINDER_SET_CONTEXT_MGR already set [ 214.055389] binder: 8951:8957 ioctl 40046207 0 returned -16 [ 214.220473] binder: undelivered TRANSACTION_ERROR: 29189 12:30:16 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000040)=0x2) ftruncate(r0, 0xffff) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x14102e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800002, 0x11, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0) r3 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x32, 0x6, 0xf, 0x6, 0x4, 0x0, 0x15b}}) sendfile(r2, r3, &(0x7f0000000140), 0x8fff) 12:30:16 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="8561e466000000000110000000150000000000000077e932be65236daffdf5852a62778bfeffffff000000000000000029f00000000000852a74740100"/74, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/73], @ANYBLOB="000000000000000081000000000000000700000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x331, 0x0, 0x0}) 12:30:16 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x30, 0x1, 0x6c226efd9fcb0410, 0x1, 0xfffffffa, 0x4, 0x1f, 0x81c8}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r2, 0xfae71e5936326fae) epoll_wait(r2, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x1f) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r4, 0xfae71e5936326fae) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000300)=0x9, 0x4) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r5, 0xfae71e5936326fae) ioctl$VT_ACTIVATE(r5, 0x5606, 0x1) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000100)={'lo\x00', {0x2, 0x4e23, @broadcast}}) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) timer_create(0x2, 0x0, &(0x7f0000000540)=0x0) timer_settime(r6, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(r6, 0x1, &(0x7f0000000240)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000400)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') 12:30:16 executing program 0: clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRESOCT, @ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb82ee4510100010029a741efca44f937d0492482ba837296d961244e2e0c734057548c40", @ANYRESHEX], 0x0, 0x15e}, 0x20) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0xc) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x82100, 0x0) recvfrom$unix(r2, &(0x7f0000000200)=""/11, 0xb, 0x20000, 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r3, 0xfae71e5936326fae) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r4, 0xfae71e5936326fae) r5 = fcntl$dupfd(r3, 0x406, r4) ioctl$EVIOCSKEYCODE(r5, 0x40084504, &(0x7f0000000400)=[0x7, 0xffffffff]) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000000040)={{0x1, 0x0, @identifier="210f1eea12947eb07cd487e09b642944"}}) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 214.621651] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 214.630406] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. 12:30:16 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0xffffffffffffff45, 0xff, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0x6}, 0x4480, 0x0, 0x10}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) ptrace$cont(0x7, r3, 0xb70, 0x9) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000003100)={0x0, 0xfffffffffffffffa}) close(r0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00 \x00', 0x10) 12:30:16 executing program 2: ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000000)={'tunl0\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001880)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000001700)=0xfffffffffffffd47) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r1}) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x18, r1, 0x1, 0x5, 0x6, @link_local}, 0x14) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'irlan0\x00', 0x200}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) write$binfmt_aout(r3, &(0x7f00000002c0)={{0xcc, 0x33, 0x3f, 0x2b3, 0x343, 0x7ff, 0x17e, 0x6}, "ef996da9fd286ae89a1ed419d3a4ec0efb862bcb835428aadabdcdc9c9936ac88c1c4d02baca3628e593dc8ff50a7e", [[], [], [], [], [], [], [], []]}, 0x84f) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_timeval(r4, 0x1, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={@multicast2, @broadcast}, 0xc) 12:30:16 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.Ccgroup/sy\xbd4\x00', 0x200002, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180)=0x74000000, 0x5) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f00000001c0)={0x7, 0x1, 0x8, 0x5, 0x14, 0x0, 0x7, 0x6, 0xcaae, 0x1, 0x7f, 0x9}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000100)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) 12:30:16 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 12:30:16 executing program 3: init_module(&(0x7f0000000600)='cgroup.events\x00', 0xe, &(0x7f0000000640)='\x00') read$eventfd(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open$cgroup(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000500)={'vxcan1\x00', {0x2, 0x0, @multicast1}}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = openat$cgroup_ro(r0, &(0x7f0000000400)='cgroup.events\x00', 0x0, 0x0) write$P9_RCREATE(r4, &(0x7f0000000540)={0x18, 0x73, 0x2, {{0x20, 0x4, 0x8}, 0x7}}, 0x18) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x31}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x2, r5}]]}}}]}, 0x40}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1b, r5}) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x280000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r6, 0x0, 0xffffffffffffffca, 0x280007fd, &(0x7f0000001040)={0x2, 0x4e21, @remote}, 0x10) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r7, 0xfae71e5936326fae) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r8, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffa}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfcb}]}, 0x38}, 0x1, 0x0, 0x0, 0x8}, 0x40000) sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80010}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, r8, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4040011) r9 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ioctl$FS_IOC_FIEMAP(r9, 0xc020660b, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000feffff0069a3b71b5c"]) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r9, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xca00000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r10, 0x8, 0x70bd29, 0x25dfdbfd, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}}, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="01000009810100000d01000000000000000000000000000000000000000000008b15b25419b1f9e057198c1b94921e6eea5e6c012de335c6e3dc404862240695492d9f4d0b9ac90ca92d9f99d88e7bc70cdb7cb78d1a5cb5811ac651119650c94fc3251dbbffc093422c4d16797ee70ddd43798de1b9b36b15f6607d38576e39e6918b50828ad435381af64a6461e6a002d59ae8fcb882d0bae037a30a77394a6db4431a886088548395d0aa0007698953e41f7aff2a68df9581b509cef609b32fe878c1f352d739ef"], 0xc9) recvmsg(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) 12:30:16 executing program 2: ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000000)={'tunl0\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001880)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000001700)=0xfffffffffffffd47) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r1}) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x18, r1, 0x1, 0x5, 0x6, @link_local}, 0x14) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'irlan0\x00', 0x200}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) write$binfmt_aout(r3, &(0x7f00000002c0)={{0xcc, 0x33, 0x3f, 0x2b3, 0x343, 0x7ff, 0x17e, 0x6}, "ef996da9fd286ae89a1ed419d3a4ec0efb862bcb835428aadabdcdc9c9936ac88c1c4d02baca3628e593dc8ff50a7e", [[], [], [], [], [], [], [], []]}, 0x84f) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_timeval(r4, 0x1, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={@multicast2, @broadcast}, 0xc) [ 215.203502] binder: 9002:9003 got transaction with invalid parent offset or type [ 215.211435] binder: 9002:9003 transaction failed 29201/-22, size 80-24 line 3454 [ 215.238137] IPv6: sit1: Disabled Multicast RS 12:30:16 executing program 1: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0xdd86) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'ip6tnl0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) socketpair(0x1, 0x6, 0xc, &(0x7f0000000080)) sendmmsg$inet(r0, &(0x7f0000000bc0), 0x400000000000350, 0x0) [ 215.280712] binder: undelivered TRANSACTION_ERROR: 29201 12:30:16 executing program 3: lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x2080, 0x0) fsetxattr$trusted_overlay_opaque(r1, &(0x7f00000001c0)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x20, 0x0, 0x7, {[@rr={0x7, 0xf, 0x4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @empty]}]}}}], 0x20}}], 0x1, 0x0) 12:30:16 executing program 3: ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, 0x0) unshare(0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)='/dev/loop#\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='-'}], 0x1, 0x81806) sendfile(r0, r1, 0x0, 0x20000102000007) 12:30:16 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB="852a62730000000002000000000000000000000000000000852a627700"/64], @ANYPTR64], 0x0, 0x0, 0x0}) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r3, 0xfae71e5936326fae) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000280)=0xfffffffffffffff6) setuid(r5) r6 = getegid() fchownat(r3, &(0x7f0000000040)='./file0\x00', r5, r6, 0x100) write$selinux_load(r2, &(0x7f0000000440)={0xf97cff8c, 0x8, 'SE Linux', "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"}, 0x1010) 12:30:17 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x30, 0x1, 0x6c226efd9fcb0410, 0x1, 0xfffffffa, 0x4, 0x1f, 0x81c8}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r2, 0xfae71e5936326fae) epoll_wait(r2, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x1f) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r4, 0xfae71e5936326fae) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000300)=0x9, 0x4) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r5, 0xfae71e5936326fae) ioctl$VT_ACTIVATE(r5, 0x5606, 0x1) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000100)={'lo\x00', {0x2, 0x4e23, @broadcast}}) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) timer_create(0x2, 0x0, &(0x7f0000000540)=0x0) timer_settime(r6, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(r6, 0x1, &(0x7f0000000240)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000400)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') [ 215.453241] binder: 9031:9032 got transaction with invalid offsets ptr [ 215.460216] binder: 9031:9032 transaction failed 29201/-14, size 80-24 line 3330 [ 215.485589] SELinux: policydb version -395053141 does not match my version range 15-30 [ 215.494912] binder: undelivered TRANSACTION_ERROR: 29201 12:30:19 executing program 2: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x12, 0x81, 0x5, 0x14, 0x0, 0x70bd29, 0x25dfdbfb, [@sadb_x_nat_t_port={0x1, 0x0, 0x4e24}, @sadb_x_filter={0x5, 0x1a, @in6=@mcast2, @in6=@mcast1, 0x5, 0x10, 0x4}, @sadb_sa={0x2, 0x1, 0x4d6, 0x8, 0x3f, 0x39, 0x2, 0x20000000}, @sadb_sa={0x2, 0x1, 0x4d2, 0x4, 0x5, 0x36, 0x2, 0x40000001}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0xbd2a, {0x6, 0x3c, 0x4, 0x7f, 0x0, 0x400, 0x0, @in=@multicast2, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}}]}, 0xa0}}, 0x181) ptrace$cont(0x7, r0, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw\x00') r3 = socket$netlink(0x10, 0x3, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$int_out(r3, 0x3, &(0x7f0000000000)) 12:30:19 executing program 3: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r0, 0xfae71e5936326fae) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080), 0x10) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x0, 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$P9_RSYMLINK(r2, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x0, 0x1, 0x6}}, 0x14) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x35b2, 0xe0b7}) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) fallocate(r2, 0x4000000000000010, 0x0, 0x7fff) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r5, 0x0, 0x8400fffffffa) creat(&(0x7f0000000000)='./bus\x00', 0x0) 12:30:19 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$user(0x0, &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$instantiate(0xc, r1, 0x0, 0x0, 0xfffffffffffffffb) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f0000000240)=0x1) fstat(r0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) prctl$PR_GET_TIMERSLACK(0x1e) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) socket$packet(0x11, 0x0, 0x300) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r4, 0xfae71e5936326fae) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000100)=0x8) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r5, 0xfae71e5936326fae) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000000)) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x4a0080, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000200)={{0xffffffffffffffff, 0x1, 0x101, 0x0, 0x101}}) 12:30:19 executing program 5: syz_open_procfs(0x0, &(0x7f0000000100)='fd/\x902\xfb\xdf\x03\x8b\xf1\xd8}\x93n\xb7') r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0xfffffffffffffffc) r1 = open(0x0, 0x141042, 0x0) ftruncate(r1, 0x9) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000500)={0x88, @empty, 0x4e20, 0x1, 'dh\x00', 0x0, 0x4}, 0x2c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) creat(0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="7f455a0400000000000000cfe2c7359322013df4b7b47ef26674ba32110052f248636f068dca070042602b00006885b0683130abebff9336b9158829aaf5f09958b5de43694cb1c70b1919e0b016210a4de06ea2de9478d86fd1b2a5"], 0x5c) fsetxattr$security_capability(r0, &(0x7f0000000000)='security.capability\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0xa198) pselect6(0x40, &(0x7f0000000140)={0x200, 0x100000000, 0x400, 0xed7a, 0x58d1, 0x9, 0x0, 0x3}, &(0x7f0000000200)={0x0, 0x1f, 0x10000000000, 0x1, 0x100, 0x7, 0x10000, 0x4}, 0x0, &(0x7f0000000280)={0x77359400}, &(0x7f0000000300)={0x0}) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4010, r3, 0x0) dup(0xffffffffffffffff) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) r4 = signalfd(r3, &(0x7f0000000000)={0x7}, 0x8) finit_module(r4, 0x0, 0x2) setxattr(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)=@random={'user.', 'wlan0wlan0systemkeyring\x00'}, &(0x7f0000000340)='fd/\x902\xfb\xdf\x03\x8b\xf1\xd8}\x93n\xb7', 0xf, 0x0) 12:30:19 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r3, 0xfae71e5936326fae) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4c, 0x0, &(0x7f0000000000)=[@increfs, @clear_death, @release={0x40046306, 0x2}, @enter_looper, @dead_binder_done, @free_buffer={0x40086303, r1}, @acquire={0x40046305, 0x2}, @release={0x40046306, 0x3}], 0x8b, 0x0, &(0x7f0000000240)="4e37a380157e05d2ef0122a72a67d863d1db561292f0c0c4ebefeff9e00f11c45dbc7b1d3a3fdea0968e25a6c4b7cc17fab445e82ee8f9598e45026bf67efa58c1fbe41339fbcb3d18d705f8faea03c131d78d127ec69a20f274b74f5dc3184caeed6162bac98d4a0c95442fd4b73ed1942310340a728c4960759b3d2d87393df4d4b4f2b75413c7b1f83f"}) 12:30:19 executing program 1: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r0, 0xfae71e5936326fae) ioctl$int_in(r0, 0xcaf5ec7d36cbcc0a, &(0x7f0000000080)=0x1) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0xffffffffffffffa0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x3c, 0x12, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x11, 0x12, @bond={{0x3, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0xa}]}}}]}, 0x3c}}, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000040)={0x16, 0x1000, &(0x7f0000000600)="2efbc6c2c05f0a24dccf67f2cfc00847c0c501871eb0fc570800f0d2b36c3c3a8ecd24121b2e240560e8e568e555dda4c737bf2e734317bfccfd277e86acda180f39e6df9eb6b49ad3fa31040362a45d715585a495d56d0921226bb356f00192f62d09c392f16b8bd68bd7a026e30107521f5b3d762a3269965351156f18fa827a55d16ce31b52d23468836fd441266721aac66df3ae80710844662357fb2082605e66f76011059af48b081361ebc3caf62b6db2768d79290d1cacd359b978e2bf7902743cd7c66870302f22d78f24d261eb1a3011bed56eef410021a602f2997599521dc28bdb34f1a1c0b489775530cf1c3312ad85f8f836afd473e6f55f9b8cbde0a52ebd34425b451215365dbfe96314b3b960e65d20cb4dc2765a19c750de29cc4e485a2f0ff1452d2dc54f5325abba023cc04c3b1bb39598beb24d66feace6122301e4c0ab76783c989e2c3b61785ba43af89c8b45853ea9805d965b8372d8f5fba24d932a6777df1775a92a936fe3228eda859282f701cb5fb06ff99c584006885ffbd3ccb207a368c8b705c49d1a179cb4d54bd349142afd3deda1702ea6c287bb266736c037818705fafed23a8b7b845739062117c7529248877049992e921b47738f3630e7a8fc8cdf24959addb2d9051f6e4216ecd96d0edb0e72875bd3f6c8f147d23d67a7134f862178d425a37eba7f63f67d50322bed8a0821634376a3eed2ad1ebf930092fa73db037ff905070501af942d35e33984289d839a5e97c6c61318eade26f34e755a2a2e20c73878f662620fa658eeb016ef092da7b344ec5d51c3b95c5e17033a477ffbae6c536ba9e47dcf9634a5660acd216a5d3e1e649a02c16714ed31794165de1c49735f14ac9fa49b2a584a9283b1e4b96093f53dbcff8bf26bdc6ab1b58e14c1d3176f79cc76ba9fc9d9862915a3cf14fe83fab553696f1ecd7b182d60e14b13c6b34b585c293088582bebd778078df500444e0d75c2c4dcadee677875498fc268f56b084579dd258981fc181487629eea6c4995f458f1a2ab9a5caeaf35432f1c4ec8c6a449634f17a48aff0f700982d73a1c038fbf1a578185649317b054ff4cd0f6ec3068fbba3b6c67594c73569b7c826e41decb691fc55d58bbc8a8faff6fb58ea8849b81082bdf48995168f49fc872e5fb04d19653b0660c78286b20d94adbc6f1725549fa6831d2fef999e30cb88e128128dd27d814a849dbc4cab7857e10f87f4bf7228db4d6648c9208b6bc4515c2a86edcaf95e1588510e2d6d78f7362cfb589f81a3e88039b1dfe1b8cc0a7e53b705d8c223018067224565105476fa2bdf252dfaef55d76fc76c4bc65bdebbbafeea5ef53980038426081a29afcd822d229930744bbde794d18e76ee5e7026f7eca0318468f2d2deac5cf194cffb90109fe6b3f2b3bb7d598999c51a572d6dfd584ed0b802387982b90f90e43430d52bf733c96e1311fd318ac1b87faee2edeeb3d60bf9e2ba2e368f4397008f1792e5b74614c0e800c9eca6797d71a825a42ab579acc6ebf6fd3f3982073e1c8c56bf19f7b68c713a4e292f903318c841cc07eb5c41f74098e69c4cc72d49c6206bd951783d772550ef8e1cd04614d52e315d6be9264e201b3a825d9e6bd37d6847e8eb80bd0eb55eed0089bffec047e42b84f2c074db1779da007d5647e173a2cfa50e455db5cb965bd6c7cf277bb62868e0758f51347c2e38ff03ddca2d9ae304bcf5c8d4a8b7ef04acbc512655cfb90cd5f8f281efaaf98482a02a6fb2fb9ff72e94a41beb80f69b356ff689e2d4a83b3b75d67db5ef8b6d003f87be7646c26213731ae1e94d84e7270a397870343885c60343601728e20874c8ef6aa4962e399e631b73ee528ad9efc7c7c9c0ff25dc3c34fcc52eeb91a684d7a9cdb0737d023094fa1fe1b8663fad302082af6b802e16f815f95c049990875a9a95831d95512adaf1dc0daaf75f6c3103fc87019e574ff73e3edf737b267b4aa76ff60bc0771be5b5a146c0ee0fb427741da5dff496979938aa2249bbcfa48310720c54e5a09aac18250481aa86f9f006f478bd0c83f7c79c27db37161ae993047a9fc39727e0e534f18a0fc99471b8346925f1ec4f3f43e383de06cd7765aad9ce9f5d05e6083e987435d83b33365291e33bcd79e3ae247d764eed116dbd8ad506de59ded41a5093c15d0bb6fb346c7b5e1a45028d60fdd2101b6951191d2f2463284db665a86f33c7abc51076d9f34fddc924cd26164ea4afdce13559763cb96c89bc8f467c12e8ef88da68fb302e9cc424ddd16a5a7f75b2121a31f8f8acc104b6d030bc255ac1740c6df1db1b59130a3465fb7404f0d6fbbec7c93ddebfc8147b9e94740e860c0f16d04d67dce4b829081baffb2c95927c9d3dce2d39363ea22a2226a3a09f4fb51b5c87e4ef34b6294a5e10fd9be6ee0f75ad6836c3b12d50ca9918e5e57005035d2c26a437c9d9294fbe04f493da0b8321954a5be2001407d68e39d53abff0e2492ce3de0125a99a0683888ad8d8b3739bbfa24bb09c9a7366ee8d2ef1f3722341d548e8258ca250bd06c2cf4999a1d84d8b44a5ff023698e8fd59cf7329d27ad80a6e0dc56e458a32e14a9c6eaae12372a55993270462f2c9591bebbaca6a8030d37c6ac97cb6ac4121f7cacc4290aecf0447692ac7dd031ae74ff4ed75515effa701590332254138ff5606bf68bad8acfe6666940ab3b7a062af89e72064c55e3991a8f5a6798903a17ac0b8fb5b3aeab886c23f86b2789c752dd08016a57434f37d6b5d59c8de0dba504dabc6889bb9b4fd0f4f79da3936dfaf3bc88db2ebba6cfcd467d7bda46258e058dd13aed486c85291eeef29df25102510ea498b52440f94fe73562dc9e7db14d16e635a133bf4ec88511197b5eefc241326e10db7f536369c3bc7811320636284e68e1b4d6a57f0227b3a074224542ea3a48e9b2be8071fb65e237b5c8ad54c890366bda071a581d3b8af3ce4d738c742daf71f26fbade88ff5b8f79ec0434cca102840b97d423139e59e7395061ff6021b6003fdba860f7bd59615f7481d64a0e2bf957cb850b01e7827a55d8eff550e65f330669dbd654069d3d88cdc6d88c5d89bc031a6839317e5bf02f34592f7e6e3a1ead40543a3b6f0cc4ae7566def785ff5c8b79e66ec76182e6e7fbe4e6675a86d3a9509bb80186852841eaf2253b42caf7971a373aacb843fec2942f6dcfeeee912c5a4c4302f86a70831fad50b51b68cb61890023cde34b20847ec0e8ec570be28757fb3e9dbcd173ad2040fe9b00a14f073656d7d0a4d59284bbc494947f4eb81687980fc27ec546357002948b27da001bcc1225301b6723b51eac4aa7748f458f6dd557382f9523943785fb3902b8e7abad6ade9991c903c6e8d5d623ebd824b829eb62a66c697ef309bc8ef4f9bcd485178ff3bfe8e0c3efee4a1dce7dac52a6d87265e758ccda1d83ed98bb3a95726a31bf7409c54ccd6a1d5f8594380331bf10522ee5c84ac5b54253d5dc4297440b9d85cbcce7edddf55ce9652ccfdb154c85e9fbfffa84d6f976f145525ee5335d783701214131c1a24814eac4ad49164c7bb452c90720db8efdacdb785fa3a140d7e2b867fb6491f94b718b59b685bf0fb1c0d7d8a380d9015f24c5c2a8bf959d22a7cc32945a75061b1a33ba24dccf0aae05231e4d1fb0d8aa49c92266b93b00830cc22eb0716338867354a230bf8f255cc5620d667d43c132d0fa608ea931784fbb9edd4948118283fac62ea8129466fe11d3a25509da36cc1ffd258bcd8dfa5da8ee895a0cdda0384ca6c83de26f9205888a58a21f968b9c4312ae04e9865ac1308fa0714b9b28901062c56bac87e2250f47746455c6b96e512b2696bc0fc8943465cd3fb083151742b4f79243d61fb3fe7d8826494c527733347457c832e0d190eae38175d9afe86c412bb291ec9d394e8c08be7eba8e6921a0484d6a4d30b4b4e6d024f85010e72d2a49b37e50e295111e2874bf12076029691059121038f51f88385a8967d4e5468c1f487c68e538daa852b7bc9c5ff8405676851c73ea42e8b2dc614ce245071719b710f8e6964dc70fbb9820f482e6d7286f0afb2118267f9346598602c2821abd516b703188738d585baebdf531c28196c6cff719cabcd6e27877e88e95fa61b37c7344e415936d6a6c4fa0414da3ccd8cea33dfe3ca42bb9a5c0c6d4b438e7eb863d4979f32f1969be3695e0d2ad8c49647e5257344c03a9d93d671baf8e447417ffbb7438b4f6dad136bda38dd1a536adb366c8eeaea7bd6568e9383b9c9502b220aa6f0b53377843b05c925d9c81277cc024fc1d5cae5751558ce8d7eeeeb5d94b7e2a5e83e39aae1ae9ad9264bc0a6de1f889ee6760dd061551b56ff1c65638eb6e5f9622f11e83bd3183dec52b99ea057cdae01d3afce984785fe474e30503bf9b69ef9f94b1b9fc3ddae0f1e390785bb139bd79052f0a202a1a3ff47131def4ca0bd2d9fd5836c6328762e747dd6510010d532f40bfedb623c3114cf63cbaa29f02c7cfe0f4309827c038dfc3831a36af456821569b1bdeb2d8c7c0f76f088e33635b0207381f2304880785324879306fc2c8afcef6b207471863cc74bbf17612b956461fa5fee3179de7ce8c6a00e58cb6d2e0a28034dd145edbda786d749023f9ce7638ff6085fe75d57eaf43079ba704303be2d7ea8f4b84236dfe4792284807212da422bca61c4557291a144b955b47be92e8b1d95e9effc4d518b39db1b7173dece4e8044f61a42da3253aae001e4f30260dd5a0f897e06c4a07564b7cf119132fa943bb683e07c805152b526e0ccc1ea48564d6b24c4ec20e1c2d43f6ab93cece972ea3ca32317a695d828af1050300f26236b3bf2d066da8736726e279e6462ed89277aa5283bc51a26cc1d6168a45b081bc567c7a6dc750f87b93121c46922f3111343bd235bf9fe8667a04af4c89da954d91a525c60a224283b4e961f73556082aa56ffc79dae5623b8ae990dc762c28971de671ac97498208dd44c9a14a3f4b0fd0d41f6101a7b24611b18e5f9df92fdec0265ab3adbc69368150159b344aa4a10e7f6f1e31afb763c5e57f7d5324d67d5f24c2cbd49b9e3213070a93fcb56cbae797012bd06a0cc567037aa5c6e4aa4a51ed879d40c2a5d85b587029a2679e5086fc8af47ded72831770780e76c187fa98475016f6b6baee77d1986a4f013e347fc05fdfb27f188a0e3b809afb2fac9e43f580a22340bf966ef9509b25f211e5f3e4420ccc98415e6ca2bc5a03812bc117ef0937f7a056a62c5d400529d9613bb893575b5eabe071d7454bdabf985f3c325e55122930d0c75b440f81268633cb13c42d88ae5200a894b5f7b5277616f6e0c9330ec5d1221dde2aec58ac5620582f45a7aa8b5bcc9c3f8d8a31c3a0da66ed82ade722f917bad44415e961a4324f02c4ae6138df05e366f013dd4a034057a85697d2eaa66aa8dad89ed5c373cad56076c1aa9960069e17a0bddc749e36a198fcf6dd0548d780568bfd491cffe40acf4f625d1bef06ac74025ca165853f89dfd180ad627c3505ac5f77993b1ae343a1b48ca73f10cb0683d21957fc38b318921dbf24b4ca33b53bc653bd87e018b1eda599ad45487b6d978c4981c132c8b1dd8bc5ae57d4ef8ddb5dbbcf8aadc4e62956f7d13c0ccca91439295eaaaf3e38ee05e1196a7ad8246783d91aa957c603066490d07b87b25bb96048107488bde68b41ca9b3022b9268a0e9b3ee400088da0334cf05f683de4"}) 12:30:19 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000240)='h', 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xa5776b) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 12:30:19 executing program 1: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r3, 0xfae71e5936326fae) write$UHID_SET_REPORT_REPLY(r3, &(0x7f0000000100)={0xe, 0x9, 0x0, 0x1, 0xb1, "2935731194df6e2738d7b5c4d396f99a0b7e35c71fbdc4a690ac4b8ccc8940cdba730f6379277087ed839f7b627940537b1552a685c16756d229317d9939d60c30eb4199cfc12316adbf4ed124787c37606a2c201543b2d04d641ae801a56dfa57258410521af899ecc6e9bbab69bc67abff8b17e131baca9a85a1c48b0479689e18f2fa713e7a8e12a19dec3bd638f9f6a2eb18de651d2fbfef2c93c6c31941157ea2b01e4fdcec156d3afb73a07e1720"}, 0xbd) close(r2) write$cgroup_int(r1, &(0x7f00000000c0), 0x12) r4 = memfd_create(&(0x7f0000000240)='oom_score_adj\x00', 0xea5af469e0226336) dup2(r4, r3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000280)={0x30, 0x5, 0x0, {0x0, 0x2, 0x8, 0x6}}, 0x30) [ 217.676855] binder: 9050:9056 got transaction with invalid parent offset or type [ 217.678415] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 12:30:19 executing program 3: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) setpgid(r0, r1) add_key(0x0, &(0x7f0000000580)={'syz', 0x1}, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r2, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f00000001c0)=0xc) ioprio_get$uid(0x3, r5) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r7, 0xfae71e5936326fae) dup(r7) r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r8, 0xfae71e5936326fae) ioctl$TIOCLINUX4(r8, 0x541c, &(0x7f0000000340)) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) sendto$inet(r6, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r6, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000080)) 12:30:19 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4) r2 = socket$inet6(0xa, 0x801, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xc0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="60020045", @ANYRES16=r4, @ANYBLOB="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"], 0x260}, 0x1, 0x0, 0x0, 0x8000}, 0x200000c2) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r5 = dup(r2) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x24000008, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000200)='./file1\x00', 0x11000016b042, 0x100) ftruncate(r6, 0x10099b7) sendfile(r5, r6, 0x0, 0x88000fbfffffa) [ 217.700316] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 217.784725] binder: 9050:9056 transaction failed 29201/-22, size 80-24 line 3454 12:30:19 executing program 4: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r2, 0xfae71e5936326fae) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) getpriority(0x2, r3) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0xff02, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB="852a62730000000002000000000000000000000000000001802a62770000000000000000000000000000000000000000856164660000000002000000000000000300"/80], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 217.812113] binder: undelivered TRANSACTION_ERROR: 29201 [ 217.817744] binder: BINDER_SET_CONTEXT_MGR already set 12:30:19 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x800000000000) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x158) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x2081fc) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x20000) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xf642e7e) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0xc9, 0x10}, 0xc) ioctl$void(r3, 0xc0045878) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f0000000140)='./bus\x00', 0x141000, 0x0) r6 = creat(&(0x7f0000000300)='./file0\x00', 0x40) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r7, 0xfae71e5936326fae) close(r7) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000200)={0x0, r6}) write$P9_RSETATTR(r6, &(0x7f0000000000)={0x7}, 0x7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r8, 0xfae71e5936326fae) setsockopt$IP_VS_SO_SET_TIMEOUT(r8, 0x0, 0x48a, &(0x7f00000000c0)={0x0, 0x4c01ac3c, 0x9}, 0xc) 12:30:19 executing program 4: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r0, 0xfae71e5936326fae) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0xc) syz_open_procfs(r1, &(0x7f00000002c0)='mountstats\x00') r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1f865899ee886576, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@handle={0x73682a85, 0x100, 0x2}, @flat=@weak_binder, @fda={0x66646185, 0x6}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r4, 0xfae71e5936326fae) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x7, 0x4, 0x548, 0x0, 0x248, 0x0, 0x460, 0x460, 0x460, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x130}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "170879aa4f3130ffc9bcb3d26c74df9feb0a0c1820cb3a76c01b4161599d"}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x7f8000ff, @mac, {[0x0, 0x0, 0x0, 0x0, 0x91152b7d66f7f437]}, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0x0, 0x0, 0xff, 0xff, 0x0, 0x1fe]}, 0xff, 0x400, 0xe36, 0x800, 0x8001, 0x1000, 'veth1_to_bridge\x00', 'yam0\x00', {}, {}, 0x0, 0x2}, 0xf0, 0x118}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x5, 0x4}}}, {{@uncond, 0xf0, 0x218}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x8, 'system_u:object_r:lost_found_t:s0\x00'}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x598) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x8000, 0x0) ioctl$sock_SIOCBRADDBR(r5, 0x89a0, &(0x7f0000000100)='veth1_to_team\x00') [ 217.817754] binder: 9050:9063 ioctl 40046207 0 returned -16 [ 217.864596] binder: BINDER_SET_CONTEXT_MGR already set [ 217.864604] binder: 9074:9076 ioctl 40046207 0 returned -16 [ 217.865587] binder_alloc: 9050: binder_alloc_buf, no vma [ 217.865607] binder: 9074:9076 transaction failed 29189/-3, size 80-24 line 3284 [ 217.876324] binder: BINDER_SET_CONTEXT_MGR already set [ 217.876332] binder: 9074:9079 ioctl 40046207 0 returned -16 [ 217.877005] binder_alloc: 9050: binder_alloc_buf, no vma [ 217.877027] binder: 9074:9079 transaction failed 29189/-3, size 80-24 line 3284 [ 217.924076] binder: BINDER_SET_CONTEXT_MGR already set [ 217.924085] binder: 9084:9086 ioctl 40046207 0 returned -16 [ 217.924747] binder_alloc: 9050: binder_alloc_buf, no vma [ 217.924767] binder: 9084:9086 transaction failed 29189/-3, size 80-24 line 3284 [ 217.943280] binder: BINDER_SET_CONTEXT_MGR already set [ 217.943289] binder: 9084:9086 ioctl 40046207 0 returned -16 [ 217.943550] binder_alloc: 9050: binder_alloc_buf, no vma [ 217.943570] binder: 9084:9086 transaction failed 29189/-3, size 80-24 line 3284 [ 218.151248] binder: undelivered TRANSACTION_ERROR: 29189 [ 218.162872] binder: undelivered TRANSACTION_ERROR: 29189 [ 218.168937] binder: undelivered TRANSACTION_ERROR: 29189 [ 218.174660] binder: undelivered TRANSACTION_ERROR: 29189 12:30:19 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r2, 0xfae71e5936326fae) dup2(r1, r2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r4, 0xfae71e5936326fae) accept$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000800000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB="852a68670b00ffffff7f0000000000000000000000000000852a62770000000001000000000000000000000000000000856179f061eb6466000000000400"/80], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 12:30:19 executing program 5: r0 = syz_open_dev$binderN(0x0, 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="578ffac58e3c5a28282c2991aa00010000000000006092e1e9d0e4441fc7d3cf3bb6"], 0x0, 0x0, 0x0}) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) write$P9_RVERSION(r1, &(0x7f0000000140)={0x15, 0x65, 0xffff, 0x5, 0x8, '9P2000.L'}, 0x15) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x101000, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) clone(0x2000, &(0x7f0000000b00)="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", 0x0, &(0x7f0000000400), 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 12:30:19 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000380)='\x00h\x00\x00\x00\xac\xd9\x00', 0x0, 0x404182) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(r0, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) ioctl$TIOCSSERIAL(r3, 0x541f, &(0x7f0000000200)={0x9, 0x2, 0x8, 0x10000, 0x1, 0x3ff, 0x0, 0x0, 0x8, 0x43, 0x2, 0x8, 0x7, 0x800, &(0x7f0000000180)=""/113, 0x6b5e, 0x1215, 0x1}) r4 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="421bccd3d2bb03000000148c0f34"], 0xe}}, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x40020000000c) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {}, {}, @cond=[{}, {0x0, 0x0, 0x0, 0x40}]}) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r5, 0x3, 0xfffffffffffffffc) 12:30:19 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f00000000c0)={0x3, 0x0, {0x56, 0x8, 0xfffd, {0x200, 0x100}, {0x5, 0x80}, @const={0x8, {0x4, 0x8, 0x3, 0x2}}}, {0x53, 0xff, 0xfa8e, {0x0, 0x800}, {0x8, 0x3ff}, @period={0x59, 0x3, 0x4000, 0x20, 0x1e, {0x9, 0x800, 0x4, 0xfcae}, 0x3, &(0x7f0000000000)=[0x9, 0x401, 0x1ff]}}}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000240)=""/190, 0xbe) 12:30:19 executing program 0: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080), 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x2, &(0x7f00000004c0)) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0xa) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='trusted.overlay.upper\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="00fbf403016b75fce5a1b8dc3d9999c74106e9468b3e50328abd8e6bc5b98e6fec523124312ff97defe37033b3182ce84de526b572d833037905cb8fa2625e18346f7c5bdef95d1ad3cdde1a75690c110d648d5160d33af298cf1b5c523092aa7af5b84315b3ec2966212fb16a08c22ac20f886fbecf6cf6507e495d99c4c2dccbed990b8c86aae69250acdfdd397ff135b124be24b60b455540d0c27ce414071ee98f080944b07489d6e360d945587b4ad9633fb17003005e64be97753e304fe1ab0ed32a47447b1c4685d1dbb7ea25ac5deba164376491f0d780af3d83835ab93ba36d6e4bc84c9f45172278dd47de6a77765f"], 0xf4, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r2, &(0x7f0000000200)=""/39, 0x27, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0xfffffffffffffe5d, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x40) [ 218.389239] binder: 9095:9098 got transaction to invalid handle [ 218.395340] binder: 9095:9098 transaction failed 29201/-22, size 80-24 line 3138 [ 218.424754] binder: undelivered TRANSACTION_ERROR: 29201 12:30:20 executing program 1: open(&(0x7f0000000200)='./file0\x00', 0x40, 0x60) socketpair(0x11, 0x1, 0x7, &(0x7f0000000000)) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x20032600) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000004c0)={'nat\x00', 0x680, [{}, {}, {}, {}, {}]}, 0xfffffffffffffdd7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f00000001c0)) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000180)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x20032600) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000240)={0x77, 0x3, 0x1000, 0x80}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140), 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 218.487436] binder: 9112:9114 got transaction with invalid parent offset or type [ 218.504736] binder: 9112:9114 transaction failed 29201/-22, size 80-24 line 3454 [ 218.525263] binder: undelivered TRANSACTION_ERROR: 29201 12:30:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r0, 0xa, 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000b2c000)=[{r1}], 0x1, 0xffffffffffbffff8) r4 = getpgrp(0x0) r5 = dup2(r0, r1) fcntl$setown(r5, 0x8, r4) timer_create(0x0, &(0x7f0000044000)={0x0, 0x14}, &(0x7f0000044000)) r6 = socket$unix(0x1, 0x5, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r10 = socket(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r10, 0x890c, &(0x7f00000034c0)={@local, @mcast2, @empty, 0x0, 0x40, 0x0, 0x100, 0x0, 0x206}) sendmsg$key(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x2, 0x0, 0x6a8, 0x7, 0x7, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_lifetime={0x4, 0x4, 0xffffffffffff95d7, 0x47, 0x5, 0x7fff}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e21}]}, 0x38}}, 0x1) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000640), &(0x7f0000000680)=0x8) sendmsg$TIPC_NL_MEDIA_GET(r10, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20100}, 0xc, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="300400000ff8dc3b0b1992623a02e942a7880c8258bfbb3842979088d7fe134455c1e8e45625205304410bb96ca08ddd01004dd1c1cde925561d99faf3e35f52836e72aaced47b97d0c2ff77e441f11851922e4aa4f2f1369cda928e0eef46d3dbd58399a04e15d5ade896cf2365fea1fb43c62c314e00"/128, @ANYRES16=r11, @ANYBLOB="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"], 0x430}, 0x1, 0x0, 0x0, 0x44}, 0xbd96b9f073d96152) sendmsg$TIPC_NL_MON_GET(r9, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800010}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="100029bd7000fddbdf251200000010000600040002000800010008000000300005002c000200080001001a00000008000400feffffff080004084b0a0000080001001d00000008ff0000ffff0000"], 0x54}, 0x1, 0x0, 0x0, 0x440008c0}, 0x42) sendmsg$TIPC_NL_LINK_RESET_STATS(r8, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="f8020000", @ANYRES16=r11, @ANYBLOB="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"/766], 0x2f8}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2892}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r11, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x70, 0x5, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3e12}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$TIPC_NL_LINK_RESET_STATS(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xac6e283feacdb6eb}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf8, r11, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x88, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcad9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xfb7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x712d25fc570d247d}, 0x20000080) listen(r6, 0x0) accept4(r6, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 12:30:20 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r2, 0xfae71e5936326fae) ioctl$BLKIOOPT(r2, 0x1279, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r3, 0xfae71e5936326fae) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syzkaller0\x00', 0x10) 12:30:20 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) accept$inet(r1, 0x0, &(0x7f0000000040)) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x24043104, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000480), 0xffffffffffffff39, 0x0, 0x0, 0x150) [ 218.555187] device lo left promiscuous mode [ 218.624419] binder: 9123:9128 got transaction with invalid parent offset or type [ 218.648375] binder: 9123:9128 transaction failed 29201/-22, size 80-24 line 3454 12:30:20 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x100, 0x0) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000040)) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/access\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 218.669891] binder: undelivered TRANSACTION_ERROR: 29201 [ 218.682345] binder: 9123:9128 got transaction with invalid parent offset or type [ 218.693192] binder: 9123:9128 transaction failed 29201/-22, size 80-24 line 3454 [ 218.712366] binder: undelivered TRANSACTION_ERROR: 29201 12:30:20 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000000), 0x7fffffff) [ 218.768718] binder: 9135:9136 got transaction with invalid parent offset or type [ 218.784594] binder: 9135:9136 transaction failed 29201/-22, size 80-24 line 3454 [ 218.803136] binder: undelivered TRANSACTION_ERROR: 29201 [ 218.859796] binder: 9141:9142 got transaction with invalid parent offset or type [ 218.888055] binder: 9141:9142 transaction failed 29201/-22, size 80-24 line 3454 [ 218.907599] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 218.907744] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 218.907765] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 218.936341] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=128, mo=a8024018, mo2=0002] [ 218.936432] System zones: 0-7 [ 218.940187] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 219.063087] binder: undelivered TRANSACTION_ERROR: 29201 12:30:20 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 219.069087] binder: BINDER_SET_CONTEXT_MGR already set [ 219.069096] binder: 9141:9146 ioctl 40046207 0 returned -16 [ 219.139308] binder: 9152:9154 got transaction with invalid parent offset or type [ 219.166967] binder: 9152:9154 transaction failed 29201/-22, size 80-24 line 3454 [ 219.196794] binder: undelivered TRANSACTION_ERROR: 29201 [ 219.211069] binder: 9152:9155 got transaction with invalid parent offset or type [ 219.234600] binder: 9152:9155 transaction failed 29201/-22, size 80-24 line 3454 12:30:20 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x402) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') sendfile(r1, r1, &(0x7f0000000180)=0x74000000, 0x5) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 219.260579] binder: undelivered TRANSACTION_ERROR: 29201 [ 219.327163] binder: 9159:9160 got transaction with invalid parent offset or type [ 219.353037] binder: 9159:9160 transaction failed 29201/-22, size 80-24 line 3454 [ 219.378637] binder: undelivered TRANSACTION_ERROR: 29201 [ 219.392436] binder: 9159:9161 got transaction with invalid parent offset or type [ 219.411591] binder: 9159:9161 transaction failed 29201/-22, size 80-24 line 3454 12:30:21 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net\x00') ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdda, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/55, 0x0, 0x1, 0x10}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/210, 0xd2, 0x2, 0x21}, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) [ 219.433271] binder: undelivered TRANSACTION_ERROR: 29201 12:30:21 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) fremovexattr(r2, &(0x7f0000000140)=@known='trusted.overlay.opaque\x00') fsetxattr$security_selinux(r1, &(0x7f0000000200)='security.selinux\x00', &(0x7f00000001c0)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0xae, 0x0) [ 219.554955] binder_alloc: 9174: binder_alloc_buf size -520 failed, no address space [ 219.572254] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 32768 (num: 1 largest: 32768) [ 219.597164] binder: 9174:9177 transaction failed 29201/-28, size -550-24 line 3284 [ 219.624629] binder: undelivered TRANSACTION_ERROR: 29201 [ 219.637204] binder_alloc: 9174: binder_alloc_buf size -520 failed, no address space [ 219.663355] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 32768 (num: 1 largest: 32768) 12:30:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(0x0, 0x0, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) 12:30:21 executing program 3: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) fallocate(0xffffffffffffffff, 0x10, 0x0, 0x8000) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000001c0)) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x8800, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000040)=ANY=[]) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@remote, @in=@initdev}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000380)=0xe8) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r2, 0xfae71e5936326fae) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000280)=0xfffffffffffffff6) setuid(r4) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)={0x14, 0x2, 0x6, 0x710, 0x70bd27, 0x25dfdbfb, {0xc, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c092) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$packet(0x11, 0x40800000000003, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000), 0xb5481f3e129391aa) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'syz_tun\x00', 0x0}) bind$packet(r5, &(0x7f00000000c0)={0x11, 0x800, r6, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r5, &(0x7f00000002c0)="0104000073d1600000000000fbf55b42b90516db4d916502c555cf09570300a44b29d9fde6ea94211af8e74bab5b98aa9d890600000004000000711608f2003ee478efddfc86a15aaaf3cd1ad1dfff004000000033e065b42ba58f7599e526b9ac2927b5ecccea8cb77d9e25", 0x3af, 0x20006040, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x3) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.current\x00', 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r8, 0x40086602, &(0x7f0000000140)) r9 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r9, 0xfae71e5936326fae) write$P9_RREADLINK(r9, &(0x7f0000000040)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080), 0x15d4b87) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000200)) dup(0xffffffffffffffff) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r10, 0x40044900, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 12:30:21 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x800) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x100000003, 0x3a) socket$packet(0x11, 0xa, 0x300) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x800, 0x3c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg(r2, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f000000ac80), 0x400000000000302, 0x4008800) setsockopt$inet6_group_source_req(r2, 0x29, 0x4a, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x80) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) write(r4, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r4, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r6 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r7, 0xfae71e5936326fae) r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r8, 0xfae71e5936326fae) fcntl$dupfd(r8, 0x0, r1) [ 219.689596] SELinux: Context unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 is not valid (left unmapped). [ 219.722549] binder: 9174:9178 transaction failed 29201/-28, size -550-24 line 3284 12:30:21 executing program 2: r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="400000000000000008001b000000"], 0x30}}, 0x0) ptrace$peekuser(0x3, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) syz_open_procfs(r0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x6) r4 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r4, &(0x7f0000000240)='user\x00', &(0x7f0000000300)='\x00') r5 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000380)="37d4c1a0a8aaef12f78abe0bc5ebdf7aba661fa325f07f4e073eaf01ca00a3ee00d5b3b5259a083555dfa85b79f9846b4d56275ae05ec709a3efbf28e9a0fa84046d7925695e2ed95a6c38002cc86cabb486a023f4d4f9cb768a4e03eb19fbd23d4d5d722099073c9f2dfc6cccd45190f1f235ded81a38ce8a0277fd51493adc43d4eebab722b100e0107bdc346266571d864f36c77baa9c87c6e918d56aabe8651898e8913f070871780d194c7760abfa806514eb957c96a3db2fce7d3d629a4bb937fc22f5af35742baf845bf19c1d40e7c1c9242cbb1b", 0xd8, r4) r6 = add_key$user(&(0x7f00000005c0)='user\x00', &(0x7f0000000600)={'syz', 0x2}, &(0x7f0000000640)="7464b5486ddefd458beed3b662422eaee882781195f35f1e4e5a482f07ad3a1eb05d18452a78c7b37cdcfd513f195207e60544ecf1dbc3139b6452d6df04c6fe7f20c056747e9c68f4696e5e4441ab44d00d8bf4416729eaad150436294f9f216afa5833077724e05bc8fdde4711a5617db75d15692729724779a2b7fbf76b576ae87cb8a08834ef74f61d94a2dc8cc10719929654b363049b5867ec9d0eb3fe84152008156aa11fad361a6526fd726af8ff007e4c757ef8852c99c344a79b9e17711f3f4fe51151b5ba0a4fda3fd303d7b9e89681572d1191694059839f9651e5f5a386fcaeb6a6c573e9c976f34d84eb", 0xf1, 0x0) keyctl$instantiate_iov(0x14, r5, &(0x7f0000000580)=[{&(0x7f0000000480)="0edc0487d394ae407d47f274ddbe37e18c9cc4ce13a91506d64fcfe4d076b88ade75daccace08d34dfe27df00720ba6c2bf61e3cdbab0454b5f4468f70aa9e9a97bdf304d70647f06768653b9f", 0x4d}, {&(0x7f0000000280)}, {&(0x7f0000000300)="50a9fa5ddeca5938936ac2ca990cad30c36340aad2161268a2a2115d9a1a934bf9290a3c57252d118978", 0x2a}, {&(0x7f0000000500)="b279a332ad68bc47f155e8c5a665e672a728715afa7fa7a1f81ee31e677bb7784ce46fb59fabbff7865b1db019958d3f99951336646cf535cd2d5d442d00059147c0ac2ccb140261a5eface771b783773d600fba8ba7ad4fb6802f1a62deffb4c3fef62a5042744efb96e24ab055f9f2e69f5c122638ce19052c00", 0x7b}], 0x4, r6) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/attr/fscreate\x00', 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xfffffffffffffe5d, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) syz_open_procfs(0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x6}, 0xfffffffffffffed3) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x10000, 0x0) getsockopt$inet_tcp_int(r7, 0x6, 0x1b, &(0x7f00000002c0), &(0x7f0000000780)=0x4) [ 219.752980] binder: undelivered TRANSACTION_ERROR: 29201 12:30:21 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r2, 0xfae71e5936326fae) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r3, 0xfae71e5936326fae) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000000)=r3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 12:30:21 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1, 0x11011, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fchdir(r0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x800, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x7ff, 0x6400) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xf4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b630000096310400300000000000000000000000000000001634040020000000000000000000000000000000000000021000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00'], @ANYBLOB="020000000000000001000000000000002100000000000000852a646600000000", @ANYRES32=r5, @ANYBLOB="000000000000000000000000852a747000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB='\x00'/98], @ANYBLOB="620000000000000000000000000000001300000000000000"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="11634840020000000000000000000000000000000000000010000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r6, @ANYBLOB="000000000000000000000000852a62770100000001000000000000000000000000000000852a6873001000000100"/60], @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"], @ANYBLOB="00100000000000000063404003000000000000000000000000000000000000003b000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f00000006c0)=ANY=[@ANYBLOB="85c588032afcc6d63f7c1e79058535881baf519c5362d6caa100"/36, @ANYRES32=r3, @ANYBLOB="0000000000000000000000008561646600000000070000000000000001000000000000003200000000000000852a646600000000", @ANYRES32=r4, @ANYBLOB='\x00'/12], @ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB="000000000000000018000000000000003800000000000000"], @ANYBLOB="0763044000000000"], 0x81, 0x0, &(0x7f0000000440)="f4052c52369d6f34cee91a5061d6a37cb041ecaf3610899b8185af8261940f927bc4f41fc1b7fb9c6bbdd59dbc3b0f2c9012d8b4130033e4b061c86b8c5dbfcf85bf17610728e86c690a2bd4573db9dbf6ff6832024725b7b181f2b51e68b9a4192cbabef9b2c4fedcdd4730f2518532b5e80c617a139e071839d35de29af1e8f6"}) ioctl$RNDADDTOENTCNT(r4, 0x40045201, &(0x7f0000000680)=0x2) fcntl$setstatus(r4, 0x4, 0x6100) writev(r4, &(0x7f00000003c0), 0x63) 12:30:21 executing program 3: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x3, 0x42c1}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f00000003c0)=0xffffffff, 0x4) bind(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0xffffffffffffffe7, 0x490812356e0a5c03, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) clock_settime(0x6, &(0x7f0000000000)) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0xfffffffffffffffd) ftruncate(r2, 0x80003) sendfile(r1, r2, &(0x7f00000000c0), 0x8000fffffffe) 12:30:21 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @flat=@weak_handle={0x77682a85, 0x5}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) [ 219.844208] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 219.856139] binder: 9194:9195 got transaction with invalid parent offset or type 12:30:21 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="0d00000000003639408fa3a3ba27660199783b0a82f79b32a7c8225086600a38e07d4db88a66596759e95307b680ab73e03c53555c97e8e37d01da4d44a994354a9fa3f355214eeabd24fd620b2022d5ad63b369aaffe9a6b608a5fece0eca95d71f2d3e60", 0x65}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 219.856181] binder: 9194:9195 transaction failed 29201/-22, size 80-24 line 3454 12:30:21 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r2, 0xfae71e5936326fae) r3 = dup2(r1, r2) write$P9_RCREATE(r3, &(0x7f0000000100)={0x18, 0x73, 0x1, {{0x4, 0x1, 0x5}, 0x4}}, 0x18) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f00000000c0)=@ng={0x4, 0xa, "7527a142cd0a780a"}, 0xa, 0x2) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x3c383c91bf1e728b, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 219.856388] binder: undelivered TRANSACTION_ERROR: 29201 [ 219.988257] binder_alloc: 9207: binder_alloc_buf, no vma 12:30:21 executing program 5: socket(0x200000000010, 0x2, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r0, 0xfae71e5936326fae) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) write(r1, &(0x7f0000000040)="240000002e007f09002000000004000000dd00ff0100000001000000000000000100ff10", 0x24) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r2, 0xfae71e5936326fae) fcntl$dupfd(0xffffffffffffffff, 0x406, r2) r3 = inotify_init() r4 = inotify_add_watch(r3, &(0x7f0000000240)='.\x00', 0x80) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r6, 0xfae71e5936326fae) getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f00000000c0), &(0x7f0000000100)=0x10) inotify_rm_watch(r5, r4) 12:30:21 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x3a7, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) ptrace$setopts(0x27ca9b1753e6fa75, r0, 0x4, 0x100002) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000000)=0x7, 0x4) setuid(r2) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') 12:30:21 executing program 4: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r0, 0xfae71e5936326fae) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r0, 0x1f, 0x2, 0x613779c3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3}, 0x20) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000000)='smaps_rollup\x00') ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000040)) [ 219.988275] binder: 9207:9210 transaction failed 29189/-3, size 72-24 line 3284 [ 219.988355] binder: BINDER_SET_CONTEXT_MGR already set [ 219.988362] binder: 9207:9210 ioctl 40046207 0 returned -16 [ 219.988914] binder: BINDER_SET_CONTEXT_MGR already set 12:30:21 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0x0, 0x2}]}, 0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) r5 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, r5, &(0x7f0000000180)='dnr\x00'/13, &(0x7f0000000100)={'syz', 0x0}, r4) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r7, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x3, 0x4, 0x2, 0x3}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8802}, 0x8081) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r6, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r7, 0x100, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20040080) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r7, 0x400, 0x70bd29, 0x25dfdbfc, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0xff5}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x800) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000000c0)={r5, 0xd8, 0x8b}, 0x0, &(0x7f0000000600)="a9c3a19e716512d39a36ab22a74c77d16ece97edc6efb86613c3c833a0a63ad9c41f3fd4d534f25e313dd291eef3c3a8931d8fc3814c4c71d94888a0fcd8de070d8063984b0ea121fbf00c501f7b1d3c4b2390fed9b80de8cda6a34ab319a8e73dfb2c05591606b7a0f0746ef058fad10c01e149fb3c1e69e5191dccb017560b07784308f5d7873e75a97e0dac213a230c089d1912693407e2629750ca56e5589fc12b1ae97d8cc9d63f10561b7bf65430c8a9b929fc4b14830afcb4af4dd0baf74f4df27a88a53b6c03e5ea4b669a81e542b1d817bb34a2", &(0x7f0000000700)=""/139) fcntl$setpipe(r2, 0x407, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) fstat(0xffffffffffffffff, &(0x7f0000000180)) gettid() r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r8, 0xfae71e5936326fae) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x301100, 0x0) r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/commit_pending_bools\x00', 0x1, 0x0) fcntl$getownex(r9, 0x10, &(0x7f0000000380)={0x0, 0x0}) rt_sigqueueinfo(r10, 0x0, &(0x7f0000000000)={0x20000000, 0x0, 0xfffffffb}) syz_open_procfs(r10, &(0x7f0000000240)='cpuset\x00') connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x30005, 0x0) [ 219.988922] binder: 9207:9212 ioctl 40046207 0 returned -16 [ 219.989100] binder_alloc: 9207: binder_alloc_buf, no vma [ 219.989115] binder: 9207:9212 transaction failed 29189/-3, size 72-24 line 3284 [ 220.019669] binder: undelivered TRANSACTION_ERROR: 29189 [ 220.019745] binder: undelivered TRANSACTION_ERROR: 29189 [ 220.071358] binder: 9220:9225 got transaction with invalid parent offset or type [ 220.071424] binder: 9220:9225 transaction failed 29201/-22, size 80-24 line 3454 [ 220.071662] binder: undelivered TRANSACTION_ERROR: 29201 [ 220.133590] binder: 9235:9237 got transaction with invalid parent offset or type [ 220.133637] binder: 9235:9237 transaction failed 29201/-22, size 80-24 line 3454 [ 220.143540] binder: undelivered TRANSACTION_ERROR: 29201 12:30:22 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000040)={'L-'}, 0x28, 0x2) socket$inet_udp(0x2, 0x2, 0x0) [ 220.808236] audit: type=1400 audit(1570883422.335:45): avc: denied { create } for pid=9252 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:unlabeled_t:s0 tclass=key permissive=1 [ 221.042657] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 12:30:22 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x122, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r0, 0xfae71e5936326fae) fsetxattr(r0, &(0x7f0000000000)=@known='system.advise\x00', &(0x7f0000000100)='eth0wlan0\x1e{md5sum}:-wlan1eth0\':)\x00', 0x21, 0x1) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000140)={0x4, [0x0, 0x0, 0x0, 0x0]}) seccomp(0x1, 0x0, &(0x7f00000005c0)={0x2, &(0x7f0000000040)=[{}, {0x6, 0x0, 0x0, 0xffffffffffffffff}]}) perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x7f, 0x20, 0x9, 0xe1, 0x0, 0x0, 0x8, 0x80e251962e723b5b, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xb4ba, 0x0, @perf_config_ext={0x3, 0x2}, 0x100, 0xfd, 0x7, 0x5, 0x3, 0x6, 0xf86e}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8) 12:30:22 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="006340400000df573d097d555f8b0000000000039218ef00000000000000000000000000507f00000000000018000000000000004296e7850d60ec72e7af64acfdfcf5d50d27cdf67a140878ee65b253e53682e75a56e636d9dc8790d119f50088395e3fc631a230c1892e89c5fe63fa1b987868a38e65b51e433e8a8dc86f45a7770dd508a18af37f9fde1c04717f9eb883161419fc1138f351075c13c74c035ad505fce275c38f9fe5a1d2542597b95dc1f1cc0c74d556ab8ddc414f", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="852a62730000000002000000000000000000000000000000852a62770000000000233442c400000000000000000000008561646600000000000005000000000000000000000000edffffff0000000000a4012b15290e6092b6ec47070e2e7a1c69e79a718536c8123babbcceefdd026cd6473555a7950369e516cfa57049"], @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000180000000000000430090000000000000018653a7ff316c1a3987131f934f47a4b3a7db780d8d9220898e08387de4c0b70f5b0ea85e70d4cfc2ca6af29fa2ed7c525f2479296474ccadc3898eb3710aee4ddd5bfa8ec0c9013c366e1dd9d541358a18913c8902957d07875676537a7a6348eb3f83137542a3b633ceb621ff6bd0435ef58bc8afdf8e58f97ca1bb83e49332b8c9863747d3712c5dfdf3db71d2a306ceaa93d6bc323c2fe5729c172e3fd2fbc77afb13d287c027a03b508ae2e50aa8ec972d52c2bbbb5f12eec36a2d46e97e7e9052d9c52dd041e2ff6739ab0e815eb6b6fe74a3bd3888d69c2b3104e"]], 0x0, 0x0, 0x0}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r3, 0xfae71e5936326fae) ioctl$ASHMEM_PURGE_ALL_CACHES(r3, 0x770a, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14, 0x180400) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000100)={r4, @remote, @remote}, 0xc) 12:30:22 executing program 0: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000080)=[{}, {}], 0x2, 0x0, &(0x7f00000000c0)={0x7}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='errors=remoun\x00']) geteuid() r1 = open(&(0x7f0000000000)='.\x00', 0x40498503c9a477a4, 0x0) fchmod(r1, 0xfae71e5936326fae) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r2, 0xfae71e5936326fae) write$FUSE_INTERRUPT(r2, &(0x7f0000000280)={0x10, 0x0, 0x2}, 0x10) r3 = signalfd(r1, &(0x7f0000000200)={0x7fff}, 0x8) prctl$PR_SET_FPEXC(0xc, 0x130001) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r3, 0xc0406619, &(0x7f0000000240)={{0xde0c7178e60f4d7d, 0x0, @reserved="fd0fded010e91dab4827c56387ea3bd8fda555c19e86b37ff160c615f1592b19"}}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x10001, 0x0) sendto$unix(r4, &(0x7f0000000140)="4cc2ebee6afb8e17bc719f367b0283c5dfa255ce0696565df9cc8cd1514d95e3497bcdbdb4d1195ce1340fd88525342d461cfd4d70772bd586912721bd8ee76cf1e6044000a9e84f2cf4826bedfb23067d20236478dae20c85579f362f98b42445d7083972a495531dddfda64eb456df33f480809e9de091fe3e71a3dae014c9e68c2b705745eec2e691bd9320a340bbcb8e2f700e63dc84b6b04f453bdc8555f7d9514691b0", 0xa6, 0x8100, 0x0, 0x0) 12:30:22 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0)=0x4, 0x4) sendto$inet(r0, 0x0, 0x0, 0x400200007fd, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) 12:30:22 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) keyctl$get_security(0x11, 0x0, 0x0, 0x0) add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x127, 0xfffffffffffffffd) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=""/208, &(0x7f0000000640)=0xd0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) socket$packet(0x11, 0x0, 0x300) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000040)={'filter\x00'}, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) io_setup(0x3, &(0x7f0000000100)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) io_setup(0x3, &(0x7f0000000100)) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x15a712fa0326ef17) fallocate(r5, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000040)={0x4, r6}) ioctl$RNDADDTOENTCNT(r6, 0x40045201, &(0x7f0000000000)=0x7) 12:30:22 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(0xffffffffffffffff) ftruncate(0xffffffffffffffff, 0x2008002) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@initdev, @initdev, @broadcast}, &(0x7f0000000080)=0xc) syz_open_pts(0xffffffffffffffff, 0x4200) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'s\xa0\b', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, 0x0, r2) getsockopt$inet6_opts(r0, 0x29, 0x1c, &(0x7f0000000740)=""/59, &(0x7f0000000780)=0x3b) r3 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)="c278d9952f01efc75636b139c5f3b6cc80812d25cc4936645ac21422c038b48e25642ca03c7fed5b19dfe5687109d8632c57ded52b21ea48", 0x38, 0xfffffffffffffff8) socket$inet6_udp(0xa, 0x2, 0x0) keyctl$instantiate_iov(0x14, r2, &(0x7f0000000180)=[{&(0x7f0000000100)}], 0x1, r3) r4 = socket$netlink(0x10, 0x3, 0x10) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000007c0)={0x1, {{0xa, 0x4e23, 0x5, @mcast2, 0x8}}, 0x1, 0x2, [{{0xa, 0x4e23, 0x6b32, @dev={0xfe, 0x80, [], 0x12}, 0xffc}}, {{0xa, 0x4e20, 0x5, @rand_addr="1af2fd0ea8634f0cd9c1fc2b034601a1", 0x68}}]}, 0x190) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000200)="580000001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)='+', 0x1}, {&(0x7f0000000380)="0f4b3bd753d9e3ab37274e32941b8e49afc73b628a9281d74ce28fba76b3660f2bc24f6c9aaea33f13", 0x29}, {&(0x7f0000000440)="5d702f76d2c3be32e867a72c5bdc65f8d3fb4580d55aae61b071cec946431dfad943f9d67bbbdf3d340bc70aa9970d85e84582a5e6e32e2203205a43a5f202725f3b7ef4af588ed4dfcda4f80863a1834c353975749b2318bd7c3da671c3961eb3e6ef65d24083d828e8f0eac51a7edbfb6e2aa4b083", 0x76}, {&(0x7f00000004c0)="800f755bc6cd492c521d8e7e141c9dc1d294cd3fd06f463f90ccf134a619e5f6fafd1b39a9155fb104d8843a20eff8a45313aca334e10ed50dbda1bb2ead636f97fff4c70701770de27dbed874bdf7e4e1cc39", 0x53}, {&(0x7f0000000540)="4b43d803932e12e5c374d81903a36d3d26eb6c6a75a9cdf3674e98a81dc6e28a46043757319ee67009af6bf0a53a2a5f583914895fadc5776f78f335d270f324cfc68bef37839e3345a412dc3be079049aa92a76b14886bc59e0a5314a297e3027923eba4c84908e765004e71dc1253bf56d128d2435296dd4498b6e78db629d745d65", 0x83}], 0x5, &(0x7f0000000680)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x81}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x48}, 0x809) r8 = fcntl$dupfd(r1, 0x406, r6) mmap$binder(&(0x7f0000fed000/0x11000)=nil, 0x11000, 0x1, 0x11, r8, 0x0) fchmod(r5, 0xfae71e5936326fae) r9 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r9, 0xfae71e5936326fae) renameat(r5, &(0x7f0000000100)='./file1\x00', r9, &(0x7f0000000140)='./file1\x00') 12:30:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) rename(0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) r2 = getuid() write$FUSE_ENTRY(r0, &(0x7f0000000100)={0x90, 0x0, 0x5, {0x0, 0x0, 0x7, 0x3066, 0xfffffffe, 0x8, {0x5, 0x2, 0x400, 0x5, 0x5, 0x8, 0x7, 0x3f, 0x8, 0x6, 0x6, r2, 0xee01, 0x0, 0x8}}}, 0x90) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r4, 0xfae71e5936326fae) getsockopt$SO_COOKIE(r4, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000080)=0x8) sendfile(r1, r3, 0x0, 0xedc0) 12:30:22 executing program 0: socketpair(0x3, 0x0, 0xfe, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x46100202}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x68, 0x0, 0xa10, 0x70bd28, 0x25dfdbfe, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x5, @link='broadcast-link\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0xa040}, 0xb21b8bcf09233662) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000480)='.\x00', 0x80, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x20000008) symlinkat(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000280)='./file0/file0\x00') r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) open(&(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x400000, 0x3e) renameat2(r7, &(0x7f0000000100)='./file0/file0\x00', r7, &(0x7f0000000000)='./file0\x00', 0x2) [ 221.292593] binder: 9257:9259 got transaction to invalid handle [ 221.301371] binder: 9257:9259 transaction failed 29201/-22, size 32592-24 line 3138 [ 221.311768] binder: undelivered TRANSACTION_ERROR: 29201 [ 221.332446] binder: 9257:9269 got transaction to invalid handle 12:30:22 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', r1}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000007c0)={0xf, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="08631040000000000000000000006f"], 0x0, 0x0, 0x0}) 12:30:22 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) syslog(0x0, &(0x7f0000000000)=""/66, 0x42) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000100)=0x401) [ 221.353782] binder: 9257:9269 transaction failed 29201/-22, size 32592-24 line 3138 [ 221.389548] binder: undelivered TRANSACTION_ERROR: 29201 12:30:23 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000180)='.', 0x0, 0x5110, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x400, 0x68) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) [ 221.435597] binder: 9279:9283 BC_INCREFS_DONE u0000000000000000 node 317 cookie mismatch 00000000006f0000 != 0000000000000000 [ 221.468840] binder: 9286:9288 got transaction with invalid parent offset or type 12:30:23 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r2, 0xfae71e5936326fae) r3 = dup2(0xffffffffffffffff, r2) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r5, 0xfae71e5936326fae) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000040)=[@timestamp, @timestamp, @mss={0x2, 0xf9a}, @sack_perm], 0x4) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r5, 0x10e, 0xa, &(0x7f0000000240)=0x8, 0x4) fchmod(r6, 0xfae71e5936326fae) getsockopt$inet_mtu(r6, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r8, 0xfae71e5936326fae) fcntl$getownex(r8, 0x10, &(0x7f0000000280)) fchmod(r7, 0xfae71e5936326fae) ioctl$BLKSECDISCARD(r7, 0x127d, &(0x7f0000000000)=0x8) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB="852a62730000000002000000000000000000000000000000852a627700000000000000000000000000000000000000008561646600"/80], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="000000180000000000000000"]], 0x0, 0x0, 0x0}) [ 221.468888] binder: 9286:9288 transaction failed 29201/-22, size 80-24 line 3454 [ 221.469187] binder: undelivered TRANSACTION_ERROR: 29201 [ 221.569480] binder_alloc: 9301: binder_alloc_buf, no vma 12:30:23 executing program 2: r0 = socket(0x0, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000), 0x4e52b5d79a505d0f) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@mcast2, @in6=@mcast1}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4ac04e11}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000fc0)={@initdev}, &(0x7f0000001000)=0x14) write$FUSE_LSEEK(r1, &(0x7f0000000080)={0x18, 0x0, 0x1, {0x11f1}}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) 12:30:23 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) accept$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) fchmod(0xffffffffffffffff, 0x104) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x2}) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r4, 0xfae71e5936326fae) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x354, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0}) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r6, 0xfae71e5936326fae) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r7, 0xfae71e5936326fae) ioctl$FICLONE(r6, 0x40049409, r7) fchmod(r5, 0xfae71e5936326fae) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f00000000c0)={'broute\x00'}, &(0x7f0000000040)=0x78) [ 221.569498] binder: 9301:9302 transaction failed 29189/-3, size 80-24 line 3284 [ 221.569743] binder: undelivered TRANSACTION_ERROR: 29189 12:30:23 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x8001}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53d, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3}, 0x8400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$TIOCSBRK(r6, 0x5427) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x80, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r8 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r7, r8, 0x0, 0xedc0) r9 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @remote, 0x81}, 0x1c) connect$inet6(r9, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r10 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r9, r10, 0x0, 0xedc0) accept4(r10, &(0x7f0000000180)=@nl, &(0x7f00000003c0)=0x80, 0x0) r11 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$inet_mtu(r11, 0x0, 0xa, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000001}, 0xc, 0x0}, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000001, &(0x7f0000000140)={0xa, 0x2}, 0x1c) socket(0x0, 0x5, 0x0) splice(r4, 0x0, r3, 0x0, 0x1000000000000003, 0x0) inotify_init1(0x0) alarm(0xffffffff) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="c874ca64a085e4116577b2f1f34186790504368776fd0ddcf7844479c484031dd7c5f60955317e9c1bd11bfd6b5ad8da77690a0919852ee6eda7fd390180a685d972fe72e1453c7fd5dfc331ecead0"], 0x1}}, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) sendto$packet(r4, &(0x7f00000000c0), 0xfffffffffffffd4d, 0x1, 0x0, 0x44) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) 12:30:23 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{&(0x7f00000002c0)=@ipx, 0x80, 0x0, 0x0, 0x0, 0x182}, 0x1000}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000640)='attr/fscreate\x00') socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x1, 0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$TIOCNOTTY(r0, 0x5422) creat(0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc800) perf_event_open(&(0x7f0000000180)={0x1, 0xfffffefb, 0x0, 0x0, 0x40, 0x1, 0x0, 0x100000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2, 0x0, 0x0, 0x2, 0x2}, 0x0, 0xfffffffffffffffd, r1, 0x4) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000700)='\'\xc4\'\v\xec\xe4\t\xc5r\x12-\x90\xda\x9a\x94\x02\xec\xea\x10\x90\x03\xcb\xf8\x1b6\xa5t\xd6\xd3\x93\xd3\xdf\x85P\x19G7Q\v\xdcHv\x03Qa\xf3\xd4\xfc(\x83\xfb\xf8C\xf6\x8a$\xb1\x90\xeb\'~\xa0\xd8\xc8\xe8\x94#\xcd\xd5Kp\xbf\xc0\x8d7\x1b?A(\xe8^\x9c\xff\x0f\x1ck\xbc\x95\x05\xcd\x17\xf7\x15o\xd4\xdc4\x84uw\xa6w\x0f\xea`1\xec\xb4\x04\xd5\r\x8d\xde\x1f]\x15\xe5\xe8\xd00\xe5\x8d\x9c\x9ec+\x02\x1d\xffa5\x94\xab\xddNe\xfe\x8c\xc4q\xbb#f\xc1\xb9\x81W\xa4$)!\v\x9b\xa7\b\x91\xe5\xeb\x88\x1c\x0f\xb2.Tr\xe4\x99\x9e\x03\xb4\xd2\xf9KW\xce\xd1cC\xd5\xcf\x97\xa9\xeab\xda\xd6:\xa91q\xf7\xc5\xc0C\xd1\'\x89\xee\x84T:\x88x\xe2\x83\xf2r\xf4&t@\x9e\xa4qf\xdf\xf4\xb5\x01\\a\x85\xd3\xe0\xb7\n\xe7\xed\x84Q\xd7s\xcd4B\xcbQ\xa4\x9f[\x99\xdfJ%\xa8\xfc\xe3`\xc1JA\xc9\xbc\xd4~}\xce\xe8\xfejH\x8fb\xdd\xbcJ\vk\'\xe7Q\xfd\xaaA`\xb5\xa1\xe4\xf8\x9eG\xcfb\xe8@\x04\xe1\xf8\xacU)(S\xed\xffA\xfaqt\xb6-\x9b5\xf6\x1e\x13$e\n\xc7\x9b\xb0X\xb6\xd4\t\x99^^\xc2>J\x16\xd0\x8c\xecy*\xa0\a\xe9Ar\xa6\xb4n9j\xe5\xba\x8a\n\xce2\xcf_\x1b.t)\x8d09A[-\xf6\xe7\xe8\x1f\x92>\xb8\xd4>-\xacY\x9e\x88\x96\xa7\xfa\xdaoL\xa6\xec\xe8\xd5\xbfaf\xd7\xfc\x03\x91w)\xcd\x1f\xbe\xc9R\xcfz\x03\xec\br\x83\x8bM-\xf8X\xfd\"\xb4RV\x7f\xda\xd3\xd4h\x1c\xdb\xbe\xa4U\xec\xcd\'\xbc\xd22\x85{,\xe6-,6\x9d\x85\xb4fL\b\x98\xe9@\xee\xc2.\xb3\xd6w\x10\x94\xb5%D\xe8\r\xfe\x98G\x82\fx,\xa2J\x12\x03ec\xd5e-\x1f6\xe7\xb6\xd9\xcf0J\xed\xb7\x9b\xfd\xfc\x00EQ\x1f\x00D\xc95\xdeG +\x1bp\xf4\t\x94\x87\xf1ZbO\xa6\xe9\f`u\xda\xb3\x1d\xf9\x94\x80\xc1\x17\xde(_\xa7\xe7\x11\x9a\xac\x8c\xb1\xd71\xc5\xe9\xd3n\xc2\xa4\x98P\x9aF\xc2\x93\xad@\xa9h\x96\x1b]2\x88\xf3\xd8\xc798\x8c\x9f\xd4W4\xf1}\aD\xa0\xd8\xda\xf4\x1bEx(t|\xf4Y\xfaJ\xc2GS\xc9R\xb5\xda\xa8\x9b\xaa\x01\xe2~\xd8f.#\x94\xbf\x85z\xbf\xa0x62L\x1f\x91\xd2\x1e%\x88\x1f\f\xabb\x8ds\x93\x9e\xed\xd2\xdb\x02\x0e\xcf\xf5\xaf\xc8>+\x03e\xb7\xba\xb9}\xca\xfc\xe8\xed\x9b\xa2\x9ey\bMv\x8f\x8a8\xfd;\x9a5J\xee\x9a\xae\x83>$\x8a6\x05P\x8c\x05\xb8\r\xcf\xdd\x15/\xa9\xa1\xd4\x87{\xc9I4\xe3 i\xa4\xc5\xe5l\x03?\xfdM&\xc0a9}h\x8ef\x10!\xf0\x99\x80\xb72\xcc\x06\'+\xf0\xa1\a\xeeSGH\x12\x068S7s\xd3\xdaT\"\xa9jk\xed\xa2IyM\xa3&t\xfeA\xa9\"\xb4\xec\xdex\x00\x80`p\x91\x84\xbfK\xb6\x00\xa7\xa2\x06\xce\xc8X\x7f\xd1@\xf1\xcf\xdf\xae\xdb\r\xf6h\xdf\xc6+\xac\r\x9f\xc2D\xdf\xd6\xde`\xa4\xd1=\x1b\x8d\xf4\xbe#\tH\x06;a(`\xdcw\x1dc_\v\x046j\xf9`\r\xc0\a\x8d\x12:l\xc7j3E\xd7\xcaX\x97\xad\x93\xea\x99\xca\xd7m\xb8\x1e1\xb6Nz\"U/\x0eP\b=\x01W\xcd\xf1x\x85\xf4&\xe7\xf9W\x06\xa4\xf8&\xbc\xf4\xd0\xd2\xd1W\xee\x9a\xdd\xdbu\x0e\x9aV\xe2\xc5\x84`Bu\x12\xa8/=\x17\xc4F\x11\xdfm-)\xd9hc\xba\xb7\x91\xd9\x11\x9a,\x19\xf4]\xa7Y@B\x1f') fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_genetlink_get_family_id$team(0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_emit_ethernet(0xec, &(0x7f0000000200)={@random="7066c5db3421", @random="b7f7d4d3a74a", [{[], {0x8100, 0x0, 0x1}}], {@ipv6={0x86dd, {0x0, 0x6, 'Xpw', 0xb2, 0xed, 0x3f, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @rand_addr="a74dd7a86778a7a53697c03eed5f0b83", {[@fragment={0x3d, 0x0, 0x9, 0x1}, @hopopts={0x0, 0x2, [], [@ra={0x5, 0x2, 0x352}, @generic, @pad1, @jumbo, @jumbo={0xc2, 0x4, 0x80000001}]}], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x11, 0x1, [0x0], "06f4f17251f1008b22c72e0a68b331791d"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x9]}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x5, 0x0]}, {0x8, 0x88be, 0x2, {{0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, 0x1, 0x6}}, {0x8, 0x22eb, 0x0, {{0x9, 0x2, 0x5, 0x2}, 0x2, 0x3, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, {0x8, 0x6558, 0x1, "93f4150c4e2ec60ad8a807e4144d440b3b8a5b74d3dcbe18be2a29dd99eba16da7f9bc19015bd9eab7ad7ca3a6"}}}}}}}, &(0x7f0000000080)={0x0, 0x0, [0xe58]}) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r3 = socket$inet6(0xa, 0x0, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140), 0x19d) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73797a311b47d0823bdc3948dc82da09a2fe58021bd654c3d488cd1e58def01e329af6d660e798fd56aa94e4b3300354c424265a02977eb2342e443b06f9b8291bde55b960d0e57877ec"], 0x3e) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x5e) connect$inet(0xffffffffffffffff, 0x0, 0x5b) [ 221.666030] binder: 9309:9312 unknown command 0 [ 221.679808] binder: 9309:9312 ioctl c0306201 20000140 returned -22 [ 221.713011] binder: 9309:9312 unknown command 0 [ 221.719101] binder: 9309:9312 ioctl c0306201 20000140 returned -22 12:30:23 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000280)=0xfffffffffffffff6) setuid(r4) r5 = getgid() write$FUSE_CREATE_OPEN(r2, &(0x7f0000000240)={0xa0, 0x0, 0x8, {{0x4, 0x0, 0x7fffffff, 0x144, 0x1000, 0x3f, {0x1, 0x800, 0x7, 0x7f, 0x1ff, 0x4, 0x1ff, 0x9, 0x200, 0x6, 0x0, r4, r5, 0xaca, 0x4}}, {0x0, 0x57d8ecf0c348afe4}}}, 0xa0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 221.804501] binder: 9324:9327 got transaction with invalid parent offset or type [ 221.823479] binder: 9324:9327 transaction failed 29201/-22, size 80-24 line 3454 [ 221.841008] binder: undelivered TRANSACTION_ERROR: 29201 [ 221.852387] binder: 9324:9328 got transaction with invalid parent offset or type [ 221.869138] binder: 9324:9328 transaction failed 29201/-22, size 80-24 line 3454 [ 221.895591] binder: undelivered TRANSACTION_ERROR: 29201 [ 226.094198] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. 12:30:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./file0/bus\x00', 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x38) write$P9_RREADLINK(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="ff5b7213f6012f66b0000000"], 0xc) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:30:28 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) memfd_create(&(0x7f0000000080)='\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2cd8034"], 0xc}}, 0x0) r3 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x40000) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x39) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) fcntl$lock(r3, 0x2f, &(0x7f0000000200)={0x0, 0x4, 0x8, 0x8, r4}) ptrace$setopts(0x4206, r2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="2c000013acbf5e632be02e0001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r5], 0x2c}, 0x0) tkill(r2, 0x3b) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 12:30:28 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) fstat(0xffffffffffffffff, &(0x7f00000000c0)) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0xffffffffffffffd9, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a62730000000002000000000000000000000000000000852a6277000000000000000000000000000000000000000085619ed81d538dad837602229e646600"/91], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 12:30:28 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000140)='threaded\x00', 0x5dc291) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r2, 0xfae71e5936326fae) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000000)={0xffffff8a, 0xc, "4f69697fb03665f32c6b796b"}) clone(0x80020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lseek(r1, 0x0, 0x1) write$binfmt_misc(r1, 0x0, 0x0) 12:30:28 executing program 5: socket$inet6(0xa, 0x401000000001, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000001c0)) dup(0xffffffffffffffff) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r0 = dup(0xffffffffffffffff) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) getpeername$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000540)=0x14) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/policy\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = creat(0x0, 0xfffffffffffffffe) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(0x0, r4, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000640)='./file0/file0\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000001700)) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000001880)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000001700)=0xfffffffffffffd47) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r8}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000006380)={'tunl0\x00', 0x0}) sendmmsg$inet(r3, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000000780)="cf7b5073e0", 0x5}, {&(0x7f00000007c0)="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", 0x600}, {&(0x7f00000027c0)="97d019d1b024744a47453fb8eac31103e3cd2045e7e2e38fbbcdbc2b86a39bcde2a4b14a10793c1c37d1c79479f613e1d04feca9a05f3b6e18ffe1ba7e84da2d631ff89dae1e863250233297d2a1ec35bc", 0x51}, {&(0x7f0000002880)="ee6804a08a554462e2401a91959d97944cd6e5dd279c2631120c01841e820940f63f55", 0x23}, {0x0}, {&(0x7f00000029c0)="08b53348f0dad32b0095a5c6", 0xc}, {&(0x7f0000002a00)="75820f547ff0029614614893f9ab4d7f57cc58901dd59eb4a23340ad20638c6cafa0b2bc037dedbbee26eb2d6b136bee3aa47e8e1a1f70a323c45183805e136ab0d49cc4157e6aecd3d6bd9e7394d3554c32164cfb36b23217005148e83740cc83f959614a21203be20c2a8760a03a93e47366c789962ff6", 0x78}, {&(0x7f0000002b00)="d2ff6a6e031c7b7c42e929366b3f2b8fe8846c2272a5ccedcb6226ca187865d33c790b13481574b94a981d1cc2f6771190e94e9bd58ae34fb1c0f2a33e65cd5d3e4299943b7d", 0x46}], 0x8, &(0x7f0000002c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @remote, @loopback}}}, @ip_retopts={{0x10}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xc2}}, @ip_retopts={{0x40, 0x0, 0x7, {[@noop, @noop, @lsrr={0x83, 0x1f, 0x7f, [@multicast1, @broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x1c}, @remote, @loopback, @dev={0xac, 0x14, 0x14, 0x27}]}, @rr={0x7, 0xf, 0x7f, [@empty, @broadcast, @loopback]}]}}}], 0x88}}, {{0x0, 0x0, &(0x7f0000003200)=[{0x0}, {&(0x7f0000003080)}, {&(0x7f00000030c0)="76aff69fb1ce6116d69e7038445252ab2af0852cc0816c7c6b98064a88bb130261c478fab576e30fadf806f67d55a14411b8d0fc", 0x34}, {&(0x7f0000003100)="fe64685fc0e15e2b74a03ea12b28e4edb8765e13222f6a04070ed050b6125e9b4ed5e1a8e9bd0447d0dd6d532b64001775a6fd5829a9ef6ddcea124c07696b95942ff87f83c26a82b0f930e9cec5528f9e0580d4d5d183baaaba7df4a0f62307b9e8e8e299308e1ee6147685d8182aff5e342834caa00145553522d04a3f97f1a8abe139815d3a97e7f391d43d820dc1ade7cb5ebd2225363253affda50a3628c95ea7c5f2961c56fb9b62c5fd8c3eeac50b679daeaafc77d9bd11d2749983b28a9e66ea139b1bfffc327336dec7ea09431a78d69351dc804c0b1ef79c09", 0xde}], 0x4, &(0x7f0000003240)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}, @ip_tos_int={{0x14}}], 0x48}}, {{&(0x7f00000032c0)={0x2, 0x4e24, @rand_addr=0x8}, 0x10, &(0x7f0000004840)=[{&(0x7f0000003300)="4b546fb24616d0f759c10038fd53de9ae6972dd08f283a91600fd3c2a251ad32625547ab8583f1a1b3a3a9a95f440496a8ee2a7c50e3cc1eb71d3cafc9937dbd3a8a86bc2141460fc1e9ef94d694a69784f76d3979a5d78fce41127fa3190f37c8d732a4041ab0686654f0ee38836537b62c16c19275b5b39393a1d5d55080a656c1b8122dfa0131aca53129917e0661846763536134fdfa49e02f26750329a0337099776f5b6df4bf5fe09a932d2f26111dd0a4b82e2df6782dc16157d0", 0xbe}, {&(0x7f0000003400)="b70ba923429e2fab584816acdc6e8f3626c5c66f0ba7e716a608b7f538e619131dc16fbfdca46d0fead4d386b5c3acfdcde4a40f3c7645a5fe514bc414187c732ad1434e89cf907c9ca898b3486b112831b556d041187bb38dcf5d46237040f69ba737ae", 0x64}, {0x0}, {&(0x7f0000003480)}, {&(0x7f00000034c0)="fe579b6e2442cd7db596a1604aa1f849f7d9d002b63a142ad10264b24f3ecd026061d20e4d8bb5b6b17fb1916caf4983ecb0ac03fed940f6130b4db9c4d536d1aef29a64d5c056ff5d90c9b58fd55c31c4f73bb7a8c9864c4635c8df65ba01455b64dfde0dbef9ff24b114ba489e98735e217f41d6628bd4b4c04afa197440af97a215f63a5e038df617d11ad4eaba9b31b482888d5dc91c3f370d2b2a7f2ae76c1c6e6207e75459d97325da3a72a027b2cf07eca52a79", 0xb7}, {0x0}, {&(0x7f0000004700)="a8bf984e083cc4eff02936898f3703f3102707ce5f53b32bf81772fddc03eb5744b20af5033b69d3c8851ccdb5300505dad37cf214441b78abbc11cfbb3c87f9b69db3eb92de33df58d1a10cc4a98d42005e2ebea593d2fc72b7cc2a", 0x5c}, {&(0x7f0000004780)="254e659ca093dcdc85c8135c02cbcf5c2c3c5bdfc93c2c2da93436d99cbb96a549243afe9892ef960d190c6581a2c246f838d8c8384be65f50f480dc5678ccd928ee071674689ec40c1a9ab2eddb9e16adda3db96c84d11147fe9226aa729b80753ecc7381181315340d0010", 0x6c}], 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB="94000000000000000000000007000000440c0930000000090000000401071fff7f0001c00b0100000000a13af333e0000000028907097f0000010711f940301998cde0589fd849bafafbfe940600006ee5890f81ac141417ac1414aaac14141b4414062d00000003000000027f10000100000000940600000006860f000000000603a90206b52fe3590000000000001400000000000000000000000000b14734262f4a3dc08fc49152cad16b25fba70795dfcbdedc9b1dcdfa71b28f00"/204], 0xcc}}, {{0x0, 0x0, &(0x7f0000004bc0), 0x0, &(0x7f0000000f00)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac1414aa000000579fb2000000000000000000000200000081000000000000001100000000000000000000000100000000000000000000001400000000000000000000000100000000000000000000006800000000000000000000000700000080057ba21f862a000000060204d5b5060e15f6c94d60bdbd91dd3e0b9fe7010006c68126de0500000200062466848294064ef62a15890708ac141400070f407f000001ac1414aa0000000c890b8100000000ac1414bb0000ad2d3350b6f54a56a48f7e4993c04b9c3e6fcb32eb432828c7181927ee27bf58ebaf61770984e401140ebf35b4f3faf4f78e2c4fc89f66ab3b357cc29031b666309a1d5b6b902e2ea3f603f66d2e44a6da0f078359ace7a079af00"/290], 0xfffffffffffffff7}}, {{&(0x7f0000004dc0)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000006500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x23}, @dev}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}], 0x40}}, {{0x0, 0x0, 0x0}}], 0x6, 0x4000) r10 = socket(0x2, 0x803, 0xff) readv(0xffffffffffffffff, 0x0, 0x0) connect$inet(r10, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) sendfile(r10, r2, 0x0, 0x72439a6b) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000480)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000df6cfaec25fa00000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000b1822ab7a8"], 0xb8}}, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x2, 0x0) 12:30:28 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000040), 0x12) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x210080, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x10076) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/create\x00', 0x2, 0x0) sendfile(r2, r4, 0x0, 0x5) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x2, 0xad96, 0x1}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000001300)={0x2880008, r0, 0x11}) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x39) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r6, 0x0, 0x0) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r7, 0xfae71e5936326fae) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x9, 0xff, 0x1, 0x0, 0x8, 0x99227c55ccd59c34, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000240), 0x4}, 0x928, 0x5, 0x3, 0xf, 0xfffffffffffffff8, 0x3, 0x492}, r6, 0x9, r7, 0xc) fchmod(r5, 0xfae71e5936326fae) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f00000003c0)={0x1, 0x1, 0x1000, 0x83, &(0x7f0000000180)="80b113443d37792d4f4dfd4f622195e479f99a632dcea5f7bee8e8ac872f1158bb0223c0691616aa52065a797de421509117b76efcb32e241d936cc7cc4242c26381bab439ff0427a471024e0f1fd41fe7c37a16690aab17dbcaa3a8a2c2117f934c304ec5f56ac4259f45f9beb1efbd41f40f437011982aacfeb5342a654d702255e4", 0xbe, 0x0, &(0x7f00000002c0)="c135eae2105eefbdf87c212bd1c6cbd3879251ed22c384d1ae74ad0152c9cfea822b8f754081054f39c3f3d7f489295c63bacd0ed810f54e5ffa9a4a07dfadb5a7060a1988d4df60c265eebb18b3e1edca0b03f7f1fb14c7422cc5dfa6c0faafa701b3b596c5ac552bfd9087d625f73b6444d93366e65995ca55341284a0b409d4c751db62ebe75d6d1db0e23171c39cf829008c8acf24197f692912a8fb77f965b1b6134e74caf7d485bc50f9df9c01fcb299d5fce0c4ea190842d9af76"}) [ 226.847773] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. 12:30:28 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 12:30:28 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f0000000040)) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote}, 0x1c) r4 = socket$inet6(0xa, 0xa, 0xa2) sendto$inet6(r4, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e5d37149eb0f4a333726cf6d5b7647306559155f1c69d6bfd145b83576f2df4d85f271fd4119db923e2412c66dd954eb59dddc7e1fd286a83971b2ba1c63b4f99702cf91f3d1ecffb8ae189c79b403805e83650c251a564942896f205640c23b0cf51fe9bd931f54a343794710a9cd53cef20938edddb2bfa3c1f72f8e79e41e30fb8f9d314abd999ba396521b6c10bec7bc9d0745a80299342f5cf89eb9d94044258fbb18cec1cdbbc016a773d3ae41e3e30248e716fd0873d31454902cbe7dcf7d644dfadc255d99652b5ed5a5b1a75e3ad49cf80178678402e9d3a755d009889b2e6138f81dc02eedcc353aceb2f7781aea08aa91be7e1e2416ba3d555b1f2237f68c5d7dcfcb1b917c292a35d6d7e7cf2cb1dd6dba5a50ce55c4638d7d38cb7afd8da02f281ab69392bc6531eb03eb97c1d075e3342c244861d04bcad8991b8f588e48ad7fe218d2f5e604bb31c59241245b485210fe418af3d6377b59d5ab128497efeced38cc5036b1f34cb89674b5179219f34b9e8e1849695d7c23cce77eb8f038ef9f2cd69d1c9e2d6b46610adbadbdad857a77f59d38cb5120709716b87c52a48de249b231d7e39985b8b58094c0d7b4c6d1671a8ff9d2daaca94df2adcff6420077df0ddbc66d00b141ffc6e28bed09a19056e52a905a72c99a04af56b22da83135808ba2bfe87a39753447e78500d16bdad52d97df73d4852a79e7ec6910701b712cfd58c62b3ade86cf6ff0cd78719fa1ae81640381cb33f4f6b03c913e820cf9eb9b5cf7df9c878596c9ac9444cad118673fe339b4b7287b310ecff4742bfea2612d79d418293f0dfe14bc819c466473438ad71ea3b1386d17a9038b1f5a9285481500f84f4c7eabbf2eb071a101c69cce8e7495bda4c28a4e88f6a258abf58579c290eeb742b2678daab3ecc8c2bf97d89e89472901e254dd63ca7d918f8a7523161e29b28f64b285da7bb4a17d0ad734c321623e246bb0b5aaa08e8e7ac42b74ba83c70a8ca80068400be6adc3f4b01ba1050b54e6e4cf72fb567fbd27b74b2bfa7b7cabc6938851c13c6df7d5aaca79afd89b5e925379b959c7929ddfa3399695343f435772d70e5cfa3550377d23f50011ad5657e94c464cd43eb85496fd3b03bcb2d9278ceb432194d9893ffa747dfe85309f256c910e31e81dcd3cd8a13744fc2874737a2ff34bf8c89f15da7cc0853434117d744e30360b38ef1a063f9ee506f048e9980054e6c5c5688d04ece6067ac55bccc9a7773a2c4e21c039d153622130faff9fd675d64ad7284bd011b9b224713a721b4b731cf342357642a1a0bb846f5be443b7e72e9825b5f3a078c6ae09e4512dd93a5be1af13a49e6a33938509d3557aecf2356ac2329871b662a99cf3fd2486b064e7e6f90c1f8d632186a8bda338b02d45da4ea9041d42a23f40b93346dddc473a9f1a3d9f0285b7e48cbb87bc34d44b090a5e2aaf4764a10a44168f1719eff0b0d9bc1ce07750af4c21d0c67eae0799e91328c8b14869e4edd255a41735a2b1818aa9d3b271ba757af010ae6dbad89aa0d8f5b6f8ef3917adcedf247ffcf9ade407dfb5094", 0xfffffffffffffd0d, 0x10, 0x0, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000300)={@remote}, 0x14) sendto$inet6(r3, &(0x7f00000003c0)="3ce95c98b66a9cdea42aca63276ef1eca3f038047504ba09072b9792bbe041c012d015e0f9cdf7aa7a4d18766deff9a2735edc11437a10c0e9f265c48e7033f01161d5ca1babf5738b4c3df116d964712d2c577d1181a2a242ab4ada0b6cd45c1f36c27a7453575b33cdd7300a74dd585eab465795dccddd26", 0x79, 0x400c000, 0x0, 0x0) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000140)=0x4, 0x4) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000), 0x4) 12:30:28 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000004000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000004040)=0x1c, 0x80000) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@remote, r3}, 0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000004080)={'veth0_to_bridge\x00', r3}) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) recvmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/64, 0x40}], 0x2}}, {{&(0x7f0000001500)=@caif=@dgm, 0x80, &(0x7f0000002840)=[{&(0x7f0000001580)=""/227, 0xe3}, {0x0}, {&(0x7f0000001840)=""/4096, 0x1000}], 0x3, &(0x7f0000002880)=""/26, 0x1a}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003cc0)=""/223, 0xdf}}], 0x3, 0x0, &(0x7f0000005500)={0x77359400}) sendto$inet(r1, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xfffffffffffffed7) 12:30:28 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$TIOCSSERIAL(r0, 0x541f, &(0x7f00000000c0)={0x8, 0x800, 0x9, 0x7, 0x80000001, 0xffff, 0x18, 0x5, 0xfffffff9, 0xff, 0x9, 0x401, 0x0, 0x3, &(0x7f0000000000)=""/2, 0x4, 0x63, 0x8cf5}) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) r2 = openat$cgroup_type(r1, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f00000001c0)=0x5) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000874ef37ee1d618fe7cab98471cc0fd6f419171fabc2f5dfa529028cddbc83ce2924efb3db14da7723fda0ea752186cb56863503fa7a3361f63c877e8d1bbcdf4fd6e3f49e9c5b306b5bc2bff2209a29d2f3e6891166af0f67a32da6045312db4de7dc8d3c4dae19328f5b0", @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB="852a62730000000002000000000000000000000000000000852a627700000000000000000000000000000000000000008561646600"/80], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 227.010645] binder: 9531:9533 ioctl 541f 200000c0 returned -22 [ 227.034566] binder: 9531:9533 got transaction with invalid data ptr 12:30:28 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90302f66f270455996a803be9024f1b5b739"], 0x10}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffc, 0x5}}, 0xe8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r2, 0xfae71e5936326fae) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000080)=0xfffff79c, 0x4) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsync(r0) 12:30:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newlink={0x34, 0x11, 0xe3b, 0x0, 0x20000, {}, [@IFLA_IFNAME={0x14, 0x3, 'bpq0\x00'}]}, 0x34}}, 0x0) [ 227.066436] binder: 9531:9533 transaction failed 29201/-14, size 80-24 line 3316 [ 227.105887] binder: undelivered TRANSACTION_ERROR: 29201 [ 227.112030] binder: 9531:9533 ioctl 541f 200000c0 returned -22 12:30:29 executing program 1: mkdir(0x0, 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) creat(0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000200)='net/llc\x00') utimensat(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r2 = socket(0x100000000011, 0x2, 0x0) bind(r2, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @local}, 0x10) dup(0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(0x0) memfd_create(&(0x7f0000000580)='syz_tun\x00', 0x4) openat$selinux_member(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="0304", 0x2, 0x0, 0x0, 0x0) pivot_root(0x0, 0x0) 12:30:29 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x1) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) getsockopt$inet_buf(r1, 0x0, 0x2d, &(0x7f0000000240)=""/174, &(0x7f0000000000)=0xae) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x15, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda={0x66646185, 0x0, 0x0, 0x4}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 12:30:29 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x1000000000000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1201c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2203, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x8000}, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xfffffffffffffed7) 12:30:29 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) memfd_create(0x0, 0x7) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000080)=0x2, 0x4) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$unix(0x1, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = open(0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) creat(0x0, 0x0) write$P9_RLCREATE(0xffffffffffffffff, 0x0, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r4, 0xfae71e5936326fae) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) write$P9_RSTATu(r3, 0x0, 0xffffffffffffff09) fdatasync(0xffffffffffffffff) r5 = socket$unix(0x1, 0x2, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) pipe2$9p(0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ftruncate(r2, 0x80080) sendfile(r1, r2, &(0x7f0000d83ff8), 0x2008000fffffffe) 12:30:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x10, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./file0/bus\x00', 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) getuid() r2 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r3, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="ff5b7213f6012f66b0000000"], 0xc) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) clock_settime(0x7, &(0x7f0000000100)={0x77359400}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:30:29 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) ioctl$TIOCNXCL(r1, 0x540d) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) sendmmsg$inet6(r0, &(0x7f000000a1c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000028c0)}}], 0x2, 0x0) getpid() r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r2, 0xfae71e5936326fae) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f00000014c0)={0x5, 0x3ff, 0x8, 0x400, 0x9, 0x20}) r3 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2, 0x0) r4 = getpid() ptrace$getenv(0x4201, r4, 0x8025, &(0x7f0000000000)) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r6, 0x8) r7 = open(&(0x7f0000001500)='./file0\x00', 0x200000, 0x0) fchmod(r7, 0xfae71e5936326fae) setsockopt$netlink_NETLINK_RX_RING(r7, 0x10e, 0x6, &(0x7f0000000100)={0x6, 0x0, 0x7, 0x7}, 0x10) fchmod(r6, 0xfae71e5936326fae) r8 = fcntl$dupfd(r0, 0x203, r5) r9 = accept$inet6(r1, &(0x7f00000013c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000001400)=0x1c) splice(r9, &(0x7f0000001440), r3, &(0x7f0000001480), 0x8001, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000080)={'nr0\x00', {0x2, 0x4e22, @remote}}) ioctl$HDIO_GETGEO(r6, 0x301, &(0x7f0000000140)) r10 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r10, 0xfae71e5936326fae) sendmsg$inet6(r10, &(0x7f0000001380)={&(0x7f0000000180)={0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f0000001300)=[{&(0x7f00000001c0)="357074f50ed7587bb69543e4ca17fdf56bfa6a0c34f5f4a0e746c9b27580ec8b698e7c7d8fb47741438c2143a2c2feb8ba2e23cf03e11bfaefe14073716f38fc43a01d1c887fb24c940b14f62850fa294252c7c54b8415f4d1ae581572e2cb0aa1c899124227ef773ca99670d5744279046ae2f0f8214b69b5d9faed392f6ad125c7fdc59cb2abfb3af4679589f458014bc13f7fc2af299ce14482b6363e933fbeb857ca62f1a337715a314e65de3a82e9d4ca643a3d0bf7680a6328ced4129c2e08849d3ea5b59baada4aaafe9d49feaab72f6183339f2e36d757f9f52976bc384e2227d956fb72da0355f74c03a5d10cb0528b75c45e6688faaff4e16e9d6e548785eaae42bda6c2208188d19b98b69ed1cb6cea169680d54345d9f3edf33c070cde128d7e8b8cdf6507dc0801cd575a98222d15fdd3e6fc4171e3f3f6b78b68046d528905c060469d49de831e147be978eae6b4127972d9ede902aadf0867c49f7ad7fd6ffc7e413c788e8907ade1864efd1ca8c16792ad69ad5ebea943575ea7d16600dbeb8a0e34cc58f73c2bf19f53d451b4ec845e258392e6f975248d28647828500328dfec801c1a43049097fcd44b4233605bc84d5c371de4a564736da21096b73b6cd1c35c330f886ef7b2a89e66ec3dbcaad0588b0ea1b46b7fe00c0fd290f7e283c541fa5482eef3e18d47659d685574ffb38d1bdc7556841039fe1150ddaf7187cf7b9c4ffb3991659783a796c784b2fe0c882db6124b33ebe95d5872ad1daaf60e094842907ee073aa142a3d76130ae07bd96687dcf816067835791cf7a4ad630edec1b81965402b8ee31c9f908417d74724a55d120bfaf549ec5d6ef9bd0d8d2f081cd1b419a7d473612fabaecdf10fe4c40beeee0f7592166f02cc8cd02002aa1ecfad4f21bd62fe858277d4481cd6db6c4fa73ec730386f91bc705dd1663918693979bb36f49f67e0ef2ac4ac65f8fa8e44968ffd0f0f315f96e68e6a23d79771e3cc0c92261e68dd509208b803a421aabe496d3ff23f1c7aa563039fe9b8e5c4c02097950c6ccaa14b8e9540207f640ac3b18ac18232a0469e30ff59f8ac700dbe6a41539007f90dc8768a1aba68f0d9dec51ed04b2e939f0744d46d3a4ea9e7d3d7b5af943296a18cb9f5e1bcd92ce5614238baf49dacf8365116cd0e7cbb7e2f5dd4e09de81229870492bc0214ec088db59a8703af7f1668074ed341be9967a62e2eada4b1931bb7ca5810538d63734ef6c5a20de4dc804041392c587eee4acce8f7efdccdedaf9130e289a406ffec90b2a146d848ca02f3d500da087d1c79b52e2b5cdcac22e77ca224704ad91205533b249a3f5b63065ac62833a9e33a3607d21f96aaf095805cb28e4fd2b584001e428bb6d57d7d0faeb693e4a38db355771641a96ae4df704ff618f02347dd6957a71a0dba9a942f1a74de9868006be527def58f511a2f7492e16360b5c0f9cd45dc4ee7b704749b1e5f2ec6868c2c4c0dee4d8cc7fed63106f48291180aa735f6748b212e743ea5731db0d764821a2739e3312c9b82e411959fa68bccc10ad65ba4b458f0d6e6247964b40444d28f885889ee2bec9a3226ac308b01d24e46c71eb87962998d0eec8e65e702076197acb6de74a515b7f806bdb654430dd45755d1a9e00df5550366cb89d490edb2e4c0a4a918e271662ce6a2845918b150a1c2d6c839255226987f55756032fd7ae22fd70855cb6fb3bd93b2089419438da84525f5e29528c160984de983ae527dd454ae6e634818d303ff8683feafba7ff903fdb5de71e2da759ce0acc87f293cb116e313de0fac227a845ade214491638eb07cb6dc049e8379c55b204c87374c32dd99526e75061fe1c42e2717316ba736ea967a2d40cbe4787c950a946b49fdcf67558e0a988ef9168a33085dd156c98cddd8c4a4b45e3bc9834195f99f373dcfc9419df74560e9e4af9b047f6f6d34ac6e4e76593a5a803a3a6b819dc54f7c36199ed3670e942f2f9aa68346a4db3347f8eeee996942c1af2f58d48363c0c85387b2a6897ef6087e8b6b5e45d7a4d9bb72753f311c91f07d95eef0589bd64bb748f00576ded6e642504aad86b3c060ed30259caa62af4c34fdd5eb35ed9731d8752e1ce5be621670f1c82f7327b5516965074fb43b91e3d6f7d5875d072cd7f8af312812ba1d04c1f13e051c12593b42055207ad1d6b1029d44a8212ca28cb9995839b4d86f43403d678e96f1e3cbc4d5020250943f3842f907bc20bbabf1efdae00d7249824ab55c773aefab8b32767270e6f9bc432232930fe11a1c5d1c2afb3bccd53f6ce8eb05b64a5f5ae60310a15a58f84af49d485020ec9ca05fb9980b95d9c02213930b1412fed13b5d0f6b12c8e2af59683d2d4a2b7575bab26f55b80dc201a34ec26d345cefe5f5025ca9fae2b67fe7954dc2cf7ef206289a9346213fc646b1eb7c4172ac579f12aea1d12d5006a670f6be4d3d0b532b08d15570ca30f9a41c019a852f1b42a2f42c1ef86a91e0f2adb13667d3c7b9cbf60da9a110e0e1f3126a2bdca797b2f9f0f57ce99ce786b4d65e1b68417679f381a8d3b6b1a0ea7d31dd128a3dcdddf9c5658d011be8b6530764854cc51bffc98c19b1110fbbf836d2217f684b6147a71c63ab922fa64de4907729a4736743b2d23f5653d4a3aed7e48e7aca7830f1f56322860732b6a98d1f27948540b7bb12c2dfa920ea46713058bce2b99b32a25fb35ad328317348adcce06b2ad474bc3585db39f5e06ba98c3838f995c07ab1428b274b3d3344580d47970b5a915dbc79e968df593e04b23ac5f63398cc7fc6e8fcfbe55a3b08a569ec59ef1fe82ab633e41a62037b1a96878fc3e9b7f7a54fcd68cc15d50fb92a8038482c9d8aac5378def0b1476394fa78d20e392f1e99ac173643a960d874d403cc3161f52b86ad3ca755b0f1689d4ee4a244c2306cfc5ee53f87a7a6b90b6b8098369052679c712cc3487304540db7024938cb846948032244e130476174b74bfff05eeee593d72819e9d326854237699670c348b863b914d865f376a8f52e80be9591081f20622e97efec2f5f6c6b71fc6267d1eccf5ebcf69ea48e32ec97157f810febc147535e0ba54aae184ee582300795b7a20f5467c0c841bc66d75565df5a6b8c95b194cdafa74236690019876a20721110ebad076fec7980b3970d0d2f633e83b9b91c7748b693e0e004d8c77d7f550322e6fbf180e38574dc5dc9efefbce123d36d1b0a8fd821cde2c1badddefab550fa6a92488b3baaac3a2a04e21e2fd108ae109fd4b1d989daa0aebb85ff3872e4918315cfeb5926de517f43bfdb5081ff4bc01767b6950871e7b2af879232bbcf7daa3f7558d230eda644f054b38f909f5c1314093fee9251385377c9a62bccf676988dc81d96d3601e1bf70dc7a1d914cf32573abdbc1ca5178372505dc12fdec5ed1a278424e0f81815cf72d681af2cedec98dad6b7bfa43a3b237936fee94b5d08ee7fc1a7376a545633860959bc091ee5b226a7171c265015af49f44a24d3cd87a6f7f035ae84fd129d38af0ea5c2c8dbfe7fd7091d63d724c755ca121cc9c65c08cfc21beed55438a295b7d89a3987ef2c81dccae965d085e9f218e942b1ae84bfa621cb0565023adef264ea5556bea6e47bb16a94d8b0ec64cad841b8ad8865099cd09723b4e34608a7dfde585b0f57b709da4d6c91f8e7f6c373c51879948b8d7023cc6a083b0232e7dfbec0366bc1231e761a29a472a0bdd262fcaeaf28f82a5a5ce95f6ac60c57340b1810f87d13d5352dce884c0d5cf0994289e246011e2786c26552d5b083140a86fe23876b4719dd6ff73944f5cf1808aba2060874f11eddcc06ff1128f177236985dddedf2431086994ddccac8bbfda06cca2646cd7fa9a9c9a8dc52b8e965def855243f42fa64ed7dc650de16884999b06d092921788f51e7b9750506e3a46d6ca0dde1129ba14651cb9f71449cae2ad4d903c38dc46ed4a1e77503d35ebb95c8475e87333526f4d74017e652bb24922e6fb66325bbe44683aeb487fbdf9842e16d5725694dc4253648813c9bc1d761734e18b420b5947fd5fc238ffb2d7e68064f8ebe6bf960d48559a4cd9e5e001e2851fcaa10e19ae4a10b663ce7792dbf243f54cbfc8dcdc33d6b3f0098192467c7dfcb28b92d3b09e54acd9bb410cdbf9d4892e061885de1bcae74a88601aa63d42bd91219abc62bf90e4df89f623db884c31522b890a5ecc5e583764a0cb1d4f367c44676cfc4e9f3d04ebd8a399778befd161a6c412b846a94fa5489ddef42f0f5428311e473a63c8c47d13a0db6b1b3a23ce7f2af25facce2fc18b73e77135c0055ae70fa97bcbac770e4d57dfc43c5956af21eb02edf46644d765dc8fd003816833701a3b4294fbf8fe8102546147c8b9b43230db855d859eb27d3703b3a64ae09bde6f64ae5e3239dc4c6c41c55eb16e696a6e9d2602d6b592ced9a4f0cfd32697709655b7d85dba9c77b8e844fc37dbce619579db08eef9775023427b1dbae17db1b965ad63579b974602297224c4d90c1a329cae0dfaf6a5c1b21480a1025e2db99398a99a75c3125ccb47ea650d79296244a9327ce945578047c896c826fb6a5a55e357381bc92e33cbe4c625603ef9684ca21a1d27791238c94cdc016e25d28fce4ad51da98f00386c9865f24296bf6f4aeba7319d1dca4c3bb9870d2142a8bf9df8be66abdf58c2f2a750f7139ee48f180803109969239a0d21d680decdc3872c859f88822b60560c3a6f6555c56c532659032f09f9ea57159bef68285b4bdbcb25ea00e4d5ff20b78dda7da42901c58883d9cb18295e26074eff12eefda735b14bd7448a36f2d8aa83017535cb99dad2f5a33be9cc1fb829f20b3be79e1e2a1fe9e205f427692549b77081f32d48129e0bb901eb7b5543538840a706401b07637a8a0dc033e658a998a4f599fe34dd4fa0d10f24c2ad083ccd2a6f84c82a277bf2f343334d03df1313cadacd73ab233722172dec1bd2afd61251342222ba8c3c0d307eca01245345a546b08a9c3bfb05ac669004e407704312d5a8afe3b84a2bbdab48167ca7b0600731c34e837e31b9ecc51cced344098e1fe697735806417b66a740157541d72384bdb66240748799e4cc48d82773fe3500597eb98e067aaa50ccdbf3771d9b3270b7299be6da66de2ad2b830b661730828b39a730f10016f044f76322676a605cb8b48698e1f82489f304d89519cdf688a9682ed793ba406259a9f24e84d221c9b49d3e5abd05f05a54767a4a694a028fd6dcb729efba7774c69eb3bc7c7c19528d6f2157faa7994997d60b362f2b00d9a68881c317edb3307892eb9c13a55f081b9624b5339bfa1570bd23caa9d37218e3175cc3b356498d4957ec98351e4d94847260d2e3ced28ea0b2b656fd2e677c646590eb845cf83bf36dc631740c2c82d87e321d9460cf36e3a848d6dfcef88f6df68cea8ddc4150124d0e5ed171ffe443556c67cb042e39583deb927ae1b240f861bec34c042c26f0265c7d86fd0969af2ac1578fd4166518259e9bdb34944c97dd87c34a6786f9c817e979979641a692fd739678e28197214d8ef65b073d7dc5c6a162d054c07e827b268e9a7a909d7ffec5849dc520d194494990f4f52be0bf3623f3187ab84ffb63c4d93d75c2e037b11e47454842b4107721499fdcf10843bb5efbcb56bc57bde0797b64bad430f1fae43b60c41c0e63362ead9896457fbbda100697d59a9935cf009a5dfd6fea2102493145dd", 0x1000}, {&(0x7f00000011c0)="680ea2ec6b56d19ff5d662835a067b2e7cb5f4bc87c8f2cbbe0573385957", 0x1e}, {&(0x7f0000001200)="b9f002f7d9ff29d0cbb5bf0c20ff6a17dd1914d000343d19cec69dc14f63c3f00fcb89ced225f78577980f8fc4024044ddfed8ae3b06ab010a8182fd5ef28ff0759df48a2f37c43a28fddc3290f019998c6817e2340769ccc5bea66605524a94041dba2f77400f0932f3fa9099eb0b23a4e314ce3f88592beaa8ab49f20d420ffe9ece7eca96356b97a5eb476b2c9e5381ba69a71d365259f59199855c657a7f6e2bf16ef74e1adfe10f485c3987ac749a89b3ff39aabdc95440f4efdfaf5c967593485a437d9920d177f6a12676b75584b37fb95ff91dfa35cd0c882fee10b01a6ae4608d45", 0xe6}], 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="3800000000000000000718000000ff04015762706c370001000000000000000900"/56], 0x38}, 0x20000000) 12:30:29 executing program 2: creat(&(0x7f0000000080)='./file0\x00', 0x0) socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a}) pread64(r0, &(0x7f0000000340)=""/39, 0x27, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000780), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0xb2) syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000020001203080001007369740014000200080011000000000008000200", @ANYRES32=r4], 0x40}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') preadv(r5, &(0x7f00000017c0), 0x35a, 0x0) getpeername$packet(r5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)) recvmmsg(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x20000, &(0x7f00000006c0)={0x0, 0x989680}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x35a, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x35a, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000005100)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 227.540750] binder: 9560:9568 got transaction to context manager from process owning it 12:30:29 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r2, 0xfae71e5936326fae) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x218a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 227.585207] binder: 9560:9568 transaction failed 29201/-22, size 80-24 line 3129 [ 227.614160] binder_alloc: 9579: binder_alloc_buf failed to map page at 20ffc000 in userspace 12:30:29 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f0000000040)=[@register_looper, @request_death={0x400c630e, 0x2}, @enter_looper, @increfs={0x40046304, 0x3}], 0x91, 0x0, &(0x7f0000000240)="680d5dfac38d2e5084ba4edd98f2e90860e038446c7fee9f3ceaa9eb8f86c7bd81b34402af86fd35bbdbab3d48aad3e9bdffbe68ce9d52f2b1f12d66eb12c0c7c082a9aedd388fb30aeda662aaa4f0bf1313da77ae434ed7fd0ad949f889dca3ba4303cb419753c0bbb5cadfde48f6f654bbf9b4d70415876c5824c533ce86db7de58c02a3b756c5d73ef4d528ef936349"}) 12:30:29 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r2, 0x0) setgid(r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) pivot_root(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus/file0\x00') r4 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r4, 0x208200) sendfile(r0, r3, 0x0, 0x8000fffffffe) 12:30:29 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0xa1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) pwritev(r0, &(0x7f0000000540)=[{&(0x7f0000000340)="7f1274d9afc6f37a67e9416395af743ebbf031df58388de891865ef57afdb0989d33b3321712a787b5cefeb8baf399d2e62a385d36d3599bfd3c4024f50a5436ea525a39c5305086482c8b97cce633f9e0595ef826687e2a656fa47ddcaa5d9e014ad380920287a579711182328ec0de2ef36c28318fc4bd6ba27bafe4527af8bcb27ecf3cca260754654b1eb1b7", 0x8e}, {&(0x7f0000000400)="eb8a16279e7c95ef3328923dc168b9e15f4ba970d1f49695bf7cb73ad33979848e76b9d8be19e9999903c3fa828a7788e7cd1d7aa5c5da8322dcd50e55366be236f9a687d1a01c080d5d394826cfa0d062a857ced8f3df0bf65543081f2bb3673e696e04503669042b1c7e928c29469591e39e31d6a7d77a9e2b88004219cf2cdde7df23e114f351fc826b1e206af215c7c4877f524423761437a0cab93b14cc007fa2111fdb83a638d13ce152aee41b029d", 0xb2}, {&(0x7f00000004c0)="535b8bc7800c586dfaee29515304e3c8ff34300c4cb17859084031382f459c1d827416e32a60eda1ae8927e193b96c4119c79634689c5ad5e97bea992f5ddcde60cb5a005f5e98c0416150f645a93dbffbbcace56e5fb966f282db", 0x5b}, {&(0x7f0000000240)="f3272999a4fb5b64094b17251c93a08146be8623825e74f6c99a5b9b9ec17530292c677e9652fb8718a4", 0x2a}], 0x4, 0x0) r1 = socket(0x11, 0x800, 0x0) r2 = accept4$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14, 0x180800) getsockname(r2, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000100)=0x80) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r4, 0xfae71e5936326fae) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000140)={0x0, r4, 0x6, 0x80000000, 0x101, 0x40}) r5 = getuid() syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f0000000300)='./file1\x00', 0x1, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='nodots,tz=UTC,euid<', @ANYRESDEC=r5, @ANYBLOB="2c006f62f51e88aa185e76cb506e9d24cd9981d3b6351851621ca46c0eafd6944d78ee96b12c77fec68ad458f133cb4c17aef60239b233970726fa73a5ba7b6cc7d615da8430f3adff96fb428da7ebc4d865acdd7d6e9df319a6e596c316202dc14918e871c76969c391eee7f39b4b28bd99f7f7172ba5d3458ca4aa5733b0eeb990341a00ee10fb79019d2b03cad642661e7270e260ed97c3306218887e290614fa75d9a45d9e3a4bbcdb13aacb14c9cf9695ec238ff3a7cfa523f6663036795d089a255468edf72bb3aa2f"]) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000200)={0x44, 0x9}, 0xc) [ 227.623655] binder: undelivered TRANSACTION_ERROR: 29201 [ 227.628020] binder: 9560:9582 got transaction to context manager from process owning it 12:30:29 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1000000000000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1201c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xfffffffffffffed7) 12:30:29 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB="852a62730000000002000000000500000000000000000000852a627700000000000000000000000000000000000000008561646600"/80], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) 12:30:29 executing program 0: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x0, 0x7, [@dev, @link_local, @dev, @empty, @remote, @remote, @remote]}) mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x10000000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9e9c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x39b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40) [ 227.628034] binder: 9560:9582 transaction failed 29201/-22, size 80-24 line 3129 [ 227.634938] binder: undelivered TRANSACTION_ERROR: 29201 [ 227.711386] binder: 9588:9590 got transaction with invalid parent offset or type 12:30:29 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="852a62730000000002000000000000000000000000000000852a62770000000000000000000000000000000006000000856164660000000000000000000000000000000000000000001e6befa216541d08487a90578c07e7a9e7c4b18d5fc265fdcd9ade27740a3d3526c7c7985378ff9e923daceff578fa00b786295f6bc9807794657866a7efd8997f7d2bd8f62b01f07b090f29009149c7c5035f3426a186620a2ca97f436f09878b3c3b486071768d24161952f9e5a0c11db303f51db0c3c6534e1081630db0eb7c01d4ae28f9711bfb7e7261fcbc45af"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 227.711541] binder: 9588:9590 transaction failed 29201/-22, size 80-24 line 3454 [ 227.711860] binder: undelivered TRANSACTION_ERROR: 29201 [ 227.722348] binder: 9588:9598 ERROR: BC_REGISTER_LOOPER called without request 12:30:29 executing program 1: sched_setaffinity(0x0, 0x2de, &(0x7f0000000240)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20044}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x242400, 0x0) r0 = open(0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000280)) syz_genetlink_get_family_id$tipc(&(0x7f0000000a40)='TIPC\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/mls\x00', 0x0, 0x0) ioctl$RTC_VL_CLR(r2, 0x7014) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) sched_setparam(r3, &(0x7f0000000000)=0x9) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}, 0x100) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000140), 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) write$binfmt_elf64(r1, &(0x7f0000001640)=ANY=[], 0xf5aab446) 12:30:29 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r2, 0xfae71e5936326fae) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x50, 0x10, &(0x7f0000000240)={@fda={0x66646185, 0xa, 0x0, 0x20}, @flat=@handle={0x73682a85, 0xa, 0x1}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 12:30:29 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000480)) fstat(r1, &(0x7f00000003c0)) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="00000000000000000004000000000000000000005000000000000000180000000000000006a89654ea77c90f8152c68f3b22cf29b548a98d4cb1afcdc3560b4acd49753b65b24c64ba559fb7468c0f7c4da6da5603f596404e998d5cd2b74301422220013852ab1079d034a25d312f91331d02d97e0cd2f8c13492cefda01920a8766b845ef12d26e50770de371901e526358cab7f244b5162d6df58d71b63b499bf6a1a6c86bedc9d2cfc8bd49aa7b769d53a8bb1ee9f99", @ANYPTR=&(0x7f00000017c0)=ANY=[@ANYBLOB="852a62730000000002000000000000000000000000000000852a627700000000000000000000000000000000000000008561646600000000000000000000000000000000d8f3da16bc15b68fde577f"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000018"]], 0x0, 0x0, 0x0}) syz_open_procfs(0x0, 0x0) [ 227.722406] binder: 9588:9598 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 227.722416] binder: 9588:9598 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER 12:30:29 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x2, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000000c0)=0xfffffffe, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x7, 0x6}, 0xc) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0063404000000000000000000000000073ccafb5d19429c000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB="852a62730000000002000000000000000000000000000000852a627700000000000000000000000000000000000000008561646600"/80], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0) [ 227.722426] binder: 9588:9598 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 227.730879] FAT-fs (loop1): Unrecognized mount option "euid<00000000000000000000" or missing value [ 227.761657] binder: 9603:9605 got transaction with invalid parent offset or type [ 227.761705] binder: 9603:9605 transaction failed 29201/-22, size 80-24 line 3454 [ 227.762606] binder: undelivered TRANSACTION_ERROR: 29201 [ 227.800337] FAT-fs (loop1): Unrecognized mount option "euid<00000000000000000000" or missing value [ 227.810935] binder: 9611:9613 got transaction with invalid parent offset or type [ 227.810983] binder: 9611:9613 transaction failed 29201/-22, size 80-24 line 3454 [ 227.811232] binder: undelivered TRANSACTION_ERROR: 29201 [ 227.838282] binder: 9611:9616 got transaction with invalid parent offset or type [ 227.838339] binder: 9611:9616 transaction failed 29201/-22, size 80-24 line 3454 [ 227.838609] binder: undelivered TRANSACTION_ERROR: 29201 [ 227.870437] binder: 9621:9624 got transaction to invalid handle [ 227.870446] binder: 9621:9624 transaction failed 29201/-22, size 80-16 line 3138 [ 227.870584] binder: undelivered TRANSACTION_ERROR: 29201 [ 227.947104] binder: 9632:9634 got transaction with invalid parent offset or type [ 227.947155] binder: 9632:9634 transaction failed 29201/-22, size 80-24 line 3454 [ 227.954731] binder: undelivered TRANSACTION_ERROR: 29201 12:30:29 executing program 4: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f0000000040)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r1, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000240)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000100)={r1, 0x0, 0x10001, 0x7fff, 0x7ff}) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 12:30:29 executing program 0: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r2, 0xfae71e5936326fae) fchmod(r2, 0xfae71e5936326faa) write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7, 0x1b, 0x1}, 0x7) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000400) 12:30:29 executing program 1: setrlimit(0x2, &(0x7f0000000080)={0x0, 0x2000000}) munmap(&(0x7f0000fd4000/0x2000)=nil, 0x2000) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x24) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x403, 0x2000004000032, 0xffffffffffffffff, 0x0) 12:30:29 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000bc70000000000000950000000000000099e941a413f8647cf5dcbbffaefc3cbf11bc9031ba7a0af86bf4aa35339f6b382c4caf9db6fa7a9b85"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r4, 0xfae71e5936326fae) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000100), 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 12:30:29 executing program 2: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', 0x0, 0x0, 0x0, 0x0, 0x800, &(0x7f0000000300)={[{@shortname_mixed='shortname=mixed'}, {@numtail='nonumtail=0'}, {@rodir='rodir'}, {@fat=@check_strict='check=strict'}], [{@dont_hash='dont_hash'}]}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x6, 0x3, 0x64da, 0x6c}}}, ["", "", ""]}, 0x30}}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) open$dir(0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="020300030c0000000000002000000000020009004000000000412d1fbc000000030006000000f9180200ee00fbb70000d81458186fe8b90002000100000000000000030200044a7b030005000000000002000000e0003f0100000000fca0d971e9fd2bb4b88e524ae03e6521c84c1d7afa5cac81f30f16cd3ba77e4d5a8a682d271d4e0b57a07686d8cd335d8541ca148e882dc5bafceed2dedb06c1d95dfcc7e08e6dc8bbcceb36c800"], 0x60}}, 0x0) exit(0x2) init_module(&(0x7f0000000200)='\x00', 0x1, &(0x7f0000000240)='check=strict') [ 228.101893] binder: 9579:9581 transaction failed 29201/-12, size 0-0 line 3284 [ 228.110748] binder: undelivered TRANSACTION_ERROR: 29201 [ 228.117174] binder_alloc: 9579: binder_alloc_buf failed to map page at 20ffc000 in userspace [ 228.126136] binder: 9579:9642 transaction failed 29201/-12, size 0-0 line 3284 [ 228.133823] binder: undelivered TRANSACTION_ERROR: 29201 12:30:29 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4b221fd6550e21b6, 0x0) fchmod(r1, 0xfae71e5936326fae) r2 = dup2(r1, r0) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@remote, r3}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', r3}) sendmsg$nl_route(r2, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="200100001900040426bd7000fbdbdf2580002009ff0400050006000008000100ac1414bb08000400dec68a5a44796a732fd5f10f700a74fbb6be51c04f60306ba53f42dac843f975f86601b9915b6f5d10f45c8da03d2a4dbfb6dcd14b4bac6317d2f1b6f17dd5a6046a1ff032d858db774ab0688d735567a201666b366918f2286a7507c2284d69ff67cbdec3f4", @ANYRES32=r4, @ANYBLOB="08000500e0000001e40008008a4b8fe5b3de6a1471f3d0a03d8464ba078e2d9e32ef563d834cb7d7be2764132d6338f9e609d0e16ae53590374c1e434db0a1856b35849303fca685bc861bbb4310170a919906f19b821649db335c07efa6ea34515cc7cddbc423ddfc6a2f4f2d2193c383fa479c613a323bb66e07a889997af93ed833b53b02219177d233191303afe8c54eedafebea317ae891c6a4610f3b007e06421c8362ec07acabda93d93281266ad0b90dce3dcd45ca923b39b6528bfd20488354351306901a5b61a9bf6d239b0bb4f31e773465b669f4be7d0c7879991647beec831c053ad540d9000800100000000000"], 0x120}}, 0x5010) r5 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r5) r6 = dup(r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$inet6(r6, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) timer_create(0x0, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_FP_MODE(0x2d, 0x0) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, 0x0, 0x0, 0x0) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x10) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) keyctl$clear(0x7, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r8, 0xfae71e5936326fae) sendmsg$nl_generic(r8, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x73403a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, 0x20, 0x4, 0x70bd2d, 0x25dfdbfd, {0x1e}, [@typed={0x8, 0x44, @ipv4=@broadcast}, @nested={0x3c, 0x2f, [@generic="808c3a028032041755f2d7564ff9dc7f68f180f970ba2ec5b5b4f97b3d605ad400", @typed={0x14, 0x1b, @ipv6=@rand_addr="f962dab9036b75e4914042132b028e35"}]}, @typed={0xc, 0x39, @u64=0x8000}]}, 0x64}, 0x1, 0x0, 0x0, 0x28032}, 0x4042810) ioctl$sock_inet6_udp_SIOCINQ(r5, 0x541b, 0x0) r9 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x9}, 0x1c) r10 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r10, 0xfae71e5936326fae) ioctl$PERF_EVENT_IOC_PERIOD(r10, 0x40082404, &(0x7f0000000000)=0x6) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r9, 0xc0506617, &(0x7f0000000740)=ANY=[@ANYBLOB="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"]) ftruncate(r7, 0x80003) sendfile(r5, r7, &(0x7f00000000c0), 0x8000fffffffe) [ 228.163658] mmap: syz-executor.1 (9650): VmData 35287040 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 228.185062] binder: 9645:9649 ioctl 80086601 20000240 returned -22 12:30:29 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0xb, 0x1f, 0x6, 0x4, 0x9, 0x5, 0xf23}, 0x1c) write$FUSE_BMAP(r1, &(0x7f0000000000)={0x18, 0x0, 0x3, {0xffff}}, 0x18) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ec624040000000008b0300000000000000000003000000000000000000008000000000005000110a00000000bf04000000000000", @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB="85a0fb9b033a85b0810cbbd5e63e7810e72a62730000000002000000000000000000000000000000852a627700000000b90c0000000000000000209fcd0ec3009cc12224d88561646600000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 12:30:29 executing program 2: mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) creat(0x0, 0x0) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) perf_event_open(&(0x7f0000000300)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) stat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000480)) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffe5d, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000e9ff07001b0000000000"], 0x28}}, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs(0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="400000000000000008001b000000"], 0x30}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000003fc0)=ANY=[@ANYRESDEC, @ANYRESHEX]) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 228.185847] binder: 9645:9649 got transaction with invalid parent offset or type 12:30:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) poll(0x0, 0xc1ee2ee995365d98, 0xfffffffe) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000080)=0x8) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.Ccgroup/sy\xbd4\x00', 0x200002, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180)=0x74000000, 0x0) 12:30:29 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r2, 0xfffffffffffffffd) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4e, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00634040151cbc12000000000000000000000000000e000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB="852a62730000000002000000000000000000000000000000852a627700000000000000000000000000000000000000008561646600"/80], @ANYRESHEX=0x0], 0x0, 0x0, 0x0}) [ 228.185900] binder: 9645:9649 transaction failed 29201/-22, size 80-24 line 3454 [ 228.186631] binder: undelivered TRANSACTION_ERROR: 29201 12:30:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000000280)=0xc) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000080)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\x06_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f00000000c0)='S', 0x1}], 0x1, 0x4081003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) prctl$PR_GET_TSC(0x19, &(0x7f0000000140)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x4e20, @empty}, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000340)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r1, 0x0, 0x10) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000001c0)) r5 = openat$cgroup_ro(r1, &(0x7f0000000440)='cpuset.effective_cpus\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f0000000700)={'broute\x00', 0x0, 0x0, 0xb5, [], 0x4, &(0x7f00000005c0)=[{}, {}, {}, {}], &(0x7f0000000640)=""/181}, &(0x7f0000000780)=0x78) r6 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x2007fff) dup3(0xffffffffffffffff, r6, 0x0) fcntl$setstatus(r6, 0x4, 0x44000) io_setup(0x8, &(0x7f0000000200)=0x0) r8 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r9 = open(&(0x7f0000000440)='./bus\x00', 0x400000, 0x0) ftruncate(r9, 0x2007fff) fcntl$setstatus(r8, 0x4, 0x44000) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0}]) io_submit(r7, 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r6, 0x4c00, 0xffffffffffffffff) shutdown(r4, 0x1) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000500)={0x5, {{0xa, 0x4e20, 0x0, @rand_addr="440e06e3d07da913e0bf83acf2418443", 0x3ff}}}, 0x88) creat(&(0x7f0000000040)='./file1\x00', 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) fallocate(r2, 0x11, 0x0, 0x100000001) [ 228.214193] binder: 9645:9657 ioctl 80086601 20000240 returned -22 [ 228.273983] binder: 9659:9662 unknown command 1077961452 [ 228.273990] binder: 9659:9662 ioctl c0306201 20000140 returned -22 12:30:29 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x800, 0x170) fchmod(r1, 0xfae71e5936326fae) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r2, 0xfae71e5936326fae) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, &(0x7f0000000040)={0x7fff, 0xe7}) [ 228.305173] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 12:30:29 executing program 0: socket$netlink(0x10, 0x3, 0x2) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x0, 0x0) socket$inet6(0xa, 0x1000080002, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365c, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0xdbc48b2ed180dff0, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100001c9, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) dup2(0xffffffffffffffff, 0xffffffffffffffff) 12:30:29 executing program 4: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x40000, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000040)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='/dev/binder#\x00', 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 228.365496] binder: 9670:9672 got transaction to invalid handle [ 228.365504] binder: 9670:9672 transaction failed 29201/-22, size 80-24 line 3138 12:30:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) geteuid() inotify_init1(0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$void(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x6400}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x200000, 0x49) recvfrom$unix(r5, &(0x7f00000003c0)=""/117, 0x75, 0x10003, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e) [ 228.365782] binder: undelivered TRANSACTION_ERROR: 29201 [ 228.507095] binder: 9697:9699 got transaction with invalid parent offset or type 12:30:30 executing program 5: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={0x0, &(0x7f0000000840)=""/200, 0x0, 0xc8}, 0x20) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\a\xd2\x8f(.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\x15v$\xc5\xbcq\x9a\t\x9ej5)\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\t\xbf\x85\x98q\v\xd8D\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xca\xc2(\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1e\xb5VG\x9ad\x9a`=^h\x8c8\xc9\"\x1eO\xb5vk\xc9\xcfi\x90\xd7\xd3H\xa1\xb4\xda\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\xde\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\x95\xe1I\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|\x00\x00\x00\x00\x00\x00\x00\x00', 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0xfffffe38) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x660c, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x1c0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) r2 = creat(0x0, 0x0) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x04', 0x175d900f) perf_event_open(0x0, 0x0, 0x0, r2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000002d00)={0x0, 'dummy0\x00'}, 0x18) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x100000008005) creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) io_setup(0x0, &(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xc0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=0x100000001}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000002c0)='vti\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0)='\x00', r5}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f00000000c0)='threaded\x04', r5}, 0x30) [ 228.544862] binder: 9697:9699 transaction failed 29201/-22, size 80-24 line 3454 12:30:30 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0063178dde9db7b3b38a000000000000000000000009cf1557000000000000180000000000800096405afd15871472438db61e1e7336759871acda103e967b311dc728051e", @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="852a62730000000002000000000000000000000000000000852a627700000000000000000000000000000000000000008561646600000000000000000000000000000000000000000000000009000000e85ac50d95093666da4b892e419a450db3754eaf1edd3687530cb7e3a84e0e6c011cadb3b9c0b8cb817663f651b8880d564237f7883b8d028cbc"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 228.593203] binder: undelivered TRANSACTION_ERROR: 29201 [ 228.669376] binder: 9711:9713 unknown command -1927847168 [ 228.689962] binder: 9711:9713 ioctl c0306201 20000140 returned -22 [ 228.748486] binder: 9711:9717 unknown command -1927847168 [ 228.782083] binder: 9711:9717 ioctl c0306201 20000140 returned -22 12:30:30 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r2, 0xfae71e5936326fae) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r3, 0x0, 0x70bd26, 0x25dfdbfe, {{}, 0x0, 0x4108, 0x0, {0x14, 0x18, {0x8, @bearer=@udp='udp:syz0\x00'}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10001}, 0x20040090) [ 228.876405] binder: 9719:9720 got transaction with invalid parent offset or type [ 228.904766] binder: 9719:9720 transaction failed 29201/-22, size 80-24 line 3454 [ 228.953847] binder: undelivered TRANSACTION_ERROR: 29201 [ 228.959615] binder: BINDER_SET_CONTEXT_MGR already set [ 228.959624] binder: 9719:9721 ioctl 40046207 0 returned -16 12:30:30 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = gettid() ptrace$getregs(0xe, r2, 0x7f, &(0x7f0000000000)=""/58) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x180000) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r4, 0xfae71e5936326fae) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r5, 0xfae71e5936326fae) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r6, 0xfae71e5936326fae) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r7, 0xfae71e5936326fae) r8 = perf_event_open$cgroup(&(0x7f0000000340)={0x6, 0x70, 0xc9, 0xc, 0x54, 0x1f, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x77e, 0x8}, 0x20448, 0xfffffffeffffffff, 0x12b, 0x0, 0x8, 0x74c1, 0x40}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xc) r9 = openat$full(0xffffffffffffff9c, &(0x7f00000030c0)='/dev/full\x00', 0x400000, 0x0) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003140)={&(0x7f0000003100)='./file0\x00', 0x0, 0x8}, 0x10) r11 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r11, 0xfae71e5936326fae) r12 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000003180)='/dev/ashmem\x00', 0x0, 0x0) r13 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r13, 0xfae71e5936326fae) r14 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000003200)={&(0x7f00000031c0)='/dev/binder#\x00', r13}, 0x10) r15 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r15, 0xfae71e5936326fae) write$binfmt_elf64(r15, &(0x7f0000003340)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xe0, 0x7, 0x81, 0x7, 0x2, 0x3e, 0x9, 0x3e0, 0x40, 0x2d, 0x3, 0x3ff, 0x38, 0x2, 0x4, 0x5, 0x80}, [{0x7, 0x9, 0x3, 0x6, 0x2, 0x7, 0x8, 0x5}], "463861a278aa78b16d46dd8a8732bc5eec9386f3c7eaa0799286eb37a759b83b5090babab8ef", [[], [], [], [], [], [], [], []]}, 0x89e) sendmsg$netlink(r3, &(0x7f0000003300)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x1000}, 0xc, &(0x7f0000000100)=[{&(0x7f0000000440)={0x19b4, 0x19, 0x200, 0x70bd2c, 0x25dfdbff, "", [@generic="6d07af97ba30caadb857f76d4f85a7fa382b07c1c4c9f039820fcc4179839caee183ed915666beb645aeecdece1aaab6932f2ca72165c0fb54f9470cc89d6689a7059593282d07ef4a49e7b69f6d299d3b5477f4d37c6cacaf26dc62628eeabb42a625ec7cded874021a3952918c9a4761051d873a7fee439733f3f28b5544c0e634947c9f7e415b9e66c0506d757c9b4dab34cbc43b73e9ebb7c693518cb2dbdd8db13c32b7f072e5825e29d5106051252ca959d1d47a55fee112c7a74014767344cd09a7d238a676d95d631330f326e67688c8133040a5fe62ebe4072062ecddbf550af09bd0", @generic="884edc16314552f4a345f1ecedb856336395a117f76518324d8c22fa834558aa49a3890d8aa19b5f267fe50a6b5b479bcaea2b8858db9fae39b11fa15b5ed8df6366e3d0ebcf43d0b603e7b2b3e73126e0668528656bfb9c2b83a00bf97bc426732286f607199cf1b316d2019a70f8c0fa3e0624dbbb71216724e59e29aceaef2294bdcc82b29fadfe682ccc3cf8865c3af1f865ab531298856329b55247562e2a757190f65694dd00b1459518660c4926edeab11cc29a9cf7e5ff10cdd9a6a8a8caa9a9f0ed063d15a6097cf2f2e528cc6f8744067ea46ece362d407db22cd0a67a1843eaaef25adc95e9b51dcb2e16244cb195abf53fe93ecd1b941ba1a7d844df8b7e5876e80bf6d4f9a64d908b2af38facdbe7bd2849643b2cae2695b85ee2f909e1a2f878910b911a78abce362fe00f82f25526408e1118554262aa145d7cce286cdf6899b2e1252dac837f7f2d2549a5570946e54a8a53134141d6f82a5b480e6d0bb664ea86babb2f6394bffa6f5edf1ddd74214b896d469dae52c8f02e4ac3ae1f14e679e22beed6d8abbcb6319b18597a64358d3f54ceea8381a6723a080ba21c3e833f40a7c8eab1a6409e3af213d81a9d5b297029df4d8463aff300c55a144f57171191ca626bbc7dff820b0a59936432942c299284e2f1f40c1e7a5dfc218c6784c1f609b61c8414e620c231d05d04d1e286d77c132a10bb31ee6792c12e30f8a173b403098e7e06586e6c956c3d5936049a47298ce9183212ea54c9a00d2c0ce9d1a3360fa7042576cb26893a1e57153d459ab364531f22a89392f43f75183c9dc857254895e8600d004284ef8b58bc28efbdd1c1fe84582f077b025fd79c5b3a898f7b4001f997095bc0fd5f06d324e8b176a9b43e75bb3e099ef86b6abe78d447cb6f78b2f9f6ed92da59d21c89bec2202b02cd4934b18b1f1d146b0328bd35eb90270682d2b4a786d9bf30710e18dbafc3e1b2c26675cdb3c1c0e81bf2b68f0e40432a79bd7d23aa3206ea36d0c0787e3676698b18a66c2217c8d6dc4604e09295555ec1da7751470f73c3a7759f00092420be0963da42109634c2c6b399aee3381c122c911c0558dc5243ddf1ca949859b413d66824af0139153e5d2b5f731a4051a67fdcfe5bde59db0da68bd17bb808d0768c5931f51d453fcc25cc497019db8468811e4d39cce04489ea6b5725db9672b96436903951e0ce02470141c71fc4b6770f8f0f82239728dd4795c5a59ec5bc2a6796b2f6eb54c9de01ff4bb5f4439121600dabeb1f1820eac190fe07e55f20b2da5d0e54696103c5b1842371a34659ae50c8b4deb069c36c75490e07bf3fa4684758cadf03cfe82d3c28720262697e111656266f3c12a0dec5901301197c87e0d9cb856d52f4f5b4094ab7395aaa244c4237d55d9ebd2f2251407c9220e66440e24280ea8b501b16dfe6f9de41b1ed0b6fafa4797d03aa0ddc640ec21f0c1769968f4110051d3667933408dc2663bb20cf5367a7ba0b93a9a390bf8c9dacc5339773e91dd63c56fd9a0e0f9272c1bfecfba14051b84f169dd1f6afd04795eeaf783d503ca05fa272bae20dcadade9f00376a8ffea6e74c0b5b7e06db0f4850a09041a2f9d6ec37350a547f9648d5d4632f8c0d7d1d758fe836173c914fa7a8e44182b53f7e13589602fe2dc75e0ba8b59a3b6a0e96ee508f1e6ead122e74075733a8f8bb5ab2c99a08d18497973b80a561df62269f012eee00601124790b1ebd87d1952f0d347e0a9d3e655acd88f439dad0b91848abc6123ec80cd7655d776d81f3c2f47ab229334b0e76682347ede61297ea07c34b818d24f7c1a8a22264b071e47d583a3debc6ff93f31d036237902614b3eb420b076c3753ad87129ccd463876c089bf83e26ff0a8705221f20b860e0ec5302c49fffd73390f19b79380c850d5e351e8ec11dc506aa5920863a71b409543a818f3a37f638577a6248ef176685c1a9038bc26a937bbf2201b61efcf7c8e9c8053b2fadec1dbcf389f194c61bd60822ac35c42b4b48087556cd30f2a038fbb821fc29d42015924095dd1c40cec2a75bcee65f098915f36ccd6e4ec16e7422b1c5383901030ce76225c5366e73b14d54e7b69df30ed4c1506680a2d7eca32bdb4482e1f3f9b9c464bbaed3acf96e82423794c7178976239af1dbe0bc83635d2725e3d1e9f7d591635a7c7b0353edd76eed6ab79bdb697fa241221347a079854b96adb1cb05613940c998a43105cac8205e038c011b6ee8d083136e9107d0dd35e47eea533b06c3a91398532edc98ff851804860dee46c1850cba59eef78f44f605492faee415f2dc49e1fcd3eaa81a548c64f5a36b46c619d09dfafc1c9d003d49ccb65ca39f7478fcce095864366ab72bda9af94ecd16e41fa5f054703fdb13a79d9f913ab6350cfeb5b83886853cc5ce1c23557250e24fee7fcd1fc777c291ba43b714c16973b461527857d58893c02088ab99a65af64bff831b695744891f3c30a51164829dd65ad10ef6e0180723bc7a0c4213ec963a55663a3d50a01f7bb11c9db90e64475672425163f702ff12d2528d8277001f1ad71286c1214a10416ef059a791dc7bc732f31debb4c9cc762eee8e5b9efbb6d62958dc41ee115c5cbb1a64afed9c3c5f265a9a46b0440024d117122f04226d45dd9266b4585b497bc9c01d685d6a615bb732f5510d4f54c899e3f58fa81347d3027d6b0f4535e6de754cdbc918961f3733ad726e7378a5ac2587f3a5673aa496881d867a3950896d8bcbca723cefbeb25d47a28551de64e9a278bb64a7d51f659339276c31eabfce54f844199dc9cb5488dd9723a58910c61d7cbe5a80708b756a704f6020cf50a90b403687a7534e704d9449373f6f673544f05bf0696d07f4a39bd3bf2febc0292fd64e3c67b62d2c1761b6f90ff7fbee62002616cf01d114c4c113cfd819c4c44b0b53908f5e7244d00d80fa826eaef7f7fcf3687c633cd247e5cafa9ed095010900d2881553507284fd05d5b0605383e18231fe1601373e3b17171dba1d7b3618a2f10a049585c7c25895baa23fba26d6815bf8c1cd0ca27dca7a95ca828aeb664bbf0af0d164116ba6ae70ca1d6634d1f14df727f176a25aa23e8a4f50ae9a2b1fdb2eac2ad3b82edb4c630328d5917211c9b8b8fe74cb6cb736aa04a6c47a22c217af7aaaa15957900d12145c3f3c234aabaf6053e3abf283c9b3c0b5c66a92c3d951f9f4f9784373d8a3a68b868c73a6498554ce376e164de8b9671a830ed2e49196b6ae79f6aa6bc46a346ca18e35433bc08d5a061babe4817e70c299b6321914e78042b632673d18f9486be9e55cf6a509eb85aa71c7fb76d83f1b7ddb38ad1e57eb1a4987b356dcbb12a604417b1552f664ab9db5d8bf2a5685cfec14908f3b30625d57a9808c7b0e20b9305d889635780a13a05cda4929b704b27119173028fdd54d844fa58bb62f6f8708b9d9f4a74df6b7a78d7a47f88c82166a114f46a12b836450acfce4f8fece4f857fb13d4eef511970b14a859f94be4c94af519f8a27132a4a2bfe520833e9696f6e6e2851bfc2c27db3d6b29f5247fb3ab4790f03b4458f9b174964f24d2c7661fbe28679308c9e9b7195c9ee02042ff912583e287675037094b5c8c34a87dc0425878e49396bc6041d3fc1d80644e43af686896cc99a58ae9ef9431836f79188a722e073a5680bb810b2a6ad39b89904e525838e4c5d2a05f8060132b637a640c2db849d77c4f30efd2397060ca6d2cf3427c941babc91c7a5178fb83a5e81be4e24c6a60a3233621c7a944c5327e57d8b68ec26b4c68c68806a5b33ac25b3ba69160a98a551022fdc257086550ff48801baac7cbca1572a3c8a701da8fce5aa5b938144b73cca928bb41402a30c4975ae22a2374384d6d13319e04041c478737b20bd985be42fccc7f678f7d2b67454d5aa1d23429136e3d95a7523696fae300cb5b6f63bb5bc21e5c987ff31addb108d1bcdb5256b6056ba5cd22cf13ad9c17b3411f6e174e9cedd4bec62d7e14c4626e7af3dc3d41d2f5bad4ce3ec5284205e412228cd2d7df49122c2f6e8eccdfc1b6afc426daa5183fb948b5a43c54f25889b7f08d30a94982c35feca99c0caa513a76d1b54263ef9b958e8014a79486104775399df04c2ad7389990e38fce837f06749ae264ce875d959939d84cf11daca720de6023a70fe308bd13372b7a38ee306245283cfaa99e323022ba8fb143603170da2d1684f0d02fbb4d69378d8fa4adadeb1a714946413083f22236c3c970e34582a41673533ab7c33a744f445818abb59ab6d99786f6253ac985769cf2e2eca516b2a0a38c45e214301b58fd9cf8f5356e2899006692edab276bd81334ac1ba5aad063edc21a14ffc76eb4ddf79230abe490a0bcf15cd2f54204c3150aab45f496ef08641c0f61e4c9f2be78d38996d44e67e4cb8854df61510235f5eb9eea1e42cdf0c35d319c5829d5e63be517dc6b3e58de68b394de509394275c4e03ca1f0a6871a2a4c298b20ee463ea44ef78de42d2437a351a6b691d005ca759f5ad0daef06320509287ff6dd462dd407005e004a432c4068f431be877b1908666a77a3ac2786de97bd8a390ed28bca486ddc68c86f732fe42482a3ef351527172f0170e8f3da86a0eeb744924a08d9b7fffa5b1ce0cdcfb59e06bfefccf8beaea79543ff0c6fc94484d2e9f1a84be1c0e8db470e1c8124754ede4efc0e9b2a256300980e2f4422922d32dd6582f706d17d73f19e21ed000f3b91803e3b53b15aa9d0a30a2d39c8870c362726e6c0862654c1728bf0376a2b2b7b31a60eda1799fe505380ac3a7eae5ec5e546bdfe6fdbc5ac5709884f52e02febf283c8383539859fbd956a77b558753a47d12a9ecbfbd7dbdfb48aa43985f9766f1d40da5f028029b6a14a922c347469bd7accc3c6910a4723389967b5f0ada3da3a9295435c927f66d354e7c46c9ef2fc585835ce1c1dd792f7c2567087e0a58b83882afccecfb16647cd2210a37dcd90ecdc2d4d278e68afa735dc50500a7244d9515be3a439fdd06d4751bbf0417f3a32a7608791b4dbf7d7beb709ac77970e82ecbc81f4e7f67e28665b9e376103a4d264d79564f041b24f22b3b8359a6c54f0c1bf9e0515d59e33055710ab8b6f38d53280e54c05f38c00a3a5993aeab8de7e80a5eeb4f0b63cac9638fbc84c7e8ce735d899a6fd4542dd10a2939d79014ca2c7f149319610495d38546104202c62ddc1a7b1583443d8c791298d7287d96a94127b49704b113ad04adc652f9436058af4de02f86fd50024fe03277a3a8979d0da1b8da542ee740234cf3adfc6204128ae50e6b1134664e4b9e0110241a82c4ece2d15face1e7e2a11fca29a031183d1b22c69e44ca3ee8a7f7083b76a1f9d96a751bca8085957b5d93ae578dff14f9b072562e3f23a48239997cab0320ff6b54bafd6f21968781f5e8d4eb736b095d10ea6f4efc150beed9b964fb2ca14e2e9f79bfeb466712ab629a96496eceefeaf09ab779dff60e28f00d51cbea24b4f05dde12f8cd159f298707cea2e0dc4aa76ca7276d78047c4492dbaae4a969b6a8b825ffdfca7855362214334b0c05676cfa9ded2b6a587be7b3a38639c95b05aae2172f25b28e75df5f169a099b8aef04164a8a1ae31cdad2b17a4f790aad5ec14551c680148b355ac5f6cb176302fd037cf49e7435199e80c4197bf6acbb8b41960d38a7c40d0ebcf5c7f38864c997956ed8a18edc6adc308ce4b729c10623ed4ac012efa0df34", @nested={0x390, 0x57, [@generic="6ff2b91e11d9f3b932caa3be2204a81f553591dad0b5df469a33e585eeb19cbf4c9ac604a65df153f6cb23", @generic="b75b4a137987c0fbc49bd705af1cf0744b38d1d1618608279f96f0931c8500aed5fa19bdfde39e0bcd56e2dec7de6766582e458c931b14f7a1961b51c4797234c775ece0e602a94bbf20f4e4b6dcf6317b4fe3e69d47625d988df1d2547488f47e3e89c43cac3d25ad3ff0bde858d2f16cf085eb4e8019b9a949b52871d80f7535da2547e6a3354036d440f27cd11fcfeb365469b90765ee2fa3a778cd2a829187b7d63aae71060a2abdf872e8675b1122bcec019987ce8e9e1b06fa73d9bd", @generic="3ff018e1dd5337b06d215fd33a2bf098edf1e18433c3415ef919af86465e8133595632dd6a0486ef1c36dd2da33070ba54bb84dc78d1c504601df8d167c01048a0347c6723718791840e083f64a65efc2588fb207ec8373a3dd1de1a910b3ecbbd664cbf19b77e2c95058cccf856dc151ebd3f367c1ab7d076e2491c9965d579c4cd0d8803e8e3150125aed564e283c38bf7cebfbc0e47ebc143125656b61cc2b7f691ffe1f8", @typed={0x9c, 0x45, @binary="ec2cb98ef09864a4ae4537e5e939052414d587e85b8a25ffd0dd8036e2addea18b797fe025e03df79a34f71faeb6aeaaa0dc1b993a3ca80fe4c8c770bdf210522162148c44f419fe1ccb7f8b37d54a61e1f89d69983aa6f6fe8a23473c53c319c3c95b2dcc415dcbe3a52401ab0524234ca77bffdaa561f61d2c7be5d2b64cf7d6f7f6e5fa32aba777733bdbd834c7627879a46c5a29ce"}, @generic="aa094eedb37d64094bdb9a4898a8fc53007796fedc5adb8deb3919b94cb67784c17137adbd76845d980d71b0f638c3aed0a075324aaf9810eb5b6052045b6738cd352422148ad2b4e6f53cd9e025678e941c3eced6047f8fbb81aa1ff0715f03caa1eeed9319", @generic="818e989a7866bdf4e43a861b327b8a3886e4d3772c8315ab8f132fc6984028cd287f77dbea79", @typed={0xc, 0x62, @u64=0x5}, @typed={0x14, 0x63, @str='/dev/binder#\x00'}, @typed={0x4, 0x47}, @generic="46b64cfe5e87c2cc34b20157eebceb7bbdc098e1fbb247b24d6317ce0dff5822619aaabdf90a92020c33d99d02741037006ede2bb295aba2821d2e21a0bd039da9f0fb69dc0121a3f3a5930ed3855e98c43660e946084288602442d16f8819af8eddcb5e425c838b086af77b367ef01084f0bedf0f512c9812d3fb3dbee242a49104f053ef621ffd8de7d46666df405ac9eecf8c11e1b160c06ffd2dcef8de7ec45691f1f6266d86c0e8e964cc35"]}, @nested={0x14, 0x8f, [@typed={0xc, 0x3, @u64=0x1}, @typed={0x4, 0x80}]}, @generic="a4ef575bb5c1481c7b8109d8fdd4214411b13d819c8abfde25960b37c65c8560430d29c25cd74b2947823526892d4ad3fae1bb830dcb4392ac29a3e4dea279b8ed785a31d860478ed3a62581e1d56e68e40dd1d84d33f54f44e106010226233cd92f734003cd0e942122c6e6aa0eba474cd0e74b9101f6e8107af5adfb125e7d694515bcf1c15f8e5ebc34e226185987b0a07d2e5622ccf4b7c56d72a8a195ba6f28c4e9d44d9d9f3829f534a73d655a0f2cd1f908f027b8a3b5f9f189dbe74ad45d52a8345f47a142b875222b6648307e3cdb2eb82263d7d747cb3141bb9a3dd1c1b51f69e43c6543ccf1f4be335f103871ac079e6853", @nested={0x418, 0x20, [@typed={0x4, 0x63}, @generic="6b545305415cb61df916529fa31e63d08907394d8b1ea6031854fa6365e23c45eb40e2ed2c1933bbda15cb356fc93f05c77155897955fb74883776e7afbf17592cb13fd24bd25d5c76f31ee6d6eb1a22fd3c916385acc2c6760897f0b094c6a65be97ad9483735d75e740790b563329c10f4fb73fcf649156eb32ebfc0abfafa70e53f367ac7bd48af1c7ada79f57b08130bce63ede0462530cb4dd926081c659a9f4c7235f7c3714f11b06f296412d2effa05b2aeef282a90e4bb415eeaedf2b8e96c7850f73c4332cc00da7dac8215ad5173069cff708992ecf187d6", @typed={0x8, 0x73, @fd=r4}, @generic="d69b2afd71691081b61b0e0f7c68e5bf43c9f57f50a3e69645e4aa4344394b0408965460d21ba944c4e785dd5c83767d52961d059a635b087a3ccdfb32a0c6c370e6a401b9436aa500f56a18a9495943068e5119ef95a14fdbc8ab4d09a0ce4e4fa096133a2cb92fc34e7559f2310e7dafb613bef1c2e0a92a21702015e41e82f659ecdd4ecfd11f781efd87a30bc38859f886dd127abd0046fab4784610cf9d7d9ac3274042f0cc21c565ab30d1e502e1e72578b34dae4f9e714482bbac32d4176f0eda8815090b5832", @generic="b6b2d50392e735deba7b4376bbed59ac58bc0693c5e24a8271e89429ba7dbb0899d0765eadf54cf6576529d780d931ba59860d29b75197cc13e626c436806521b23b79b36ac17bb3c8bf9a9356a8732ef64f3598e1b1ac00ca2cce4ea18a785f43223303e034438c9adc76a620bbb832514e405738f3980bb297ff5e28dba64815942255df852bf3b65a9ea1b82a9c54d9fbf09fcc321967e8548e638ee340d2a9840b968791f65986d9ee69754d42acfa63dd122a8b54514b8c73f9db6d44d5ffd105289fe7028cf68c2cbdf7a3e22f5af6fbbec170fb56d37abbee37", @generic="419786079dad779bdb3fcec2d56f2e072f8dfe0db23a22eb178088fa6d70268c31deade751bd608bae9c50786e117c45f153089298bb3ba18416e25a771d9bc57d9211618afacccba7d2049a1104393ac30d96ed7711ccc40bf0385795a232ab7f5b40e5552188f82df40ab60f8f47d0c143a35f14129a30896c37acd3ebd2d54eccc778a450d1b6acde2e2ef1433f2e729208abf36f345c4daf42b031cfb04d1b0c86aac0d9f787", @typed={0x8, 0x40, @ipv4=@local}, @generic="7fdcf694043711bab0c8a70439983eba944b82bd4e7f9a730ed228791eae8ca2eae8631202cb9dd6ef53a9c52378b674303025b8ad5307b0c7d79fe49bc241ebcda0a046f69c8c2127104c2c889efc8a0fdb6090f723568499858dea768fe6279eb0e8a4550b031d382f625f16ad3db420712ce5ccc0aba96b8d860babb4d506d32f0c305dce146e75f5b5870879ad011976ceb55e845cdc0eef63ac941a0fab24b23b0ebc73f3c900bc350a20c5ef7e12efc519725a8ea99c185ededd", @typed={0x14, 0x52, @str='/dev/binder#\x00'}]}, @typed={0x8, 0x93, @fd=r5}]}, 0x19b4}, {&(0x7f0000000240)={0xe4, 0x20, 0x10, 0x70bd2d, 0x25dfdbfd, "", [@generic="4a49e589ffab151bf40f6b3c1c67d2e96f6b021b3f15374644f2c17940746b15b412532685e3f8f4569436a1dd228a3f2e02dd6305d315ded4ddc07c155893dc879dad8eef9840916b5736efab7b4b7ecb14579d5b7bc9d1e8b9173c3348c836fc8e5b603d942e0d9d782fba2c14dbb9f61d04a45413f178651ae78959621b0af751bd6b742df38244aa82cca4d038b61c546179c813a2fcdde8c742f49d0905e7e70b7002fb95ca916320fc33fa4c2de1e0dfdf5ed1b9c67fa816314f20e3717f9d8ea267f9177729ae89e7efbb08c33a"]}, 0xe4}, {&(0x7f0000001e00)={0x12c0, 0x32, 0x110, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x1118, 0x5d, [@generic="2f972c01edd169d2b2b3667ca736a453aab2ee76187904d3afda4bc11ce52f30e7635713e7edccf89a0c3343c5c55c61f1d5fa63854d1197b23b6815df7a97477fe878b788af4a3ba0f4c44c06452269472f27d9d7c08b5db5d6d8b2d9b10955d883f5e948dfa580e7a90fbb107210ad5412be4188", @generic="968ac8e5daa3ddad64239bd87519758826a7761328860b159a39bb72e1b1db6c465ffe595e17380103689fe2083cc032ab7cd1812b474701d1c8b7a529e3a55b58f84574144d72b780104dc44bb82380c17d7f8460197cb232705ef92e338954053003c2e47aea5d0322fa3551e8c1e6f60b21ae2b15fb9f43caefe186215eed71364248fb806103ae4a46e38f79dfc6a37a3e8121d142996a55b0", @typed={0x4, 0x8a}, @generic="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"]}, @typed={0x8, 0x45, @ipv4=@empty}, @generic="3fca9c91650359fdedbbe587a4105c80f509fcff74a1d7d766129e5cf5eb55b2036f5771cc3492e1f3b4fd9d9ab68883013e2c5401127186d96953308c4ca45e5750495ee532fe82ac0e670b9d0b6c174a7f44b35023a35fbbce3f89c2d834e10d6bb5cbeb9ef0d9cbc201c057d8721ba3b8b9a0c6ce5c0a3d", @typed={0x14, 0x20, @ipv6=@loopback}, @nested={0x4, 0x3a}, @generic="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"]}, 0x12c0}], 0x3, &(0x7f0000003240)=[@rights={{0x34, 0x1, 0x1, [r6, r7, r0, r8, 0xffffffffffffffff, r0, r1, r1, r0]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r9, r0, 0xffffffffffffffff, r10, r11, r12, r1]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r14]}}], 0x88, 0x4}, 0x4) [ 229.064584] binder: 9726:9727 got transaction with invalid parent offset or type [ 229.086787] binder: 9726:9727 transaction failed 29201/-22, size 80-24 line 3454 [ 229.120831] binder: undelivered TRANSACTION_ERROR: 29201 [ 229.126882] binder: BINDER_SET_CONTEXT_MGR already set [ 229.143364] binder: 9726:9730 ioctl 40046207 0 returned -16 12:30:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x8500, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r3 = add_key$user(0x0, &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r4, 0xfae71e5936326fae) keyctl$instantiate(0xc, r3, &(0x7f0000000280)=ANY=[@ANYRES16=r4], 0x1, 0xfffffffffffffffb) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) fstat(r1, &(0x7f00000003c0)) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000540)=""/208, &(0x7f0000000640)=0xd0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40086602, 0x400007) write$FUSE_INIT(r2, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, &(0x7f0000000340)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0xff4a) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00'}) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x20032600) socket$packet(0x11, 0x0, 0x300) ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) r7 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000820}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYRES16=r7], 0x1}, 0x1, 0x0, 0x0, 0x4000}, 0xc490d273bf9eb065) sendmmsg(0xffffffffffffffff, 0x0, 0xd3, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r8, 0xfae71e5936326fae) r9 = openat$cgroup_ro(r8, &(0x7f0000000240)='pids.events\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000200)={'l<\xdc?I1K\xb5\x9a\x00\x00\x00\b\x00\x00\x11', 0xff}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x8) socket$inet6_tcp(0xa, 0x1, 0x0) 12:30:31 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'veth0\x00', 0x201a}) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000080)={0xfffd, 0x80, 0xffff, 0x2}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair(0x8, 0x0, 0x1, &(0x7f0000000240)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000280)='hybla\x00', 0x6) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000001c0)={@ipv4={[], [], @multicast1}}) bind$packet(r1, &(0x7f0000000040)={0x11, 0xf8, 0x0, 0x1, 0x1, 0x6, @dev={[], 0x2b}}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000000c0)={@dev}, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) close(r2) 12:30:31 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x1c7) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x6c, 0x0, &(0x7f00000003c0)=[@acquire={0x40046305, 0x2}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x0, 0x20}, @flat=@weak_handle={0x77682a85, 0x200, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/189, 0xbd, 0x0, 0x2f}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}, 0x800}, @dead_binder_done, @dead_binder_done], 0x1000, 0x0, &(0x7f00000006c0)="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"}) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r3, 0xfae71e5936326fae) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r4, 0xfae71e5936326fae) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f00000016c0)=0x80000001) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r5, 0xfae71e5936326fae) ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f0000000480)=""/145) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0xffffffffffffffc8, 0x0, &(0x7f0000000640)=[@request_death={0x400c630e, 0x2}, @exit_looper, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/27, 0x0, 0x2, 0x27}, @ptr={0x70742a85, 0x0, &(0x7f0000000540)=""/214, 0x0, 0x2, 0x7}}, &(0x7f0000000100)}}, @clear_death], 0xfffffdd6, 0x0, 0x0}) 12:30:31 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20054) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$user(0x0, &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$instantiate(0xc, r2, 0x0, 0x0, 0xfffffffffffffffb) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) fstat(r1, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r4, 0xfae71e5936326fae) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x6) vmsplice(r5, &(0x7f0000000180)=[{&(0x7f0000000200)="36b08d711d8b83842950628325d2f63acb79e3afd0d2736beee6446f95ec937a95be02eb2b76b857c29564e636a904f89a2f15e5d97b43db80a47dc3291c82e2e54a10df1c3d391627d5e7b0953137f972acc8e525863fae2478300c1ff065fe1fd652dcf60ef8f58809642d15b6aba7e9202060bd88e115b8a168931e6d1d8e7db8e696cfbc57811cc0153af3fecc1bd905bd463da57625d1a11e", 0x9b}, {&(0x7f00000002c0)="1585011ca46af17f2461efb75e92cd2df4f3da9735a70f9779c776176dcc163cbc745c28a630b1d16678659530ccb97688ff0d8edbc106c9a52ea938e41094e9ed3de950", 0x44}], 0x2, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086602, 0x400007) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) pwrite64(r1, &(0x7f0000000100)="454b1d7bed4131c1a79c97ccd31eca497617a0405a776c4ec1d808eca369581cbd3fde25f4139fadf4b266bad33e3397da0d739896ab", 0x36, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) prctl$PR_GET_TIMERSLACK(0x1e) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x20032600) socket$packet(0x11, 0x0, 0x300) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) 12:30:31 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) fchmod(r1, 0xfae71e5936326fae) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x40, 0x80, 0x0, 0xffff00200}, {0x80000006}]}, 0x10) r2 = socket$inet6(0xa, 0x1000000000000002, 0x0) sendmmsg$inet6(r2, &(0x7f0000006440)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) seccomp(0x0, 0x0, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0x1, 0x5, 0x3, 0x5}, {0x9, 0x4, 0x9, 0xfff}, {0x2, 0xfd, 0x40, 0xe4}, {0xb69, 0x0, 0x3, 0x81}, {0xdd38, 0x9, 0x81, 0x3ff}, {0x8, 0x6, 0x3f, 0x80000000}, {0x84f, 0x5, 0x8, 0x200}]}) [ 229.901712] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 12:30:31 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x10000, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000040)=0x5) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 12:30:31 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r2, 0xfae71e5936326fae) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000000)) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @remote}, 0x1c) sendto$inet6(r3, &(0x7f00000009c0)="c7", 0x1, 0xc001, 0x0, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r4, 0xfae71e5936326fae) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) sendto$inet6(r3, &(0x7f00000003c0)='<', 0x1, 0x0, 0x0, 0x0) [ 230.029825] binder: 9755:9757 got transaction with invalid parent offset or type 12:30:31 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000000)=[0x1, 0x1]) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 230.070286] binder: 9755:9757 transaction failed 29201/-22, size 80-24 line 3454 [ 230.097084] binder: undelivered TRANSACTION_ERROR: 29201 [ 230.111175] binder: BINDER_SET_CONTEXT_MGR already set 12:30:31 executing program 5: accept4$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x800) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x5, 0x8d}, 0x0) r0 = open(0x0, 0x100, 0x2) sendto$inet(r0, &(0x7f0000000380)="08958fa10b18a2421366cee1bf9b7a4055fa3fd18a411a7ea62a371525aa36535b1c447725d68f51a2d0d8381c8453bc54927135f4da15770c572051954e87db8d99fff6656f30a5bc64253e030d72894a7e7410329eb2e69ca3000f2e31a59254d5fa41ffc1b96bcf5b678d15f251b1e383b6699f000c3d0dcfd9bf65c98302bf1bca9b49b4c5cf5f268dae96dfcab545af0916784c8cd50ee1e4f0eb", 0x9d, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r5, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) fallocate(r5, 0x20, 0x0, 0xfffffeff000) r6 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fallocate(r6, 0x91, 0x0, 0x10000101) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, 0x0, &(0x7f0000000540)=0xffffffffffffff3d) socket(0xa, 0x1, 0x0) socket(0x1000000010, 0x400000400080803, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\a\xd2\x8f(.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\x15v$\xc5\xbcq\x9a\t\x9ej5)\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\t\xbf\x85\x98q\v\xd8D\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xca\xc2(\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1e\xb5VG\x9ad\x9a`=^h\x8c8\xc9\"\x1eO\xb5vk\xc9\xcfi\x90\xd7\xd3H\xa1\xb4\xda\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\xde\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\x95\xe1I\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|\x00\x00\x00\x00\x00\x00\x00\x00', 0x2761, 0x0) write$cgroup_pid(r7, &(0x7f0000000080), 0xfffffe38) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x660c, 0x0) write$cgroup_int(r7, 0x0, 0x0) r8 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r8, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) fallocate(r8, 0x20, 0x0, 0xfffffeff000) r9 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r9, 0xfae71e5936326fae) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000740)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000580)=0xe8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r10}) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000300)) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f00000014c0)=""/205, &(0x7f0000000100)=0xfffffffffffffc87) r11 = socket(0x1000000010, 0x1, 0x0) write(r11, &(0x7f0000000240)="240000001a0025f07e9451f68f2e9c920a0b49ffed000019806028000800100001000000", 0x24) ioctl$sock_inet6_SIOCADDRT(r11, 0x890b, &(0x7f0000000180)={@mcast2, @mcast1, @loopback, 0x0, 0x2, 0x40, 0x0, 0xffffffffffffb8fa, 0x87460025}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) [ 230.111184] binder: 9755:9757 ioctl 40046207 0 returned -16 [ 230.167088] binder: 9764:9768 got transaction with invalid parent offset or type 12:30:31 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getuid() r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000040)={0x3}) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) syz_genetlink_get_family_id$ipvs(0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xd3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) ftruncate(0xffffffffffffffff, 0x208200) socket$inet6_tcp(0xa, 0x1, 0x0) 12:30:31 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0}) 12:30:31 executing program 2: r0 = socket$inet(0x10, 0x1000000000000003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="240000002a0007031dfffd946fa2830020200a0009000000000000000004000000000000280000001100ffffba16a0aa1c0009e3966cf055d90f15a322e029eee7f817c37218fea642ef6b2c", 0x4c}], 0x1}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x2000, 0x0) dup(0xffffffffffffffff) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r3, 0xfae71e5936326fae) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x801}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x20}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x401}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x70}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x10000}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0xc4010) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) [ 230.212754] binder: 9764:9768 transaction failed 29201/-22, size 80-24 line 3454 [ 230.241216] binder: undelivered TRANSACTION_ERROR: 29201 12:30:31 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) keyctl$get_security(0x11, 0x0, 0x0, 0x0) r0 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080), 0x0, 0xfffffffffffffffd) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) keyctl$unlink(0x9, r0, 0xfffffffffffffffa) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x20032600) socket$packet(0x11, 0x800002, 0x300) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x4, 0x668}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000280)={0xa, 0x3, 0x2, @mcast1, 0xfffffffe}, 0x6) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(0xffffffffffffffff, r6, 0x0, 0xa808) sendmsg$NET_DM_CMD_START(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x20, 0x70bd25}, 0x14}, 0x1, 0x0, 0x0, 0x24000011}, 0x4040040) sendmmsg(0xffffffffffffffff, 0x0, 0xd3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 12:30:31 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x422, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@binder={0x73622a85, 0x1}, @fda={0x66646185, 0x2}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 230.488936] binder: 9793:9801 got transaction with invalid parent offset or type [ 230.518303] binder: 9793:9801 transaction failed 29201/-22, size 80-24 line 3454 [ 230.545963] binder: undelivered TRANSACTION_ERROR: 29201 12:30:32 executing program 4: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x482000, 0x0) renameat2(r0, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x800) r3 = dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000240)=0xc) ptrace$setsig(0x4203, r4, 0x534b6c99, &(0x7f0000000440)={0xa, 0xc352, 0x80000001}) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x20) write$P9_RRENAMEAT(r5, &(0x7f0000000340)={0x7, 0x4b, 0x1}, 0x7) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r6, 0xfae71e5936326fae) fcntl$addseals(r6, 0x409, 0x2) [ 230.625719] binder: 9805:9806 got transaction with invalid parent offset or type [ 230.661783] binder: 9805:9806 transaction failed 29201/-22, size 80-24 line 3454 [ 230.702522] binder: undelivered TRANSACTION_ERROR: 29201 [ 230.708738] binder: BINDER_SET_CONTEXT_MGR already set [ 230.714160] binder: 9805:9808 ioctl 40046207 0 returned -16 [ 230.731670] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 12:30:32 executing program 2: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340)="460000002800070f3200000800367700fbff020002000000", 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRESDEC, @ANYRESDEC], 0x30) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r3, 0xfae71e5936326fae) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@remote, r4}, 0x14) bind$packet(r3, &(0x7f0000000080)={0x11, 0x71, r4, 0x1, 0x9}, 0x14) pwrite64(r3, &(0x7f0000000040)="1b1e0cc24e8cb756277a3c5634c79ef2fc8eb8", 0x13, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 230.735086] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 230.760404] binder: 9805:9806 transaction failed 29189/-22, size 80-24 line 3138 12:30:32 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB="852a62730000000002000000000000000000000000000000852a627700000000000000000000000000000000000000008561646600"/80], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000018010000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 230.762164] binder: undelivered TRANSACTION_ERROR: 29189 [ 230.785196] netlink: 34 bytes leftover after parsing attributes in process `syz-executor.2'. [ 230.891769] binder: 9818:9819 got transaction with invalid offset (280, min 24 max 80) or object. [ 230.921254] binder: 9818:9819 transaction failed 29201/-22, size 80-24 line 3379 [ 230.948591] binder: undelivered TRANSACTION_ERROR: 29201 [ 230.961236] binder: 9818:9820 got transaction with invalid offset (280, min 24 max 80) or object. [ 230.990366] binder: 9818:9820 transaction failed 29201/-22, size 80-24 line 3379 12:30:32 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000001c0)=[@exit_looper], 0x1db, 0x0, 0x0}) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r2, 0xfae71e5936326fae) write$P9_RREAD(r2, &(0x7f0000000100)={0x1e, 0x75, 0x1, {0x13, "88a94d382a52575f7cef0ab9c592362fc97a43"}}, 0x1e) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x3) [ 231.036214] binder: undelivered TRANSACTION_ERROR: 29201 [ 231.065285] netlink: 34 bytes leftover after parsing attributes in process `syz-executor.2'. 12:30:32 executing program 2: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, &(0x7f0000000340)=0x2) getrusage(0x0, &(0x7f0000000500)) pipe(&(0x7f0000000940)={0xffffffffffffffff}) readv(r7, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x100000000000025c) ioctl$EVIOCGPHYS(r7, 0x80404507, &(0x7f0000000400)=""/254) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r8 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYRES64=r0, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303080523030303030343030e21184d483e2ee87865f0905dd094aa96ce3a17e6c821057cb893962c91444d6334dd454362073dba2f6ac6ee8257fdf0e75a94cbff9499f7e7ebb69fa2fa0e9ac96a90f2ab9f218e7c3118e347d736ab3dde335cde7ccf40494ee226db0c065852923f704b2dc6a4e20f47cc1572733f63c0c0782f7e4d646678ea3ccb1a7871c6ce8bf30049d670a2f7352ea761db0a7a52e03d6746ff5d2270dd6e932ec6292aef08cd7fcd7c27094d73a4d", @ANYRESDEC=0x0, @ANYBLOB="90678e75a3ac03548a43d0c2944d90652d3c8519ba67deffb5ae38696512c379bff27658a4a7f90ce9981e458cc06d76b728e3260a79aa368a0c7c873b9a1b644b7a2f7f94de81c8ffe3dd8fb47349449500ed6408ee1eac42b2043b1db09270685d84481c145b3bf4789a84658e0c29b6eecdef415b238959dcc5425f23e7d785a71bce33d60b776b93a6692e84e207da8b6fe28db9e8af99cec3f08ce5cb467679e8ffbe2d68b8387d19477585b4a9dd4402bd883f3b1b92e854ab02668eaa27"]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, 0x0) setuid(r11) r12 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r13 = open$dir(&(0x7f0000000100)='./file0\x00', 0x40000, 0x4) sendfile(r12, r13, 0x0, 0x7fffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@mcast1}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f00000005c0)=0xe8) stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000780)) r14 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r14, &(0x7f0000000000)) r15 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r15, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r16, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) fstat(r14, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r17, 0x0) r18 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r20, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r21) r22 = getgid() r23 = getegid() setresgid(r23, r19, r22) getgroups(0x0, 0x0) getresgid(&(0x7f0000000840), &(0x7f0000000880), &(0x7f00000008c0)) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) sendfile(r8, r8, 0x0, 0x0) 12:30:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x260}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x68, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xe0, 0x60, "e5ded35713882b9ed9bc5c5a1c66b92f789b133cc773ecd14dfa9409"}}]}, 0x158}}, 0x0) [ 231.104501] binder: 9822:9824 ioctl c0306201 20000140 returned -14 [ 231.126943] binder: 9822:9825 ioctl c0306201 20000140 returned -14 [ 231.256561] devpts: called with bogus options 12:30:32 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=ANY=[@ANYPTR64, @ANYBLOB="744fd490f084173db5b3730e8b00810084a31de4dfc91df8461be409004d43b8ea82f3a20beaa89d86f8741e1915db5561e642910069e22aec5737ca70af71bee33fd3000029e7b120000000a6b6c3285bb01e4d5d627b9d0911da0c01000000000000005b5051c8c600fbdeff7f3161edefb1668c06eb9644ff6a000000000008"], 0xd}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1000000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x5, 0x0) 12:30:32 executing program 5: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000002c0)=ANY=[]) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r2, &(0x7f0000000080), 0x15d4b87) write$FUSE_STATFS(r0, &(0x7f0000000300)={0x60, 0x0, 0x1, {{0x3, 0x3aba, 0xb84, 0xffffffff, 0x3b, 0x1, 0x81, 0x6}}}, 0x60) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000200)=0x90000) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r3, 0xfae71e5936326fae) write$FUSE_NOTIFY_POLL(r3, &(0x7f00000002c0)={0x18, 0x1, 0x0, {0x40}}, 0x18) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r5, 0x40044900, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x94710}, 0xc, &(0x7f0000000240)={0x0}}, 0x0) 12:30:32 executing program 0: r0 = open(&(0x7f00000003c0)='./file0\x00', 0x40c2, 0x0) pipe2(&(0x7f0000000400), 0x104800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open$dir(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000380)) write$9p(r0, &(0x7f0000000800)="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", 0x200) sendfile(r0, r1, 0x0, 0x10000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x228, r2, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x100, 0x5, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4f2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6368}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdac4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdd02}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff6f18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0x68, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x34a364b9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x13e0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_NET={0x64, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4000000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xdf6}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd56}]}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x8000}, 0x40) [ 231.407340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9857 comm=syz-executor.5 12:30:33 executing program 1: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'eql\x00', 0xd102}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ppoll(&(0x7f0000000040)=[{r1, 0xa3539bb054db9fe1}], 0x1, 0x0, &(0x7f0000000300)={0x8}, 0x8) dup2(r0, r1) r2 = gettid() tkill(r2, 0x1000000000016) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r3, 0xfae71e5936326fae) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) 12:30:33 executing program 1: r0 = socket$inet6(0xa, 0x1, 0xfe) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r3, 0xfae71e5936326fae) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000000)=0x0) waitid(0x0, r4, &(0x7f00000001c0), 0x80000000, 0x0) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="ac"], 0x1) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 12:30:33 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) creat(0x0, 0x0) write$evdev(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r0, 0xfae71e5936326fae) accept4$packet(r0, 0x0, &(0x7f0000000000), 0x80800) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000100)=0xc024) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000280)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000080)='sessionid\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x7, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0xaaaab89, &(0x7f0000000200)=[{&(0x7f0000000080)="0200050000000100001400000000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) [ 232.056105] devpts: called with bogus options 12:30:33 executing program 2: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x3c) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) write$cgroup_type(r2, &(0x7f0000000080)='threaded\x00', 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = gettid() tkill(r3, 0x10010000000032) 12:30:33 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, r2, 0x0, 0x70bd2d, 0x0, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={[], [], @remote}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x4c}}, 0x4000) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x40, r2, 0x10, 0x70bd28, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x8}, @FOU_ATTR_TYPE={0x8}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr="342b03c4fd838f986d8304fab28824b5"}, @FOU_ATTR_TYPE={0x8}]}, 0x40}}, 0x4001) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab3c, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 12:30:33 executing program 0: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$FUSE_IOCTL(r0, &(0x7f00000000c0)={0x20, 0x0, 0x8, {0x7f, 0x0, 0x3, 0x200}}, 0x20) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet(0x2, 0x3, 0x84) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x8084, 0x0, 0x1a1) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000100)="cc36c1de671b58d5318d27b004", 0xd}], 0x1) 12:30:33 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1}, 0x6469c, 0x0, 0xffffffff, 0x0, 0x3, 0x401, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) sendto$inet(r1, &(0x7f0000000100)="09592f16de", 0x5, 0x4010, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:30:33 executing program 0: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000000100)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x4000000007, &(0x7f0000000080)={0x0, 0x0, 0x2000000000030005}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) read(r2, &(0x7f0000000000)=""/128, 0xfffffd67) r3 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0) signalfd4(r2, &(0x7f0000a71ff8)={0x64}, 0x8, 0x0) r4 = dup(0xffffffffffffffff) ioctl$BLKDISCARD(r4, 0x1277, &(0x7f0000000140)=0xfffffffffffffeff) [ 232.424882] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 232.458651] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 12:30:34 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) recvmmsg(r1, &(0x7f0000003840)=[{{&(0x7f0000000080)=@tipc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000140)=""/203, 0xcb}], 0x1, &(0x7f0000000240)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000001240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000001580)=[{&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/86, 0x56}, {&(0x7f0000001340)=""/139, 0x8b}, {&(0x7f0000001400)=""/239, 0xef}, {&(0x7f0000001500)=""/13, 0xd}, {&(0x7f0000003600)=""/234, 0xea}, {&(0x7f0000001540)=""/35, 0x23}], 0x7, &(0x7f0000003740)=""/230, 0xe6}, 0x3}], 0x2, 0x40, &(0x7f00000038c0)) r3 = syz_genetlink_get_family_id$team(&(0x7f0000003940)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@remote, r4}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@remote}, 0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@remote, r5}, 0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000039c0)={@ipv4, 0x0}, &(0x7f0000003a00)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@remote, r7}, 0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003a40)={{{@in=@broadcast, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6}}, &(0x7f0000003b40)=0xe8) getsockname(0xffffffffffffffff, &(0x7f0000003bc0)=@hci={0x1f, 0x0}, &(0x7f0000003c40)=0x80) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000074c0)={0x0, @remote, @local}, &(0x7f0000007500)=0xc) getsockopt$inet_mreqn(r0, 0x0, 0x36, &(0x7f0000007540)={@broadcast, @remote, 0x0}, &(0x7f0000007580)=0xc) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@remote, r13}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)={@loopback, r13}, 0x14) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000007680)={{{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@empty}}, &(0x7f0000007780)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000007840)={@loopback, 0x0}, &(0x7f00000098c0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000009a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000009ac0)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@remote, r17}, 0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f000000a000)={&(0x7f0000003900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000009fc0)={&(0x7f0000009b00)={0x488, r3, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8}, {0xb4, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x268, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x3e}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0xbc, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r12}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r15}}}]}}, {{0x8, 0x1, r16}, {0x7c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x9a}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r17}}}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x4040000}, 0x80) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32], 0x4) recvmmsg(r0, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0, 0xe000000}}], 0x1, 0x142, 0x0) [ 232.505066] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock 12:30:34 executing program 3: add_key$keyring(0x0, &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000001c0)={{0xffffffffffffffff, 0x2, 0x3, 0x2, 0x4cd8799f}}) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000000c0)=0x4080010) get_thread_area(&(0x7f0000007d40)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3, 0x8de7d8f023d0fbd7}, 0x4) accept4$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14, 0x80000) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000340)={@rand_addr="01532c772e3083c19188e908cc307ae4"}, 0x14) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000180)) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000100)={0x0, 0x401, 0x4, 0x7, 0xa, 0x0, 0x8, 0x81, 0x400001}) creat(&(0x7f0000000200)='./file0\x00', 0x8) poll(0x0, 0x0, 0xffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = inotify_init() r7 = dup2(r5, r6) sendmsg$netlink(r7, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000), 0x0, &(0x7f0000000480)=ANY=[@ANYRESDEC=r2, @ANYRES32], 0x18}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r8 = socket$inet6(0xa, 0x3, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000006, 0x810, r8, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r9 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r8, r9, &(0x7f0000000240)=0x202, 0x4000000000dc) r10 = syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_RECONFIGURE(r9, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="8c773c1ba19c37e2d0e7fcd671ce211890481c684916a7b93b1e8fd66e6245dd1a5fca4516f0d3548ec6fba9c0b60236855446a6622212ce728bb8f6c6a9874903000b73565b4669cac92bbbc6c00ebc2fc3e2800100008000000000cffc5d54440dbde112b575610df98f08936d00f826f3d3f5f812915780a962ab9d5fab82c32c", @ANYRES16=r10], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$TIOCNOTTY(r7, 0x5422) clone(0x20886100, 0x0, 0x0, 0x0, &(0x7f00000002c0)) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 232.553163] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 12:30:34 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x4, 0x69) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8001141042, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r2, 0xfae71e5936326fae) getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040), &(0x7f0000000080)=0x4) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8482) 12:30:34 executing program 4: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) ptrace$getenv(0x4201, r0, 0x800, &(0x7f0000000100)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8000, 0x0) ioctl$BLKROGET(r2, 0x125e, &(0x7f0000000040)) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) sendto$unix(r2, &(0x7f00000000c0)="d1c7391c7c28de9e343b2b7ffdee44f57e625a6eefef236c1bc75ff7544e1f3335a79aee1889cd194914e5af6960309f1446ff", 0x33, 0x0, &(0x7f0000000240)=@abs={0x2, 0x0, 0x4e23}, 0x6e) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r4, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x0, 0x1, 0x2, 0x8c, 0x1]}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3f}]}, 0x34}, 0x1, 0x0, 0x0, 0x20}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, r4, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x5, 0xfffffff9, 0x5, 0x0, 0x7fff]}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2a}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0xc3bbbe260918233c) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/checkreqprot\x00', 0x600820, 0x0) ioctl$EVIOCSKEYCODE(r5, 0x40084504, &(0x7f00000004c0)=[0x8, 0x80]) 12:30:34 executing program 0: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x7, r0, 0x1) pipe2(0x0, 0x0) getegid() mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="66649c", @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00d=', @ANYRESDEC=0x0, @ANYBLOB="3d00609417b60dd6ff0331ab5fd9723f99e9543b49150703"]) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x5}) syz_open_dev$mice(0x0, 0x0, 0x0) pivot_root(&(0x7f0000000740)='./file0\x00', 0x0) fgetxattr(r1, 0x0, &(0x7f0000000940)=""/113, 0x71) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0) accept(0xffffffffffffffff, &(0x7f0000000580)=@nl=@proc, &(0x7f0000000040)=0x80) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') r3 = socket(0x200000000000011, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00'}) bind$packet(r3, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000800)={0x1, 0x9, 0x0, 0x0, 0x441, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x8}, 0x3c) setxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.evm\x00', 0x0, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x400000) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f00000009c0)={'security\x00', 0xee, "fd7a267f0dc73ef88aa533d7ee09c662a4e1a777c9e99704ce338f49ba56b022682e45a1f65cb0ea351ca1751a943c1d0c52445924061dd8288aa53fce2cfd0a0c80da11aa23ca623eeab94d76f13189de2a0557fc04825b0f031b216f57b1199e005db6b7dc50b3e44b51e2fb72c34b56685aa998d81990ba2116524cc28b347571097d5a9b066532a0b78ced35f357e7400b0f36c532497764deff2402c79866e16320ef7d47bdf3d7ca365a99d8149fe9272dd2e382af4b97222357d8280be17bfe061d8fc6fdb43de5256eb046067f78492a7e00c53def943388930938f82440120804046125d815fb12f660"}, &(0x7f0000000100)=0x112) mkdirat(0xffffffffffffffff, 0x0, 0x0) getresuid(&(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000280)) quotactl(0x0, &(0x7f0000000480)='./file0\x00', r4, &(0x7f0000000d80)="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") 12:30:34 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r2, 0xfae71e5936326fae) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f0000000040)=0x10) mmap$perf(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0xc, 0x810, r2, 0x17) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 232.820583] binder: 9939:9940 got transaction with invalid parent offset or type [ 232.820896] loop1: p2 < > [ 232.822269] loop1: p2 size 2 extends beyond EOD, truncated [ 232.873764] binder: 9939:9940 transaction failed 29201/-22, size 80-24 line 3454 [ 232.896720] binder: undelivered TRANSACTION_ERROR: 29201 [ 232.907208] binder: 9939:9950 got transaction with invalid parent offset or type 12:30:34 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x95, 0x71, 0x0, 0x0, 0x80, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = socket$inet6(0xa, 0x401000000001, 0x0) close(r1) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000000)=0x2) [ 232.930012] binder: 9939:9950 transaction failed 29201/-22, size 80-24 line 3454 [ 232.954565] binder: undelivered TRANSACTION_ERROR: 29201 12:30:34 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB="852a62730000000002000000000000000000000000000000852a627700000000000000000000000000000000000000008561646600"/80], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="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"/429]], 0x0, 0x0, 0x0}) arch_prctl$ARCH_SET_GS(0x1001, 0xffffffffffffff80) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x101000, 0x0) ioctl$TIOCGRS485(r2, 0x542e, &(0x7f00000000c0)) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r3, 0xfae71e5936326fae) fstat(r3, &(0x7f0000000000)) 12:30:34 executing program 0: openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/load\x00', 0x2, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r0, 0xfae71e5936326fae) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x5f8939602d7dd134, 0x0) ioctl$TIOCCONS(r2, 0x541d) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) fchmod(r3, 0xfae71e5936326fae) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r4, 0xfae71e5936326fae) write$selinux_load(r4, &(0x7f0000000080)=ANY=[], 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000080)=@random={'security.', '/dev/zero\x00'}) 12:30:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x180400) r0 = socket$netlink(0x10, 0x3, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x40000, 0x40) r1 = socket(0x10, 0x803, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r2, 0xfae71e5936326fae) sendto(r2, &(0x7f0000000280)="901e188236038ec44bbf7e953215b687d55bce2b3e18abb97f4ffa1304556a1850ed8998fc6cbba4faff87e224131e15e02d7cd078c3b55f7ba592a45a7075e0f8eb38b3270ce77c166c65ec9e652c3d22c77c2e7b722883dba3478345a90778088466b1b0dbed3942eae3572e65a516b2652642e92da89b3003e2452fb6206130dddf13b8b43a", 0x87, 0x4000, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xfffffffffffffdcb, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) 12:30:34 executing program 5: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r0, 0xfae71e5936326fae) write$apparmor_exec(r0, &(0x7f0000000000)={'stack ', '$\'^\x00'}, 0xa) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='sb=0xffffff+']) 12:30:34 executing program 0: sched_setaffinity(0x0, 0x2de, &(0x7f0000000240)=0x40000000000009) pkey_alloc(0x0, 0x6) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) write$P9_RSYMLINK(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000280)) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a40)='TIPC\x00') keyctl$unlink(0x9, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}, 0x100) write$binfmt_elf64(r1, &(0x7f0000001640)=ANY=[], 0xf5aab446) 12:30:34 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) keyctl$get_security(0x11, 0x0, 0x0, 0x0) add_key$user(0x0, &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080), 0x0, 0xfffffffffffffffd) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=""/208, &(0x7f0000000640)=0xd0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$inet(r2, &(0x7f0000000340)=""/187, 0xbb, 0x100, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xb000) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000000c0)) write$cgroup_subtree(r4, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xb000) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000000c0)) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00mEmory '], 0x3ff800) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xb000) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000000c0)) write$cgroup_subtree(r6, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0xb000) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000000c0)) write$cgroup_subtree(r7, &(0x7f0000000000)={[{0x2b, 'meh\x82ry'}]}, 0x8) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0xb000) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000000c0)) write$cgroup_subtree(r8, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0xb000) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000000c0)) write$cgroup_subtree(r9, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800) write$cgroup_subtree(r4, &(0x7f0000000740)=ANY=[@ANYRES32=r6, @ANYRES64=r7, @ANYRES16, @ANYRESDEC=r0, @ANYRESOCT=0x0, @ANYRES64=0x0, @ANYRESOCT=r9], 0x58) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) socket$packet(0x11, 0x800002, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x4, 0x668}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) r10 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r10, 0x0, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(0xffffffffffffffff, r11, 0x0, 0xa808) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmmsg(0xffffffffffffffff, 0x0, 0xd3, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 12:30:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x180400) r0 = socket$netlink(0x10, 0x3, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x40000, 0x40) r1 = socket(0x10, 0x803, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r2, 0xfae71e5936326fae) sendto(r2, &(0x7f0000000280)="901e188236038ec44bbf7e953215b687d55bce2b3e18abb97f4ffa1304556a1850ed8998fc6cbba4faff87e224131e15e02d7cd078c3b55f7ba592a45a7075e0f8eb38b3270ce77c166c65ec9e652c3d22c77c2e7b722883dba3478345a90778088466b1b0dbed3942eae3572e65a516b2652642e92da89b3003e2452fb6206130dddf13b8b43a", 0x87, 0x4000, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xfffffffffffffdcb, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) 12:30:34 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r0, 0xfae71e5936326fae) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) keyctl$get_security(0x11, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x20032600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r7, 0xfae71e5936326fae) vmsplice(r7, &(0x7f0000000780)=[{&(0x7f0000000180)="c9772d6b3e902ac060be5caeca8e987052eb7831e029e90ea91f1aec04c1605def5131dd07971f063aa2aba31922683785df1bcd6955e7a6f32cf06cc7b01a5d47bd834e597fdc8aaa994d171677523a50d7afbff2e9110f6198b9626fd132cb6828f15ac0c2330d9b2ef95796ba0853d541f9786ef500dc710b926ed986edcc8d4fd5abb0c23142f5720fbabe0d7dcee3f4ac4c5cb5517560c699fd1824654c68f76618fd6b4c2c60849c7b6bc44ce414477651e3d5a407d5914a12a788f03b68c41110c839bde8d3a2b13746d0a29e3642dd67ea02f03e655ea48ff81aa7", 0xdf}, {&(0x7f0000000280)="c33a1ed21bea044f1203c8f13523a45a9136c39781682e8bb87e50b872b2d33354b944bb3d579d761b74fb942d5e27064737f04b049d80abce0b01397debb81ca2eaf87b35cea3c1158476c93f432da8edef", 0x52}, {&(0x7f0000000380)="0d04515269ee075e3f65ddc1927ab753ff120e7aead3ea3388a3f2516d97f3e648135429ef99c4d1c4aa5ace26f11d88c88d4390677a1f19f7b4eea9df7ffbeb176ee4fbaffddc4392feab0400a44434f74358c54d19d110318be33d7906ec1640d34da02248757420d73bef6eb6d7ae1ebcbfda9d0f792853af82e58fc3f0dd4b81415754b0bce0c93582b699c3e4e2cd9f23ec541416730fc62c31ce01e677b8126dd65c25e939406803f83b93", 0xae}, {&(0x7f0000000080)="817968b397f1d3da8c0ca61bafcac2c7fb73932eb54004252daf7b9007722b325de35a8dd66534d0bc0c0cfafac4aee7d0694ab7b12fcd8630e6a6738560", 0x3e}, {&(0x7f0000000440)="857b03da63619e56a431b819285d0ecbd52123b5d6c78399692a18ec5ac25fc1618ab135a43efae528a1791fe9e2232de185e46080cafcffd15d90fec1b446077002f37e323524b0228bae50db2c32e7a8309529da7c0949e5ccb1769e0225b91a8715d16613c87219796d568ceb282434c48dfe332f58ef0f3196f9e376c0da2065b79a9bafc4f786fae257c8e610b77621496e4144917ba0dca552f6fe7979", 0xa0}, {&(0x7f0000000500)="0eb910b60a2efb258fc4c153d93191c5db01e2005f9cd7e29132296c2a2228956aa3b81c35154f55f1e59014041a7780d7fd3d3bd2f225a387fbf7234b97effef20125196ca3015e66ab7a00c3a8f50116c7a19d94ce1cd434b8ad818982a1908754ce04c80e4d9075769ea6d74414741d810c22f11adf4f8a3512615eded8ea15eaf96bde2b9feeb06ec3f0eb79e0db69a856112e39e2e6345d417f9a485580788edff20347084edc025f35f2d67b042dfb1dee41520d842a85aacff3fd2da65e681eaab136d4476924ac06770c83751c30a579a633acf325a98bfd369e1f977831bcd34a417cc88ae02b8a1504", 0xee}, {&(0x7f0000000600)="6c60591fc6adecffe090745448de9c698838f880257f5ba13e0e6c5d752996ca514c0e620e2fa06ac3bc04ac9f7fab97ec336de39c15decfa773fcbacb44710adec38f572484062ca0044dd3dfb887fa0050edbeb882e89465467864a3eca0bbd3cb5a9c233dc54348791923b0fd0a178ad667c9c69c1dbbac70bf", 0x7b}, {&(0x7f0000000680)="c77ac0953607c14ae1aa28b420203ff8ac65f15c982e97358e194dfc0dd5f10c8d2b1a10271b59bca760dba021d44507b6419e78131e3a34dcaae24412e9e40006b0461410d9a9ba8eaf1d7bffba6dd955678e9a7393720a26ac879475a51521e27d26ecb714dc4fc1a12b846d6802bdb91a5a2a8aa247acccdd07cdb9debb827f18422ebca4a7d27a8a3e2733fa18f78f31b190107cab74fdc72b13781c84dd0877e69181de4cd6f5f9a364c887e48afbfcde1abe28db7c852c55ebe139702c7ddfc744237d15320ec145684e1d1f82de0cb9a3bb165207dcce12b0bbc4", 0xde}], 0x8, 0x4) setresgid(0x0, r6, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r9, 0x0) getgroups(0x6, &(0x7f0000000000)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, r6, r9, 0xee01]) ioctl$TUNSETGROUP(r3, 0x400454ce, r10) [ 233.333678] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 233.344212] binder_alloc: 9967: binder_alloc_buf size 8796093022312 failed, no address space 12:30:34 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) add_key$user(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x20032600) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x4, 0x668, 0x7}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={'filter\x00'}, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000280)={0xa, 0x3, 0x2, @mcast1, 0xfffffffe}, 0x6) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000002c0)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000340)={0x1, r6}) sendmsg$IPVS_CMD_SET_SERVICE(r5, 0x0, 0xc490d273bf9eb065) sendmmsg(0xffffffffffffffff, 0x0, 0xd3, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) [ 233.350137] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 233.415914] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 233.415922] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 32768 (num: 1 largest: 32768) [ 233.484423] binder: 9967:9972 transaction failed 29201/-28, size 8796093022288-24 line 3284 12:30:35 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r2, 0xfae71e5936326fae) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r3, 0xfae71e5936326fae) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000440)=0x7) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x180, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x800000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5545e85b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xec}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1d36eb6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9b8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x80}, 0x8000) [ 233.508505] binder: undelivered TRANSACTION_ERROR: 29201 [ 233.508607] binder: BINDER_SET_CONTEXT_MGR already set [ 233.508616] binder: 9967:9983 ioctl 40046207 0 returned -16 [ 233.557904] binder: BINDER_SET_CONTEXT_MGR already set 12:30:35 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 12:30:35 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB="852a62730000000002000000000000000000000000000000852a62770000000000000000000000000000000009000000000000000000000000f90535b0a0d4b06400"/80], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="0000000000fff600180000ec0a0000003000000022000000"]], 0x0, 0x0, 0x0}) [ 233.557913] binder: 9995:9998 ioctl 40046207 0 returned -16 [ 233.558901] binder_alloc: 9967: binder_alloc_buf, no vma 12:30:35 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x50, 0x0, &(0x7f0000000000)=[@dead_binder_done, @increfs={0x40046304, 0x2}, @increfs={0x40046304, 0x1}, @request_death={0x400c630e, 0x1}, @free_buffer={0x40086303, r1}, @exit_looper, @release={0x40046306, 0x2}, @dead_binder_done], 0x0, 0x0, 0x0}) [ 233.558923] binder: 9995:9998 transaction failed 29189/-3, size 80-24 line 3284 [ 233.590481] binder: BINDER_SET_CONTEXT_MGR already set 12:30:35 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getgid() fstat(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000340)=[r2, r3, r4, r5]) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 233.590491] binder: 9995:10001 ioctl 40046207 0 returned -16 [ 233.590826] binder_alloc: 9967: binder_alloc_buf, no vma 12:30:35 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="852a62730000000002000000000000000000000000000000852a627700000000000000000000000000000000000000008561646600000000000000000000000000000000000000000000000000000000f460703a157bdda806943224358280d3c564e439a65415dbc518c0d6ece64f30a34769ec236097591540326c35e5f5128a91253f648b6ca4f63219a66136b7509c35a053003eea6dcce0a6c74a1d52167a5c8c42ede703521943153405cf936393bba04a6a3d441912029734a277ea0c14fbf44e0a7d73b0f1100a62b2c97eed426fc150cda4e73cd5faaf6b00"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 233.590849] binder: 9995:10001 transaction failed 29189/-3, size 80-24 line 3284 [ 233.665579] binder: BINDER_SET_CONTEXT_MGR already set [ 233.665588] binder: 10005:10006 ioctl 40046207 0 returned -16 [ 233.666714] binder_alloc: 9967: binder_alloc_buf, no vma [ 233.666735] binder: 10005:10006 transaction failed 29189/-3, size 80-24 line 3284 [ 233.670271] binder: BINDER_SET_CONTEXT_MGR already set [ 233.670280] binder: 10005:10006 ioctl 40046207 0 returned -16 [ 233.711734] binder: BINDER_SET_CONTEXT_MGR already set [ 233.711743] binder: 10009:10010 ioctl 40046207 0 returned -16 [ 233.712863] binder_alloc: 9967: binder_alloc_buf, no vma [ 233.712884] binder: 10009:10010 transaction failed 29189/-3, size 80-24 line 3284 [ 233.728427] binder: BINDER_SET_CONTEXT_MGR already set [ 233.728437] binder: 10009:10012 ioctl 40046207 0 returned -16 [ 233.729665] binder_alloc: 9967: binder_alloc_buf, no vma [ 233.729686] binder: 10009:10012 transaction failed 29189/-3, size 80-24 line 3284 [ 233.792748] binder: BINDER_SET_CONTEXT_MGR already set [ 233.792756] binder: 10015:10017 ioctl 40046207 0 returned -16 [ 233.794131] binder: 10015:10017 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 233.794144] binder: 10015:10017 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 233.794152] binder: 10015:10017 IncRefs 0 refcount change on invalid ref 1 ret -22 [ 233.794164] binder: 10015:10017 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 233.794176] binder: 10015:10017 BC_FREE_BUFFER u0000000020ff6000 no match [ 233.794186] binder: 10015:10017 Release 1 refcount change on invalid ref 2 ret -22 [ 233.794192] binder: 10015:10017 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 233.806068] binder: BINDER_SET_CONTEXT_MGR already set [ 233.806076] binder: 10015:10018 ioctl 40046207 0 returned -16 [ 233.859244] binder: BINDER_SET_CONTEXT_MGR already set [ 233.859253] binder: 10020:10021 ioctl 40046207 0 returned -16 [ 233.859677] binder_alloc: 9967: binder_alloc_buf, no vma [ 233.859698] binder: 10020:10021 transaction failed 29189/-3, size 80-24 line 3284 [ 233.865917] binder: BINDER_SET_CONTEXT_MGR already set [ 233.865927] binder: 10020:10021 ioctl 40046207 0 returned -16 [ 233.904817] binder: BINDER_SET_CONTEXT_MGR already set [ 233.904824] binder: 10024:10025 ioctl 40046207 0 returned -16 [ 233.905521] binder_alloc: 9967: binder_alloc_buf, no vma [ 233.905539] binder: 10024:10025 transaction failed 29189/-3, size 80-24 line 3284 [ 233.927735] binder: BINDER_SET_CONTEXT_MGR already set [ 233.927746] binder: 10024:10026 ioctl 40046207 0 returned -16 [ 233.928045] binder_alloc: 9967: binder_alloc_buf, no vma [ 233.928065] binder: 10024:10026 transaction failed 29189/-3, size 80-24 line 3284 [ 234.399154] binder: undelivered TRANSACTION_ERROR: 29189 [ 234.404707] binder: undelivered TRANSACTION_ERROR: 29189 [ 234.410684] binder: undelivered TRANSACTION_ERROR: 29189 [ 234.416427] binder: undelivered TRANSACTION_ERROR: 29189 [ 234.422049] binder: undelivered TRANSACTION_ERROR: 29189 [ 234.427748] binder: undelivered TRANSACTION_ERROR: 29189 [ 234.433389] binder: undelivered TRANSACTION_ERROR: 29189 [ 234.438970] binder: undelivered TRANSACTION_ERROR: 29189 12:30:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x2d8002, 0x320) ioctl$RTC_UIE_ON(r0, 0x7003) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='exofs\x00', 0x800, &(0x7f0000000180)='(\x00') accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x20) r1 = socket(0x10, 0x400000000080803, 0x0) write(r1, &(0x7f0000000040)="240000003a00d17da53a7436fef7001d0a0b49ffed000009000028000800030001000000", 0x24) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r2, 0xfae71e5936326fae) fallocate(r2, 0x20, 0x927, 0x1f) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x7, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000200)) [ 238.516404] EXT4-fs: Invalid sb specification: sb=0xffffff+,errors=continue [ 238.524318] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 238.551460] EXT4-fs: Invalid sb specification: sb=0xffffff+,errors=continue [ 238.558797] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 12:30:40 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000480)=""/242, 0xf2, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x515001, 0x102) getdents(r0, &(0x7f00000005c0)=""/223, 0xfc61) times(&(0x7f00000006c0)) lseek(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x0) 12:30:40 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x10000, 0x0) ioctl$TIOCEXCL(r2, 0x540c) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r4, 0xfae71e5936326fae) ioctl$EVIOCGUNIQ(r4, 0x80404508, &(0x7f00000003c0)=""/230) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000280)=ANY=[]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1f, &(0x7f00000001c0)="27b3153c07fb6d77abfbcf4efda8dc57375e00ed501f8488dcc6c670d5a1a6a15eacd40681606a624dfd58998a4f957205e1c330805f40f62aca21fedc947a222fbfb1e1a5c9eb16baa308cf8bcfd7f02c8d9f377ea21e0fc8ecc01ffbc927252fc1421ab5362bab289d5f2ca0ac06795441b2ff2ac779a282aaae0dad39651663908cd1304cbbbc9bb2d2388d7f71f1eb93683ab6134f68510de3eb291dc046d5981fae262010d78eeb5772f8f361900b214c", 0xb3) fchmod(r6, 0xfae71e5936326fae) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000100)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'bond_sl\xe1v\x83_0\xe3\xff\x00', 0x0}) 12:30:40 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) epoll_create1(0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r4, 0xfae71e5936326fae) write$P9_RREMOVE(r4, &(0x7f0000000000)={0x7, 0x7b, 0x2}, 0x7) sendfile(r2, r3, 0x0, 0x80000001) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB="852a62730000000002000000000000000000000000000000852a627700000000000000000000000000000000000000008561646600"/80], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0}) 12:30:40 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') socket$inet6_udplite(0xa, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x1, 0x0, 0x7fffffff, 0x0, 0x4, 0xff, 0x0, 0x0, 0x0, 0xffffffff}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept$unix(r2, &(0x7f00000000c0)=@abs, &(0x7f00000001c0)=0x6e) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x200c02, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&') r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x100000000000002) 12:30:40 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) keyctl$get_security(0x11, 0x0, 0x0, 0x0) add_key$user(0x0, &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080), 0x0, 0xfffffffffffffffd) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=""/208, &(0x7f0000000640)=0xd0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$inet(r2, &(0x7f0000000340)=""/187, 0xbb, 0x100, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xb000) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000000c0)) write$cgroup_subtree(r4, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xb000) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000000c0)) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00mEmory '], 0x3ff800) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xb000) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000000c0)) write$cgroup_subtree(r6, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0xb000) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000000c0)) write$cgroup_subtree(r7, &(0x7f0000000000)={[{0x2b, 'meh\x82ry'}]}, 0x8) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0xb000) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000000c0)) write$cgroup_subtree(r8, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0xb000) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000000c0)) write$cgroup_subtree(r9, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800) write$cgroup_subtree(r4, &(0x7f0000000740)=ANY=[@ANYRES32=r6, @ANYRES64=r7, @ANYRES16, @ANYRESDEC=r0, @ANYRESOCT=0x0, @ANYRES64=0x0, @ANYRESOCT=r9], 0x58) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) socket$packet(0x11, 0x800002, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x4, 0x668}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) r10 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r10, 0x0, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(0xffffffffffffffff, r11, 0x0, 0xa808) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmmsg(0xffffffffffffffff, 0x0, 0xd3, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 12:30:40 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/\x8c\x00', 0x6b5ae3fe2d495fa6, 0x0) lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000480)='trusted.overlay.origin\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000100)=[{r0}, {0xffffffffffffffff, 0x188}, {}, {r0}, {0xffffffffffffffff, 0x4604}], 0x5, 0x1) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x81806) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) sync_file_range(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x77, &(0x7f00000013c0)=ANY=[@ANYBLOB="8500000007000000250000000000000095000001000000005fa8953cdc5d2cfac6f4dc462ee5a73096bda5de3d00001ac895dbe473653fe3a073148d1b509cfb5f6807894ba37bd7e3005d0a72a8d775950caa6ae42ee7b6916c9573719b1146ef98a91ebf42530460360161522a87a4bd189022e6a6f65bbf02ea80ded191191450f0f1c00db5d51ee1adcdf349c6719a81f3a14e05472154aca532b3aa402417e66b177dbf874d8d9bbde17ac93b062a88a818fb4b3ecd08a86fc3bc9ae949a711b4e2ad7c46afb2c04485fd12718d57e634a59b846d17b31ea1e6b32752e399f132985eecdd2a3447a8c8563a6e0d2430d1f56b5736342ca8711fba51a77ef65ff0e212279b020000000000000096ea2475df2ab856a3fc33fa1fb63759b3295b070000853ce053d0538bec6c53d88220aee173e1868e7856c72a40a2146ac1b52176f7ade3da8a773beecb21bb44eb59797da81656f66518786a17139ceec18bd23a17f61f2b931a34b9797fa4ebdf1536cf167e9e59258c2a7f60f73785aa1766fa0f750ccf77862e75ddea2bd8e833e72f9a181be65cd14d7225d8c2130000000000000000000000000021a8013392ec38fabe0f6982df4aa8e53b152795723c81472c438e44c806eddaf3b212cca07a6d73d34afe871bd81bc6b3c0eb1df12bb7d7df9926e5c063306950175fa375d52f3c6cc88f1fe493aa4b6e5e8ef5570d5a778056a6239e943e103676bec97ae677cfd9ef4ae5f4090000000000000062857e40fcaa167900e1f6ecc6a17b070a75ef8c96aa14c90b338a4107843e2fca12509aeb1cf03723865397de3921344ebc0dbc0db5a59bd0f3da92a4d2fdd52c8d0dbf3c7c1096381dca8baacafd1497f5554f8a5a08ab9bb25c9218c304811ee4e94cf3a0dfc218128f799f7da20cb3851b52b5556394d42f248f35da79c5000d3dc71c4dcaebd997c94549e82a24b48afa424b57143c95d5dd8d007887d067fd78ca044b524b6990f0a1a8e249720d946c7b0d3a596fce6e646f1e685aeaa0a0b7056afa41e9f3385073019b33437778435cc7af718a6e06d00e69f09a138b98bc0f3d7549df682faa20f0a9d39b24752506831884d82b015499c842e13e4f5af2ebd68edd322e6ebf3d5c9cbad3ca197140803b3793b8a3b61e37172ca28cccb84ce9cc83dc21c31cf1fa9a436e66b41309b5021b49828236f41f86ca19724535b1b9131e76f3768c8c381987c3defb72efab24848eead6ffece3be98a04a6667b65a8116a871cb71fd4ab6d6384a08e18e55bd51a6d57c71fe0b30c3fdace4feac2aa47a38a0a90940212c2b051c4b64e0388dcf84400a608d"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sysinfo(&(0x7f0000000000)=""/50) mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f00000001c0)=""/131) socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 238.626493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=10207 comm=syz-executor.4 [ 238.666198] binder: 10201:10207 got transaction with invalid offset (0, min 24 max 80) or object. 12:30:40 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x400000) ioctl$TIOCSTI(r0, 0x5412, 0x40) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0xaaaac19, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) clone(0x2a002800, &(0x7f0000000300), &(0x7f00000003c0), &(0x7f0000000400), 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='\x86\x00\x00\x00\xfb', &(0x7f0000000000)='./file0\x00', 0x80000000000000, 0x3, &(0x7f0000000340)=[{&(0x7f00000000c0)="31661016e74b08c7f2ea836c71aeb8c198cf24b337a13be3c1c56a2847374d0185590c35", 0x24, 0x100000041}, {&(0x7f0000001800)="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", 0x1128, 0xfffffffffffffe01}, {&(0x7f0000000100)="5e4065bc338a58382ccf1bd27f0b29c361eecff70bf154a47509d1aea60cb1b2447d4bbdb19da495607799357eb83ff05b42629b0f858f6dfc2521860e1443b375a68ce6b74cb3b2", 0x48, 0xffffffffffffffe1}], 0x1, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) write$selinux_load(r1, &(0x7f0000000240)={0xf97cff8c, 0x8, 'SE Linux', "b558c3425f2698fe2c7d5c43d23200ebd77167a75d16b0c7fe23375b494bb5a8e895f7e49f475aad255c0f15d6eae62e9af78119d25335975ff83e8d3268785be732049ab4a49a16da755e238447692dfa9526cd215dab4fb2a647cf9e4b1ee62567f90d910a8b79b034515cc24e48c4adcf71dfae4ad4be5fc890484eb699d3b1bf8121107f9b7c662b5a62bf1f580fd094521eda40faa23885552a1770e95fbffd20bb9239f0d6739e615f53f1bb19e7f67bea2260d28d94226756352f87cfc1c0a1bbc2afb14afe77"}, 0xda) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200), 0x17e, 0xffffffffffffffff) keyctl$revoke(0x3, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='trusted.overlay.origin\x00', &(0x7f00000004c0)='y\x00', 0x2, 0x2) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r2, 0xfae71e5936326fae) ioctl$TCXONC(r2, 0x540a, 0xcf) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x2) [ 238.738013] binder: 10201:10207 transaction failed 29201/-22, size 80-24 line 3379 12:30:40 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x401000000001, 0x0) close(r1) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000003, 0x11, r0, 0x0) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r3, 0x208200) r4 = socket$inet6(0xa, 0xa, 0x1) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r4, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e22, 0xc5, @rand_addr="5fe6d2d2e57a6979a2223c401936545f", 0xff}, {0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}, 0x6}, 0x80, [0x0, 0x14, 0x7ff, 0x4, 0x6, 0x1, 0x60000000, 0x6]}, 0x5c) sendfile(r1, r2, 0x0, 0x8000fffffffe) [ 238.779243] binder: undelivered TRANSACTION_ERROR: 29201 [ 238.790510] audit: type=1400 audit(1570883440.315:46): avc: denied { set_context_mgr } for pid=10201 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 12:30:40 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$void(r4, 0x5450) ioctl$TIOCGPTLCK(r3, 0x80045439, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) seccomp(0x1, 0x0, &(0x7f00000005c0)={0x2, &(0x7f0000000040)=[{0x35, 0x0, 0x0, 0x81000000}, {0x6, 0x0, 0x0, 0x7fffffff}]}) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket(0x10, 0x80002, 0x0) connect$netlink(r5, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0xd) sendmsg$nl_route(r5, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_ADDRESS={0x14, 0x1, @remote}]}, 0x2c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) 12:30:40 executing program 1: openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket(0x10, 0x2, 0x0) recvmmsg(r1, &(0x7f0000006080), 0x3ea818461ad51e9, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) socket$inet6(0xa, 0x2, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x11) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000100)=0x5) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0xc32f, &(0x7f0000000440)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x377140be6b5ef4c7}]) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) [ 238.854282] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=10229 comm=syz-executor.4 12:30:40 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x440000, 0x0) finit_module(r2, &(0x7f00000001c0)='/dev/binder#\x00', 0x6) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0063404000000000d6078f16e57b3427509eec000000000000000000000000000000000000000000009dfa0000000050000000000000001800f2492dc60095", @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB="852a62730000000002000000000000000000000000000000852a627700000000000000000000000000000000000000008561646600"/80], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000018000000000000000200000000400000405ae790375598a7f638020000000000000029b82d1fba4114565b3ceaab9fd16891e6e92b1b750b9d6becbbe88f11351412ff6ccd1d00"/90]], 0x0, 0x0, 0x0}) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r4, 0xfae71e5936326fae) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x30, r5, 0x10, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x800, 0x8, 0x8, 0x2}}}, [""]}, 0x30}}, 0x0) 12:30:40 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty, 0x6}, 0x1c) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) perf_event_open(0x0, r1, 0xffffffffffffffff, r0, 0x19) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="68878751ddd312702b73a17242ad5f87dd575d15e97fd0d5899d2a55a4b6f3e9153ee58f83916c888550c3d179255fe2d6a47aa2b55777551e11ffae6b4f30c20fdeb46d52da5af979dbc7b7141b97aec3c69d84bf3e18f074e8fb6322f097e2e4ac493c6dfe4545513f6ff94ea95cec3bbcff27ac3122cadb3b", 0x7a, 0x800, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='\xffxt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xffffffffffffff14, 0x400}], 0x1, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r2, 0xfae71e5936326fae) 12:30:40 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x1100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff00000000]}}}, {{0xa, 0x0, 0x0, @empty={[0x2]}}}}, 0x108) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x1100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x310) dup2(r0, r1) [ 239.031287] audit: type=1400 audit(1570883440.555:47): avc: denied { call } for pid=10251 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 239.090464] audit: type=1400 audit(1570883440.615:48): avc: denied { create } for pid=10251 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 12:30:40 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x60, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80000, 0x55) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000000)=0x2, 0x4) 12:30:41 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x400000, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r0, 0xfae71e5936326fae) pwrite64(r0, &(0x7f0000000200)="80f9a7e3093ae9a9a0ff9d9337060a26d88d775593814b1c788f4e771dd3ee4e859c22ca0244a993fe3e94c3533d35dd70cdc3734cb96e4d487b7bfa9f06a05afce4d70453c2d5b07e4c2220670c21768287500da71d6726815e305cdf443bf24a41cdf8d92cb77b221130fbbcf4d30379919fb126b46c4dedbe6ed15869efa299dc12a52743936b14d51ccd459cd7", 0x8f, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xa, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f00000001c0)={'lo\x00', {0x2, 0x0, @multicast2}}) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) ioctl$SNDRV_TIMER_IOCTL_STATUS(r1, 0x80605414, &(0x7f0000000140)=""/128) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x1c0) sendmsg$inet6(r2, &(0x7f0000001c80)={&(0x7f0000000300)={0xa, 0x4e24, 0xa1a, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000000340)="c7a3d823c9e93a5d7779de8530c77779b496e22bf5b6f17c7869a416ed3427e2fd863272815e77e7930008ec17e2ca7efa4a389740c4e29ff6fe56a60c5abc9c91935040137c91914f88b91ec12ff7a7e9e97a631227abb186b7299aeaf1db245a0489d3b3194c0effaba9367f3f2c2ff0e5f6952754990edb564835be75f6e9908002f35abd9c1f3c53dfe5a9c0dce834080f", 0x93}, {&(0x7f0000000400)="e59b14ee45b0a3b17a2c4e615dc504ebb6f741168ee65ef03f5386906d541cce4da4e5e52ddbcf78603fbbb6393970f25a691b66c91a745da1ce8a8934334695a71e5776ff76", 0x46}, {&(0x7f0000000480)="f43c0760fd3fe2258dc875fad37ce7204158cff2a8a9e4e87b338a66d8d2f5b37c89a70941218c90558a7e92a9ee03207f51ce5003c8f5269ce74ba63083328054fa8f78b037eb89df391c8fca396c550d5465aaf4ce63dc287a470d320acca13e88e09f44cdd85f2f6c4b51e1a36ebd9076ccd3c7cead7e87cae8700f7d3b32dfdb0e1f333954020da5460b59857475344d2c5e6b61a943b989baf374b3e54b1d03b759995550b421826bd642dda27e31d33a210290eef4a32a632b6c5dfe545d3451819f2bf064b8896374e2d36eb3bed5e2609c59c83ff32d1e865ca9d23cf9c1d3d8e9d0166e54443fe211b2d4cb22146b34865b9059668a91e8506b8205bf36b10a9263a274ec5949c04143d11b5bacb829712e3a9e1a61ccee8b722d0ed4ada6bdb0167b3c516bd62442ea781df710f4bcde5defd12d2da787b65e00f383510376e9c44f850ac90681f32d94b8657b53edebd1c7517f760d6bc9e60cb0378283ef8d9fd3f6994aae5c3d71dd8b25b97e4f5ffa96c8d299bbabdf15f30284334ef09cb0090af500a86da0d6f5b5e776bd3915e92ad07b764a5df88dac5772ba7f9ee0cad991d6b992a60a577d6445673c4e9a5e37f0ab1fd811e39d993e10c5237b347f227f442ce482ec9b54a53e46aeb493c6d6a1ea6fb3fe5fd4ae920ec35eb513b6a5d73e9fd655069cd6012ddeb869ff3e6a254aaa8d75a187a9bd5ca3175e8f43f8b096b969779211476a3ac7468e84d9493d89db9ffa64f3befd6abc0a7d2d5de432df30f0b24d7bb28194641bfada7f641f213798b2f4bb4bb7d8ad492d2cd1b759ec93f6c2fc1400ce7e0c8537bc7e6b6edd80c97d5a355c89f46ddc502ccdf7551af470e0e7b0064d0907742c9971874f2a24b0862f32255a14cdc3c071ec8beb53512c649ae2367354538352b992d7a5f240a6d9f1d3564aaf77ee6e7101720a0a9705149664e3baabd864746d43a6010b1ec6c5b1d7f9bbec2607801c72bd675cf771bab4525a29b4dc98ea4ae1fea94a2c9cf30028ce33814c66e1ede7c9e347317b0c83d449e3e03b21ca16bdf95f60f8924b08ebe7f405e43851be50f38ca7b581cf524306da9097c51aef7d389cdaf9e4d6d49065a59f8b49e5b9753e02c7ec5081cdd3a67cd34c1ca6d7f69dd85ffeb74c5c20b8ac43683c04cbf1eeb864611aaa65c8876ecc43e2d089bd2a1de37e7c462d7e1abf043017189a5ff357c826410bc12c51b835ac964d7e666c11b7e6e3fb5315bfdbfbafc5254315aed9bb0148f371a7501c6a0989a21e61beb819fad9e3c39ad6b9c457c96d160818e16ff9c29a06868bbcc60364d93f3953f2801703cefba2151a3c2fc8f213413a404bb97a04368f621f756a76667bb23b900018a251d0a854df5c03cd359a53ecf4aaf39a3dc9f5ddb6a93f867ccb18b8455a918e739a302bbc9d60d90294ef4ed018f39f9da3864f2d5c4133d3b0f6409eac80c7656deb82169fb413fa9911fd7cc8bf7bd1722936a3ec4d40dcac901628727aeaaf557c65b53f3202305c7dcddb783554bde83221e58bfbd13c4336163863f2d6bb310e86e311e3a27114826dc0d74df60e5774e954874bbf9cf2e49c7d326721a5fe7f2abc753f29c4ab63994b42a89930770696543f16aa9fa4a735d01054b43daebc5f28c9b437b673d5baab4b0fbcd5f8c36955c64a8e86ec8276f56139761dd0630f7f29a25390a7368f6ee7f0f8ea7f02f01e21b05b62639b916564fc3faa375ce977ec382be752069e8fe12d7c3d33061ba832e05586c872f9df3550cc8b10203f8d2d98adf87e3e22c2dd5fa625d87dead79502d547453af15aeedfb850749c413c5363c24f466d5d9d951d3a7cb7c71537f2389e5ddc97bb47a865b37bf9405cb7f0532f2dc476745d5aed866e849f5f46f061fc19ee56dc2ed40a815ca9d02627c9c34d908d36c2bdeee5c228ff37e9177bd6fd91ef4c1e48b9bb23ca9ebd1a89dfd031781130e6646982e8ee78a5fbfd0892e601ba483bf84afaf4f55030b2dabc7c1b7590926099312bfe1905352a2b6cac84c0739df39d2ac756e95412826e86de6329e5dfd93f1ca3443749211b452cbfefd2f713484654caec4b003eddebcee6d59e7712754c66adf0b0528778538076da494910beb789ba1140d70abfe000fc4d6c8fe05368d8f7ebd2129bdc05909272ec31d131a3dae02ea2c8ee9827065ef4e989807b3c1368e3efdfd6bcb6a6c9c93d0281fe5eb6386e0b240ca6713ac06e39b1c88c653b43a27d70d7f706f677cffb457dbcceefe961209eb05cfda6ca6391093c26f42173a824e2f9fd8269fc97fd86ced56e3db54a2f14814d88cb8ed097a3edc8e707358c95f3d46106d61facde09275958de54323e6bde5a3b300bc3437e8724b42e9eb8dd2772163ed68eb95faca7cbc38c07e630278b193b0f0e1e9843e15ecaea20d6ae5e3e670ab9457a550d825d0ca63d4843b674dd908556849b35905f8aeeeefb645297921d0278867a46ace386a01aea9e6db1af4208b72d4d1e03bc0ac7459009044160862b8e823aee06d5b5a14e15bb36211b05a7e4221923c03f1894d2cbaea4b80db9d861c058841ae5df3953131a4bc94ea8efd1b11c44a111df8b3375a21140b5d952904736abaaa8c1b607ceb39db065249fa46f4e39683f992e950e3a9e8987f1007b12a9ccfa9714d4d9c41cc1243551e62b4cdd6be36c6a8c783102f629b840c169ecac2f5e35714dbbb086d6508c5159054d71557d85b34565c2b7ddcb254b9c2d24b1995ab5f8bfaffb62ad4e9adf02231f46956e65b9a94e30e56710a295120c9f0de5622917860eeb746b78c746daeabe8b85f3e6c68f8f2cc1e8b272e6236c573ee47188aa85e3e34c9405714f991eee170da74614b19f34efd497dd1bee8c78a1eb12a1e6d21e2fe51c87afe6648eb8681ac845f258e6865edd526747c597b61a2d6b0794e3801eccec81a4dba0ae00376bf9664c8d2a0465a2c41dce1fc91bfa2d03589a9a9c734dadd120b5d5a0fcd616fe1380b8a1dae04e79b6f5b61191a1206b0b197a5c37d62836b18d4ff5649b294737aa7db7c8a3f27edbdc1baf694e5f694222a3fb84550e9c9bf2012fa39d75bbc370b4f038215dcd5782c8290093ee114b759da68661673ac8cc1600be2deebf4ed76c67d4de5babd103dc9921a5156adda36ef37d4467b5996e23e3a342fbae49314c12a3df49cc7e9e6687c9c8b3df4bc51bc2cd97a043eda2f1e6afd5c60825b7483dc10bbfaa4347de527d9bbed96bd21c97cf5b7beed3ec290d25bb8249dd8c06a8cc8d238391692cdee3c5ea77d5eb2fa1293cd3bbe3ed9d4933ebaa8cf6f682dee570637f9ea754262947e44e80076777c87117510625864c1639fee90d20e02aa6788f0d574b4458daebddecb4b4cfcd5c10026a7f5edad92ab4625f839fec450adc8f35f089ee104de9b50f2770fe90d2146d4126caaecccbadef7049ce55199d9595c375ed8248664e471d7c7a7783a3d5d1c2f2f62737773afb2dab7a0aace024ebee2bc84728a98b2885d322b03083960291fcb72e29768d8981d56a1c9ff5736d1ff65ad81090d2a1301f97ecfd997a2fd51ed8a3b4f81e453993912ade79ab62c58f8ad01697482f7c01e467449f6f5a598a456bfd991309239214204d7d376c1e83e5f8c91b0b1dac61639af11d3806ebca6c54eb6a69b8d13d657a5b6211ee45a10659f488175c33367bd9662b7a75d5ce38c6433d37ee2a6331a69b679d08f46df5b1ffee014c9fcfe03e100fc2ff3ff4bcdafcc0f4b322de0c9b562c39626ab145f690f3571f69f467200a11f75d33109038ef47b9e31b5bb49a02f574d88a0f4693c9c7f9b0480be36ac9674b67b6794b8d7f1f7c4d5a9e351b5264f24f88b8a907b8d897a5074725d64282085b9c7b7bbdacc3d3d25f2f50da79d47614dd6d17679778d6f7cca47965a0f503100912f78a7bad068d65a0d487241ef6478758e601a447e72f91ae3037b03fe0e52b91a58a8f4485087e536d4b3c22fb1a2b5c67de8da3ae7ee7c601079d92e4ec068ca7c99c0c16b967ddae763ed06704848931f31db31d490496592748f30355dce793ec08c94f1f82ea7fb89b71ea25b81dac8a44defc1059fd80c875f7e38bdbe19702d7bb704a292bd5880b9d334690a8219abec2ab6b890e0eaec492fff445574f8e297c9ee4155f7745057b7576fcda65b761362c076322c32c63730cc6dfaf9693aa03c5e2be69eb0d1141f658be02bea3686afc68020f6e037863665ccee69383326c3af729a6346be11e123e4b256a8b0b9678e2f9d02de1ad8e41b73ba71ce433456846409afa9203358bc786f6953ff0caf42409df18572afaf0b93a7e801e78de4314da0bb9dc18d52ace11f3d9cd341a6c0adba0049dced2248c17e38b90551a2d305351e2a1fd11ff04e36165b75a6fad46d8fecaab0fb8003c225c2de5ec3bf856dc95c137a1f356c8e466b8aa8351f9cc216652c3580acb44b0fe89aa2457e81fa26d1dcd46ac64010ec1da601de2d81cac8dc6c7a643a41e10fdfd0c05277b7ca9ee896a10d68145964bb1441741d9d21a9039de717ff14a4535a1a8f59824566b95c95f93017c0133d4619681ac4f65b19fa8fb1dd440354d7adcbb645c1e1f470faac42fb2c6d10e13dd2377898ca4ec90c73e7dd97c454edc5d59d3c47a943eae6b30d62166cbc7823be5ac2cf5b1512405c3f94e9c4241d184145f6d184fc23ffa6bbb1d497872e38638f710844b5c00e2fb5f2130c64a8cb1869007edcb3a2c7b7e7144e702fa2e4b23092b12f9d4cdb6829601220916daebe16460fc12e7ac86efc906008895095ed12dd36a8a050ccd727781d8815a89f147ee095977208eb28ee55325f7a017dc164ed2d5cfe6a475bb5f2a996a8eb68b766c349b40fa5a0404980d4728a741f01abf227180130216d15d142b5d2d2a38ba0d66605bbd9a49d54f5ba5aa68f1c0e586f1a87e54eb5d3e56768d57e2cad73951f1f779918628b399501ad1de6e159b7d10c8a72d55bd6f572fa70c295da2069f156ea20464d6ccbaf2507920b494bf9000ccdeb702dacfa3e3e8457b5d15e5e9710eb41a3d321605f0a75b44ff75ed7f5bd61b5f314273ce2279185f0567b8a53207aef2906bc419725f7cecb418bd1d09eae79c680d280cb3fc23aa17137e6871725393cf5fb9b821c8a8ffab1adcab598406f10004b0e9babf3a061528d7b070e84595bee9e547a150ea75345625615b143518252c81610ae03cdb2ca832317b032921c84572cd5f2e7dcbf46de5e51a7a743fc40513bc984a6a85d426dc55b8794d15d43ab7c5b3dc10c4e5d4bb0b073382c20f5da1e01b9f55a8f19ce43c6f114beb71b9a4ebba789b19bc2bf41b2a0ea307584ecef63d6e2acedb7b1ac3f98c7196b7bfcd46d9753d58daa1b94778e788333e42474cab3d95aec15c8957b457377380616ed01fe51c1addf4969139d7c053c2394fea4626f4d621bada499d7a1d2a09f6722594f3882b3c28de4231d6f43eb9cfe99d96b7ae584a0eec82979e29950798e44a737ec3a5e5fcbfab5e22c477989259085564097a84c0794ac4a94745ec6bbfcd3332321e8c4e1fe735bb444577b9490778689a7627bae72d4e264e6293a39dc6480dda6b264fb15e4374d8f6d84bdb74ef684557b7d5d245e22c6221c5b3cf1abc21df74e3a653afc0427e5ae246b1399e353799b52cc3c4657e5310749d43f50513406c8508eab7123ef7ef612d19ce85250752a533", 0x1000}, {&(0x7f0000001480)="6a08fd0b5ce6db3e66166cbff63b3d3479a074ac891de27237a2689094af20a8d4a5237c1392a3f255a6876ea7e37aff33ab23d1bfb8e45d77c7e6f116458888b269477b75d39f05170463ecbd37ea1145a873e7794ea2cca01ce5ce43c8f3b0d3da5815868adbed0fd862ed099eed4e76552b70d63cc832b9fa21bbcbe631ba133c02a9af9749afb0a909f0713fd520df0878885f3ae1474b92378545f351efe3add5b13bd3bb67f4554e8fe4d8f11835c2b770bcb050", 0xb7}, {&(0x7f0000001540)="f27ea5b823d09708a7569203fd3c9868f07294812bc9e91e6325759d89daf627f59cba56c49706d83c44c88e538988aa6bf0db8e1ed89a96783cf5fe4ed542ef6d15b73965ba3c60c034d3fb79fd02f0fbbf8a19b2a32ca9cc021f187f25a9eceb939b4bf4b6818e75ae644ed0bf82fb873c4b9fb6542a96b4811ef3ae4347fe972353e3528b4b1e1ddd75aa735df9918411e63170962bbac1954a6c110e30e6e0df0680307783db5f32b5c027170af8f687888b41db39", 0xb7}, {&(0x7f0000001600)="5cd3351982be9abf7660534486e9d68cdea65cad4ed3d715515c1f087a67ff3bf999dd70a386cac3cabbdd503e09126ffa85ced4cf77ce6063872427e32167a59ad96a73154d9f5c7c66708f41cbca50540624cf85119def3e511745950fa03aaf9a58614613edb1ecde45d4102f0bcfe543d0bc0c15b443bba28b80dc4c4ff68dd006bb24ffd126d809dd4527fc2a1bdabc475bb0ad16bdc715", 0x9a}, {&(0x7f00000016c0)="33380b1047ebe2425aa8d091d0fcdf064d6f80d23ad5a0051dd092e74b0c3635db71bb609ded06f61cb1b3ff100435a73b0a51c414f9c184b4839f0d0af691833a7f4af7443098644b36b8a90fe9da9f29c61d7b25aa78249ca6d61a44b4a918f788e95097325fb972888b37a93315805c832d2c00c58bbf092d41a2f16086efaaba9645c204d37535c5ed5adae5d272c1e2", 0x92}, {&(0x7f0000001780)="9ef575077287fbb5cd22f8b1f18bbd9c516ff1b54511295737f8023b37ed2f76c7794c783aa9fb69b5e6e56c3ba08d1d39ddc9a6cc68d56f0b2a8297b94fd2f949090a4f035ff1c1fe25dc89b76b09c68a1b4e439af9360d916f2eb2fd8bc94937fb10738fb6fec9211308df6ce6cc2b7eb313a22cbc75eae614e33a89ca0f0e84834b33cc3c51bd99e6fe6a73e41d5b14ccc7fbba8be8ab", 0x98}, {&(0x7f0000001840)="721f3a4ab32775b1620d8c421ee9", 0xe}], 0x9, &(0x7f0000001940)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @dstopts={{0x50, 0x29, 0x37, {0x2c, 0x6, [], [@jumbo={0xc2, 0x4, 0x40}, @generic={0x9, 0xfffffffffffffe2f, "846c2ce636fa4b5464102f42220efb35388da6ed3721"}, @hao={0xc9, 0x10, @ipv4={[], [], @remote}}, @jumbo={0xc2, 0x4, 0x6}]}}}, @hopopts_2292={{0x40, 0x29, 0x36, {0x3a, 0x4, [], [@jumbo={0xc2, 0x4, 0xd5}, @jumbo={0xc2, 0x4, 0x10001}, @hao={0xc9, 0x10, @ipv4={[], [], @empty}}, @pad1]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7fffffff}}, @dstopts_2292={{0x108, 0x29, 0x4, {0x0, 0x1d, [], [@calipso={0x7, 0x20, {0x800, 0x6, 0xd, 0x6, [0x10001, 0xffffffff, 0x3]}}, @calipso={0x7, 0x48, {0x4, 0x10, 0x1, 0xa7, [0x1, 0x8, 0x1ff, 0x187d, 0x4, 0x1000, 0x7e1a, 0x380000]}}, @calipso={0x7, 0x40, {0x5, 0xe, 0x7, 0x0, [0x1f, 0x0, 0x0, 0x1, 0x20, 0x0, 0x3]}}, @jumbo={0xc2, 0x4, 0x2}, @jumbo={0xc2, 0x4, 0x7}, @generic={0x5, 0x9, "c58459cb75d2543ecf"}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x200, 0x4, 0x1, 0x79b, [0x2, 0x9]}}]}}}, @dstopts={{0x80, 0x29, 0x37, {0x67, 0x27f, [], [@ra, @calipso={0x7, 0x16b, {0x5, 0x12, 0x0, 0x5, [0x8, 0x8001, 0x7ff, 0x6, 0x9, 0x48b2553e, 0xcb0, 0x7ff, 0x2]}}, @ra={0x5, 0x2, 0x8}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x88, 0x2, [], [@enc_lim={0x4, 0x1, 0x40}, @jumbo={0xc2, 0x4, 0x1af}, @pad1, @ra={0x5, 0x2, 0xd}]}}}], 0x270}, 0x60000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r4, 0xfae71e5936326fae) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000001d40)={{{@in6=@local, @in6=@remote}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f0000001c40)=0xe8) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x100000000, 0x40000008}) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r5, 0xfae71e5936326fae) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000001cc0)={{0x2, 0x4e23, @broadcast}, {0x6, @remote}, 0x46, {0x2, 0x4e23}, 'hwsim0\x00'}) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001bc0)='/selinux/policy\x00', 0x0, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000001c00)=0x2) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000100)=0x10001) [ 239.090929] audit: type=1400 audit(1570883440.615:49): avc: denied { write } for pid=10251 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 239.115907] audit: type=1400 audit(1570883440.625:50): avc: denied { read } for pid=10251 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 239.613426] binder_alloc: 10251: binder_alloc_buf size 70541368845402112 failed, no address space [ 239.642412] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 32768 (num: 1 largest: 32768) 12:30:41 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) connect$inet(r0, &(0x7f00009322c4)={0x2, 0x0, @remote}, 0x10) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x8) fchmod(r1, 0xfae71e5936326fae) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000180)={'nat\x00', 0x0, 0x3, 0x3b, [], 0x1, &(0x7f0000000000)=[{}], &(0x7f0000000140)=""/59}, &(0x7f0000000200)=0x78) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) 12:30:41 executing program 3: pipe2(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000600)) r2 = syz_open_pts(r1, 0x8000) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r4, 0xfae71e5936326fae) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r4, 0x1b, 0x1, 0x0, &(0x7f0000000280), 0xa}, 0xfffffef1) fchmod(r3, 0xfae71e5936326fae) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYPTR64=&(0x7f0000000000)=ANY=[], @ANYRES32=0x0, @ANYRES16=r3, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRESOCT=r0]], 0x97) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x39) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r5, 0x0, 0x0) pidfd_open(r5, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000009b4b62b}) openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17}) write$FUSE_WRITE(r3, &(0x7f0000000300)={0x18, 0x0, 0x4, {0x3ff}}, 0x18) [ 239.662786] binder: 10251:10257 transaction failed 29201/-28, size 70541367503224832-1342177280 line 3284 [ 239.685237] binder: undelivered TRANSACTION_ERROR: 29201 [ 239.692511] binder: BINDER_SET_CONTEXT_MGR already set [ 239.698225] binder: 10251:10263 ioctl 40046207 0 returned -16 12:30:41 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x1c, 0x4, 0x1f, "e6df2b32f2459637732f34650232e04e", "b85b30e54ba9bb"}, 0x1c, 0x1) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000040)={0x26, 0x19, 0x0, 0x17, 0x6, 0x4, 0x6, 0xbe}) 12:30:41 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x82440, 0x0) recvmmsg(r0, &(0x7f0000002880)=[{{&(0x7f0000000200)=@nfc_llcp, 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)=""/9, 0x9}, {&(0x7f0000000380)=""/179, 0xb3}, {0x0}, {&(0x7f0000000780)=""/222, 0xde}], 0x4, &(0x7f0000000880)=""/194, 0xc2}, 0x40}, {{&(0x7f0000000580)=@caif=@rfm, 0x80, &(0x7f0000001b80)=[{0x0}, {0x0}, {&(0x7f0000001b40)=""/26, 0x1a}], 0x3, &(0x7f0000001c00)=""/167, 0xa7}, 0x10000}, {{&(0x7f0000001cc0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, 0x0}}, {{&(0x7f0000002380)=@ethernet, 0x80, &(0x7f0000002580)=[{&(0x7f0000004180)=""/4096, 0x1000}, {&(0x7f0000002400)=""/243, 0xf3}, {&(0x7f0000002500)=""/93, 0x5d}], 0x3, &(0x7f0000005180)=""/4096, 0x1000}, 0xfffffffe}, {{&(0x7f00000025c0)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f00000027c0)=[{&(0x7f0000002640)=""/131, 0x83}, {&(0x7f0000002780)=""/42, 0x2a}], 0x2, &(0x7f0000002800)=""/77, 0x4d}, 0x100}], 0x5, 0x40010044, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000640)='attr/fscreate\x00') socket$key(0xf, 0x3, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$TIOCNOTTY(r1, 0x5422) r2 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140), 0x19d) write$binfmt_misc(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x37d) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x5e) connect$inet(0xffffffffffffffff, 0x0, 0x5b) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x0, @remote}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x85, 0x0, 0x2, 0x46a}) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000280)={0x4000000000000029, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(r1, 0x4b35, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) add_key$keyring(0x0, &(0x7f0000000480)={'\xaa\x00\x01', 0x0}, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r4, 0xc0045878, 0x0) unshare(0x60000000) socket$inet_tcp(0x2, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) [ 239.754860] audit: type=1400 audit(1570883441.275:51): avc: denied { map_create } for pid=10285 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 12:30:41 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) keyctl$get_security(0x11, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=""/208, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = socket(0x10, 0x4008000000803, 0x0) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f0000000040)=0x81a, 0x4) sendto(r2, &(0x7f0000000600)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000005}, 0xc, &(0x7f0000000640)={&(0x7f0000000340)={0x13c, r3, 0x4, 0x70bd2c, 0x0, {}, [@TIPC_NLA_LINK={0x64, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0xc4, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3d1}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}]}, 0x13c}}, 0x4) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) dup(0xffffffffffffffff) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x3, @mcast1}, 0x1c) syz_open_procfs(0x0, 0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x40) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000240)) 12:30:41 executing program 0: ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000140)={'ip6_vti0\x00', {0x2, 0x0, @dev}}) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r0, 0xfae71e5936326fae) fsetxattr$security_evm(r0, &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000180)=@ng={0x4, 0x9, "ddc7d0f205f4f0c2b01b40cef5"}, 0xf, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 239.879956] audit: type=1400 audit(1570883441.405:52): avc: denied { set_context_mgr } for pid=10296 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 239.995249] audit: type=1400 audit(1570883441.515:53): avc: denied { call } for pid=10296 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 12:30:41 executing program 1: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$user(&(0x7f0000001440)='user\x00', &(0x7f0000001480)={'syz', 0x1}, &(0x7f00000014c0)='K', 0x1, 0xffffffffffffffff) keyctl$update(0x2, r0, &(0x7f0000001740)="b5", 0x1) keyctl$unlink(0x9, r0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2318080}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x68, r1, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9c13}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfff}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x219, 0x8, 0x2123}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x40001) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000400bfa30000000000000703000000fee3ff7a0af0fff8ffffff79a4f0ff00000000b7060000000000812d6405000000000025040400010000001704000001000a40b7040000000100006a0a00fe00000000850000201a000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) socketpair(0xa, 0x80003, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self\x00', 0x1, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r2, 0xfae71e5936326fae) r3 = dup(r2) write$char_usb(r3, &(0x7f0000000380)="2e1953c16d21bc020d11fe4338e20ad85e2938130c749ee3661f9b0fa0c63bcef4a242141c8864cfbfb82a90fdaf844b45957210435567ecc79fe8b381a8b37d806cde206076a9ebf37796087f1f328af17cf57db32846adffcfca43d3ee", 0x5e) [ 240.021346] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10301 comm=syz-executor.3 12:30:41 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000540)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b479a7316270146d0e02f8e63ba8863cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="6d696e5f62617463685f74696d653d3078303030303030303030303030303030302ce6"]) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)) [ 240.119944] audit: type=1400 audit(1570883441.645:54): avc: denied { transfer } for pid=10296 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 12:30:41 executing program 0: mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000680)=""/70, 0x46}, {0x0}, {&(0x7f00000007c0)=""/193, 0xc1}, {0x0}, {0x0}], 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000d80)=@nat={'nat\x00', 0x1b, 0x5, 0x5f0, 0x0, 0x300, 0x178, 0x300, 0x0, 0x580, 0x580, 0x580, 0x580, 0x580, 0x5, &(0x7f0000000500), {[{{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [0xffffffff], [0xff, 0xff000000, 0xff], 'bcsf0\x00', 'nr0\x00', {0xff}, {0xff}, 0x8, 0xff, 0x2, 0x8}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@frag={0x30, 'frag\x00', 0x0, {0x0, 0x3b, 0x85f4, 0x18, 0x3}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x10, @ipv6=@loopback, @ipv6=@loopback, @gre_key, @port=0x4e22}}}, {{@uncond, 0x0, 0x140, 0x188, 0x0, {}, [@common=@inet=@set3={0x50, 'set\x00', 0x3, {{0x0, 0x3f, 0x5}, {0x0, 0x4}, {0x8, 0x8}, 0x7d7}}, @common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x44, 0x80}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@mcast2, @ipv6=@dev={0xfe, 0x80, [], 0x20}, @port=0x4e21, @port=0x4e21}}}, {{@ipv6={@ipv4={[], [], @empty}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [0x0, 0x0, 0x7f, 0x2756ddf7f4819425], [0x0, 0xffffffff, 0x0, 0xffffffff], 'team_slave_0\x00', 'bond_slave_0\x00', {}, {0xff}, 0x0, 0x8, 0x4, 0x1}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@statistic={0x38, 'statistic\x00', 0x0, {0x1, 0x0, 0x9, 0x10001, 0x80, 0x5}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@mcast2, @ipv6=@empty, @port=0x4e22, @gre_key=0x346}}}, {{@ipv6={@mcast2, @mcast1, [0xffffffff, 0xff, 0xff, 0xffffffff], [0x0, 0xffffff00, 0x0, 0xff], 'rose0\x00', 'bpq0\x00', {}, {0x101}, 0x87, 0x4, 0x0, 0x2}, 0x0, 0xc8, 0x110}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x4, @ipv4=@loopback, @ipv4=@rand_addr=0x6, @gre_key=0x8, @icmp_id=0x65}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) socket$inet6_udplite(0xa, 0x2, 0x88) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454cf2deda40729b25fb04cff9ffffff3f00588171001000700155c4ef95311d39962100001600381001000900ff030100029ed66ce1f8ff0e4ec61030cf4b07"], 0x41) recvmmsg(0xffffffffffffffff, &(0x7f0000002d80)=[{{&(0x7f0000000340)=@ax25={{0x3, @default}, [@netrom, @bcast, @rose, @default, @netrom, @netrom]}, 0x80, &(0x7f0000000940), 0x0, &(0x7f00000009c0)=""/206, 0xce}, 0xc0000000}, {{&(0x7f0000000ac0)=@nl=@unspec, 0x80, &(0x7f0000002f40)=[{&(0x7f0000000b40)=""/224, 0xe0}, {&(0x7f0000000c40)=""/237, 0xed}, {&(0x7f0000001d80)=""/188, 0xbc}, {&(0x7f0000000180)=""/47, 0x2f}], 0x4}, 0xfffffff7}, {{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000001e40)=""/251, 0xfb}, {&(0x7f0000001f40)=""/3, 0x3}, {&(0x7f0000001f80)=""/111, 0x6f}], 0x3}, 0x76}, {{&(0x7f0000002040)=@x25={0x9, @remote}, 0x80, &(0x7f00000020c0)}}, {{&(0x7f0000002100)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000002500), 0x0, &(0x7f0000002580)=""/121, 0x79}, 0x6}, {{&(0x7f0000002600)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000002680)=""/215, 0xd7}, {&(0x7f0000002780)=""/154, 0x9a}, {&(0x7f0000002840)=""/3, 0x3}, {&(0x7f0000002880)=""/190, 0xbe}, {&(0x7f0000002940)=""/235, 0xeb}, {&(0x7f0000002a40)=""/95, 0x5f}], 0x6}, 0x1}], 0x6, 0x20, 0x0) read(r0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) getresgid(&(0x7f0000000100), 0x0, 0x0) pipe(&(0x7f0000000440)) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f00000004c0)) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = socket(0xa, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000003c0)={r3, r4+30000000}, &(0x7f0000000400)) fcntl$notify(0xffffffffffffffff, 0x402, 0x4) recvfrom$packet(r2, 0x0, 0x0, 0x40000000, 0x0, 0x0) [ 240.156056] audit: type=1400 audit(1570883441.675:55): avc: denied { prog_load } for pid=10311 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 12:30:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cgroupsecuritynodev(#vboxnet0\x00') r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000280)=0xfffffffffffffff6) setuid(r4) fstat(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000280)=0xfffffffffffffff6) setuid(r7) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000700)={0x160, 0x0, 0x6, [{{0x5, 0x1, 0x41, 0x1, 0x200, 0x3ff, {0x0, 0xffffffffffffff01, 0x20, 0x0, 0x0, 0x8, 0x100, 0x3, 0x6, 0x8, 0x574, r4, r5, 0x153, 0x3}}, {0x4, 0x6e8f, 0x0, 0x2}}, {{0x5, 0x1, 0x8001, 0x5d9, 0x8c, 0x0, {0x2, 0x7, 0x4, 0x7, 0x3, 0xffffffffffffffdd, 0x7ff, 0x2, 0x1, 0x7, 0x1, r7, 0xee00, 0xfffffff7, 0x3ff}}, {0x5, 0x9, 0x1e, 0x5, 'cgroupsecuritynodev(#vboxnet0\x00'}}]}, 0x160) finit_module(0xffffffffffffffff, &(0x7f0000000040)='cgroupsecuritynodev(#vboxnet0\x00', 0x49d05b0889085ddc) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r9 = fcntl$dupfd(r0, 0x0, r8) r10 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r10, 0xfae71e5936326fae) ioctl$SIOCGIFHWADDR(r10, 0x8927, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_read_part_table(0x10001, 0x5, &(0x7f00000005c0)=[{&(0x7f00000000c0)="b79630b05ea72177fe03c954de85a8f17d", 0x11, 0x7ff}, {&(0x7f0000000400)="411c56eebcf9cac1248b09ae0ff3451f374f3e40798c6ae053890826cd5b3efd369eb86f473e290609d65bf41cc0599743daa5a229cf0e224b14a7ceb96656f6e0f63fd9f6accec2f628dfd3e776a83631db8ad8253b83ef08865a9f8dee322d209409e7622c4ab0faa8092d0f9d69551a37cb0dea26d47d886a83fadda6b166ff9472c8099959b5ee30d48ed92b97db8a5b0aa3b5fd38c42f9fdb9a236cf8e613c7ac9ffefb57b4a834c40494877e86f14512f0f09fb4b7433e12f719202436418a4b82dc4080a605e4a4ec03349c67f87ff9", 0xd3, 0x3ff}, {&(0x7f00000001c0)="6cd5b859b631aaf22efeacdd7b465d65b20449f4289a188ef07891628d1720fecee7a133c836a95d986cc78bf835abe8774f339f9dd6e8de3ac56cab648b33f0506ff10f28f172bdd12171", 0x4b, 0x81}, {&(0x7f0000000500)="29d44457d3ed2679b4a47751d9928651196aa2f71e9120b8836548917857a759097eb43abe75d741a4b9afdb3508ac13b2f39171f86384aa06ecf1084471f07edca9ae318d54b5c81b4de3bc0c8699ed99fd412edf59a6af7801ad74d3b25064f6dc0043e7f01fbdc3c2fb0c4351f96bf9c0cc5d0f88c4e63d7804d708e09531ccd3bc45b2ad5f87d42fa4d847b118602255cdf2e00d1295a90e82fa81ead29777db6364031b6fb9e938a14177cfa94b13d4572d93513ff2d4", 0xb9, 0x5}, {&(0x7f0000000140)="569d9076c6341c36df03cb98b0e01ff5c296c27dab7660316802", 0x1a, 0x1}]) sendmsg$nl_xfrm(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="f8000000160001000000000002000000e0000002000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000000000000088f7e1f4e905de7745871687853c42e973d0cec268fae5226cfad1dd334117cfe8001f7c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800000000000000000000000000010000000033000000ac1412000000000000000000000000000000000000000000000000000000000000000000000000000000f7ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffe9dede00000000000000000000000000000000000000000000000000000000000041da0000000000000000000040000000000000000000dc015e1ceb4e392a0aced5d5995245b4fd4d510e6c645f11a915aceab7e78c0000000000000000676efc896791d8545726e885eedd73eaad4987f61aaeac9c184eec4c9261e177f46fec2e54302d"], 0xf8}, 0x8}, 0x0) [ 240.261017] binder: 10296:10297 got transaction with invalid parent offset or type [ 240.282552] binder: 10296:10297 transaction failed 29201/-22, size 80-24 line 3454 12:30:41 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xfffffffffffffec5, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x2}, @flat=@weak_binder={0x77622a85, 0x0, 0xfffffffffffffffc}, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 12:30:41 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0xa, 0x0, [], [{0x2, 0x401, 0x7, 0x1, 0x7, 0x7fffffff}, {0x0, 0xfffffe01, 0x5, 0x40, 0x5, 0x8000}], [[], [], [], [], [], [], [], [], [], []]}) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000240)="a8baa7b655ca2eacd264c460e13e0220fd298239878801b63ca4d8d6e978e9922d3c367461b7473818a45e563e2c0c360e10496cb9beebf9ac88758a2421962357b1a96e9eb2d0f407f5ae140e07e0eb7a6dde531442263332b7a85d74060a13b26fe4dca6586591969f549da4e4271c554878e0f2f41141e400085e00e08f26a5f6f80214184d9c56917f8bb8031a2c5aa200903bd0633e7124e025387efb05d099d5a6469e22b623a4fb760fb326a127251b36187caf27c96b098510b9ee77e17b777282644c0ef17fc034b9b8300374d0927527eb53a0cc2059e12c10a0dde1d7d0c36eb60cdb8cf26ef4ff8c609de2e2394480") ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 240.313920] binder: undelivered TRANSACTION_ERROR: 29201 [ 240.314108] binder: BINDER_SET_CONTEXT_MGR already set [ 240.314117] binder: 10296:10307 ioctl 40046207 0 returned -16 [ 240.362570] binder: BINDER_SET_CONTEXT_MGR already set [ 240.362579] binder: 10340:10342 ioctl 40046207 0 returned -16 [ 240.368457] binder: BINDER_SET_CONTEXT_MGR already set [ 240.368467] binder: 10340:10345 ioctl 40046207 0 returned -16 [ 240.374005] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10306 comm=syz-executor.3 [ 240.374325] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10341 comm=syz-executor.3 [ 240.439798] binder: BINDER_SET_CONTEXT_MGR already set [ 240.439808] binder: 10349:10351 ioctl 40046207 0 returned -16 [ 240.441970] binder_alloc: 10296: binder_alloc_buf, no vma 12:30:42 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f00000000c0)='threaded\x00', 0xfffffe2f) unlink(&(0x7f0000000200)='./bus\x00') clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r3, 0xfae71e5936326fae) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000240)={'broute\x00', 0x0, 0x4, 0x36, [], 0x3, &(0x7f0000000040)=[{}, {}, {}], &(0x7f0000000100)=""/54}, &(0x7f0000000140)=0x78) r4 = gettid() link(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./bus\x00') ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x22) creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 12:30:42 executing program 3: ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) syz_open_procfs(0x0, &(0x7f00000000c0)='fd\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd\x00') getdents(r1, &(0x7f0000000440)=""/46, 0x112) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, &(0x7f00000003c0)="b9e95fe6c0895b73029549a478950cd095c0693b7c905ad8858bc7e711172d9560025a5bf9dafa6fb840bf1c9c5d54fdcba000acb7b101c4b243d11ea87439299702e870156d1304a42b035695044fe061808914dce0211c4c26c82addc808f14a47c24684bcb7ab089b7bf75e69c8c1b124b845124a640cb33696b7765f3556b5626a7a01de908f8100d6264c1d82c4b627699ac4c3f7a5b6ae6da798f582b2347ffe560922d8bb4c32a7e2ee3998ab4f6b42f1f2ccae9cb175787b964dc3960c2fba4a8979d873be8e4256cfcaad7c2ab317d618322d0cedd700fb35d6ac9171a606e47f98950da451c4eb85268238ed96f7e850f638025c1c3ce29b51f1eefd70a6b3b5794458450d07cdf7350e74d98d5ef929998e107f6ddf1c2323b8512c66d2cc8d89639ce79892b1c459d50c94719f0242869b896831f9c0a731d51210c0afe2b68de6b9138321a65931361e91c12572496438f26a20edc0db42930aa7b0b0914d7ab36e7f637a1c98ae2804a5bec14af25fcbf7f35ef08b1fa98a2e6ca8578d41b03951d1a47976e4ab2cd22bb0e4fb74048757904769b5649f4024288a0f312872d6fd022f46a15315c59f757864933c0dcae2b96fcf3bb6361da239dcf721c638f0cd389926ab164fd75fee3656df9be449372247dcadd6f86bbe5255bb09f0e0f0dc9bafecf969d202ab148641bc3bd8cf29dd48d4b1205e2ff05b3b35c2f5a4d276dfec880e9d569d28c594fbcae3a96ddffcd8f1e18a08e5ede9eca3711ecd361b4817c96ce5b91bf34809241bb54fa692cde86c115a2223c38504d56800c952eda2b783011b78c713497362daae969be795382c93ea6f73f008f0a8e6fca5d83b88b3c56556e81228cb10ec2c21a75239fa464b8b34c6448906ff1aba24edcf8437b27b8de974a755ce6c540f3f4374ec95a2c322ea1ed5c3d41321fa6987092c83939dfebab480a2a5b29feb12498e2223cb59246a5c060fe737bfe84ff4b9d37e35672ea57ff8cec6f1220a6b2a45a403cf509d0b4ba68dc259b157be2b73ca37f86e28ca58bc21e6bcf080cce886a78b085684eeec85372a12dc4bdf13941c5c852ac3eab8097f5b9e2d288ea34084eb58671e5b60ecaa577fde8543bc1c2b6e3f2fc1ac378510a000c3bca34bda23f24813fe42914b8c994eeda3b34b5c4be491d4f237dd5b10597cec265f38cbae0adf991f530d67c484f0271854f2efe0f49c0523c9f9e34c7d66ead27f8ab558a868d0e8890f393e8f9edd79b684443ad28cf80fe509d3d8fba6025d41c07637b6317323bebf87b8157e4e0b9c26fc886fb6491c54203c6685fa866a5fa279734c715478404dbf27525644ec65c5b80e869ee8f2d39361abcea882b2481bebac326fc187d730ad65771e7f64baa57c16497d453448371dd13ea754255c46830311a1add3c80b7de5acf5ed18f3a2e588d6d2aaaa9ab48cfab08ea51958a9f64d8c2bc0e1fa075a425b52bff3607f70791d11047d6e33c0dbe0ad5f7a698df33e734aec05b917f6d7665c09b39c942875d3df417cd0443c5f12db0b297c83743993b842f45066cdb74c8e3fe1ca32aeab9a93ed3776f1362c597fba0bc1c2d2ebb9e67e902cafe6cd3921d8099fb5a6fd7071d4b5a1a5038247b3b993c95c1711223e9d533208cc58ddd00f022693ae18ee39338f9b85d2d02b7859fda1370d92c09c4a338cc71145572de0820f38dd022711d7aa6052758a383e826593b8ffb254d22a1cb9171d67abe863a79f179f235fadfcaafc7f867cd1cc2ebfa72e9111b80c9f30531efaf2e45fa2beac65720797af9f678848ad23984be1ff6282c5085430f61407a0c473326f77f40e117d7582f3596660f2d621347e5c2b1da52374486dae0fc914c1833491051da6dc582b36e273b75e7638dc9456dcd59b223bb47d29633069557c6771ef26ea3d10a0d1bebe7b2cac5ae6285579b7ce850ab6990302b24998629b8dab3804fec7deed402be8a72ac8b1bf87cdfcdd7b547ad8994683701647ec319dd035576dde25a7fba2f631d5308d1925d4c9f66e3bf142b8f78859869c024a56c05391adef9118012fc6c0132c70148eab42ff5f0dc590866af7f961b99a91042816b838ead8f2d13f4de10f268cf0180eae45a467154f5554d3d0ba6a83379cfa20d7cbe5a3b701c80128f3518f847fec6bc9026026d9be78eb27dfb54770ff79dc3847c51b904ba73c23caa7684c921cb421bf0ffabdafe4447b31960e574d3fb3e217d099bb6cf18da2f746e6e6ff2b89b762632ae06acce4b53cc2db5be5d2816fd07881ab128627d4fde4f5502cf616097e94335e2cfc7f9f7534069d427b156c174df683d4ab0780207d583d7c3b0bb36e8bbb1d618b17ee6041be8926e3d7b07a107defab7887ff415b844c4478dc5ed3f0535f3bb4e5ea813cfd4565b414abc1a0e99cdd4be5bfcf77d22fa4d67b5e536fc27dd2e7ad56edc2133d4db0844b9f15b3c301f73fad9b06bd1cd9b8e2a9819502e91510dda01418f2e4cde91db16b38152d3d8f87626b403c536314541d7902f236779e1235b5ba62d5dcadccedd83b3d2800d0509688322bd1a83efb42cc00c4cde51ed159dde1c4d0f87b7f5bc0d7ae1d1d5ce1ee77b01d8a291a6e728a4662aa747890bdf51541d8ca5fcd4763c7d63177196c4c3d846ffef430b481d2523d89ff437d3bdb9ea869839b6d0b189011a9e12056e600680a27d1c0d7418abc706acb415a1749353fdb720e4128594ae4e75443fecf4cd67a9b1d7dc0ad4c9d4c316cd5dcb76897d7ebbd349ec69ce490241ef9301197dc22259bde6be231cb5783a0dffd2e57321360dadcda7926315d02a8bb8fd81e9e829b0a4a8dffa019ee4c09846755f488385aed0e0f4f87a73dfe8b0b41b2d0a23118b997e08bec5d7ace25c5e80dff6e8b9314b6a5010d0a1bf4653d5e266125cef0811eac2cfa9dccc493f8cab15023c430fabff6342ca4f3960c32ffe07f69d2dddea6c024c3d6260472f02d9c58fae7b9854af139582efd647375a1840e859ac1c53528d0a88aa094aa62414b0184f56e78d069fc46ede389303c6748e344ea3a8538bc2d1a134ec18e259b887d0fc0586785a3ef112378dd5c59e4525d301b3f07fbc5a38c842b4eb438f83a912832606e9fed9025cd495fb894aad99c5ee703e1d43e1d5bcf42bd219d99a6459d7964a1b04b832f274f2b2fa8601eacb0708f9ce68f4805e14ebf8dbfa9ef1add28a97ee2fa08101d0899c49184a8b178d47cd2c96de340da0678b270f6c3efcee797cdcd42a12cd6f9581a0a85b885d29d2f698f15f871cf87eddc13934ce975621ca005694c41ae60cdbbd2a565b70d409de8dd6877c92f8d08a7e9d214f9714e9fc6fb572c5cd9046493f95299dc954e4aced9686b3c4b64740285aa563e705a766e9123010be6b2a165faf9ca7e2d569eac731335fc0bbbc8a702954429a814e3b505937d04c9316b1d6f1413389a99ea72d6f82e3573ceec55ed17da689e09e69ed443286a62b5a267208536bf002626902320bfe3635748a236cf867844c76a9f4fdf56ae6c7923dd7884990f50c54a2578f1d540a0921b6d8abfa954eb8be29dde0fe993e9c9a3028b8ff6c6957946263f8f46a65c4f756fa049ed40886491b1719009c7d1ff2571e3828d9f11f4827639b0746d835a9a371839dcea9833780c44083b2acfd22fa86bebb2eb6b106d662e040a6530fa6a51232899eeef672dacf82df01f072d1913e99ca3b62a8a0836a7874489d7a8292a7b0752076829620173db7675573fc9b261ab0c7b0d61db951bbe1e9fd7aa46992fab49ed425d515da3a83fd9efa2c8fba7e314aefb85f389762a57542bcda35b4b0b6d0d20531f35640f505c32d84162f7712660025fce1cc6a5ebb20bf76005a96c86bbb56f9ef7f91f67adc6ec88850a7eb3ca637f4da25c7cfa69fc2e0748790001a8cfa82dcfc86803f9b87def7552dc1dda6f2a93dd62819b6dbe377ddbfbc6201ef8f5e7e513d0b414efbb0809197ae54b278c4566ef8fecd90a8e21c20a8ac82b19769533c1bcdf9cbcaf8a429837e58c5a27cf5e9c8d0d1d798e5fef525b068f13158f4f603715276ecabffbd5ccd912c26c3af71adc6dca257fe08a09ad8b719ec258d67948b31a832fc234af348c24a59892f2166c4d46fd451cdc45ad9482dd2902e0ff6700cc00a465183f9563562de0462ec51b726f66f749b2cdbbdc86fd9b4ceee0a38630588f609daee4e8025c6b21f89dcf4b9bc0a7dac70d4db097bb79ce603fc8b0d165ac5c5afe73ebb411531c120b2f1b73688f948a1a4fa85cdf463553") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x800000, 0x0) write$binfmt_elf64(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="c9a749f97818392589ae64decee856b93a8dff86968bc70035361bd6c0561306f5edeab9fa62c750f72d8bde6340d468a606b5afbcb32d96dfb2f4cbbccd3c00fab4da2fddb46344c894528361db6c85"], 0x50) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r3, 0xfae71e5936326fae) fchdir(r3) fallocate(r2, 0x3, 0x800000, 0x8020003) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) getdents(0xffffffffffffffff, &(0x7f0000000440)=""/46, 0x112) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r4, 0xfae71e5936326fae) fcntl$dupfd(r4, 0x406, 0xffffffffffffffff) 12:30:42 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = getgid() setgid(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/\x8c\x00', 0x6b5ae3fe2d495fa6, 0x0) lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000480)='trusted.overlay.origin\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000100)=[{r1}, {0xffffffffffffffff, 0x188}, {}, {r1}, {0xffffffffffffffff, 0x4604}], 0x5, 0x1) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x81806) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) sync_file_range(r2, 0x0, 0x0, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000400)={r2, 0x0, 0x3, 0x3, 0x1}) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r3, 0xfae71e5936326fae) getpeername$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x74, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x0, 0x0, 0x0, 0x0, [], r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sysinfo(&(0x7f0000000000)=""/50) setfsuid(0xee00) prctl$PR_GET_CHILD_SUBREAPER(0x25) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x19f, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x48103, 0x0) [ 240.441987] binder: 10349:10351 transaction failed 29189/-3, size 80-24 line 3284 [ 240.448156] binder: BINDER_SET_CONTEXT_MGR already set [ 240.448165] binder: 10349:10353 ioctl 40046207 0 returned -16 [ 240.562354] binder: undelivered TRANSACTION_ERROR: 29189 12:30:42 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x82440, 0x0) recvmmsg(r0, &(0x7f0000002880)=[{{&(0x7f0000000200)=@nfc_llcp, 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)=""/9, 0x9}, {&(0x7f0000000380)=""/179, 0xb3}, {0x0}, {&(0x7f0000000780)=""/222, 0xde}], 0x4, &(0x7f0000000880)=""/194, 0xc2}, 0x40}, {{&(0x7f0000000580)=@caif=@rfm, 0x80, &(0x7f0000001b80)=[{0x0}, {0x0}, {&(0x7f0000001b40)=""/26, 0x1a}], 0x3, &(0x7f0000001c00)=""/167, 0xa7}, 0x10000}, {{&(0x7f0000001cc0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, 0x0}}, {{&(0x7f0000002380)=@ethernet, 0x80, &(0x7f0000002580)=[{&(0x7f0000004180)=""/4096, 0x1000}, {&(0x7f0000002400)=""/243, 0xf3}, {&(0x7f0000002500)=""/93, 0x5d}], 0x3, &(0x7f0000005180)=""/4096, 0x1000}, 0xfffffffe}, {{&(0x7f00000025c0)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f00000027c0)=[{&(0x7f0000002640)=""/131, 0x83}, {&(0x7f0000002780)=""/42, 0x2a}], 0x2, &(0x7f0000002800)=""/77, 0x4d}, 0x100}], 0x5, 0x40010044, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000640)='attr/fscreate\x00') socket$key(0xf, 0x3, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$TIOCNOTTY(r1, 0x5422) r2 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140), 0x19d) write$binfmt_misc(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x37d) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x5e) connect$inet(0xffffffffffffffff, 0x0, 0x5b) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x0, @remote}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x85, 0x0, 0x2, 0x46a}) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000280)={0x4000000000000029, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(r1, 0x4b35, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) add_key$keyring(0x0, &(0x7f0000000480)={'\xaa\x00\x01', 0x0}, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r4, 0xc0045878, 0x0) unshare(0x60000000) socket$inet_tcp(0x2, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) 12:30:42 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r3, 0xfae71e5936326fae) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x74, r4, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x34, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x1, 0x1, 0x25f6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1d2e}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x280}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfff}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4401c}, 0x200c00c1) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = socket$inet(0x2, 0x3, 0x21) bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x8084, 0x0, 0x0) r7 = dup2(r5, r6) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f0000000840)={0x30, 0x5, 0x0, {0x0, 0x10000000000, 0x1, 0x6}}, 0x89) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) prctl$PR_GET_TIMERSLACK(0x1e) r8 = syz_open_dev$binderN(0x0, 0x0, 0x0) r9 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r9, 0xfae71e5936326fae) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000017c0)={0xec, 0x0, &(0x7f0000001600)=[@dead_binder_done, @dead_binder_done, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001840)={@fda={0x66646185, 0xa, 0x0, 0xc}, @fda={0x66646185, 0x1, 0x1, 0x37}, @fda={0x66646185, 0x8, 0x1, 0x18}}, &(0x7f00000000c0)={0x0, 0x20, 0x40}}}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x1, &(0x7f00000018c0)=""/4096, 0x1000, 0x2, 0x39}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/47, 0x2f, 0x0, 0x1d}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/244, 0xf4, 0x0, 0x29}}, &(0x7f0000001440)={0x0, 0x28, 0x50}}}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001540)={@fda={0x66646185, 0x3, 0x0, 0x36}, @ptr={0x70742a85, 0x0, &(0x7f0000001480)=""/165, 0xa5, 0x0, 0x6}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000015c0)={0x0, 0x20, 0x48}}}], 0x94, 0x0, &(0x7f0000001700)="340d7b0ed74c4fc3c75cbb3147f6e904b3ce9b01b041cc36c193c6cca1adf14559cd2ec0dab852b1a5de0ba699f1ba3be9162207ead53bcb8b1d08f1f03c2657601a9f5c5a3c32c7b1942823d47dad50decfd003a604556c52f7c50cb434dbb0a145783c31b9a1bc49f69981690d5e300f2eaf851d490ef0fbf39adbb9820a1b55310766fd48f0de9eb22aa9ec06a0540e2f1306"}) ioctl$LOOP_SET_FD(r9, 0x4c00, 0xffffffffffffffff) r10 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r10, 0xfae71e5936326fae) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r9, &(0x7f0000000800)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000640)={0x148, r11, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x38, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb3f3}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa80}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xa4, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x100, @rand_addr="3df3aa4ddc426e427ca894a24076f974", 0xba}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x3f, @mcast1, 0x65f}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @mcast2}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd60}]}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r10, 0x891a, &(0x7f0000001800)={'veth1_to_bridge\x00', {0x2, 0x4e20, @broadcast}}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB="852a62730000000002000000000000000000000006000000852a627700000000000000000000000000000085616466000000000000000200"/80], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 12:30:42 executing program 1: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000400)=ANY=[@ANYBLOB="000f00009000ff070074000070afeebf5f"]) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f00000001c0)={0x8, 0x101, 0x20, 0x0, 0xeb, "0877cb85b908f64d91659d022395241793ba0f", 0xde73, 0x4}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x90240, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x8}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r3, 0xfae71e5936326fae) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r3, 0x0, 0x22, &(0x7f0000000100)='#md5sumvmnet1selfwlan0security[lo\x00', 0xffffffffffffffff}, 0x30) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r6, 0xfae71e5936326fae) fcntl$getflags(r6, 0x4) tkill(r5, 0x39) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r5, 0x0, 0x0) tgkill(r4, r5, 0x18) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x93a, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc152, 0x0, 0x51a}, {0x1}, 0x0, 0x0, 0x1}, {{@in6=@rand_addr="7a1582343110b2f6ae2730c730f09cc6", 0x0, 0x32}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7fe}}, 0xe8) connect$inet6(r2, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r2, &(0x7f0000000240), 0x5c3, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0xd0) r8 = open(&(0x7f0000000080)='./file0\x00', 0x8040, 0x0) ioctl$FIDEDUPERANGE(r8, 0xc0189436, &(0x7f0000000400)=ANY=[@ANYBLOB]) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000240)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r0, 0x0, 0x22, &(0x7f0000000280)='#md5sumvmnet1selfwlan0security[lo\x00', 0xffffffffffffffff}, 0xffffffffffffff54) rt_tgsigqueueinfo(r9, r10, 0xf, &(0x7f0000000300)={0x32, 0x4, 0x3}) 12:30:42 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000004a80)=[{&(0x7f0000001140)="c1d466556ece9d61acad", 0xa}], 0x1}}], 0x1, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e040b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffe14) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='security.ima\x00', &(0x7f0000000140)=@sha1={0x1, "b5406ed151000000050000000000000100"}, 0x15, 0x1) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) 12:30:42 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xff, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000005000000000000000180000000000000007e3f8ab206462c41aa4687b7738c61eb7d503bd8e424a1381ef03d5b13754cea849503f4d7a5d59730d9edadbed09253cb980ced82454f1d190bb3d38a09289309c63c1c66ddf1b216f85d5acbcdd618217763917cba95a0143e970f8e09267a173574a6750b2793b46beecd83a70aaa731aea6c68cf48ba920c0801ebc3daf12708e09df28d10506c6bd9e1fdb7ba3ea4c0331ff289e8321299c3620512a40b5ad9a414ae3ddbae88dd7df151b49390464db0b03de699ff071d2", @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB="852a62730000000002000000000000000000000000000000852a627700000000000000000000000000000000000000008561646600"/80], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=0x0]], 0x0, 0x0, 0x0}) 12:30:42 executing program 1: r0 = socket$inet(0x2, 0x6000000000000003, 0x88) sendto$inet(0xffffffffffffffff, &(0x7f0000000080)="6028d5a29e4f78", 0x7, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) accept4$unix(r1, &(0x7f0000000100), &(0x7f0000000000)=0x6e, 0x800) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r2, 0xfae71e5936326fae) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 12:30:42 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) setsockopt$packet_buf(r1, 0x107, 0x1, &(0x7f0000000240)="0039295a54265ec937f7716947d3462bec0314d0069df22e18749565a4c9ef97966a21c4bef11a4ab3ce29f7b34d3426d59a86e91e427db80b1ab74e24646b2f4e16d68502c1ad673d9119e1386734075a3c8ec28f3c56b316342fd5cf3b83468df1571bad7cfeedb3f527b70fd52c70a50762a22f9ffec8e58246d5cad310c2769d9e75293a4ef393057f0ca58a7a72418f638361851e0a72f953784e6ae3f0e33cd225204727f6efe71f337e2a8c208889912712d1ee92d8d6abb50fc9fa7c9200aabd3c36e3e93b9ccd601bbc9dae7fdc87de61bf83da57e180f3d23ddf3f4512", 0xe2) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000852a627700000000000000000000020000000000000000008561646600"/77], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 12:30:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000040)) r4 = socket$nl_route(0x10, 0x3, 0x0) dup2(r4, r0) prctl$PR_SET_PDEATHSIG(0x1, 0x3d) 12:30:42 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda}, &(0x7f0000000180)={0xfffffe8f, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 12:30:42 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) r1 = inotify_init() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) inotify_add_watch(r1, &(0x7f0000000380)='./file0\x00', 0x80000005) inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0x80000000) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r4, 0xfae71e5936326fae) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r5, 0xfae71e5936326fae) getpeername(r5, &(0x7f0000000280)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x80) sendmsg$nl_route_sched(r4, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=@newtfilter={0x2cc, 0x2c, 0x2, 0x70bd29, 0x25dfdbfb, {0x0, r6, {0x8, 0x7}, {0x1fffe, 0x9}, {0x2}}, [@TCA_RATE={0x8, 0x5, {0x0, 0x9}}, @TCA_CHAIN={0x8, 0xb, 0xb6e}, @TCA_RATE={0x8, 0x5, {0xff, 0x20}}, @filter_kind_options=@f_fw={{0x8, 0x1, 'fw\x00'}, {0x15c, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x6}, @TCA_FW_INDEV={0x14, 0x3, 'veth1_to_bond\x00'}, @TCA_FW_ACT={0xdc, 0x4, @m_simple={0xd8, 0x1f, {{0xc, 0x1, 'simple\x00'}, {0x30, 0x2, [@TCA_DEF_DATA={0x14, 0x3, 'selfnodev\xccem1:\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x1, 0x5, 0x0, 0x3}}]}, {0x94, 0x6, "9518f5305601e73b5a17f2502582c652b5254d2124f93b84e4a8cb9ea2d25923e8b01f6980696bdafa3c45d2b67585f058f9b80fdda03abf479fb556603df67a10299c0e1c6db097ab41f815c0c251e7df28eb081d8ffe4fbd52243749858b8aa9888f0747c5b27e635ad56730a16c6c0a931831e8e97b856fc49571ac9c267478cceb9d61fd94520e2249a2ffcfc42d"}}}}, @TCA_FW_CLASSID={0x8, 0x1, {0x0, 0xfff1}}, @TCA_FW_POLICE={0xc, 0x2, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}}, @TCA_FW_POLICE={0xc, 0x2, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3a}}, @TCA_FW_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x20000000, 0x200, 0xb6a3, 0x6, {0x4, 0x0, 0xfffd, 0x977, 0x7}, {0x8, 0x2, 0x6906, 0x9, 0x1, 0x6}, 0x3, 0x8ab3, 0xec5a}}}]}}, @TCA_CHAIN={0x8, 0xb, 0xfffffff7}, @TCA_RATE={0x8, 0x5, {0x80}}, @filter_kind_options=@f_basic={{0xc, 0x1, 'basic\x00'}, {0x110, 0x2, [@TCA_BASIC_EMATCHES={0x8c, 0x2, [@TCA_EMATCH_TREE_LIST={0x28, 0x2, @TCF_EM_CONTAINER={0x24, 0x98, {0xe2c, 0x0, 0x9, 0x0, "2e88e7b262b9674a2e5665bc75b7e68b2984"}}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3ff}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, @TCF_EM_NBYTE={0x20, 0x8, {0x2, 0x2, 0x6, 0x0, {0x7, 0x9, 0x0, "0de59c42e3ec5c93fa"}}}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, @TCF_EM_NBYTE={0x18, 0x2, {0x9d, 0x2, 0x0, 0x0, {0xfffffffb, 0x1, 0x1, "99"}}}}]}, @TCA_BASIC_POLICE={0xc, 0x4, @TCA_POLICE_AVRATE={0x8}}, @TCA_BASIC_POLICE={0x40, 0x4, @TCA_POLICE_TBF={0x3c, 0x1, {0x800, 0x3, 0x100, 0x400, 0x1f, {0x7, 0x0, 0x7, 0x8000, 0x0, 0x279}, {0x1f, 0x0, 0x7, 0x9, 0x5, 0x401}, 0x982, 0x5, 0x7ff}}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xfff4, 0xffe1}}, @TCA_BASIC_EMATCHES={0x24, 0x2, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, @TCF_EM_IPSET={0x14, 0x6, {0x31ed, 0x8, 0x6, 0x0, {0x7fff, 0x81}}}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x9, 0xb}}]}}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x4}, 0x4004) rmdir(&(0x7f0000000040)='./file0\x00') [ 240.777540] binder: 10392:10393 got transaction with invalid offset (24, min 24 max 80) or object. [ 240.805764] binder: 10392:10393 transaction failed 29201/-22, size 80-24 line 3379 [ 240.818876] binder: undelivered TRANSACTION_ERROR: 29201 [ 240.877031] binder_alloc: 10402: binder_alloc_buf, no vma [ 240.883545] binder: 10402:10405 transaction failed 29189/-3, size 80-24 line 3284 [ 240.892335] binder: undelivered TRANSACTION_ERROR: 29189 [ 240.898900] binder_alloc: 10402: binder_alloc_buf, no vma [ 240.904792] binder: 10402:10407 transaction failed 29189/-3, size 80-24 line 3284 12:30:42 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open$dir(0x0, 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', r0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) r2 = accept4(r1, &(0x7f0000000100)=@alg, &(0x7f0000000180)=0x80, 0x80000) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000340)={{0x2, 0x4e23, @local}, {0x1}, 0x8, {0x2, 0x4e20, @local}}) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_misc(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="73797a314bdf09f00be7db1ee2dfbe4d6a41cd56770c57284dadec5ef7ec58b5ae0df786bd953ae9d1d987299ea059eda70c8026db7b9340b4ce323104762321a258440ee2cccca8df8ae81feec63453cbfa81d0413998094f5e7ff9230108912e2eb558f23b8915087e041731c478b16fcd00e060f3e110bda88cbaef23744e7051f9439c4edb2c96b521f36ecdcd7c4c79698f1cfd98234e98161d8476456f4400a7e340e6f3b6693101489c59720000000000"], 0x8a) pivot_root(0x0, 0x0) r4 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='rose0\x00', 0xdc83e68f) sendto$inet(r4, 0x0, 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r4, &(0x7f0000000040)="edf4ab7c452e1ebb6df3ff18", 0xf7bc, 0x0, &(0x7f00000001c0), 0x10) socket$inet6(0xa, 0x801, 0x3) setsockopt$inet_mreqsrc(r4, 0x0, 0x26, 0x0, 0x0) 12:30:42 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = getgid() setgid(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/\x8c\x00', 0x6b5ae3fe2d495fa6, 0x0) lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000480)='trusted.overlay.origin\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000100)=[{r1}, {0xffffffffffffffff, 0x188}, {}, {r1}, {0xffffffffffffffff, 0x4604}], 0x5, 0x1) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x81806) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) sync_file_range(r2, 0x0, 0x0, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000400)={r2, 0x0, 0x3, 0x3, 0x1}) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r3, 0xfae71e5936326fae) getpeername$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x74, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x0, 0x0, 0x0, 0x0, [], r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sysinfo(&(0x7f0000000000)=""/50) setfsuid(0xee00) prctl$PR_GET_CHILD_SUBREAPER(0x25) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x19f, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x48103, 0x0) [ 240.922720] binder: undelivered TRANSACTION_ERROR: 29189 12:30:43 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x82440, 0x0) recvmmsg(r0, &(0x7f0000002880)=[{{&(0x7f0000000200)=@nfc_llcp, 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)=""/9, 0x9}, {&(0x7f0000000380)=""/179, 0xb3}, {0x0}, {&(0x7f0000000780)=""/222, 0xde}], 0x4, &(0x7f0000000880)=""/194, 0xc2}, 0x40}, {{&(0x7f0000000580)=@caif=@rfm, 0x80, &(0x7f0000001b80)=[{0x0}, {0x0}, {&(0x7f0000001b40)=""/26, 0x1a}], 0x3, &(0x7f0000001c00)=""/167, 0xa7}, 0x10000}, {{&(0x7f0000001cc0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, 0x0}}, {{&(0x7f0000002380)=@ethernet, 0x80, &(0x7f0000002580)=[{&(0x7f0000004180)=""/4096, 0x1000}, {&(0x7f0000002400)=""/243, 0xf3}, {&(0x7f0000002500)=""/93, 0x5d}], 0x3, &(0x7f0000005180)=""/4096, 0x1000}, 0xfffffffe}, {{&(0x7f00000025c0)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f00000027c0)=[{&(0x7f0000002640)=""/131, 0x83}, {&(0x7f0000002780)=""/42, 0x2a}], 0x2, &(0x7f0000002800)=""/77, 0x4d}, 0x100}], 0x5, 0x40010044, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000640)='attr/fscreate\x00') socket$key(0xf, 0x3, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$TIOCNOTTY(r1, 0x5422) r2 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140), 0x19d) write$binfmt_misc(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x37d) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x5e) connect$inet(0xffffffffffffffff, 0x0, 0x5b) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x0, @remote}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x85, 0x0, 0x2, 0x46a}) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000280)={0x4000000000000029, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(r1, 0x4b35, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) add_key$keyring(0x0, &(0x7f0000000480)={'\xaa\x00\x01', 0x0}, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r4, 0xc0045878, 0x0) unshare(0x60000000) socket$inet_tcp(0x2, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) 12:30:43 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r2, 0xfae71e5936326fae) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 12:30:43 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x5, &(0x7f00000000c0)=[{0x801, 0x0, 0xe0, 0x64}, {0x4, 0x7, 0x2, 0x80000000}, {0x800, 0x1, 0x2, 0x6ca8}, {0x4, 0x9, 0x4, 0x7}, {0x6, 0x1, 0xbb, 0x7}]}, 0x10) socketpair(0x4, 0x4, 0x9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getegid() accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0}, &(0x7f0000000180)=0x14, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x200000, 0x0) write$P9_RRENAME(r4, &(0x7f0000000280)={0x7, 0x15, 0x2}, 0x7) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@remote, r3}, 0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000100)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}, 0x23, r3}) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r5, 0xfae71e5936326fae) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r6, 0xfae71e5936326fae) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000500)={0x78, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e630c400100000000000000000000000b6300000b6300001263484002000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62730100000001000000000000000000000000000000852a646600000000", @ANYRES32=r6, @ANYBLOB="0000000000000000000000008561646600000000050000000000000001000000000000004000000000000000"], @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"], @ANYBLOB="80040000000000000863104000"/28], 0x79, 0x0, &(0x7f0000000480)="1deba8fa9771fffe16a70d4d55110abe94b82afeda7c225b4e1355e1f326baaadc69797f87ea80ca8962c29a064af79e49de224735850dd594e709c328e6f0a00626c6c8df1298d2418e96abd0df82de2913b86968ffc81a03df9d9781996e67650f2acd5730d7a47a91fd2740ba0c57234726329b7e803ddc"}) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r7, 0xfae71e5936326fae) getsockname$inet(r7, &(0x7f0000000540)={0x2, 0x0, @broadcast}, &(0x7f0000000580)=0x10) getegid() sendmsg(r0, &(0x7f0000000900)={0x0, 0x1cd, &(0x7f0000000040)=[{&(0x7f0000000200)="24000000120007031dfffd946fa2830020200a0009000300001d85680c1ba6a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r8, 0xfae71e5936326fae) ioctl$sock_inet6_SIOCDELRT(r8, 0x890c, &(0x7f00000002c0)={@mcast1, @local, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}, 0x401, 0x3, 0x8, 0x100, 0xffffffff, 0x1010000, r3}) 12:30:43 executing program 3: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000002c0)=ANY=[]) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x226, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080), 0x15d4b87) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x90000) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r3, 0x40044900, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 12:30:43 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = getgid() setgid(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/\x8c\x00', 0x6b5ae3fe2d495fa6, 0x0) lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000480)='trusted.overlay.origin\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000100)=[{r1}, {0xffffffffffffffff, 0x188}, {}, {r1}, {0xffffffffffffffff, 0x4604}], 0x5, 0x1) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x81806) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) sync_file_range(r2, 0x0, 0x0, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000400)={r2, 0x0, 0x3, 0x3, 0x1}) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r3, 0xfae71e5936326fae) getpeername$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x74, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x0, 0x0, 0x0, 0x0, [], r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sysinfo(&(0x7f0000000000)=""/50) setfsuid(0xee00) prctl$PR_GET_CHILD_SUBREAPER(0x25) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x19f, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x48103, 0x0) 12:30:43 executing program 2: finit_module(0xffffffffffffffff, 0x0, 0x0) setpriority(0x0, 0x0, 0x0) getegid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) connect$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r1, 0xfae71e5936326fae) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r2, 0xfae71e5936326fae) fcntl$dupfd(r1, 0x406, r2) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) r3 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x400000004e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) [ 241.505144] binder: 10422:10425 got transaction with invalid parent offset or type [ 241.528114] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 12:30:43 executing program 1: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffa7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000000)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timerfd_create(0x7, 0x80800) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r5, r0, 0x0, 0xffffffff) [ 241.555055] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 241.569035] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 241.587521] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 241.632028] binder: 10422:10425 transaction failed 29201/-22, size 80-24 line 3454 12:30:43 executing program 3: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) ptrace$pokeuser(0x6, r1, 0x10, 0x7) ptrace$cont(0x7, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, r0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000449000/0x600000)=nil, 0x600000, 0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) socket$packet(0x11, 0x3, 0x300) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) ptrace$cont(0x18, r2, 0x7fffffff, 0x1) syz_genetlink_get_family_id$nbd(0x0) 12:30:43 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x401) [ 241.669709] binder: undelivered TRANSACTION_ERROR: 29201 [ 241.708451] binder: 10451:10452 got transaction with invalid parent offset or type 12:30:43 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = getgid() setgid(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/\x8c\x00', 0x6b5ae3fe2d495fa6, 0x0) lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000480)='trusted.overlay.origin\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000100)=[{r1}, {0xffffffffffffffff, 0x188}, {}, {r1}, {0xffffffffffffffff, 0x4604}], 0x5, 0x1) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x81806) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) sync_file_range(r2, 0x0, 0x0, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000400)={r2, 0x0, 0x3, 0x3, 0x1}) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r3, 0xfae71e5936326fae) getpeername$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x74, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x0, 0x0, 0x0, 0x0, [], r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sysinfo(&(0x7f0000000000)=""/50) setfsuid(0xee00) prctl$PR_GET_CHILD_SUBREAPER(0x25) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x19f, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x48103, 0x0) [ 241.727931] binder: 10451:10452 transaction failed 29201/-22, size 80-24 line 3454 [ 241.744775] binder: undelivered TRANSACTION_ERROR: 29201 [ 241.762059] binder: 10451:10454 got transaction with invalid parent offset or type [ 241.770163] binder: 10451:10454 transaction failed 29201/-22, size 80-24 line 3454 12:30:43 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder, @fda={0x66646185, 0x0, 0x4}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 241.778807] binder: undelivered TRANSACTION_ERROR: 29201 12:30:43 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = getgid() setgid(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/\x8c\x00', 0x6b5ae3fe2d495fa6, 0x0) lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000480)='trusted.overlay.origin\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000100)=[{r1}, {0xffffffffffffffff, 0x188}, {}, {r1}, {0xffffffffffffffff, 0x4604}], 0x5, 0x1) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x81806) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) sync_file_range(r2, 0x0, 0x0, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000400)={r2, 0x0, 0x3, 0x3, 0x1}) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmod(r3, 0xfae71e5936326fae) getpeername$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x74, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x0, 0x0, 0x0, 0x0, [], r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sysinfo(&(0x7f0000000000)=""/50) setfsuid(0xee00) prctl$PR_GET_CHILD_SUBREAPER(0x25) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x19f, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 241.820884] ------------[ cut here ]------------ [ 241.825666] kernel BUG at drivers/android/binder_alloc.c:1108! [ 241.831644] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 241.837000] Modules linked in: [ 241.840328] CPU: 1 PID: 10459 Comm: syz-executor.4 Not tainted 4.9.194+ #0 [ 241.847333] task: 00000000a836ef30 task.stack: 00000000d62680db [ 241.853378] RIP: 0010:[] [<000000000c4c8bfc>] binder_alloc_do_buffer_copy+0xcb/0x500 [ 241.863024] RSP: 0018:ffff8801a8a974a8 EFLAGS: 00010212 [ 241.868449] RAX: 0000000000040000 RBX: 0000000020ff6000 RCX: ffffc90006b58000 [ 241.875699] RDX: 000000000000063f RSI: ffffffff8223a8fb RDI: ffff8801d4b0a5d8 [ 241.883010] RBP: ffff8801a8a97528 R08: ffff8801a8a975a8 R09: 0000000000000008 [ 241.890257] R10: ffffed0035152f11 R11: ffff8801a8a9788f R12: 0000000000000060 [ 241.897543] R13: 0000000000000070 R14: 0000000000000008 R15: ffff8801a8a975a8 [ 241.904823] FS: 00007fa8ef5da700(0000) GS:ffff8801db700000(0000) knlGS:0000000000000000 [ 241.913060] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 241.918917] CR2: 0000001b2ce22000 CR3: 00000001c6007000 CR4: 00000000001606b0 [ 241.926166] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 241.933452] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 241.940815] Stack: [ 241.942945] ffff8801a8a97560 0000000000000246 ffff8801d6818000 ffff8801a8a974d0 [ 241.950968] ffff8801c86e1030 ffff8801d4b0a6d8 00ff8801a8a97870 ffff8801d4b0a680 [ 241.959112] ffffffff814fdcb6 ffff8801a1ead400 0000000000000070 ffff8801a8a975a8 [ 241.967115] Call Trace: [ 241.969685] [<000000007edd713f>] ? memcpy+0x46/0x50 [ 241.974768] [<0000000006e11f02>] binder_alloc_copy_from_buffer+0x37/0x42 [ 241.981673] [<00000000b933bf02>] binder_validate_ptr+0xc5/0x1b0 [ 241.987800] [<000000001a250466>] ? binder_get_object+0x1b0/0x1b0 [ 241.994097] [<0000000006e11f02>] ? binder_alloc_copy_from_buffer+0x37/0x42 [ 242.001262] [<00000000b740a8c0>] ? binder_get_object+0x12f/0x1b0 [ 242.007469] [<00000000fb31b58c>] binder_transaction+0x20a4/0x5890 [ 242.013766] [<000000004f99791a>] ? binder_inc_ref_for_node+0xba0/0xba0 [ 242.020499] [<0000000065cf4f61>] ? check_preemption_disabled+0x3c/0x200 [ 242.027316] [<00000000b4826ed4>] ? HARDIRQ_verbose+0x10/0x10 [ 242.033187] [<0000000008c950c1>] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 242.039918] [<000000002b0422d8>] ? __might_fault+0x114/0x1d0 [ 242.045785] [<00000000fa2da67c>] binder_thread_write+0x583/0x20e0 [ 242.052081] [<0000000065cf4f61>] ? check_preemption_disabled+0x3c/0x200 [ 242.058898] [<00000000d5740136>] ? binder_transaction+0x5890/0x5890 [ 242.065379] [<00000000b4826ed4>] ? HARDIRQ_verbose+0x10/0x10 [ 242.071241] [<000000002b0422d8>] ? __might_fault+0x114/0x1d0 [ 242.077103] [<00000000cd196b98>] binder_ioctl+0xecd/0x1720 [ 242.082790] [<0000000008c950c1>] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 242.089518] [<00000000c7b00c2d>] ? binder_poll+0x240/0x240 [ 242.095213] [<00000000803d044d>] ? __lock_acquire+0x5e0/0x4390 [ 242.101262] [<0000000065cf4f61>] ? check_preemption_disabled+0x3c/0x200 [ 242.108080] [<0000000072abc9ec>] ? __might_sleep+0x95/0x1a0 [ 242.113855] [<00000000c7b00c2d>] ? binder_poll+0x240/0x240 [ 242.119543] [<000000007ff67df7>] do_vfs_ioctl+0xb87/0x11d0 [ 242.125248] [<00000000d029a958>] ? selinux_file_ioctl+0x103/0x550 [ 242.131542] [<00000000e0312f81>] ? ioctl_preallocate+0x210/0x210 [ 242.137752] [<0000000065bfc1f3>] ? selinux_parse_skb.constprop.0+0x16b0/0x16b0 [ 242.145179] [<00000000ed3768e7>] ? __fget+0x208/0x370 [ 242.150435] [<0000000011657f44>] ? __fget+0x22f/0x370 [ 242.155689] [<0000000047a003a8>] ? __fget+0x47/0x370 [ 242.160873] [<00000000326c612f>] ? security_file_ioctl+0x8f/0xc0 [ 242.167097] [<00000000e23b644b>] SyS_ioctl+0x8f/0xc0 [ 242.172262] [<00000000ba47be67>] ? do_vfs_ioctl+0x11d0/0x11d0 [ 242.178213] [<000000009815afe6>] do_syscall_64+0x1ad/0x5c0 [ 242.183901] [<00000000aa156f10>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 242.190813] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 0a 04 00 00 4d 8b 64 24 58 49 29 dc e8 0f 7e 0e ff 4d 39 e6 76 07 e8 05 7e 0e ff <0f> 0b e8 fe 7d 0e ff 4c 8b 6d d0 4d 29 f4 4d 39 e5 77 e8 e8 ed [ 242.217957] RIP [<000000000c4c8bfc>] binder_alloc_do_buffer_copy+0xcb/0x500 [ 242.225249] RSP [ 242.229784] ---[ end trace 1bec575f1659bb2e ]--- [ 242.234743] Kernel panic - not syncing: Fatal exception [ 242.240711] Kernel Offset: disabled [ 242.244328] Rebooting in 86400 seconds..