n\xc6\xda!\xa8\x84\xefR\xffX\xfa\xea\n\xf2\xc5\x90\xe2{\xab\xa0\xbb\xfc#', 0x0, 0x0) write$FUSE_NOTIFY_STORE(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="28000000040000000000000000000000020000000000000000000001000000000000000000000000421cfad893edaf218e214614f362a8db17d19c90528c5f94ea76ce3241032bf5b6a45c7baa4db03853a8ee6ac24d8f255106908b7da10ef216e6b1f33025c1b99af1dd14361e399146efecf3097570407536450c25136b51bbb8b60bcf29d6fefa98ddf953203150ec0e5b2f3f83e291c914457cf4976f6112a3974bf5c94444610107e08e269aae920b37ce327e97bc50d1fb1c937280c7e17944125b"], 0x28) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r6, 0x0, 0x12, &(0x7f00000022c0), &(0x7f0000002300)=0x4) r7 = socket$packet(0x11, 0x2, 0x300) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000002340)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000000080)) syz_extract_tcp_res$synack(&(0x7f0000000280), 0x1, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000200), 0xa}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000600)='/dev/net/tun\x00', 0x200, 0x0) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) clock_getres(0x0, &(0x7f00000005c0)) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, &(0x7f00000000c0)={0x3, {{0x2, 0x4e21, @loopback}}, {{0x2, 0x4e24, @empty}}}, 0x108) 00:18:42 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f00000000c0)={0x1, 0x20, 0x7, 0x1, 0x1}) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_int(r2, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x75) wait4(0x0, 0x0, 0x0, 0x0) 00:18:42 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:18:42 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:18:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = request_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='}nodevem0wlan0^wlan1^em0\x00', 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000140)={r2, 0x1d, 0x1f}, &(0x7f0000000180)={'enc=', 'raw', ' hash=', {'sha256-ni\x00'}}, &(0x7f0000000200)="a1adf98f35b329cb6d4a429aa57d7f6e1f3246b5927de65a0a314187aa", &(0x7f0000000240)="12353491e7388a60cf898db59884170b95c96c435114df38ff640fd38b1b59") setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280)={[{0x2b, 'pids'}, {0x2b, 'memory'}, {0x2d, 'pids'}, {0x2b, 'rdma'}, {0x2d, 'memory'}, {0x2d, 'pids'}, {0x2d, 'io'}, {0x2b, 'cpu'}]}, 0x31) tkill(r1, 0x35) wait4(0x0, 0x0, 0x0, 0x0) 00:18:45 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r1, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:18:45 executing program 0: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xc60b}, 0x700, 0x0, 0x0, 0x9, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) setxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f0000000380)=@sha1={0x1, "8453e71c5ce885974b936fc2975ed393864e6280"}, 0x15, 0x1) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) recvfrom$packet(r1, &(0x7f00000001c0)=""/150, 0x96, 0x20, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) sendto$inet(r0, &(0x7f0000000100)="8ebf3aa776", 0x5, 0x0, &(0x7f0000000140)={0x2, 0x4e24, @dev}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=[0x0], 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000480)) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000440)) 00:18:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_int(r2, 0x29, 0x3, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa9de73f787fbd009}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x252, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) recvmmsg(r4, &(0x7f0000004f00)=[{{&(0x7f00000000c0)=@ll, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/157, 0x9d}, {&(0x7f0000000280)=""/228, 0xe4}, {&(0x7f0000000380)=""/131, 0x83}, {}, {&(0x7f0000000140)=""/21, 0x15}], 0x5, &(0x7f00000004c0)=""/204, 0xcc}, 0x3}, {{&(0x7f00000005c0)=@nl, 0x80, &(0x7f0000000980)=[{&(0x7f0000000640)=""/19, 0x13}, {&(0x7f0000000680)=""/3, 0x3}, {&(0x7f00000006c0)=""/7, 0x7}, {&(0x7f0000000700)=""/1, 0x1}, {&(0x7f0000000740)=""/164, 0xa4}, {&(0x7f0000000800)=""/249, 0xf9}, {&(0x7f0000000900)=""/108, 0x6c}], 0x7, &(0x7f0000000a00)=""/24, 0x18}, 0x2}, {{&(0x7f0000000a40)=@nfc_llcp, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000ac0)=""/26, 0x1a}, {&(0x7f0000000b00)=""/137, 0x89}, {&(0x7f0000000bc0)=""/4, 0x4}, {&(0x7f0000000c00)=""/118, 0x76}, {&(0x7f0000000c80)=""/105, 0x69}], 0x5}, 0x3}, {{&(0x7f0000000d80)=@hci, 0x80, &(0x7f0000001f80)=[{&(0x7f0000000e00)=""/162, 0xa2}, {&(0x7f0000000ec0)=""/4096, 0x1000}, {&(0x7f0000001ec0)=""/91, 0x5b}, {&(0x7f0000001f40)=""/15, 0xf}], 0x4, &(0x7f0000001fc0)=""/99, 0x63}, 0x8}, {{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000002040)=""/213, 0xd5}, {&(0x7f0000002140)=""/30, 0x1e}, {&(0x7f0000002180)=""/187, 0xbb}, {&(0x7f0000002240)=""/2, 0x2}, {&(0x7f0000002280)=""/208, 0xd0}, {&(0x7f0000002380)=""/254, 0xfe}, {&(0x7f0000002480)=""/83, 0x53}, {&(0x7f0000002500)=""/176, 0xb0}, {&(0x7f00000025c0)=""/116, 0x74}], 0x9, &(0x7f0000002700)=""/4096, 0x1000}, 0xba}, {{0x0, 0x0, &(0x7f00000049c0)=[{&(0x7f0000003700)=""/80, 0x50}, {&(0x7f0000003780)=""/216, 0xd8}, {&(0x7f0000003880)=""/161, 0xa1}, {&(0x7f0000003940)=""/4096, 0x1000}, {&(0x7f0000004940)=""/84, 0x54}], 0x5, &(0x7f0000004a40)=""/16, 0x10}, 0x6}, {{&(0x7f0000004a80)=@hci, 0x80, &(0x7f0000004e00)=[{&(0x7f0000004b00)=""/29, 0x1d}, {&(0x7f0000004b40)=""/1, 0x1}, {&(0x7f0000004b80)=""/188, 0xbc}, {&(0x7f0000004c40)=""/65, 0x41}, {&(0x7f0000004cc0)=""/141, 0x8d}, {&(0x7f0000004d80)=""/116, 0x74}], 0x6, &(0x7f0000004e80)=""/102, 0x66}, 0x1}], 0x7, 0x40000000, &(0x7f00000050c0)={0x0, 0x989680}) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x35) wait4(0x0, 0x0, 0x0, 0x0) 00:18:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xc, 0x0, 0x0) r2 = accept(r1, &(0x7f0000000000)=@ax25={{0x3, @rose}, [@null, @rose, @bcast, @remote, @rose, @netrom, @default, @null]}, &(0x7f0000000200)=0xdf1e586eda983c74) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r4, &(0x7f00000017c0), 0x3a8, 0x7a) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r5, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="38010000100001030000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb000000000000000000000000000000002ac59fc9ecdea417ab416f2649093302661c37fb917576bac8cdaf224e3ea9fdba1ca0135a7d5a99cdce5dad6193404efc070dc8f1ef460d32a56dcf397f8bf54b3f8c6a5177d457b5f1fab79bdea38ba9dc2253b5d21b883d8649ffcc872ca50331738b5b5ec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="dd37514e9e68be47ed58ef35b9f243fd00000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200650000000000000000004800010073686132353600"/240], 0x138}}, 0x0) fcntl$getflags(r6, 0x408) sendmsg$FOU_CMD_GET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1184200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r3, 0x1, 0x0, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x4, 0x0}}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) sendmsg$FOU_CMD_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000123360d19d734e2517f44cca142d3174be5a53cfa672663d380655729d3307c88719bd4a14f19d421b58b0958864959ef324510266df4bd916371d71b6a0271a514927cd99c3718d1973cdf86c7522f1b6e3a437e1c7d6503b23f746fd449bef9c2eb866d714b14db5a33cf6d015d360f3e6e6f264397c93e6c2ea6b07eeb1b9c2da74feb00a61993e72790ab4e62b9b4adb9769d7aea8bd558073e8006034ee", @ANYRES16=r3, @ANYBLOB="12022cbd7000fedbdf2503000000080001004e21000008000600000000030800040000000000080001004e240000"], 0x34}, 0x1, 0x0, 0x0, 0x54d3afc1ed82b3a7}, 0x0) bind$netlink(r0, &(0x7f0000003ec0)={0x10, 0x0, 0x0, 0x80f96d3cd59e112c}, 0xc) 00:18:45 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$setopts(0x4206, 0x0, 0x2, 0x1c) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000000)='/dev/binder#\x00'}, 0x30) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x20010, r0, 0x3b) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000280)={@flat=@handle, @ptr={0x70742a85, 0x0, 0x0}, @flat=@handle}, 0x0}}], 0x0, 0x0, 0x0}) 00:18:45 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r1, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:18:45 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0xc) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0xb, [@func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x7}, {0xd, 0x2}, {0xd, 0x1}, {0x4, 0x2}, {0xa, 0x3}, {0x1, 0x3}]}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x8b1, [{0x3, 0x3, 0x3cb}]}, @enum={0xb, 0x7, 0x0, 0x6, 0x4, [{0x9, 0x7fff}, {0xb, 0x4}, {0x4, 0x4}, {0x0, 0xcf}, {0xa, 0x80000000}, {0x9}, {0x1}]}, @volatile={0xc}]}, {0x0, [0x0, 0x0, 0x2e, 0x89de5b9dc4353fec, 0xb43a2eeee7f2ca30, 0x61, 0x5f, 0x30, 0x5f]}}, &(0x7f0000000240)=""/206, 0xc7, 0xce}, 0x20) writev(r1, &(0x7f0000000040), 0x0) 00:18:45 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r1, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) [ 1127.097647] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1127.131952] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1127.151956] audit: type=1400 audit(1125.689:48): avc: denied { bind } for pid=4471 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 00:18:45 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r4, &(0x7f00000017c0), 0x3a8, 0x7a) r5 = accept$unix(r4, &(0x7f0000000140)=@abs, &(0x7f0000000080)=0x6e) ioctl$sock_SIOCBRDELBR(r5, 0x89a1, &(0x7f00000001c0)='team_slave_1\x00') preadv(r3, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f0000000200)) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000040)={0x40, 0x1f, 0x4, 0x1000, 0x11, 0x41, 0xa4, 0x8, 0x7fffffff, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f00000000c0)="55a2cbccce007f5300fe01a4a280930a600000ffa84309910000003c00090035000c00060000001900150005000000000000dc1338d54400009b84136ef75afb83de4411000500c43ab8220000060cec4fab91d4", 0x54}], 0x1}, 0x0) 00:18:45 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:18:45 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_TSC(0x1a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) keyctl$describe(0x6, 0x0, &(0x7f0000000340)=""/196, 0xc4) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x500) dup3(r0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="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", 0xd7b, 0x4000000, &(0x7f0000000200)={0xa, 0x4e24, 0x1, @rand_addr="a045c6545fc30740ecae8ff32787d170"}, 0x1c) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @aes128}) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1c) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffc6d, 0x0, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) write$selinux_load(0xffffffffffffffff, 0x0, 0x0) [ 1127.295645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=206 sclass=netlink_route_socket pig=4508 comm=syz-executor.1 [ 1127.317068] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=206 sclass=netlink_route_socket pig=4512 comm=syz-executor.1 [ 1127.492107] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. 00:18:48 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0xffffffffffffffff, 0x2, &(0x7f0000000000)=0x368) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_int(r2, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x35) wait4(0x0, 0x0, 0x0, 0x0) write$selinux_user(r1, &(0x7f00000000c0)={'system_u:object_r:var_lock_t:s0', 0x20, 'root\x00'}, 0x25) 00:18:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000000)) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x22602, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000100)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x35) wait4(0x0, 0x0, 0x0, 0x0) 00:18:48 executing program 0: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xc60b}, 0x700, 0x0, 0x0, 0x9, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) setxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f0000000380)=@sha1={0x1, "8453e71c5ce885974b936fc2975ed393864e6280"}, 0x15, 0x1) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) recvfrom$packet(r1, &(0x7f00000001c0)=""/150, 0x96, 0x20, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) sendto$inet(r0, &(0x7f0000000100)="8ebf3aa776", 0x5, 0x0, &(0x7f0000000140)={0x2, 0x4e24, @dev}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=[0x0], 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000480)) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000440)) 00:18:48 executing program 1: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYBLOB="2c67697d7595dc705f69", @ANYRESDEC=0x0]) preadv(r1, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0xa4}], 0x1, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3b) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) ptrace$getenv(0x4201, r3, 0x5, &(0x7f0000000080)) mknod$loop(&(0x7f00000001c0)='./file0/file1\x00', 0x0, 0xffffffffffffffff) read$FUSE(r1, &(0x7f0000000780), 0x1000) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, 0x0) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1e}}, 0x50) read$FUSE(r1, &(0x7f0000001780), 0x1000) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x0, 0x803, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000280)}], 0x1}, 0x0) write$FUSE_ENTRY(r1, &(0x7f00000005c0)={0x90, 0x0, 0x2}, 0x90) write$FUSE_ENTRY(r1, &(0x7f0000000380)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x90) 00:18:48 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb93c1f376c063b07}, 0x13844}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x6) socket$inet_udp(0x2, 0x2, 0x0) r0 = perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7ffffffffffa, 0x6d1a4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x20, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) r3 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, r3) sendto$inet(r2, 0x0, 0xfffffffffffffff8, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x9000000) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r4, &(0x7f00000017c0), 0x3a8, 0x7a) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f00000004c0)={0xe74c, {{0x2, 0x40, @loopback}}, 0x0, 0x4, [{{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x3, @multicast1}}, {{0x2, 0x4e20, @rand_addr=0x8}}]}, 0x290) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) tkill(0x0, 0x0) 00:18:48 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:18:48 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:18:48 executing program 5: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r1, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:18:48 executing program 1: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080000000000f7ff008556b42a60d27ff5e58fd0da01ac8e15"], 0x30}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$TUNSETLINK(r1, 0x400454cd, 0x308) fchown(0xffffffffffffffff, 0x0, 0x0) getegid() ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x6682d7b2abb03050, 0x0) write$9p(r2, &(0x7f00000001c0)="ef1e3f8d28598f50a6f07be103725862f5d111b37b9cb52fe2d0401265", 0x1d) openat$pfkey(0xffffffffffffff9c, 0x0, 0x20000, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') getpeername(0xffffffffffffffff, &(0x7f0000000300)=@can, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 00:18:48 executing program 5: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r1, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) [ 1130.313236] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 00:18:49 executing program 5: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r1, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) [ 1130.490486] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 00:18:49 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="bf16000000000000b7070000010bf0ff50700000000000000f70000000000000950000000000000099e99031ba4c0af84cfca176fb423520d2afbdf3f9f9dadf811fee230524181e591d2121ef121d08331a01f03a526c5c77cf9c2252ea679c3316fba8bd0a836931da6b47663cc4a410150ec916fa387fedb80fdf5a0c38acad545249ed07b8613ca8e286a4af7877d8c26eaea8b0503257a0801d209c49148eb69858844d9b3c51422b1917e8700ecccc701997f6fee61dca5cc5667ab504941f137f800425cde16fdb0ec22add0cf38e4fa3e79809b3e760c20a9b6637932c19d542c93d09deede8a119e06b385dc1ad6d337da3ffdaf0e6cae473df410e4827e4486d1112f71abaae631e34d8506ffaf8796d244640ff07000081293c4d72db84c1d1821bc4a155622cfcea4bd4a9a64c623bcc71817ae114850878e02a10adbf8d3a883ab90adfcee8fdc71902d2d7981050cbd6127c60efa3248e012ad39bb56ffca83fe46916ae7bc56407c3cf911b936bcc6a9ec9fec1cb03b469df9c8cae822813c70016982603fc02bd8413e4c4fcf3c1b420b065ff7a7fbaba9855988b9a0cecc7f999"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 00:18:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r3 = socket(0x9, 0x81001, 0x1) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r4, 0x107, 0x13, &(0x7f0000000040), 0x4) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000100)={r5, 0x1, 0x6, @link_local}, 0x10) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = gettid() setsockopt$inet6_int(r2, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x35) r7 = gettid() ptrace$setopts(0x4206, r7, 0x0, 0x0) tkill(r7, 0x3b) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r7, 0x0, 0x0) r8 = getpgid(r7) ptrace$cont(0x1f, r8, 0x8, 0x80) wait4(0x0, 0x0, 0x0, 0x0) 00:18:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x7a) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x7a) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f00000000c0)=0x1, 0xf1) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 00:18:49 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x22) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000080)={'ipvs\x00'}, &(0x7f00000000c0)=0x1e) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self\x00', 0x40040, 0x0) 00:18:49 executing program 0: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xc60b}, 0x700, 0x0, 0x0, 0x9, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) setxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f0000000380)=@sha1={0x1, "8453e71c5ce885974b936fc2975ed393864e6280"}, 0x15, 0x1) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) recvfrom$packet(r1, &(0x7f00000001c0)=""/150, 0x96, 0x20, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) sendto$inet(r0, &(0x7f0000000100)="8ebf3aa776", 0x5, 0x0, &(0x7f0000000140)={0x2, 0x4e24, @dev}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=[0x0], 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000480)) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000440)) 00:18:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="380100001000d0b8de0c0c0fff8d0a2d48c3748b0000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="dd37514e9e68be47ed58ef35b9f243fd00000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200650000000000000000004800010073686132353600"/240], 0x138}}, 0x0) recvmmsg(r3, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/115, 0x73}, {&(0x7f0000000240)=""/153, 0x99}, {&(0x7f0000000300)=""/235, 0xeb}], 0x3, &(0x7f0000000400)=""/52, 0x34}, 0x7}, {{&(0x7f0000000440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000800)=[{&(0x7f00000004c0)}, {&(0x7f0000000500)=""/246, 0xf6}, {&(0x7f0000000600)=""/199, 0xc7}, {&(0x7f0000000700)=""/252, 0xfc}], 0x4, &(0x7f0000000840)=""/26, 0x1a}, 0x9}, {{&(0x7f0000000880)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000900)=""/202, 0xca}, {&(0x7f0000000a00)=""/235, 0xeb}, {&(0x7f0000000b00)}], 0x3, &(0x7f0000000b80)=""/104, 0x68}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000c00)=""/71, 0x47}, {&(0x7f0000000c80)=""/19, 0x13}, {&(0x7f0000000cc0)=""/120, 0x78}, {&(0x7f0000000d40)=""/32, 0x20}, {&(0x7f0000000d80)=""/144, 0x90}, {&(0x7f0000000e40)=""/31, 0x1f}], 0x6}, 0x3c}, {{&(0x7f0000000f00)=@sco, 0x80, &(0x7f0000002180)=[{&(0x7f0000000f80)=""/243, 0xf3}, {&(0x7f0000001080)=""/203, 0xcb}, {&(0x7f0000001180)=""/4096, 0x1000}], 0x3}, 0x5}, {{&(0x7f00000021c0)=@sco, 0x80, &(0x7f0000002340)=[{&(0x7f0000002240)=""/215, 0xd7}], 0x1, &(0x7f0000002380)=""/31, 0x1f}, 0x7}, {{&(0x7f00000023c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x80, &(0x7f00000027c0)=[{&(0x7f0000002440)=""/144, 0x90}, {&(0x7f0000002500)=""/186, 0xba}, {&(0x7f00000025c0)=""/235, 0xeb}, {&(0x7f00000026c0)=""/3, 0x3}, {&(0x7f0000002700)=""/159, 0x9f}], 0x5, &(0x7f0000002840)=""/4096, 0x1000}, 0x8}, {{0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f0000003840)}, {&(0x7f0000003880)=""/40, 0x28}], 0x2, &(0x7f0000003900)=""/176, 0xb0}, 0x9}], 0x8, 0x2001, &(0x7f0000003bc0)) accept$packet(r4, &(0x7f0000003c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000003c40)=0x14) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() setsockopt$inet6_int(r2, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x35) wait4(0x0, 0x0, 0x4, 0x0) r6 = getpgid(r5) ptrace$setregs(0xd, r6, 0x80000001, &(0x7f0000000100)="f2bba2db27a4043057cf0621dca18701094a304a7379ccd12db413fd5949327879ee") r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r7, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$PIO_UNIMAP(r7, 0x4b67, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{0x0, 0x20}, {0x100, 0x9e1}, {0xfc18, 0x8001}, {0x3, 0x5}, {0x7, 0x8000}]}) 00:18:49 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r1, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:18:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002001100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x35) wait4(0x0, 0x0, 0x0, 0x0) 00:18:50 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r1, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:18:50 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r3 = socket(0x9, 0x81001, 0x1) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r4, 0x107, 0x13, &(0x7f0000000040), 0x4) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000100)={r5, 0x1, 0x6, @link_local}, 0x10) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = gettid() setsockopt$inet6_int(r2, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x35) r7 = gettid() ptrace$setopts(0x4206, r7, 0x0, 0x0) tkill(r7, 0x3b) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r7, 0x0, 0x0) r8 = getpgid(r7) ptrace$cont(0x1f, r8, 0x8, 0x80) wait4(0x0, 0x0, 0x0, 0x0) 00:18:50 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r1, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:18:50 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000006a80)=[{{&(0x7f0000004ec0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0xfffffffffffffd9c, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x30}}], 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f00000000c0)={0x8001, 0x8, 0xc09, 0x63c}, 0x10) fsetxattr(r0, &(0x7f0000000000)=@known='system.advise\x00', &(0x7f0000000080)='wlan1louser)vmnet1vmnet0\x00', 0x19, 0x3) 00:18:50 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r1, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:18:51 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r1, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:18:51 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r1, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:18:51 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:18:51 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202100, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$nbd(r1, &(0x7f0000000140)={0x67446698, 0x0, 0x4, 0x0, 0x2, "319ceb00ff2eca595371a9ff0cb914f51b476b3ff7c400207463a84bdf9e109891d656567af9737217b7eb0b8c6811c11874c1fb322cb9a4cfa1659c077e3b5acd0d9db381bd3f52bc9dbc32b149cd40994cd8479beb81b720f30eeb0c08733aa2c0e74a9ac61a41bcddab199b3d64f9dd04976d86c73009db27092758f43ccdb19268bde93ed46ed137241e0797b73fcaa43d23589f256ef44afa4264388914fe7f01707c8e54c9e0376ed674a2faacad7c6f00772e9c12c499ef7e6af4b40140bbb4397ecfd09359c89c2f05fb8e835641322390e5e4636762eab06d4c795a363cc2a8b5"}, 0xf5) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f0000000100)=ANY=[@ANYBLOB='usrjquota=./filfile0,\x00']) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000240)={0x2, 0x9, 0x9, 0x8001}, 0x10) [ 1132.843544] EXT4-fs (sda1): quotafile must be on filesystem root [ 1132.876269] EXT4-fs (sda1): quotafile must be on filesystem root 00:18:53 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=""/91, 0x5b) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_int(r2, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x35) wait4(0x0, 0x0, 0x0, 0x0) 00:18:53 executing program 4: openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x35) wait4(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="38010000100001ffffff000000000000faff07000061c4d721d292aed300fe8000000000000000000000000000bb00000000000000000002008000"/72, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="dd37514e9e68be47ed58ef35b9f243fd00000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200650000000000000000004800010073686132353600"/240], 0x138}}, 0x0) r4 = syz_open_dev$sndtimer(&(0x7f0000000980)='/dev/snd/timer\x00', 0x0, 0x4000c0) fcntl$dupfd(r3, 0x0, r4) preadv(r2, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$TIOCNXCL(r2, 0x540d) r5 = accept$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev}, &(0x7f00000001c0)=0x1c) sendmsg$sock(r5, &(0x7f0000000600)={&(0x7f0000000200)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @remote}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000280)}, {&(0x7f00000002c0)="51c91d8c2a6867f82c1c73b70bd62b21beafd6adf9f21d0c14d4865787b065efa64dfc94f58c683b7c2c7d75cba90b42a7fc13cdf3ccf71c766288ea1934f26b019b77aae45ffa0f38671bf6cb51589c8547dbb6322bc08356", 0x59}, {&(0x7f0000000340)="94522587c648739fe78afca1b8efc403fac0496b479dce7babe789d07c34f9c0859e7daeb3507101d5c1528d4868ac5197f362492e7e4109a5dc7e2ff4d6ee943491c305942dbcad8936cfa026889cd336a2d7f9c4da27bfdc52cb42b3f92c4b8ad3c09185b90a4119a6d568537d6abbc718a7e4904daaf7f1543718972554c5ce773a68bf274d273c0cb95741bfaffc7069545a7aa58493efb9b607eaba67b16282be0595d1eb358830849543a15f3a3f59d2a2f9478288fbc9315bddb76db0ced5a5bab335d78790844a25eafb31cca476212859de61", 0xd7}, {&(0x7f0000000440)="c342c0e0b152f97b81e058ff84d45a3a8272e4a95548db135b17c916104b05a6ea104ececcff3fc738f4460b671bb956f6ad993989e06387ffe46132bbaab783e5651fc2099b2b6e869570ea56600b84a617aadd42fa52e911338123a2919f62f47442311b46d39b87a598e59d985f114222da0c997f7f9f4242ca8f3f3da6c93f928bf6a1", 0x85}, {&(0x7f0000000500)="710b824c897aeb9d36109f1e0aa50633279417fdb9a80463a983865bc2bd59b0f59beafd1b0bf86b6c32583ffbfd9703", 0x30}], 0x5, &(0x7f00000005c0)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x30}, 0x4000000) 00:18:53 executing program 1: add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00000000c0)='trusted\x00', 0x0, &(0x7f00000003c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents(r0, &(0x7f0000000040)=""/123, 0x7b) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r2) add_key$keyring(&(0x7f0000000240)='keyring\x00', 0x0, 0x0, 0x0, r2) keyctl$unlink(0x9, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000100)=@keyring={'key_or_keyring:', 0x0, 0xf8ffffff}) r3 = add_key$keyring(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000440), 0x0, r3) r4 = request_key(&(0x7f00000001c0)='trusted\x00', 0x0, &(0x7f00000003c0)='/selinux/poli\xec\x13\rA\x9e\xd7j\x8e\xcbo\xccb\xf0@^\x86t$\x87\x10]\xf3\x9d\x81\xda\x03R\x9b{\xf4\t\xaa\x83\xfa/\xfb{\xc5{\x01~\xe0,hhw\xdd\xd0\x83\xc7\x13\xb9\xf3G\x00', r3) keyctl$search(0xa, 0x0, &(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x3}, r4) keyctl$search(0xa, 0x0, &(0x7f0000000100)='trusted\x00', 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) r6 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='-', 0x1, r5) r7 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='-', 0x1, r7) keyctl$unlink(0x9, r6, r7) keyctl$set_timeout(0xf, r7, 0x0) add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f0000000340)='/selinux/poli\xec\x13\rA\x9e\xd7j\x8e\xcbo\xccb\xf0@^\x86t$\x87\x10]\xf3\x9d\x81\xda\x03R\x9b{\xf4\t\xaa\x83\xfa/\xfb{\xc5{\x01~\xe0,hhw\xdd\xd0\x83\xc7\x13\xb9\xf3G\x00'/80) r8 = gettid() tkill(r8, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/197, 0xc5) r9 = getpid() sched_setattr(r9, &(0x7f0000000040)={0x30, 0x6, 0x3, 0x0, 0x40005, 0x0, 0x0, 0x3}, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r10, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r12, 0x407, 0x0) write(r12, &(0x7f0000000340), 0x41395527) vmsplice(r11, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd44}], 0x100000000000018c, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x2}, 0x0) 00:18:53 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="38010000100001030000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="dd37514e9e68be47ed58ef35b9f243fd00000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200650000000000000000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000af000000000000"], 0x4}, 0x1, 0x0, 0x0, 0xca0}, 0x4000) fcntl$dupfd(r6, 0x203, 0xffffffffffffffff) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0x7a) setns(0xffffffffffffffff, 0x2000000) ioctl$PIO_CMAP(r5, 0x4b71, &(0x7f0000000140)={0x6, 0x7, 0x401, 0x9, 0xfff, 0x2}) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000080)=0xc) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 00:18:53 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:18:53 executing program 3: syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0xffffffffffffff59) getpid() r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) open(0x0, 0x0, 0x0) ftruncate(r0, 0x8200) r1 = socket$inet(0x2, 0x200000002, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) removexattr(0x0, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = dup(r3) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) prctl$PR_GET_CHILD_SUBREAPER(0x25) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x806, 0x204) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x172, 0x20000000, &(0x7f0000000100)={0xa, 0x4e1d, 0x7fff, @loopback, 0x3}, 0x107) r6 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x80) sendfile(r4, r6, 0x0, 0x8000fffffffe) 00:18:53 executing program 3: write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000d40)=ANY=[], 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fff) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f00000005c0)={'#! ', './file0'}, 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) accept(r1, 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) setxattr$security_capability(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='security.capability\x00', &(0x7f0000000380)=@v2={0x2000000, [{0x8, 0xfe}, {0x0, 0x4000000}]}, 0x14, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:18:53 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:18:53 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(0x0, 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) [ 1134.623655] binder: release 4684:4691 transaction 11 out, still active [ 1134.637646] binder: undelivered TRANSACTION_COMPLETE 00:18:53 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="38010000100001030000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="dd37514e9e68be47ed58ef35b9f243fd00000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200650000000000000000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000af000000000000"], 0x4}, 0x1, 0x0, 0x0, 0xca0}, 0x4000) fcntl$dupfd(r6, 0x203, 0xffffffffffffffff) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0x7a) setns(0xffffffffffffffff, 0x2000000) ioctl$PIO_CMAP(r5, 0x4b71, &(0x7f0000000140)={0x6, 0x7, 0x401, 0x9, 0xfff, 0x2}) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000080)=0xc) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 00:18:53 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(0x0, 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) [ 1134.678592] binder: send failed reply for transaction 11, target dead [ 1134.716757] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. 00:18:53 executing program 3: syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init() r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x7a) read$eventfd(r1, &(0x7f0000000000), 0x8) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) syncfs(r2) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)) inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="6744669800000000fcff010000000000e600a42ac4cb7a63d1a97a7e6d06589e03469637a7267592938766010a35efd29affe2009efdc31a381587a53c0d00000000000003e9e841e84f03d05ebc7e87c10dfc8b2cf1fd86fbcd578bcd3e51a594acdea573d84d62215d3e9e1c3ce9db868d4ee3bc0b06f8865611d9e5a0a652c1a8cf8d285e1629b0e097e78390c268b4919ba00c2f81d8ebc88648339483572c6f66943bc0347fc1aa918f1383e456de840a334085ee5ad56dbd8d027120d49deb92c530d75197d928a5f717d65887ff134d67670425"], 0x74) sendfile(r3, r3, &(0x7f0000000200), 0xa198) [ 1134.808928] binder: release 4713:4715 transaction 13 out, still active [ 1134.819868] binder: undelivered TRANSACTION_COMPLETE [ 1134.841524] binder: send failed reply for transaction 13, target dead 00:18:56 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(0x0, 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:18:56 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="38010000100001030000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="dd37514e9e68be47ed58ef35b9f243fd00000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200650000000000000000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000af000000000000"], 0x4}, 0x1, 0x0, 0x0, 0xca0}, 0x4000) fcntl$dupfd(r6, 0x203, 0xffffffffffffffff) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0x7a) setns(0xffffffffffffffff, 0x2000000) ioctl$PIO_CMAP(r5, 0x4b71, &(0x7f0000000140)={0x6, 0x7, 0x401, 0x9, 0xfff, 0x2}) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000080)=0xc) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 00:18:56 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x277, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x32, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000080), &(0x7f0000000100)=0x4) 00:18:56 executing program 1: r0 = open(&(0x7f0000000380)='./file0\x00', 0x2000, 0xd1) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x1d, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x271ea3ad, 0x0, @perf_bp={&(0x7f0000000080)}, 0x21903}, 0x0, 0xffffffffffffffff, r0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x81805) creat(0x0, 0x0) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000180)="87582b70cfd6decd18ce035bec64bd5824456bfcdc", 0x15, 0x80, &(0x7f0000000340)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) pipe(&(0x7f0000000000)) flock(0xffffffffffffffff, 0x2) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x7a) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040)={0x88473166, 0x0, 0x2, 0x1, 0x6}, 0x14) io_submit(0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) 00:18:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000000)=0x80) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8110000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0xc81, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20024008}, 0x4000001) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x35) wait4(0x0, 0x0, 0x0, 0x0) socket(0x11, 0xa, 0x4) 00:18:56 executing program 2: ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) lseek(r0, 0x2, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$inet6_int(r3, 0x29, 0x3, 0x0, 0x0) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) ptrace$setopts(0x4200, 0x0, 0xa6, 0x100072) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='net/pro\xca\xf8%=4,\xbctocol\x01\x00') preadv(r6, &(0x7f00000017c0), 0x3a8, 0x7a) mkdirat$cgroup(r6, &(0x7f00000000c0)='syz1\x00', 0x1ff) tkill(r5, 0x3b) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)) ptrace$cont(0x7, r4, 0x0, 0x2) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)) r7 = gettid() ptrace$setopts(0x4206, r7, 0x0, 0x0) tkill(r7, 0x3b) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r7, 0x3ff, 0x70) ptrace$setopts(0x4200, r7, 0xfffffffd, 0x3) tkill(r4, 0x35) wait4(0x0, 0x0, 0x0, 0x0) 00:18:56 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x0, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:18:56 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="38010000100001030000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="dd37514e9e68be47ed58ef35b9f243fd00000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200650000000000000000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000af000000000000"], 0x4}, 0x1, 0x0, 0x0, 0xca0}, 0x4000) fcntl$dupfd(r6, 0x203, 0xffffffffffffffff) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0x7a) setns(0xffffffffffffffff, 0x2000000) ioctl$PIO_CMAP(r5, 0x4b71, &(0x7f0000000140)={0x6, 0x7, 0x401, 0x9, 0xfff, 0x2}) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000080)=0xc) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 00:18:56 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x0, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) [ 1137.633436] binder: release 4971:4974 transaction 15 out, still active [ 1137.644118] binder: undelivered TRANSACTION_COMPLETE [ 1137.670146] binder: send failed reply for transaction 15, target dead 00:18:56 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x0, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:18:56 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="38010000100001030000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="dd37514e9e68be47ed58ef35b9f243fd00000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200650000000000000000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000af000000000000"], 0x4}, 0x1, 0x0, 0x0, 0xca0}, 0x4000) fcntl$dupfd(r6, 0x203, 0xffffffffffffffff) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0x7a) setns(0xffffffffffffffff, 0x2000000) ioctl$PIO_CMAP(r5, 0x4b71, &(0x7f0000000140)={0x6, 0x7, 0x401, 0x9, 0xfff, 0x2}) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000080)=0xc) [ 1137.746538] binder: release 4991:4994 transaction 17 out, still active [ 1137.765915] binder: undelivered TRANSACTION_COMPLETE 00:18:56 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:18:56 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) [ 1137.791213] binder: send failed reply for transaction 17, target dead 00:18:56 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) [ 1137.871163] binder: release 5003:5006 transaction 19 out, still active [ 1137.894731] binder: undelivered TRANSACTION_COMPLETE [ 1137.930120] binder: send failed reply for transaction 19, target dead 00:18:56 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f0000006a80)=[{{&(0x7f0000004ec0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000006340)=[@tclass={{0x14}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback}}}], 0x40}}], 0x1, 0x0) 00:18:56 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="38010000100001030000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="dd37514e9e68be47ed58ef35b9f243fd00000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200650000000000000000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000af000000000000"], 0x4}, 0x1, 0x0, 0x0, 0xca0}, 0x4000) fcntl$dupfd(r6, 0x203, 0xffffffffffffffff) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0x7a) setns(0xffffffffffffffff, 0x2000000) ioctl$PIO_CMAP(r5, 0x4b71, &(0x7f0000000140)={0x6, 0x7, 0x401, 0x9, 0xfff, 0x2}) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1138.219507] binder: release 5023:5024 transaction 21 out, still active [ 1138.226198] binder: undelivered TRANSACTION_COMPLETE [ 1138.234268] binder: send failed reply for transaction 21, target dead 00:18:59 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:18:59 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_int(r2, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) signalfd4(r4, &(0x7f0000000200)={0x7}, 0x8, 0x80000) tkill(r3, 0x35) wait4(0x0, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r6, &(0x7f00000017c0), 0x3a8, 0x7a) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0xfa, 0x1, 0xe5, 0x6, 0x0, 0x4, 0x24002, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000000), 0xc}, 0x10000, 0x400, 0x5, 0x9, 0x9b, 0x8}, r5, 0xe, r6, 0x0) write$selinux_create(r1, &(0x7f0000000240)=@access={'system_u:object_r:dmesg_exec_t:s0', 0x20, '/usr/sbin/cups-browsed'}, 0x4e) 00:18:59 executing program 3: socketpair(0x7521de3f9bd2c19d, 0x80002, 0x7f, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x30, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x8, 0x80, 0x1, 0x2}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24080800}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000080000007700006f45bc910ee960ff070000000000000000000000000000040001"], 0x18}}, 0x0) 00:18:59 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) clock_nanosleep(0x3, 0x0, &(0x7f0000006400)={0x77359400}, &(0x7f0000006440)) sendmsg$key(r1, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020300000f0000080000000000000000050006000000000006000000000000000000000000004d0400fdfeffac1e0001000000000000000001000900000000000200124e1161b80000005b3fe8bd31557700000000000005000500000000000a00000000000000fe8000000000000000000000f2a9a0776252e63000000000"], 0x78}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r3, 0x107, 0x13, &(0x7f0000000040), 0x4) accept4$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14, 0x1000) sendmmsg(r2, &(0x7f00000060c0)=[{{&(0x7f0000000180)=@ll={0x11, 0x1, r4, 0x1, 0x6, 0x6, @dev={[], 0x19}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)="f3033c482eab00bacb0eff7c8ffa04952827ebdc564b5c5b0271b4186d4a735e55d9707c342ef11a1286f0039fdb469346e8ac2b0ccc365973e265faa6d9b527311f5cfd", 0x44}], 0x1, &(0x7f0000000280)=[{0x1010, 0x5f86381b121a2bcd, 0x6, "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"}, {0x80, 0x29, 0x1c, "468ece645ac15c08de866c1e509f307d58d8949b35590a9c9fcec8223bde874954914db32a6864646f830f296c6ab0cde5b8792115d880bb0b4246dc607658c2e4349f8f0d952ff1a7ae457803cd0971261576511eeb54fb9051830a03e72308a3083460d5e7ffa015"}], 0x1090}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001340)="833d1a0a", 0x4}, {&(0x7f0000001380)="3c2a384fd3bb5a1461a8672ae4f6358551fa2896adc19e5c680471b7be2eab9a843e8cf55d0967cde9b282fa5c97dfb0d68cb56a9e0d60c0db69a524a55aa11802c052ae7470acc85a59fec7e5b6a032b55adf05000eda7da83b0c3e5c002dc9dc77195350501e51dabbfd633431bfe0429d2b5667d45efdc15f20540356b1b8515340e3392d813c4c86f586eb8023e4475cbb65baa5d689e2b51546", 0x9c}, {&(0x7f0000001440)="6cc8a63153e13f740e5f23e8d3185461dc8ef6023878f65eeb7ad3523406d65d21105bdac9095b6d727d4638222a965cabe9fdc21a60745484ff84530c513a1182d9f283be1fe6912f2fbd9293f18d1004ba3f62f38a7b9a770cd45fa71732c593be54313d840ab7b08403b867d8cf8ac2bb1bcdcde3703b2d40fb4af75a4cc676d74ef13f3f9631e3db", 0x8a}], 0x3, &(0x7f0000001540)=[{0x18, 0x119, 0x3, "9f4b9f76dd9dc073"}, {0xc8, 0x102, 0x9, "ea3da87441074a4d12e5b3edc710b87280b9346414a8e126f9c57b8a97adf4d194d323e8205de073018ca777ca23e4c30f285013e053754ead3fcdb655f1b7b0a10559905677cf9ec172bb8c9a45d84dc2d71de009041ac1afe30aa1fa24cf98a8a758e8d7b234cd96f41c04ab4906c93c4b56258bb0fd672dca160c4fea00752811a6d65f4e6ad95be678392e5dd672d1b962a60e9d5c85f432ede572e459c5ed46132270acfb6e8bb878f0dc7085c2ac8796"}], 0xe0}}, {{&(0x7f0000001640)=@ax25={{0x3, @default, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f00000019c0)=[{&(0x7f00000016c0)="bc3188eda80b7dc75e13a944e793ef2430ea8668e1f5677ffc37b743643a5401ec717eb1785d7e02268e3299efc253427f12fd965a78e9e9d1180b333a67372858b30a7aa487774b3486a82124191ae7e3185b492e3321215b294c360a5dd5068ae117cbf764b28d81", 0x69}, {&(0x7f0000001740)="f0cd769223adabc0034bdb62a96bc3b5b29319472affeaf78fd15e142130fd460e33a6c19e0396a936d01b8fe90bafd5a1", 0x31}, {&(0x7f0000001780)="e5b5e9057c1145b0486d54ca9ae18539ae8b574b913f0459217de1ade8c2d44866aa2d1006bb2d9cc9b266af9a23f9c63f4d273281a4e2b097a78b486d3c7b038d0ae9fa18c315bc0b5930507ee5e5955baf7b90037511a391872175b1d3f412946c84b763aa84d2f7e19bd463f1aeb78ce7c8e598920940e1be87fdc8e7184330822598eabbe7eb3d1c1d487293f7e795ddff8eb6339de0f6b109cc10fb96b2e99644c22a19cd1b275522c2e4bf6bef8f3082943d", 0xb5}, {&(0x7f0000001840)="1818f7e44e641565de3d6521c0068112619bbf7d1ae633d1331d6e204e6a3abdb5170d207c8f44542fe3202509d72b7ced771a27699dd1c2bb6b063545a2b61201e940b5b8", 0x45}, {&(0x7f00000018c0)="26b3ac78cf2f96971981b9a3a6354bf69d0512c9787d9dec281290388eaa0ad64d8fdfcc993e7fd10f766f995d8ac72dd9bc21fcaec82ee92963f73ffd5dfa17a7485141f33187ec5192cb5ae016e3d3ec65bc1dc8afb831c1b7a3371aba303cbbe65f79f7314028b0e17222ead9e59ae9f4baee91bf91fd0b253f724734aa115d9b84246b8dc4f62653a2e1c3b62e2b66a12e2006757360dc198da30a1f1b8e0dc404e6aa578cac0b0c7762edd15bfc5f43d9dfeb2246a45b8e46972a62292821181d2aa0bb270058c15cdf773e88465065a6461728857e4918de", 0xdb}], 0x5, &(0x7f0000001a40)=[{0x70, 0x10b, 0x0, "4ce7b1fce2cfd2c3662c7a7b9ef3c1fd95f9ab558fa0c52975c5e6abbcbcedeb99aa0a65cfd375d0f481fddbabf151f1c066b7c4007c3cd6d8b5d10a2d2a0b1ff1a9448006043c2d83f84fe21774a1293dd32c222c77d1f12dc4b4b0ce0ddc50"}, {0x50, 0x101, 0x4, "f188110fc171f800686dd2b4ccc989d56a382f0e60009e16813e18a0f4dfc71231f1b9fc8a61a5928e5ae4be224b451604c1a9be5b5aaf72d5d99540fbe9"}, {0x50, 0x14, 0x4, "b9bb354f9c47e41b327fba0d6a0b88f0b5763d8955085bbcfb1e332d822935e2e4f069e3fb3d8970f53d86f762a988d819b510e9fdb6bca9fb08bfe0bf25c6"}, {0x70, 0x108, 0x2537352a, "51b8ae567dfd434084191bad631156b4c2f87982bb5aaaefa4946b0ee853b8bb8f14fa905559f85a230b5f020504918e59c9e539540e59a3bde12d03b28d80e3d1aa344d6ff346d5207467e8c137fecac0104b586b11a41e58ba43f18fa058fb"}, {0x30, 0x117, 0x10000, "dd395adb63945f7f444cc7b6c1b8a7a6dbf2b1a30ea31eab69cf9c9ee2b6cdfa"}, {0x80, 0x10c, 0x4, "a6dfcb2f38ce9ad8152bece4abecfb076613b389d8a785bea7b2d2369057a232b0c6c03850398eef690b7c270012a520f26d64f79d4df4365d4485c6b92c715d9d024c3a9be4acffa54f6c031b7dcde424d28cfc1b6d0163c56aaadd33e97750940e6844809f215b61c182dbf4bb"}], 0x230}}, {{&(0x7f0000001c80)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@null, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null]}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d00)="5476e2ff3389dbc7db106976994fe5f23d23b16d7722fadf32605ac761700698522b8ab9b4a0bae567ab4dca6ca49a4092539121c22d54ede1c835a9e8fbad90e20ebe988b20bd4c7b4086884bad8a368427af5243dfb6b64070b98844bfab370a2f74c649a262b209996641a975a48adff4831fa1a6cc0dc1ecec3257af55142450fa3abd89f640d0620c6e05375864b59d1ac0", 0x94}, {&(0x7f0000001dc0)="c16528c1ab69ad2576552972e02439d8cff9c2328f57d7de30f3ca9c7b8b2a9c73579dec0ab89b5c25ba98f4848e8ebc49c5fd8a3e8eff342b2566c2e4e9e67c4b58761d73389f00ead81d48fc1d9bd7b681dd3dd3f772dec295b0f038f63f7a1f39f419fd4733945b27497aed970a85a7d7c5fbe7f2b2ee847844e0c6fb71134bbc199761d942d7be0cf3339b6b2edfa3da3a1f3a868636961b0bf4ffb645a1b9fa2a45b52bbe5c49970f50d4624747709a44d98b5dabf326139e69698730b4285a64943e43dbc285c6d980a7ad67eb15b846744a179d8990705e3dcd6907848f", 0xe1}], 0x2, &(0x7f0000001f00)=[{0x30, 0x10c, 0x80000001, "34f68323ebfc17bfa06c90619f5816433a315f0264699af6559e41"}, {0xf8, 0x4, 0xcb0, "f18076d4b4e433657afcdb5d9938196de1696de0b01b59c8847f9cfc069b635abdf4175fd69f6a7be3df18216e28f79d6f54f2dd34c4260ad590427b4ff9c3ded328f010cca7df7399dfd43bd1e3a55b36176d2d2b7742cdfa4d8898a617f0e445208b83c4a0365eb50a0145290598886d2eb8bd7c5ccb83200aa88444c8aad4726043fc9681fc09612b510366eb96ba4c1719eb076dc0972f2f86fb5152fd4d23ed3854b56344ff3f479df59d9df262f79039c4da2d8e29cd00a87847f8caa7461d75120dd6bb1e35dcbcfb18f16d24edec3a0487938bbfbcb12c6970aaf648aefdfc2b2c"}, {0xd0, 0x1, 0x3, "1562bf7bb8e84e12f4d17b7c4d943e2d706baad79bcca5db32044bb46960bedcfa98fa19dc155e59d7f059f15f7c3adee57ba3565a1207caaedca8cf9736c3245a9a8e5623cedbd6c2df997d32e12a3fd95ed57cb3899e724b812bb9b55c73329baecdea22a0237ebda48caa71b65c0e41ce8eb55938e4139ef3b5e67c1d35a5ac2d0a1e16c253a06a8adb70c32a13eb14d3c6a4d631b5fbcc6ef827f1806263828af43d80cf8ef3dbcbf7db423b5c2b10da860b33e84fa055f2577901e9e9"}, {0xc8, 0x10c, 0x10001, "8c7dbb990e06adb3a9d025b47065e8daf3db13b226a94b2158954d935cf1b451e7b0facf370fdee71680b9b251e80953c17d3dd3f13db94942d6b789b8dad0bb3f1994b01d743ebc230ff72c29d5799755fdf541a6188524f04ce5e44364c275aaf137c9c661894eb740c33ad979b0c8a8d92870fcfa1a722679450e1f8a4f493930368fd96894cbee59883876cd187ddb78809bdfa9404018decf106bb3cf77c52eeff359241b24a19f06d388f8ba80e943a9cfcaefab3c"}], 0x2c0}}, {{&(0x7f00000021c0)=@pppoe={0x18, 0x0, {0x4, @link_local, 'yam0\x00'}}, 0x80, &(0x7f0000004840)=[{&(0x7f0000002240)="844aa2fddeec21b05a68c6a3d99b57bfd15cb17477eb444037aa7a050927af018cbba032ac25e1b8612847b437aa2b1c9aa27bf02018dacda2a3807f77d47206cb3d84fdb68253217c356671252df1379070915e38a4be86990a8e1dee164a9dbe1d06554d9c918a8326f7d21eed7a498117904f13d03b20152bf19df739fb88f8216db0ddb7871214047881fe3d8555f7d5220f9cf6bfe9ec36fb37fd22a00279407f70c2e3a5edb34dc4523ed44ffa962bdc3119841fb9aaf7179e52862cb8c82bfe74611df5a43c280f84d6a8", 0xce}, {&(0x7f0000002340)="4995cb6fb6ae0b4b5417dbe584aa426fff83e025edcceef11e3501b7fd60ab7852acdf657e88b545920196806e3e3f8940ed26e7b03cdb2af2f86838cf8ceead1dc7d5df092cfb", 0x47}, {&(0x7f00000023c0)="7a2d770da240fc1666d0eb1ddfee04959ca52da66da6186511e808332286efdea0ec1bbec90f5088f70d56be87faadc29641ca75dd90a7ad4827c96d68f542d93da3da29bea5899882df9a0840118e470fed7c092568b5f84990aac7a16409322abb6d8ecf3cd8919139fc2dbe1510de24d89e4f2e0cb0aeea6b76c58dc0c8ad48a7b2adeb3ed1c9fe234f1c69340e8e9084917e92b7ca282f6b911ab4cb9a64440cf1253704eaed596fec755c73f439ed55dc3e0688846b1808123a69e3f84c1f7b03d270a6de9e92c0b15cc7916f4463c1c9c70e05e4a97518eeb42d7740d676c5f2d7da", 0xe5}, {&(0x7f00000024c0)="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", 0xfa}, {&(0x7f00000025c0)="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", 0x1000}, {&(0x7f00000035c0)="bfad62b8fcf7a384d1728f191b2052ca15384e0d4c95c907754f166593dfb65944fcb2262bd5aab88738b92347b1e67cbdc3d177cfe2e612d6fac518efe5080c34b56bda60520ecc7b13f6af7cee6186738419bb3b7fec2b85ac6379f148f06f8f18d926219183ff9dfefd381325", 0x6e}, {&(0x7f0000003640)="0385df490c", 0x5}, {&(0x7f0000003680)="5b03290a77ad11dbf89e576d3360b1344f79ddf7757d789d1ee130546ef6e9f2ce6708e7e4b8be6e3e2ff87db5df9d446cf4c7717d7b2647d9a1b0f040c0af99f8751eaf56be1f65b9fce0b4a9c072663de94739c3324fab76a1134d09b2c38d0bd4f925798c546daab11923a629cd1ed077269e8056e2d64752a411ea98dbb5e71c48d8a9eac693c804d7a5157e3178d3598dce8d4df70c541c0abf447db6bed733ef7f4bb2d46687da5cf0edceb64d06a8", 0xb2}, {&(0x7f0000003740)="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", 0x1000}, {&(0x7f0000004740)="5b91907ad117ecf457a3abd9bcfbd5c42e39436f54b9657ce8ed7e5a5189ae2f678bf73bffa7efca7b1b74544772aadf6d812af486871149726eff3a0d898ef4896ea53b79f4666680f725719e2e2bd1c33115b5bec1b40b6780b5601b7c48297fef800d4b20a4e4663bce307a7c7b61f4b2aae4d0feee179d28c9a39d28343c445bc36e0b8363b5c72e677f32f435e9e18830138c8cc329a0510035cd5a96e0bf2bc1b687781aafc47724f11b592543b37190e7bb803e679c67a4576673f6b75486e7f6bc16acd306eebd6d350ff6ba7e3584518e50", 0xd6}], 0xa, &(0x7f0000004900)=[{0x1010, 0x29, 0x8, "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"}, {0x48, 0x109, 0x3, "0a857bb380584ef8b0118e762386026e8b722bcd0a0386389a7c95eff968c0a644845e9f124381329f0e430632cb4cec96fa40d0bb31"}, {0xf0, 0x113, 0x717, "442367f5b920faf2d80d101ac7afc4265457d892917fd055550d777bd77c550600937edd62101ac5be7a2b2eca6e202a2b8e8ca6cad0db4a9d80f4228c7ce11146acfc209d52c44fd790fabb335beacbbf27979d08dc243790690652e8df3a3bcbe4a172cbc80ab110eb7a7745f913b3131c25483844788acc2eb4d4c349aef4c554c9460ff1c0bbffe1bcffcb4ddf1a37736017135414bdd01779b59e3cc027cb7e37fb02008c96497a527371a3e3a520b5fb7a87663b69388636fdd2a9349d14932ea0703e5cc20e9a336c71b3ce7081a8663dd5b51b1b36df33"}], 0x1148}}, {{&(0x7f0000005a80)=@generic={0x10, "94d285cc53d2d9867d7de1d9c5234240796b17eef6dc57fd9b3a6c4ab4d25a3638265aca2f23c3857e943756afe56a50166ba6b3d9438313162a7bc3fa08dafc6e4490f9aeb7a8137486f4233d5b3baffee3611e0867b7b253258122e0638dedb5f848705e5c18dc8a9feb30cdcdb4202c0a93913591e86d5fb0f07a25e4"}, 0x80, &(0x7f0000005b80)=[{&(0x7f0000005b00)="0e7ed8d8ddcb06c7cf7c968885b405b5e6e594f884965bdd0c73cda4baf65e4d7c0f3e239de6262e4bc3c919523a9846a12e29befab21d721244e0c4f0f1", 0x3e}, {&(0x7f0000005b40)="a92ac19e", 0x4}], 0x2, &(0x7f0000005bc0)=[{0x100, 0x1, 0xed9, "5c8f9cea8f348637366d9a9ac12f14cfed768a629ade77e59976556f8785a013ba2122e79f450969d2567d861c00442bc2ea1eda2e22550598e6dd3d08d081dca32f46328d78de3dfa22cd89b627c9c4bf64887766d74cfd23696abeb8662e4800311590a5a8967cde8d8e2db548cff63ee3357e4a33a356915d3df9b954fb2d72149937a56ffa49f305152d6bf5feb1f324e0b38468ccca7fce9b4a056125ceb7cec3532687edaf130417a3abfc41ac94b307c80cb66311bdb7c8b68a55552de4cb9a46addea7a24b7380e015af0218afc2ea6ab33e9d7f0593de419f9cba04ae2dd22b6c611bdea21128405d62"}, {0x38, 0x102, 0xfffffffd, "8133b5579209fbd90e79913154421bf2614d37122387b9a170abc133c878ffc2029c4e6f8578c2"}, {0x28, 0x11, 0xffffffff, "6e53d27f2df29482ffb39a1e26a36df63bba"}, {0xf8, 0x6, 0x2b, "612fb079746481c4e442ad14de19a632a8038788d0fe62d4f8b617d715a8bf31049d2b2919fcb982da7bcd7b5db297146dc27ff59d4b7b4001d8b48d793729172a90cb93db79aa53ee5e5be8af73b50bf30b0ac2f299ec5f6e9485df9f04f0da98cb6ec8e7a363ef25723890d7041abab7f1e72f1057d7107702d1e6b3d1564eb1776d3269cab4d9efd7a1e88ea585ac928848cc62563d30e5cbcd412c52774e033d9eb77944a4995da0f8208248e835a25dd145d0e459b6ec6aeef1b41ea46690b28d2f70d502a1ddf627b9daf720a74832cb0aa81e157f7d1f8ed7836e5d0f7e"}, {0x30, 0x102, 0x5, "c2fc0ad0e63a863b2d4d859da005d863c4a48be8d5a81620fd597f9843"}], 0x288}}, {{&(0x7f0000005e80)=@in6={0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, [], 0xa}, 0x1be}, 0x80, &(0x7f0000006000)=[{&(0x7f0000005f00)="15a18b22cb3cd41ddc6a79c0d7e52f08159b89c2c3206036991b2ffa0a9212", 0x1f}, {&(0x7f0000005f40)="32614c6f7ea8f1867bd63a26aa968295a932d487b2fe74d7d46bd1dcc26e5b9951319c11e8d5787fcb1acf0db592a8e76d39b6254f3a0d8ec136743c452e93476acc695fdbde4d1095479b3282aa9bdafd7e477e", 0x54}, {&(0x7f0000005fc0)="e46a33990bab211398089fc386311368ec8327e6d0954d00d94e5a13f2", 0x1d}], 0x3, &(0x7f0000006040)=[{0x70, 0x1, 0xc44, "54a19ce78bd4ce5c256ba0885ee2ce2357e000e9305d2b5788013c501d484897d08cbb1d6af039a19f1cf82798e8c0d713f7e1aab42420adcb0d1c8bffa82af9338d12d57e47130263d690908e64441009429fdee23cee320e1623903c"}], 0x70}}], 0x7, 0x10) r5 = creat(&(0x7f0000006280)='./file0\x00', 0x4) write$FUSE_DIRENT(r5, &(0x7f00000062c0)={0x128, 0x0, 0x8, [{0x1, 0x0, 0x7, 0x8127, '>vmnet0'}, {0x1, 0x7, 0xc, 0x4, 'vboxnet0%&{\xe5'}, {0x4, 0x6, 0x0, 0xffff}, {0x1, 0x30, 0x0, 0x8}, {0x2, 0xd770, 0x5, 0x0, 'yam0\x00'}, {0x4, 0xff, 0x5, 0x401, 'yam0\x00'}, {0x3, 0x8, 0x7, 0x5, 'sha256\x00'}, {0x1, 0x3f, 0x5, 0x1, 'yam0\x00'}, {0x2, 0x62, 0x7, 0x0, 'sha256\x00'}]}, 0x128) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0xfffffffffffff801) 00:18:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0xff) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x35) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3b) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'vlan0\x00', &(0x7f0000000240)=@ethtool_test={0x1a, 0x2, 0x4, 0x7, [0x81, 0x501c2b20, 0x2, 0x94a, 0xffffffff, 0x5, 0x2]}}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200)={'#! ', './file0', [{0x20, 'sha256\x00'}, {0x20, 'sha256\x00'}, {0x20, '%(!+bdev'}, {0x20, '\'-.'}], 0xa, "0ee85334"}, 0x2c) ptrace$cont(0x7, r2, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) accept4(r3, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80, 0x80000) ptrace$setopts(0xffffffffffffffff, r2, 0x40, 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="3801000010a5a379e91101df844ad0ce6a171cb5fe881348b40001030000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/84, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="dd37514e9e68be47ed58ef35b9f243fd00000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200650000000000000000004800010073686132353600"/240], 0x138}}, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000000)={0x7755824b, 0x4259800, 0x6}) wait4(0x0, 0x0, 0x0, 0x0) 00:18:59 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="38010000100001030000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="dd37514e9e68be47ed58ef35b9f243fd00000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200650000000000000000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000af000000000000"], 0x4}, 0x1, 0x0, 0x0, 0xca0}, 0x4000) fcntl$dupfd(r6, 0x203, 0xffffffffffffffff) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0x7a) setns(0xffffffffffffffff, 0x2000000) ioctl$PIO_CMAP(r5, 0x4b71, &(0x7f0000000140)={0x6, 0x7, 0x401, 0x9, 0xfff, 0x2}) 00:18:59 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="38010000100001030000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="dd37514e9e68be47ed58ef35b9f243fd00000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200650000000000000000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000af000000000000"], 0x4}, 0x1, 0x0, 0x0, 0xca0}, 0x4000) fcntl$dupfd(r5, 0x203, 0xffffffffffffffff) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0x7a) setns(0xffffffffffffffff, 0x2000000) [ 1140.640407] binder: release 5027:5032 transaction 23 out, still active [ 1140.654036] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pig=5035 comm=syz-executor.3 [ 1140.655912] binder: undelivered TRANSACTION_COMPLETE 00:18:59 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) [ 1140.667384] binder: send failed reply for transaction 23, target dead [ 1140.728469] binder: release 5044:5046 transaction 25 out, still active [ 1140.752082] binder: undelivered TRANSACTION_COMPLETE 00:18:59 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="38010000100001030000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="dd37514e9e68be47ed58ef35b9f243fd00000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200650000000000000000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000af000000000000"], 0x4}, 0x1, 0x0, 0x0, 0xca0}, 0x4000) fcntl$dupfd(r5, 0x203, 0xffffffffffffffff) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0x7a) 00:18:59 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_1\x00'}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0xad25dd4da8f81c88, &(0x7f0000000040)=""/123, &(0x7f00000000c0)=0x7b) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000000140)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r5, r4, 0x0, 0x10000007) [ 1140.777765] binder: send failed reply for transaction 25, target dead 00:18:59 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="38010000100001030000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="dd37514e9e68be47ed58ef35b9f243fd00000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200650000000000000000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000af000000000000"], 0x4}, 0x1, 0x0, 0x0, 0xca0}, 0x4000) fcntl$dupfd(r5, 0x203, 0xffffffffffffffff) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) [ 1140.848836] binder: release 5059:5064 transaction 27 out, still active [ 1140.860845] binder: undelivered TRANSACTION_COMPLETE 00:18:59 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:18:59 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080), 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000}, 0x20b) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000140)=ANY=[]}) splice(0xffffffffffffffff, &(0x7f0000000100)=0x9, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x8, 0xd) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x7a) sendto$inet(r2, &(0x7f0000000000), 0x0, 0x4000000, &(0x7f0000000240)={0x2, 0x4e21, @rand_addr=0x1}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="38010000100001030000000000000000ff08f6719d38fdffffff000000000000000000000000fe80000000000000000000000000bb0000000000000000000000000000e527d40248519f4982fde213000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="dd37514e9e68be47ed58ef35b9f243fd00000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200650000000000000000004800010073686132353600"/240], 0x138}}, 0x0) dup3(0xffffffffffffffff, r3, 0x180000) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r4 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$EVIOCSABS20(r4, 0x401845e0, 0x0) [ 1140.861741] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=42256 sclass=netlink_xfrm_socket pig=5069 comm=syz-executor.4 [ 1140.880071] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8250 sclass=netlink_xfrm_socket pig=5070 comm=syz-executor.3 [ 1140.906841] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8250 sclass=netlink_xfrm_socket pig=5070 comm=syz-executor.3 [ 1140.955809] binder: BINDER_SET_CONTEXT_MGR already set [ 1140.955817] binder: 5076:5080 ioctl 40046207 0 returned -16 [ 1140.956315] binder_alloc: 5059: binder_alloc_buf, no vma [ 1140.956332] binder: 5076:5080 transaction failed 29189/-3, size 112-24 line 3284 [ 1141.000401] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1141.106856] binder: undelivered TRANSACTION_ERROR: 29189 [ 1141.113364] binder: send failed reply for transaction 27, target dead [ 1141.489305] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. 00:19:02 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(0x0, 0x0, 0x0) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:02 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="38010000100001030000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="dd37514e9e68be47ed58ef35b9f243fd00000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200650000000000000000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000af000000000000"], 0x4}, 0x1, 0x0, 0x0, 0xca0}, 0x4000) fcntl$dupfd(r5, 0x203, 0xffffffffffffffff) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) 00:19:02 executing program 1: socket$inet6(0xa, 0x100000003, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00\xebf\xba\n\xa1\xb6\x1d\x17\x8c\fP6\b\x8bS\x93\xbf\x15\x06\xa5\xe9Ef\xe0\x86\xbc\xf2\x82\x8e4\x91\xd9D\xc1\x8ed\xa4k\xf7\xc9\xaa\xd8#m\x05\xebY=X\xee!nV') r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffe45) sendfile(r3, r2, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180), 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xe040000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="bc000002", @ANYBLOB="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"], 0x2}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8002}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000040)=""/251) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000180)={'\b\x00', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x3b) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) quotactl(0x0, &(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000240)="27c7d97210ff2e33030d8823aaa7f12ecafec3af59") r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={r4, r5, r7}, 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @loopback}, 0x10) r8 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r8, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 00:19:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x2, 0x4, 0x4) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000000)={{0x1, 0x0, @descriptor="378643f095e24023"}}) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() open(&(0x7f0000000100)='./file0\x00', 0x0, 0x80) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f00000000c0)={'ip6gre0\x00', {0x2, 0x4e20, @broadcast}}) setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x35) wait4(0x0, 0x0, 0x0, 0x0) 00:19:02 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080), 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000}, 0x20b) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000140)=ANY=[]}) splice(0xffffffffffffffff, &(0x7f0000000100)=0x9, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x8, 0xd) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x7a) sendto$inet(r2, &(0x7f0000000000), 0x0, 0x4000000, &(0x7f0000000240)={0x2, 0x4e21, @rand_addr=0x1}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="38010000100001030000000000000000ff08f6719d38fdffffff000000000000000000000000fe80000000000000000000000000bb0000000000000000000000000000e527d40248519f4982fde213000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="dd37514e9e68be47ed58ef35b9f243fd00000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200650000000000000000004800010073686132353600"/240], 0x138}}, 0x0) dup3(0xffffffffffffffff, r3, 0x180000) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r4 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$EVIOCSABS20(r4, 0x401845e0, 0x0) 00:19:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f00000000c0)="1c0000001a009b8a7e280b000000000000000000da203ca7455c0000", 0x1c) write(r3, &(0x7f00000000c0)="1c0000001a009b8a7e280b000000000000000000da203ca7455c0000", 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0xf) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r4, &(0x7f00000017c0), 0x3a8, 0x7a) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="00fd600036c627bff289c0acca46b6404e8082371ffde6f6e8c08cce4df24079988e056ca2e31faac7cf6efa0fb54b6564bcf748d995207712d8f01e8dfc7c1344dd9d0674054552e0fe9e7b3a431c624f6fa86f6f949f9060cb1f7df64964afe91057d5b6f5c0ede958243d721df1fe419a5c9700f17a05ff744615278a0ceaa8167d40eb8f1da466db0491c996c6555c33959d488a41343bbc435ec3883c13c33596b7aa00ab47aa7c5158ab2c723ef16c86508f673c97c27d5218fe1bd245e30531d2c9d5fb75ed821beb87a304f97a6d42aa2d029f976c6578d6cdf8b80ad40c822d38d77145760c98a22a2c888a7507c8ebef8ba01472"], 0x6) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x3000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000425bd7000fbdbdf250d0000002800070008000100ff03000008000200ffffffff0c00040003000000000000000800010000000080"], 0x3c}}, 0x4000) sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="020027bd7000fedbdf2504000000380005003400020008000300000000000800010012000000080001000a0000000800010002000000080001000a00000008000400070000008c0005000c00020008000100160000002400020008000400030000000800030003000000080003000000000008000300010000000800010065746800080001007564700008000100657468000800010065746800240002000800040001000000080001000500000008000300060000000800020001f0ffff08000100756470000c00020008000200090000000c00050008000100657468003400070008000100000400000c000400f20000000000000008000200020000000c00030000020000000000000800020002000000"], 0x118}, 0x1, 0x0, 0x0, 0x4008000}, 0x60000000) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x201000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0xf8, r6, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5ddf83f4}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_MEDIA={0x78, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0xe39ab2210f2ad970}, 0x4044820) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = gettid() setsockopt$inet6_int(r2, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r7, 0x0, 0x0) tkill(r7, 0x35) wait4(0x0, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r8, &(0x7f00000017c0), 0x3a8, 0x7a) r9 = openat(r8, &(0x7f0000000900)='./file0\x00', 0x801, 0x8b) setsockopt$inet_mtu(r9, 0x0, 0xa, &(0x7f0000000940)=0x4, 0x4) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='io.bfq.weight\x00', 0x2, 0x0) 00:19:02 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) creat(&(0x7f00000001c0)='./bus\x00', 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./bus\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$TCSETXF(0xffffffffffffffff, 0x5434, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bind$inet(r3, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100)=0x8, 0x4) recvmsg(r3, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x5, 0x3e8}, 0x100) write$binfmt_elf64(r3, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) unlink(&(0x7f00000000c0)='./file0\x00') r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 00:19:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) ptrace$setopts(0x4206, r3, 0x100000000, 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f00000000c0)={'nat\x00', 0x3, [{}, {}, {}]}, 0x58) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$inet6_int(r2, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x35) wait4(0x0, 0x0, 0x0, 0x0) 00:19:02 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(0x0, 0x0, 0x0) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) [ 1143.654300] binder: release 5093:5098 transaction 30 out, still active [ 1143.676978] binder: undelivered TRANSACTION_COMPLETE 00:19:02 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="38010000100001030000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="dd37514e9e68be47ed58ef35b9f243fd00000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200650000000000000000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000af000000000000"], 0x4}, 0x1, 0x0, 0x0, 0xca0}, 0x4000) fcntl$dupfd(r5, 0x203, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) 00:19:02 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(0x0, 0x0, 0x0) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) [ 1143.689050] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1143.733091] binder: send failed reply for transaction 30, target dead 00:19:02 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:02 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="38010000100001030000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="dd37514e9e68be47ed58ef35b9f243fd00000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200650000000000000000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000af000000000000"], 0x4}, 0x1, 0x0, 0x0, 0xca0}, 0x4000) fcntl$dupfd(r5, 0x203, 0xffffffffffffffff) [ 1143.771986] binder: release 5117:5120 transaction 32 out, still active [ 1143.783300] binder: undelivered TRANSACTION_COMPLETE 00:19:02 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) [ 1143.818239] binder: send failed reply for transaction 32, target dead 00:19:02 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) [ 1143.861842] binder: release 5130:5132 transaction 34 out, still active [ 1143.872104] binder: undelivered TRANSACTION_COMPLETE [ 1143.898687] binder: send failed reply for transaction 34, target dead 00:19:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) fstatfs(r1, &(0x7f0000000100)=""/217) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) fdatasync(r0) clone(0x4000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x35) wait4(0x0, 0x0, 0x0, 0x0) 00:19:05 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="38010000100001030000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="dd37514e9e68be47ed58ef35b9f243fd00000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200650000000000000000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000af000000000000"], 0x4}, 0x1, 0x0, 0x0, 0xca0}, 0x4000) 00:19:05 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r2, 0x0, 0x0, 0x0, 0x0) 00:19:05 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x7a) lstat(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f00000002c0)) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000300)={0xa0, 0x0, 0x3, {{0x6, 0x2, 0x8001, 0x9, 0xffff7fff, 0x84, {0x1, 0xb7, 0x5, 0x1, 0x401, 0x6, 0x6, 0x0, 0x1, 0x36bd, 0x0, r3, r4, 0x10001, 0x400}}}}, 0xa0) truncate(&(0x7f00000000c0)='./bus\x00', 0x1000) open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x85800) sendfile(r5, r6, 0x0, 0x4000000000020009) r7 = socket$inet6(0xa, 0x400000000001, 0x0) close(r7) r8 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x200004) read$char_usb(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) syz_open_dev$rtc(&(0x7f00000003c0)='/dev/rtc#\x00', 0x8, 0x100) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = fcntl$dupfd(r9, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) accept$inet6(0xffffffffffffffff, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x80001d00c0d0) [ 1146.667455] binder: release 5147:5151 transaction 36 out, still active [ 1146.677455] binder: undelivered TRANSACTION_COMPLETE [ 1146.700198] binder: send failed reply for transaction 36, target dead 00:19:05 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$binfmt_script(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240)='security.selinux\x00', 0x0, 0x0, 0x0) close(0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="e4010000", @ANYRES16=r2, @ANYBLOB="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"], 0x1e4}, 0x1, 0x0, 0x0, 0x4000000}, 0x2) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000340), 0x2}, 0x0, 0x200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000480)=ANY=[], 0x0, 0xfffffffffffffffb) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086602, 0x400007) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x20032600) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r5, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) sync() write$selinux_context(0xffffffffffffffff, &(0x7f00000002c0)='system_u:object_r:klogd_var_run_t:s0\x00', 0x25) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) execve(0x0, &(0x7f00000003c0)=[0x0, &(0x7f0000000a40)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac'], &(0x7f0000001ac0)=[&(0x7f0000002100)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', &(0x7f0000001440)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfE\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\x06\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', &(0x7f0000001240)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a', 0x0]) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r6, &(0x7f00000017c0), 0x3a8, 0x7a) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r7, &(0x7f0000000740)=ANY=[@ANYBLOB="00e760008082515699ce645817fdd5d0380acbbc22a0dded51bcfa600e0eff4cc1b7134bb5dfa5ef6ea91df572731d4d88901e911800"/63], 0x6) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x3000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000425bd7000fbdbdf250d0000002800070008000100ff03000008000200ffffffff0c00040003000000000000000800010000000080"], 0x3c}}, 0x4000) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000005c0)={0x118, r8, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x38, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x4008000}, 0x60000000) sendmsg$TIPC_NL_LINK_RESET_STATS(r6, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0xc0, r8, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xdc53}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xdc90}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800000}]}, @TIPC_NLA_LINK={0x60, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa6dd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 00:19:05 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000100)=@md5={0x1, "0a64aba0113e6ed00250bfdbcd1ba676"}, 0x11, 0x2) setsockopt$inet6_int(r2, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x35) wait4(0x0, 0x0, 0x0, 0x0) 00:19:05 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r2, 0x0, 0x0, 0x0, 0x0) 00:19:05 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') socket$nl_xfrm(0x10, 0x3, 0x6) 00:19:05 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r2, 0x0, 0x0, 0x0, 0x0) 00:19:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) write$P9_RMKNOD(r1, &(0x7f00000000c0)={0x14, 0x13, 0x2, {0x44, 0x4, 0x1}}, 0x14) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pwrite64(r1, &(0x7f0000000100)="e6d549438e77b3f63a0ba3780ff1475de80048036eccacd1071dae80207ff986c61fb6da3a84eb932bc22d6e17021929114f73b4471c571e218754eec520e78017410f8bf0b53eac3120368dc126071186bb6929687cfe4dd1d25fc5f7d010de4ca82968a51e85b971ed9d31e26ac8f839d7c06587f7f769123db6f3825baaef43d306fd81f2a3bfdb12e51ad0aa2f3dd0dff3b96c37318f60ea943a8449be985cd75584ada56051b3144834c6eeef81fc9e11a4e07de75fbbaa3edd89", 0xbd, 0x8) r2 = gettid() setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000240)=@req3={0x403, 0xfffff55c, 0x5, 0xffffffff, 0x4, 0x7, 0xfffffffe}, 0xd) tkill(r2, 0x35) wait4(0x0, 0x0, 0x0, 0x0) 00:19:05 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') 00:19:05 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x37, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000480)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000001000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r1], 0x4}}, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 1146.791387] binder: release 5161:5163 transaction 38 out, still active [ 1146.812820] binder: undelivered TRANSACTION_COMPLETE [ 1146.833968] binder: send failed reply for transaction 38, target dead 00:19:05 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) [ 1146.933365] binder: release 5181:5183 transaction 40 out, still active [ 1146.953086] binder: undelivered TRANSACTION_COMPLETE [ 1146.990274] binder: send failed reply for transaction 40, target dead 00:19:05 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 1147.068647] binder: release 5187:5189 transaction 42 out, still active [ 1147.076168] binder: undelivered TRANSACTION_COMPLETE 00:19:05 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x800000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000580)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}, 0x800}], 0x1, 0x0, 0x0) r3 = socket(0xa, 0x80001, 0x37) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0) dup2(r4, r4) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = dup2(r4, r6) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, {0x8, 0x1, r7}}}}]}, 0x38}}, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00') ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r8}) r9 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r8, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r9, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x2000c00a) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r9, 0x300, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x804) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r9, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r9, 0x904, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x514, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x44085) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r9, 0x400, 0x70bd27, 0x25dfdbfe, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x67, @link='broadcast-link\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x1004c010}, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r12 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r12, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) [ 1147.116104] binder: send failed reply for transaction 42, target dead 00:19:05 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) [ 1147.192765] binder: release 5193:5195 transaction 44 out, still active [ 1147.201242] binder: undelivered TRANSACTION_COMPLETE [ 1147.233161] binder: send failed reply for transaction 44, target dead [ 1147.278061] binder: release 5198:5200 transaction 46 out, still active [ 1147.294256] binder: undelivered TRANSACTION_COMPLETE [ 1147.335087] binder: send failed reply for transaction 46, target dead 00:19:06 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)) [ 1147.747766] binder: release 5215:5216 transaction 48 out, still active [ 1147.754823] binder: undelivered TRANSACTION_COMPLETE [ 1147.760392] binder: send failed reply for transaction 48, target dead 00:19:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x44103200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_int(r2, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x35) wait4(0x0, 0x0, 0x0, 0x0) 00:19:08 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) syz_read_part_table(0x100000000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6636c7efffa80c6a172d6be1bfc947d1a8c40b0df4fcc9ff3d79bf3919959c6581bad5145619508295c86dbf93987c0888d587d6f76caf8d6ce502034f639089e8fc4c33904a9c4f5715bf1ff73e2242df01afc8f37dd8702c14bd0342030e9e3fdb45ba983a737730eac5ae02f", 0x6e, 0x800}]) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r4, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40042409, 0x0) sendfile(r0, r3, 0x0, 0x800000000024) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x0) 00:19:08 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' @\x00\x00', @ANYRES16=r3, @ANYBLOB="00002abd70000000000010000000080004000000000004000100"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000080}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:08 executing program 1: r0 = socket(0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) getsockname(r0, &(0x7f00000001c0)=@rc, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x100000000000a, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000081, 0x24200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000500)) unshare(0x40000000) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f0000000400)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x200004) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/member\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x8) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r4, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000400)={0x3, 0x70, 0xff, 0x2, 0x80, 0x5, 0x0, 0x3f, 0x2, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000300)}, 0x401, 0x3, 0x4, 0x1ee359efeb30fd48, 0x1000, 0x4630, 0x7a2b}) r5 = socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8923, &(0x7f0000000200)={'ip_vti0\x00', 0x3001}) write$selinux_attr(r3, &(0x7f0000000180)='system_u:object_r:pinentry_exec_t:s0\x00', 0x25) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r6, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$TIOCGLCKTRMIOS(r6, 0x5456, &(0x7f0000000040)={0x8, 0x200, 0x6, 0xbe2b, 0xa, 0x5, 0x1f, 0x7, 0x2, 0x6, 0x5, 0x8}) 00:19:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x35) wait4(0x0, 0x0, 0x0, 0x0) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) 00:19:08 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) 00:19:08 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {@in6=@rand_addr="dd37514e9e68be47ed580500000043fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f00000000c0)={0x3, 0x9, 0x64, 0x4, 0x81}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r4, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:08 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) [ 1149.846900] binder: release 5222:5223 transaction 50 out, still active [ 1149.863646] binder: undelivered TRANSACTION_COMPLETE [ 1149.901930] binder: send failed reply for transaction 50, target dead [ 1149.928733] binder: release 5237:5239 transaction 52 out, still active 00:19:08 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) [ 1149.951575] binder: undelivered TRANSACTION_COMPLETE 00:19:08 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) [ 1149.993469] binder: send failed reply for transaction 52, target dead 00:19:08 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000000c0)={0x3, 0x9}, 0xc) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:08 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 00:19:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_int(r2, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x35) wait4(0x0, 0x0, 0x0, 0x0) 00:19:09 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) syz_read_part_table(0x100000000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000140)="e6636c7efffa80c6a172d6be1bfc947d1a8c40b0df4fcc9ff3d79bf3919959c6581bad5145619508295c86dbf93987c0888d587d6f76caf8d6ce502034f639089e8fc4c33904a9c4f5715bf1ff73e2242df01afc8f37dd8702c14bd0342030e9e3fdb45ba983a737730eac5ae02f", 0x6e, 0x800}]) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r4, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40042409, 0x0) sendfile(r0, r3, 0x0, 0x800000000024) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x0) 00:19:09 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000001ffc382ebd5e5bc53ab81262c0e6657c9145d1296714af248d32825ef82b6734e5a38b13b2a46b2896069e668e8af31c3e8132551000381668850a81eeb9a2f641de9e0242cef3fe27cf3d66e7e95c0ad3e1ef88e12f7a1d12d335f13fb31f86c7f35eba437b058cc620229d7839683afcd80a204fc04a0242b49ff12289013cbf84707dc92051a5b19b1c7aa64501f2ec145d5db86598e85d7ee97c8cc1a2d7bc47c3bb8c96e466d3ba2aedf6639bc5228b0e1b3140c6c0f8cd6dceece8dc3ff9c7927d6b2bcdceb6b7fb4fccbc00"/236], 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x7a) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f00000000c0)={@dev={0xac, 0x14, 0x14, 0x1f}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x18}}, 0xc) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:19:09 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$RTC_UIE_OFF(r2, 0x7004) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r3, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$KIOCSOUND(r3, 0x4b2f, 0x2) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r4, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:09 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 00:19:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12fb17) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x35) wait4(0x0, 0x0, 0x0, 0x0) 00:19:09 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xfffffffffffffd91) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x4000, 0x0) setsockopt$inet6_int(r2, 0x29, 0xd2, 0x0, 0xfffffffffffffd30) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x35) wait4(0x0, 0x0, 0x0, 0x0) 00:19:09 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_int(r2, 0x29, 0x3, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0xa) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x35) wait4(0x0, 0x0, 0x0, 0x0) 00:19:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x35) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ptrace(0x11, r1) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) wait4(0x0, 0x0, 0x0, 0x0) [ 1150.772310] binder: 5283:5286 transaction failed 29189/-22, size 112-24 line 3138 00:19:09 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) [ 1150.833551] binder: undelivered TRANSACTION_ERROR: 29189 [ 1150.902045] binder: 5302:5304 transaction failed 29189/-22, size 112-24 line 3138 00:19:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) quotactl(0x0, &(0x7f0000000040)='./file0\x00', r3, &(0x7f0000000240)="27c7d97210ff2e33030d8823aaa7f12ecafec3af59") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0, 0x0}, &(0x7f00000006c0)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000400)='./file1\x00', &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000700)=ANY=[@ANYRES32=0xee01, @ANYBLOB, @ANYRES32, @ANYBLOB="02", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32=r4, @ANYBLOB, @ANYRES32, @ANYRESDEC], 0xb, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0, 0x0}, &(0x7f00000006c0)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000400)='./file1\x00', &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000700)=ANY=[@ANYRES32=0xee01, @ANYBLOB, @ANYRES32, @ANYBLOB="02", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32=r5, @ANYBLOB, @ANYRES32, @ANYRESDEC], 0xb, 0x0) getgroups(0x6, &(0x7f0000000040)=[0xee01, r4, 0xee01, r5, 0xee00, 0xee00]) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) quotactl(0x0, &(0x7f0000000040)='./file0\x00', r7, &(0x7f0000000240)="27c7d97210ff2e33030d8823aaa7f12ecafec3af59") write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000100)={0x80, 0x7d, 0x0, {{0x0, 0x5a, 0x4, 0x2, {0x10, 0x1, 0x6}, 0x100000, 0xff, 0x3, 0xefa, 0x0, '', 0x23, 'wlan1security#self.]em0\\(eth1)eth1-', 0x4, 'ppp1'}, 0x11, 'keyringwlan1[ppp1', r3, r6, r7}}, 0x80) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x800) 00:19:09 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) [ 1150.962057] binder: undelivered TRANSACTION_ERROR: 29189 00:19:09 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x7a) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') listxattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000000240)=""/234, 0xea) preadv(r3, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$PPPIOCSMRRU(r3, 0x4004743b, &(0x7f0000000100)=0x8c2) ioctl$TIOCLINUX6(r2, 0x541c, &(0x7f0000000000)={0x6, 0x41}) r4 = open(&(0x7f0000000140)='./file1\x00', 0x40000, 0x80) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="38010000100001030000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r5, &(0x7f00000000c0)={0x10000000}) execveat(r4, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) getpid() [ 1151.059332] binder: 5316:5318 transaction failed 29189/-22, size 112-24 line 3138 [ 1151.100630] binder: undelivered TRANSACTION_ERROR: 29189 [ 1151.191119] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. 00:19:10 executing program 3: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext, 0x0, 0x100000000000}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) getegid() request_key(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000180)={{0x4, 0x0, @reserved="6898d70ebc44c030cbe81c64c9bf30533c49cce3dae0355d85c669fe0c0a2465"}}) writev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x80080, 0x0) syz_genetlink_get_family_id$tipc(0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="ab5b1c", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) fadvise64(r1, 0x4, 0x3, 0x0) pivot_root(0x0, &(0x7f0000000100)='./file0\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) ioctl$TUNSETOWNER(r2, 0x400454cc, r3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) 00:19:14 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000001ffc382ebd5e5bc53ab81262c0e6657c9145d1296714af248d32825ef82b6734e5a38b13b2a46b2896069e668e8af31c3e8132551000381668850a81eeb9a2f641de9e0242cef3fe27cf3d66e7e95c0ad3e1ef88e12f7a1d12d335f13fb31f86c7f35eba437b058cc620229d7839683afcd80a204fc04a0242b49ff12289013cbf84707dc92051a5b19b1c7aa64501f2ec145d5db86598e85d7ee97c8cc1a2d7bc47c3bb8c96e466d3ba2aedf6639bc5228b0e1b3140c6c0f8cd6dceece8dc3ff9c7927d6b2bcdceb6b7fb4fccbc00"/236], 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x7a) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f00000000c0)={@dev={0xac, 0x14, 0x14, 0x1f}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x18}}, 0xc) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:19:14 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 00:19:14 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfe, 0x400}, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r3, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:14 executing program 3: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = gettid() ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x1c) pipe2(&(0x7f0000000200), 0x0) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x3}, @IFLA_NET_NS_PID={0x8, 0x13, r1}]}, 0x30}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x20000, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/status\x00', 0x0, 0x0) open(0x0, 0x0, 0x0) 00:19:14 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, 0x0) symlink(&(0x7f00000001c0)='.\x00', &(0x7f00000003c0)='./file0/../file0/file0\x00') r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000200)='./file0\x00', 0x4000300) umount2(&(0x7f0000000080)='./file0/../file0/file0\x00', 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$inet6_int(r2, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x35) wait4(0x0, 0x0, 0x0, 0x0) 00:19:14 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@loopback, 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_int(r1, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x35) wait4(0x0, 0x0, 0x0, 0x0) 00:19:14 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/rt6_stats\x00') r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000640)=""/246) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) clock_gettime(0x0, &(0x7f0000004940)={0x0, 0x0}) recvmmsg(r4, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)=""/146, 0x92}, {&(0x7f0000000340)=""/249, 0xf9}, {&(0x7f0000000440)=""/215, 0xd7}, {&(0x7f0000000540)=""/192, 0xc0}], 0x4, &(0x7f00000001c0)=""/39, 0x27}, 0x3}, {{&(0x7f0000000740)=@x25={0x9, @remote}, 0x80, &(0x7f0000000600)=[{&(0x7f00000007c0)=""/189, 0xbd}], 0x1}, 0x6}, {{&(0x7f0000000880)=@can, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000940)=""/63, 0x3f}, {&(0x7f0000000980)=""/205, 0xcd}, {&(0x7f0000000a80)=""/141, 0x8d}, {&(0x7f0000000b40)=""/184, 0xb8}], 0x4, &(0x7f0000000c40)=""/160, 0xa0}, 0x3c}, {{&(0x7f0000000d00)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000d80)}, {&(0x7f0000000dc0)=""/164, 0xa4}, {&(0x7f0000000e80)=""/132, 0x84}, {&(0x7f0000000f40)=""/4096, 0x1000}], 0x4, &(0x7f0000001f80)=""/52, 0x34}, 0x8001}, {{&(0x7f0000001fc0)=@ax25={{0x3, @default}, [@rose, @bcast, @remote, @null, @netrom, @netrom, @bcast]}, 0x80, &(0x7f0000003140)=[{&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000003040)=""/214, 0xd6}], 0x2, &(0x7f0000003180)=""/132, 0x84}, 0x9}, {{&(0x7f0000003240)=@in6, 0x80, &(0x7f00000046c0)=[{&(0x7f00000032c0)=""/63, 0x3f}, {&(0x7f0000003300)=""/115, 0x73}, {&(0x7f0000003380)=""/4096, 0x1000}, {&(0x7f0000004380)=""/109, 0x6d}, {&(0x7f0000004400)=""/232, 0xe8}, {&(0x7f0000004500)=""/3, 0x3}, {&(0x7f0000004540)=""/22, 0x16}, {&(0x7f0000004580)=""/199, 0xc7}, {&(0x7f0000004680)=""/38, 0x26}], 0x9, &(0x7f0000004780)=""/3, 0x3}, 0x9}], 0x6, 0x40000000, &(0x7f0000004980)={r5, r6+10000000}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1156.327643] binder_alloc: 5572: binder_alloc_buf, no vma [ 1156.345271] binder: 5572:5580 transaction failed 29189/-3, size 112-24 line 3284 00:19:14 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 00:19:14 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x100000001) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000000000)='.\x00', 0x0, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x7a) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x1000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) tee(r3, r4, 0x1, 0x8) [ 1156.390383] binder: undelivered TRANSACTION_ERROR: 29189 00:19:15 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x121200, 0x0) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x16f000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r3, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) [ 1156.476915] binder_alloc: 5601: binder_alloc_buf, no vma [ 1156.503679] binder: 5601:5604 transaction failed 29189/-3, size 112-24 line 3284 00:19:15 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) [ 1156.533722] binder: undelivered TRANSACTION_ERROR: 29189 00:19:15 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x7a) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r3, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) [ 1156.584134] binder_alloc: 5610: binder_alloc_buf, no vma [ 1156.613902] binder: 5610:5612 transaction failed 29189/-3, size 112-24 line 3284 [ 1156.643798] binder: undelivered TRANSACTION_ERROR: 29189 00:19:15 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000001ffc382ebd5e5bc53ab81262c0e6657c9145d1296714af248d32825ef82b6734e5a38b13b2a46b2896069e668e8af31c3e8132551000381668850a81eeb9a2f641de9e0242cef3fe27cf3d66e7e95c0ad3e1ef88e12f7a1d12d335f13fb31f86c7f35eba437b058cc620229d7839683afcd80a204fc04a0242b49ff12289013cbf84707dc92051a5b19b1c7aa64501f2ec145d5db86598e85d7ee97c8cc1a2d7bc47c3bb8c96e466d3ba2aedf6639bc5228b0e1b3140c6c0f8cd6dceece8dc3ff9c7927d6b2bcdceb6b7fb4fccbc00"/236], 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x7a) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f00000000c0)={@dev={0xac, 0x14, 0x14, 0x1f}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x18}}, 0xc) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:19:15 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 00:19:15 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x480700, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000100)={0x7, 0x1b, 0x2}, 0x7) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r4, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$RTC_VL_CLR(r4, 0x7014) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() setsockopt$inet6_int(r2, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x35) wait4(0x0, 0x0, 0x0, 0x0) 00:19:15 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f00000000c0)='./file1\x00', 0x248140, 0x2) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) capget(&(0x7f0000000180)={0x7ac67d5d8d7fd8c4, r3}, &(0x7f00000001c0)={0x8, 0x0, 0x45fe, 0x0, 0x0, 0x9}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r4, &(0x7f00000017c0), 0x3a8, 0x7a) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000100)) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3b) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r5, 0x0, 0x0) ptrace$pokeuser(0x6, r5, 0xffff, 0x4) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="7365637572697479000000000000000000000e0000000400000098030000f8000000f8000000f800000000000000b8010000000300000003000000030000000300000003000004000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="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"], 0x3f8) 00:19:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window={0x3, 0x8}, @timestamp, @mss={0x2, 0x4}, @sack_perm, @mss={0x2, 0x8}], 0x1ffffffffffffea2) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x35) wait4(0x0, 0x0, 0x0, 0x0) 00:19:15 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 00:19:15 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0x3f) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x6, 0x1, 0x44}}, 0x28) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r5, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$BLKPG(r5, 0x1269, &(0x7f0000000080)={0x6, 0x3, 0xf8, &(0x7f00000001c0)="c251964cb9098820833a2a6c8d5b0be00f7f99a6d2ce12ac5744e125c5afe036e46f32a009379ef43a10af2f54bbb8b8982850ba4d8854cc3dc615fba527609bdc7cfbb3a5ed28342962d611629046a4c8b0326b9fcf2a10c3d3c821089bde6fb1910bcd5d9d23d82539d37afd8936d2e23ae33d5b316660705e9678ab46275fb0ec59608d8d4db1892e9fe532af006fda37447de281e1ae1fdb3f6d92284dd3dadfdee62f2561b7afaf5c78ac25e4c4ff4a820926268bd4891ec2a1e2e16950a7fabb2bcf9c1443f2f1e19c2bab7c3901d410a5e5ce8799380f7c7b3cfd79a9fd51c608227f303aaf6e0a94fe1d885a0479be0a9d36b230"}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r4) close(r2) 00:19:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x35) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)=[&(0x7f00000000c0)='*bdev\x00', &(0x7f0000000100)=']{userem0%\x00', &(0x7f0000000140)='#\x00', &(0x7f0000000180)=')/-cpuset%system\x00', &(0x7f00000001c0)='selfkeyring%proc^&\x00'], &(0x7f00000002c0)=[&(0x7f0000000240)=')\x00', &(0x7f0000000280)='proccpuset\x00']) wait4(0x0, 0x0, 0x0, 0x0) 00:19:15 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="380100392ce5c467c7b4e30000000000ffffffff000000000000fbff00000000fe8000000000000000000000000000bb000000004e2400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="dd37514e9e68be47ed58ef35b9f243fd00000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200650000000000000000004800010073686132353600"/240], 0x138}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000280)={0x2000}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r3, &(0x7f00000017c0), 0x2f6, 0x7a) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') lsetxattr$security_smack_transmute(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000340)='0\x06b\xc4', 0x4, 0x1) sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r4, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [{{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x4, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2880}, 0x20004800) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x5) execveat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:15 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 00:19:15 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) setsockopt$inet6_tcp_int(r2, 0x6, 0x7, &(0x7f00000000c0)=0x5, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'aYl\x00\x19\x00\x00v\x00', 0x2}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000040)=""/30) 00:19:15 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 00:19:15 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) setsockopt$inet6_tcp_int(r2, 0x6, 0x7, &(0x7f00000000c0)=0x5, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'aYl\x00\x19\x00\x00v\x00', 0x2}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000040)=""/30) [ 1157.371398] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=58668 sclass=netlink_xfrm_socket pig=5656 comm=syz-executor.5 [ 1157.406597] binder: release 5662:5663 transaction 66 out, still active 00:19:15 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) [ 1157.417103] binder: undelivered TRANSACTION_COMPLETE [ 1157.443645] binder: send failed reply for transaction 66, target dead [ 1157.465510] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=58668 sclass=netlink_xfrm_socket pig=5656 comm=syz-executor.5 00:19:18 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) finit_module(r1, &(0x7f0000000000)='\\[%\x00', 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000), 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_int(r2, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x35) wait4(0x0, 0x0, 0x0, 0x0) 00:19:18 executing program 3: r0 = creat(0x0, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001440)=ANY=[@ANYBLOB], 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) prlimit64(r1, 0xd, &(0x7f00000000c0)={0x7fff, 0x8d}, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) accept$unix(r0, &(0x7f0000000380)=@abs, &(0x7f0000000040)=0x6e) recvmmsg(r2, &(0x7f00000006c0)=[{{&(0x7f0000000140)=@nfc, 0x80, 0x0, 0x0, &(0x7f0000000440)=""/161, 0xa1}, 0x397}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) shutdown(0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet(0x2, 0x4000000000000001, 0x0) socket(0x10, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) chown(&(0x7f00000001c0)='./file0\x00', r5, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005a00)=[{{&(0x7f0000000140)={0x2, 0x4e20, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB], 0x10}}], 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) accept4(r6, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005a00)=[{{&(0x7f0000000140)={0x2, 0x4e20, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYRES16=r6], 0x2}}], 0x1, 0x4000000) fstat(0xffffffffffffffff, &(0x7f00000002c0)) setsockopt$sock_cred(r3, 0x1, 0x11, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{0x0, 0x0, 0x400}], 0x4801, 0x0) 00:19:18 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x400) 00:19:18 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) setsockopt$inet6_tcp_int(r2, 0x6, 0x7, &(0x7f00000000c0)=0x5, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'aYl\x00\x19\x00\x00v\x00', 0x2}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000040)=""/30) 00:19:18 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 00:19:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x35) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)=0x0) prlimit64(r3, 0x4, 0x0, &(0x7f00000000c0)) wait4(0x0, 0x0, 0x0, 0x0) 00:19:18 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r3, &(0x7f00000017c0), 0x3a8, 0x7a) connect$inet6(r3, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000240)={{0x3, 0x1, 0x3, 0x3, 0x8}, 0x6, 0xa6, 'id1\x00', 'timer0\x00', 0x0, 0x8001, 0x5, 0x9, 0x6}) r4 = gettid() setsockopt$inet6_int(r2, 0x29, 0x3, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0, 0x0}, &(0x7f00000006c0)=0xc) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='./file1\x00', &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f00000008c0)=ANY=[@ANYRES32=r6, @ANYRESDEC=r5, @ANYRES32, @ANYRES16=r1, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYRES32=r3], @ANYBLOB, @ANYRES32, @ANYPTR=&(0x7f0000000840)=ANY=[@ANYRES64=r7, @ANYRESHEX=r5, @ANYRESOCT=r8, @ANYPTR=&(0x7f00000007c0)=ANY=[@ANYRESHEX], @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRES32=r9], @ANYRESDEC=0x0], @ANYBLOB, @ANYRES32=0x0, @ANYRESDEC], 0xb, 0x2) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0, 0x0}, &(0x7f00000006c0)=0xc) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='./file1\x00', &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000500)=ANY=[@ANYRES32=0xee01, @ANYPTR64=&(0x7f0000000480)=ANY=[@ANYPTR=&(0x7f0000000340)=ANY=[@ANYRES16, @ANYPTR64, @ANYPTR, @ANYBLOB="ae8b1090f118b37c3d24374aca39fe9edf6f3235b201f419a9019c29fed840c2145e9ba70d3a9e8ad3376755bca1f353e4d7be1fc607f5ee0d6634c162e7dc4f0c9a56b9dfdfb98fe41a3a426994d2d5d5ae0c342240", @ANYRES64, @ANYBLOB="b70603a0efaf2018b75a1ea00f67e1336ae7fd37c41d859647c826cb1c55b63c5855b85936f6dcada6b52ba8e0", @ANYRESHEX=r12], @ANYRES32=r13, @ANYPTR64, @ANYPTR], @ANYRES32, @ANYBLOB="02", @ANYRES32, @ANYRESOCT=r5, @ANYRES32, @ANYRES32=r11, @ANYBLOB, @ANYRES16, @ANYRESDEC], 0xb, 0x0) setresgid(r5, r10, r11) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x35) wait4(0x0, 0x0, 0x0, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f00000000c0)=""/123) 00:19:18 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000003c0)=0x0) fcntl$setstatus(r0, 0x4, 0x44800) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)={0x0, r3}) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.swap.current\x00', 0x0, 0x0) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x7}, 0x8) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='sockfs\x00N\xa4\xa23\xc7tG\x89C\x81\xe3\xa99LO\xfb%\x1e\xc8\xf4\x1a\x00h\xb9\xaa\x98\xa7\x9b4)(#+\xb0h\xe7P\x0e\xa3\xbf\xdf#k*h\xba\xe7\xbb\x1eC9\xd9\x8b\x91A\x8c\xa1\xbf\xcc\xc9+\xact\xaas7\xb9x\xcf\xad\xbb\xf2\xbc.\x18\xc0\xf4#\x92\xbe\xd8oLv\x85\xab\xbf\x93\xfb\x02\xf3\xd0\x91\x884\xb6\x9b[xUe\xfc\x90\b\xad\xb6\xec%\xd4\xf9hP?\x17\x1c\xec\xf9\xfd\t\x98\xb34\x98}\xf2R >\x9fcH\x85q\x13\xc4?\xb1\xfa\xb0\xab\x81H\xc9\x7f\x15\xc0\xa0\xf4u\x1bQ\xe0\ry{\xac\xb9\xba;\x00\r1o\xa2R\x920\xa5XrkgTd\xd7\x7fS\xce\xb8\xa7c\xd5\x18q\xeb\x98\xe9\x8c\x15\xb2\xbc\xac:f;\x9f4\r\xc1\xf5]\xbfa\xe0BNr\xbd\xe6w\xdc\'=\xbb\x85\x9e\xbd\x17\x0ee\xa3L\xc6.\x19\x8eu \xef*\x13G\xddG\x15\x81\x89\x1eZ(\x93\x89(\xbf\xe8n\xe3\xfc\xa5\x01h\xda\x05\xb0b\xeb\xa0\xf7\x9b?/\xe6\x16\x06U\xf0P\x10n\x1e\xdfN\x9a\x9b\xda\x9a\x0e\xacS\x12\xcd)\xf0\x01X\xf8\f(\x89[Td\xbf\xa3\xf4\x8b\x7fkk=\xed\xa3\xe7\xc0\xc0~\xbd\v\xae\xb6\x94\x0e\xe2\xbc)LG\xba\xafI\xa9J\'36\xd7\xba\x0e8\xf3\xe6', 0x0, 0x0) 00:19:18 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x24400, 0x0) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) r3 = getpid() tkill(r3, 0x39) 00:19:18 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 00:19:18 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) setsockopt$inet6_tcp_int(r2, 0x6, 0x7, &(0x7f00000000c0)=0x5, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'aYl\x00\x19\x00\x00v\x00', 0x2}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000040)=""/30) 00:19:18 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$smack_task_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400203) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') setns(r2, 0x0) 00:19:18 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 00:19:19 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_buf(r3, 0x107, 0x6, &(0x7f0000000200)="63a8f87d73497f4b5f271ee8fa6d55a5b57cf68fffd4a342373ea71a189f6a11cdd0ebc245f427528247d9f4f7f1a5d2c1b40007fc7de311c73656ea45e3d62a3efbb593005fd35b9c6de147c2f3091d475b6631b1ad780e888a06904a5c77769e6a7798f9f624d9540aa2bafcd589645bd5b6e79931fd8343f17fde435855dfbc337015079254cd13cd1d5f2747df7af6eff0fbf89976a189793e5f5a81a3a91fe61f13d08398d0cc0efc0776634d5b5b6044507bc605054cbfc2a5dec53df2549930d4c66bc1366b55e1c02d5eb1b66e3451629c2231abf082fd16b399", 0xde) fcntl$lock(r4, 0x10000000000025, &(0x7f0000000040)={0x1}) close(r4) accept4$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r7 = dup(r6) setsockopt$inet_int(r7, 0x0, 0xa, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x7, 0x4, 0x480, 0x140, 0x0, 0x0, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000400), {[{{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @dev={0xac, 0x14, 0x14, 0x1e}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x1f}, @multicast2, 0xffffffff, 0xffffff00, @empty, {[0x291c6316feb156cf, 0x0, 0xff, 0x0, 0x0, 0xff]}, @mac=@dev={[], 0x16}, {[0xff, 0x0, 0xff, 0xff, 0xff]}, 0x80, 0x9, 0x81, 0x8, 0x0, 0x9, 'veth0_to_team\x00', 'hsr0\x00', {}, {}, 0x0, 0x80}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={[], 0x2b}, @empty, @dev={0xac, 0x14, 0x14, 0x13}, @multicast1, 0x9, 0x1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x0) write$cgroup_subtree(r8, 0x0, 0x0) r9 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r8, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="30000400", @ANYRES16=r9, @ANYBLOB="dba226bd7000fbdbdf2501000000000000000941000000140018000000047564703a73797a3100000000"], 0x30}}, 0xe6cdd00eaebf97c) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x8000) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044}, 0x400c010) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r5, 0x0, 0x30005, 0x0) 00:19:19 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x0) r2 = creat(&(0x7f00000001c0)='./file1\x00', 0x2143fba272b6e7cb) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) getsockopt$inet_buf(r3, 0x0, 0x24, &(0x7f0000000140)=""/29, &(0x7f0000000180)=0x1d) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r5, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:19 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)={'#! ', './file0', [{}, {0x20, 'eth0(-@'}, {0x20, '\xa2)cpuset'}, {0x20, 'cgroup'}, {0x20, '{em1/^}ppp1[GPL,mime_type*\xf8,'}, {0x20, 'vboxnet0trusted%em1selfem1.+*'}, {0x20, '%[/eth0security'}, {0x20, '!'}], 0xa, "29f37a3e5d48a8643a23f443eb1d707cf22ef28d371a8181f76051e9a3d3b2bc87e91033969337cb2988ed56c07b95370ae7b93dd696794dd64e0e2ea387bdb763a8045ca393df9e02c139acd0a65e2c41eb7e44048f9adf0d412d70eb34e28a6843f2c8f481b6b41abdace551b726ad4392c9ba4cd393f178655714cdf79285d65460b32dedaa65a1df8253fd6e90942dad329eb55624fb05012813c495aa50219e76baae44a22fcc1b6c30beda0e02f37946fa4120a9010c72b8672a2e0c842dc0ab340382f644ae0152b7970fb3d89987f8f8306c86b43f83a1ea6e2f3cd538cb8e3f268c58c16e65f7a2dbf0c0"}, 0x160) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0xffffffffffffff69) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0), 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() setsockopt$inet6_int(r3, 0x29, 0x3, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r6, &(0x7f00000017c0), 0x3a8, 0x7a) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000000580)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}, 0x800}], 0x1, 0x0, 0x0) r9 = socket(0xa, 0x80001, 0x37) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0) dup2(r10, r10) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = dup2(r10, r12) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, {0x8, 0x1, r13}}}}]}, 0x38}}, 0x0) r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00') ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r14}) r15 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r14, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r15, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x2000c00a) sendmsg$TIPC_CMD_SHOW_STATS(r13, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r15, 0x300, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x804) sendmsg$TIPC_CMD_SHOW_PORTS(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r15, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r8, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r15, 0x904, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x514, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x44085) sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r15, 0x2b7f7e06ba348494, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x4048091) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x35) setsockopt$inet6_tcp_buf(r3, 0x6, 0x8, &(0x7f00000000c0)="c74ea94675e0a784e7ca758b5f360616d0a697d44eae86bc1326186b3a3ba5cb9e41e4c9a7a8cb541f7554cc1456b913546bd426f1da2d9ca41fbab04129e09542c63e167d44dce711aeda22f7fd2a5aed119e6c62841f05eec5dcc23aecd6ace3a44dd7336fd2c178b61f93515f8eb14c8272902443cb8f79", 0x79) wait4(0x0, 0x0, 0x0, 0x0) [ 1160.476000] binder_alloc: 5712: binder_alloc_buf, no vma [ 1160.517888] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=26159 sclass=netlink_xfrm_socket pig=5724 comm=syz-executor.2 [ 1160.580430] binder: 5712:5715 transaction failed 29189/-3, size 112-24 line 3284 [ 1160.594659] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=26159 sclass=netlink_xfrm_socket pig=5738 comm=syz-executor.2 [ 1160.638607] binder: undelivered TRANSACTION_ERROR: 29189 00:19:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x7) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x35) wait4(0x0, 0x0, 0x0, 0x0) 00:19:21 executing program 3: syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xff4a) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000040), 0x14) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000480), 0x4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:19:21 executing program 5: socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) syz_read_part_table(0x800, 0x0, 0xffffffffffffffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) fdatasync(r3) openat$selinux_access(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/access\x00', 0x2, 0x0) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:21 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 00:19:21 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_int(r2, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x35) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="489440abc06d376430f83b39f3763cd10b4e2b320923c623d8badd513313c774c218b4b0a3e6d8c6f9930bb45ec724bbea072f9019e5345144ab77613d06762f71fc706e2f88d954f741651e7c8d7392eca1406e33ed5941f4365e127d2525ad16", 0x61}, {&(0x7f00000001c0)="fdfb1ff1bc926e25c4e71d3bb62d4b888212608a3b049ca2205da41653678ac19cd8009c86b87ae7a30d12a73b73028c5c7fc7d91ec0cf45f5df66584f57a8b0696547d2df71e5a4215d3f9c47b2d5af4288ea65f5ed554d8080b0cc793f70f08aeb0ab9ff05f464f4868032168c432d6ec6399c098807a442b87e0ec5da5e28d8651c3318017a8074b5eee3d1a7d8ed0e29ce2e1ce6904648f2022c75166647c7932f45c3b46cb44d6d444ae5d4a64fde7cea14638c3937e65ebc85eda5973c7ec2e60768e5f139113307daef91407c", 0xd0}, {&(0x7f0000000000)="524dbccae6fa7c48b6fa04e3a1be9174", 0x10}, {&(0x7f00000002c0)="af34e3998539871657d145991f31d7dd79735987aaef1f31e9a37bb84775e36f20a77d5067830b70d3e216d31a07995589a4b358de836c6e43f65f24105200f4530d1df4051c7cc0c793556f860151f2c27a2d9c07ccfe6f515df584776c7788af2b92441745c1d5a287c547261b80c5450fcce2f3b66603c27b523ab58edf7a18c9a11d93", 0x85}], 0x4}, 0x2004002c) wait4(0x0, 0x0, 0x0, 0x0) 00:19:21 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_buf(r3, 0x107, 0x6, &(0x7f0000000200)="63a8f87d73497f4b5f271ee8fa6d55a5b57cf68fffd4a342373ea71a189f6a11cdd0ebc245f427528247d9f4f7f1a5d2c1b40007fc7de311c73656ea45e3d62a3efbb593005fd35b9c6de147c2f3091d475b6631b1ad780e888a06904a5c77769e6a7798f9f624d9540aa2bafcd589645bd5b6e79931fd8343f17fde435855dfbc337015079254cd13cd1d5f2747df7af6eff0fbf89976a189793e5f5a81a3a91fe61f13d08398d0cc0efc0776634d5b5b6044507bc605054cbfc2a5dec53df2549930d4c66bc1366b55e1c02d5eb1b66e3451629c2231abf082fd16b399", 0xde) fcntl$lock(r4, 0x10000000000025, &(0x7f0000000040)={0x1}) close(r4) accept4$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r7 = dup(r6) setsockopt$inet_int(r7, 0x0, 0xa, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x7, 0x4, 0x480, 0x140, 0x0, 0x0, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000400), {[{{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @dev={0xac, 0x14, 0x14, 0x1e}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x1f}, @multicast2, 0xffffffff, 0xffffff00, @empty, {[0x291c6316feb156cf, 0x0, 0xff, 0x0, 0x0, 0xff]}, @mac=@dev={[], 0x16}, {[0xff, 0x0, 0xff, 0xff, 0xff]}, 0x80, 0x9, 0x81, 0x8, 0x0, 0x9, 'veth0_to_team\x00', 'hsr0\x00', {}, {}, 0x0, 0x80}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={[], 0x2b}, @empty, @dev={0xac, 0x14, 0x14, 0x13}, @multicast1, 0x9, 0x1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x0) write$cgroup_subtree(r8, 0x0, 0x0) r9 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r8, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="30000400", @ANYRES16=r9, @ANYBLOB="dba226bd7000fbdbdf2501000000000000000941000000140018000000047564703a73797a3100000000"], 0x30}}, 0xe6cdd00eaebf97c) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x8000) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044}, 0x400c010) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r5, 0x0, 0x30005, 0x0) 00:19:21 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) openat$selinux_context(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/context\x00', 0x2, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r2, &(0x7f0000000200)='.\x00', 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000100)={'batadv0\x00', {0x2, 0x4e20, @empty}}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r4, &(0x7f00000017c0), 0x3a8, 0x7a) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r5, &(0x7f00000017c0), 0x3a8, 0x7a) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r6) [ 1163.419589] binder_alloc: 5751: binder_alloc_buf, no vma [ 1163.454258] binder: 5751:5759 transaction failed 29189/-3, size 112-24 line 3284 00:19:22 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) [ 1163.479070] binder: undelivered TRANSACTION_ERROR: 29189 00:19:22 executing program 3: syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xff4a) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000040), 0x14) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000480), 0x4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:19:22 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x0, 0x1, 0x80, 0x2, 0x4}}) preadv(r1, &(0x7f00000017c0), 0x3a8, 0x7a) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r3, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x222) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = open(&(0x7f0000000180)='.\x00', 0x5a5880, 0x8) execveat(r4, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000140)={'caif0\x00', 0x1}) [ 1163.564248] binder_alloc: 5774: binder_alloc_buf, no vma [ 1163.589598] binder: 5774:5781 transaction failed 29189/-3, size 112-24 line 3284 00:19:22 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 00:19:22 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x10c, 0x10, 0x301, 0x70bd2a, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x3500, 0x2, 0xe5183568c7ca8e65}, [@encap={0x8, 0x4, {0x2, 0x4e22, 0x4e21, @in6=@empty}}]}, 0xfffffffffffffc2f}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f00000000c0)={0x1, [0x0]}) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) [ 1163.618522] binder: undelivered TRANSACTION_ERROR: 29189 [ 1163.707935] binder: 5793:5795 transaction failed 29189/-22, size 112-24 line 3138 [ 1163.751786] binder: undelivered TRANSACTION_ERROR: 29189 00:19:24 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 00:19:24 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x9) preadv(0xffffffffffffffff, &(0x7f0000001280)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x20000000000004}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x7, &(0x7f00000010c0)=0x916, 0x4) sendmmsg(r1, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x10a, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 00:19:24 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r3, &(0x7f00000017c0), 0x3a8, 0x7a) getdents64(r3, &(0x7f00000000c0)=""/157, 0x9d) 00:19:24 executing program 1: socketpair(0x2, 0xa, 0x9, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') setxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f0000000180)=@v2={0x2000000, [{0x8}, {0xf000, 0x1}]}, 0x14, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x40080, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000200)) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000240)={0xe, 0x5, 0x80}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000280)=0x6, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) fremovexattr(r2, &(0x7f00000002c0)=@random={'trusted.', 'ð1\x00'}) r3 = creat(&(0x7f0000000300)='./file0\x00', 0xb0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000340)) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x16834bfd097cb847}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r4, 0x200, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8040001) getcwd(&(0x7f00000004c0)=""/13, 0xd) io_setup(0x9, &(0x7f0000000500)=0x0) io_cancel(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x2, 0xcdf3, r2, &(0x7f0000000540)="804058569b01052d13e37ec117dd6b135b0a58d730eb42a9f3a3863443b9a846b6e258f3528ca536fee0cd3059bd8614e97c73430f98f44a51e3ca1f52a26b87ed107e2b4ab707d67c8e8aff668d9131d872c77fd6d10642956c9457d075bc5dc4d6df9b376178e54021f5", 0x6b, 0x4, 0x0, 0x2, r3}, &(0x7f0000000600)) r6 = request_key(&(0x7f0000000640)='rxrpc_s\x00', &(0x7f0000000680)={'syz', 0x2}, &(0x7f00000006c0)='\x00', 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r6, &(0x7f0000000700)='syzkaller\x00', &(0x7f0000000740)='security.capability\x00') fcntl$dupfd(r0, 0x0, r0) getsockname$packet(0xffffffffffffffff, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000900)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x14, 0x4, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}]}, &(0x7f00000007c0)='syzkaller\x00', 0x5, 0x2e, &(0x7f0000000800)=""/46, 0x41100, 0x2, [], r7, 0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000980)={0x1, 0xc, 0x8, 0xfffffc01}, 0x10}, 0x70) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000a40)='threaded\x00', 0x9) open(&(0x7f0000000a80)='./file0\x00', 0x6000c0, 0x2) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000ac0)) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/vga_arbiter\x00', 0x280000, 0x0) ioctl$TUNSETTXFILTER(r8, 0x400454d1, &(0x7f0000000b40)={0x2, 0x3, [@dev={[], 0xd}, @dev={[], 0x23}, @local]}) r9 = add_key$keyring(&(0x7f0000000b80)='keyring\x00', &(0x7f0000000bc0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$invalidate(0x15, r9) 00:19:24 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f00000000c0)=0x10) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000100)={'filter\x00'}, &(0x7f00000001c0)=0x78) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$inet6_int(r2, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x35) wait4(0x0, 0x0, 0x0, 0x0) 00:19:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x35) wait4(0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r7}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002a80)=@newlink={0x30, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x10, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0x4}}}]}, 0x30}}, 0x0) recvfrom(0xffffffffffffffff, &(0x7f00000000c0)=""/195, 0xc3, 0x20000000, &(0x7f00000001c0)=@hci={0x1f, r5, 0x2}, 0x80) 00:19:25 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000280)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r3, &(0x7f00000017c0), 0x3a8, 0x7a) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRES32], 0xff26) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r5, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)=0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r6, &(0x7f00000017c0), 0x3a8, 0x7a) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {0x0, 0xffffffff}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r8, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$EVIOCGKEY(r8, 0x80404518, &(0x7f0000000540)=""/234) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000300)={0x90000000}) ioctl$int_out(r0, 0x0, &(0x7f0000000040)) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000180)='trusted.overlay.redirect\x00', &(0x7f00000001c0)='./file0\x00', 0x8, 0x2) r9 = getpgid(0x0) ptrace$getregset(0x4204, r9, 0x2, &(0x7f00000002c0)={&(0x7f0000000200)=""/69, 0x45}) 00:19:25 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 00:19:25 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) socket$inet(0x2, 0x80000, 0x80) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f00000002c0)={0xf51, 0x3f, 0x81, 0x4, 0x7}, 0x14) sendmsg$nl_xfrm(r3, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) pipe(&(0x7f0000000240)) creat(&(0x7f0000000300)='./file1\x00', 0x4) fsetxattr$trusted_overlay_upper(r3, &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0xc5, 0x0, 0x7f, "5e8cf1280f9eeb5262bd294eb342f0c0", "e67ed1b63789ffa2b679e8b1ff43c335bb6010872e0be5c4580864d3a5aaea7ff131646a4d930d73ce27eb3f9819b582eb6fb7463bab3037a78dbaa3f7b9b6aea2047e528d207c88a7f73d43c143dd6897b6e6ff7845d05517c4ad5fe1771808276bebe0b33c24af4608fd39a06d05f1495f041480e9090f174aee613e348bcf3de4584e789e39685f83d114d2724fe4a048631c6938a8e58c6b70f8a1f19bc3016c87b5dd443954bc8fe1c029749a7a"}, 0xc5, 0x2) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) [ 1166.454663] binder: 5809:5814 transaction failed 29189/-22, size 112-24 line 3138 [ 1166.477368] binder: undelivered TRANSACTION_ERROR: 29189 00:19:25 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) [ 1166.537733] binder: 5830:5832 transaction failed 29189/-22, size 112-24 line 3138 [ 1166.556580] binder: undelivered TRANSACTION_ERROR: 29189 00:19:25 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 00:19:25 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) socket$inet(0x2, 0x5, 0xff) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000040), 0x4) sendto$inet(r0, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000180), 0x144, 0x0, 0x0, 0xdb) recvmmsg(r0, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000140)=""/43, 0x2b}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/166, 0xa6}], 0x3}}], 0x1, 0x0, 0x0) 00:19:25 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000001c0)={0x200, 0x3090, 0x0, 0x4, 0xf, 0x6, 0x0, 0x5, 0xab, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xb, &(0x7f0000000100)=0xfffffeff, 0x35f) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00') openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:19:25 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 00:19:25 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000002c0)=0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000300)=r2) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) ioctl$UI_SET_PHYS(r4, 0x4008556c, &(0x7f00000000c0)='syz0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) getsockname$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000140)=0x1c) r6 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x400, 0x0) linkat(r6, &(0x7f00000001c0)='./file1\x00', r7, &(0x7f0000000280)='.\x00', 0x0) execveat(r5, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:25 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) [ 1166.813430] binder: 5871:5877 ioctl c0306201 0 returned -14 00:19:27 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f00000000c0)='/selinux/mls\x00', 0x2) fcntl$setsig(r1, 0xa, 0x34) r2 = dup(r0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$inet6_int(r3, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x35) wait4(0x0, 0x0, 0x0, 0x0) 00:19:27 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:27 executing program 3: r0 = memfd_create(0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="465b11fc52af6ef71dfbc8bf930a2ab7e7dddcdbdd62236a7da58e97c9cc6d22adb8812033dfac4249289b434d6d76906b7a49f755ed03e9c788b8bee39f3c66d9a95b387e32ad24c3c1233437c3ac6a93df7d37283a4c4abe38f852a329ed279ea5d9cfa61f94a02121134c2383ab19b93251e26e14c800"/130], 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r1, 0x0) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x7) r3 = socket$inet6(0xa, 0x2, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x80800, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r5 = memfd_create(&(0x7f0000000100)='\x00', 0x2) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, 0x0, 0x24000000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) close(r4) pipe(&(0x7f0000000000)={0xffffffffffffffff}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x7000008, 0x110, r6, 0x3fc56000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCGETX(0xffffffffffffffff, 0x5432, 0x0) 00:19:27 executing program 4: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0x12) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000000c0)) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3b) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3b) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) tkill(r3, 0x7) wait4(0x0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'vxcan1\x00', 0x3}, 0x18) 00:19:27 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 00:19:27 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000001c0)={0x200, 0x3090, 0x0, 0x4, 0xf, 0x6, 0x0, 0x5, 0xab, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xb, &(0x7f0000000100)=0xfffffeff, 0x35f) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00') openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:19:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3b) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) tkill(r2, 0x37) wait4(0x0, 0x0, 0x0, 0x0) 00:19:28 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) [ 1169.503364] binder: 5893:5895 ioctl c0306201 0 returned -14 00:19:28 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000001c0)={0x200, 0x3090, 0x0, 0x4, 0xf, 0x6, 0x0, 0x5, 0xab, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xb, &(0x7f0000000100)=0xfffffeff, 0x35f) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00') openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:19:28 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) socketpair(0x25, 0x5, 0x0, &(0x7f0000001700)) 00:19:28 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1169.593408] binder: 5911:5914 ioctl c0306201 0 returned -14 00:19:28 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:19:31 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="380100001000010300000000a1d6f628c08b79fd4fae517add000000ffffffff000000000000000000000000fe8000000086c5cd58a30c00000000000300000000bb040007557f02c5e0424eb49d550ab72f9178ff000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fb0db4dd37514e9e68be47ed58ef35b9f243fd00000000320000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200650000000000000000004800010073686132353600"/240], 0x108}}, 0x0) fsetxattr$security_evm(r2, &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@md5={0x1, "3a60a8e7512e9ddc9a750a506aefb540"}, 0x6, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r3, &(0x7f00000017c0), 0x3a8, 0x7a) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r4, 0x0, 0x70bd2a, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r5, &(0x7f00000017c0), 0x3a8, 0x7a) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000380)="f2b178ccaf4787d198bc5020e3ddeaa4", 0x10) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000002}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x20040010) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f00000003c0)=""/218) execveat(r6, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:31 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/13, 0xd}], 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0xd3, 0x4) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 00:19:31 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:19:31 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000001c0)={0x200, 0x3090, 0x0, 0x4, 0xf, 0x6, 0x0, 0x5, 0xab, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xb, &(0x7f0000000100)=0xfffffeff, 0x35f) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00') openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:19:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3b) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) ptrace$setopts(0x840c, r2, 0x8000, 0x1) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x35) wait4(0x0, 0x0, 0x0, 0x0) 00:19:31 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0}) 00:19:31 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f00000000c0)="e1f14dc18c2f73d533664ca0649e84e68aa09651ee5a0ae4aebe952d64f0ee1334c25f74889d794cdda6d41c984fed7806a430667c4b512f4f1ea5dfbf660cd20d5a4093b1f69355c8695b1ede2378667176e3f29a6f6a55792e1cc8a48c362f219abd243760cf356a783d481e971a9e5a0a6c802fca914cd572057c5d0ef633b74f81391578e86411a40834503b4c2481f9e9e9779f1d53e0c61c44f37eaf1bd8422534e5a43ef2582c233ac830728a9f8560343cdc3c2a6139458ccfc7c68690407f9f9d0dd6e4668159ffc2caebbb55b623ae55640a30c98da12d9de0834e324ad156d4", 0xe5, r0}, 0x68) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r1, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:31 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0}) 00:19:31 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000001c0)={0x200, 0x3090, 0x0, 0x4, 0xf, 0x6, 0x0, 0x5, 0xab, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xb, &(0x7f0000000100)=0xfffffeff, 0x35f) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00') 00:19:31 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f00000000c0)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:31 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x7, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000580)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}, 0x800}], 0x1, 0x0, 0x0) r5 = socket(0xa, 0x80001, 0x37) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0) dup2(r6, r6) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = dup2(r6, r8) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, {0x8, 0x1, r9}}}}]}, 0x38}}, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00') ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r10}) r11 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r10, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r11, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x2000c00a) sendmsg$TIPC_CMD_SHOW_STATS(r9, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r11, 0x300, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x804) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r11, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r11, 0x904, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x514, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x44085) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x440000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r11, 0x100, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x40) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x20040, 0x0) r12 = gettid() setsockopt$inet6_int(r2, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r12, 0x0, 0x0) tkill(r12, 0x35) wait4(0x0, 0x0, 0x0, 0x0) 00:19:31 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0}) 00:19:31 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) write$FUSE_LSEEK(r1, &(0x7f00000001c0)={0x18, 0x0, 0x3, {0x8}}, 0x18) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x480, 0x0) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000180)=0xabda) r5 = dup2(r2, r3) ioctl$int_in(r5, 0x5421, &(0x7f00000000c0)=0x5) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r6, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:31 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)='devpts\x00vh\xd2p!s\n@ha.\xc1\x88\x05\x89\x1d\b\xb3Xd\x92Y\x1b\x8c\xc0\xd0\xf4\x952\x8c!JC\xd1]Ul\xa2\x80\x19\x88 \xd4b\x0f\x87\x89P\xb4M\xf7]w\xa9\xb6\xc3}\x16\f\x87ueg$\xd9,\x8c\x9b\xbb*\xfe\x95\xb8\xa1\x9aVA\xb73w\xdf/\xa9\xc5\x8e\xe1\xef\xc5\x8d\x168\xba\"\x83\x8b\xe2\xf7*\xfa\xd20a\x94\xc7yiF\a\v\x14\xd2\xc1z\x94\x9d\x9d\a*\xab\xea\xd9Ee\xac\xa28p\xa2\xa1\x9a;\xb4o\xa0\xf1\xd7&[2\xf2\x82\xbc\xc2tu\xfb\xf5\xb1Y\xd6\xa9\x1b\xbec\xdeA\x8d\x94W)\x93,\xac\x02\x86\xd1\r\x00\xefZ\xf3Y\x84\xdbF\xf2u\xa1\x8b_\x9fe\xfe[q\xb1\\\xcen\bC \x81', 0x0, 0x0) 00:19:31 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) 00:19:31 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x4}}, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x1}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3b) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) ptrace$setregset(0x4205, r3, 0x4, &(0x7f0000000180)={&(0x7f0000000100)="83f0018ed4a7edb749ffbf44f2c2b7a42c8e8eecfb539e76aa875848584973385968be2b40ea0f62aeca8703c66bbd87139fcf52715ef5243c16b37a76d1761ed18c654520e47961", 0x48}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x80) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r4, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:31 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x7a) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000100)={0x0, 'ifb0\x00'}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_int(r1, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x35) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="38010000100001030000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="dd37514e9e68be47e30bd46db9f243fd00000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200650000000000000000004800010073686132353600"/240], 0x138}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000), &(0x7f00000000c0)=0xc) wait4(0x0, 0x0, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) quotactl(0x0, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000240)="27c7d97210ff2e33030d8823aaa7f12ecafec3af59") stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x0, 0x6, {{0x5, 0x0, 0x8, 0xb6e, 0x1f, 0x4, {0x2, 0x3, 0x5, 0xfffffffffffffffb, 0x32b, 0x2000000000000000, 0xead1, 0x9, 0x7, 0x0, 0x101, r4, r5, 0x3c}}, {0x0, 0x4}}}, 0xa0) 00:19:31 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000001c0)={0x200, 0x3090, 0x0, 0x4, 0xf, 0x6, 0x0, 0x5, 0xab, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xb, &(0x7f0000000100)=0xfffffeff, 0x35f) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00') 00:19:31 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$TIOCSSERIAL(r2, 0x541f, &(0x7f0000000100)={0x5fd9df18, 0x3, 0x1, 0x16a, 0x7fffffff, 0x4, 0x8, 0x5, 0x1ff, 0x5, 0xc9, 0x5, 0xff, 0x1, &(0x7f00000000c0)=""/32, 0x8, 0x53ef0f5f, 0x3}) fsetxattr$security_capability(r2, &(0x7f0000000180)='security.capability\x00', &(0x7f00000001c0)=@v1={0x1000000, [{0x8, 0x2}]}, 0xc, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r3, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) rename(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='./file1\x00') 00:19:32 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) keyctl$negate(0xc, 0x0, 0xfffffffffffffffc, 0xfffffffffffffff9) 00:19:32 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) [ 1173.411464] binder: 5996:6002 got transaction with invalid offset (0, min 0 max 0) or object. [ 1173.426252] binder: 5996:6002 transaction failed 29201/-22, size 0-24 line 3379 [ 1173.440052] binder: undelivered TRANSACTION_ERROR: 29201 00:19:32 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x195) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc0000001000000000000000000000000000000000000000000000000000000000000000000000000000ffffac14141f00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="dd37514e9e68be47ed58ef35b9f243fd0000000032000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000000000000000002abd7000000000000200650000000000000000000c000f007f00000000000000"], 0xfc}}, 0x0) fstatfs(r3, &(0x7f00000000c0)=""/117) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000240)={{0x4, 0x0, @descriptor="3d02f86d1605cf31"}, 0xd4, [], "c6c972c2e26ba044e5972923943d7266f19dbabd5e9e4b4648257e0892a75f7cd2f5debe395c163e0f85fd7909c67455d1367ea6517bd94042bc90376d49c5be89070142436d1ca9b58402d5cc2b13667233e730812ccffe02b84543304b1bfec00b1035320391540d576af86f12558ee202704d806688f518029420ec9077defa9622e8887eb0f30a579c2ea98a1f6d9995441f5c16e5c9c6f4e2ec4a9165bc810dac6784147b091ab4a2c5c9fdcd82f9bc8f81f4771d88956ff3a64d20e9f349d791f5803b95068209aa166129a4974dcea435"}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x7a) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='cpuacct.usage_all\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r5, 0x93e, 0x70bd26, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x40}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0xa9fe3d02369c3fe) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) fsetxattr$security_ima(r6, &(0x7f0000000140)='security.ima\x00', &(0x7f0000000500)=@v1={0x2, "8c969eb4f823c3aee0"}, 0xa, 0x0) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:32 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x5, [@func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x10, 0x3}, {0xc, 0x5}, {0xa, 0x2}, {0x10, 0x1}, {0x3, 0x4}, {0x1, 0x1}, {0xd, 0x1}]}, @func={0xa, 0x0, 0x0, 0xc, 0x3}, @struct={0xd, 0x5, 0x0, 0x4, 0x0, 0x4, [{0xb, 0x2, 0x8}, {0x0, 0x1, 0x3}, {0x3, 0x5, 0x10000}, {0x10, 0x5, 0x800}, {0xa, 0x5, 0x5}]}]}, {0x0, [0x5f, 0x2e, 0x5f]}}, &(0x7f00000001c0)=""/183, 0xb5, 0xb7}, 0x20) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$inet6_int(r3, 0x29, 0x3, 0x0, 0x0) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000280)=0x2, 0x4) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x35) wait4(0x0, 0x0, 0x0, 0x0) [ 1173.484161] binder: 6014:6016 got transaction with invalid offset (0, min 0 max 0) or object. [ 1173.504566] binder: 6014:6016 transaction failed 29201/-22, size 0-24 line 3379 00:19:32 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000001c0)={0x200, 0x3090, 0x0, 0x4, 0xf, 0x6, 0x0, 0x5, 0xab, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xb, &(0x7f0000000100)=0xfffffeff, 0x35f) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00') 00:19:32 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:19:32 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3ff) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:32 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) [ 1173.534870] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=6024 comm=syz-executor.2 [ 1173.587842] binder: undelivered TRANSACTION_ERROR: 29201 00:19:32 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) mount(&(0x7f0000000100)=@sr0='/dev/sr0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='gfs2\x00', 0x100846c, &(0x7f0000000200)='ramfs\x00') [ 1173.649779] binder: 6041:6044 got transaction with invalid offset (0, min 0 max 0) or object. [ 1173.678010] binder: 6041:6044 transaction failed 29201/-22, size 0-24 line 3379 [ 1173.726028] binder: undelivered TRANSACTION_ERROR: 29201 00:19:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x35) 00:19:34 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg(r3, &(0x7f0000001940)=[{{&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e23, @loopback}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="6089debff581eef21ea99c2531e9fe4b3e07ea1ac86b519ae5536a2926eb421111f4fb32fa275d10499ea18974e38484355fd8c6ea93c4e0996654a2c9675960c5d5d6f50a01060d4118859d0470", 0x4e}], 0x1, &(0x7f0000000280)=[{0x70, 0x114, 0x4, "038126db4bb04d55bb87b9691e4e3bc8790f546289bfb3f7fc1dc25a4512ade48ddbde15765302b73717d3f73b90ac4db28069b66c3d9fffdc55ac6854501776ce9218f43c82d57da65030ced79ad3333fb7f5367eb720bfe06d"}, {0x18, 0x111, 0x81, "2ecfc3"}, {0x10, 0x1, 0x5}, {0xd8, 0x116, 0xf162, "fd7601103ab025c1488549c1352c464d68b3fa859ebc5bc9b05f7d8a33324101cc7ee5e0205380ace0f22830dd37e9ca9c585d56d478b9c5768d4d65e6de142cb31604a01aa85cfbec5fdff8c89582392a4a44d64b2cffa49282ad241cd5fac1ddeaddb48e9435f8c0b6e532593713dad85bf2d163eb6f7cdccf13b1380eba47d52e147b3a4b997b34fbd7b981abffbd4f7db9bbb0fd25a60bd2350e127ad7d0fd0624b7bb6da8724e2e9f0e5b808977b486aeda9de76f7aee1e7840916b4be62d87"}, {0x88, 0x0, 0x3, "1473d7d8c9646eabe0c851e5e6cde24b7b20b03acf6a84102d937f29daa3343d74ae2355731dd4eeae62798500184a4080d2c49065d65e015d90b3119167c4231c7d2d17b834317d459b201295a07a78c3ba15d4a4f9c2047b3cd02db7d66190f4d634bc78cf0b7c7fd54ca46f8ed30e77cc"}, {0x70, 0x3a, 0x92, "d5896d5fd7a3c3172622796d30ee58129a7204d59af94f638b28acbb4236cd3fbc44548a372c9339a7946e060c43e8b8ff7694f577222978aa525a41aa65fecac2325ad434ec30d47a5282256662e68695bc0cecd425a9928ecaafac2f20"}, {0x98, 0x1, 0x5, "8b5a1693349305120e3875af2253df0de773b074dc797bf42cb958170850571e7323c55f2f228f72c3eeaf6f7658ffa5b01ef93683d99f50eb3087449ac08e32f343c3258f9deb35e946eb593cfe33889328f1669a9159f753daecce8545fa1c439ba15c6c08bef9bb143a934cbf2fad70b353c34270426377144bf7f9cdc9db77"}], 0x300}}, {{&(0x7f0000000580)=@isdn={0x22, 0x9, 0x86, 0x3, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000600)="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", 0xfb}], 0x1, &(0x7f0000000740)=[{0x38, 0x118, 0x7, "d39a30eff20ea5118bd73c0d656960dc2a424da5dfa73872c7da094b436efcf3b1c318ed"}, {0x1010, 0x110, 0x5, "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"}, {0xe8, 0x0, 0x0, "78a35eed0fc938bb1678750cf857f84e84267f4c19e7c567962e48e29c6d262a2e2f7073f2c6d2320c0fb98126e96a48d6efe7731e8dc620f7ecfbbe53e06887b20b34d4e409ea7cf60dd1a324ed81798e54c72005d7704363f994a7840a3c8c9af1f3156f55183ef9446d843aa934a840936451835c92e4bc9bbb31eeb5b9712ffbe8738c90dc4b1153eb0437ee4b05a57e6c52c42f1a635ee16a3888f847860dc8f0e4e92a4834ac18d8692943eeaef8ee21f4fec967043ff44f3413300cc67c7889aad8fd44573e59e226e008473dea1ea822"}, {0x50, 0x11, 0x67, "c16b094fcf7e70c120cb905483ed8076f1be21d12baf2abcbb4ece06c68315d5c73bff4d426e48ae2415381cfd1d78f16a2104cc6f292c496a"}, {0x18, 0x10d, 0x68, "ae3f"}, {0x60, 0x10e, 0x101, "21cb3b422f69548de16328c0a2f89fa3bdb35cdfa4da6398af616aaa9009ad77f38fa81270bd4ec424f796fc393fcad983205f940a8b3df06f16aaa61258eacffb8beae03b34e2680f"}], 0x11f8}}], 0x2, 0x5) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:34 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 00:19:34 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:19:34 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000001c0)={0x200, 0x3090, 0x0, 0x4, 0xf, 0x6, 0x0, 0x5, 0xab, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xb, &(0x7f0000000100)=0xfffffeff, 0x35f) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:19:34 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000100), 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$inet6_int(r2, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x100074) tkill(r4, 0x35) wait4(0x0, 0x0, 0x0, 0x0) 00:19:34 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) [ 1176.407848] binder: release 6065:6068 transaction 95 out, still active [ 1176.416000] binder: undelivered TRANSACTION_COMPLETE 00:19:35 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_int(r2, 0x29, 0x3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='atts/keyc\x80eate\x00') preadv(r4, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$BLKRESETZONE(r4, 0x40101283, &(0x7f0000000000)={0x6}) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) tkill(r3, 0x35) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3b) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r5, 0x0, 0x0) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x3b) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r6, 0x0, 0x0) wait4(r6, 0x0, 0x2, 0x0) 00:19:35 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) [ 1176.432505] audit: type=1400 audit(1174.969:49): avc: denied { relabelto } for pid=6067 comm="syz-executor.3" name="/" dev="devpts" ino=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:cpu_device_t:s0 tclass=dir permissive=1 00:19:35 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x53f1dc823117bdde, 0x0, &(0x7f00000000c0)) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000180)='./file1/file0\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x40000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r3, 0xc0406619, &(0x7f0000000140)={{0x1, 0x0, @reserved="0fa91245cb77a1cf0c24311439cce7f898730ba1fc4a0725ae39230c8351afc8"}}) 00:19:35 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:19:35 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) [ 1176.432626] audit: type=1400 audit(1174.969:50): avc: denied { associate } for pid=6067 comm="syz-executor.3" name="/" dev="devpts" ino=1 scontext=system_u:object_r:cpu_device_t:s0 tcontext=system_u:object_r:devpts_t:s0 tclass=filesystem permissive=1 [ 1176.435270] audit: type=1400 audit(1174.969:51): avc: denied { read } for pid=6067 comm="syz-executor.3" path="/root/syzkaller-testdir105688343/syzkaller.s3vkG6/958/file0" dev="devpts" ino=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:cpu_device_t:s0 tclass=dir permissive=1 [ 1176.437581] audit: type=1400 audit(1174.969:52): avc: denied { mounton } for pid=6067 comm="syz-executor.3" path="/root/syzkaller-testdir105688343/syzkaller.s3vkG6/958/file0" dev="devpts" ino=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:cpu_device_t:s0 tclass=dir permissive=1 [ 1176.481723] binder: BINDER_SET_CONTEXT_MGR already set [ 1176.481731] binder: 6077:6081 ioctl 40046207 0 returned -16 [ 1176.481998] binder_alloc: 6065: binder_alloc_buf, no vma [ 1176.482016] binder: 6077:6081 transaction failed 29189/-3, size 112-24 line 3284 [ 1176.533694] binder: BINDER_SET_CONTEXT_MGR already set [ 1176.533703] binder: 6089:6092 ioctl 40046207 0 returned -16 [ 1176.533965] binder_alloc: 6065: binder_alloc_buf, no vma [ 1176.533982] binder: 6089:6092 transaction failed 29189/-3, size 112-24 line 3284 [ 1176.678535] binder: BINDER_SET_CONTEXT_MGR already set [ 1176.678544] binder: 6103:6105 ioctl 40046207 0 returned -16 [ 1176.678902] binder_alloc: 6065: binder_alloc_buf, no vma [ 1176.678921] binder: 6103:6105 transaction failed 29189/-3, size 112-24 line 3284 [ 1176.813502] binder: undelivered TRANSACTION_ERROR: 29189 [ 1176.819107] binder: undelivered TRANSACTION_ERROR: 29189 [ 1176.824625] binder: undelivered TRANSACTION_ERROR: 29189 [ 1176.830239] binder: send failed reply for transaction 95, target dead 00:19:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x35) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=r2, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 00:19:38 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x40000, 0x0) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000100)={0x5, 0x9, 0x7ff, 0x200, 0x200}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) r3 = socket$inet6(0xa, 0x80008, 0x80) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000140)='trusted.overlay.nlink\x00', &(0x7f0000000180)={'L+', 0x2}, 0x28, 0x1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r4, &(0x7f00000017c0), 0x3a8, 0x7a) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x1) r5 = open(&(0x7f00000001c0)='./file1\x00', 0x0, 0x0) ioctl$KDDELIO(r5, 0x4b35, 0x8) ioctl$VT_RELDISP(r5, 0x5605) execveat(r5, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:38 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000001c0)={0x200, 0x3090, 0x0, 0x4, 0xf, 0x6, 0x0, 0x5, 0xab, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:19:38 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, 0x0}}], 0x0, 0x0, 0x0}) 00:19:38 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:19:38 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_int(r2, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x35) wait4(0x0, 0x0, 0x0, 0x0) preadv(r2, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/129, 0x81}, {&(0x7f0000000000)=""/60, 0x3c}], 0x2, 0x7) 00:19:38 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, 0x0}}], 0x0, 0x0, 0x0}) 00:19:38 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) [ 1179.477893] binder: release 6110:6116 transaction 100 out, still active [ 1179.490658] binder: undelivered TRANSACTION_COMPLETE 00:19:38 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, 0x0}}], 0x0, 0x0, 0x0}) [ 1179.520526] binder: send failed reply for transaction 100, target dead [ 1179.535967] binder: release 6126:6129 transaction 102 out, still active [ 1179.550633] binder: undelivered TRANSACTION_COMPLETE [ 1179.567801] binder: send failed reply for transaction 102, target dead 00:19:38 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:19:38 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x200000, 0x0) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:38 executing program 0: [ 1179.614986] binder: release 6137:6141 transaction 104 out, still active [ 1179.639390] binder: undelivered TRANSACTION_COMPLETE [ 1179.690381] binder: send failed reply for transaction 104, target dead 00:19:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x35) wait4(0x0, 0x0, 0x0, 0x0) 00:19:41 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:19:41 executing program 0: 00:19:41 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:19:41 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x4) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000100)={0x7, 0x4d, 0x2}, 0x7) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3b) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x4, 0x83, 0xff, 0x7, 0x0, 0xfffffffffffff001, 0x0, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7f, 0x3, @perf_config_ext={0x4d77eeba, 0x7}, 0xb449, 0x4, 0xffffffff, 0x0, 0xff, 0xf64, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x9) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r4, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:41 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000007000)={0x0, 0xffffffffffffff48, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="020000000000000000000000000000006473ffff00000000000000000000000000000000bb0000000000000000000000000000000000000000000000000000003e35f8582a2df98c2db0859133f76e5f6270429da2b3aeac68d492bc898b3db77baf492814712db8c44c6267d62a63069971310a0ad3e2b2e0e64b60fbe8951439", @ANYRES32=0x0, @ANYRESOCT, @ANYRESDEC=r1], 0x4}}, 0x0) fcntl$notify(r1, 0x402, 0x9) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x1000}) r6 = fcntl$dupfd(0xffffffffffffffff, 0x80c, r4) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = gettid() setsockopt$inet6_int(r3, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r7, 0x0, 0x0) tkill(r7, 0x35) wait4(0x0, 0x0, 0x0, 0x0) 00:19:41 executing program 0: 00:19:41 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x6742e38ac74bce58) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:41 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:19:41 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000000)={0x40}) 00:19:41 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3b) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) r3 = syz_open_procfs$namespace(r2, &(0x7f00000000c0)='ns/pid\x00') signalfd(r3, &(0x7f0000000100)={0x100}, 0x8) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') perf_event_open(&(0x7f0000001940)={0x4, 0x70, 0x81, 0xc0, 0x80, 0x40, 0x0, 0xffff, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff, 0x6, @perf_bp={&(0x7f0000001900), 0x2}, 0x1008, 0x8, 0x2, 0x6, 0xf36, 0xffffff82, 0xb9}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) preadv(r4, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$TIOCSCTTY(r4, 0x540e, 0x7) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r6, &(0x7f00000017c0), 0x3a8, 0x7a) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f00000001c0)=0xe8) lstat(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='bpf\x00', 0x400c4, &(0x7f0000000400)=ANY=[@ANYBLOB='mode=00000000000000000157606,smackfsroot=ns/pid\x00,rootcontext=user_u,euid=', @ANYRESDEC=r7, @ANYBLOB=',func=PATH_CHECK,subj_type=ns/pid\x00,dontkhash,euid=', @ANYRESDEC=r8, @ANYBLOB]) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000017c0)=ANY=[@ANYBLOB="38010000100001030000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="dd37514e9e68be47ed58ef35b9f243fd0000000032000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aa550000000000000000000200650000000000000000004800010073686132353600"/242], 0x138}}, 0x0) preadv(r9, &(0x7f0000001740)=[{&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/40, 0x28}, {&(0x7f0000001580)=""/159, 0x9f}, {&(0x7f0000001640)=""/235, 0xeb}], 0x5, 0x4) execveat(r5, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:41 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:19:44 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000800)={0xa, 0x0, 0x0, @empty}, 0x1c) 00:19:44 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:19:44 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r3, &(0x7f00000017c0), 0x3a8, 0x7a) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000001500)={0x9, {{0xa, 0x4e20, 0xfffffffb, @remote, 0x7}}}, 0x88) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) recvmsg(r0, &(0x7f00000014c0)={&(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/125, 0x7d}, {&(0x7f0000000240)=""/149, 0x95}, {&(0x7f0000000300)=""/241, 0xf1}, {&(0x7f0000000400)=""/173, 0xad}], 0x4, &(0x7f00000004c0)=""/4096, 0x1000}, 0x2) execveat(r4, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:44 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:19:44 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="020d0000100000002f3144e800000000030006000720000002004000e0000001000000f5000000000800120002000100000000000000000030006c000203009f7eae02000000adb20200000000152c000000000000000001020014bb00000000000000000000000003000500002000000200ed00e0000001000000ba0000000083e30f510b958efd6eadf315615ce3a044152ea8bb574e2a78cb90d951c0af8345a652d3f8b063daeb15b119f58d2b220046820cd437fb9525e63abd1f39479d824920968cd59f74db363a6d8064e7b175a7ba7184cef93a0fcc835820d96008f866fb4d28bc7ef9f8062f9db56c8128159cdcfd0c171bcf9e868c603d7f8542cbd8c5d2e29b90dd2ca4c9b80600bd45d8b6f661130c526af032741a8eebb41e495669dd7f1237cc427d1d35826f68073a43796df2f2d4bff069f7d039c721484d64363829137869865cce84240b9ec5cf2faf907a440931d08e9e65d7b8597e57292ac7c4f1c02db1c2e4f7104d1a982cf40045d0f4431963df216018cd006bbdcb3d5892b7b45695d5f782adaeac178f69a3247fd3bf2908eb0cd1f0134fad0bd65b5008c249706ea978f16437080062e6c36f88098cd95a9672bdcc5f2dfcb35d123f85d75f400d25928aab75c854502f01000100000000007a6845de7f93684d20e40fbcc782f4d4105f6512a39875e6e543fefe12c0a79fb6b74d4a59802cd01276d5ccf2044a28b928f9d8b00b8609dd2ce899228509c49f9fe74fc9de22ea49b934f40ae18968cb1123d562ec4834bcbfe5d389dba66e268afb679090614652c1d8a633093015bdc8edc11bae372c83640cf812f55533de7dc120c8653421af7bd85059fec6aaf9a881f56908ef619948eac304a6dd5dae540f0e478f72c7ed60240fd9e5fd847771e4c978c2b039cefc2566be2f0655395d495c6eff1914832e513fe5b0a428195bd0e8186eba1800000000000000000000000000006351378bc1d74702a0c950765d822259357b5aa5377b4c97984e45a7f0cfbb05257170b87a4e383101241d9f1796d82dfded5af1fbadb5b5bdd52a7f84427796ee9bc70405453e93ae4ebed8405af1fbb6b237cbf2b950b63fb45d12bea5e8d2ee591ecf871ea5c15b294785cfbdf5d4adc9467535a8a06ed062b155dfe1c715b8ff296336fcbcb6b175b6cb3a654d3a447a0f6ee54a43281bd5f0850cfeec98458be0d38e59f1ac1f03d5ed2c3e20a93ee852ce088319166f191e50c94d9863c5bc90590c792d5050e1e0e3cef86808c10122fe287797ceefdc491e5db5cd0731a18a51af66c2e92c7b1ad6bd29d16124a67502c343a72a3d06168a096aff16454ccd7848fa4807c6be3beb1982d25e1af301430823fe2e85fef29da4efd745641657e3db8512abd2981792f7415107f19c8fa42e7f53fd1a7c60c214d501cb0f4b1c417d3896f832374378b396fbe50cfa9e7e539159bca09cd839e00528576d11a70dd36d764b2406585728c83a34d57ecb571f24054f0dbf8ed327bb102b1b1bb03bf572cfef6dda4c972302829f253f74aeda11351a882dbfe41a6eb3f5f3a83d511406a85e796b007f00000000000000096c77411b12b660973d8468bdbf393e7e61fc73f5cb3600b431c30c45fd96e7fea24843e0a9687ba5eedf9afd3ce16ceb2bf48f8d91cdf194df8c7ff60e102d4473bc9c76286d50ff5215185d28c9a0c537c05e9ff1a2f4e37099103ca31588b0188f7b53c8033af2dac84ccd9eed1200000000000000000000001c6637a75a56cdd3e4bc459d5a4e20abaa6075184de9a4e3fbe23c14504129123caff63df96f619769dcc13b6e05bc1f1fb5b919651e"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f00000000c0), 0x4000676, 0x0) 00:19:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r1 = epoll_create(0x7fff) fcntl$setpipe(r1, 0x407, 0x5637) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() r3 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x8400) preadv(r3, &(0x7f0000000400)=[{&(0x7f0000000240)=""/7, 0x7}, {&(0x7f0000000280)=""/198, 0xc6}, {&(0x7f0000000380)=""/89, 0x9b}], 0x3, 0x200) setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self\x00', 0x3e56c3, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x3b) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r5, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$EVIOCGMTSLOTS(r5, 0x8040450a, &(0x7f0000000440)=""/10) ptrace$setopts(0x4206, r4, 0x0, 0x6) tkill(r2, 0x35) wait4(0x0, 0x0, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="38010000100001b70000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00000000000000000000000000000000419c8fb6c8b110d761217215d4421e5d75573b545da8a2c86544a30ced2891957162b18c2270dc6d13ae058dafc5ef1c10e375474d3b07bd42f53b68c6925f610b1b28b7f046a1662c78926620c9416fdf39ba889b7244893386b5437068eb0ad6aa90632d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="dd37514e9e68be47ed58ef35b9f243fd00000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200650000000000000000004800010073686132353600"/240], 0x138}}, 0x0) fcntl$dupfd(r6, 0x605, r0) statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/237) 00:19:44 executing program 0: 00:19:44 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:19:44 executing program 0: 00:19:44 executing program 2: 00:19:44 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:19:44 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:19:44 executing program 2: 00:19:44 executing program 0: 00:19:44 executing program 2: 00:19:44 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:19:44 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x3, 0x4) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 00:19:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) wait4(0x0, 0x0, 0x0, 0x0) 00:19:44 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:19:44 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xf00, 0x0, &(0x7f0000000280)="20cf4d411d520bdfae1c3821271c", 0x0, 0x400}, 0x28) 00:19:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@setlink={0x50, 0x13, 0x311, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8}, @IFLA_IFALIAS={0x14, 0x28, 'veth0_to_team\x00'}, @IFLA_IFNAME={0x14, 0x3, 'team_slave_1\x00'}]}, 0x50}}, 0x0) 00:19:44 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:19:44 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) 00:19:44 executing program 2: clone(0x23015000, 0x0, 0x0, 0x0, &(0x7f0000000180)="a0de925b340900c8b7b5a53a69912fab0cb346f6699b64996c84c99223b5c19e54974eb4ec92a3b0454ceb68c0e6f7410adc9f6facd3f795dfbc8d42a45c252a761a042ab2f86f4965c8d42d1239bf00644868dd927f34ca15") prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9, 0x80000000000000, 0x0, 0x4}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, 0x0, 0x20, 0x70bd25, 0x25dfdbfd}, 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0xffffffff00000000) write(r4, &(0x7f00000004c0)="719c3087b4ab1824a1fb8ed82f3a213b6a885cb4b6241bf2b735b08502c09c588d6b852a3e8e555f6bcd427b0000000000009d94d5f68b9b1d4eaa02eba8c1a48848c974b30bcec1f072157e938d8fb283cad2e1922a26cbb0212363fd32ac73b159d87fdd078f", 0x41395788) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f00000000c0)=0x1, 0x4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0xfffffffc, 0x3, 0x0, 0xfffffffff7fffffb, 0x4}, 0x0) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x3}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x102, 0x4, 0x0, 0xff, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0, 0x2}, 0xd00, 0x0, 0xf56f, 0x0, 0x200, 0x0, 0x801}, 0x0, 0x800000000000000, r6, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x80002, 0x0) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0xa00, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x4f36213db16b5b49}, {}, {0xfffffffffffffffe}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x20, 0x33}, 0x0, @in6=@mcast2, 0x3505, 0x0, 0x0, 0x6, 0x0, 0xfffffffe}}, 0xe8) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r7, &(0x7f0000007e00), 0x400000000000058, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x100) r8 = creat(0x0, 0xa) fcntl$setstatus(r8, 0x4, 0x6100) timerfd_gettime(r8, &(0x7f0000000400)) 00:19:44 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:19:44 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:19:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x35) wait4(0x0, 0x0, 0x0, 0x0) 00:19:44 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(0xffffffffffffffff, &(0x7f00000000c0)=""/43, 0x2b) 00:19:44 executing program 2: clone(0x23015000, 0x0, 0x0, 0x0, &(0x7f0000000180)="a0de925b340900c8b7b5a53a69912fab0cb346f6699b64996c84c99223b5c19e54974eb4ec92a3b0454ceb68c0e6f7410adc9f6facd3f795dfbc8d42a45c252a761a042ab2f86f4965c8d42d1239bf00644868dd927f34ca15") prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9, 0x80000000000000, 0x0, 0x4}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, 0x0, 0x20, 0x70bd25, 0x25dfdbfd}, 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0xffffffff00000000) write(r4, &(0x7f00000004c0)="719c3087b4ab1824a1fb8ed82f3a213b6a885cb4b6241bf2b735b08502c09c588d6b852a3e8e555f6bcd427b0000000000009d94d5f68b9b1d4eaa02eba8c1a48848c974b30bcec1f072157e938d8fb283cad2e1922a26cbb0212363fd32ac73b159d87fdd078f", 0x41395788) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f00000000c0)=0x1, 0x4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0xfffffffc, 0x3, 0x0, 0xfffffffff7fffffb, 0x4}, 0x0) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x3}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x102, 0x4, 0x0, 0xff, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0, 0x2}, 0xd00, 0x0, 0xf56f, 0x0, 0x200, 0x0, 0x801}, 0x0, 0x800000000000000, r6, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x80002, 0x0) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0xa00, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x4f36213db16b5b49}, {}, {0xfffffffffffffffe}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x20, 0x33}, 0x0, @in6=@mcast2, 0x3505, 0x0, 0x0, 0x6, 0x0, 0xfffffffe}}, 0xe8) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r7, &(0x7f0000007e00), 0x400000000000058, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x100) r8 = creat(0x0, 0xa) fcntl$setstatus(r8, 0x4, 0x6100) timerfd_gettime(r8, &(0x7f0000000400)) 00:19:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x20}, 0x80000001}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x35) wait4(0x0, 0x0, 0x0, 0x0) 00:19:44 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:19:44 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(0xffffffffffffffff, &(0x7f00000000c0)=""/43, 0x2b) 00:19:45 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(0xffffffffffffffff, &(0x7f00000000c0)=""/43, 0x2b) 00:19:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="38010000100001030000000000000000fbffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="dd37514e9e68be47ed58ef35b9f243fd00000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200650000000000000000004800010073686132353600"/240], 0x138}}, 0x0) r4 = dup2(r0, r3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr="2d3e6da325b1e00783a3d2edff6e8fb2", 0x3d9c, 0x0, 0x2, 0x8, 0x5, 0x6}, 0x20) preadv(r2, &(0x7f00000017c0), 0x3a8, 0x7a) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r5, &(0x7f00000017c0), 0x3a8, 0x7a) setsockopt$inet6_int(r5, 0x29, 0x33, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x35) wait4(0x0, 0x0, 0x0, 0x0) 00:19:45 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:19:45 executing program 2: clone(0x23015000, 0x0, 0x0, 0x0, &(0x7f0000000180)="a0de925b340900c8b7b5a53a69912fab0cb346f6699b64996c84c99223b5c19e54974eb4ec92a3b0454ceb68c0e6f7410adc9f6facd3f795dfbc8d42a45c252a761a042ab2f86f4965c8d42d1239bf00644868dd927f34ca15") prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9, 0x80000000000000, 0x0, 0x4}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, 0x0, 0x20, 0x70bd25, 0x25dfdbfd}, 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0xffffffff00000000) write(r4, &(0x7f00000004c0)="719c3087b4ab1824a1fb8ed82f3a213b6a885cb4b6241bf2b735b08502c09c588d6b852a3e8e555f6bcd427b0000000000009d94d5f68b9b1d4eaa02eba8c1a48848c974b30bcec1f072157e938d8fb283cad2e1922a26cbb0212363fd32ac73b159d87fdd078f", 0x41395788) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f00000000c0)=0x1, 0x4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0xfffffffc, 0x3, 0x0, 0xfffffffff7fffffb, 0x4}, 0x0) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x3}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x102, 0x4, 0x0, 0xff, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0, 0x2}, 0xd00, 0x0, 0xf56f, 0x0, 0x200, 0x0, 0x801}, 0x0, 0x800000000000000, r6, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x80002, 0x0) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0xa00, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x4f36213db16b5b49}, {}, {0xfffffffffffffffe}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x20, 0x33}, 0x0, @in6=@mcast2, 0x3505, 0x0, 0x0, 0x6, 0x0, 0xfffffffe}}, 0xe8) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r7, &(0x7f0000007e00), 0x400000000000058, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x100) r8 = creat(0x0, 0xa) fcntl$setstatus(r8, 0x4, 0x6100) timerfd_gettime(r8, &(0x7f0000000400)) 00:19:45 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:19:45 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) [ 1186.829078] audit: type=1400 audit(1185.369:53): avc: denied { getattr } for pid=9421 comm="syz-executor.3" path="/root/syzkaller-testdir105688343/syzkaller.s3vkG6/974/file0" dev="sda1" ino=17050 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:cpu_device_t:s0 tclass=dir permissive=1 [ 1186.906016] audit: type=1400 audit(1185.439:54): avc: denied { open } for pid=9421 comm="syz-executor.3" path="/root/syzkaller-testdir105688343/syzkaller.s3vkG6/974/file0" dev="sda1" ino=17050 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:cpu_device_t:s0 tclass=dir permissive=1 [ 1186.953611] audit: type=1400 audit(1185.489:55): avc: denied { rmdir } for pid=9421 comm="syz-executor.3" name="file0" dev="sda1" ino=17050 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:cpu_device_t:s0 tclass=dir permissive=1 00:19:47 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:19:47 executing program 3: r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:19:47 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:19:47 executing program 2: clone(0x23015000, 0x0, 0x0, 0x0, &(0x7f0000000180)="a0de925b340900c8b7b5a53a69912fab0cb346f6699b64996c84c99223b5c19e54974eb4ec92a3b0454ceb68c0e6f7410adc9f6facd3f795dfbc8d42a45c252a761a042ab2f86f4965c8d42d1239bf00644868dd927f34ca15") prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9, 0x80000000000000, 0x0, 0x4}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, 0x0, 0x20, 0x70bd25, 0x25dfdbfd}, 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0xffffffff00000000) write(r4, &(0x7f00000004c0)="719c3087b4ab1824a1fb8ed82f3a213b6a885cb4b6241bf2b735b08502c09c588d6b852a3e8e555f6bcd427b0000000000009d94d5f68b9b1d4eaa02eba8c1a48848c974b30bcec1f072157e938d8fb283cad2e1922a26cbb0212363fd32ac73b159d87fdd078f", 0x41395788) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f00000000c0)=0x1, 0x4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0xfffffffc, 0x3, 0x0, 0xfffffffff7fffffb, 0x4}, 0x0) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x3}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x102, 0x4, 0x0, 0xff, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0, 0x2}, 0xd00, 0x0, 0xf56f, 0x0, 0x200, 0x0, 0x801}, 0x0, 0x800000000000000, r6, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x80002, 0x0) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0xa00, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x4f36213db16b5b49}, {}, {0xfffffffffffffffe}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x20, 0x33}, 0x0, @in6=@mcast2, 0x3505, 0x0, 0x0, 0x6, 0x0, 0xfffffffe}}, 0xe8) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r7, &(0x7f0000007e00), 0x400000000000058, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x100) r8 = creat(0x0, 0xa) fcntl$setstatus(r8, 0x4, 0x6100) timerfd_gettime(r8, &(0x7f0000000400)) 00:19:47 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x7a) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r3, &(0x7f00000017c0), 0x3a8, 0x7a) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r3, 0xc0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x8c0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x5}, 0x0, 0x0, &(0x7f00000001c0)={0x7, 0x2, 0x1, 0xffffffff}, &(0x7f0000000240)=0x7b8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0xabae}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r2, 0xfffffffffffffdb7, &(0x7f00000003c0)={&(0x7f0000000140)=""/79, 0xfffffffffffffebd, r4}}, 0xffffff39) r5 = open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x83001000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f00000000c0)=0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x413100, 0x0) r8 = getpid() r9 = gettid() ptrace$setopts(0x4206, r9, 0x0, 0x0) tkill(r9, 0x3b) ptrace$setregs(0xd, r9, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r9, 0x0, 0x0) getpgrp(r9) r10 = gettid() ptrace$getsig(0x2, r10, 0xffffffffff600003, &(0x7f0000000040)) r11 = epoll_create1(0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r12, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_MOD(r11, 0x3, r12, &(0x7f0000000000)={0x15}) r13 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r14 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r14, 0x10, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup3(r15, r16, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r17, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x9, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x1, 0xfffffffc}, 0x0, 0x0, 0x0, &(0x7f0000000340)=0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=0x1003}}, 0x10) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000540)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={r19, r14, 0x0, 0x4, &(0x7f0000000240)='/.@\x00', r18}, 0xfffffffffffffd91) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001dc0)={0xffffffffffffffff, r13, 0x0, 0x5, &(0x7f0000001d80)='user\x00', r18}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)='wlan0)&\x00', r18}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={r8, r12, 0x0, 0x8, &(0x7f0000000480)='\x00@\x00\x00\x00\x00\x00\x00', r18}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={r6, r7, 0x0, 0x9, &(0x7f0000000340)='proceth1\x00', r18}, 0xffffffffffffff6f) r20 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r20, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:47 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x15e) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/keycreate\x00', 0x2, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x9, 0xff, 0x7fff, 0x9, 0xff}, 0x14) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = open(&(0x7f0000000000)='.\x00', 0x80000, 0x0) execveat(r3, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r4, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$LOOP_GET_STATUS(r4, 0x4c03, &(0x7f0000000140)) 00:19:47 executing program 3: r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:19:48 executing program 3: r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:19:48 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r4, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$EVIOCRMFF(r4, 0x40044581, &(0x7f0000000000)) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x69, 0x1, {0x4, 0x3, 0x5}}, 0x14) sendmsg$nl_xfrm(r3, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="38010000100001030000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="dd37514e9e68be47ed58ef35b9f243fd00000000320000000000000000000000000000000000000000000000000000000000000024000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200650000000000000000004800010073686132353600"/240], 0x138}}, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x118, 0x0, 0xa28, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x6c}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7fff}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x26}}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xd86e1b42abb846f9}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x200}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x400240c5}, 0x22000080) fremovexattr(r3, &(0x7f00000000c0)=@known='security.apparmor\x00') execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:48 executing program 2: clone(0x23015000, 0x0, 0x0, 0x0, &(0x7f0000000180)="a0de925b340900c8b7b5a53a69912fab0cb346f6699b64996c84c99223b5c19e54974eb4ec92a3b0454ceb68c0e6f7410adc9f6facd3f795dfbc8d42a45c252a761a042ab2f86f4965c8d42d1239bf00644868dd927f34ca15") prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9, 0x80000000000000, 0x0, 0x4}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, 0x0, 0x20, 0x70bd25, 0x25dfdbfd}, 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0xffffffff00000000) write(r4, &(0x7f00000004c0)="719c3087b4ab1824a1fb8ed82f3a213b6a885cb4b6241bf2b735b08502c09c588d6b852a3e8e555f6bcd427b0000000000009d94d5f68b9b1d4eaa02eba8c1a48848c974b30bcec1f072157e938d8fb283cad2e1922a26cbb0212363fd32ac73b159d87fdd078f", 0x41395788) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f00000000c0)=0x1, 0x4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0xfffffffc, 0x3, 0x0, 0xfffffffff7fffffb, 0x4}, 0x0) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x3}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x102, 0x4, 0x0, 0xff, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0, 0x2}, 0xd00, 0x0, 0xf56f, 0x0, 0x200, 0x0, 0x801}, 0x0, 0x800000000000000, r6, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x80002, 0x0) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0xa00, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x4f36213db16b5b49}, {}, {0xfffffffffffffffe}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x20, 0x33}, 0x0, @in6=@mcast2, 0x3505, 0x0, 0x0, 0x6, 0x0, 0xfffffffe}}, 0xe8) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r7, &(0x7f0000007e00), 0x400000000000058, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x100) r8 = creat(0x0, 0xa) fcntl$setstatus(r8, 0x4, 0x6100) timerfd_gettime(r8, &(0x7f0000000400)) 00:19:48 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:19:48 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000100)='./file1\x00', 0x84e37784f7c3412e, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) preadv(r3, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000000)=""/62) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) get_thread_area(&(0x7f0000000140)={0x0, 0x20000000, 0x2000, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x7a) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000380)={@empty, @local, 0x0}, &(0x7f00000003c0)=0xc) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r4, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000540)=0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r8, @ANYBLOB="00000000000000001800120008000100767449000c00020008000100", @ANYRES32=r10], 0x38}}, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) quotactl(0x0, &(0x7f0000000040)='./file0\x00', r11, &(0x7f0000000240)="27c7d97210ff2e33030d8823aaa7f12ecafec3af59") sendmsg$nl_xfrm(r1, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@report={0x1f0, 0x20, 0x0, 0x70bd2d, 0x25dfdbfe, {0xff, {@in=@empty, @in6=@empty, 0x4e21, 0xc221, 0x4e23, 0x0, 0xa, 0x80, 0xa0, 0x3b, r3, 0xee00}}, [@proto={0x8, 0x19, 0xff}, @encap={0x1c, 0x4, {0x3, 0x4e23, 0x4e23, @in=@empty}}, @policy={0xac, 0x7, {{@in6=@ipv4={[], [], @rand_addr=0x8}, @in6=@empty, 0x4e20, 0x40, 0x4e20, 0x0, 0xa, 0x80, 0x140, 0x2c, 0x0, r5}, {0x101, 0xfffffffffffffffc, 0x7, 0xed, 0x8, 0x39f431f0, 0x7, 0xa4}, {0x3, 0x1df4, 0x1, 0x1}, 0x7ff, 0x6e6bb9, 0x0, 0x0, 0x1}}, @address_filter={0x28, 0x1a, {@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0x6, 0x81}}, @policy={0xac, 0x7, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x4e24, 0x81, 0x4e20, 0x200, 0xa, 0x160, 0x40, 0x2f, r10, r11}, {0x6, 0xff, 0x0, 0x100000000, 0x2, 0x894, 0x3ff, 0x4}, {0x1, 0x10001, 0x2, 0x6}, 0x8, 0x6e6bbc, 0x2, 0x0, 0x3}}]}, 0x1f0}}, 0x40000) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000100)={r12, r13/1000+10000}, 0x10) r14 = gettid() setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r14, 0x0, 0x0) tkill(r14, 0x35) r15 = gettid() ptrace$setopts(0x4206, r15, 0x0, 0x0) tkill(r15, 0x3b) ptrace$setregs(0xd, r15, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r15, 0x0, 0x0) sched_setparam(r15, &(0x7f0000000000)=0x9) wait4(0x0, 0x0, 0x0, 0x0) 00:19:48 executing program 3: mkdir(0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:19:48 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:19:48 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) fsetxattr$security_capability(r3, &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v2={0x2000000, [{0x2, 0x918a}, {0x5, 0x2}]}, 0x14, 0x5) 00:19:48 executing program 3: mkdir(0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:19:48 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:19:48 executing program 2: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000001c0)={0x200, 0x3090, 0x0, 0x4, 0xf, 0x6, 0x0, 0x5, 0xab, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:19:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x4, @local}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x35) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000000)) wait4(0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffe000/0x1000)=nil) 00:19:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x37d3a4b4c5cfe9cc, &(0x7f0000000040)=0xfffffffe, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x35) r2 = dup(r0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3b) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) ioprio_set$pid(0x1, r3, 0x7) socket$inet6(0xa, 0x0, 0x9) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000000)={@loopback}, &(0x7f00000000c0)=0x14) wait4(0x0, 0x0, 0x0, 0x0) 00:19:48 executing program 3: mkdir(0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:19:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x80000001}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x35) wait4(0x0, 0x0, 0x2, 0x0) 00:19:48 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5c) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) accept4$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f0000000240)=0x4b3b7bf1, 0x80000) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)={0x0, 0xfb, 0x2b, 0xa4348c3f1bc14ba2, 0x0, "dde2c85ffdbf4aba20dc638c9fe14336", "8f4b050f5bdf4f9ed8501b7260fbd380981262477815"}, 0x2b, 0x3) execveat(r1, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:48 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:19:48 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x2f, 0x0, &(0x7f0000000040)=ANY=[@ANYPTR64, @ANYRESOCT=r2, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="000900000000000028000000000000e7fff80e3d57a10c00"], @ANYBLOB="1f00000000000000"], 0x0, 0x0, 0x0}) rmdir(&(0x7f0000000000)='./file0\x00') [ 1190.290498] binder: 6447:6449 unknown command 0 [ 1190.299631] binder: 6447:6449 ioctl c0306201 200002c0 returned -22 [ 1190.310238] binder: 6447:6451 unknown command 0 [ 1190.315096] binder: 6447:6451 ioctl c0306201 200002c0 returned -22 00:19:49 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:19:49 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f00000000c0)) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:49 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:19:49 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:19:49 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/d\x04\x00/W/w\x8b:\v\xd8\x06', 0x0, 0x804) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 00:19:49 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:19:49 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x4c2901, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000000)={0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 00:19:49 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x20) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x802, 0x0) [ 1190.984144] binder: release 6478:6483 transaction 108 out, still active [ 1190.992995] binder: undelivered TRANSACTION_COMPLETE [ 1190.998524] binder: send failed reply for transaction 108, target dead 00:19:51 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x80, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000300)={0x77359400}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r3, &(0x7f00000017c0), 0x3a8, 0x7a) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r4, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000340)=r4) wait4(r2, &(0x7f0000000100), 0x40000000, &(0x7f0000000140)) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r5, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:51 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(0x0, &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:19:51 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000090000000000000000000000000000000070000000000000002e00000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000000000000000000000100"/112], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000028000000000000005000000076eae900"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 00:19:51 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:19:51 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty}, &(0x7f0000000200)=0xc) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:19:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0), 0x107) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x35) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x7a) getpeername$inet6(r2, &(0x7f00000002c0)={0xa, 0x0, 0x0, @local}, &(0x7f00000003c0)=0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r3, &(0x7f00000017c0), 0x0, 0x9) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000000)=0x58) getsockopt$bt_hci(r3, 0x0, 0x6, &(0x7f0000000400)=""/180, &(0x7f0000000600)=0xb4) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r6, &(0x7f00000017c0), 0x3a8, 0x7a) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000640)=0x81, 0x4) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="00fd60008082"], 0x6) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x3000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000425bd7000fbdbdf250d0000002800070008000100ff03000008000200ffffffff0c00040003000000000000000800010000000080"], 0x3c}}, 0x4000) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r8, &(0x7f00000017c0), 0x3a8, 0x7a) r9 = openat$cgroup_ro(r8, &(0x7f0000000680)='io.stat\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r9, 0x54a3) sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f0000000240)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0xc00402}, 0xc, &(0x7f0000000300)={&(0x7f0000000340)={0x68, r7, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x4}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_NET={0x4c, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x101}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc35}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) sendmsg$TIPC_NL_NAME_TABLE_GET(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x25aae1adcae383df}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa0, r7, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_ADDR={0xf7, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}]}, @TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6b}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x151}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}]}, 0xa0}}, 0x48002) wait4(0x0, 0x0, 0x0, 0x0) 00:19:51 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(0x0, &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) [ 1193.182157] binder: 6488:6492 got transaction with invalid offsets size, 46 [ 1193.212490] binder: 6488:6492 transaction failed 29201/-22, size 112-46 line 3338 00:19:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @mcast1, 0x28}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x35) wait4(0x0, 0x0, 0x0, 0x0) 00:19:51 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000400)={0xbc, 0x0, &(0x7f0000000300)=[@increfs={0x40046304, 0x1}, @acquire_done={0x40106309, 0x3}, @increfs_done={0x40106308, 0x3}, @acquire_done={0x40106309, 0x3}, @increfs={0x40046304, 0x1}, @dead_binder_done, @free_buffer={0x40086303, r1}, @dead_binder_done, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x5, 0x0, 0x37}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/175, 0xaf, 0x1, 0x10}, @fda={0x66646185, 0x0, 0x0, 0x8}}, &(0x7f0000000040)={0x0, 0x20, 0x48}}, 0xe5b6798de1ee7b19}], 0x12, 0x0, &(0x7f00000003c0)="360a06cc0ae287c748b4734b05a5d7a32b6e"}) 00:19:51 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r3, &(0x7f00000017c0), 0x3a8, 0x7a) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) [ 1193.242677] binder: undelivered TRANSACTION_ERROR: 29201 00:19:51 executing program 4: perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x80800, 0xe) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ftruncate(r1, 0xffffffff) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6934) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3b) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) r4 = getpid() r5 = syz_open_procfs(r4, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r5, &(0x7f0000001740)=[{&(0x7f0000000280)=""/137}, {&(0x7f0000000340)=""/101}, {&(0x7f0000000480)=""/197}, {&(0x7f0000000580)=""/186}, {&(0x7f0000000640)=""/4096}, {&(0x7f0000001640)=""/240}, {&(0x7f00000001c0)=""/47, 0x31f}], 0x100000000000006e, 0x7a) ftruncate(r2, 0x8) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000180)={0x4, 'irlan0\x00', 0x3}, 0x18) socket$netlink(0x10, 0x3, 0xd28392e3dfd79376) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x55050}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48801}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 00:19:51 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(0x0, &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:19:51 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:19:51 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xed5cd9dcef9e2f9f, 0x80010, r1, 0x1000) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r3, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000000c0)='*+\x00') 00:19:51 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:19:51 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:19:51 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', 0x0, &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) [ 1193.407994] binder: BINDER_SET_CONTEXT_MGR already set [ 1193.421507] binder: 6513:6516 ioctl 40046207 0 returned -16 00:19:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfb, 0x12, 0x6, 0x1, "c990bfeb4979f83bea54637e28753e4d01f35460fc9dee6b1e83a327a14969ffec432714ed929dc64add08f1d1cc27363bc83840a3e565f5c2f43e813b679c25", "e89c4418b487f2dfb220fe2986d5f17cfb997a1768d027f665655a272a9e4b00", [0x12, 0x5]}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r3, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) [ 1193.421518] binder: release 6513:6516 transaction 114 out, still active [ 1193.421522] binder: undelivered TRANSACTION_COMPLETE 00:19:52 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', 0x0, &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:19:52 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = socket(0x15, 0x80000, 0x5) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x9, 0xf84, 0x9}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) [ 1193.421580] binder: send failed reply for transaction 114, target dead 00:19:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r3, &(0x7f00000017c0), 0x3a8, 0x7a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f00000000c0)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) write$input_event(r2, &(0x7f0000000180)={{r4, r5/1000+30000}, 0x4, 0xfff7, 0x3}, 0x18) 00:19:52 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:19:52 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:19:52 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:19:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)="220389c148e7e7548d44f1a4e9fb367003cef8c57276675f300b8e47f2f6b072460c88277ecdc3e8af567af3e459ad5c92b997a9c7538a3e41fb528ecd0019659a5871de0c458cca357dbb9ea3094ba5f090282f46e01dbd448d778382131f4f98ee324aef6f149c5342df1fb2e67d523b22de72d1912fc8826bdc3c706ef7b905992b8f63f55931c9f6b05c23e11da9007f6c0afc40f1ba1545b79f9456be4e5a088a396f9c83966356b87f97bd81d41a6449493cb8558f3132f8e7b72f8bbce1af4668f5644930128effbb6eef04865e2520dad887c34e63c0", 0xda, r2}, 0x68) r3 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) execveat(r3, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x1000) 00:19:52 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', 0x0, &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) [ 1193.679560] binder: 6561:6576 ioctl c0185879 20000000 returned -22 [ 1193.703592] binder: release 6561:6565 transaction 116 out, still active [ 1193.711243] binder: undelivered TRANSACTION_COMPLETE 00:19:52 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', 0x0, 0x0, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:19:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvfrom$unix(r0, &(0x7f00000001c0)=""/58, 0x3a, 0x40010041, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r3 = open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x0) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0xff, 0xb7, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f00000000c0), 0x1479dd4571afc503}, 0x8120, 0xffffffff, 0x0, 0x0, 0x1, 0x3, 0xa13}, r4, 0x4, 0xffffffffffffffff, 0x0) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f0000000180)={r3, 0x0, 0x7, 0x200, 0x8}) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r6, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:52 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x80401, 0x20) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) dup3(r2, 0xffffffffffffffff, 0x80000) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r3, &(0x7f00000017c0), 0x3a8, 0x7a) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r4, &(0x7f00000017c0), 0x3a8, 0x7a) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r5, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) accept$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000000000000000000000100"/112], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0000000000004993b8804366472c19382eb8c28f96b833e289903f41f32e2b3dc5fc7778aa"], 0x0, 0x0, 0x0}) [ 1193.734430] binder: send failed reply for transaction 116, target dead [ 1193.762007] binder: 6561:6597 ioctl c0185879 20000000 returned -22 00:19:52 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', 0x0, 0x0, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) [ 1193.850256] binder: 6604:6607 transaction failed 29189/-22, size 112-24 line 3138 [ 1193.888121] binder: undelivered TRANSACTION_ERROR: 29189 00:19:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x5b0c1, 0x100) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:52 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:19:52 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:19:52 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:19:52 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', 0x0, 0x0, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:19:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="38010000100055cf01030000000000000000ffffffff000000000000000000000000fe80000000000000000000bb00000000000000000000000000000000fc", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="dd37514e9e68be47ed58ef35b9f243fd00000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200650000000000000000004800010074677231323800"/240], 0x138}}, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) write$UHID_CREATE(r3, &(0x7f0000000240)={0x0, 'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/33, 0x21, 0x6, 0x3, 0x6, 0x101, 0x4}, 0x120) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) execveat(r4, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:52 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:19:52 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) [ 1194.091752] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. 00:19:52 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:19:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='yeah\x00', 0x5) execveat(r3, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:52 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:19:52 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:19:52 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x0, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:19:52 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:19:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3801030000000000000000fffff7ff000000000000000000000000fe80000000000000000000000000000000000000000010000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="dd37514e9e68be47ed58ef35b9f243fd0000000032ae61c35eb59a92625911a705000000000000000000000000000000000000000000000000000000000000000077000000000000000000000000010000000000000000000000000000000000000f816322f359958500000000000012000000000000000000000000000000000000000000000000000000000000000000000000000000000016000000000000000000000000000002006500000000000000000048000100734f9984db3600"/240], 0x138}}, 0x0) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f00000000c0)={'ipddp0\x00', 0x58}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x101c02, 0x8) clone(0x92000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) llistxattr(&(0x7f0000000100)='./file1\x00', &(0x7f0000000540)=""/4096, 0x1000) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r3, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:52 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:19:52 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x0, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) [ 1194.423846] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=6682 comm=syz-executor.5 00:19:53 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x0, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:19:53 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) [ 1194.519209] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=6690 comm=syz-executor.5 00:19:53 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:19:53 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f00000000c0)) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:53 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x1000008912, 0x0) getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:19:53 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:19:53 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:19:53 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x1000008912, 0x0) getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:19:53 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$KDDISABIO(r1, 0x4b37) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) unlink(&(0x7f00000000c0)='./file1\x00') execveat(r3, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:53 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x1000008912, 0x0) getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:19:53 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) dup2(r0, r3) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:53 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:19:53 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)) getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:19:53 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:19:53 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:19:53 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x1db340, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x10, 0xdbae24ac4a15b288, 0x78) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r2, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x100) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) r4 = dup2(r3, r0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x8) 00:19:53 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)) getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:19:53 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:19:53 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:19:53 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) creat(&(0x7f0000000100)='./file1\x00', 0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @empty}, 0xc) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:53 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)) getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:19:53 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1d") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:19:53 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:19:53 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r3, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) lookup_dcookie(0x7ff, &(0x7f00000000c0), 0x0) 00:19:53 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:19:53 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1d") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:19:53 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'syzkaller1\x00', {0x2, 0x4e23, @empty}}) execveat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/relabel\x00', 0x2, 0x0) 00:19:53 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:19:53 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:19:54 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1d") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:19:54 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:19:54 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:19:54 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) quotactl(0x0, &(0x7f0000000040)='./file0\x00', r3, &(0x7f0000000240)="27c7d97210ff2e33030d8823aaa7f12ecafec3af59") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0, 0x0}, &(0x7f00000006c0)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000400)='./file1\x00', &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000700)=ANY=[@ANYRES32=0xee01, @ANYBLOB, @ANYRES32, @ANYBLOB="02", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32=r4, @ANYBLOB, @ANYRES32, @ANYRESDEC], 0xb, 0x0) fchown(r2, r3, r4) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r5, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:54 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:19:54 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:19:54 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:19:54 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000080)='./file1\x00', 0x40142, 0x15c) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$key(0xf, 0x3, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r4, &(0x7f00000017c0), 0x3a8, 0x7a) r5 = getpid() stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0, 0x0}, &(0x7f00000006c0)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000400)='./file1\x00', &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000700)=ANY=[@ANYRES32=0xee01, @ANYBLOB, @ANYRES32, @ANYBLOB="02", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32=r7, @ANYBLOB, @ANYRES32, @ANYRESDEC], 0xb, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$unix(r4, &(0x7f0000000640)={&(0x7f00000000c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000140)="c5dc599a17c1320c66d6609558e82f72757f", 0x12}, {&(0x7f0000000340)="9e720c1712e3cc3c256d839bf5cde3aed6db9763861c5f30be70def6573d86d216fb676b209459721f3f070c2a62985acaf8800aed6fdb7c6bcb050d0e96df49a63ca69a903af8b25e0fd51826dbfc1c4b5f9be2cb23504d853670b3fe1d7cd1f6a5c2ed60e9d1df322a69d28dfd36ec67613f59f2a01e12db8de28c8017e185557adfe09b07785408004b2ef96d326146eb7470ef50ca39c9d639332b6d6518e9576d54dfc27fadd98487eb93152a85d683892e83cc68d5f2b7037394f53038464af3a2e21835aec8f294259bd53256d57d9ddf", 0xd4}, {&(0x7f0000000440)="839d0b29a2cbf941cd470ebafacaef02adf7a4e4c0b1a9704d69ef91930f392aeddf048448812af5dc80c6156d744dc133ca969f80665e426e823e714a0891c9b26a46bc2c3a46aa2247eac3139a083905928a50f911a2ad17db8845fb0318fac23c37dfc89f5098b98b8e43f4bd8fe535362979963e495a0c657249714510775a93fe16fa961d0990e92f786da9d3fcfd1d478573219154733464ab692457899602da3e1e1901f44569062219eb44c722d2a8e772676760e2", 0xb9}], 0x3, &(0x7f0000000600)=[@cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @rights={{0x18, 0x1, 0x1, [r8, r9]}}], 0x38, 0x800}, 0x20000800) sendmsg$key(r3, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2, 0x3, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0xffffffffffffffe7, 0x0, "e0"}, @sadb_sa={0x2}, @sadb_ident={0x2}, @sadb_address={0x3, 0x0, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x58}}, 0x0) r10 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$KIOCSOUND(r2, 0x4b2f, 0x8001) execveat(r10, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:54 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:19:54 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:19:54 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:19:54 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:19:54 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) rt_sigpending(&(0x7f00000000c0), 0x8) 00:19:54 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:19:54 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:19:54 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b10") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:19:54 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b10") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:19:54 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) sched_getscheduler(r2) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100420}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r5, 0x500, 0x70bd26, 0x25dfdbfd, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x8}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20008011}, 0x20004001) preadv(r4, &(0x7f00000017c0), 0x3a8, 0x7a) execveat(r3, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:54 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:19:54 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b10") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:19:54 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:54 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(0xffffffffffffffff, &(0x7f00000000c0)=""/43, 0x2b) 00:19:54 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) r2 = timerfd_create(0x7, 0x800) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) r4 = dup3(r2, r3, 0x40000) ioctl$EVIOCGBITSND(r4, 0x80404532, &(0x7f00000000c0)=""/102) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r5, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:55 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:19:55 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:19:55 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(0xffffffffffffffff, &(0x7f00000000c0)=""/43, 0x2b) 00:19:55 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f00000000c0)='./file1\x00', 0x468340, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:55 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0x1, 0x28, &(0x7f0000000340)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={r1, 0xffff45ea}, 0xc) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={r1, 0x2, 0x1c}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, &(0x7f0000000300)="2c999d326eb2a69bae62d9058bd08ba87af0045c6cd41571dfc0bb7680a81a157b961b75627e9f9aec251fd16c36b0c71a3ac6ac48e7b551f567bcef425e65b85151094007d7528a590d0ffcdd6ceda705f879db7f02d679db6016b8e45912f58aaee557827201cacab8aa31383b62bf3187e7898ab4f4c5e3b5ea9e4110cd477997636e0cb3577bf64ce81d2256b148927133192819c352f052272e3abdc627f49fd0432504abef94f55b7c6934f7b781acc3573e884b9d54b1dd9a51d3b489b811122bdb0b2614d9b72b0d493ab4046c0e67415873354219c16cd2a2be3e", &(0x7f00000001c0)=""/26, 0x2}, 0x20) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x802) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x59, 0x0, &(0x7f0000000100)="3c47a77b6dc4b898cb3a2e95c8426021b97b76c52d6b474eb2a5072e005fbde194636a79bddde0770eebda1b70a0ff7791cbd607d06bc35ad3eb5d0ff4a2bc56369e70a7b89140eb26f2400125599b239c956e4c3cca9de603"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 00:19:55 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:19:55 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0, 0x0}, &(0x7f00000006c0)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000400)='./file1\x00', &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000700)=ANY=[@ANYRES32=0xee01, @ANYBLOB, @ANYRES32, @ANYBLOB="02", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32=r4, @ANYBLOB, @ANYRES32, @ANYRESDEC], 0xb, 0x0) getresuid(&(0x7f0000000640), &(0x7f0000000780), &(0x7f00000002c0)=0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r6, &(0x7f00000017c0), 0x3a8, 0x7a) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000300)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@remote}}, &(0x7f0000000400)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000280), &(0x7f0000000740)=0xc) quotactl(0x0, &(0x7f0000000040)='./file0\x00', r8, &(0x7f0000000240)="27c7d97210ff2e33030d8823aaa7f12ecafec3af59") mount$fuse(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='fuse\x00', 0x2000000, &(0x7f0000000440)=ANY=[@ANYBLOB="ce7700", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=r4, @ANYBLOB=',allow_other,max_read=0xfffffffffffffffb,max_read=0x0000000000000007,allow_other,default_permissions,max_read=0x000000000000099b,allow_other,blksize=0x0000000000002c00,uid>', @ANYRESDEC=r5, @ANYBLOB="2c61707072616973652c6673757569643d37363835303e34382df56539002d373562382d446a66372d62303638006136342c636f6e746578743d73797374656d5f752c6d61736b3d4d41595f57524954452c657569643d", @ANYRESDEC=r7, @ANYBLOB=',appraise,uid>', @ANYRESDEC=r8, @ANYBLOB=',defcontext=sysadm_u,pcr=00000000000000000055,\x00']) 00:19:55 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000000)=0x716) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000008001800000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000004856164660000000000000000000000000100"/112], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) [ 1196.704997] binder: release 6934:6939 transaction 120 out, still active [ 1196.712491] binder: undelivered TRANSACTION_COMPLETE 00:19:55 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(0xffffffffffffffff, &(0x7f00000000c0)=""/43, 0x2b) 00:19:55 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) [ 1196.728827] binder: BINDER_SET_CONTEXT_MGR already set [ 1196.728836] binder: 6934:6944 ioctl 40046207 0 returned -16 [ 1196.784829] binder: send failed reply for transaction 120, target dead 00:19:55 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x7a) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000100)={'eql\x00', {0x2, 0x4e23, @remote}}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000700000000000000018000006000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000000000000000000000100"/112], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000040)) 00:19:55 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, 0x0, 0x0) [ 1196.795203] binder_alloc: 6953: binder_alloc_buf size 2251799813685384 failed, no address space [ 1196.795210] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 1196.795229] binder: 6953:6957 transaction failed 29201/-28, size 2251799813685360-24 line 3284 [ 1196.814823] binder: BINDER_SET_CONTEXT_MGR already set [ 1196.814832] binder: 6953:6957 ioctl 40046207 0 returned -16 [ 1196.897207] binder: BINDER_SET_CONTEXT_MGR already set [ 1196.897216] binder: 6968:6973 ioctl 40046207 0 returned -16 [ 1196.897659] binder_alloc: 6953: binder_alloc_buf, no vma [ 1196.897679] binder: 6968:6973 transaction failed 29189/-3, size 6755399441055744-1536 line 3284 [ 1196.919422] binder: BINDER_SET_CONTEXT_MGR already set [ 1196.919430] binder: 6968:6976 ioctl 40046207 0 returned -16 [ 1196.979748] binder: undelivered TRANSACTION_ERROR: 29189 [ 1196.985747] binder: undelivered TRANSACTION_ERROR: 29201 00:19:56 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:19:56 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$FUSE_POLL(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x8}, 0x18) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:56 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, 0x0, 0x0) 00:19:56 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000000000000000000000000006ffffffffffffb001800000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000000000000000000000100"/112], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 00:19:56 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:19:56 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:19:56 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, 0x0, 0x0) 00:19:56 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000340)='./file1\x00', 0x101000, 0x0) llistxattr(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280)=""/121, 0x79) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x800, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@ipv4={[], [], @multicast2}, @in=@multicast1}}, {{@in6=@mcast1}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) [ 1197.612823] binder_alloc: 6980: binder_alloc_buf size 70931694131085192 failed, no address space [ 1197.661184] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 1197.689015] binder: 6980:6990 transaction failed 29201/-28, size 70931694131085167-24 line 3284 00:19:56 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/create\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000000000000000000000100"/112], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 00:19:56 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000000)=0x716) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000008001800000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000004856164660000000000000000000000000100"/112], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) [ 1197.708265] binder: undelivered TRANSACTION_ERROR: 29201 [ 1197.715701] binder: BINDER_SET_CONTEXT_MGR already set [ 1197.715711] binder: 6980:7005 ioctl 40046207 0 returned -16 00:19:56 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:19:56 executing program 5: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@ipv4={[], [], @multicast1}}, {@in6=@rand_addr="dd37514e9e68be47ed423bc537f243fd", 0x0, 0x32}, @in6=@empty, {}, {0x0, 0x4, 0x0, 0x80000002}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000}, 0x0) fremovexattr(r1, &(0x7f0000000240)=@known='com.apple.FinderInfo\x00') ptrace$cont(0x7, r0, 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x7a) accept4$inet(r2, &(0x7f0000000180)={0x2, 0x0, @empty}, &(0x7f00000001c0)=0x10, 0x80c00) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3b) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) r6 = open$dir(&(0x7f00000002c0)='./file1\x00', 0x0, 0x41) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r6, 0x6612) ptrace$cont(0x7, r5, 0x0, 0x0) syz_open_procfs(r5, &(0x7f0000000280)='wchan\x00') ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r7, &(0x7f00000017c0), 0x3a8, 0x7a) bind$unix(r7, &(0x7f0000000100)=@file={0x1, './file1\x00'}, 0x6e) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x10000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) creat(&(0x7f00000000c0)='./file1/file0\x00', 0x15c) execveat(r8, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) [ 1197.716255] binder_alloc: 6980: binder_alloc_buf, no vma [ 1197.716274] binder: 6980:7005 transaction failed 29189/-3, size 70931694131085167-24 line 3284 [ 1197.811997] binder: BINDER_SET_CONTEXT_MGR already set [ 1197.812005] binder: 7009:7014 ioctl 40046207 0 returned -16 [ 1197.812256] binder_alloc: 6980: binder_alloc_buf, no vma [ 1197.812274] binder: 7009:7014 transaction failed 29189/-3, size 112-24 line 3284 [ 1197.826627] binder: BINDER_SET_CONTEXT_MGR already set [ 1197.826974] binder: 7009:7014 ioctl 40046207 0 returned -16 [ 1197.850948] binder_alloc: 7011: binder_alloc_buf size 2251799813685384 failed, no address space [ 1197.850955] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 1197.850975] binder: 7011:7017 transaction failed 29201/-28, size 2251799813685360-24 line 3284 [ 1197.948713] binder: undelivered TRANSACTION_ERROR: 29201 [ 1197.954748] binder: undelivered TRANSACTION_ERROR: 29189 [ 1197.960710] binder: undelivered TRANSACTION_ERROR: 29189 00:19:57 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty}, &(0x7f0000000200)=0xc) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:19:57 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x20000, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000040)={@mcast2}, &(0x7f0000000200)=0x14) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x138, 0x0, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYPTR=&(0x7f0000000000)=ANY=[], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="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"], 0x0, 0x0, 0x0}) 00:19:57 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b10") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:19:57 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f00000000c0)='./file1\x00', 0x8300, 0x1c4) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:57 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:19:57 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty}, &(0x7f0000000200)=0xc) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:19:57 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x82200, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) fcntl$setpipe(r2, 0x407, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r3, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:57 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) [ 1198.509843] binder: 7028:7041 ioctl 81009431 20000100 returned -22 [ 1198.534677] binder: 7028:7041 unknown command -1 [ 1198.562106] binder: 7028:7041 ioctl c0306201 200002c0 returned -22 00:19:57 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) [ 1198.631989] binder: BINDER_SET_CONTEXT_MGR already set [ 1198.651337] binder: 7028:7057 ioctl 40046207 0 returned -16 00:19:57 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:19:57 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:19:57 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getpeername$unix(r0, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e) open(&(0x7f0000000080)='./file1\x00', 0x0, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:pinentry_exec_t:s0\x00', 0x25, 0x1) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) fcntl$setpipe(r3, 0x407, 0xffffffffffffff81) 00:19:57 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffd4, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) [ 1198.679409] binder: 7028:7063 ioctl 81009431 20000100 returned -22 00:19:57 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:57 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:19:57 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty}, &(0x7f0000000200)=0xc) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:19:57 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@delsa={0xe0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={[], [], @rand_addr=0x4}, 0x4d5, 0xa, 0x32}, [@proto={0x8, 0x19, 0x4}, @coaddr={0x14, 0xe, @in6=@mcast1}, @offload={0xc, 0x1c, {r2, 0x2}}, @replay_thresh={0x8, 0xb, 0xfff}, @algo_aead={0x88, 0x12, {{'aegis128l\x00'}, 0x1d0, 0x0, "0699507a5bbf232602fdeed11262769c0e75181dbee62d6552fd7d24c950c50acf5f7647878ca53ccd3b6375ea2429a2f2704831919977bb1182"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x101) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) [ 1198.800683] binder_alloc: 7073: binder_alloc_buf size 4294967280 failed, no address space [ 1198.836898] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 00:19:57 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r3, &(0x7f00000017c0), 0x3a8, 0x7a) r4 = getuid() fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000140)={0xa0, 0x0, 0x7, {{0x3, 0x2, 0x81, 0x81, 0x400, 0x5, {0x3, 0x525, 0x800100, 0x100000001, 0x1ff, 0x82b, 0x10000, 0x5, 0x3, 0x2, 0x7f, r4, r5, 0x2, 0x1cb}}, {0x0, 0x8}}}, 0xa0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000240)=@gcm_256={{0x303}, "83b81b0c367ac059", "9e913b8c32c912fb73debb344033bcc20d3d1db8b5bbf2cadc28a9d7db513a85", "a11ab8e2", "698b64c4c99be607"}, 0x38) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="38018000100001030000000000000000ffffffff00000000000000a11e748c00fe8000000000000000000000000000bb000000e6c8cb7b22050b4c00000000000000008e5a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="dd37514e9e68be47ed58ef35b9f243fd00000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200650000000000000000004800010073686132353600"/240], 0x138}}, 0x0) readv(r7, &(0x7f0000000580)=[{&(0x7f0000000280)=""/209, 0xd1}, {&(0x7f0000000380)}, {&(0x7f00000003c0)=""/142, 0x8e}, {&(0x7f0000000480)=""/243, 0xf3}], 0x4) execveat(r6, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:57 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) [ 1198.906707] binder: 7073:7080 transaction failed 29201/-28, size 4294967252-24 line 3284 [ 1198.930839] binder: undelivered TRANSACTION_ERROR: 29201 00:19:57 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x7a) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="00fd60008082"], 0x6) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00') r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/enforce\x00', 0x59229e96cc39d972, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000300)) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x3000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000425bd7000fbdbdf250d0000002800070008000100ff03000008000200ffffffff0c00040003000000000000000800010000000080"], 0x3c}}, 0x4000) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000005c0)={0xe8, r4, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd6}]}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x400}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2e90}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4008000}, 0x60000000) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r4, 0x601, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcce4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x4000000) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r6, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) [ 1198.966020] binder_alloc: 7073: binder_alloc_buf size 4294967280 failed, no address space [ 1199.041188] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 1199.072920] binder: 7073:7105 transaction failed 29201/-28, size 4294967252-24 line 3284 00:19:57 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:19:57 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000852a7470000000000000000000001a0000000000005105e8a18e155e57ca0e7ac06f5200200000000000000000000000000000000000856164660000000000000000000000000100"/126], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0, 0x0}, &(0x7f00000006c0)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000400)='./file1\x00', &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000700)=ANY=[@ANYRES32=0xee01, @ANYBLOB, @ANYRES32, @ANYBLOB="02", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYRESDEC], 0xb, 0x0) r3 = getegid() setregid(r2, r3) [ 1199.124086] binder: undelivered TRANSACTION_ERROR: 29201 00:19:57 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) unlink(&(0x7f00000000c0)='./file1/file0\x00') ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:57 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) [ 1199.203310] binder: 7122:7123 got transaction with invalid offset (40, min 40 max 112) or object. [ 1199.216104] binder: 7122:7123 transaction failed 29201/-22, size 112-24 line 3379 00:19:57 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"/334, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="dd37514e9e68be47ed58ef35b9f243fd000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200650000000000000000003001010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000300700005b208a10e18fce86a3134c41651538818c986f28f8eb35d1c4e1da5706edacb92bd7575dcb9b6b8ccf0f5081a69173a74112c65f4cb87c9f0c8edc088c36734c232b176fbbdbbec5a601648f9ec7d45dff5f8af46ba4a59f745c655a8c8897135fe084a80ba919660a71a6ad7640514cfcc70bad278c6736d73e92765b61612da34226ba5fda0e53ead3228392050135f3a087c40ebc9a9b4457a5956d1fe43fd8feb1defa4d350021e6e5051da7e4f739b605ae520ba788a9fe2ac323bbcc99bcc5613f2d19aa3db8348d2eab27340c04962fc2f3d71bccd3fa9268c1073a26c3d697186c26860b25e66ddf64e5000000000000000000000000000000c05067dfff81f3b997f9ce3a4353b1958e533bcec7666e8adff3dbd44343f274932b91a4f3b59a1961130641c02a0e48f435dc7b102cec4c7a1339bdcb654fa2b32d6bcfc37f37cd2b3b9e1f76f80f10b79f4a713b3e82409bac189d247103d234d3cce0996120f3387061c6d174652fde3ba7c511afc1179b8c5d93fa3723713f05b5904d5ebed29ed7160cb913a6f06230df8f7cee642419071cf4"], 0x4}}, 0x0) connect(r1, &(0x7f00000000c0)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-serpent-avx2\x00'}, 0x80) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80) execveat(r3, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:57 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)) getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) [ 1199.246097] binder: undelivered TRANSACTION_ERROR: 29201 [ 1199.260212] binder: 7122:7130 got transaction with invalid offset (40, min 40 max 112) or object. 00:19:57 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = socket(0x15, 0x80000, 0x5) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x9, 0xf84, 0x9}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) [ 1199.306447] binder: 7122:7130 transaction failed 29201/-22, size 112-24 line 3379 00:19:57 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) fstat(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r8}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002a80)=@newlink={0x30, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x10, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0x4}}}]}, 0x30}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@updpolicy={0xc4, 0x19, 0x519f4b5912f7e3ed, 0x70bd27, 0x25dfdbff, {{@in6=@local, @in=@dev={0xac, 0x14, 0x14, 0x1e}, 0x4e22, 0x0, 0x4e24, 0x2, 0xa, 0x80, 0xdcbc6bd8e6e9e573, 0x33, 0x0, r2}, {0x2e80, 0x2, 0x40, 0x100, 0x7ff, 0x800, 0x3, 0xff}, {0x8, 0x3ff, 0x1, 0x1}, 0x9, 0x6e6bb4, 0x0, 0x0, 0x3, 0x2}, [@offload={0xc, 0x1c, {r6, 0x1}}]}, 0xc4}}, 0x8000) r9 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f00000000c0)=r10) r11 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r11, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:57 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$TCXONC(r1, 0x540a, 0xf94) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) fcntl$dupfd(r2, 0x605, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r4, &(0x7f00000017c0), 0x3a8, 0x7a) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0}) [ 1199.368906] binder: undelivered TRANSACTION_ERROR: 29201 00:19:58 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:19:58 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) r2 = socket$packet(0x11, 0x2, 0x300) write(r2, &(0x7f00000000c0)="282f8a662ae81c46a71208d8cd14749cf97c1b96d1461633ded9b7a41bb27e0302129b8f67fd7b22fa563909a303d2aae5e9c38fa9d28812d812360432afbe06a92777762070802676c2c2a71da0e6ceb4ec4490778773a7729b4bc6940cb6b80bba5a2dac2d49cd468b98ff2cfdcaa81f75a3476b7dc12ee5308f570f5b5bd8f956b9f583a4a6fd5c112a4cb2f5c75fa5a3d0d0b2e4d6fc98d11b757521cd5e7988150f7805e53bd584c5e7f2b1b68e748c1d93039bd632ddb4082a1bc49a7eab189e3f877184a07eda78744a4ada01604612d95b088cdb0c86eadc287b", 0xde) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r3, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:58 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3b) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) fcntl$lock(r2, 0x24, &(0x7f0000000000)={0x6, 0x3, 0x8, 0x2, r3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 00:19:58 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) [ 1199.517182] binder: 7152:7163 ioctl c0185879 20000000 returned -22 [ 1199.552768] binder: release 7152:7156 transaction 142 out, still active [ 1199.562408] binder: undelivered TRANSACTION_COMPLETE 00:19:58 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = socket(0x15, 0x80000, 0x5) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x9, 0xf84, 0x9}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 00:19:58 executing program 1: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) [ 1199.581233] binder: send failed reply for transaction 142, target dead 00:19:58 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="38010000100001030000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/381], 0x138}}, 0x0) readv(r2, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/186, 0xba}, {&(0x7f0000000240)=""/224, 0xe0}, {&(0x7f0000000340)=""/233, 0xe9}, {&(0x7f0000000180)=""/104, 0x68}, {&(0x7f0000000440)=""/181, 0x43}], 0x5) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r3, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:58 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:19:58 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r7}]]}}}]}, 0x38}}, 0x0) sendmmsg$inet(r2, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="58875fb9e7470f44abad35f29f08bff24d2ff5d108784367946340edb15f0f189b6b0da7ca6fc474a196e9ebcd20eeea46f12fe9b33a15af905a42268b2f84ddc883f9e8e81946f0883df2436d18d1169f5ad5a662bf325de6ab6ffbd4ab12f5583816d79cecc91de20cfc", 0x6b}, {&(0x7f0000000100)="96ee6be374810fc3d32d04291b76fdffc78bd6196115f7a54724ed3d917673aca9c4a1a4dc9839558e44b0bea96d1c0cbf15f7cb70f796ada9176b0fcb6f000a87b8713818fd7f3e08eb9fc7c8eebc852b0bd16f5fa518a20b55db1abb37b6387c5986ca6eae75b94bbca579a2f51b0db1fbab1e48f47beaa7ab25000060ecf553d858e24dcd6f6712b444def8331e96456479aba7bcdbbb61f37aba80c2b4ab1a5dd7531bf23477", 0xa8}], 0x2}}, {{&(0x7f0000000200)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000000300)="e63b996f43700154f68ed937e6e4610e56130964befd999f86b1d3b09c62f1e3c1180ac3aeb41fe9b93ba5442ab4d679176396402b75f510fc1d8d4d901db54d2695c338a61259ff2791257710eb6e87fcdcd42a12663e45da11abf064d8841ce5394c1aad2dd2112b115a3f69bd1636e8d55ae1440539e0be85701bdced01c5da44f175d5e089df", 0x88}], 0x2, &(0x7f0000000400)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1f}}, @ip_ttl={{0x14, 0x0, 0x2, 0x400}}], 0x30}}, {{&(0x7f0000000440)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000001680)=[{&(0x7f0000001580)="a53b07bb25e8eb0729e226848f4e03f9397194167f1b2ccad38579b810a763d8aea6ae6c2e5741682f4839f0625d9bb2470d6907d61c042e2b538bcaeec5e2f901a8b9138057b89d0ca044710bd921d635698a17cb51eba454c842496b2eeba8e97a3ab08a2595d26d9ef467cc72fd86586deb72c37239ddff94c56bf5a65748195ab5712c422339b354d58db1a652deb208aa97693d8757ef8119b117cdc6d0a2ee76bc9218aa53b702bcdd815b654b6520e1b402c37a7e2d3e610918038dd5b85fa8bbf7abe0292dc43deb51b836339222f77cc7f3be2af771c7b1f6e7dd5a25dad4cb30244fc6aa71629c524df312d57ce4c991878e72a89b75", 0xfb}, {&(0x7f0000000480)="db6cf98d17024f251905c700e951716fa793c81592e32dc9eaedf2299c5582de47d3adebd18e729b8679bb168119c55b53304bdc95f8338d4f6835eb867a565a40680eaaae23ca2bb4d196f436e3859fbc6c5b167fd109ba134585762d2617ace7816ca7b54602b34611fff459eb1cd847cee1c25306670e579797", 0x7b}], 0x2, &(0x7f00000016c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @remote, @multicast2}}}], 0x38}}], 0x3, 0x40800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 00:19:58 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = socket(0x15, 0x80000, 0x5) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x9, 0xf84, 0x9}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) [ 1199.701232] binder: 7183:7185 ioctl c0185879 20000000 returned -22 [ 1199.712341] binder: release 7183:7185 transaction 145 out, still active [ 1199.721559] binder: undelivered TRANSACTION_COMPLETE 00:19:58 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty}, &(0x7f0000000200)=0xc) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) [ 1199.747265] binder: send failed reply for transaction 145, target dead 00:19:58 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x12000, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000100)=@add_del={0x2, &(0x7f0000000040)='veth1_to_bond\x00'}) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000000000000000000000100"/112], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00l\r\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 00:19:58 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x7a) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x7a) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r7}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002a80)=@newlink={0x30, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x10, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0x4}}}]}, 0x30}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x17, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x27}, @map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3f}, @exit, @alu={0x61f1dcc6041e7e29, 0x0, 0xb, 0x0, 0x7, 0x1, 0x1}, @map={0x18, 0x38ae48aa7d862ce8, 0x1, 0x0, r1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x800000}, @generic={0x0, 0xb, 0x9, 0x1, 0x4}, @jmp={0x5, 0x0, 0x5, 0x0, 0xa, 0x202}, @map={0x18, 0x2}]}, &(0x7f0000000140)='syzkaller\x00', 0x8d, 0x29, &(0x7f0000000180)=""/41, 0x41100, 0x2, [], r5, 0x6, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x1, 0x15000000, 0x1000}, 0x10}, 0x70) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r11 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r11, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) [ 1199.758358] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=18407 sclass=netlink_xfrm_socket pig=7192 comm=syz-executor.2 00:19:58 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x30040, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500), 0x187, 0x0, 0x0}) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x7a) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r3, &(0x7f00000017c0), 0x3f, 0x7a) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f00000000c0)=r3) 00:19:58 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x7a) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000140)={@remote}, &(0x7f0000000180)=0x14) [ 1199.759403] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1199.768955] binder: BINDER_SET_CONTEXT_MGR already set 00:19:58 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) [ 1199.768966] binder: 7188:7198 ioctl 40046207 0 returned -16 [ 1199.770715] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=18407 sclass=netlink_xfrm_socket pig=7192 comm=syz-executor.2 00:19:58 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty}, &(0x7f0000000200)=0xc) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:19:58 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3b) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) ptrace$getsig(0x4202, r2, 0x81, &(0x7f00000000c0)) r3 = open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) keyctl$session_to_parent(0x12) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r4, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x4000) splice(r6, &(0x7f00000001c0)=0x7f, r3, &(0x7f0000000240)=0x1, 0x7, 0x4) sendmsg$nl_xfrm(r5, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000000140)=r2) [ 1199.770795] binder_alloc: 7188: binder_alloc_buf, no vma [ 1199.770813] binder: 7188:7198 transaction failed 29189/-3, size 112-24 line 3284 [ 1199.901186] binder: BINDER_SET_CONTEXT_MGR already set 00:19:58 executing program 1: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:19:58 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdd9, 0x12, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x4000000000000}, @ptr={0x70742a85, 0x0, 0x0, 0x52}, @fda={0x66646185, 0x1, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}, 0x420}], 0x0, 0x0, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x7ff, 0x0, 0x2, 0x11, 0x10, "ba910be2d53ad407e8e58bbce53438ee3b1b35cb38292e38b7159980c718d89bf79694300b095ade41eabae6143792c13f5c734beb0cfb2c52ab91dffb059724", "a430f7e56f786968c3ad62fdc14e66ffe35eb8b8850e7a75c0a61c890f23b57faa80a843bae15bbb5aed7e37e3b1c941a017171b5c77f3c8aece632863510459", "69d4af8ae53b677a53b692b8f7ed616b3737fa61b9dd48683519305fcf3bb3e8", [0x7d, 0x3]}) 00:19:58 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f0000000000)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x2) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) [ 1199.901194] binder: 7210:7214 ioctl 40046207 0 returned -16 [ 1199.903914] binder_alloc: 7188: binder_alloc_buf, no vma 00:19:58 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000100)) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getitimer(0x1, &(0x7f00000000c0)) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:58 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000000000000000000000100"/112], @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="000000000020000028000000000000500000000050a67b1937452ecdd3bd7e7ea0000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) [ 1199.904039] binder: 7210:7214 transaction failed 29189/-3, size 112-24 line 3284 00:19:58 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) [ 1199.912338] binder: BINDER_SET_CONTEXT_MGR already set [ 1199.912349] binder: 7210:7216 ioctl 40046207 0 returned -16 00:19:58 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty}, &(0x7f0000000200)=0xc) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:19:58 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000200)=""/194) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r1, &(0x7f00000000c0)=""/43, 0x2b) [ 1199.913878] binder_alloc: 7188: binder_alloc_buf, no vma [ 1199.913898] binder: 7210:7216 transaction failed 29189/-3, size 112-24 line 3284 [ 1199.925729] binder: 7212:7213 ioctl c0185879 20000000 returned -22 00:19:58 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000000c0)) execveat(r3, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:58 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x7a) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x800, 0x0) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/223) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000000000)) [ 1200.069111] binder: BINDER_SET_CONTEXT_MGR already set [ 1200.069120] binder: 7222:7223 ioctl 40046207 0 returned -16 00:19:58 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xa0001, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x7a) getdents64(r1, &(0x7f0000000000)=""/56, 0x326) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000140)) [ 1200.077114] binder: BINDER_SET_CONTEXT_MGR already set 00:19:59 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x7a) write$P9_ROPEN(r2, &(0x7f0000000040)={0x18, 0x71, 0x1, {{0x10, 0x1, 0x2}, 0x3}}, 0x18) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0, 0x37f, 0x0, 0x1}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f0000000000)={0xfffffffffffffd93, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) [ 1200.077124] binder: 7222:7229 ioctl 40046207 0 returned -16 [ 1200.177592] binder: BINDER_SET_CONTEXT_MGR already set [ 1200.177600] binder: 7240:7246 ioctl 40046207 0 returned -16 [ 1200.180383] binder_alloc: 7188: binder_alloc_buf, no vma [ 1200.180399] binder: 7240:7246 transaction failed 29189/-3, size -551-18 line 3284 [ 1200.188461] binder: BINDER_SET_CONTEXT_MGR already set [ 1200.188472] binder: 7240:7247 ioctl 40046207 0 returned -16 [ 1200.188714] binder_alloc: 7188: binder_alloc_buf, no vma [ 1200.188731] binder: 7240:7247 transaction failed 29189/-3, size -551-18 line 3284 00:19:59 executing program 1: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:19:59 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty}, &(0x7f0000000200)=0xc) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:19:59 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f00000000c0)='./file1\x00', 0xcf1d6b5755d8412d, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:59 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="4b63484000000000000000000000000000000000000000000000000000000000000000005e000000000000001800000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000000000000000000000100"/112], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 00:19:59 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:19:59 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:19:59 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x600000, 0x1df) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:59 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ftruncate(r2, 0x10001) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) [ 1200.298371] audit: type=1400 audit(1198.829:56): avc: denied { relabelfrom } for pid=7252 comm="syz-executor.3" name="file0" dev="sda1" ino=17378 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:cpu_device_t:s0 tclass=dir permissive=1 [ 1200.353640] binder: BINDER_SET_CONTEXT_MGR already set [ 1200.353649] binder: 7259:7261 ioctl 40046207 0 returned -16 00:19:59 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000000000000000000000100"/112], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000280000004e1f00005000000000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 00:19:59 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) [ 1200.353896] binder_alloc: 7188: binder_alloc_buf, no vma [ 1200.353914] binder: 7259:7261 transaction failed 29189/-3, size 112-24 line 3284 00:19:59 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x400, 0x0, 0x0, {{@in=@broadcast, @in6=@remote, 0x4e23, 0x1, 0x0, 0x0, 0x0, 0xa0}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@ipv4={[], [], @loopback}, {0x0, 0x0, 0x0, 0x0, 0x100000001}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x80}, 0x20) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000000)={0x4, 0x6, 0x4}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = open(&(0x7f00000000c0)='.\x00', 0x400000, 0x100) execveat(r3, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:59 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty}, &(0x7f0000000200)=0xc) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:19:59 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:19:59 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) getsockname(r2, &(0x7f0000000200)=@hci, &(0x7f0000000000)=0x80) [ 1200.358967] binder: BINDER_SET_CONTEXT_MGR already set [ 1200.358977] binder: 7259:7264 ioctl 40046207 0 returned -16 [ 1200.359227] binder_alloc: 7188: binder_alloc_buf, no vma [ 1200.359245] binder: 7259:7264 transaction failed 29189/-3, size 112-24 line 3284 00:19:59 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x332d0bf860964eee) set_tid_address(&(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @adiantum, 0x1, [], "059eb957854447eb9c6501baff1b4dc6"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="852a74700000000000000000000000000000000000000000feffffffffffffff0000000200000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000000000000000000000100"/112], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000028000000000000005000000000000100"], @ANYBLOB="0004000000000000"], 0x0, 0x0, 0x0}) [ 1200.450360] binder: BINDER_SET_CONTEXT_MGR already set 00:19:59 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:19:59 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000100)='./file1\x00', 0x2a19c0, 0x9) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:19:59 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/relabel\x00', 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="38010000100001030000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="dd37514e9e68be47ed58ef35b97243fd00000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200650000000000000000004800010073686132353600"/240], 0x138}}, 0x0) r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x60}, {r2, 0x10}, {r0, 0x2100}, {r3, 0xa028}, {r0, 0xa0}, {r0}], 0x6, &(0x7f0000000200)={0x77359400}, &(0x7f0000000300)={0x8001}, 0x8) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = memfd_create(&(0x7f0000000100)='\x88])+\x00\xa2\xfa\x83\x98k\x90\x92\x10s\xc1\bkNf\x8f\xc5\x16sq\xf3R\x01\x00\x00\x00\x00\x00\x00\x00\x92\xf9G\xa6H\x9a\xdbj\xed\x9f\xf1L\xd1\x84R\xb2\xbf\x7f\x8f\xe3\xaf\xbc\x93\xcd\xb0\x19(c\x13\xc2w\xcb%\'\xba\x86\xb5^.\x19\xe2^\n\x00I\b\xff\x1c\a7\xd7\xa5ArH\x8f#C\x1e\x8d*\x15\xd7\xab\x03c\xa2\xfb\x02\xb2\x0f\x0e4\x8ejny3\\<', 0x0) write(r5, &(0x7f0000000240)="ca", 0x1) sendfile(r5, r5, &(0x7f0000000180), 0xff8) fcntl$setstatus(r5, 0x4, 0xc00) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x8) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 00:19:59 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty}, &(0x7f0000000200)=0xc) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) [ 1200.450368] binder: 7276:7278 ioctl 40046207 0 returned -16 [ 1200.450607] binder_alloc: 7188: binder_alloc_buf, no vma [ 1200.450626] binder: 7276:7278 transaction failed 29189/-3, size 112-24 line 3284 00:19:59 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40000, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x7a) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000240)={'ipvs\x00'}, &(0x7f0000000280)=0x1e) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4, 0x1, 0xff, 0x7, 0x3, 0x851}, &(0x7f0000000200)=0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r3, &(0x7f00000017c0), 0x3a8, 0x7a) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r4, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f00000002c0)) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:19:59 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:19:59 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) [ 1200.461195] binder: BINDER_SET_CONTEXT_MGR already set [ 1200.461204] binder: 7276:7280 ioctl 40046207 0 returned -16 00:19:59 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:19:59 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty}, &(0x7f0000000200)=0xc) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:19:59 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") open(&(0x7f0000000000)='./file0/file0\x00', 0x100200, 0x84) ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f0000000140)) getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) [ 1200.461445] binder_alloc: 7188: binder_alloc_buf, no vma [ 1200.461464] binder: 7276:7280 transaction failed 29189/-3, size 112-24 line 3284 [ 1200.526603] binder: BINDER_SET_CONTEXT_MGR already set 00:19:59 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) [ 1200.526612] binder: 7286:7288 ioctl 40046207 0 returned -16 00:19:59 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000140)={0xffc1, 0xfff, 0xfff9}) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:19:59 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x4000, 0x0) dup3(r1, r3, 0x40000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x200000, 0x100) ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f00000005c0)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) quotactl(0x0, &(0x7f0000000040)='./file0\x00', r7, &(0x7f0000000240)="27c7d97210ff2e33030d8823aaa7f12ecafec3af59") getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000340)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) quotactl(0x0, &(0x7f0000000040)='./file0\x00', r9, &(0x7f0000000240)="27c7d97210ff2e33030d8823aaa7f12ecafec3af59") r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000440)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0, 0x0}, &(0x7f00000006c0)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000400)='./file1\x00', &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000700)=ANY=[@ANYRES32=0xee01, @ANYBLOB, @ANYRES32, @ANYBLOB="02", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32=r12, @ANYBLOB, @ANYRES32, @ANYRESDEC], 0xb, 0x0) r13 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0, 0x0}, &(0x7f00000006c0)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000400)='./file1\x00', &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000700)=ANY=[@ANYRES32=0xee01, @ANYBLOB, @ANYRES32, @ANYBLOB="02", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32=r14, @ANYBLOB, @ANYRES32, @ANYRESDEC], 0xb, 0x0) r15 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r15, &(0x7f0000007000)={0x0, 0x39b, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x70bd2a, 0x0, {{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x6, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000004c0)=0xc) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000740)=ANY=[@ANYBLOB="02000000010007000000000002000200", @ANYRES32=r6, @ANYBLOB="020058f7", @ANYRES32=r7, @ANYBLOB="02000200", @ANYRES32=r8, @ANYBLOB="02000200", @ANYRES32=r9, @ANYBLOB="02000600", @ANYRES32=r11, @ANYBLOB="040001000000000008000300", @ANYRES32=r12, @ANYBLOB="08000400", @ANYRES32=r13, @ANYBLOB="08007f1d", @ANYRES32=r14, @ANYBLOB="c742af7c28aaf5e4ebdcb7ce7014c0bbdb79f2155a70b310e6317d4a61e8409202801353f677a8f1a3774afb304328d53f92a8e85836301b2f82b37a", @ANYRES32=r16, @ANYBLOB="10000600000000002000010000000000"], 0x6c, 0xade246c785ce2497) execveat(r5, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) [ 1200.543867] binder_alloc: 7188: binder_alloc_buf, no vma [ 1200.543888] binder: 7286:7288 transaction failed 29189/-3, size 112-24 line 3284 00:19:59 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) [ 1200.554408] binder: BINDER_SET_CONTEXT_MGR already set [ 1200.554422] binder: 7286:7291 ioctl 40046207 0 returned -16 [ 1200.556689] binder_alloc: 7188: binder_alloc_buf, no vma [ 1200.556709] binder: 7286:7288 transaction failed 29189/-3, size 112-24 line 3284 [ 1200.674750] binder: BINDER_SET_CONTEXT_MGR already set [ 1200.674759] binder: 7300:7307 ioctl 40046207 0 returned -16 [ 1200.675499] binder: 7300:7307 unknown command 1078485835 [ 1200.675507] binder: 7300:7307 ioctl c0306201 200002c0 returned -22 [ 1200.679124] binder: BINDER_SET_CONTEXT_MGR already set [ 1200.679134] binder: 7300:7313 ioctl 40046207 0 returned -16 [ 1200.695000] binder: 7300:7313 unknown command 1078485835 [ 1200.695010] binder: 7300:7313 ioctl c0306201 200002c0 returned -22 [ 1200.797356] binder: BINDER_SET_CONTEXT_MGR already set [ 1200.797364] binder: 7319:7323 ioctl 40046207 0 returned -16 [ 1200.797604] binder_alloc: 7188: binder_alloc_buf, no vma [ 1200.797620] binder: 7319:7323 transaction failed 29189/-3, size 112-24 line 3284 [ 1200.820302] binder: BINDER_SET_CONTEXT_MGR already set [ 1200.820310] binder: 7319:7334 ioctl 40046207 0 returned -16 [ 1200.820552] binder_alloc: 7188: binder_alloc_buf, no vma [ 1200.820569] binder: 7319:7334 transaction failed 29189/-3, size 112-24 line 3284 [ 1200.867292] binder_alloc: 7188: binder_alloc_buf, no vma [ 1200.867318] binder: 7342:7347 transaction failed 29189/-3, size 112-24 line 3284 [ 1200.872175] binder_alloc: 7188: binder_alloc_buf, no vma [ 1200.872197] binder: 7342:7352 transaction failed 29189/-3, size 112-24 line 3284 [ 1200.927423] binder: BINDER_SET_CONTEXT_MGR already set [ 1200.927433] binder: 7358:7359 ioctl 40046207 0 returned -16 [ 1200.987968] binder_alloc: 7188: binder_alloc_buf, no vma [ 1200.987989] binder: 7358:7373 transaction failed 29189/-3, size 112-24 line 3284 00:20:00 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f0000000100)=@sha1={0x1, "7a47777387b57951fd822a45ee2e50787d120818"}, 0x15, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x3ff) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x1c) listen(r2, 0x8) 00:20:00 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x5e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = open(&(0x7f00000000c0)='./file1\x00', 0x42099b13bb5550b8, 0x100) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000100)) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 00:20:00 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$int_out(r0, 0xa8c2, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:20:00 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty}, &(0x7f0000000200)=0xc) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:20:00 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:20:00 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) [ 1201.164906] audit: type=1400 audit(1199.699:57): avc: denied { ioctl } for pid=7393 comm="syz-executor.3" path="/root/syzkaller-testdir105688343/syzkaller.s3vkG6/1037/file0" dev="sda1" ino=17380 ioctlcmd=0x541c scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:cpu_device_t:s0 tclass=dir permissive=1 [ 1201.726584] binder: BINDER_SET_CONTEXT_MGR already set [ 1201.726592] binder: 7358:7373 ioctl 40046207 0 returned -16 [ 1201.777165] binder: undelivered TRANSACTION_ERROR: 29189 00:20:00 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/relabel\x00', 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="38010000100001030000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="dd37514e9e68be47ed58ef35b97243fd00000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200650000000000000000004800010073686132353600"/240], 0x138}}, 0x0) r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x60}, {r2, 0x10}, {r0, 0x2100}, {r3, 0xa028}, {r0, 0xa0}, {r0}], 0x6, &(0x7f0000000200)={0x77359400}, &(0x7f0000000300)={0x8001}, 0x8) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = memfd_create(&(0x7f0000000100)='\x88])+\x00\xa2\xfa\x83\x98k\x90\x92\x10s\xc1\bkNf\x8f\xc5\x16sq\xf3R\x01\x00\x00\x00\x00\x00\x00\x00\x92\xf9G\xa6H\x9a\xdbj\xed\x9f\xf1L\xd1\x84R\xb2\xbf\x7f\x8f\xe3\xaf\xbc\x93\xcd\xb0\x19(c\x13\xc2w\xcb%\'\xba\x86\xb5^.\x19\xe2^\n\x00I\b\xff\x1c\a7\xd7\xa5ArH\x8f#C\x1e\x8d*\x15\xd7\xab\x03c\xa2\xfb\x02\xb2\x0f\x0e4\x8ejny3\\<', 0x0) write(r5, &(0x7f0000000240)="ca", 0x1) sendfile(r5, r5, &(0x7f0000000180), 0xff8) fcntl$setstatus(r5, 0x4, 0xc00) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x8) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 00:20:00 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setxattr$security_selinux(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_run_t:s0\x00', 0x24, 0x5) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000000)={0x4, 0x5, 0x6, 0x1, 0x1, 0x4, 0x13, 0xff, 0x8, 0x40}) getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) [ 1201.839215] binder: BINDER_SET_CONTEXT_MGR already set 00:20:00 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x7a) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "3112de1433dbda18", "8f2622ff6d0ad63ff3f7859c7cc438b4", "c3708d75", "bb6d08028462dc12"}, 0x28) r2 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:20:00 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty}, &(0x7f0000000200)=0xc) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) [ 1201.897013] binder: 7431:7438 ioctl 40046207 0 returned -16 [ 1201.897216] binder: undelivered TRANSACTION_ERROR: 29189 [ 1201.897259] binder: undelivered TRANSACTION_ERROR: 29189 [ 1201.897328] binder: undelivered TRANSACTION_ERROR: 29189 00:20:00 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x10, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x7a) write$P9_RREADDIR(r2, &(0x7f0000000240)={0xa6, 0x29, 0x1, {0x9, [{{0x10, 0x2, 0x5}, 0x5, 0xff, 0x7, './file0'}, {{0x40, 0x1, 0x4}, 0x100000000, 0x81, 0x7, './file0'}, {{}, 0x1, 0x7, 0x7, './file0'}, {{0x5658281da19d76c8, 0x1, 0x4}, 0x3, 0x9, 0x7, './file0'}, {{0x0, 0x4, 0x2}, 0x80000000, 0xf1, 0x7, './file0'}]}}, 0xa6) [ 1201.897378] binder: undelivered TRANSACTION_ERROR: 29189 [ 1201.897595] binder: undelivered TRANSACTION_ERROR: 29189 00:20:00 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) [ 1201.897654] binder: undelivered TRANSACTION_ERROR: 29189 [ 1201.897743] binder: undelivered TRANSACTION_ERROR: 29189 [ 1201.897789] binder: undelivered TRANSACTION_ERROR: 29189 [ 1201.897871] binder: undelivered TRANSACTION_ERROR: 29189 [ 1201.897919] binder: undelivered TRANSACTION_ERROR: 29189 [ 1201.898004] binder: undelivered TRANSACTION_ERROR: 29189 [ 1201.898052] binder: undelivered TRANSACTION_ERROR: 29189 [ 1201.898472] binder: release 7212:7213 transaction 152 out, still active [ 1201.898475] binder: undelivered TRANSACTION_COMPLETE [ 1201.898521] binder: send failed reply for transaction 152, target dead [ 1201.898593] binder: undelivered TRANSACTION_ERROR: 29189 00:20:00 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:20:00 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty}, &(0x7f0000000200)=0xc) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:20:00 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl(r2, 0x5, &(0x7f0000000200)="f4ffa1695e1dcfe87b0171fb1745fee2f42c11a257cc81fe29602c8695f6cc82a2db921dbcb09a6828d524d9981e56d421b5959747a54d77b4ada51eb9999ff5a19f24f5cb61542e2454") getdents64(r0, &(0x7f0000000000)=""/54, 0x36) 00:20:00 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) [ 1201.898639] binder: undelivered TRANSACTION_ERROR: 29189 [ 1201.898728] binder: undelivered TRANSACTION_ERROR: 29189 [ 1201.898776] binder: release 7188:7192 transaction 147 out, still active [ 1201.898779] binder: undelivered TRANSACTION_COMPLETE [ 1201.898821] binder: send failed reply for transaction 147, target dead 00:20:00 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='syste_d\xa6\xe2\xa7\xe0\x02\xe7z\x8as0\x00', 0x12, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) socket$unix(0x1, 0x2, 0x0) 00:20:01 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) [ 1202.519624] SELinux: Context syste_d¦â§àçzŠs0 is not valid (left unmapped). 00:20:01 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:20:01 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f00000000c0)="1c0000001a009b8a7e280b000000000000000000da203ca7455c0000", 0x1c) readv(r1, &(0x7f0000001480)=[{&(0x7f0000000100)=""/72, 0x48}], 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x7a) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000580)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}, 0x800}], 0x1, 0x0, 0x0) r5 = socket(0xa, 0x80001, 0x37) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0) dup2(r6, r6) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = dup2(r6, r8) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, {0x8, 0x1, r9}}}}]}, 0x38}}, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00') ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r10}) r11 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r10, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r11, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x2000c00a) sendmsg$TIPC_CMD_SHOW_STATS(r9, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r11, 0x300, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x804) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r11, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r11, 0x904, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x514, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x44085) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r11, 0x101, 0x70bd25, 0x25dfdbfe, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x4, @link='syz1\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x401}, 0x40004004) r12 = syz_open_dev$binderN(0x0, 0x0, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r13, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) quotactl(0x0, &(0x7f0000000040)='./file0\x00', r14, &(0x7f0000000240)="27c7d97210ff2e33030d8823aaa7f12ecafec3af59") sendmsg$nl_netfilter(r13, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xc}, 0xc, &(0x7f00000005c0)={&(0x7f00000014c0)={0x1108, 0x7, 0x7, 0x400, 0x70bd25, 0x25dfdbfd, {0xc, 0x0, 0x1}, [@nested={0xc0, 0xe, [@typed={0xc, 0x8f, @u64=0x80000000}, @generic="ba7bcd4d6271fff8ec7d9b5a4ff958fb76c6f9424a08ddf03a3c8ac1443a5be8cc9a3757a1fbe524ff953a1bb8e75ef48779766cc0268fed60a2054efe31fee17440dc89bc582cf8abea4ac48fa47bdd0db6e28566835afcb40e3a22944f41d07c0671ae3f938f35efea3127fd8d061c497d66174ef77f4a38228056d418f99f2b860d694008a0c6b10d96fd3e887f6f", @typed={0x8, 0x67, @u32=0x20000000}, @typed={0x4, 0x4}, @typed={0x14, 0x5e, @str='/dev/binder#\x00'}]}, @typed={0x8, 0x54, @uid=r14}, @nested={0x1024, 0x4c, [@generic="e4df18b5b76992aab5", @typed={0x14, 0x78, @ipv6=@local}, @generic="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", @generic]}, @typed={0x8, 0x1e, @str='%\x10\x00'}]}, 0x1108}, 0x1, 0x0, 0x0, 0x8000}, 0xc040) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 00:20:01 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:20:01 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:20:01 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty}, &(0x7f0000000200)=0xc) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:20:01 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:20:01 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) write$binfmt_elf32(r2, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x81, 0x4, 0x7, 0xbf57, 0x3, 0x3e, 0x1f, 0x2f3, 0x38, 0x3b, 0x0, 0x1, 0x20, 0x2, 0x80, 0x4, 0x8}, [{0x9e9073df034752bd, 0x9, 0x9, 0x800, 0x0, 0x4, 0x8, 0x997b}], "b85b42684d9fd09285420db973f86d70789627ea0849395dd7e3f437567a148eca8df53fcecb2395da406452ce6c0d856610f664c5d8cbcff0661c7612af76d2475d9bd87545b7f5bea020e94baba256fbe9863a20e89398e660b9cb53047b68123eb8b7af12262fdd3fa0b7abd8164109b8d3504ff4f1609ed692e01429e34abf2ffc17ec73c02439f8f247f320dab5ede12a7bf7f8569c9bfbfab626445360efe8d6e2dba72bceb0037457288ddfc97acbab6a574c8ba8f26f1f9e5f3a36a00175500b267d131fa678f6daa2b93148a973a2d12eca45430127f1452c766f2c09687f7838", [[]]}, 0x23d) getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:20:01 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x7a) getsockopt$inet_opts(r2, 0x0, 0x0, &(0x7f0000000000)=""/23, &(0x7f0000000140)=0x17) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:20:01 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty}, &(0x7f0000000200)=0xc) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:20:01 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:20:01 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:20:01 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='bpf\x00', 0x52400, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:20:01 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:20:02 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x3, 0x1, 0x3e}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0}) 00:20:02 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty}, &(0x7f0000000200)=0xc) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:20:02 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000200)={{0x2, 0x4e23, @remote}, {}, 0x40, {0x2, 0x4e23, @local}, 'lo\x00'}) getdents64(r0, &(0x7f0000000000)=""/56, 0x38) 00:20:02 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:20:02 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:20:02 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:20:02 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x40) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) timer_create(0x1, &(0x7f0000000140)={0x0, 0x3a, 0x5, @thr={&(0x7f0000000000)="df4e1420", &(0x7f0000000200)="99eea0fb5606104d7d93c66b2ba894a551ef685d9f9d81c631479665271791d7cd744012b656535c022ab8e1d3dd61937772738a6e40cb671c21005a33fe59a90e732bf5a49f43d4a292f9eacee849930abe78093bba7f9cd5584085f230a87acde88cd67e5ac5321c75a2b84d172b08feab78d02cf8f9b0307fa7c71a0318c40e472a439310d7d3cd5dba73253e02d44e2cb052aa1954bc586dc40629cc1c7d3a5b0d88ab4f1049d0c2e4a4277cfc89feed342d5c"}}, &(0x7f00000002c0)=0x0) timer_gettime(r2, &(0x7f0000000300)) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r3, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000340)={'nr0\x00', 0x100}) getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) [ 1203.642028] binder: 7572:7575 got transaction with invalid parent offset or type 00:20:02 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty}, &(0x7f0000000200)=0xc) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) [ 1203.694499] binder: 7572:7575 transaction failed 29201/-22, size 104-24 line 3454 [ 1203.709818] binder: undelivered TRANSACTION_ERROR: 29201 [ 1203.717460] binder: 7572:7583 got transaction with invalid parent offset or type 00:20:02 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r3, &(0x7f00000017c0), 0x3a8, 0x7a) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r4, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4) 00:20:02 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:20:02 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:20:02 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) quotactl(0x0, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000240)="27c7d97210ff2e33030d8823aaa7f12ecafec3af59") lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r1, r2) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11631d74b41cf7ca4840000000000000000000002570648c3b1681ff000000000000000000000000000070000000000000001800", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000000000000000000000100"/112], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 00:20:02 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) [ 1203.754231] binder: 7572:7583 transaction failed 29201/-22, size 104-24 line 3454 [ 1203.787971] binder: undelivered TRANSACTION_ERROR: 29201 00:20:02 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000007000)={0x0, 0x2ee, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32], 0x4}}, 0x4a8e83dafca61898) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000000)={0x8000, 0x6, 0x401, 0x8, 0xffffff89}) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x5, 0x80) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r5, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$EVIOCGID(r5, 0x80084502, &(0x7f0000000240)=""/236) signalfd(r4, &(0x7f0000000200)={0x2}, 0x8) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$IOC_PR_CLEAR(r6, 0x401070cd, &(0x7f0000000380)={0x6}) getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:20:02 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:20:02 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty}, &(0x7f0000000200)=0xc) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) [ 1203.924596] binder: 7598:7604 unknown command 1948082961 [ 1203.930412] binder: 7598:7604 ioctl c0306201 200002c0 returned -22 [ 1203.961614] binder: 7598:7614 unknown command 1948082961 00:20:02 executing program 2: sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x6, 0x30, 0x80000000, 0x20, 0x7, 0x7ff, 0x7f}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x0, 0xffffffffffff3ffc}, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) creat(0x0, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x5) socket$inet(0x2, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000000)=0x3) 00:20:02 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000140)="27ab", 0x2}, {&(0x7f0000000200)="adb216c8307e94c37f53bcb53c91a7afe1e933daf90df7787d909977a3daeefe174e1b", 0x23}, {&(0x7f0000000240)="8e8c55aed818a87dd73fbc5447dd8a4d9af4d4d0334fd19d5378e362d154c9c98b9d1713845a2bfe7eaa8460e83c39dcb94fd4087bd6", 0x36}, {&(0x7f0000000280)="e9ce2ec8aec9505116d4d696db91496d1710ff0581e3f3ca14b00efc1adf15bd542395b21b0f962b68ba077f1afe2ee7638f483ace5247f21fd703fa5c8298b09bd28ba1026b72af3b6fc806d5e7459c44d7657f8b4e9c60de95590044d410365642529904468acb3c6d0228427f876258cc3816d29da3e2fd2369190726bfbc777a1397ae6ad40cd61e4cc1a0804d32e79b660e5017db11b5f3edcaa4f2540df5800b13577f75d9d2", 0xa9}, {&(0x7f0000000340)="4cf200485ff566e1738fd4f724efe7f3300ad9617c7bce3052bc84a4d53d7be09fdffccc48890a5a1dff97f36d38b9339c5d9554f1a2f02437716b77a80110e58300237442a465a6189f73d1160bfae8c9ff065fdbad994369079da71b16e78af2e4f04ae09f61162c6d28b2f2e42dd60739ca3f4dbb088a81b278555f0e83f5bd9fa75701539a39f4441ab6b805596c81915fb20fea0564005952dbbaf0857590fd943a894e6d7a74f1e20a80e3410149f08da04b", 0xb5}, {&(0x7f0000000400)="f8c9f38b263e4b0bd6665d37ae34fb756a41c43ab0cdb5ba4faf", 0x1a}], 0x6, &(0x7f00000004c0)=[@ip_retopts={{0x24, 0x0, 0x7, {[@rr={0x7, 0x13, 0x8, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast1, @empty]}]}}}], 0x28}, 0x400c040) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) [ 1203.980985] binder: 7598:7614 ioctl c0306201 200002c0 returned -22 00:20:02 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:20:02 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:20:02 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty}, &(0x7f0000000200)=0xc) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:20:02 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000007000)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:20:02 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:20:03 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty}, &(0x7f0000000200)=0xc) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:20:03 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:20:03 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000007000)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:20:03 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:20:03 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty}, &(0x7f0000000200)=0xc) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) [ 1204.944548] binder: release 7623:7631 transaction 176 out, still active [ 1204.951846] binder: BINDER_SET_CONTEXT_MGR already set [ 1204.958195] binder: undelivered TRANSACTION_COMPLETE [ 1204.990131] binder: 7623:7641 ioctl 40046207 0 returned -16 [ 1204.990166] binder: send failed reply for transaction 176, target dead 00:20:03 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ptype\x00') mknodat(r2, &(0x7f0000000140)='./file0\x00', 0x8, 0x0) preadv(r1, &(0x7f00000017c0), 0x3a8, 0x7a) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') preadv(r3, &(0x7f00000017c0), 0x3a8, 0x7a) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x56300, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, &(0x7f00000001c0)=0x9) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r5, &(0x7f00000017c0), 0x3a8, 0x7a) write$FUSE_WRITE(r5, &(0x7f0000000180)={0x18, 0x0, 0x7, {0x3}}, 0x18) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000000000000000000000100"/112], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000002800000000e400005000000000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 00:20:03 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000007000)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:20:03 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:20:03 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty}, &(0x7f0000000200)=0xc) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:20:03 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) [ 1205.139485] binder: 7678:7684 got transaction with invalid offset (250688651132968, min 40 max 112) or object. 00:20:03 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty}, &(0x7f0000000200)=0xc) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) [ 1205.181254] binder: 7678:7684 transaction failed 29201/-22, size 112-24 line 3379 [ 1205.232486] binder: undelivered TRANSACTION_ERROR: 29201 00:20:03 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:20:03 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty}, &(0x7f0000000200)=0xc) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:20:03 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000100)=""/183) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r3, &(0x7f00000017c0), 0x3a8, 0x7a) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000580)={0xfffffffc, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x23}}}, 0x3, 0x6, [{{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x14}}}, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @rand_addr=0x3}}, {{0x2, 0x4e21, @loopback}}, {{0x2, 0x4e24, @empty}}]}, 0x390) 00:20:04 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:20:04 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty}, &(0x7f0000000200)=0xc) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) [ 1205.475191] binder: release 7708:7710 transaction 181 out, still active [ 1205.484598] binder: undelivered TRANSACTION_COMPLETE [ 1205.494937] binder: BINDER_SET_CONTEXT_MGR already set 00:20:04 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) [ 1205.494947] binder: 7708:7712 ioctl 40046207 0 returned -16 [ 1205.565819] binder: send failed reply for transaction 181, target dead 00:20:04 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty}, &(0x7f0000000200)=0xc) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:20:04 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x440, 0x81) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000100)=[0x6, 0x1ff]) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x74, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/214, 0xd6, 0x1, 0x25}, @fda={0x66646185, 0x3, 0x0, 0x29}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000300)={0x0, 0x28, 0x48}}}, @register_looper, @decrefs={0x40046307, 0x1}, @decrefs={0x40046307, 0x2}, @dead_binder_done, @clear_death={0x400c630f, 0x3}], 0xeb, 0x0, &(0x7f00000003c0)="4282db90c69eeeb78ae9a671bab5793480f5f77977d92cd80d016d5c1bcc6e249335a94124654904056fd9c0869e7b1acc86d1f745a2ae02e8f20682acfb6d60734f34a6473eb9831a2953bd11aab1b0c7f8f6863a3cc53cced6c3d87c0e8d7b15151b0a6f39c2bb06dc98b01e05167c69af37dccbc54233891d42b204f8d68e839c7a2f4ab92e24e089619a30e6e518432c17c754780f463bf1eabfe492694348f0d3730cf050f4f8d35e190017aad8ad15a0e15325b80fd1167032dff437cf775ec77135b7121c4def6efb1ea9d93b603d287b635097672e80a21d491c184f33730b9e92cf818d7d3c07"}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x7) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000500)=[@exit_looper], 0x0, 0x0, 0x0}) r3 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) fdatasync(r3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 00:20:04 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:20:04 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:20:04 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:20:04 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000005c0274c10000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000000000000000000000100"/112], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 00:20:04 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty}, &(0x7f0000000200)=0xc) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:20:04 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:20:04 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:20:04 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty}, &(0x7f0000000200)=0xc) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) [ 1205.803142] binder_alloc: 7746: binder_alloc_buf size 584115552256 failed, no address space [ 1205.823559] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 00:20:04 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = getpid() ptrace$getsig(0x2, r1, 0xffffffffff600003, &(0x7f0000000040)) r2 = epoll_create1(0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000000)={0x15}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r5, 0x10, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup3(r6, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r8, 0x446, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x9, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x2, 0xfffffffc}, 0x0, 0x0, 0x0, &(0x7f0000000340)=0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=0x1003}}, 0x31f) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={0x0, r5, 0x0, 0x4, &(0x7f0000000240)='/.@\x00', r9}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001dc0)={0xffffffffffffffff, r4, 0x0, 0x5, &(0x7f0000001d80)='user\x00', r9}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)='wlan0)&\x00', r9}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={r1, r3, 0x0, 0x8, &(0x7f0000000480)='\x00@\x00\x00\x00\x00\x00\x00', r9}, 0x30) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r9}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r10, 0xc0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, &(0x7f0000000240)={0x7, 0x4}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0xc, 0xffff0000, 0x5378d4d7}, &(0x7f00000002c0)=0xc695, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)}}, 0x10) r11 = socket$inet_udplite(0x2, 0x2, 0x88) r12 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xb8a0) ioctl$KIOCSOUND(r12, 0x4b2f, 0x2) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x1) ioctl(r11, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) [ 1205.849318] binder: 7746:7749 transaction failed 29201/-28, size 481036337152-103079215104 line 3284 [ 1205.887149] binder: undelivered TRANSACTION_ERROR: 29201 [ 1205.901088] binder_alloc: 7746: binder_alloc_buf size 584115552256 failed, no address space 00:20:04 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty}, &(0x7f0000000200)=0xc) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:20:04 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x0, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) [ 1205.947381] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 00:20:04 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000200)='{system]\'\x00', 0xa, 0x2) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:20:04 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty}, &(0x7f0000000200)=0xc) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:20:04 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:20:04 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000000000000000000000100"/112], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000a6000300"/24], 0x0, 0x0, 0x0}) [ 1206.003876] binder: 7746:7760 transaction failed 29201/-28, size 481036337152-103079215104 line 3284 [ 1206.032028] binder: undelivered TRANSACTION_ERROR: 29201 00:20:04 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) [ 1206.110123] binder: release 7778:7779 transaction 189 out, still active [ 1206.126746] binder: BINDER_SET_CONTEXT_MGR already set [ 1206.132171] binder: undelivered TRANSACTION_COMPLETE [ 1206.186062] binder: 7778:7783 ioctl 40046207 0 returned -16 00:20:04 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xf6d6, 0x7, 0x0, 0x10000000, 0x6}) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:20:04 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty}, &(0x7f0000000200)=0xc) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) [ 1206.186136] binder: send failed reply for transaction 189, target dead [ 1206.195345] audit: type=1400 audit(1204.739:58): avc: denied { setattr } for pid=7785 comm="syz-executor.3" name="file0" dev="sda1" ino=17462 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:cpu_device_t:s0 tclass=dir permissive=1 00:20:04 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:20:04 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x0, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:20:04 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000000000000000000000100"/112], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000dd4f00000000b815bd"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 00:20:04 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) quotactl(0x0, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000240)="27c7d97210ff2e33030d8823aaa7f12ecafec3af59") stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in=@multicast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000000500)=0xe8) fsync(r0) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x1, &(0x7f0000000300)=[{&(0x7f0000000200)="9430724180bc45c5ac84f4786dde7067795be564d5dd09d3ba83bf1549b0601b3c6e182cb9ff73e816a943b407324e6ed58e6655b3ee4a933525bdcb320cb623219ccaf9750f9a97c75879216404eacf1f8300f562f14bcf968bf30e8633852a7900e87133c3e74b77e402bc45f14b4a93598ace44ebbc56e0c73baf17a74f04797260d2e5f4f55ab55b231cbb2c67651e7e85b5155c5a36c86ef5d2a8d7fc03dfac4aa8d32142eb432550a20c0a4dd3854fb94421b72c3146db899a79ad99bc3ab2ba8c6694b92693e0fae5eb6af8085dea65890e6dc3134343cde065bbe82e4d7a", 0xe2, 0xcd}], 0x80010, &(0x7f0000000540)={[{@fat=@sys_immutable='sys_immutable'}, {@nodots='nodots'}, {@dots='dots'}, {@dots='dots'}], [{@fowner_gt={'fowner>', r1}}, {@euid_lt={'euid<', r2}}, {@obj_role={'obj_role', 0x3d, '!'}}, {@audit='audit'}, {@euid_eq={'euid', 0x3d, r3}}]}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) rename(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='./file0\x00') lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:20:05 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x0, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:20:05 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty}, &(0x7f0000000200)=0xc) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:20:05 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) [ 1206.477300] binder: 7817:7820 got transaction with invalid offset (343010181120, min 40 max 112) or object. [ 1206.488649] binder: 7817:7820 transaction failed 29201/-22, size 112-24 line 3379 [ 1206.502630] binder: undelivered TRANSACTION_ERROR: 29201 [ 1206.542622] binder: 7817:7824 got transaction with invalid offset (343010181120, min 40 max 112) or object. [ 1206.578584] binder: 7817:7824 transaction failed 29201/-22, size 112-24 line 3379 [ 1206.609951] binder: undelivered TRANSACTION_ERROR: 29201 00:20:05 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:20:05 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x478, 0x270, 0x270, 0xf0, 0x0, 0xf0, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x4, &(0x7f0000000000), {[{{@ipv6={@remote, @ipv4={[], [], @multicast2}, [0xff, 0x0, 0xffffffff, 0xffffffff], [0xff000000, 0xff, 0x0, 0xffffff00], 'veth0\x00', 'lapb0\x00', {}, {0xff}, 0x2c, 0x6, 0x5, 0x8}, 0x0, 0xc8, 0xf0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3f}}}, {{@uncond, 0x0, 0x158, 0x180, 0x0, {}, [@common=@srh1={0x90, 'srh\x00', 0x1, {0x3c, 0xf7, 0xff, 0x9, 0x8, @rand_addr="143e1c4b1bd460a1b9f9702cb66f4ce2", @mcast1, @mcast1, [0xffffffff, 0x1fe00007f, 0xffffffff, 0xff000000], [0xffffffff, 0xff, 0x0, 0xff], [0x9cc44d02c041912f, 0xff000000, 0x0, 0x457cb422581deb04], 0x15, 0x10}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x110, 0x138, 0x0, {}, [@common=@dst={0x48, 'dst\x00', 0x0, {0x8, 0x4, 0x0, [0x1, 0x7ff, 0x2, 0x200, 0x8, 0xf4, 0x6, 0x0, 0x3, 0x101, 0x0, 0x5, 0x12b, 0x1, 0xfffc, 0xfffb], 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:20:05 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x40000000009}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x8000}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0xffc1, 0x50}}, 0x40}], 0xfffffffffffffea7, 0x0, 0x0}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000180)=0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000200)={0x0, 0xb5, 0x93}, &(0x7f0000000300)={'enc=', 'oaep', ' hash=', {'wp512\x00'}}, &(0x7f0000000380)="2d85c8bbfbe5831f51e03323f068d6d34a541b5932dea1047310a87f2dff11ada87d3b068afe28442dd7f06e507086c84cf1f23e69430933bd1cb79ee88899c71b9689a6eb15c709e532414d1b9ea8077d3dcdd8d5844480972f8a99446679d486ee1b3000a06ba1abc6345298c4ed9bb19c483d1f043f7e72dc9ac8e12596cdb97cb608aca5135cf40067bc2738023dc7d406a700223a77797fb069637df32e6f6b65e54ff0c23cbae5db29fcc61d18c3913ddd29", &(0x7f0000000440)=""/147) fcntl$setownex(r0, 0xf, &(0x7f00000001c0)={0x0, r3}) accept4$packet(r2, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000005c0)=0x14, 0x80000) preadv(r2, &(0x7f00000017c0), 0x3a8, 0x7a) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x38, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x81}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x1]}]}, 0x38}}, 0x4800) 00:20:05 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x0, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd"}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:20:05 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty}, &(0x7f0000000200)=0xc) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:20:05 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:20:05 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x7a) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r3, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000d00)={0x2, &(0x7f0000000cc0)=[{}, {}]}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0)={0x0}, &(0x7f0000000600)=0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000c80)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000640)=ANY=[@ANYBLOB="cc050000020700032cbd7000fcdbdf250a000008494102f8a4b40886d9827bc23bb1aee66a6beecff52afda552f5223ccd21f565942e0d530bff3234a57c723c6d6a39cdf55ae8ced17da921d88c17291bd65c9f5c21015fadf10ab400ceaec37bb180062e7c9c9255f00552741765fd133221254d54bedcd81436ea523f57a159279cd7a86ab7e1fe26ca9bce1bcd19456e87a2d2a6febdff6fc0bb6ec45c03d3c3e97b0014004100080036000000000008002200", @ANYRES32=r4, @ANYBLOB="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"], 0x5cc}, 0x1, 0x0, 0x0, 0x40000}, 0x48060) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)=[&(0x7f0000000240)='security.selinux\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)=']/nodevem1\x00', &(0x7f0000000300)='system_u:object_r:cpu_device_t:s0\x00'], &(0x7f0000000500)=[&(0x7f0000000380)='\x00', &(0x7f00000003c0)='system_u:object_r:cpu_device_t:s0\x00', &(0x7f0000000400)='\x00', &(0x7f0000000440)='system_u:object_r:cpu_device_t:s0\x00', &(0x7f0000000480)='system_u:object_r:cpu_device_t:s0\x00', &(0x7f0000000d40)='security.selinux\x00\x1a\x13\x9a\xf7\xb7y\v\xf6\xdeM\xfc\xcd^\x03\x15']) getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:20:05 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x0, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd"}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) [ 1206.976606] binder: 7844:7852 got transaction with invalid offset (65473, min 40 max 112) or object. [ 1207.039665] binder: 7844:7852 transaction failed 29201/-22, size 112-24 line 3379 00:20:05 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='vxfs\x00', 0x8, &(0x7f0000000240)='\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) symlink(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) getpeername(r1, &(0x7f0000000300)=@ax25={{0x3, @bcast}, [@bcast, @netrom, @remote, @default, @netrom, @netrom, @netrom, @bcast]}, &(0x7f0000000380)=0x80) 00:20:05 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty}, &(0x7f0000000200)=0xc) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) [ 1207.113259] binder: 7844:7852 ioctl c0306201 200002c0 returned -14 [ 1207.172386] binder: undelivered TRANSACTION_ERROR: 29201 00:20:05 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) quotactl(0x0, &(0x7f0000000040)='./file0\x00', r3, &(0x7f0000000240)="27c7d97210ff2e33030d8823aaa7f12ecafec3af59") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0, 0x0}, &(0x7f00000006c0)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000400)='./file1\x00', &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000700)=ANY=[@ANYRES32=0xee01, @ANYBLOB, @ANYRES32, @ANYBLOB="02", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32=r4, @ANYBLOB, @ANYRES32, @ANYRESDEC], 0xb, 0x0) keyctl$chown(0x4, r2, r3, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500), 0xffffffffffffff60, 0x0, 0x0}) 00:20:05 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) [ 1207.187813] binder: BINDER_SET_CONTEXT_MGR already set [ 1207.187823] binder: 7844:7860 ioctl 40046207 0 returned -16 [ 1207.374962] binder: 7881:7886 ioctl c0306201 200002c0 returned -14 [ 1207.384352] binder: 7881:7888 ioctl c0306201 200002c0 returned -14 00:20:06 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:20:06 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:hald_exec_t:s0\x00', 0xffffffffffffffa4, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3b) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) ptrace$cont(0xffffffffffffffff, r2, 0x8, 0x10001) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/22, 0xffffffffffffffa0) 00:20:06 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x0, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd"}, @in6=@dev, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:20:06 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty}, &(0x7f0000000200)=0xc) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:20:06 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:20:06 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x7a) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="00fd60008082"], 0x6) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x3000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000425bd7000fbdbdf250d0000002800070008000100ff03000008000200ffffffff0c00040003000000000000000800010000000080"], 0x3c}}, 0x4000) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r5, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$sock_inet_tcp_SIOCATMARK(r5, 0x8905, &(0x7f00000001c0)) preadv(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000300)=""/221, 0xdd}, {&(0x7f0000000400)=""/60, 0x3c}, {&(0x7f0000000700)=""/204, 0xcc}, {&(0x7f0000000440)=""/152, 0x98}], 0x4, 0x7f) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000005c0)={0x110, r4, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x38, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4008000}, 0x60000000) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x44, r4, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffeffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_NODE={0xe, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4050}, 0x4000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r6, &(0x7f00000017c0), 0x3a8, 0x7a) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r6, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x1) 00:20:06 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/uts\x00') r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3b) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x3b) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f00000015c0)='ns/mnt\x00') r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) r14 = gettid() ptrace$setopts(0x4206, r14, 0x0, 0x0) tkill(r14, 0x3b) ptrace$setregs(0xd, r14, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r14, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000002540)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002580)={0x0, 0x0, 0x0}, &(0x7f00000025c0)=0xc) r17 = gettid() ptrace$setopts(0x4206, r17, 0x0, 0x0) tkill(r17, 0x3b) ptrace$setregs(0xd, r17, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r17, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0, 0x0}, &(0x7f00000006c0)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000400)='./file1\x00', &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000700)=ANY=[@ANYRES32=0xee01, @ANYBLOB, @ANYRES32, @ANYBLOB="02", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32=r18, @ANYBLOB, @ANYRES32, @ANYRESDEC], 0xb, 0x0) sendmsg$netlink(r0, &(0x7f00000026c0)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x840000}, 0xc, &(0x7f0000002500)=[{&(0x7f0000000200)={0x13b4, 0x1c, 0x8, 0x70bd2c, 0x25dfdbfe, "", [@typed={0xffffff83, 0x52, @binary="cb12c274345f336a7785c0844dfe69f300e51c0913914bab955a53a7b8599ea7c6d44dc161d049bad3fb771be3bec1973efbe4fde6cd66faa4fadb945a2e4e19b7357009baaf67b1949bb3fd3f0efa49b3ff978647483a6be00d1caad33f8ebc1528d855f28501cea98cb2692bc738cf7dbaee6804047eed5881aad826aace71ecf450739ef5f5a0ff0f9312de7b71f0c4dd6b4aa3f8f05a5c7a8824bf2313f2705316878c452c97d68556679693d90ae7c96f893d449220c92aaa049c933c2ba1cb744607b36d09a72da22a43de7aae3a32402de045faf6b5e5c85a2a9a0d4930db7256fc431b3f243b97118d4eb14cae"}, @generic="e6d9f69b7caacb250c432770b6f5f9e4455e", @typed={0x8, 0x73, @fd=r2}, @typed={0x86, 0xd, @binary="cf2ac81cf942f9f77fcf4412691a23a5c453e169b7cf816d8327950761dcdf43dee76c2b866a715b029cafa8802ad67fefc080c57ab0b955a35420e270059934e207a03e76987f4b24f60b1ccec97a763b9a64960019b279ea395cd127f1c4c00358cd9dc96fca26cb33b8f979a0dc74ba10f1e72b4d66d9ae9a734b34eb473a43936b612b0642ca4fe3aec2cf9b766ea52ab5866fd3772417ac4d7ab0a9f76175e7c31b72874406569100e72b6d3926b0d8d20a4850f61c29e868c2a2e637829679e07e18fd4dd317c1f3b79b62071b"}, @nested={0x11bc, 0x5f, [@typed={0x14, 0x76, @ipv6=@remote}, @generic="29a7c93790f752a7d72985d37f1e029d99e3215c786e7ee6a89bb50788b046529d8fc100c83c39bfc6ce423d149f3c9ad38df93498c0d78f3c9cd5e689d8959462f051faeb92f3c9d2ac01e53e7735841d77d00fdbeba15b40740d7e2e6eb09e72ad67b22e1c9af48789c0fadd1e5e5498e658db65889d76ee567e23579857ad5de7202a372295bf9b97b3fbece226ff97d4ee67602b357827b850ffe27400667134e2bb869fcb5457ee66aaefe71c6ba2a4d533c49d4502210e557dbe3e5032137fb052f89e02790b4e0e6e", @typed={0xd0, 0x11, @binary="6c48b9c3b74e7c3914d487738b60b3fc43b10bba3903910a6ea0ea9e4e38e332388d71fcec57f3d5e277fdd096e13f571eb6205a989ff12c0353406fae7ca49a9f7f49016d634e2e5935ddc7c467576f2463af03c54f15d2e122c4f48b051c07607556d85b90ef604e541ce674d22a343d815b61a8180ef98f8a8e4636b0fe8076ceec42f6e58aafbd3c0f3b8f7352fe1733cb78b1c36843408a7e77a92d2f17ec6a1f50a6ba3cd616de23ddf8c1f6882e61c9cfbf35f2d906dbd5f3ef8206166574a707c339655d3e289b46"}, @generic="36aa2538a77dcbaf9bcaa3ba921753c120d4ad5cf72cdd426f334162aec0a4fd3e14809c86a4569671b73b6b6f51d843bd5e05d2d9ebd8ddb40a3f6c0fc2a996b9402759abaae29be312c36ffabfc04bfa378645761c650ad3d5bd8499611dd459a1deb727835c2a6af9f9234a4a478b37b8949ee3750a2736325ae54157daeadec04f581c0bb6b4454a821d4689664e8ef2badd8f81dd4d62a5f8e3b8ab26672423f5cb1af2268a9def95adb893ab27b6aa927e6717a97b97c6b831577dc6a750274df7721576048d4d5620319808e2d0e4c0ce817f3a74ae96dd193f77726a69d6b338618dbb5a7870ea6b1d119181ce186afd9eb5490e876e68cb27eedb14fae03820a8ed01b19be15b9f6c55585a3391ea994526ac395f393d512244456f5b155b371df109fca0c3cc28ba8a262d9ab502d71ba9fceeed1f15238c9988fbd97cfa9d85d4d7ba03b3a1135b7622d4cb3167e0a9aa8c579b4984f752b64560174f8e74ac210c4d273e78625acc25ba195bc3ec0da4429a7b9d0c78d49d43e58db1c4e2ac525fee9b708923143734a657267a13106a88efc81ad2f5a9a63c63913ffd75179213e8bb02909732f18f59a0b195f2b771e5fb6d14ec66449ad302466dcaec160709d57fea0728e0d4216046d0714f65d664a45ec22a1de499ef77063494c493d0950c55d05ad1a545947acade2d8b93f27d1ba9cd8cd0dff03cc6be5073cca6b7c4429d12fcae01d7ec5b8bc8cc7a178e77b16ed7f0972fe0a85772665d634b098ef079eab7b4fb4f745c5bc534abddd72de0127fe6a9217b80af5bfc7ed196519cd6f5c8f409130ea09f604e230260be3a35f92c4fe890ca08597ff0690f5e755927223f04160fa5776534c5ab86a18a637b8068a02623feca64ce9af84991643ab352b7087cc9ace0004493839dce843013f8dadc98e6beceeee77e8025bdf3056b028b89ccb569f2379a188474917c9de6bd798729f84fc5e9fa7e69bc75139b50f5663737b18b250bbbda0cae62212e4008d9d0497fbbbeff2196298d5a1b8ba9eee0e071a74be77d69c0122346711df7b24db4137dcbacb89dc0a9477db97d1a0a3f7b45638a17f27151cedbe44f335b095644542bc77f3d82d9c03f908e9305fec4f8222f38c2793b3334dee3857d3c865704f72c6db9dd330efe96399832a650fdea04bbb2fd4fc7c6fa1d87df5f24445d941bf7ee239a7f996fccef626fd51655ccbc3ee9243bea6a8aaf350aaeb9616091275a5514d37b8ffdc977ab86043e4c905ab0492b6519d17114f38e5328d268da951552a7ba7d3e300872a63f34c79aee380e099399204f5f2acf4a4ba1b58683dc83faca0a86298d31959ecac42535dbe1f61e0adf45bd6b7660b7ae17ed02df0cd4f471b3bc7fbdb801c210c9b091fde481b46115269ba93af7e30b53c3c0d68917e4ae79bc673629b65959d9fa42e5e6040d244d6a32b260b862b5ea2ff7a5bfe0378d5d603c3de5e2ee25b246117e24284d28c50ef3282616f432f1c729e2ddbb1eb0c8aed0f7c8af7892d20ce128a93cc1e884bb609a9288b6b4db74ddcdcaf4f878bc9f3b92a0d54b22fd36410b95f2e349af634c13875a6714ddad07ecfb9ce64097a248cdd6b8c3fa28a419158c76cfb17099b03bdaa0a58b998325f6b1d631f8866197a20865906548f0c771eda3b6f20809a04191c7acdb396017827f021762128a8a5ebd9f29726ee0b99d9282fb60fed032af2fbbf9194a2dc65cffdfc082d97a3e07fdda9a6b01cef67ea9b8b5f4b5463f1d8c3d31d609a48d29e4a34fa24893a6c1672dfd4e0edf4d8d8bf30a1b499241dbc7a6533f1652816cde35c9f61fcbd3ee287454b3aa50662f564b054248386ceaa007102e2d8c165afddfe64c495c37818342a19e21d1a79a8928a39b1a89c0f33e39cd6f4420c0f4a675e979864564a7174c05d0bf1aef2231540ceaea0d6e1677ef08a62c537a95375d7221cc88248ca315ee6c12a2a5291b345f607ccad727b05b3500817fa81142fa30ace57f97467473d24cdc966e2ab264d480c04c5bb529e8c5b4a9a585e269dcc75171a2786d30f43782f28e2cd3c06827534d7d143994c74ee3d3ce71e0f8e796cedc8ecdfb27db41fd5897bd200d490b269baaec52fa8b2ec23e6aa98b94fb607071f377488f327d669da392c538ed36e9c397f2d190b1789e0394632a1186bd14a173207270667018654c2e6262fc3fa93bdc364a4fe0236ba0ac2f72044bbcb9ffc8f625ec6218dadebf8afbdcb141fb73e5067279664df562e2a831b26dd71c5881bfeaaa9792a6698705a6f8b39a36e4b8f8c55f7a01efffb7bfae0368e26a4b264b54f96515bbed3dd29fbd8486372fc0b04ba29748df343c8482e43ae4280e4cc29fd628ed080c62a8524e03e2b567451929ce2a28aec0b963381eaadd9020fcdffc8a750bc3eaeab01ad54d2676b4beb500c89808152ffa7a2870a7a9bef5954aeaf258c27688ede4fe57c79907678cc9a79ccd66db817e8e6ff73f419187334cf4b88af176b305dc962f4aed6979123408103c0eb6c7b42511c74f5049734df6b070ba24e77fbd32f6ac0ce7bce4d4224f2e697fbb452ba92d41237e18237ae43425e94c2539972ad82bba4071ff3ee582631e38217e6ce86e9e2b548a8f1aa66e9f76b45bd5af703425bd8920af9a5c8791fed7a9f9eaf3e3dcc2aab902b7a7213ab42eab3f66e716fa08ab2ba2b711eb5c099443470398d07fa4d1d0946742338d43366ab1dcd70eab87d6feb1cf4001d9a3983228cd564fc8377d68fbccec3176d4fbe7c8afdc958d2a95c79d8f1357ec931b37176580e778476ef3fed94a5815b6051bb7d523965ccf072589cdbcfb46275843f631ff26f888737e86fed23d1b6e194371efa840d4cbc002dee3e976dc7e3f9a1b38e84573f69b5f0bf27f65fd47be0144f488e67aeea29dc688878b78be9ef8b5f19e2ade43dac34ab2cf4a2b6f67d853034cb6764c491ac310ccdfc053ac8a8fe322bfd48c2ab265768774b5e084d6c41031215cd414172282eb37201815b8f038da81bae2d22a94cf0dcded02163cf6274c55e01c6be6963802f6015e1fce586fd9eb62b6c1aaf399dcfd4e74e47302d2fe7482c0a044b59bd9bb99db38984c5a0e897c82a42f7f71baea986c4a01b92e744f02626d6121f3924cac77c4fb9f885edffd6f94e0ede8e30cbc014e0875e9043e6cfe7f9db3ae24ecf05e9639573c5708d040f716724c6d9324343065a69f834d29db3edbc49f28a168431ddafcd527c6eab15ce0febedf74ebe8412985cc53be92996d501dc1f248fd055ceefbbf1cf88d23ad9833117379e33b3526e59aeff5f1784a414f13596b17924be956e17243f5b8ded04e0f04856ab1c960906b795109c2f6a4c49a7f97b1c4974b8bea22f970ad1e886518325bf244ff9475222f868da19eb6ffb71f3b376dbd5b679f548e785e358f607b6d28e04d835966834805a6a228c1e9d81b3f1c879563dfeb409da0d64a2f5f5c0978314e360d48bc8e334605a354c9dcf84be8701643ecad125011ac1c7018c914cc00da230461869f58e8a99a3797fed43f165144960c0eb983e23dcf1404f5e2b22f26c847162e4b0390a63fa8e6b24d4637bc675833fcee4b84a74439a7b0d19f76632be589d96ab4f18079fa701115cb07071f588e06b4cc05008c6b2a671907fe032014c31f5579c795483665f00db9a13b7f2c57e4c0e87e65f7d040215175da31d5bdd8ff21470fb6babdb43785e103a94be59978b0ed48a421029644ff7cde6fc5dc3f13d09ce8134be410eca4aa1a913cb585134d0dc96865e969ce014aab9e45105fb356cadbc179f89f2d5a2d7b8dd8123c88421c92d1548d38704dd120a05e5a73100c9d72b5ee6db24a942a9146062746223e481518303724d7a9e64dffac0c6a3902f26d7d92b3a91bc0162a20a97c733b71010faa538ed074fc22b4fac447690a833b44838185b0deb17b8d68be14a224b8c78535d6be19a09ce5b381bd2187a74bf1aef208662c39fd7d173a5eca6ee8b86824866066e2541dd2cd560f9442934420cb859e401a4f530a65943c77511b2825babfacba82d28431eed1a125cbdb31eac4bc40bb7069c3b9b9f70bd29300c50cf86c96b97c94ab70c945d3d1b1ed364287b5f53fc3888cfd823b5dc19b5c0b5ebf95ab7ff6836687e64fb7214f74093e8613a9b4fcc33a19dcf6889bf2d2f74c82ba92c808a4b2c4de45ee687eb6da4bdf89751927b808fe95b8ece944960a7c4a903d5386e5a6876e91db7c4a75a8cbeab4cf2fee4413e1530b5b14acbfc77b51a20df22e1643a164ad7a0fffbb4118a3386b3d67ecb318aa495da332aaa823128fb2e0e1b957e2c9c47506d13057fecc29899f9b12eb8555c9c5aace99f85d9dca62212f4106fe573a3ec0500d41a012bfbef865b793342312ed1ca3fc16275d9a99a236fc0183302edc53a69c1eb8ccf968926dd019bbed552ad422ba27b69108f6e86c4108391de4dd95abfdb5b78d716607cb9160b378e99e61d765b93c4314211fa6dd908b00a25020e1f1d6d3f408cc116f033d08c3657c0f06105d88a37de4ead64e38144ab2b4609b131907023d7847ff8d86b66d2a2a87e12fa422f0008b0b5e2735e76e5b942cfd1532f28f95754d402a90c118aa466190978372334f9d38fef08fbe80981cbac7038aa33dca9aac1f8843bf2e3cc0b79741d8d3e9f8c5a3aeb4bed4b908a4d1b43e471ad800fc652b76e4e829d0ecbc290f796d17fc61ae7745f8398502d630e3d18c65da307d0b3cef57301e01b7b2fcc20f504b654d8f6c62da482ee859562726385aaadf1f4981e7788febef437f775e64a4eea2b882320ab5cd3dab76b27c6eabd5a9996f232169bf1f737caf4b7d6366d93eedd8495be8642d09877ee0f41c8584c1e1543c6efae8f6203d1aa13c09179192a0c24fe4f4352bda648a47ea38fa2144e43854549908f10c558447616020117399f6f4dbabfe4ffb40fbdb7517722bd8e53f4f94ea24b723cc1d30880974f2883b146bd0a7b17610cfcc96d59ad60985dd049afb38096cb508340e8cbf500d5ed093a351d24c21041da43f6e728cb75c5e11ed5bb6b3548ca5f1e868bebb92aa1554824ad2fd5279054d3631d1db6421e72c4ff28a264b44e01683efaa4cdd08e723ac217f91bbde9910b66e3ddab388b6a3b47b207b84928c8b8b00cf494ae95dbf0103d8ca425361f614afcf5c30cd784253941e8f0b960255454c74cb49a00bba9e642867165ab23dff59be047899fce63e00ef1c883ff7a421dc0b44e21f5b848b39707d1924fd90c03e5ac2e38afb322f1ffeaf22810539ac0212ef8c2a3bcca4955dd326d6eaea2f451618ad83d9a1c1863b5e763999a2d3412e54b53ffa04e62d2476255973ecff215fdc68fa554d846f0daf75db8cdfd3a63322798669c8dae9344d531e6969cf21a5c6524ad6179231d788ba4b2fa5866e12947db8e86a6f14909e22b021d2eefe9ab14b281f6395acda9315fcbf66deceb4440fb4bf1f2a408249a6e4609bde87794e89a8a3944334643fc0f89f50a8f74610c4ab4e5a51693af5348d365d3fca48e9224be5c2eb77e7c0f4133f1d1f24293c742d2f26ba998d57150d6d323816d8daa6791e17f78ebc588618116439c2690f50dee68b53a0da374b70984dcb471465eec13ea50573b1ff6908677c081ea2feb086437d643ad5cbeccef8b7b51aade79826995eee0e557c47a285356893abf0569b5b22fcaa", @typed={0x8, 0x18, @u32=0x2f74}]}]}, 0x13b4}, {&(0x7f0000002700)={0x614, 0x33, 0x520, 0x70bd25, 0x25dfdbff, "", [@nested={0x190, 0x20, [@generic="3d6d62f837fe5a3948c1eecd515bf7728d3a863d8b343d5e50a4e4c9553c79a4bec9edb85a1b6249eeffaf196e279dd787ac593b46e515818643dd9ddebe1a84fe6d22bd3bb6081d8e81da7e1fc5fe85da93389f680cbd743a3afa60764ff1ff8d5e5b597f1944bfd99bf524f122e362b5e28d9cca39771f78371f28c8d2769d1c9806819b07731c5fc9d7fc244e9a915f4f4c813fa9dd3ef352caff7b2bd77bd3cc28c9971182cae062ef233d0329e6f687a4e037c316756bd7fadf858f2798248952819a23ebc773a860a3d856a334a9d2721b2070e35e2e3e94f3345383cb1c", @typed={0x8, 0x2e, @pid=r3}, @generic="c6cb0ce5e1c2c18c0baf97623541b31d21055a608d717e9831cfa528a617373533278023986032e0d6340961596943256ad666da3d68b08c7117796ac56563461c12cfe7a1602c9a71a13495395222511436b47ffce235ff713a92d657a835aeab158739ee4da69e0fb40955cc48a78c7d7f03a5edabf066d69b6a4294b66b5b761e0451a81018a63c74f13f7d61354fd809921292aa9b86d5ee104d9cb4d79bddf3"]}, @nested={0x60, 0x4c, [@generic="a7fd76a5e9ebdaa9f2fdd899442ce5bdaf8a21a95d9f91042e1a8aba5bc0b6882514fde956beb6540d0f0a103b38735eca614b004c7a507216a663f8d4212d7c5d7686f7dd8a2bff5ab5082b3120b80d6de8ce", @generic, @typed={0x8, 0x6, @pid=r4}]}, @generic="bb7a0fd98832652e34b5ce3f04b4ac112c5a28b40e65b918233858025a84c49b3716b3f09d2c93de94f0e9615f6da51e7450ad02fd824005f0b6dde2c69e310d879d44a2713af8386771d35ddad0c7bbe2cd73a88a057046f27f9ba38ba2639f2eec5bd4b5a0603d17af614c091719a4bd6ed3aaa55c89982ab16d4f0974b4b266fe77ccb541ad85d820a2a904b2d4025bc2ddf8802a37dcc05f62", @nested={0x0, 0x7fff, [@generic="a9f11ec73edc8762f1e49093db93bf2e810e91275c71e523", @typed={0x0, 0x19, @str='proc\x00'}, @typed={0x0, 0x89, @pid}, @typed={0x0, 0x5f, @binary="2bd7e8fd443b6d43873250e4855cec56dc0265f78c067f65e5bae5f67245b5a98874984fa5ea508676d00c3d494d6888b7de352f19c89d67f9739a316a54caa3eff1d2b730986c23a76d4ebc739b1dda17a5147a408b281d803fc043911b3f2b802b550182fb499a970d455f4c7b758343b871bcfc144e63dd36d269003f8e612d9b67cd9465ebb54d3df9ed00913d0343552384248861a868f94bf3ab02b9d95897b04a22fb785f02239a7a23572ad531c279e137fa23e631a59101"}, @generic="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", @generic="02e6db9da94b97e1f56db3f22eab8224498590f9a03726fc8d35332247b0607da9cfaa5b5c66540cb0658b262e3f5d3a075ef278ff7e5ee00d6ebb69eef54f7e0c6daaa73cacbeb28d637aecc0202e988776d34b64b1c32940b286255311e9557b34770f4244b17da7f18a8bc7d6e2e4f524705e2a841633e379e428", @generic="14424a11fb0f03e40ad00fbea8401005a7802cd0d21ceb65be246f44b50562593140f60a0bb6319cc5", @typed={0x0, 0x86, @ipv6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x25}}}]}, @nested={0x2d0, 0x63, [@generic="5311411b1d0f", @generic="719b8980a5ef77eae643240939255faf51a2394df4a76ef504e85c9b090bb623aa9587f636e47c419f3b543a491ddfa583db45bf55fae9393326c60416bab96e873a601daffffa275c7814bcb7832fc41593dc6bcd7e4645109c248cbf9a774abd3c1bfea9f0ea8b63256b8543b639fa08a8fae664e02da7540ef45f299164274551490c2f98c6b004667092358fe2c4dd1b0c3dc1f9f72f166656215b9280a6af0e6e87bc6183e8421b0e9df292ec20382e3c7d55648b02c7535a7940fe7c13d8e337293302e5501ed5eeddd141818dfb88957bfb84861d76ea3c62816a85186888dd9f5d5fecb4", @typed={0x8, 0x5a, @ipv4=@dev={0xac, 0x14, 0x14, 0x28}}, @typed={0x9c, 0x19, @binary="e0095daeecadfd952de9f0564da0d03e4ee4f32b97f7707e32ed34c4686ac572a6f601f3ba9f1f724ff9a9e2b6882a77e09843e9e6beb0a4e84b1a61e589cbfb9d37c1876a41ad6449b92cf466c0a1d2f00dd9caef185be12f5f0d35355b865c077009e9a8afca10e7945018abfb54ca60f6fa01a407e2da59ed5c9584a0d2ac54b4eaa15b0774f3d7f546a6d5cb2a6aaed99c7884"}, @generic="6f2e0f0cfbb9db6b9f70b5976fea558f237ba93209d902cdeec7e2745617d9fa123531bba3b65e97e25c347b2ad09005ea07", @generic="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", @typed={0xc, 0x21, @u64}]}, @typed={0x8, 0x28, @fd=r5}]}, 0x614}, {&(0x7f0000001c40)={0x898, 0x23, 0x2, 0x70bd25, 0x25dfdbfe, "", [@generic="48c3", @typed={0xc, 0x51, @u64=0x7}, @generic="0dde2abce6d8f68b33eeeb4e72bfec7fab03c9b76edeb65ab5f19dba0600dd496a7c862615976d4ea123b9e0baaa3473a461d6922c0513bf4e24c937d0e949e53a06765998dd52787fc71a8ca7bdc3ef3d602e8e2bb5938fb87e9253823b5378c99de14f72056920adf0779acdc5806e84d7a9d122f2c61d58ec9e2a77139a77683cc4fd6067c6585f76865545d985ca8e8209d9e74373ef124d79f2d9c3d4298027332c19f3cf5e75fea45ea97ab37161c3ef38a1b8dbf74d7c9cf6090de1b4d9", @nested={0x1b0, 0x18, [@typed={0x8, 0x8f, @fd=r6}, @generic="c45aa24a94e2ea73ddeaadd2ba6501753c13b62ed848842fde4a16127e071ca6cc65d06e2f20c766483fedd3a429588212220925cafcdf1ee8dd31f1b41e106d4ca9126953d2e333a9f638db098e4acf867bd2514efcb6f104619b998dfc039928f2cefbb1d84cb9b0256831653cf8c44e82585b6acd83dfc64ad557d5e6b8cef7e75ffd45c3d3b22ece7a565fe02695d8f4262936eed3a62c2fa761436dcfe8115907ec9f442b1cf8e93b93edffc08ba963aca54a47a8843adb09b41cd798f44dc37ac09326493530", @generic="e5dc9cb293f923424abdb6b99e2e1c0e3a2fdaaf648d37a4befbe61224a5ba33e22eb35565b661a74bcf8f98d76cd89c4539a70ac6d8fcf12fe5a36b26e381270b5eab13a3df1a408c8bd8b733cd01d51a9d5f3889f399b6d06f1daaf007b52269a1ad76f07e31e50fe069576e588f74e74c0daf62bc6cb94e9a338894a0e76c36d1464f29da14636ab9bc46dc99a3bc2f833a7fa579cee654482262f4933934a7c4", @typed={0x8, 0x77, @ipv4=@loopback}, @generic="af3bf0d14a63f93512f23a38ba9786f3cc55ab98ef3b927c1e0fb123e546087dfba756486bb9f56b1cac960871a4"]}, @nested={0x264, 0x7, [@generic="e0fd2e032b12bef39ac021085c018e226f993e700c64d77646670b4c3b049ff687a947ae0bff5eb6c30369712304fcecaee067865e458ebd1a033b2200a2b428bf4fff6d9aa7c859e5588e8309fc6b83ef57efacc27bc29f57deb98132673439d6aefd8c4fab63d00a74de44ba7c4de1d1fba929ad8c934d97d736e9c2ab36a943dd98cd61f033bdacb1e937c5434a9d0b7eb8d37235c1206ccbc364c40a2d546cd633386d94c82a1eaee59a0baacc25a846542d9a30896c5e2131f976925ba7a72fd87700ac0ba6b83cc46b2a26efe8462deb9dff3bd601546549535d85035bddef1a", @typed={0x4, 0x5c}, @generic="578f3d41580536a118f235c7bc6aa94cf97606a1b122c5a8c7eb1d19dd95b94ae8b3517af059d7b8e557df59e98c3c1d1d37563a2e4c2c20d94422649d3c4b7dfaddd979b416a329ff4a182a26239cb40eb28eecef0187d2243459aaa1c8037b1b6583e35b47e5181a2c6ca911ce36ff73e79d8476bb2e76aecef6e2f5ccfdf733bca15205b5e61191d7b39f902c8fb163c7dba9", @typed={0xc8, 0x21, @binary="aaf206aa679fda653e9d7ba5f1e9db0e50aadf0d5e66a572ce2a9c071e84517a9e5f5116ef357d59f83eeac40cb2331f0b6067315e86fb8169836a2b1278164d826807622e0f59ea3b5ca858d4f72697420c57cb4be8a072f9b61af2bda97823a2ec425c231b52bb0b2f17f909502c9eda3428e1fd88897020bd6b04ae11b2cbafee0940d658e62369e764332601cd7046d1e100b5e02a221bde8cf14c23c5f7b5a32b2390dae41c5b6cc141744e6030c3025ad5210b5f0fe3f4b534d7bd2b0e5913ca"}, @typed={0x8, 0x49, @pid}, @typed={0x8, 0x52, @ipv4=@broadcast}, @generic="a70cd8bf13cadec67bb2b26e"]}, @nested={0x39c, 0x40, [@typed={0x98, 0x27, @binary="1610a85599c3a5c2eab1870279a22b66ab5d52ba608fc02d5d6e3b08ff9448d888d0cb6d7e653d2027a5365fd6decc81dec94ac321216414c113758ccc96085c5dcc98f4b5c936bde54415b9136eef10e4ae729cc40edff991af7fa6466453affa0977ce783716ac053704e36f5e93ddb19037b56d7bd101edc6b5fb3da24fa459390bbe953f1eba82e7b21913abdde92acb5c"}, @typed={0x8, 0x8b, @u32=0x2}, @generic="82a8e2551a297e7fa1e2e8cf3b3e1d99295a10a50496ea584011a7b456e2b7bf0043b3db57ac770119bc729f8009258460b47b457b3df7351a87f2d244e9dfbaf8a813d054d44e445476a41c55c929df6213ee5ff7fea0bfd5160b29b51c0f88dcaccf6eb9321ea24dc1fbc2ea25a2", @generic="449b4b77e71e0b31a441a5a68210e03515a775d9488adbe41acdcb484c706d4fe43993b4cef69c1955a2dbc4b49b6b9cc9d60876a699c7141cf825babf24a842963c90e8a23395f8957badb3bad6b41d0363e944372e2a24972f3f6100a5e8852cdedd897a2fd40b01f3b00e7b10e14da5a3f82bfa2bb07908efd56eb0baa13d1d1c3aa0240651de2b8bc22a6c93d3be27c053fc58", @generic="ab44a0eb2e77c74df3caf68d23349a939f91475ee009dc867d2cf8c0a119703a1af7e0f4bdebe8e2413c64c8cd346c1d6a83524cb9138ea08ad42c9fa6de9a4eaef39fb52fb19bf85ef4fa76f02dd145c2c8e24c7ecd0a86a3c844145a0d80178a5989e6e011e3b2cedacec81612588298b8eef87fb593c24bd9cb9575553448bc4339ad4daf3457b2310f624e64456bfdc5da7254242f811ac2ff0f6680648a83f4b786c7e7b6c3b1d2f560ab3c6e67628d8b3bca687a41063bff7a9a2a360e9ac0e159100d9015adc49146b273372ab8e008c832cb1266ea6afe052eb18faae9ce748ed7c6d303", @generic="ba3f6fb77c0f104c323a49ae560653d920e43abf654d1b9ca6d9de2f98cc06b9e4abd7543c4cfff39bf5a6453f850977fbc4271709f1326ff9ef17be4a014f2de5865615addc6a9b3a2ec8aa7d2160f6e7b07f4d7fc8476c7d18150c3e9a9df17eed36b5e7c802df0a24b1597e4e781e79f6910fb915fe06ffe6a8281a2ba85f2e6d9b1e28cbe03c41a5e155968e268745c92fcfca2219c2137ddf6a0f08c616c3cb90dd271b012c18674558482707065da7a2daea8752", @generic="b7371de012c1a0cf3c976fb33811c60fa49486326a041403f9fd692a4cb32d0469febfdd51b3e699a55cda504066636af042a6bc229dd9d18d5851f8832854389f1bf6a07e1ecdfbcbcae44dc49229294262"]}, @typed={0x8, 0x62, @ipv4=@multicast1}]}, 0x898}], 0x3, &(0x7f0000002600)=[@rights={{0x24, 0x1, 0x1, [r7, r8, r9, r10, r11]}}, @rights={{0x14, 0x1, 0x1, [r12]}}, @rights={{0x1c, 0x1, 0x1, [r13, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}, @cred={{0x1c, 0x1, 0x2, {r17, 0xee00, r18}}}], 0xa0, 0x800}, 0x4000) getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:20:06 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty}, &(0x7f0000000200)=0xc) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:20:06 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x0, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd"}, @in6=@dev, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) [ 1207.925121] binder: release 7890:7900 transaction 199 out, still active [ 1207.934944] binder: undelivered TRANSACTION_COMPLETE [ 1207.940412] binder: send failed reply for transaction 199, target dead 00:20:06 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x7a) pidfd_send_signal(r0, 0x6, &(0x7f0000000000)={0x26, 0x3ff, 0x101}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x56dd) fcntl$dupfd(0xffffffffffffffff, 0x0, r3) [ 1207.988521] binder: release 7890:7908 transaction 201 out, still active 00:20:06 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x40, 0x0) getdents64(r1, &(0x7f0000000240)=""/37, 0x25) [ 1208.030752] binder: undelivered TRANSACTION_COMPLETE [ 1208.043817] binder: send failed reply for transaction 201, target dead 00:20:06 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x7a) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) [ 1208.063025] binder: 7915:7919 transaction failed 29189/-22, size 112-24 line 3138 [ 1208.076838] binder: 7915:7923 transaction failed 29189/-22, size 112-24 line 3138 [ 1208.136637] binder: release 7928:7929 transaction 205 out, still active [ 1208.144074] binder: BINDER_SET_CONTEXT_MGR already set [ 1208.149700] binder: 7928:7930 ioctl 40046207 0 returned -16 [ 1208.155527] binder: undelivered TRANSACTION_COMPLETE [ 1208.155577] binder: send failed reply for transaction 205, target dead [ 1208.155614] binder: undelivered TRANSACTION_ERROR: 29189 [ 1208.155666] binder: undelivered TRANSACTION_ERROR: 29189 [ 1208.193550] binder: 7928:7933 transaction failed 29189/-22, size 112-24 line 3138 [ 1208.193906] binder: undelivered TRANSACTION_ERROR: 29189 00:20:07 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:20:07 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:20:07 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x100) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f0000000200)='sys\\em_u:object_r:systemd_passwd_var_run_t:s0\x00\xaf\xad\xf7O]_z\x96\xd9)\x1e\xd5Q\x95\x11\xf1o\xd4NE\xc9\xc6JF\x05\xd9p\x0e\x8d,\xabH\x9d\x9e+\xd6~\xe6\xf5\xde\x00\xfc\x00\x00\x00\x00\x00\x00', 0x5e, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:20:07 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3b) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) capset(&(0x7f0000000000)={0x20071026, r2}, &(0x7f0000000040)={0x20, 0xffffffff, 0xfff, 0xc0000000, 0x1, 0x9}) 00:20:07 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty}, &(0x7f0000000200)=0xc) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:20:07 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x0, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd"}, @in6=@dev, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) [ 1208.764296] SELinux: Context sys\em_u:object_r:systemd_passwd_var_run_t:s0 is not valid (left unmapped). [ 1208.793766] binder: release 7937:7946 transaction 208 out, still active [ 1208.801862] binder: undelivered TRANSACTION_COMPLETE 00:20:07 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000140)) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r3, &(0x7f00000017c0), 0x3a8, 0x7a) fchmodat(r3, &(0x7f0000000180)='./file0\x00', 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r4, &(0x7f00000017c0), 0x3a8, 0x7a) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000100)=0x54) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) r7 = dup2(r5, r6) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, &(0x7f00000001c0)={0x2}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x20000001}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0xfffffffffffffea9, 0x0, 0x0}) [ 1208.809885] binder: send failed reply for transaction 208, target dead 00:20:07 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty}, &(0x7f0000000200)=0xc) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:20:07 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:20:07 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x0, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd"}, @in6=@dev={0xfe, 0x80, [], 0xa}, {}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) [ 1208.922356] binder: 7954:7955 got transaction with invalid parent offset or type [ 1208.938499] binder: 7954:7955 transaction failed 29201/-22, size 112-24 line 3454 [ 1208.958504] binder: 7954:7955 ioctl c0306201 200002c0 returned -14 [ 1208.970756] binder: undelivered TRANSACTION_ERROR: 29201 00:20:07 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='\x02\x00', 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x7a) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000000000000000000000100"/112], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="96a22b49a0690513345447eed8c827658dd0c4cb49d0721a671105155fb91645a73a29185b48a691e6eb939542ece82397ccc47ae26b5114d132a1fe3da375422abe7bf2f34cf66e0cedb1473b98c2a4a72b89b49b85d9c7df9f697c040c08300a59afb684242d6ab1cea7"], 0x0, 0x0, 0x0}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r3, &(0x7f00000017c0), 0x3a8, 0x7a) setns(r3, 0x0) 00:20:07 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000040), 0x4) r1 = creat(&(0x7f0000001840)='./file0\x00', 0x8) sendto$inet(r1, &(0x7f0000001880)="0dbe82b8acada67c4b59c3e73fc3cd8df23a55cdb92890bc456b8f68d164d2e523c29c91f0c49f7e7f4b574110c9846bc877bf54e1c2106dd17bc7ce870f826295c01be03eef44030285d8", 0x4b, 0xf3e474ce1f83f714, &(0x7f0000001900)={0x2, 0x4e21, @broadcast}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x73}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) recvmsg(r2, &(0x7f0000001740)={&(0x7f0000000100)=@can={0x1d, 0x0}, 0xffffffffffffff80, &(0x7f00000016c0)=[{&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/164, 0xa4}, {&(0x7f0000000340)=""/180, 0xb4}, {&(0x7f0000000400)=""/130, 0xffffffbe}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/193, 0xc1}, {&(0x7f00000015c0)=""/241, 0xf1}], 0x7, &(0x7f0000000040)=""/14, 0xe}, 0x20000000) dup(r1) bind$packet(r0, &(0x7f0000001780)={0x11, 0xd, r3, 0x1, 0x9, 0x6, @link_local}, 0x14) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000000)='.\x00', &(0x7f0000000180)='security.selQ\xb9\xea#\x00', &(0x7f00000001c0)='system_u:object_r:auditd\x88>\xc3\x05|\x00z\xaf\x01\x01', 0x22, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) sendmsg$nl_xfrm(r6, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a00)=ANY=[@ANYBLOB="38010000100001030020000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb000000000000000000000000000000003faf6383baa3c20964cd840c85b6a0a6b1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="dd37514e9e68be47ed58ef35b9f243fd0000000032000000000000000000000000000000000000000800000000000000914b150000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0f00000000000000000000020000000200650000000000000000004800010073686132353600"/240], 0x138}, 0x1, 0x0, 0x0, 0xc9}, 0x0) connect(r6, &(0x7f00000017c0)=@l2={0x1f, 0x5, {0x1f, 0x34, 0x7f, 0x19, 0x0, 0xff}, 0x8d2, 0x1}, 0x80) ioctl(r5, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r4, &(0x7f00000000c0)=""/43, 0x2b) getresgid(&(0x7f0000001940)=0x0, &(0x7f0000001980), &(0x7f00000019c0)) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r8, &(0x7f00000017c0), 0x3a8, 0x7a) r9 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r9, &(0x7f0000000580)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}, 0x800}], 0x1, 0x0, 0x0) r11 = socket(0xa, 0x80001, 0x37) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0) dup2(r12, r12) r13 = socket$netlink(0x10, 0x3, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) r15 = dup2(r12, r14) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, {0x8, 0x1, r15}}}}]}, 0x38}}, 0x0) r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00') ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r16}) r17 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r16, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r17, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x2000c00a) sendmsg$TIPC_CMD_SHOW_STATS(r15, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r17, 0x300, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x804) sendmsg$TIPC_CMD_SHOW_PORTS(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r17, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r10, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r17, 0x904, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x514, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x44085) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r8, &(0x7f0000001c40)={&(0x7f0000001b80), 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x1c, r17, 0x20, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x800) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r7) 00:20:07 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:20:07 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty}, &(0x7f0000000200)=0xc) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:20:07 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x0, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd"}, @in6=@dev={0xfe, 0x80, [], 0xa}, {}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:20:07 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty}, &(0x7f0000000200)=0xc) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:20:07 executing program 2: r0 = socket$inet(0x2, 0xa, 0x1) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @broadcast}, {0x1, @broadcast}, 0x40, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'ip6_vti0\x00'}) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) read(r1, &(0x7f0000000480)=""/119, 0x77) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x7a) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r4, &(0x7f00000017c0), 0x3a8, 0x7a) r5 = openat$cgroup_ro(r4, &(0x7f0000000580)='memory.events\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f00000005c0)={'ip6gre0\x00', 0xa}) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x24001}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="70010000", @ANYRES16=r3, @ANYBLOB="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"], 0x170}, 0x1, 0x0, 0x0, 0x4044000}, 0x20004400) r6 = syz_open_dev$binderN(0x0, 0x0, 0x806) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000200)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0, 0xfe2c}, @flat=@handle={0x73682a85, 0x110b}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x264, 0x0, 0x0}) [ 1209.180553] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. 00:20:07 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x0, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd"}, @in6=@dev={0xfe, 0x80, [], 0xa}, {}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:20:07 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) [ 1209.222943] binder: 7989:7990 got transaction with too large buffer [ 1209.232256] binder: 7989:7990 transaction failed 29201/-22, size 104-24 line 3493 [ 1209.246834] binder: 7989:7990 ioctl c0306201 200002c0 returned -14 [ 1209.288513] binder: undelivered TRANSACTION_ERROR: 29201 00:20:07 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000000000000000000000100"/112], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="0400000000000000280000000700"/24], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 00:20:08 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:20:08 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x0, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd"}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) [ 1209.482755] binder: 8015:8016 got transaction with invalid offset (4, min 0 max 112) or object. [ 1209.503060] binder: 8015:8016 transaction failed 29201/-22, size 112-24 line 3379 00:20:08 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) [ 1209.527745] binder: undelivered TRANSACTION_ERROR: 29201 [ 1209.549245] binder: 8015:8018 got transaction with invalid offset (4, min 0 max 112) or object. [ 1209.576018] binder: 8015:8018 transaction failed 29201/-22, size 112-24 line 3379 [ 1209.593838] binder: undelivered TRANSACTION_ERROR: 29201 00:20:08 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x230) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) 00:20:08 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x2, 0x0, 0x21}, @fda={0x66646185, 0x0, 0x1, 0xfffffffffffffffd}}, &(0x7f00000000c0)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0}) 00:20:08 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty}, &(0x7f0000000200)=0xc) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:20:08 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:20:08 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:20:08 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x0, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd"}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 00:20:08 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:20:08 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x1ae, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") getdents64(r0, &(0x7f00000000c0)=""/43, 0x2b) [ 1210.146898] binder: 8039:8048 got transaction with out-of-order buffer fixup [ 1210.163060] binder: 8039:8048 transaction failed 29201/-22, size 104-24 line 3467 [ 1210.181526] binder: undelivered TRANSACTION_ERROR: 29201 00:20:08 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000080)='netpci0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) [ 1210.208247] binder: BINDER_SET_CONTEXT_MGR already set [ 1210.213573] binder: 8039:8056 ioctl 40046207 0 returned -16 [ 1210.234761] binder: 8039:8056 transaction failed 29189/-22, size 104-24 line 3138 00:20:08 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x7a) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xc3, 0x81, 0xda, 0xc3, 0x0, 0x800000000000ff, 0x20000, 0xe, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x1ff, 0x9}, 0x9a09c417b9d64816, 0x5e, 0x6, 0x9, 0x9, 0x3, 0xffff}, 0x0, 0x1, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x5}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 00:20:08 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x25dfdbfb, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) 00:20:08 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x2, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty}, &(0x7f0000000200)=0xc) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) [ 1210.258712] binder: undelivered TRANSACTION_ERROR: 29189 00:20:08 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x0, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd"}, @in6=@dev={0xfe, 0x80, [], 0xa}, {0x0, 0x800000000000000}, {}, {0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0x2, 0xe5183568c7ca8e65}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0xff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000334, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) [ 1210.306520] SELinux: Context system_u:object_r:cpu_device_t:s0 is not valid (left unmapped). [ 1210.362313] ------------[ cut here ]------------